Product by Qualcomm
Snapdragon Xr2\+ Gen 1 Platform Firmware
154 known vulnerabilities in Snapdragon Xr2\+ Gen 1 Platform Firmware (Qualcomm), 4 of them actively exploited (CISA KEV).
Key figures
154
Vulnerabilities
4
Actively exploited (KEV)
0
Used by ransomware
13
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-21385 | Integer Overflow or Wraparound in Graphics In CISA KEValso in 231 other products | 7.8 | |
| Critical | CVE-2023-33106 | Use of Out-of-range Pointer Offset in Graphics In CISA KEValso in 148 other products | 8.4 | |
| Critical | CVE-2023-33107 | Integer Overflow or Wraparound in Graphics Linux In CISA KEValso in 237 other products | 8.4 | |
| Critical | CVE-2023-33063 | Use After Free in DSP Services In CISA KEValso in 281 other products | 7.8 | |
| High | CVE-2022-40507 | Double free in Core | 8.4 | |
| High | CVE-2026-25275 | Buffer Over-read in WLAN Firmware | 7.5 | |
| Critical | CVE-2025-21483 | Qualcomm Snapdragon: Improper Restriction of Operations within the Bounds of a Memory Buffer | 9.8 | |
| High | CVE-2026-25267 | Missing Authorization in Core | 7.8 | |
| High | CVE-2026-25302 | Improper Verification of Cryptographic Signature in Boot | 7.1 | |
| Medium | CVE-2026-25273 | Out-of-bounds Write in Camera Driver | 6.7 | |
| Medium | CVE-2026-25269 | Out-of-bounds Write in Camera Driver | 6.7 | |
| Medium | CVE-2026-25270 | Out-of-bounds Write in Camera Driver | 6.7 | |
| Medium | CVE-2026-25272 | Out-of-bounds Write in Camera Driver | 6.7 | |
| Medium | CVE-2026-25263 | Out of Bounds write in Linux Camera | 6.6 | |
| High | CVE-2026-25277 | Buffer Copy Without Checking Size of Input in Secure Processor | 8.8 | |
| High | CVE-2026-25276 | Improper Validation of Array Index in Secure Processor | 8.8 | |
| High | CVE-2025-59603 | Out-of-bounds Write in Computer Vision | 7.8 | |
| High | CVE-2026-25292 | Improper Validation of Syntactic Correctness of Input in Automotive Linux OS | 7.6 | |
| High | CVE-2026-24088 | Missing Authentication for Critical Function in Boot | 8.2 | |
| High | CVE-2023-28588 | Integer Overflow or Wraparound in Bluetooth Host | 7.5 | |
| High | CVE-2026-25260 | Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service | 7.8 | |
| High | CVE-2026-25259 | Out-of-bounds Write in DSP Service | 7.8 | |
| High | CVE-2025-59605 | Out-of-bounds Write in HLOS | 7.8 | |
| High | CVE-2025-59604 | NULL Pointer Dereference in SPS Applications | 7.8 | |
| Critical | CVE-2023-33054 | Improper Authentication in GPS HLOS Driver | 9.1 |