Qualcomm Snapdragon 450 Mobile Platform Firmware vulnerabilities

9 CVEs affecting Qualcomm Snapdragon 450 Mobile Platform Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-27053, published 2025-10-09.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-33030, published 2024-01-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in HLOS while running playready use-case.
• CVE-2023-33033, published 2024-01-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in Audio during playback with speaker protection.
• CVE-2023-24850, published 2023-10-03. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
• CVE-2023-28546, published 2023-12-05. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption in SPS Application while exporting public key in sorter TA.
• CVE-2024-21461, published 2024-07-01. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while performing finish HMAC operation when context is freed by keymaster.
• CVE-2024-23357, published 2024-08-05. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
• CVE-2025-27053, published 2025-10-09. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption during PlayReady APP usecase while processing TA commands.
• CVE-2025-21482, published 2025-09-24. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue while performing RSA PKCS padding decoding.
• CVE-2023-33110, published 2024-01-02. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event…