Qualcomm SAR2230P Firmware vulnerabilities

5 CVEs affecting Qualcomm SAR2230P Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21385, published 2026-03-02.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-21385: Qualcomm Multiple Chipsets Memory Corruption Vulnerability, published 2026-03-02. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-03-03. EPSS: 1.3% chance of exploitation in the next 30 days. Memory corruption while using alignments for memory allocation.
• CVE-2025-59600, published 2026-03-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when adding user-supplied data without checking available buffer space.
• CVE-2025-47373, published 2026-03-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when accessing buffers with invalid length during TA invocation.
• CVE-2025-47378, published 2026-03-02. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.
• CVE-2025-47385, published 2026-03-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when accessing trusted execution environment without proper privilege check.