threat
engine
.sh
Back
·
··:··
Home
/
Product
/
qualcomm snapdragon ar1 gen 1 platform firmware
Product
qualcomm snapdragon ar1 gen 1 platform firmware
60 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2026-21381
all versions
Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness netwo
7.6
HIGH
CVE-2026-21380
all versions
Memory Corruption when using deprecated DMABUF IOCTL calls to manage video memory.
7.8
HIGH
CVE-2026-21378
all versions
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
7.8
HIGH
CVE-2026-21376
all versions
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver.
7.8
HIGH
CVE-2026-21375
all versions
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
7.8
HIGH
CVE-2026-21374
all versions
Memory Corruption when processing auxiliary sensor input/output control commands with insufficient buffer size validation.
7.8
HIGH
CVE-2026-21373
all versions
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing.
7.8
HIGH
CVE-2025-47391
all versions
Memory corruption while processing a frame request from user.
7.8
HIGH
CVE-2025-47389
all versions
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
7.8
HIGH
CVE-2025-47374
all versions
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.
6.5
MEDIUM
CVE-2026-21385
all versions
Memory corruption while using alignments for memory allocation.
7.8
HIGH
CVE-2025-59600
all versions
Memory Corruption when adding user-supplied data without checking available buffer space.
7.8
HIGH
CVE-2025-47385
all versions
Memory Corruption when accessing trusted execution environment without proper privilege check.
7.8
HIGH
CVE-2025-47378
all versions
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.
7.1
HIGH
CVE-2025-47373
all versions
Memory Corruption when accessing buffers with invalid length during TA invocation.
7.8
HIGH
CVE-2025-47396
all versions
Memory corruption occurs when a secure application is launched on a device with insufficient memory.
7.8
HIGH
CVE-2025-47369
all versions
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.
5.5
MEDIUM
CVE-2025-47348
all versions
Memory corruption while processing identity credential operations in the trusted application.
7.8
HIGH
CVE-2025-47346
all versions
Memory corruption while processing a secure logging command in the trusted application.
7.8
HIGH
CVE-2025-47344
all versions
Memory corruption while handling sensor utility operations.
6.7
MEDIUM
CVE-2025-47339
all versions
Memory corruption while deinitializing a HDCP session.
7.8
HIGH
CVE-2025-47337
all versions
Memory corruption while accessing a synchronization object during concurrent operations.
6.7
MEDIUM
CVE-2025-47334
all versions
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
6.7
MEDIUM
CVE-2025-47333
all versions
Memory corruption while handling buffer mapping operations in the cryptographic driver.
6.6
MEDIUM
CVE-2025-47332
all versions
Memory corruption while processing a config call from userspace.
6.7
MEDIUM
CVE-2025-47331
all versions
Information disclosure while processing a firmware event.
6.1
MEDIUM
CVE-2025-47330
all versions
Transient DOS while parsing video packets received from the video firmware.
5.5
MEDIUM
CVE-2025-47382
all versions
Memory corruption while loading an invalid firmware in boot loader.
7.8
HIGH
CVE-2025-47323
all versions
Memory corruption while routing GPR packets between user and root when handling large data packet.
7.8
HIGH
CVE-2025-47321
all versions
Memory corruption while copying packets received from unix clients.
7.8
HIGH
CVE-2025-47319
all versions
Information disclosure while exposing internal TA-to-TA communication APIs to HLOS
6.7
MEDIUM
CVE-2025-27063
all versions
Memory corruption during video playback when video session open fails with time out error.
7.8
HIGH
CVE-2025-47370
all versions
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.
6.5
MEDIUM
CVE-2025-27070
all versions
Memory corruption while performing encryption and decryption commands.
7.8
HIGH
CVE-2025-27054
all versions
Memory corruption while processing a malformed license file during reboot.
7.8
HIGH
CVE-2025-27053
all versions
Memory corruption during PlayReady APP usecase while processing TA commands.
7.8
HIGH
CVE-2025-47329
all versions
Memory corruption while handling invalid inputs in application info setup.
7.8
HIGH
CVE-2025-47318
all versions
Transient DOS while parsing the EPTM test control message to get the test pattern.
7.5
HIGH
CVE-2025-27032
all versions
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
7.8
HIGH
CVE-2025-21482
all versions
Cryptographic issue while performing RSA PKCS padding decoding.
7.1
HIGH
CVE-2025-27073
all versions
Transient DOS while creating NDP instance.
7.5
HIGH
CVE-2025-27066
all versions
Transient DOS while processing an ANQP message.
7.5
HIGH
CVE-2025-27065
all versions
Transient DOS while processing a frame with malformed shared-key descriptor.
7.5
HIGH
CVE-2025-21465
all versions
Information disclosure while processing the hash segment in an MBN file.
6.5
MEDIUM
CVE-2025-21464
all versions
Information disclosure while reading data from an image using specified offset and size parameters.
6.5
MEDIUM
CVE-2025-21426
all versions
Memory corruption while processing camera TPG write request.
6.6
MEDIUM
CVE-2025-21463
all versions
Transient DOS while processing the EHT operation IE in the received beacon frame.
7.5
HIGH
CVE-2024-53015
all versions
Memory corruption while processing IOCTL command to handle buffers associated with a session.
6.6
MEDIUM
CVE-2024-53010
all versions
Memory corruption may occur while attaching VM when the HLOS retains access to VM.
7.8
HIGH
CVE-2025-21448
all versions
Transient DOS may occur while parsing SSID in action frames.
7.5
HIGH
CVE-2025-21434
all versions
Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
7.5
HIGH
CVE-2025-21430
all versions
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
7.5
HIGH
CVE-2024-49848
all versions
Memory corruption while processing multiple IOCTL calls from HLOS to DSP.
6.7
MEDIUM
CVE-2024-45556
all versions
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
6.5
MEDIUM
CVE-2024-45551
all versions
Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification fai
6.2
MEDIUM
CVE-2024-45549
all versions
Information disclosure while creating MQ channels.
7.7
HIGH
CVE-2024-43065
all versions
Cryptographic issues while generating an asymmetric key pair for RKP use cases.
7.1
HIGH
CVE-2024-43046
all versions
There may be information disclosure during memory re-allocation in TZ Secure OS.
5.5
MEDIUM
CVE-2024-33058
all versions
Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.
7.5
HIGH
CVE-2024-53011
all versions
Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
7.9
HIGH
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin