SA
Product
Snapdragon Auto 5g Modem-rf Gen 2 Firmware
On CISA KEVExploited in the wild
86
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 55Medium 25Low 0
Watch
Add Snapdragon Auto 5g Modem-rf Gen 2 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43047 In wildKEV | 7.8 | Oct 7 | Use After Free in DSP Service Affected: 0 |
| CVE-2023-28582 | 9.8 | Mar 4 | Buffer Copy Without Checking Size of Input in Data Modem Affected: 0 |
| CVE-2026-25289 | 9.6 | Aug 4 | Stack-based Buffer Overflow in WLAN Firmware Affected: All versions, or not specified |
| CVE-2024-49846 | 9.1 | May 6 | Buffer Over-read in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2024-38408 | 9.1 | Nov 4 | Cryptographic Issues in BT Controller Affected: All versions, or not specified |
| CVE-2024-21456 | 9.1 | Jul 1 | Buffer Over-read in WLAN HOST Affected: 0 |
| CVE-2023-33058 | 9.1 | Feb 6 | Buffer Copy Without Checking Size of Input in Modem Affected: All versions, or not specified |
| CVE-2025-47392 | 8.8 | Apr 6 | Integer Overflow or Wraparound in GPS Affected: All versions, or not specified |
| CVE-2024-33073 | 8.2 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2026-24079 | 8.1 | Aug 4 | Missing Authentication for Critical Function in Data Modem Affected: All versions, or not specified |
| CVE-2025-59604 | 7.8 | Jun 1 | NULL Pointer Dereference in SPS Applications Affected: All versions, or not specified |
| CVE-2025-47377 | 7.8 | Mar 2 | Use After Free in Automotive Audio Affected: All versions, or not specified |
| CVE-2025-47346 | 7.8 | Jan 6 | Out-of-bounds Write in HLOS Affected: All versions, or not specified |
| CVE-2025-27062 | 7.8 | Aug 6 | Improper Access Control in Automotive Multimedia Affected: All versions, or not specified |
| CVE-2025-21456 | 7.8 | Aug 6 | Use After Free in NPU Affected: All versions, or not specified |
| CVE-2025-27052 | 7.8 | Jul 8 | Buffer Copy Without Checking Size of Input in Core Services Affected: All versions, or not specified |
| CVE-2025-27043 | 7.8 | Jul 8 | Buffer Copy Without Checking Size of Input in Video Affected: All versions, or not specified |
| CVE-2025-21422 | 7.8 | Jul 8 | Cryptographic Issues in Automotive Affected: All versions, or not specified |
| CVE-2024-53009 | 7.8 | Jul 8 | Improper Validation of Array Index in Automotive Autonomy Affected: All versions, or not specified |
| CVE-2024-49841 | 7.8 | May 6 | Detection of Error Condition Without Action in Hypervisor Affected: All versions, or not specified |
| CVE-2024-49830 | 7.8 | May 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio Affected: All versions, or not specified |
| CVE-2024-45581 | 7.8 | May 6 | Out-of-bounds Write in Audio Affected: All versions, or not specified |
| CVE-2024-45564 | 7.8 | May 6 | Use After Free in HLOS Affected: All versions, or not specified |
| CVE-2024-45562 | 7.8 | May 6 | Use After Free in HLOS Affected: All versions, or not specified |
| CVE-2024-45557 | 7.8 | Apr 7 | Use of Out-of-range Pointer Offset in Trust Management Engine Affected: All versions, or not specified |
| CVE-2024-38424 | 7.8 | Nov 4 | Use After Free in GPS Affected: All versions, or not specified |
| CVE-2024-38419 | 7.8 | Nov 4 | Use After Free in Automotive GPU Affected: All versions, or not specified |
| CVE-2024-23369 | 7.8 | Oct 7 | Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS Affected: All versions, or not specified |
| CVE-2024-21455 | 7.8 | Oct 7 | Untrusted Pointer Dereference in DSP Service Affected: 0 |
| CVE-2024-38401 | 7.8 | Sep 2 | Use After Free in Qualcomm IPC Affected: 0 |
| CVE-2024-23356 | 7.8 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS Affected: All versions, or not specified |
| CVE-2024-23355 | 7.8 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive Affected: All versions, or not specified |
| CVE-2023-43544 | 7.8 | Jun 3 | Use After Free in Audio Affected: All versions, or not specified |
| CVE-2023-43525 | 7.8 | May 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio Affected: All versions, or not specified |
| CVE-2023-43524 | 7.8 | May 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio Affected: All versions, or not specified |
| CVE-2023-43521 | 7.8 | May 6 | Use After Free in HLOS Affected: 0 |
| CVE-2024-21472 | 7.8 | Apr 1 | Use After Free in Kernel Affected: 0 |
| CVE-2023-22668 | 7.8 | Dec 5 | Memory Corruption in Audio while invoking IOCTLs calls from the user-space Affected: All versions, or not specified |
| CVE-2024-45549 | 7.7 | Apr 7 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL Affected: All versions, or not specified |
| CVE-2026-25292 | 7.6 | Aug 4 | Improper Validation of Syntactic Correctness of Input in Automotive Linux OS Affected: All versions, or not specified |
| CVE-2025-27057 | 7.5 | Jul 8 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-49847 | 7.5 | May 6 | Buffer Over-read in Multi-Mode Call Processor Affected: All versions, or not specified |
| CVE-2024-33058 | 7.5 | Apr 7 | Insufficient Granularity of Access Control in Core Affected: All versions, or not specified |
| CVE-2024-38404 | 7.5 | Feb 3 | Buffer Over-read in Multi Mode Call Processor Affected: All versions, or not specified |
| CVE-2024-38397 | 7.5 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2024-33049 | 7.5 | Oct 7 | Buffer Over-read in WLAN Host Communication Affected: All versions, or not specified |
| CVE-2024-23358 | 7.5 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 0 |
| CVE-2024-33013 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-33012 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |
| CVE-2024-33011 | 7.5 | Aug 5 | Buffer Over-read in WLAN Host Affected: All versions, or not specified |