Qualcomm Snapdragon x32 5g Modem-Rf Firmware vulnerabilities

21 CVEs affecting Qualcomm Snapdragon x32 5g Modem-Rf Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-24082, published 2026-05-04.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-21450, published 2025-07-08. Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days. Cryptographic issue occurs due to use of insecure connection method while downloading.
• CVE-2025-21454, published 2025-07-08. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while processing received beacon frame.
• CVE-2025-21449, published 2025-07-08. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS may occur while processing malformed length field in SSID IEs.
• CVE-2025-21446, published 2025-07-08. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
• CVE-2025-47401, published 2026-05-04. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS when processing target power rate tables during channel configuration.
• CVE-2025-21453, published 2025-05-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
• CVE-2024-49845, published 2025-05-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption during the FRS UDS generation process.
• CVE-2024-49844, published 2025-05-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while triggering commands in the PlayReady Trusted application.
• CVE-2024-49841, published 2025-05-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
• CVE-2024-49835, published 2025-05-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while reading secure file.

Latest

• CVE-2026-24082, published 2026-05-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
• CVE-2025-47404, published 2026-05-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
• CVE-2025-47366, published 2026-02-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
• CVE-2025-27052, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing data packets in diag received from Unix clients.
• CVE-2025-27043, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing manipulated payload in video firmware.
• CVE-2025-27042, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing video packets received from video firmware.