Product by Qualcomm
Snapdragon Xr2 5g Firmware
97 known vulnerabilities in Snapdragon Xr2 5g Firmware (Qualcomm), 1 of them actively exploited (CISA KEV).
Key figures
97
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-43047 | Use After Free in DSP Service In CISA KEValso in 63 other products | 7.8 | |
| Critical | CVE-2023-28581 | Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Firmware | 9.8 | |
| High | CVE-2025-47408 | Untrusted Pointer Dereference in Power Optimization Firmware | 7.8 | |
| High | CVE-2025-47407 | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service | 7.8 | |
| High | CVE-2025-47405 | Untrusted Pointer Dereference in Camera | 7.8 | |
| Critical | CVE-2023-43551 | Improper Authentication in Multi-Mode Call Processor | 9.1 | |
| High | CVE-2024-49838 | Buffer Over-read in WLAN HOST | 8.2 | |
| High | CVE-2025-21427 | Buffer Over-read in Data HLOS - LNX | 8.2 | |
| Critical | CVE-2023-43538 | Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS | 9.3 | |
| High | CVE-2024-38420 | Improper Input Validation in Hypervisor | 8.8 | |
| Critical | CVE-2023-28578 | Improper Input Validation in Services | 9.3 | |
| High | CVE-2024-53027 | Buffer Copy Without Checking Size of Input in WLAN Host | 7.5 | |
| High | CVE-2025-47404 | Buffer Copy Without Checking Size of Input in Automotive Audio | 6.5 | |
| High | CVE-2023-33015 | Buffer Over-read in WLAN Firmware | 7.5 | |
| High | CVE-2025-21454 | Buffer Over-read in WLAN Embedded SW | 7.5 | |
| High | CVE-2025-21446 | Buffer Over-read in WLAN Firmware | 7.5 | |
| High | CVE-2025-21449 | Buffer Over-read in WLAN Embedded SW | 7.5 | |
| High | CVE-2025-27061 | Out-of-bounds Write in Video | 7.8 | |
| High | CVE-2025-27042 | Incorrect Calculation of Buffer Size in Video | 7.8 | |
| High | CVE-2025-27043 | Buffer Copy Without Checking Size of Input in Video | 7.8 | |
| High | CVE-2025-21432 | Double Free in SPS-HLOS | 7.8 | |
| High | CVE-2024-33060 | Use After Free in DSP Service | 8.4 | |
| High | CVE-2023-43555 | Buffer Over-read in Video | 8.2 | |
| High | CVE-2024-49845 | Improper Input Validation in HLOS | 7.8 | |
| High | CVE-2024-45564 | Use After Free in HLOS | 7.8 |