SX
Product
Snapdragon Xr2 5g Platform Firmware
On CISA KEVExploited in the wild
79
CVEs
1
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 2High 57Medium 20Low 0
Watch
Add Snapdragon Xr2 5g Platform Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43047 In wildKEV | 7.8 | Oct 7 | Use After Free in DSP Service Affected: 0 |
| CVE-2026-25277 | 8.8 | Jun 1 | Buffer Copy Without Checking Size of Input in Secure Processor Affected: All versions, or not specified |
| CVE-2026-25276 | 8.8 | Jun 1 | Improper Validation of Array Index in Secure Processor Affected: All versions, or not specified |
| CVE-2024-33035 | 8.4 | Sep 2 | Integer Overflow or Wraparound in Display Affected: 0 |
| CVE-2025-59616 | 7.8 | Jul 6 | Use After Free in Computer Vision Affected: All versions, or not specified |
| CVE-2025-59615 | 7.8 | Jul 6 | Use After Free in Computer Vision Affected: All versions, or not specified |
| CVE-2026-25259 | 7.8 | Jun 1 | Out-of-bounds Write in DSP Service Affected: All versions, or not specified |
| CVE-2025-47389 | 7.8 | Apr 6 | Buffer Copy Without Checking Size of Input in Automotive Platform Affected: All versions, or not specified |
| CVE-2025-59603 | 7.8 | Mar 2 | Out-of-bounds Write in Computer Vision Affected: All versions, or not specified |
| CVE-2025-59600 | 7.8 | Mar 2 | Buffer Over-read in Graphics Affected: All versions, or not specified |
| CVE-2025-47320 | 7.8 | Dec 18 | Out-of-bounds Write in Audio Affected: All versions, or not specified |
| CVE-2025-27037 | 7.8 | Sep 24 | Use After Free in Camera Driver Affected: All versions, or not specified |
| CVE-2025-21474 | 7.8 | Aug 6 | Use After Free in BTHOST Affected: All versions, or not specified |
| CVE-2025-21455 | 7.8 | Aug 6 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux Affected: All versions, or not specified |
| CVE-2024-43067 | 7.8 | Apr 7 | Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Affected: All versions, or not specified |
| CVE-2024-43066 | 7.8 | Apr 7 | Use After Free in HLOS Affected: All versions, or not specified |
| CVE-2024-43052 | 7.8 | Dec 2 | Improper Input Validation in Video Analytics and Processing Affected: 0 |
| CVE-2024-38423 | 7.8 | Nov 4 | Buffer Copy Without Checking Size of Input in Graphics Linux Affected: All versions, or not specified |
| CVE-2024-38422 | 7.8 | Nov 4 | Integer Overflow to Buffer Overflow in Audio Affected: All versions, or not specified |
| CVE-2024-38415 | 7.8 | Nov 4 | Use After Free in Computer Vision Affected: All versions, or not specified |
| CVE-2024-23369 | 7.8 | Oct 7 | Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS Affected: All versions, or not specified |
| CVE-2024-23356 | 7.8 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS Affected: All versions, or not specified |
| CVE-2024-23355 | 7.8 | Aug 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive Affected: All versions, or not specified |
| CVE-2024-21476 | 7.8 | May 6 | Improper Input Validation in Secure Processor Affected: All versions, or not specified |
| CVE-2023-43524 | 7.8 | May 6 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio Affected: All versions, or not specified |
| CVE-2023-43521 | 7.8 | May 6 | Use After Free in HLOS Affected: 0 |
| CVE-2023-33024 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer Affected: All versions, or not specified |
| CVE-2023-22668 | 7.8 | Dec 5 | Use After Free in Audio Affected: All versions, or not specified |
| CVE-2023-22383 | 7.8 | Dec 5 | Use After Free in Camera Affected: All versions, or not specified |
| CVE-2023-21634 | 7.8 | Dec 5 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer Affected: All versions, or not specified |
| CVE-2023-33074 | 7.8 | Nov 7 | Use After Free in Audio Affected: All versions, or not specified |
| CVE-2023-28577 | 7.8 | Aug 8 | Multiple Dmabuf Kernel Address UAF Vulnerability Affected: 0 |
| CVE-2023-21638 | 7.8 | Jul 4 | Incorrect Type Conversion or Cast in Video Affected: 0 |
| CVE-2023-21635 | 7.8 | Jul 4 | Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity Affected: All versions, or not specified |
| CVE-2022-33267 | 7.8 | Jun 6 | Improper restriction of operations within the bounds of memory buffer in Linux Affected: 0 |
| CVE-2022-33227 | 7.8 | Jun 6 | Double free in Linux-Android Affected: 0 |
| CVE-2022-25713 | 7.8 | May 2 | Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive Affected: All versions, or not specified |
| CVE-2022-33298 | 7.8 | Apr 4 | Use after free in Modem Affected: 0 |
| CVE-2024-45549 | 7.7 | Apr 7 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL Affected: All versions, or not specified |
| CVE-2025-21452 | 7.5 | Aug 6 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2024-23353 | 7.5 | Aug 5 | Buffer Over-read in Multi Mode Call Processor Affected: All versions, or not specified |
| CVE-2024-23352 | 7.5 | Aug 5 | Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor Affected: All versions, or not specified |
| CVE-2024-21479 | 7.5 | Aug 5 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2024-21459 | 7.5 | Aug 5 | Buffer Over-read in WLAN HOST Affected: All versions, or not specified |
| CVE-2023-24843 | 7.5 | Oct 3 | Reachable Assertion in Modem Affected: All versions, or not specified |
| CVE-2023-28555 | 7.5 | Aug 8 | Buffer Over-read in Audio Affected: All versions, or not specified |
| CVE-2023-21669 | 7.5 | Jun 6 | Buffer Over-read in WLAN HOST Affected: 0 |
| CVE-2022-40536 | 7.5 | Jun 6 | Improper authentication in Modem Affected: All versions, or not specified |
| CVE-2022-22060 | 7.5 | Jun 6 | Reachable Assertion in Modem Affected: 0 |
| CVE-2022-40508 | 7.5 | May 2 | Reachable assertion in Modem Affected: 0 |