SN
Product
Snapdragon
On CISA KEVExploited in the wild
685
CVEs
8
On KEV
9.8
Max CVSS
15
New 30D
Severity mix
Critical 30High 470Medium 0Low 0
Watch
Add Snapdragon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33072 | 7.8 | Feb 6 | Buffer copy without checking size of Input in Core Affected: 315 5G IoT Modem; 9205 LTE Modem; AQT1000; AR8031; AR8035; CSRA6620; +34 more |
| CVE-2023-33069 | 7.8 | Feb 6 | Buffer Copy Without Checking Size of Input in Audio Affected: 9206 LTE Modem; AQT1000; AR8035; C-V2X 9150; FastConnect 6200; FastConnect 6700; +34 more |
| CVE-2023-33068 | 7.8 | Feb 6 | Buffer Copy Without Checking Size of Input in Audio Affected: AQT1000; AR8035; C-V2X 9150; FastConnect 6200; FastConnect 6700; FastConnect 6800; +34 more |
| CVE-2023-33067 | 7.8 | Feb 6 | Use of Out-of-range Pointer Offset in Audio Affected: 9206 LTE Modem; AQT1000; AR8035; C-V2X 9150; FastConnect 6200; FastConnect 6700; +34 more |
| CVE-2023-43514 | 7.8 | Jan 2 | Use After Free in DSP Services Affected: AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; +34 more |
| CVE-2023-33120 | 7.8 | Jan 2 | Use After Free in Audio Affected: 315 5G IoT Modem; 9206 LTE Modem; APQ8017; APQ8064AU; AQT1000; AR8031; +34 more |
| CVE-2023-33118 | 7.8 | Jan 2 | Use After Free in Automotive Audio Affected: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; +34 more |
| CVE-2023-33117 | 7.8 | Jan 2 | Use After Free in Audio Affected: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; +34 more |
| CVE-2023-33114 | 7.8 | Jan 2 | Use after free in Neural Processing Unit Affected: 315 5G IoT Modem; AQT1000; AR8031; AR8035; C-V2X 9150; CSRA6620; +34 more |
| CVE-2023-33113 | 7.8 | Jan 2 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel Affected: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6900; +34 more |
| CVE-2023-33108 | 7.8 | Jan 2 | Use After Free in Graphics Affected: QAM8255P; QAM8295P; QAM8650P; QAM8775P; QCA6391; QCA6574; +20 more |
| CVE-2023-33094 | 7.8 | Jan 2 | Use After Free in Linux Graphics Affected: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; +34 more |
| CVE-2023-33085 | 7.8 | Jan 2 | Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables Affected: AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; +34 more |
| CVE-2023-33038 | 7.8 | Jan 2 | Integer Overflow or Wraparound in Radio Interface Layer Affected: AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; QAM8295P; +34 more |
| CVE-2023-33033 | 7.8 | Jan 2 | Use of Out-of-range Pointer Offset in Audio Affected: 315 5G IoT Modem; 9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; APQ8017; APQ8037; +34 more |
| CVE-2023-33032 | 7.8 | Jan 2 | Integer Overflow or Wraparound in TZ Secure OS Affected: 9205 LTE Modem; AQT1000; AR8031; C-V2X 9150; CSR8811; CSRA6620; +34 more |
| CVE-2023-33030 | 7.8 | Jan 2 | Buffer Copy without Checking Size of Input in HLOS Affected: 315 5G IoT Modem; 9205 LTE Modem; 9206 LTE Modem; 9207 LTE Modem; APQ8017; APQ8037; +34 more |
| CVE-2023-28583 | 7.8 | Jan 2 | Double Free in Data Network Stack & Connectivity Affected: AQT1000; FastConnect 6200; QCA6420; QCA6430; QCA6574AU; QCA6696; +24 more |
| CVE-2023-33092 | 7.8 | Dec 5 | Buffer Copy Without Checking Size of Input in Bluetooth HOST Affected: AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; +34 more |
| CVE-2023-33088 | 7.8 | Dec 5 | NULL pointer dereference in WLAN Firmware Affected: 315 5G IoT Modem; AQT1000; AR8031; AR8035; AR9380; CSR8811; +34 more |
| CVE-2023-33087 | 7.8 | Dec 5 | Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core Affected: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6900; +34 more |
| CVE-2023-33079 | 7.8 | Dec 5 | Use of Out-of-range Pointer Offset in Audio Affected: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; +34 more |
| CVE-2023-33071 | 7.8 | Dec 5 | Improper Access Control in Automotive OS Platform Android Affected: QCA6574; QCA6574A; QCA6574AU; QCA6595AU; SA6145P; SA6150P; +7 more |
| CVE-2024-45549 | 7.7 | Apr 7 | Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL Affected: AR8035; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8255P; +34 more |
| CVE-2026-25292 | 7.6 | Aug 4 | Improper Validation of Syntactic Correctness of Input in Automotive Linux OS Affected: AR8035; CQ7790; CQ8725S; FastConnect 6200; FastConnect 6700; FastConnect 6900; +34 more |
| CVE-2026-57546 | 7.5 | Oct 6 | Buffer Over-read in WLAN HAL Affected: Congo; Qualcomm FastConnect 8800 Mobile Connectivity System |
| CVE-2026-25275 | 7.5 | Sep 17 | Buffer Over-read in WLAN Firmware Affected: Snapdragon G1 Gen 2 Gaming Platform; 5G Fixed Wireless Access Platform; AQT1000; AR8031; AR8035; C110100; +34 more |
| CVE-2026-24084 | 7.5 | Aug 4 | Insecure Security Identifier Mechanism in Multi-Mode Call Processor Affected: 5G Fixed Wireless Access Platform; AQT1000; AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; +34 more |
| CVE-2025-47403 | 7.5 | May 4 | Buffer Over-read in WLAN Firmware Affected: AR8035; Cologne; CQ7790; CQ8725S; CQ8750M; CSR8811; +34 more |
| CVE-2025-47401 | 7.5 | May 4 | Buffer Over-read in WLAN HAL Affected: AR8035; Cologne; CQ7790; CQ8725S; CQ8750M; FastConnect 6200; +34 more |
| CVE-2026-21381 | 7.5 | Apr 6 | Buffer Over-read in WLAN Firmware Affected: AR8035; Cologne; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; +34 more |
| CVE-2026-21367 | 7.5 | Apr 6 | Buffer Over-read in WLAN Firmware Affected: AR8035; Cologne; CSR8811; FastConnect 6200; FastConnect 6700; FastConnect 6900; +34 more |
| CVE-2025-47328 | 7.5 | Sep 24 | Buffer Over-read in WLAN HAL Affected: FastConnect 7800; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5300; IPQ5302; IPQ5312; +34 more |
| CVE-2025-47326 | 7.5 | Sep 24 | Buffer Over-read in WLAN HAL Affected: AR8035; CSR8811; FastConnect 6900; FastConnect 7800; Immersive Home 214 Platform; Immersive Home 216 Platform; +34 more |
| CVE-2025-47318 | 7.5 | Sep 24 | Buffer Over-read in BT Controller Affected: APQ8017; APQ8064AU; AQT1000; AR8031; AR8035; CSRA6620; +34 more |
| CVE-2025-47324 | 7.5 | Aug 6 | Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware Affected: QCA7005 |
| CVE-2025-27073 | 7.5 | Aug 6 | Reachable Assertion in WLAN Firmware Affected: AR8035; CSR8811; FastConnect 6800; FastConnect 6900; FastConnect 7800; Immersive Home 214 Platform; +34 more |
| CVE-2025-27066 | 7.5 | Aug 6 | Reachable Assertion in WLAN Firmware Affected: 315 5G IoT Modem; AQT1000; AR8031; AR8035; AR9380; CSR8811; +34 more |
| CVE-2025-27065 | 7.5 | Aug 6 | Buffer Over-read in WLAN Firmware Affected: AR8035; FastConnect 6800; FastConnect 6900; FastConnect 7800; Immersive Home 3210 Platform; Immersive Home 326 Platform; +34 more |
| CVE-2025-21477 | 7.5 | Aug 6 | Improper Input Validation in Modem Affected: 315 5G IoT Modem; AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2025-21452 | 7.5 | Aug 6 | Reachable Assertion in Modem Affected: 315 5G IoT Modem; AR8035; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2025-27057 | 7.5 | Jul 8 | Buffer Over-read in WLAN Host Affected: AR8035; CSR8811; FastConnect 6700; FastConnect 6900; FastConnect 7800; Immersive Home 214 Platform; +34 more |
| CVE-2025-21454 | 7.5 | Jul 8 | Buffer Over-read in WLAN Embedded SW Affected: 315 5G IoT Modem; 9206 LTE Modem; APQ8017; APQ8064AU; APQ8076; AQT1000; +34 more |
| CVE-2025-21449 | 7.5 | Jul 8 | Buffer Over-read in WLAN Embedded SW Affected: 315 5G IoT Modem; APQ8017; APQ8064AU; AQT1000; AR8031; AR8035; +34 more |
| CVE-2025-21446 | 7.5 | Jul 8 | Buffer Over-read in WLAN Firmware Affected: AR8035; AR9380; CSR8811; FastConnect 6700; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2025-27029 | 7.5 | Jun 3 | Buffer Over-read in WLAN HAL Affected: FastConnect 7800; Immersive Home 3210 Platform; Immersive Home 326 Platform; IPQ5300; IPQ5302; IPQ5312; +34 more |
| CVE-2025-21463 | 7.5 | Jun 3 | Buffer Over-read in WLAN Host Communication Affected: AR8035; CSR8811; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; +34 more |
| CVE-2025-21459 | 7.5 | May 6 | Buffer Over-read in WLAN Host Communication Affected: AR8035; FastConnect 6700; FastConnect 6900; FastConnect 7800; Flight RB5 5G Platform; QAM8255P; +34 more |
| CVE-2024-49847 | 7.5 | May 6 | Buffer Over-read in Multi-Mode Call Processor Affected: AR8035; FastConnect 7800; QCA6574AU; QCA6584AU; QCA6595AU; QCA6678AQ; +34 more |
| CVE-2025-21448 | 7.5 | Apr 7 | Buffer Over-read in WLAN Firmware Affected: 315 5G IoT Modem; AQT1000; AR8035; AR9380; CSR8811; CSRB31024; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)
