Qualcomm Snapdragon 8cx Gen 2 5g Compute Platform (sc8180x-ac) Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Qualcomm Snapdragon 8cx Gen 2 5g Compute Platform (sc8180x-ac) Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (30)

• CVE-2024-33065 — CVSS 8.4 (high): Memory corruption while taking snapshot when an offset variable is set by camera driver.
• CVE-2024-21481 — CVSS 8.4 (high): Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
• CVE-2024-23359 — CVSS 8.2 (high): Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.
• CVE-2025-47387 — CVSS 7.8 (high): Memory Corruption when processing IOCTLs for JPEG data without verification.
• CVE-2025-21439 — CVSS 7.8 (high): Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
• CVE-2025-21440 — CVSS 7.8 (high): Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
• CVE-2025-21441 — CVSS 7.8 (high): Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
• CVE-2025-21481 — CVSS 7.8 (high): Memory corruption while performing private key encryption in trusted application.
• CVE-2025-27032 — CVSS 7.8 (high): memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
• CVE-2025-27053 — CVSS 7.8 (high): Memory corruption during PlayReady APP usecase while processing TA commands.
• CVE-2025-27054 — CVSS 7.8 (high): Memory corruption while processing a malformed license file during reboot.
• CVE-2025-27075 — CVSS 7.8 (high): Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.
• CVE-2025-27076 — CVSS 7.8 (high): Memory corruption while processing simultaneous requests via escape path.
• CVE-2025-47316 — CVSS 7.8 (high): Memory corruption due to double free when multiple threads race to set the timestamp store.
• CVE-2025-47327 — CVSS 7.8 (high): Memory corruption while encoding the image data.
• CVE-2024-53010 — CVSS 7.8 (high): Memory corruption may occur while attaching VM when the HLOS retains access to VM.
• CVE-2025-21421 — CVSS 7.8 (high): Memory corruption while processing escape code in API.
• CVE-2025-21423 — CVSS 7.8 (high): Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.
• CVE-2025-21438 — CVSS 7.8 (high): Memory corruption while IOCTL call is invoked from user-space to read board data.
• CVE-2024-23353 — CVSS 7.5 (high): Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
• CVE-2024-33058 — CVSS 7.5 (high): Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.
• CVE-2025-21448 — CVSS 7.5 (high): Transient DOS may occur while parsing SSID in action frames.
• CVE-2025-27066 — CVSS 7.5 (high): Transient DOS while processing an ANQP message.
• CVE-2025-47318 — CVSS 7.5 (high): Transient DOS while parsing the EPTM test control message to get the test pattern.
• CVE-2024-23362 — CVSS 7.1 (high): Cryptographic issue while parsing RSA keys in COBR format.
• CVE-2025-21482 — CVSS 7.1 (high): Cryptographic issue while performing RSA PKCS padding decoding.
• CVE-2024-33016 — CVSS 6.8 (medium): memory corruption when an invalid firehose patch command is invoked.
• CVE-2025-21465 — CVSS 6.5 (medium): Information disclosure while processing the hash segment in an MBN file.
• CVE-2025-21464 — CVSS 6.5 (medium): Information disclosure while reading data from an image using specified offset and size parameters.
• CVE-2024-43046 — CVSS 5.5 (medium): There may be information disclosure during memory re-allocation in TZ Secure OS.