What’s Vulnerable › Products
Qualcomm Snapdragon 860 Mobile Firmware vulnerabilities
38 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your Qualcomm Snapdragon 860 Mobile Firmware version is affected
Latest Qualcomm Snapdragon 860 Mobile Firmware vulnerabilities
- CVE-2025-27061 — Out-of-bounds Write in Video (CVSS 7.8)
- CVE-2025-27042 — Incorrect Calculation of Buffer Size in Video (CVSS 7.8)
- CVE-2025-21454 — Buffer Over-read in WLAN Embedded SW (CVSS 7.5)
- CVE-2025-21449 — Buffer Over-read in WLAN Embedded SW (CVSS 7.5)
- CVE-2025-21433 — NULL Pointer Dereference in SPS-HLOS (CVSS 5.5)
- CVE-2025-21432 — Double Free in SPS-HLOS (CVSS 7.8)
- CVE-2025-21427 — Buffer Over-read in Data HLOS - LNX (CVSS 8.2)
- CVE-2025-21422 — Cryptographic Issues in Automotive (CVSS 7.8)
- CVE-2024-53009 — Improper Validation of Array Index in Automotive Autonomy (CVSS 7.8)
- CVE-2025-21453 — Use After Free in GPS HLOS Driver (CVSS 7.8)
- CVE-2024-49842 — Improper Access Control in Hypervisor (CVSS 7.8)
- CVE-2024-49841 — Detection of Error Condition Without Action in Hypervisor (CVSS 7.8)
- CVE-2024-49835 — Out-of-bounds Write in SPS Applications (CVSS 7.8)
- CVE-2024-38420 — Improper Input Validation in Hypervisor (CVSS 7.8)
- CVE-2024-33060 — Use After Free in DSP Service (CVSS 7.8)
- CVE-2024-33052 — Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host (CVSS 7.8)
- CVE-2023-43555 — Buffer Over-read in Video (CVSS 7.5)
- CVE-2023-43551 — Improper Authentication in Multi-Mode Call Processor (CVSS 7.5)
- CVE-2023-43542 — Buffer Copy Without Checking Size of Input in Trusted Execution Environment (CVSS 7.8)
- CVE-2023-43538 — Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS (CVSS 7.8)
- CVE-2024-21477 — Buffer Over-read in WLAN Firmware (CVSS 7.5)
- CVE-2024-21475 — Use of Out-of-range Pointer Offset in Video (CVSS 7.8)
- CVE-2023-43530 — Integer Overflow or Wraparound in HLOS (CVSS 7.8)
- CVE-2023-43529 — Reachable Assertion in Data Modem (CVSS 7.5)
- CVE-2023-33119 — Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor (CVSS 7.0)