What’s Vulnerable › Products
Qualcomm Snapdragon Xr1 Firmware vulnerabilities
31 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your Qualcomm Snapdragon Xr1 Firmware version is affected
Latest Qualcomm Snapdragon Xr1 Firmware vulnerabilities
- CVE-2025-21454 — Buffer Over-read in WLAN Embedded SW (CVSS 7.5)
- CVE-2025-21449 — Buffer Over-read in WLAN Embedded SW (CVSS 7.5)
- CVE-2025-21433 — NULL Pointer Dereference in SPS-HLOS (CVSS 5.5)
- CVE-2025-21432 — Double Free in SPS-HLOS (CVSS 7.8)
- CVE-2025-21427 — Buffer Over-read in Data HLOS - LNX (CVSS 8.2)
- CVE-2025-21453 — Use After Free in GPS HLOS Driver (CVSS 7.8)
- CVE-2024-49844 — Improper Input Validation in Automotive (CVSS 7.8)
- CVE-2024-49835 — Out-of-bounds Write in SPS Applications (CVSS 7.8)
- CVE-2024-53027 — Buffer Copy Without Checking Size of Input in WLAN Host (CVSS 7.5)
- CVE-2024-43051 — Improper Authorization in SPS-HLOS (CVSS 5.5)
- CVE-2024-33060 — Use After Free in DSP Service (CVSS 7.8)
- CVE-2024-33052 — Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host (CVSS 7.8)
- CVE-2024-33051 — Buffer Over-read in WLAN Firmware (CVSS 7.5)
- CVE-2024-33042 — Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host (CVSS 7.8)
- CVE-2023-43551 — Improper Authentication in Multi-Mode Call Processor (CVSS 7.5)
- CVE-2024-21471 — Use After Free in Graphics Linux (CVSS 7.8)
- CVE-2024-21468 — Use After Free in Kernel (CVSS 7.8)
- CVE-2023-33023 — Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications (CVSS 7.8)
- CVE-2023-28547 — Buffer Copy Without Checking Size of Input in SPS Applications (CVSS 7.8)
- CVE-2023-43548 — Buffer Copy Without Checking Size of Input in Video (CVSS 9.8)
- CVE-2023-33066 — Use of Out-of-range Pointer Offset in Audio (CVSS 7.8)
- CVE-2023-28578 — Improper Input Validation in Services (CVSS 7.8)
- CVE-2023-33021 — Use After Free in Graphics (CVSS 7.8)
- CVE-2023-28567 — Improper Validation of Array Index in WLAN HAL (CVSS 7.8)
- CVE-2023-28565 — Improper Validation of Array Index in WLAN HAL (CVSS 7.8)