What’s Vulnerable › Products
Qualcomm Snapdragon Xr2+ Gen 1 Firmware vulnerabilities
41 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.
Check whether your Qualcomm Snapdragon Xr2+ Gen 1 Firmware version is affected
Latest Qualcomm Snapdragon Xr2+ Gen 1 Firmware vulnerabilities
- CVE-2025-47408 — Untrusted Pointer Dereference in Power Optimization Firmware (CVSS 7.8)
- CVE-2025-47407 — Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service (CVSS 7.0)
- CVE-2025-47405 — Untrusted Pointer Dereference in Camera (CVSS 7.8)
- CVE-2025-47404 — Buffer Copy Without Checking Size of Input in Automotive Audio (CVSS 7.8)
- CVE-2025-27061 — Out-of-bounds Write in Video (CVSS 7.8)
- CVE-2025-27043 — Buffer Copy Without Checking Size of Input in Video (CVSS 7.8)
- CVE-2025-27042 — Incorrect Calculation of Buffer Size in Video (CVSS 7.8)
- CVE-2025-21454 — Buffer Over-read in WLAN Embedded SW (CVSS 7.5)
- CVE-2025-21449 — Buffer Over-read in WLAN Embedded SW (CVSS 7.5)
- CVE-2025-21433 — NULL Pointer Dereference in SPS-HLOS (CVSS 5.5)
- CVE-2025-21432 — Double Free in SPS-HLOS (CVSS 7.8)
- CVE-2025-21427 — Buffer Over-read in Data HLOS - LNX (CVSS 8.2)
- CVE-2025-21467 — Out-of-bounds Write in Computer Vision (CVSS 7.8)
- CVE-2025-21453 — Use After Free in GPS HLOS Driver (CVSS 7.8)
- CVE-2024-49835 — Out-of-bounds Write in SPS Applications (CVSS 7.8)
- CVE-2025-21424 — Use After Free in NPU (CVSS 7.8)
- CVE-2024-53027 — Buffer Copy Without Checking Size of Input in WLAN Host (CVSS 7.5)
- CVE-2024-53014 — Improper Validation of Array Index in Audio (CVSS 7.8)
- CVE-2024-43051 — Improper Authorization in SPS-HLOS (CVSS 5.5)
- CVE-2024-49838 — Buffer Over-read in WLAN HOST (CVSS 7.5)
- CVE-2024-33060 — Use After Free in DSP Service (CVSS 7.8)
- CVE-2024-33052 — Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host (CVSS 7.8)
- CVE-2024-33051 — Buffer Over-read in WLAN Firmware (CVSS 7.5)
- CVE-2024-33042 — Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host (CVSS 7.8)
- CVE-2024-21476 — Improper Input Validation in Secure Processor (CVSS 7.8)