Snapdragon 427 Mobile Platform Firmware

9 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-21482 Sep 24, 16:15 HIGH This Month

Cryptographic issue while performing RSA PKCS padding decoding. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware 9207 Lte Modem Firmware +284

NVD

CVSS 3.1

7.1

EPSS

0.0%

CVE-2024-43052 Dec 02, 11:15 HIGH This Week

Memory corruption while processing API calls to NPU with invalid input. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 205 Mobile Platform Firmware 215 Mobile Platform Firmware Apq8017 Firmware +86

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2024-23357 Aug 05, 15:15 MEDIUM This Month

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Qualcomm 215 Mobile Platform Firmware Apq8017 Firmware +234

NVD

CVSS 3.1

5.5

EPSS

0.1%

CVE-2024-21461 Jul 01, 15:15 HIGH This Week

Memory corruption while performing finish HMAC operation when context is freed by keymaster. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 215 Mobile Platform Firmware 315 5g Iot Modem Firmware Apq8017 Firmware +308

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33110 Jan 02, 06:15 HIGH This Week

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Qualcomm Snapdragon 425 Mobile Platform Firmware Snapdragon 429 Mobile Platform Firmware +116

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-33033 Jan 02, 06:15 HIGH This Week

Memory corruption in Audio during playback with speaker protection. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware +257

NVD

CVSS 3.1

8.4

EPSS

0.1%

CVE-2023-33030 Jan 02, 06:15 CRITICAL Act Now

Memory corruption in HLOS while running playready use-case. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware 9206 Lte Modem Firmware 9207 Lte Modem Firmware +290

NVD

CVSS 3.1

9.3

EPSS

0.1%

CVE-2023-28546 Dec 05, 03:15 HIGH This Week

Memory Corruption in SPS Application while exporting public key in sorter TA. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware Apq8017 Firmware Apq8037 Firmware +271

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2023-24850 Oct 03, 06:15 HIGH This Week

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Apq8017 Firmware Apq8037 Firmware Aqt1000 Firmware +201

NVD

CVSS 3.1

7.8

EPSS

0.1%

CVE-2025-21482

EPSS 0% CVSS 7.1

HIGH This Month

Cryptographic issue while performing RSA PKCS padding decoding. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Qualcomm 315 5g Iot Modem Firmware +286

NVD

CVE-2024-43052

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption while processing API calls to NPU with invalid input. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 205 Mobile Platform Firmware +88

NVD

CVE-2024-23357

EPSS 0% CVSS 5.5

MEDIUM This Month

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Qualcomm +236

NVD

CVE-2024-21461

EPSS 0% CVSS 7.8

HIGH This Week

Memory corruption while performing finish HMAC operation when context is freed by keymaster. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 215 Mobile Platform Firmware +310

NVD

CVE-2023-33110

EPSS 0% CVSS 7.8

HIGH This Week

Buffer Overflow Memory Corruption Qualcomm +118

NVD

CVE-2023-33033

EPSS 0% CVSS 8.4

HIGH This Week

Memory corruption in Audio during playback with speaker protection. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Qualcomm +259

NVD

CVE-2023-33030

EPSS 0% CVSS 9.3

CRITICAL Act Now

Memory corruption in HLOS while running playready use-case. Rated critical severity (CVSS 9.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +292

NVD

CVE-2023-28546

EPSS 0% CVSS 7.8

HIGH This Week

Memory Corruption in SPS Application while exporting public key in sorter TA. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm 315 5g Iot Modem Firmware +273

NVD

CVE-2023-24850

EPSS 0% CVSS 7.8

HIGH This Week

Buffer Overflow Qualcomm Apq8017 Firmware +203

NVD