What’s Vulnerable › Products
Qualcomm Snapdragon 855+/860 Mobile Platform (Sm8150-Ac) Firmware vulnerabilities
32 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 27 published in the last 12 months.
Exploited Qualcomm Snapdragon 855+/860 Mobile Platform (Sm8150-Ac) Firmware vulnerabilities
- CVE-2025-21480 — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
- CVE-2025-21479 — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
Latest Qualcomm Snapdragon 855+/860 Mobile Platform (Sm8150-Ac) Firmware vulnerabilities
- CVE-2025-47348 — Use of Uninitialized Variable in HLOS (CVSS 7.8)
- CVE-2025-47333 — Use After Free in HLOS (CVSS 6.6)
- CVE-2025-47320 — Out-of-bounds Write in Audio (CVSS 7.8)
- CVE-2025-27054 — Out-of-bounds Write in Display (CVSS 7.8)
- CVE-2025-27053 — Incorrect Calculation of Buffer Size in HLOS (CVSS 7.8)
- CVE-2025-27032 — Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor (CVSS 7.8)
- CVE-2025-21487 — Buffer Over-read in Data Network Stack & Connectivity (CVSS 8.2)
- CVE-2025-21484 — Buffer Over-read in Data Network Stack & Connectivity (CVSS 8.2)
- CVE-2025-21483 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity (CVSS 9.8)
- CVE-2025-21482 — Cryptographic Issues in Core (CVSS 7.1)
- CVE-2025-21481 — Buffer Copy Without Checking Size of Input in HLOS (CVSS 7.8)
- CVE-2025-27066 — Reachable Assertion in WLAN Firmware (CVSS 7.5)
- CVE-2025-21465 — Out-of-bounds Read in Core (CVSS 6.5)
- CVE-2025-21464 — Out-of-bounds Read in Core (CVSS 6.5)
- CVE-2025-21452 — Reachable Assertion in Modem (CVSS 7.5)
- CVE-2025-21479 — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability (CVSS 8.6) — exploited
- CVE-2025-21480 — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability (CVSS 8.6) — exploited
- CVE-2024-53026 — Buffer Over-read in Data Network Stack & Connectivity (CVSS 8.2)
- CVE-2024-53021 — Buffer Over-read in Data Network Stack & Connectivity (CVSS 8.2)
- CVE-2024-53020 — Buffer Over-read in Data Network Stack & Connectivity (CVSS 8.2)
- CVE-2024-53015 — Use After Free in Computer Vision (CVSS 6.6)
- CVE-2024-53010 — Improper Access Control in Core (CVSS 7.8)
- CVE-2025-21430 — Buffer Over-read in WLAN Host (CVSS 7.5)
- CVE-2025-21429 — Buffer Over-read in WLAN Host (CVSS 7.5)
- CVE-2024-45551 — Weak Authentication in HLOS (CVSS 6.2)