Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Snapdragon — Vulnerabilities & Security Advisories 997

All 997 CVE vulnerabilities found in Snapdragon, with AI-generated Chinese analysis, references, and POCs.

This page documents software weaknesses in the Snapdragon product developed by the vendor Qualcomm, categorized under common vulnerability classifications. The collection includes detailed records of security flaws affecting Qualcomm Snapdragon processors and related components, covering vulnerability disclosures from January 2015 through December 2024. This comprehensive dataset allows security professionals and researchers to systematically track vendor advisories, understand the prevalence and evolution of specific weakness classes within mobile system-on-chip architectures, and look up a product's historical vulnerability profile for risk assessment purposes. The entries provide essential context for identifying patterns in firmware, kernel, and driver vulnerabilities that impact device integrity and user privacy. By aggregating these findings, the resource supports the analysis of attack surfaces and aids in the development of mitigation strategies for connected devices utilizing Snapdragon technology. The information is intended to facilitate transparent security research and support the broader community in maintaining the safety and reliability of mobile ecosystems. This summary serves as a gateway to deeper technical details regarding reported issues, their resolution status, and associated impact levels across different product generations.

Vendor: Qualcomm, Inc.

CVE ID Title CVSS Severity Published
CVE-2025-47331 Buffer Over-read in Video CWE-126 6.1 Medium 2026-01-06
CVE-2025-47330 Buffer Over-read in Video CWE-126 5.5 Medium 2026-01-06
CVE-2025-47387 Untrusted Pointer Dereference in Camera CWE-822 7.8 High 2025-12-18
CVE-2025-47382 Incorrect Authorization in Boot CWE-863 7.8 High 2025-12-18
CVE-2025-47372 Buffer Copy Without Checking Size of Input in Boot CWE-120 9.0 Critical 2025-12-18
CVE-2025-47350 Use After Free in DSP Service CWE-416 7.8 High 2025-12-18
CVE-2025-47325 Untrusted Pointer Dereference in TZ Firmware CWE-822 6.5 Medium 2025-12-18
CVE-2025-47323 Integer Overflow or Wraparound in Audio CWE-190 7.8 High 2025-12-18
CVE-2025-47322 Use After Free in Automotive Linux OS CWE-416 7.8 High 2025-12-18
CVE-2025-47321 Buffer Copy Without Checking Size of Input in Core Services CWE-120 7.8 High 2025-12-18
CVE-2025-47320 Out-of-bounds Write in Audio CWE-787 7.8 High 2025-12-18
CVE-2025-47319 Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS CWE-497 6.7 Medium 2025-12-18
CVE-2025-27063 Use After Free in Video CWE-416 7.8 High 2025-12-18
CVE-2025-47370 Reachable Assertion in BT Controller CWE-617 6.5 Medium 2025-11-04
CVE-2025-47368 Buffer Over-read in DSP Service CWE-126 7.8 High 2025-11-04
CVE-2025-47367 Out-of-bounds Write in WinBlast Driver CWE-787 7.8 High 2025-11-04
CVE-2025-47365 Integer Overflow or Wraparound in Automotive Platform CWE-190 7.8 High 2025-11-04
CVE-2025-47362 Buffer Over-read in Automotive Software platform based on QNX CWE-126 6.1 Medium 2025-11-04
CVE-2025-47361 Improper Validation of Array Index in Automotive Software platform based on QNX CWE-129 7.8 High 2025-11-04
CVE-2025-47360 Stack-based Buffer Overflow in Automotive Software platform based on QNX CWE-121 7.8 High 2025-11-04
CVE-2025-47357 Missing Authentication for Critical Function in SMSS CWE-306 8.0 High 2025-11-04
CVE-2025-47353 Exposed Dangerous Method or Function in Automotive Software platform based on QNX CWE-749 7.8 High 2025-11-04
CVE-2025-47352 Improper Validation of Array Index in Audio CWE-129 7.8 High 2025-11-04
CVE-2025-27074 Incorrect Calculation of Buffer Size in SCE-Mink CWE-131 8.8 High 2025-11-04
CVE-2025-27070 Out-of-bounds Write in Windows Compute CWE-787 7.8 High 2025-11-04
CVE-2025-27064 Buffer Over-read in Core Services CWE-126 6.1 Medium 2025-11-04
CVE-2025-47355 Out-of-bounds Write in DSP Service CWE-787 7.8 High 2025-10-09
CVE-2025-47354 Use After Free in DSP Service CWE-416 7.8 High 2025-10-09
CVE-2025-47351 Integer Overflow or Wraparound in DSP Service CWE-190 7.8 High 2025-10-09
CVE-2025-47349 Use of Out-of-range Pointer Offset in DSP Service CWE-823 7.8 High 2025-10-09

All 997 known CVE vulnerabilities affecting Snapdragon with full Chinese analysis, references, and POCs where available.