Smart Audio 400 Platform Firmware vulnerabilities | LiveThreat CVE Feed

Product

Smart Audio 400 Platform Firmware

by Qualcomm · last CVE Oct 6, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

7.8

Max CVSS

New 30D

Vulnerabilities15 In the news4 Timeline

Severity mix

Critical 0High 13Medium 2Low 0

Severity

All severities15 Critical0 High13 Medium2 Low0

Exploitation

On CISA KEV2 Exploited in the wild2

Watch

Add Smart Audio 400 Platform Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-21385 In wildKEV	7.8	1%	Mar 2	Integer Overflow or Wraparound in Graphics Affected: All versions, or not specified
CVE-2025-27038 In wildKEV	7.5	1%	Jun 3	Use After Free in Graphics Affected: All versions, or not specified
CVE-2026-57554	7.8	0%	Oct 6	Use After Free in DSP Service Affected: All versions, or not specified
CVE-2025-47379	7.8	0%	Mar 2	Use After Free in Automotive Audio Affected: All versions, or not specified
CVE-2025-21481	7.8	0%	Sep 24	Buffer Copy Without Checking Size of Input in HLOS Affected: All versions, or not specified
CVE-2025-27062	7.8	0%	Aug 6	Improper Access Control in Automotive Multimedia Affected: All versions, or not specified
CVE-2024-38419	7.8	0%	Nov 4	Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node Affected: All versions, or not specified
CVE-2024-33027	7.8	0%	Aug 5	Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table Affected: All versions, or not specified
CVE-2026-25292	7.6	0%	Aug 4	Improper Validation of Syntactic Correctness of Input in Automotive Linux OS Affected: All versions, or not specified
CVE-2026-25275	7.5	0%	Sep 17	Buffer Over-read in WLAN Firmware Affected: All versions, or not specified
CVE-2025-21449	7.5	0%	Jul 8	Buffer Over-read in WLAN Embedded SW Affected: All versions, or not specified
CVE-2025-21429	7.5	0%	Apr 7	Buffer Over-read in WLAN Host Affected: All versions, or not specified
CVE-2026-24090	7.1	0%	Jun 1	Missing Authentication for Critical Function in HLOS Affected: All versions, or not specified