# Qualcomm Snapdragon Ar1 Gen 1 Platform Firmware


- [CVE-2026-21385](https://insights.sbomify.com/CVE-2026-21385/): Qualcomm Multiple Chipsets Memory Corruption (high 7.8, exploited in the wild)
- [CVE-2026-25289](https://insights.sbomify.com/CVE-2026-25289/): Stack-based Buffer Overflow in WLAN Firmware (critical 9.6)
- [CVE-2026-25276](https://insights.sbomify.com/CVE-2026-25276/): Improper Validation of Array Index in Secure Processor (high 8.8)
- [CVE-2026-25277](https://insights.sbomify.com/CVE-2026-25277/): Buffer Copy Without Checking Size of Input in Secure Processor (high 8.8)
- [CVE-2026-24088](https://insights.sbomify.com/CVE-2026-24088/): Missing Authentication for Critical Function in Boot (high 8.2)
- [CVE-2024-53011](https://insights.sbomify.com/CVE-2024-53011/): Permissions, Privileges, and Access Controls in Video Analytics and Processing (high 7.9)
- [CVE-2026-25291](https://insights.sbomify.com/CVE-2026-25291/): Use After Free in Graphics (high 7.8)
- [CVE-2026-57537](https://insights.sbomify.com/CVE-2026-57537/): Use After Free in DSP Service (high 7.8)
- [CVE-2026-57545](https://insights.sbomify.com/CVE-2026-57545/): Untrusted Pointer Dereference in Graphics (high 7.8)
- [CVE-2026-57554](https://insights.sbomify.com/CVE-2026-57554/): Use After Free in DSP Service (high 7.8)
- [CVE-2025-59604](https://insights.sbomify.com/CVE-2025-59604/): NULL Pointer Dereference in SPS Applications (high 7.8)
- [CVE-2025-59605](https://insights.sbomify.com/CVE-2025-59605/): Out-of-bounds Write in HLOS (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/products/qualcomm/snapdragon-ar1-gen-1-platform-firmware/