Qualcomm SM8475P Firmware vulnerabilities

83 CVEs affecting Qualcomm SM8475P Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-57554, published 2026-10-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-21385: Qualcomm Multiple Chipsets Memory Corruption Vulnerability, published 2026-03-02. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-03-03. EPSS: 1.3% chance of exploitation in the next 30 days. Memory corruption while using alignments for memory allocation.
CVE-2022-22083, published 2022-06-14. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-22087, published 2022-06-14. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
CVE-2022-25670, published 2022-09-16. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon…
CVE-2022-22086, published 2022-06-14. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
CVE-2021-35083, published 2022-06-14. Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days. Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2022-22096, published 2022-09-02. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile
CVE-2021-35111, published 2022-06-14. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile
CVE-2022-25669, published 2022-09-16. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2022-22091, published 2022-09-16. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

Latest

CVE-2026-57554, published 2026-10-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.
CVE-2026-57545, published 2026-10-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when processing draw objects of incorrect type during graphics command list execution.
CVE-2026-25302, published 2026-10-06. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
CVE-2026-25272, published 2026-10-06. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
CVE-2026-25270, published 2026-10-06. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
CVE-2026-25269, published 2026-10-06. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
CVE-2026-25267, published 2026-10-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
CVE-2026-25263, published 2026-10-06. Medium severity, CVSS 6.6. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
CVE-2026-25275, published 2026-09-17. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS when processing authentication frames with invalid FILS information element header lengths.
CVE-2026-24084, published 2026-08-04. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.