Snapdragon vulnerabilities
CVEs whose affected-version data names the Snapdragon package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2025-21473High· 7.8Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
Memory corruption when using Virtual cdm (Camera Data Mover) to write registers.
▾ TwilightQualcomm, Inc. · SnapdragonEPSS 0.07%via CVEORG
CVE-2025-21461High· 7.8Out-of-bounds Write in Camera_Linux
Memory corruption when programming registers through virtual CDM.
▾ TwilightQualcomm, Inc. · SnapdragonEPSS 0.09%via CVEORG
CVE-2025-21456High· 7.8Use After Free in NPU
Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
▾ TwilightQualcomm, Inc. · SnapdragonEPSS 0.09%via CVEORG
CVE-2025-21428High· 7.5Buffer Over-read in WLAN Host
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
▾ TwilightQualcomm, Inc. · SnapdragonEPSS 0.26%via CVEORG