What’s Vulnerable › Products
Qualcomm Snapdragon Xr2 5G Platform Firmware vulnerabilities
259 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 61 published in the last 12 months.
Check whether your Qualcomm Snapdragon Xr2 5G Platform Firmware version is affected
Exploited Qualcomm Snapdragon Xr2 5G Platform Firmware vulnerabilities
- CVE-2026-21385 — Qualcomm Multiple Chipsets Memory Corruption Vulnerability
- CVE-2023-33107 — Qualcomm Multiple Chipsets Integer Overflow Vulnerability
- CVE-2023-33106 — Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability
- CVE-2023-33063 — Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Latest Qualcomm Snapdragon Xr2 5G Platform Firmware vulnerabilities
- CVE-2026-25302 — Improper Verification of Cryptographic Signature in Boot (CVSS 7.1)
- CVE-2026-25273 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
- CVE-2026-25272 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
- CVE-2026-25270 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
- CVE-2026-25269 — Out-of-bounds Write in Camera Driver (CVSS 6.7)
- CVE-2026-25267 — Missing Authorization in Core (CVSS 7.8)
- CVE-2026-25263 — Out of Bounds write in Linux Camera (CVSS 6.6)
- CVE-2026-25275 — Buffer Over-read in WLAN Firmware (CVSS 7.5)
- CVE-2026-25292 — Improper Validation of Syntactic Correctness of Input in Automotive Linux OS (CVSS 7.6)
- CVE-2026-24077 — Integer Underflow (Wrap or Wraparound) in WLAN Host (CVSS 6.5)
- CVE-2026-21384 — Out-of-bounds Write in Camera Driver (CVSS 5.3)
- CVE-2026-21370 — Out-of-bounds Write in Camera Driver (CVSS 5.3)
- CVE-2026-21369 — Out-of-bounds Write in Camera Driver (CVSS 5.3)
- CVE-2026-21368 — Out-of-bounds Write in Camera Driver (CVSS 5.3)
- CVE-2025-59617 — Use After Free in Computer Vision (CVSS 7.3)
- CVE-2025-59616 — Use After Free in Computer Vision (CVSS 7.8)
- CVE-2025-59615 — Use After Free in Computer Vision (CVSS 7.8)
- CVE-2026-25277 — Buffer Copy Without Checking Size of Input in Secure Processor (CVSS 8.8)
- CVE-2026-25276 — Improper Validation of Array Index in Secure Processor (CVSS 8.8)
- CVE-2026-25260 — Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service (CVSS 7.0)
- CVE-2026-25259 — Out-of-bounds Write in DSP Service (CVSS 7.8)
- CVE-2026-24092 — Improper Validation of Syntactic Correctness of Input in Display (CVSS 7.2)
- CVE-2026-24091 — Improper Validation of Syntactic Correctness of Input in Display (CVSS 7.2)
- CVE-2026-24090 — Missing Authentication for Critical Function in HLOS (CVSS 7.1)
- CVE-2026-24089 — Improper Validation of Syntactic Correctness of Input in Kernel (CVSS 7.2)