Qualcomm Snapdragon AR1 Gen 1 Platform "luna1" Firmware vulnerabilities

45 CVEs affecting Qualcomm Snapdragon AR1 Gen 1 Platform "luna1" Firmware, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-47396, published 2026-01-07.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-21479: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability, published 2025-06-03. High severity, CVSS 8.6. Actively exploited: in CISA KEV since 2025-06-03. EPSS: 0.8% chance of exploitation in the next 30 days. Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
• CVE-2025-21480: Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability, published 2025-06-03. High severity, CVSS 8.6. Actively exploited: in CISA KEV since 2025-06-03. EPSS: 0.5% chance of exploitation in the next 30 days. Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
• CVE-2025-27066, published 2025-08-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing an ANQP message.
• CVE-2025-21448, published 2025-04-07. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS may occur while parsing SSID in action frames.
• CVE-2025-21434, published 2025-04-07. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
• CVE-2025-21430, published 2025-04-07. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
• CVE-2025-21463, published 2025-06-03. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while processing the EHT operation IE in the received beacon frame.
• CVE-2025-27073, published 2025-08-06. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while creating NDP instance.
• CVE-2025-27065, published 2025-08-06. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while processing a frame with malformed shared-key descriptor.
• CVE-2025-47318, published 2025-09-24. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while parsing the EPTM test control message to get the test pattern.

Latest

• CVE-2025-47396, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption occurs when a secure application is launched on a device with insufficient memory.
• CVE-2025-47369, published 2026-01-07. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
• CVE-2025-47348, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing identity credential operations in the trusted application.
• CVE-2025-47346, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing a secure logging command in the trusted application.
• CVE-2025-47344, published 2026-01-07. Medium severity, CVSS 6.4. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while handling sensor utility operations.
• CVE-2025-47339, published 2026-01-07. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while deinitializing a HDCP session.
• CVE-2025-47337, published 2026-01-07. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while accessing a synchronization object during concurrent operations.
• CVE-2025-47334, published 2026-01-07. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing shared command buffer packet between camera userspace and kernel.
• CVE-2025-47333, published 2026-01-07. Medium severity, CVSS 6.6. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while handling buffer mapping operations in the cryptographic driver.
• CVE-2025-47332, published 2026-01-07. Medium severity, CVSS 6.4. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing a config call from userspace.