Skip to contentQualcomm Snapdragon Xr2\+ Gen 1 Firmware vulnerabilities
- qualcomm fastconnect 6200 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +18 more +20 moreUntrusted Pointer Dereference in Power Optimization FirmwareCVE-2025-474087.8 High
- qualcomm cq7790 firmware, cq8725s firmware, fastconnect 6200 firmware +98 more +100 moreTime-of-check Time-of-use (TOCTOU) Race Condition in DSP ServiceCVE-2025-474077.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, iqx5121 firmware +14 more +16 moreUntrusted Pointer Dereference in CameraCVE-2025-474057.8 High
- qualcomm 215 mobile firmware, 5g fixed wireless access firmware, ar8031 firmware +186 more +188 moreBuffer Copy Without Checking Size of Input in Automotive AudioCVE-2025-474046.5 Medium
- qualcomm 315 5g iot firmware, aqt1000 firmware, ar8031 firmware +342 more +344 moreOut-of-bounds Write in VideoCVE-2025-27061Fix available7.8 High
- qualcomm ar8035 firmware, csr8811 firmware, fastconnect 6200 firmware +204 more +206 moreBuffer Copy Without Checking Size of Input in VideoCVE-2025-27043Fix available7.8 High
- qualcomm 215 mobile firmware, 315 5g iot modem firmware, aqt1000 firmware +342 more +344 moreIncorrect Calculation of Buffer Size in VideoCVE-2025-27042Fix available7.8 High
- qualcomm 315 5g iot modem firmware, 9206 lte modem firmware, apq8017 firmware +190 more +192 moreBuffer Over-read in WLAN Embedded SWCVE-2025-214547.5 High
- qualcomm 315 5g iot firmware, apq8017 firmware, apq8064au firmware +183 more +185 moreBuffer Over-read in WLAN Embedded SWCVE-2025-214497.5 High
- qualcomm 215 mobile firmware, apq8017 firmware, apq8037 firmware +273 more +275 moreNULL Pointer Dereference in SPS-HLOSCVE-2025-214336.2 Medium
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +244 more +246 moreDouble Free in SPS-HLOSCVE-2025-214327.8 High
- qualcomm 205 mobile firmware, 215 mobile firmware, apq8064au firmware +177 more +179 moreBuffer Over-read in Data HLOS - LNXCVE-2025-214278.2 High
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +210 more +212 moreOut-of-bounds Write in SPS ApplicationsCVE-2024-498357.8 High
- qualcomm 215 mobile firmware, csra6620 firmware, csra6640 firmware +104 more +106 moreOut-of-bounds Write in Computer VisionCVE-2025-21467Fix available7.8 High
- qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +264 more +266 moreUse After Free in GPS HLOS DriverCVE-2025-21453Fix available7.8 High
- qualcomm 215 firmware, 315 5g iot modem firmware, aqt1000 firmware +237 more +239 moreUse After Free in NPUCVE-2025-21424Fix available7.8 High
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +242 more +244 moreImproper Authorization in SPS-HLOSCVE-2024-430515.5 Medium
- qualcomm 205 firmware, apq8017 firmware, ar8035 firmware +210 more +212 moreBuffer Copy Without Checking Size of Input in WLAN HostCVE-2024-53027Public exploitFix available7.5 High
- qualcomm 215 firmware, 315 5g iot modem firmware, aqt1000 firmware +249 more +251 moreImproper Validation of Array Index in AudioCVE-2024-53014Fix available7.8 High
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +167 more +169 moreBuffer Over-read in WLAN HOSTCVE-2024-49838Fix available8.2 High
- qualcomm 315 5g iot firmware, 315 5g iot modem firmware, 9206 lte firmware +343 more +345 moreBuffer Over-read in WLAN FirmwareCVE-2024-330517.5 High
- qualcomm 215 mobile firmware, 315 5g iot firmware, 315 5g iot modem firmware +285 more +287 moreUse After Free in DSP ServiceCVE-2024-33060Fix available8.4 High
- qualcomm 205 mobile firmware, 215 mobile firmware, apq8017 firmware +248 more +250 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostCVE-2024-33052Fix available7.8 High
- qualcomm 205 firmware, 215 firmware, apq8017 firmware +248 more +250 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostCVE-2024-33042Fix available7.8 High
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +53 more +55 moreImproper Input Validation in Secure ProcessorCVE-2024-214767.8 High
- qualcomm 215 mobile firmware, 315 5g iot modem firmware, aqt1000 firmware +234 more +236 moreUse of Out-of-range Pointer Offset in VideoCVE-2024-21475Fix available7.8 High
- qualcomm 215 mobile firmware, 315 5g iot firmware, 315 5g iot modem firmware +344 more +346 moreBuffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-ApplicationsCVE-2023-330238.4 High
- qualcomm 215 mobile firmware, 315 5g iot firmware, 315 5g iot modem firmware +360 more +362 moreBuffer Copy Without Checking Size of Input in SPS ApplicationsCVE-2023-285478.4 High
- qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +281 more +283 moreUse After Free in KernelCVE-2024-21468Fix available8.4 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +165 more +167 moreBuffer Copy Without Checking Size of Input in VideoCVE-2023-435487.3 High
- qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +317 more +319 moreUse of Out-of-range Pointer Offset in AudioCVE-2023-330668.4 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +384 more +386 moreImproper Input Validation in ServicesCVE-2023-285789.3 Critical
- qualcomm 315 5g firmware, aqt1000 firmware, ar8035 firmware +192 more +194 moreBuffer Over-read in WLAN FirmwareCVE-2023-330157.5 High
- qualcomm 315 5g iot firmware, aqt1000 firmware, ar8035 firmware +197 more +199 moreImproper Validation of Array Index in WLAN HALCVE-2023-285737.8 High
- qualcomm 315 5g iot firmware, aqt1000 firmware, ar8031 firmware +289 more +291 moreImproper Validation of Array Index in WLAN HALCVE-2023-285677.8 High
- qualcomm 205 firmware, 215 firmware, 315 5g iot firmware +203 more +205 moreInteger Overflow or Wraparound in AudioCVE-2023-226678.4 High
- qualcomm 315 5g iot firmware, 315 5g iot modem firmware, apq8064au firmware +229 more +231 moreBuffer Over-read in WLAN HOSTCVE-2023-28542Fix available7.8 High
- qualcomm 215 firmware, ar8035 firmware, csra6620 firmware +161 more +163 moreStack-based Buffer Overflow in WLAN HOSTCVE-2023-24854Fix available7.8 High
- qualcomm ar8035 firmware, csr8811 firmware, csra6620 firmware +189 more +191 moreBuffer Copy Without Checking Size of Input in WLAN HOSTCVE-2023-24851Fix available7.8 High
- qualcomm 205 firmware, 215 firmware, 315 5g iot firmware +269 more +271 moreUse of Out-of-range Pointer Offset in Qualcomm IPCCVE-2023-22387Fix available7.8 High
- qualcomm 215 firmware, ar8035 firmware, csr8811 firmware +229 more +231 moreBuffer Copy Without Checking Size of Input in WLAN HOSTCVE-2023-22386Fix available7.8 High