Qualcomm Snapdragon x72 5g Modem-Rf Firmware vulnerabilities

50 CVEs affecting Qualcomm Snapdragon x72 5g Modem-Rf Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-24082, published 2026-05-04.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-45569, published 2025-02-03. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Memory corruption while parsing the ML IE due to invalid frame content.
• CVE-2024-45558, published 2025-01-06. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
• CVE-2025-21459, published 2025-05-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parsing per STA profile in ML IE.
• CVE-2024-21477, published 2024-05-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
• CVE-2023-43529, published 2024-05-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
• CVE-2025-21450, published 2025-07-08. Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days. Cryptographic issue occurs due to use of insecure connection method while downloading.
• CVE-2024-49838, published 2025-02-03. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Information disclosure while parsing the OCI IE with invalid length.
• CVE-2024-49839, published 2025-02-03. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Memory corruption during management frame processing due to mismatch in T2LM info element.
• CVE-2024-21480, published 2024-05-06. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Memory corruption while playing audio file having large-sized input buffer.
• CVE-2024-49847, published 2025-05-06. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.

Latest

• CVE-2026-24082, published 2026-05-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory Corruption when copying data from a freed source while executing performance counter deselect operation.
• CVE-2025-47404, published 2026-05-04. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.
• CVE-2025-47403, published 2026-05-04. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.
• CVE-2025-47401, published 2026-05-04. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS when processing target power rate tables during channel configuration.
• CVE-2025-47402, published 2026-02-02. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS when processing a received frame with an excessively large authentication information element.
• CVE-2025-47366, published 2026-02-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.
• CVE-2025-27057, published 2025-07-08. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Transient DOS while handling beacon frames with invalid IE header length.
• CVE-2025-27052, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing data packets in diag received from Unix clients.
• CVE-2025-27043, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing manipulated payload in video firmware.
• CVE-2025-27042, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Memory corruption while processing video packets received from video firmware.