SN
Product
Snapdragon
On CISA KEVExploited in the wild
633
CVEs
8
On KEV
9.8
Max CVSS
15
New 30D
Severity mix
Critical 22High 478Medium 0Low 0
Watch
Add Snapdragon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21459 | 7.5 | Aug 5 | Buffer Over-read in WLAN HOST Affected: AR8035; AR9380; CSR8811; CSRB31024; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2024-21466 | 7.5 | Jul 1 | Integer Underflow (Wrap or Wraparound) in WLAN Host Communication Affected: FastConnect 7800; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5300; IPQ5302; IPQ5312; +34 more |
| CVE-2024-21458 | 7.5 | Jul 1 | Buffer Over-read in WLAN HOST Affected: AR8035; CSR8811; FastConnect 7800; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; +34 more |
| CVE-2024-21457 | 7.5 | Jul 1 | Buffer Over-read in WLAN Host Communication Affected: AR8035; CSR8811; FastConnect 7800; Immersive Home 214 Platform; Immersive Home 216 Platform; Immersive Home 316 Platform; +34 more |
| CVE-2024-23363 | 7.5 | Jun 3 | Buffer Over-read in WLAN Firmware Affected: AR8035; CSR8811; FastConnect 6900; FastConnect 7800; Immersive Home 214 Platform; Immersive Home 216 Platform; +34 more |
| CVE-2023-43555 | 7.5 | Jun 3 | Buffer Over-read in Video Affected: AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; +34 more |
| CVE-2023-43551 | 7.5 | Jun 3 | Improper Authentication in Multi-Mode Call Processor Affected: 315 5G IoT Modem; 9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; APQ8017; APQ8037; +34 more |
| CVE-2023-43537 | 7.5 | Jun 3 | Buffer Over-read in WLAN Host Affected: AR8035; CSR8811; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; Immersive Home 214 Platform; +34 more |
| CVE-2024-21477 | 7.5 | May 6 | Buffer Over-read in WLAN Firmware Affected: AQT1000; AR8035; CSR8811; FastConnect 6200; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2023-43529 | 7.5 | May 6 | Reachable Assertion in Data Modem Affected: 315 5G IoT Modem; AQT1000; AR8035; CSRA6620; CSRA6640; CSRB31024; +34 more |
| CVE-2024-21454 | 7.5 | Apr 1 | Integer Overflow to Buffer Overflow in Automotive Telematics Affected: C-V2X 9150; Snapdragon Auto 5G Modem-RF; Snapdragon Auto 4G Modem |
| CVE-2024-21453 | 7.5 | Apr 1 | Improper Input Validation in Automotive Telematics Affected: C-V2X 9150; QCS410; QCS610; Qualcomm Video Collaboration VC1 Platform; Qualcomm Video Collaboration VC3 Platform; Snapdragon Auto 5G Modem-RF; +7 more |
| CVE-2024-21452 | 7.5 | Apr 1 | Improper Input Validation in Automotive Telematics Affected: C-V2X 9150; QCA6584AU; QCA6698AQ; Snapdragon Auto 5G Modem-RF; Snapdragon Auto 5G Modem-RF Gen 2; Snapdragon Auto 4G Modem |
| CVE-2023-33101 | 7.5 | Apr 1 | Incorrect Type Conversion or Cast in Multi-Mode Call Processor Affected: 315 5G IoT Modem; AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2023-33100 | 7.5 | Apr 1 | Improper input validation in Multi-Mode Call Processor Affected: AR8035; FastConnect 6700; FastConnect 6900; FastConnect 7800; QCA6174A; QCA6584AU; +34 more |
| CVE-2023-33099 | 7.5 | Apr 1 | Improper Input Validation in Multi-Mode Call Processor Affected: 315 5G IoT Modem; AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2023-43539 | 7.5 | Mar 4 | Buffer Over-read in WLAN Firmware Affected: AR8035; CSR8811; FastConnect 6800; FastConnect 6900; FastConnect 7800; Immersive Home 214 Platform; +34 more |
| CVE-2023-33105 | 7.5 | Mar 4 | Configuration Issue in WLAN Host and Firmware Affected: AR8035; AR9380; CSR8811; FastConnect 6700; FastConnect 6900; FastConnect 7800; +34 more |
| CVE-2023-33104 | 7.5 | Mar 4 | Improper input Validation in Multi-Mode Call Processor Affected: 315 5G IoT Modem; AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2023-33103 | 7.5 | Mar 4 | Improper Input Validation in Multi-Mode Call Processor Affected: AR8035; FastConnect 6700; FastConnect 6900; FastConnect 7800; QCA6174A; QCA6584AU; +34 more |
| CVE-2023-33096 | 7.5 | Mar 4 | Reachable Assertion in Multi-Mode Call Processor Affected: 315 5G IoT Modem; AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2023-33095 | 7.5 | Mar 4 | Reachable Assertion in Multi-Mode Call Processor Affected: 315 5G IoT Modem; AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2023-33086 | 7.5 | Mar 4 | Improper Release of Memory Before Removing Last Reference in Data Modem Affected: 315 5G IoT Modem; AQT1000; AR8035; CSRA6620; CSRA6640; CSRB31024; +34 more |
| CVE-2023-33084 | 7.5 | Mar 4 | Improper Release of Memory Before Removing Last Reference in Data Modem Affected: AR8035; FastConnect 6700; FastConnect 6900; FastConnect 7800; QCA6584AU; QCA6698AQ; +34 more |
| CVE-2026-25294 | 7.4 | Sep 17 | Buffer Over-read in WLAN Firmware Affected: Cologne; Congo; CQ7790; CQ7790M; CQ8845S; FastConnect 6200; +34 more |
| CVE-2026-25281 | 7.4 | Sep 17 | Allocation of Resources Without Limits or Throttling in OOBM Affected: Cologne; FastConnect 7800; Snapdragon X2 Elite; WCD9378C; WSA8840; WSA8845; +1 more |
| CVE-2026-24081 | 7.4 | Sep 17 | Buffer Over-read in BT Controller Affected: AR8035; C110100; Cologne; CQ7790; CQ7790M; CQ8725S; +34 more |
| CVE-2026-25288 | 7.4 | Aug 4 | Buffer Over-read in WLAN Firmware Affected: Cologne; CQ7790; FastConnect 6900; FastConnect 7800; Orne; Palawan25; +34 more |
| CVE-2026-25284 | 7.3 | Sep 17 | Buffer Over-read in OOBM Affected: Cologne; FastConnect 7800; Snapdragon X2 Elite; WCD9378C; WSA8840; WSA8845; +1 more |
| CVE-2025-59617 | 7.3 | Jul 6 | Use After Free in Computer Vision Affected: FastConnect 6700; FastConnect 6900; FastConnect 7800; Molokai; Orne; Pandeiro; +34 more |
| CVE-2026-24092 | 7.2 | Jun 1 | Improper Validation of Syntactic Correctness of Input in Display Affected: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX |
| CVE-2026-24091 | 7.2 | Jun 1 | Improper Validation of Syntactic Correctness of Input in Display Affected: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX |
| CVE-2026-24089 | 7.2 | Jun 1 | Improper Validation of Syntactic Correctness of Input in Kernel Affected: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX |
| CVE-2026-24087 | 7.2 | Jun 1 | Improper Validation of Syntactic Correctness of Input in Kernel Affected: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX |
| CVE-2026-24085 | 7.2 | Jun 1 | Stack-based Buffer Overflow in Display Affected: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX |
| CVE-2025-47383 | 7.2 | Mar 2 | Missing Cryptographic Step in Data Modem Affected: 5G Fixed Wireless Access Platform; 9206 LTE Modem; 9207 LTE Modem; APQ8098; AQT1000; AR8035; +34 more |
| CVE-2026-25302 | 7.1 | Oct 6 | Improper Verification of Cryptographic Signature in Boot Affected: 5G Fixed Wireless Access Platform; AR8035; Cologne; CQ7790; CQ8725S; CQ8750M; +34 more |
| CVE-2026-21383 | 7.1 | Jul 6 | Reusing a Nonce, Key Pair in Encryption in HLOS Affected: FastConnect 6900; FastConnect 7800; LeMans_AU_LGIT; LeMansAU; Pandeiro; QAM8255P; +34 more |
| CVE-2026-24090 | 7.1 | Jun 1 | Missing Authentication for Critical Function in HLOS Affected: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX |
| CVE-2025-47400 | 7.1 | Apr 6 | Buffer Over-read in Computer Vision Affected: Pandeiro; Snapdragon 8 Elite Gen 5; SW6100; SW6100P; Themisto; WCD9395; +5 more |
| CVE-2025-47378 | 7.1 | Mar 2 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS Affected: Cologne; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; LeMans_AU_LGIT; +34 more |
| CVE-2025-47342 | 7.1 | Oct 9 | Use After Free in BT Controller Affected: QCC5161; QCC7225; QCC7226; QCC7228; S3 Gen 2 Sound Platform; S3 Sound Platform; +2 more |
| CVE-2025-21482 | 7.1 | Sep 24 | Cryptographic Issues in Core Affected: 315 5G IoT Modem; 9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; APQ8017; APQ8037; +34 more |
| CVE-2024-43065 | 7.1 | Apr 7 | Exposed Dangerous Method or Function in HLOS Affected: AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; +34 more |
| CVE-2024-23362 | 7.1 | Sep 2 | Improper Input Validation in Trusted Execution Environment Affected: 9205 LTE Modem; AQT1000; AR8031; AR8035; CSRA6620; CSRA6640; +34 more |
| CVE-2026-25278 | 7.0 | Sep 17 | Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Software platform based on QNX Affected: LeMans_AU_LGIT; LeMansAU; QAM8255P; QAM8295P; QAM8620P; QAMSRV1H; +23 more |
| CVE-2026-24075 | 7.0 | Sep 17 | Buffer Over-read in Qualcomm IPC Affected: AQT1000; Cologne; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2026-25271 | 7.0 | Jul 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service Affected: Cologne; FastConnect 6900; FastConnect 7800; IQX5121; IQX7181; QCA0000; +15 more |
| CVE-2026-25260 | 7.0 | Jun 1 | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service Affected: Cologne; FastConnect 6900; FastConnect 7800; QCA0000; SC8380XP; WCD9378C; +13 more |
| CVE-2025-47407 | 7.0 | May 4 | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service Affected: CQ7790; CQ8725S; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)