Qualcomm Snapdragon 712 Mobile Platform Firmware vulnerabilities

34 CVEs affecting Qualcomm Snapdragon 712 Mobile Platform Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-27053, published 2025-10-09.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-22385, published 2023-10-03. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
• CVE-2023-24847, published 2023-10-03. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS in Modem while allocating DSM items.
• CVE-2023-24849, published 2023-10-03. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
• CVE-2023-24848, published 2023-10-03. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
• CVE-2023-22388, published 2023-11-07. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Memory Corruption in Multi-mode Call Processor while processing bit mask API.
• CVE-2024-23353, published 2024-08-05. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
• CVE-2023-33109, published 2024-01-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
• CVE-2023-33062, published 2024-01-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS in WLAN Firmware while parsing a BTM request.
• CVE-2023-43536, published 2024-02-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parse fils IE with length equal to 1.
• CVE-2023-43533, published 2024-02-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.

Latest

• CVE-2025-27053, published 2025-10-09. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption during PlayReady APP usecase while processing TA commands.
• CVE-2025-27066, published 2025-08-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing an ANQP message.
• CVE-2025-21465, published 2025-08-06. Medium severity, CVSS 6.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure while processing the hash segment in an MBN file.
• CVE-2024-33056, published 2024-12-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
• CVE-2024-33016, published 2024-09-02. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. memory corruption when an invalid firehose patch command is invoked.
• CVE-2024-21461, published 2024-07-01. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while performing finish HMAC operation when context is freed by keymaster.
• CVE-2023-43511, published 2024-01-02. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.