# Qualcomm, Inc. Snapdragon.

Every CVE that names Qualcomm, Inc. Snapdragon among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Stack-based Buffer Overflow in Automotive Software platform based on QNX](https://agentprime.io/advisories/CVE-2025-47347.md)
  `CVE-2025-47347` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption
- [Use After Free in BT Controller](https://agentprime.io/advisories/CVE-2025-47342.md)
  `CVE-2025-47342` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption
- [Buffer Copy Without Checking Size of Input in Camera](https://agentprime.io/advisories/CVE-2025-47341.md)
  `CVE-2025-47341` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption
- [Out-of-bounds Write in DSP Service](https://agentprime.io/advisories/CVE-2025-47340.md)
  `CVE-2025-47340` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption
- [Untrusted Pointer Dereference in DSP Service](https://agentprime.io/advisories/CVE-2025-47338.md)
  `CVE-2025-47338` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption
- [Untrusted Pointer Dereference in TZ Firmware](https://agentprime.io/advisories/CVE-2025-27060.md)
  `CVE-2025-27060` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption
- [Use of Out-of-range Pointer Offset in TZ Firmware](https://agentprime.io/advisories/CVE-2025-27059.md)
  `CVE-2025-27059` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-823
- [Out-of-bounds Write in Display](https://agentprime.io/advisories/CVE-2025-27054.md)
  `CVE-2025-27054` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption
- [Incorrect Calculation of Buffer Size in HLOS](https://agentprime.io/advisories/CVE-2025-27053.md)
  `CVE-2025-27053` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption
- [Buffer Over-read in Camera](https://agentprime.io/advisories/CVE-2025-27049.md)
  `CVE-2025-27049` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.5 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-126
- [Untrusted Pointer Dereference in Camera](https://agentprime.io/advisories/CVE-2025-27048.md)
  `CVE-2025-27048` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption
- [Buffer Over-read in Video](https://agentprime.io/advisories/CVE-2025-27045.md)
  `CVE-2025-27045` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-126
- [Buffer Over-read in Video](https://agentprime.io/advisories/CVE-2025-27041.md)
  `CVE-2025-27041` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.5 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-126
- [Improper Input Validation in TZ Firmware](https://agentprime.io/advisories/CVE-2025-27040.md)
  `CVE-2025-27040` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.5 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-20
- [Detection of Error Condition Without Action in Computer Vision](https://agentprime.io/advisories/CVE-2025-27039.md)
  `CVE-2025-27039` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.6 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-390
- [Release of Invalid Pointer or Reference in Android Core](https://agentprime.io/advisories/CVE-2025-47329.md)
  `CVE-2025-47329` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption
- [Buffer Over-read in WLAN HAL](https://agentprime.io/advisories/CVE-2025-47328.md)
  `CVE-2025-47328` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-126
- [Use After Free in Camera](https://agentprime.io/advisories/CVE-2025-47327.md)
  `CVE-2025-47327` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption
- [Buffer Over-read in WLAN HAL](https://agentprime.io/advisories/CVE-2025-47326.md)
  `CVE-2025-47326` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-126
- [Buffer Over-read in BT Controller](https://agentprime.io/advisories/CVE-2025-47318.md)
  `CVE-2025-47318` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-126
- [Buffer Over-read in BT Controller](https://agentprime.io/advisories/CVE-2025-47317.md)
  `CVE-2025-47317` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-126
- [Double Free in Video](https://agentprime.io/advisories/CVE-2025-47316.md)
  `CVE-2025-47316` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption
- [Use After Free in Automotive Software platform based on QNX](https://agentprime.io/advisories/CVE-2025-47315.md)
  `CVE-2025-47315` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption
- [Improper Input Validation in Automotive Software platform based on QNX](https://agentprime.io/advisories/CVE-2025-47314.md)
  `CVE-2025-47314` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-20
- [Use After Free in Automotive Software platform based on QNX](https://agentprime.io/advisories/CVE-2025-27077.md)
  `CVE-2025-27077` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption
- [Use After Free in Camera Driver](https://agentprime.io/advisories/CVE-2025-27037.md)
  `CVE-2025-27037` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption
- [Buffer Over-read in Video](https://agentprime.io/advisories/CVE-2025-27036.md)
  `CVE-2025-27036` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-126
- [Improper Validation of Array Index in Multi-Mode Call Processor](https://agentprime.io/advisories/CVE-2025-27034.md)
  `CVE-2025-27034` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-129
- [Buffer Over-read in Video](https://agentprime.io/advisories/CVE-2025-27033.md)
  `CVE-2025-27033` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-126
- [Improper Access Control Applied to Mirrored or Aliased Memory Regions in Hypervisor](https://agentprime.io/advisories/CVE-2025-27032.md)
  `CVE-2025-27032` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-1257
- [Buffer Over-read in Audio](https://agentprime.io/advisories/CVE-2025-27030.md)
  `CVE-2025-27030` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-126
- [Buffer Over-read in Data Network Stack & Connectivity](https://agentprime.io/advisories/CVE-2025-21488.md)
  `CVE-2025-21488` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-126
- [Buffer Over-read in Data Network Stack & Connectivity](https://agentprime.io/advisories/CVE-2025-21487.md)
  `CVE-2025-21487` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-126
- [Buffer Over-read in Data Network Stack & Connectivity](https://agentprime.io/advisories/CVE-2025-21484.md)
  `CVE-2025-21484` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-126
- [Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity](https://agentprime.io/advisories/CVE-2025-21483.md)
  `CVE-2025-21483` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption
- [Cryptographic Issues in Core](https://agentprime.io/advisories/CVE-2025-21482.md)
  `CVE-2025-21482` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-310
- [Buffer Copy Without Checking Size of Input in HLOS](https://agentprime.io/advisories/CVE-2025-21481.md)
  `CVE-2025-21481` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption
- [Buffer Copy Without Checking Size of Input in Computer Vision](https://agentprime.io/advisories/CVE-2025-21476.md)
  `CVE-2025-21476` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2025 · Tags: Memory corruption
- [Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware](https://agentprime.io/advisories/CVE-2025-47324.md)
  `CVE-2025-47324` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-1230
- [Time-of-check Time-of-use (TOCTOU) Race Condition in Display](https://agentprime.io/advisories/CVE-2025-27076.md)
  `CVE-2025-27076` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: Race condition
- [Improper Validation of Array Index in Bluetooth HOST](https://agentprime.io/advisories/CVE-2025-27075.md)
  `CVE-2025-27075` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-129
- [Reachable Assertion in WLAN Firmware](https://agentprime.io/advisories/CVE-2025-27073.md)
  `CVE-2025-27073` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2025 · Tags: Denial of service
- [Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks](https://agentprime.io/advisories/CVE-2025-27072.md)
  `CVE-2025-27072` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.5 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption
- [Buffer Copy Without Checking Size of Input in Powerline Communication Firmware](https://agentprime.io/advisories/CVE-2025-27071.md)
  `CVE-2025-27071` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.3 High · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption
- [Untrusted Pointer Dereference in DSP Service](https://agentprime.io/advisories/CVE-2025-27069.md)
  `CVE-2025-27069` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption
- [Buffer Over-read in Camera](https://agentprime.io/advisories/CVE-2025-27068.md)
  `CVE-2025-27068` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-126
- [Improper Validation of Array Index in DSP Service](https://agentprime.io/advisories/CVE-2025-27067.md)
  `CVE-2025-27067` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-129
- [Reachable Assertion in WLAN Firmware](https://agentprime.io/advisories/CVE-2025-27066.md)
  `CVE-2025-27066` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2025 · Tags: Denial of service
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2025-27065.md)
  `CVE-2025-27065` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-126
- [Improper Access Control in Automotive Multimedia](https://agentprime.io/advisories/CVE-2025-27062.md)
  `CVE-2025-27062` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: Broken access control
- [Improper Input Validation in Modem](https://agentprime.io/advisories/CVE-2025-21477.md)
  `CVE-2025-21477` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-20
- [Use After Free in BTHOST](https://agentprime.io/advisories/CVE-2025-21474.md)
  `CVE-2025-21474` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption
- [Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux](https://agentprime.io/advisories/CVE-2025-21473.md)
  `CVE-2025-21473` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: Race condition
- [Leftover Debug Code in Secure Element](https://agentprime.io/advisories/CVE-2025-21472.md)
  `CVE-2025-21472` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.5 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-489
- [Out-of-bounds Read in Core](https://agentprime.io/advisories/CVE-2025-21465.md)
  `CVE-2025-21465` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.5 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption
- [Out-of-bounds Read in Core](https://agentprime.io/advisories/CVE-2025-21464.md)
  `CVE-2025-21464` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.5 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption
- [Out-of-bounds Write in Camera_Linux](https://agentprime.io/advisories/CVE-2025-21461.md)
  `CVE-2025-21461` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption
- [Use After Free in NPU](https://agentprime.io/advisories/CVE-2025-21458.md)
  `CVE-2025-21458` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption
- [Buffer Over-read in Automotive OS Platform Android](https://agentprime.io/advisories/CVE-2025-21457.md)
  `CVE-2025-21457` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.1 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-126
- [Use After Free in NPU](https://agentprime.io/advisories/CVE-2025-21456.md)
  `CVE-2025-21456` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/qualcomm-inc-snapdragon.md>
Older: <https://agentprime.io/advisories/technology/qualcomm-inc-snapdragon.md?cursor=WyIyMDI1LTA4LTA2VDA3OjI1OjQ5LjI1OTAwMFoiLCJDVkUtMjAyNS0yMTQ1NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=qualcomm-inc-snapdragon&cursor=WyIyMDI1LTEwLTA5VDAzOjE4OjEzLjE4NDAwMFoiLCJDVkUtMjAyNS00NzM0OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/qualcomm-inc-snapdragon/?cursor=WyIyMDI1LTEwLTA5VDAzOjE4OjEzLjE4NDAwMFoiLCJDVkUtMjAyNS00NzM0OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.