Product by Qualcomm
Snapdragon Auto 5g Modem-rf Firmware
223 known vulnerabilities in Snapdragon Auto 5g Modem-rf Firmware (Qualcomm), 5 of them actively exploited (CISA KEV).
Key figures
223
Vulnerabilities
5
Actively exploited (KEV)
0
Used by ransomware
19
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-21385 | Integer Overflow or Wraparound in Graphics In CISA KEValso in 231 other products | 7.8 | |
| Critical | CVE-2023-33106 | Use of Out-of-range Pointer Offset in Graphics In CISA KEValso in 148 other products | 8.4 | |
| Critical | CVE-2023-33107 | Integer Overflow or Wraparound in Graphics Linux In CISA KEValso in 237 other products | 8.4 | |
| Critical | CVE-2024-43047 | Use After Free in DSP Service In CISA KEValso in 63 other products | 7.8 | |
| Critical | CVE-2023-33063 | Use After Free in DSP Services In CISA KEValso in 281 other products | 7.8 | |
| High | CVE-2022-40507 | Double free in Core | 8.4 | |
| High | CVE-2026-25275 | Buffer Over-read in WLAN Firmware | 7.5 | |
| Critical | CVE-2025-27034 | Improper Validation of Array Index in Multi-Mode Call Processor | 9.8 | |
| High | CVE-2026-57554 | Use After Free in DSP Service | 7.8 | |
| High | CVE-2026-25267 | Missing Authorization in Core | 7.8 | |
| Critical | CVE-2023-33028 | Buffer Copy without Checking Size of Input in WLAN Firmware | 9.8 | |
| High | CVE-2026-25268 | Stack-based Buffer Overflow in WLAN Host | 8.8 | |
| High | CVE-2026-24079 | Missing Authentication for Critical Function in Data Modem | 8.1 | |
| Medium | CVE-2026-25263 | Out of Bounds write in Linux Camera | 6.6 | |
| High | CVE-2026-24084 | Insecure Security Identifier Mechanism in Multi-Mode Call Processor | 7.5 | |
| High | CVE-2023-33042 | Improper Input Validation in Modem | 7.5 | |
| Critical | CVE-2023-28540 | Improper Authentication in Data Modem | 9.1 | |
| High | CVE-2025-47392 | Integer Overflow or Wraparound in GPS | 8.8 | |
| Critical | CVE-2025-21450 | Improper Authentication in GPS_GNSS | 9.1 | |
| Critical | CVE-2023-22388 | Use of Out-of-range Pointer Offset in Multi-mode Call Processor | 9.8 | |
| High | CVE-2023-33044 | Reachable Assertion in Data Modem | 7.5 | |
| High | CVE-2026-24082 | Use After Free in Automotive GPU | 7.8 | |
| Critical | CVE-2023-22385 | Buffer Over-read in Data Modem | 8.2 | |
| Medium | CVE-2026-24078 | Exposure of Private Personal Information to an Unauthorized Actor in Data Modem | 6.5 | |
| High | CVE-2023-33089 | NULL Pointer Dereference in WLAN Firmware | 7.5 |