S4
Product
Snapdragon 4 Gen 1 Mobile Platform Firmware
On CISA KEVExploited in the wild
57
CVEs
3
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 2High 42Medium 13Low 0
Watch
Add Snapdragon 4 Gen 1 Mobile Platform Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21479 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Affected: All versions, or not specified |
| CVE-2025-21480 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Windows Affected: All versions, or not specified |
| CVE-2026-21385 In wildKEV | 7.8 | Mar 2 | Integer Overflow or Wraparound in Graphics Affected: All versions, or not specified |
| CVE-2025-27034 | 9.8 | Sep 24 | Improper Validation of Array Index in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-24855 | 9.8 | Oct 3 | Memory corruption in Modem while processing security related configuration before AS Security Exchange Affected: All versions, or not specified |
| CVE-2024-33035 | 8.4 | Sep 2 | Integer Overflow or Wraparound in Display Affected: 0 |
| CVE-2024-23384 | 8.4 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2025-21488 | 8.2 | Sep 24 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2025-21484 | 8.2 | Sep 24 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-53019 | 8.2 | Jun 3 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-23359 | 8.2 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: All versions, or not specified |
| CVE-2026-57554 | 7.8 | Oct 6 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2026-25291 | 7.8 | Oct 6 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2025-47385 | 7.8 | Mar 2 | Improper Access Control for Register Interface in SCE-Mink Affected: All versions, or not specified |
| CVE-2025-47379 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47382 | 7.8 | Dec 18 | Incorrect Authorization in Boot Affected: All versions, or not specified |
| CVE-2025-21481 | 7.8 | Sep 24 | Buffer Copy Without Checking Size of Input in HLOS Affected: All versions, or not specified |
| CVE-2025-27062 | 7.8 | Aug 6 | Improper Access Control in Automotive Multimedia Affected: All versions, or not specified |
| CVE-2024-43066 | 7.8 | Apr 7 | Use After Free in HLOS Affected: All versions, or not specified |
| CVE-2024-43048 | 7.8 | Dec 2 | Stack-based Buffer Overflow in Performance Affected: 0 |
| CVE-2024-38424 | 7.8 | Nov 4 | Use After Free in GPS Affected: All versions, or not specified |
| CVE-2024-38421 | 7.8 | Nov 4 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-38419 | 7.8 | Nov 4 | Use After Free in Automotive GPU Affected: All versions, or not specified |
| CVE-2024-33034 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23383 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23382 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23381 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23355 | 7.8 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive Affected: All versions, or not specified |
| CVE-2024-23380 | 7.8 | Jul 1 | Use After Free in Graphics Affected: 0 |
| CVE-2024-23372 | 7.8 | Jul 1 | Integer Overflow or Wraparound in Graphics Affected: 0 |
| CVE-2023-43514 | 7.8 | Jan 2 | Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP Affected: All versions, or not specified |
| CVE-2023-33092 | 7.8 | Dec 5 | Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size Affected: All versions, or not specified |
| CVE-2026-25292 | 7.6 | Aug 4 | Improper Validation of Syntactic Correctness of Input in Automotive Linux OS Affected: All versions, or not specified |
| CVE-2026-25275 | 7.5 | Sep 17 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2026-24084 | 7.5 | Aug 4 | Insecure Security Identifier Mechanism in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2025-27066 | 7.5 | Aug 6 | Reachable Assertion in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-21477 | 7.5 | Aug 6 | Improper Input Validation in Modem Affected: All versions, or not specified |
| CVE-2025-21452 | 7.5 | Aug 6 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2025-21429 | 7.5 | Apr 7 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-23352 | 7.5 | Aug 5 | Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor Affected: 0 |
| CVE-2023-43555 | 7.5 | Jun 3 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2023-33057 | 7.5 | Feb 6 | Transient DOS in Multi-Mode Call Processor while processing UE policy container Affected: All versions, or not specified |
| CVE-2023-33049 | 7.5 | Feb 6 | Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage Affected: All versions, or not specified |
| CVE-2026-24090 | 7.1 | Jun 1 | Missing Authentication for Critical Function in HLOS Affected: All versions, or not specified |
| CVE-2026-25270 | 6.7 | Oct 6 | Out-of-bounds Write in Camera Driver Affected: All versions, or not specified |
| CVE-2025-47334 | 6.7 | Jan 6 | Buffer Copy Without Checking Size of Input in Camera Driver Affected: All versions, or not specified |
| CVE-2024-53015 | 6.6 | Jun 3 | Use After Free in Computer Vision Affected: All versions, or not specified |
| CVE-2024-45543 | 6.6 | Apr 7 | Out-of-bounds Write in Audio Affected: All versions, or not specified |
| CVE-2024-45540 | 6.6 | Apr 7 | Use After Free in HLOS Affected: All versions, or not specified |
| CVE-2026-24078 | 6.5 | Aug 4 | Exposure of Private Personal Information to an Unauthorized Actor in Data Modem Affected: All versions, or not specified |