📦 Snapdragon 845 Mobile Platform Firmware

by Qualcomm

🔍 What is Snapdragon 845 Mobile Platform Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-21483

CRITICAL CVSS 9.8 Sep 24, 2025

This vulnerability allows memory corruption when a user equipment (UE) device receives RTP packets during NALU reassembly, potentially leading to remote code execution. It affects Qualcomm chipsets us...

CVE-2023-33072

CRITICAL CVSS 9.3 Feb 6, 2024

This CVE describes a memory corruption vulnerability in Qualcomm Core components that could allow attackers to execute arbitrary code or cause denial of service. It affects devices using vulnerable Qu...

CVE-2025-27053

HIGH CVSS 7.8 Oct 9, 2025

This vulnerability allows memory corruption in Qualcomm's PlayReady APP implementation when processing TA commands, potentially enabling arbitrary code execution. It affects devices with Qualcomm chip...

CVE-2025-27032

HIGH CVSS 7.8 Sep 24, 2025

This vulnerability allows memory corruption when loading a PIL authenticated VM image without proper cache coherency maintenance. Attackers could potentially execute arbitrary code or cause denial of ...

CVE-2025-21487

HIGH CVSS 8.2 Sep 24, 2025

This vulnerability allows attackers to read sensitive information from memory when User Equipment (UE) processes malformed RTP packets with manipulated payload length fields. It affects devices using ...

CVE-2024-53021

HIGH CVSS 8.2 Jun 3, 2025

This vulnerability allows information disclosure when processing RTCP goodbye packets in Qualcomm products. Attackers can exploit this to leak sensitive data from affected systems. Primarily impacts d...

CVE-2024-45552

HIGH CVSS 8.2 Apr 7, 2025

This vulnerability allows information disclosure during video calls when a device receives a malformed RTCP packet that doesn't conform to RFC standards, causing the device to reset. It affects device...

CVE-2024-43066

HIGH CVSS 7.8 Apr 7, 2025

This CVE describes a use-after-free vulnerability (CWE-416) in Qualcomm components that occurs during file descriptor handling in listener registration/deregistration processes. Successful exploitatio...

CVE-2024-33058

HIGH CVSS 7.5 Apr 7, 2025

This CVE describes a memory corruption vulnerability in Qualcomm's ADSP (Audio Digital Signal Processor) when handling memory allocation from the HLOS (High-Level Operating System) DDR memory. Attacke...

CVE-2024-33044

HIGH CVSS 8.4 Dec 2, 2024

This vulnerability allows memory corruption when configuring SMR/S2CR registers in Bypass mode on Qualcomm chipsets. Attackers could potentially execute arbitrary code or cause denial of service. Affe...

CVE-2024-33056

HIGH CVSS 8.4 Dec 2, 2024

CVE-2024-33056 is a memory corruption vulnerability in Qualcomm's Shared Memory (SMEM) subsystem that allows attackers to potentially execute arbitrary code or cause denial of service. This affects de...

CVE-2024-38423

HIGH CVSS 7.8 Nov 4, 2024

This vulnerability allows memory corruption during GPU page table switching in Qualcomm GPU drivers. Attackers could potentially execute arbitrary code or cause denial of service. Affects devices usin...

CVE-2024-23362

HIGH CVSS 7.1 Sep 2, 2024

This vulnerability involves a cryptographic issue in RSA key parsing in COBR format, potentially allowing attackers to bypass cryptographic protections or cause denial of service. It affects systems u...

CVE-2024-33014

HIGH CVSS 7.5 Aug 5, 2024

This vulnerability allows an attacker to cause a Denial of Service (DoS) by sending specially crafted beacon or probe response frames containing malformed ESP IE (Extended Service Period Information E...

CVE-2024-23373

HIGH CVSS 8.4 Jul 1, 2024

This vulnerability allows memory corruption when IOMMU unmap operations fail, leading to improper release of DMA and anonymous buffers. It affects systems using Qualcomm chipsets with vulnerable IOMMU...

CVE-2024-21469

HIGH CVSS 7.3 Jul 1, 2024

This vulnerability involves memory corruption when an invoke call and a TEE (Trusted Execution Environment) call target the same trusted application simultaneously. It affects devices with Qualcomm ch...

CVE-2024-23368

HIGH CVSS 7.8 Jul 1, 2024

This CVE describes a memory corruption vulnerability in Qualcomm's Shared Memory (SMEM) subsystem that could allow attackers to execute arbitrary code or cause denial of service. The vulnerability aff...

CVE-2024-21462

HIGH CVSS 7.1 Jul 1, 2024

This vulnerability allows a denial-of-service attack when loading Trusted Application (TA) ELF files on Qualcomm chipsets. It affects devices using Qualcomm processors with vulnerable firmware. Attack...

CVE-2023-43536

HIGH CVSS 7.5 Feb 6, 2024

This vulnerability in Qualcomm components allows a denial-of-service (DoS) attack when parsing files with specific length characteristics. It affects devices using vulnerable Qualcomm chipsets, potent...

CVE-2023-43513

HIGH CVSS 7.8 Feb 6, 2024

This vulnerability allows memory corruption in Qualcomm hardware components when processing event rings, where an untrusted context read pointer can be manipulated to point to arbitrary memory locatio...

CVE-2023-43519

HIGH CVSS 7.3 Feb 6, 2024

This vulnerability allows memory corruption in video processing when parsing Videoinfo atoms with sizes larger than expected. Attackers could potentially execute arbitrary code or cause denial of serv...

CVE-2023-43511

HIGH CVSS 7.5 Jan 2, 2024

This vulnerability allows attackers to cause a denial-of-service (DoS) condition in Qualcomm WLAN firmware by sending specially crafted IPv6 packets with IPPROTO_NONE as the next header in extension h...

CVE-2023-33110

HIGH CVSS 7.8 Jan 2, 2024

This CVE describes a race condition vulnerability in Qualcomm's PCM host voice audio driver where improper session index handling during event callbacks and PCM close operations can lead to memory cor...

CVE-2023-33036

HIGH CVSS 7.1 Jan 2, 2024

This vulnerability allows an untrusted virtual machine without Power State Coordination Interface (PSCI) support to make a PSCI call, causing a permanent denial-of-service condition in the hypervisor....

CVE-2023-33070

HIGH CVSS 7.1 Dec 5, 2023

CVE-2023-33070 is a vulnerability in Qualcomm Automotive OS where improper authentication to secure IO calls allows attackers to cause a transient denial-of-service condition. This affects automotive ...

CVE-2023-33017

HIGH CVSS 7.8 Dec 5, 2023

This CVE describes a memory corruption vulnerability in the UEFI boot process when running a ListVars test during boot. It affects Qualcomm devices with vulnerable firmware, potentially allowing attac...

CVE-2023-28551

HIGH CVSS 7.8 Dec 5, 2023

This vulnerability allows memory corruption in Qualcomm modem UTILS when processing Diag commands with arbitrary address values. Attackers could potentially execute arbitrary code or cause denial of s...

CVE-2023-28585

HIGH CVSS 8.2 Dec 5, 2023

This vulnerability allows memory corruption while loading ELF segments in the Trusted Execution Environment (TEE) kernel. Attackers could potentially execute arbitrary code in the TEE, compromising se...

CVE-2023-28587

HIGH CVSS 7.8 Dec 5, 2023

This vulnerability allows memory corruption in Qualcomm Bluetooth controllers when parsing specific debug commands at the HCI interface level. Attackers could potentially execute arbitrary code or cau...

CVE-2023-28546

HIGH CVSS 7.8 Dec 5, 2023

This vulnerability allows memory corruption in Qualcomm's SPS application when exporting public keys in the sorter TA. Attackers could potentially execute arbitrary code or cause denial of service on ...

CVE-2023-24852

HIGH CVSS 8.4 Nov 7, 2023

This vulnerability allows memory corruption in Qualcomm's Core due to improper secure memory access while loading modem images. Attackers could potentially execute arbitrary code or cause denial of se...

CVE-2023-24848

HIGH CVSS 8.2 Oct 3, 2023

This vulnerability allows information disclosure in Qualcomm data modems during VoLTE calls when an undefined RTCP FB line value is processed. Attackers could potentially access sensitive information ...

CVE-2023-22385

HIGH CVSS 8.2 Oct 3, 2023

This vulnerability allows memory corruption in Qualcomm data modem chipsets during mobile-originated or mobile-terminated VoLTE calls. Attackers could potentially execute arbitrary code or cause denia...

CVE-2023-28544

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm WLAN firmware when sending transmit commands from the host operating system to UTF handlers. Attackers could potentially execute arbitrary code ...

CVE-2023-28558

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in Qualcomm WLAN handlers when processing PhyID in Tx status handlers. It affects devices with Qualcomm chipsets that handle wireless networking. Attackers ...

CVE-2023-28560

HIGH CVSS 7.8 Sep 5, 2023

This vulnerability allows memory corruption in the WLAN Hardware Abstraction Layer (HAL) when processing devIndex values from untrusted WMI payloads. Attackers could potentially execute arbitrary code...

CVE-2022-40529

HIGH CVSS 7.1 Jun 6, 2023

This vulnerability allows memory corruption in the Qualcomm kernel due to improper access control when processing mapping requests from root processes. It affects devices with Qualcomm chipsets, poten...

CVE-2023-21628

HIGH CVSS 8.4 Jun 6, 2023

This vulnerability allows memory corruption in Qualcomm's WLAN Hardware Abstraction Layer (HAL) when processing specific wireless commands. Attackers could potentially execute arbitrary code or cause ...

CVE-2025-21464

MEDIUM CVSS 6.5 Aug 6, 2025

This vulnerability allows attackers to read sensitive information from image processing operations by manipulating offset and size parameters. It affects systems using Qualcomm components with vulnera...

CVE-2025-21465

MEDIUM CVSS 6.5 Aug 6, 2025

This vulnerability allows attackers to read sensitive information from memory when processing specially crafted MBN files. It affects systems using Qualcomm chipsets that process MBN files, potentiall...