What’s Vulnerable › Products

Qualcomm Snapdragon Ar1 Gen 1 Firmware vulnerabilities

38 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 38 published in the last 12 months.

Check whether your Qualcomm Snapdragon Ar1 Gen 1 Firmware version is affected

Exploited Qualcomm Snapdragon Ar1 Gen 1 Firmware vulnerabilities

• CVE-2025-21480 — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability
• CVE-2025-21479 — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Latest Qualcomm Snapdragon Ar1 Gen 1 Firmware vulnerabilities

• CVE-2026-25266 — Exposed dangerous function in windows host (CVSS 7.8)
• CVE-2026-24082 — Use After Free in Automotive GPU (CVSS 7.8)
• CVE-2025-47403 — Buffer Over-read in WLAN Firmware (CVSS 7.5)
• CVE-2025-47401 — Buffer Over-read in WLAN HAL (CVSS 7.5)
• CVE-2025-47398 — Use After Free in Graphics (CVSS 7.8)
• CVE-2025-47397 — Improper Release of Memory Before Removing Last Reference in Graphics (CVSS 7.8)
• CVE-2025-47366 — Exposed Dangerous Method or Function in HLOS (CVSS 7.8)
• CVE-2025-27061 — Out-of-bounds Write in Video (CVSS 7.8)
• CVE-2025-27057 — Buffer Over-read in WLAN Host (CVSS 7.5)
• CVE-2025-27052 — Buffer Copy Without Checking Size of Input in Core Services (CVSS 7.8)
• CVE-2025-27043 — Buffer Copy Without Checking Size of Input in Video (CVSS 7.8)
• CVE-2025-27042 — Incorrect Calculation of Buffer Size in Video (CVSS 7.8)
• CVE-2025-21454 — Buffer Over-read in WLAN Embedded SW (CVSS 7.5)
• CVE-2025-21449 — Buffer Over-read in WLAN Embedded SW (CVSS 7.5)
• CVE-2025-21446 — Buffer Over-read in WLAN Firmware (CVSS 7.5)
• CVE-2025-21433 — NULL Pointer Dereference in SPS-HLOS (CVSS 5.5)
• CVE-2025-21432 — Double Free in SPS-HLOS (CVSS 7.8)
• CVE-2025-21422 — Cryptographic Issues in Automotive (CVSS 7.8)
• CVE-2024-53009 — Improper Validation of Array Index in Automotive Autonomy (CVSS 7.8)
• CVE-2025-21479 — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability (CVSS 8.6) — exploited
• CVE-2025-21480 — Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability (CVSS 8.6) — exploited
• CVE-2025-21468 — Out-of-bounds Write in Computer Vision (CVSS 7.8)
• CVE-2025-21459 — Buffer Over-read in WLAN Host Communication (CVSS 7.5)
• CVE-2024-49845 — Improper Input Validation in HLOS (CVSS 7.8)
• CVE-2024-49844 — Improper Input Validation in Automotive (CVSS 7.8)