Qualcomm Snapdragon 4 Gen 1 Firmware vulnerabilities

47 CVEs affecting Qualcomm Snapdragon 4 Gen 1 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-21424, published 2025-03-03.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-33256, published 2023-03-10. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Memory corruption due to improper validation of array index in Multi-mode call processor.
• CVE-2022-40514, published 2023-02-12. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
• CVE-2022-40512, published 2023-02-12. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
• CVE-2022-40535, published 2023-03-10. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS due to buffer over-read in WLAN while sending a packet to device.
• CVE-2022-33272, published 2023-03-10. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS in modem due to reachable assertion.
• CVE-2022-33254, published 2023-03-10. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS due to reachable assertion in Modem while processing SIB1 Message.
• CVE-2022-33250, published 2023-03-10. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.
• CVE-2022-33244, published 2023-03-10. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout
• CVE-2022-33271, published 2023-02-12. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
• CVE-2022-40537, published 2023-03-10. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.

Latest

• CVE-2025-21424, published 2025-03-03. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while calling the NPU driver APIs concurrently.
• CVE-2024-53027, published 2025-03-03. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS may occur while processing the country IE.
• CVE-2024-53024, published 2025-03-03. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption in display driver while detaching a device.
• CVE-2024-53014, published 2025-03-03. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption may occur while validating ports and channels in Audio driver.
• CVE-2024-43051, published 2025-03-03. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure while deriving keys for a session for any Widevine use case.
• CVE-2024-38426, published 2025-03-03. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. While processing the authentication message in UE, improper authentication may lead to information disclosure.
• CVE-2024-33051, published 2024-09-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
• CVE-2024-33050, published 2024-09-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
• CVE-2024-33045, published 2024-09-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when BTFM client sends new messages over Slimbus to ADSP.
• CVE-2024-33042, published 2024-09-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when Alternative Frequency offset value is set to 255.