S8
Product
Snapdragon 855 Mobile Platform Firmware
On CISA KEVExploited in the wild
23
CVEs
2
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 17Medium 6Low 0
Watch
Add Snapdragon 855 Mobile Platform Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21479 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Affected: All versions, or not specified |
| CVE-2025-21480 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Windows Affected: All versions, or not specified |
| CVE-2025-21487 | 8.2 | Sep 24 | Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length Affected: All versions, or not specified |
| CVE-2025-21484 | 8.2 | Sep 24 | Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet Affected: All versions, or not specified |
| CVE-2024-53026 | 8.2 | Jun 3 | Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call Affected: All versions, or not specified |
| CVE-2024-53021 | 8.2 | Jun 3 | Information disclosure may occur while processing goodbye RTCP packet from network Affected: All versions, or not specified |
| CVE-2024-53010 | 7.8 | Jun 3 | Memory corruption may occur while attaching VM when the HLOS retains access to VM Affected: All versions, or not specified |
| CVE-2024-38423 | 7.8 | Nov 4 | Memory corruption while processing GPU page table switch Affected: All versions, or not specified |
| CVE-2023-28583 | 7.8 | Jan 2 | Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address Affected: All versions, or not specified |
| CVE-2023-22668 | 7.8 | Dec 5 | Memory Corruption in Audio while invoking IOCTLs calls from the user-space Affected: All versions, or not specified |
| CVE-2023-22383 | 7.8 | Dec 5 | Memory Corruption in camera while installing a fd for a particular DMA buffer Affected: All versions, or not specified |
| CVE-2023-21634 | 7.8 | Dec 5 | Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM Affected: All versions, or not specified |
| CVE-2023-28570 | 7.8 | Nov 7 | Memory corruption while processing audio effects Affected: All versions, or not specified |
| CVE-2025-21452 | 7.5 | Aug 6 | Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network Affected: All versions, or not specified |
| CVE-2024-23352 | 7.5 | Aug 5 | Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA Affected: All versions, or not specified |
| CVE-2023-24843 | 7.5 | Oct 3 | Transient DOS in Modem while triggering a camping on an 5G cell Affected: All versions, or not specified |
| CVE-2023-33110 | 7.0 | Jan 2 | The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race… Affected: All versions, or not specified |
| CVE-2024-33016 | 6.8 | Sep 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage Affected: All versions, or not specified |
| CVE-2024-53015 | 6.6 | Jun 3 | Memory corruption while processing IOCTL command to handle buffers associated with a session Affected: All versions, or not specified |
| CVE-2025-21465 | 6.5 | Aug 6 | Information disclosure while processing the hash segment in an MBN file Affected: All versions, or not specified |
| CVE-2025-21464 | 6.5 | Aug 6 | Information disclosure while reading data from an image using specified offset and size parameters Affected: All versions, or not specified |
| CVE-2024-45551 | 6.2 | Apr 7 | Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling… Affected: All versions, or not specified |
| CVE-2023-28568 | 5.5 | Nov 7 | Information disclosure in WLAN HAL when reception status handler is called Affected: All versions, or not specified |
Showing 23
