Snapdragon X70 Modem-rf System Firmware vulnerabilities

Product

Snapdragon X70 Modem-rf System Firmware

by Qualcomm · last CVE Apr 6, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities23 In the news0 Timeline

Severity mix

Critical 4High 15Medium 4Low 0

Severity

All severities23 Critical4 High15 Medium4 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Snapdragon X70 Modem-rf System Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-47392	8.8	0%	Apr 6	Integer Overflow or Wraparound in GPS Affected: All versions, or not specified
CVE-2023-43556	8.8	0%	Jun 3	Buffer Copy Without Checking Size of Input in Hypervisor Affected: All versions, or not specified
CVE-2023-28574	7.8	0%	Nov 7	Improper Input Validation in Core Affected: All versions, or not specified
CVE-2023-24844	7.8	0%	Oct 3	Improper Access Control in Core Affected: All versions, or not specified
CVE-2024-45549	7.7	0%	Apr 7	Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL Affected: All versions, or not specified
CVE-2024-23353	7.5	0%	Aug 5	Buffer Over-read in Multi Mode Call Processor Affected: All versions, or not specified
CVE-2024-23352	7.5	0%	Aug 5	Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor Affected: All versions, or not specified
CVE-2023-33043	7.5	1%	Dec 5	Reachable Assertion in Modem Affected: All versions, or not specified
CVE-2023-33042	7.5	1%	Dec 5	Improper Input Validation in Modem Affected: All versions, or not specified
CVE-2022-40538	7.5	0%	Jun 6	Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network Affected: All versions, or not specified
CVE-2022-33251	7.5	0%	Jun 6	Transient DOS due to reachable assertion in Modem because of invalid network configuration Affected: All versions, or not specified
CVE-2022-40508	7.5	0%	May 2	Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported Affected: All versions, or not specified
CVE-2022-34144	7.5	0%	May 2	Transient DOS due to reachable assertion in Modem during OSI decode scheduling Affected: All versions, or not specified
CVE-2025-21482	7.1	0%	Sep 24	Cryptographic Issues in Core Affected: All versions, or not specified
CVE-2023-33046	7.0	0%	Feb 6	Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment Affected: All versions, or not specified