S8
Product
Snapdragon 888 5g Mobile Platform Firmware
On CISA KEVExploited in the wild
34
CVEs
3
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 25Medium 7Low 0
Watch
Add Snapdragon 888 5g Mobile Platform Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21479 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Affected: All versions, or not specified |
| CVE-2025-21480 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Windows Affected: All versions, or not specified |
| CVE-2024-43047 In wildKEV | 7.8 | Oct 7 | Use After Free in DSP Service Affected: 0 |
| CVE-2025-47392 | 8.8 | Apr 6 | Integer Overflow or Wraparound in GPS Affected: All versions, or not specified |
| CVE-2024-53026 | 8.2 | Jun 3 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2026-24079 | 8.1 | Aug 4 | Missing Authentication for Critical Function in Data Modem Affected: All versions, or not specified |
| CVE-2026-25291 | 7.8 | Oct 6 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2025-59604 | 7.8 | Jun 1 | NULL Pointer Dereference in SPS Applications Affected: All versions, or not specified |
| CVE-2025-27062 | 7.8 | Aug 6 | Improper Access Control in Automotive Multimedia Affected: All versions, or not specified |
| CVE-2025-21458 | 7.8 | Aug 6 | Use After Free in NPU Affected: All versions, or not specified |
| CVE-2025-21456 | 7.8 | Aug 6 | Use After Free in NPU Affected: All versions, or not specified |
| CVE-2024-38423 | 7.8 | Nov 4 | Memory corruption while processing GPU page table switch Affected: All versions, or not specified |
| CVE-2024-38415 | 7.8 | Nov 4 | Memory corruption while handling session errors from firmware Affected: All versions, or not specified |
| CVE-2024-23369 | 7.8 | Oct 7 | Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers Affected: All versions, or not specified |
| CVE-2024-23356 | 7.8 | Aug 5 | Memory corruption during session sign renewal request calls in HLOS Affected: All versions, or not specified |
| CVE-2024-23355 | 7.8 | Aug 5 | Memory corruption when keymaster operation imports a shared key Affected: All versions, or not specified |
| CVE-2023-21671 | 7.8 | Nov 7 | Memory Corruption in Core during syscall for Sectools Fuse comparison feature Affected: All versions, or not specified |
| CVE-2025-21477 | 7.5 | Aug 6 | Improper Input Validation in Modem Affected: All versions, or not specified |
| CVE-2025-21452 | 7.5 | Aug 6 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2024-33012 | 7.5 | Aug 5 | Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon Affected: All versions, or not specified |
| CVE-2024-33011 | 7.5 | Aug 5 | Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero Affected: All versions, or not specified |
| CVE-2024-23352 | 7.5 | Aug 5 | Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA Affected: All versions, or not specified |
| CVE-2023-24843 | 7.5 | Oct 3 | Transient DOS in Modem while triggering a camping on an 5G cell Affected: All versions, or not specified |
| CVE-2026-24085 | 7.2 | Jun 1 | Stack-based Buffer Overflow in Display Affected: All versions, or not specified |
| CVE-2023-33110 | 7.0 | Jan 2 | The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race… Affected: All versions, or not specified |
Showing 25