Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Snapdragon — Vulnerabilities & Security Advisories 997

All 997 CVE vulnerabilities found in Snapdragon, with AI-generated Chinese analysis, references, and POCs.

This page documents software weaknesses in the Snapdragon product developed by the vendor Qualcomm, categorized under common vulnerability classifications. The collection includes detailed records of security flaws affecting Qualcomm Snapdragon processors and related components, covering vulnerability disclosures from January 2015 through December 2024. This comprehensive dataset allows security professionals and researchers to systematically track vendor advisories, understand the prevalence and evolution of specific weakness classes within mobile system-on-chip architectures, and look up a product's historical vulnerability profile for risk assessment purposes. The entries provide essential context for identifying patterns in firmware, kernel, and driver vulnerabilities that impact device integrity and user privacy. By aggregating these findings, the resource supports the analysis of attack surfaces and aids in the development of mitigation strategies for connected devices utilizing Snapdragon technology. The information is intended to facilitate transparent security research and support the broader community in maintaining the safety and reliability of mobile ecosystems. This summary serves as a gateway to deeper technical details regarding reported issues, their resolution status, and associated impact levels across different product generations.

Vendor: Qualcomm, Inc.

CVE ID Title CVSS Severity Published
CVE-2026-25259 Out-of-bounds Write in DSP Service CWE-787 7.8 High 2026-06-01
CVE-2026-25258 Out-of-bounds Read in DSP Service CWE-125 7.8 High 2026-06-01
CVE-2026-24092 Improper Validation of Syntactic Correctness of Input in Display CWE-1286 7.2 High 2026-06-01
CVE-2026-24091 Improper Validation of Syntactic Correctness of Input in Display CWE-1286 7.2 High 2026-06-01
CVE-2026-24090 Missing Authentication for Critical Function in HLOS CWE-306 7.1 High 2026-06-01
CVE-2026-24089 Improper Validation of Syntactic Correctness of Input in Kernel CWE-1286 7.2 High 2026-06-01
CVE-2026-24088 Missing Authentication for Critical Function in Boot CWE-306 8.2 High 2026-06-01
CVE-2026-24087 Improper Validation of Syntactic Correctness of Input in Kernel CWE-1286 7.2 High 2026-06-01
CVE-2026-24085 Stack-based Buffer Overflow in Display CWE-121 7.2 High 2026-06-01
CVE-2025-59614 Out-of-bounds Write in Windows Compute CWE-787 6.7 Medium 2026-06-01
CVE-2025-59613 Stack-based Buffer Overflow in Windows Compute CWE-121 6.7 Medium 2026-06-01
CVE-2025-59612 Stack-based Buffer Overflow in Windows Compute CWE-121 6.7 Medium 2026-06-01
CVE-2025-59611 Out-of-bounds Write in Core Services CWE-787 6.7 Medium 2026-06-01
CVE-2025-59610 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver CWE-367 6.4 Medium 2026-06-01
CVE-2025-59609 Buffer Over-read in WLAN Host Communication CWE-126 5.5 Medium 2026-06-01
CVE-2025-59606 NULL Pointer Dereference in HLOS CWE-476 7.8 High 2026-06-01
CVE-2025-59605 Out-of-bounds Write in HLOS CWE-787 7.8 High 2026-06-01
CVE-2025-59604 NULL Pointer Dereference in SPS Applications CWE-476 7.8 High 2026-06-01
CVE-2025-59601 Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware CWE-1230 6.5 Medium 2026-06-01
CVE-2026-25293 Incorrect authorization in PLC FW CWE-863 9.6 Critical 2026-05-04
CVE-2026-25266 Exposed dangerous function in windows host CWE-749 5.5 Medium 2026-05-04
CVE-2026-24082 Use After Free in Automotive GPU CWE-416 7.8 High 2026-05-04
CVE-2025-47408 Untrusted Pointer Dereference in Power Optimization Firmware CWE-822 7.8 High 2026-05-04
CVE-2025-47407 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service CWE-367 7.8 High 2026-05-04
CVE-2025-47406 Buffer Over-read in DSP Service CWE-126 6.1 Medium 2026-05-04
CVE-2025-47405 Untrusted Pointer Dereference in Camera CWE-822 7.8 High 2026-05-04
CVE-2025-47404 Buffer Copy Without Checking Size of Input in Automotive Audio CWE-120 6.5 Medium 2026-05-04
CVE-2025-47403 Buffer Over-read in WLAN Firmware CWE-126 6.5 Medium 2026-05-04
CVE-2025-47401 Buffer Over-read in WLAN HAL CWE-126 6.5 Medium 2026-05-04
CVE-2026-21382 Buffer Copy Without Checking Size of Input in Power Management IC CWE-120 7.8 High 2026-04-06

All 997 known CVE vulnerabilities affecting Snapdragon with full Chinese analysis, references, and POCs where available.