snapdragon_x55_5g_modem-rf_system_firmware vulnerabilities
CVEs whose affected-version data names the snapdragon_x55_5g_modem-rf_system_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
9 CVEsRSS
CVE-2026-25263Medium· 6.6Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2025-47392High· 8.8Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
Memory corruption when decoding corrupted satellite data files with invalid signature offsets.
CVE-2025-47389High· 7.8Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2025-47369Medium· 5.5Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
CVE-2025-47333Medium· 6.6Memory corruption while handling buffer mapping operations in the cryptographic driver.
Memory corruption while handling buffer mapping operations in the cryptographic driver.
CVE-2025-47331Medium· 6.1Information disclosure while processing a firmware event.
Information disclosure while processing a firmware event.
CVE-2025-47330Medium· 5.5Transient DOS while parsing video packets received from the video firmware.
Transient DOS while parsing video packets received from the video firmware.
CVE-2025-21487High· 8.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
CVE-2025-21482High· 7.1Cryptographic issue while performing RSA PKCS padding decoding.
Cryptographic issue while performing RSA PKCS padding decoding.