S4
Product
Snapdragon 4 Gen 1 Mobile Platform Firmware
On CISA KEVExploited in the wild
68
CVEs
3
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 3High 52Medium 13Low 0
Watch
Add Snapdragon 4 Gen 1 Mobile Platform Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21479 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Affected: All versions, or not specified |
| CVE-2025-21480 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Windows Affected: All versions, or not specified |
| CVE-2026-21385 In wildKEV | 7.8 | Mar 2 | Integer Overflow or Wraparound in Graphics Affected: All versions, or not specified |
| CVE-2025-27034 | 9.8 | Sep 24 | Improper Validation of Array Index in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2024-21463 | 9.8 | Apr 1 | Buffer Copy Without Checking Size of Input in Audio Affected: 0 |
| CVE-2023-24855 | 9.8 | Oct 3 | Use of Out-of-range Pointer Offset in Modem Affected: All versions, or not specified |
| CVE-2024-33035 | 8.4 | Sep 2 | Integer Overflow or Wraparound in Display Affected: 0 |
| CVE-2024-23384 | 8.4 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2025-21488 | 8.2 | Sep 24 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2025-21484 | 8.2 | Sep 24 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-53019 | 8.2 | Jun 3 | Buffer Over-read in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2024-23359 | 8.2 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: All versions, or not specified |
| CVE-2026-57554 | 7.8 | Oct 6 | Use After Free in DSP Service Affected: All versions, or not specified |
| CVE-2026-25291 | 7.8 | Oct 6 | Use After Free in Graphics Affected: All versions, or not specified |
| CVE-2025-47385 | 7.8 | Mar 2 | Improper Access Control for Register Interface in SCE-Mink Affected: All versions, or not specified |
| CVE-2025-47379 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47382 | 7.8 | Dec 18 | Incorrect Authorization in Boot Affected: All versions, or not specified |
| CVE-2025-21481 | 7.8 | Sep 24 | Buffer Copy Without Checking Size of Input in HLOS Affected: All versions, or not specified |
| CVE-2025-27062 | 7.8 | Aug 6 | Improper Access Control in Automotive Multimedia Affected: All versions, or not specified |
| CVE-2024-43066 | 7.8 | Apr 7 | Use After Free in HLOS Affected: All versions, or not specified |
| CVE-2024-43048 | 7.8 | Dec 2 | Stack-based Buffer Overflow in Performance Affected: 0 |
| CVE-2024-38424 | 7.8 | Nov 4 | Use After Free in GPS Affected: All versions, or not specified |
| CVE-2024-38421 | 7.8 | Nov 4 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-38419 | 7.8 | Nov 4 | Use After Free in Automotive GPU Affected: All versions, or not specified |
| CVE-2024-33034 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23383 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23382 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23381 | 7.8 | Aug 5 | Use After Free in Graphics Linux Affected: 0 |
| CVE-2024-23355 | 7.8 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive Affected: All versions, or not specified |
| CVE-2024-23380 | 7.8 | Jul 1 | Use After Free in Graphics Affected: 0 |
| CVE-2024-23372 | 7.8 | Jul 1 | Integer Overflow or Wraparound in Graphics Affected: 0 |
| CVE-2023-43514 | 7.8 | Jan 2 | Use After Free in DSP Services Affected: All versions, or not specified |
| CVE-2023-33092 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input in Bluetooth HOST Affected: All versions, or not specified |
| CVE-2022-33230 | 7.8 | Jun 6 | Buffer copy without checking the size of input in FM Host Affected: All versions, or not specified |
| CVE-2022-33298 | 7.8 | Apr 4 | Use after free in Modem Affected: 0 |
| CVE-2026-25292 | 7.6 | Aug 4 | Improper Validation of Syntactic Correctness of Input in Automotive Linux OS Affected: All versions, or not specified |
| CVE-2026-25275 | 7.5 | Sep 17 | Buffer Over-read in WLAN Firmware Affected: All versions, or not specified |
| CVE-2026-24084 | 7.5 | Aug 4 | Insecure Security Identifier Mechanism in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2025-27066 | 7.5 | Aug 6 | Reachable Assertion in WLAN Firmware Affected: All versions, or not specified |
| CVE-2025-21477 | 7.5 | Aug 6 | Improper Input Validation in Modem Affected: All versions, or not specified |
| CVE-2025-21452 | 7.5 | Aug 6 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2025-21429 | 7.5 | Apr 7 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-23352 | 7.5 | Aug 5 | Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor Affected: 0 |
| CVE-2023-43555 | 7.5 | Jun 3 | Buffer Over-read in Video Affected: All versions, or not specified |
| CVE-2023-33099 | 7.5 | Apr 1 | Improper Input Validation in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33104 | 7.5 | Mar 4 | Improper input Validation in Multi-Mode Call Processor Affected: 0 |
| CVE-2023-33096 | 7.5 | Mar 4 | Reachable Assertion in Multi-Mode Call Processor Affected: 0 |
| CVE-2023-33095 | 7.5 | Mar 4 | Reachable Assertion in Multi-Mode Call Processor Affected: 0 |
| CVE-2023-33057 | 7.5 | Feb 6 | Improper Input Validation in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2023-33049 | 7.5 | Feb 6 | Improper Release of Memory Before Removing Last Reference in Multi-Mode Call Processor Affected: All versions, or not specified |