Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Snapdragon — Vulnerabilities & Security Advisories 997

All 997 CVE vulnerabilities found in Snapdragon, with AI-generated Chinese analysis, references, and POCs.

This page documents software weaknesses in the Snapdragon product developed by the vendor Qualcomm, categorized under common vulnerability classifications. The collection includes detailed records of security flaws affecting Qualcomm Snapdragon processors and related components, covering vulnerability disclosures from January 2015 through December 2024. This comprehensive dataset allows security professionals and researchers to systematically track vendor advisories, understand the prevalence and evolution of specific weakness classes within mobile system-on-chip architectures, and look up a product's historical vulnerability profile for risk assessment purposes. The entries provide essential context for identifying patterns in firmware, kernel, and driver vulnerabilities that impact device integrity and user privacy. By aggregating these findings, the resource supports the analysis of attack surfaces and aids in the development of mitigation strategies for connected devices utilizing Snapdragon technology. The information is intended to facilitate transparent security research and support the broader community in maintaining the safety and reliability of mobile ecosystems. This summary serves as a gateway to deeper technical details regarding reported issues, their resolution status, and associated impact levels across different product generations.

Vendor: Qualcomm, Inc.

CVE ID Title CVSS Severity Published
CVE-2025-21455 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux CWE-367 7.8 High 2025-08-06
CVE-2025-21452 Reachable Assertion in Modem CWE-617 7.5 High 2025-08-06
CVE-2025-27061 Out-of-bounds Write in Video CWE-787 7.8 High 2025-07-08
CVE-2025-27058 Buffer Copy Without Checking Size of Input in Computer Vision CWE-120 7.8 High 2025-07-08
CVE-2025-27057 Buffer Over-read in WLAN Host CWE-126 7.5 High 2025-07-08
CVE-2025-27056 Use After Free in DSP Service CWE-416 7.8 High 2025-07-08
CVE-2025-27055 Buffer Over-read in Camera CWE-126 7.8 High 2025-07-08
CVE-2025-27052 Buffer Copy Without Checking Size of Input in Core Services CWE-120 7.8 High 2025-07-08
CVE-2025-27051 Double Free in Windows WLAN Host CWE-415 7.8 High 2025-07-08
CVE-2025-27050 Use After Free in Camera CWE-416 7.8 High 2025-07-08
CVE-2025-27047 Use After Free in Display CWE-416 7.8 High 2025-07-08
CVE-2025-27046 Double Free in Display CWE-415 7.8 High 2025-07-08
CVE-2025-27044 Out-of-bounds Write in Video CWE-787 7.8 High 2025-07-08
CVE-2025-27043 Buffer Copy Without Checking Size of Input in Video CWE-120 7.8 High 2025-07-08
CVE-2025-27042 Incorrect Calculation of Buffer Size in Video CWE-131 7.8 High 2025-07-08
CVE-2025-21466 Use After Free in Display CWE-416 7.8 High 2025-07-08
CVE-2025-21454 Buffer Over-read in WLAN Embedded SW CWE-126 7.5 High 2025-07-08
CVE-2025-21450 Improper Authentication in GPS_GNSS CWE-287 9.1 Critical 2025-07-08
CVE-2025-21449 Buffer Over-read in WLAN Embedded SW CWE-126 7.5 High 2025-07-08
CVE-2025-21446 Buffer Over-read in WLAN Firmware CWE-126 7.5 High 2025-07-08
CVE-2025-21445 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Data HLOS - QX CWE-120 7.8 High 2025-07-08
CVE-2025-21444 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Data HLOS - QX CWE-120 7.8 High 2025-07-08
CVE-2025-21433 NULL Pointer Dereference in SPS-HLOS CWE-476 6.2 Medium 2025-07-08
CVE-2025-21432 Double Free in SPS-HLOS CWE-415 7.8 High 2025-07-08
CVE-2025-21427 Buffer Over-read in Data HLOS - LNX CWE-126 8.2 High 2025-07-08
CVE-2025-21426 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux CWE-120 6.6 Medium 2025-07-08
CVE-2025-21422 Cryptographic Issues in Automotive CWE-310 7.1 High 2025-07-08
CVE-2024-53009 Improper Validation of Array Index in Automotive Autonomy CWE-129 5.3 Medium 2025-07-08
CVE-2025-21479 Incorrect Authorization in Graphics CWE-863 8.6 High 2025-06-03
CVE-2025-27038 Use After Free in Graphics CWE-416 7.5 High 2025-06-03

All 997 known CVE vulnerabilities affecting Snapdragon with full Chinese analysis, references, and POCs where available.