What’s Vulnerable › Products
Qualcomm Snapdragon 855 Firmware vulnerabilities
25 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your Qualcomm Snapdragon 855 Firmware version is affected
Latest Qualcomm Snapdragon 855 Firmware vulnerabilities
- CVE-2025-21424 — Use After Free in NPU (CVSS 7.8)
- CVE-2024-53014 — Improper Validation of Array Index in Audio (CVSS 7.8)
- CVE-2024-43056 — Buffer Over-read in Hypervisor (CVSS 6.5)
- CVE-2024-43051 — Improper Authorization in SPS-HLOS (CVSS 5.5)
- CVE-2024-33051 — Buffer Over-read in WLAN Firmware (CVSS 7.5)
- CVE-2024-33042 — Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host (CVSS 7.8)
- CVE-2024-23357 — NULL Pointer Dereference in HLOS (CVSS 5.5)
- CVE-2023-33021 — Use After Free in Graphics (CVSS 7.8)
- CVE-2023-28584 — Improper Authorization in WLAN Host (CVSS 7.5)
- CVE-2023-28567 — Improper Validation of Array Index in WLAN HAL (CVSS 7.8)
- CVE-2023-28565 — Improper Validation of Array Index in WLAN HAL (CVSS 7.8)
- CVE-2023-28564 — Use of Out-of-range Pointer Offset in WLAN HAL (CVSS 7.8)
- CVE-2023-28562 — Buffer Copy Without Checking Size of Input in QESL (CVSS 9.8)
- CVE-2023-28575 — Multiple Type Confusion Vulnerability (CVSS 7.8)
- CVE-2023-28542 — Buffer Over-read in WLAN HOST (CVSS 7.8)
- CVE-2023-28541 — Buffer Over-read in WLAN Host (CVSS 7.8)
- CVE-2023-22667 — Integer Overflow or Wraparound in Audio (CVSS 7.8)
- CVE-2023-22387 — Use of Out-of-range Pointer Offset in Qualcomm IPC (CVSS 7.8)
- CVE-2023-21639 — Buffer Copy Without Checking the Size of Input in Audio (CVSS 7.8)
- CVE-2023-21638 — Incorrect Type Conversion or Cast in Video (CVSS 7.8)
- CVE-2023-21637 — Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux (CVSS 7.8)
- CVE-2023-21635 — Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity (CVSS 7.8)
- CVE-2023-21633 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux (CVSS 7.8)
- CVE-2023-21631 — Improper Input Validation in Modem (CVSS 9.8)
- CVE-2023-21629 — Double Free in Modem (CVSS 6.8)