VulnSea

snapdragon_865_5g_mobile_platform_firmware vulnerabilities

CVEs whose affected-version data names the snapdragon_865_5g_mobile_platform_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

8 CVEsRSS

CVE-2026-25302High· 7.1
3w ago

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

▾ Twilightqualcomm · xrv9209_firmwareEPSS 0.06%via NVD
CVE-2026-25273Medium· 6.7
3w ago

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

▾ Sunlitqualcomm · congo_firmwareEPSS 0.07%via NVD
CVE-2026-25270Medium· 6.7
3w ago

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

▾ Sunlitqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.07%via NVD
CVE-2026-25269Medium· 6.7
3w ago

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

▾ Sunlitqualcomm · snapdragon_g1_gen_2_gaming_platform_firmwareEPSS 0.07%via NVD
CVE-2026-25267High· 7.8
3w ago

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

▾ Twilightqualcomm · qca6698au_firmwareEPSS 0.06%via NVD
CVE-2025-47392High· 8.8
7mo ago

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

Memory corruption when decoding corrupted satellite data files with invalid signature offsets.

▾ Twilightqualcomm · 5g_fixed_wireless_access_platform_firmwareEPSS 0.17%via NVD
CVE-2025-21487High· 8.2
1y ago

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

▾ Twilightqualcomm · apq8017_firmwareEPSS 0.26%via NVD
CVE-2025-21484High· 8.2
1y ago

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

▾ Twilightqualcomm · sm8750_firmwareEPSS 0.26%via NVD
snapdragon_865_5g_mobile_platform_firmware vulnerabilities (CVEs) · VulnSea