Qualcomm Inc Snapdragon vulnerabilities

CVE-2025-59606 [HIGH] CWE-476 CVE-2025-59606: Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion duri Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.

CVE-2026-24082 [HIGH] CWE-416 CVE-2026-24082: Memory Corruption when copying data from a freed source while executing performance counter deselect Memory Corruption when copying data from a freed source while executing performance counter deselect operation.

CVE-2025-59603 [HIGH] CWE-787 CVE-2025-59603: Memory Corruption when processing invalid user address with nonstandard buffer address. Memory Corruption when processing invalid user address with nonstandard buffer address.

CVE-2025-47375 [HIGH] CWE-416 CVE-2025-47375: Memory corruption while handling different IOCTL calls from the user-space simultaneously. Memory corruption while handling different IOCTL calls from the user-space simultaneously.

CVE-2025-47385 [HIGH] CWE-1262 CVE-2025-47385: Memory Corruption when accessing trusted execution environment without proper privilege check. Memory Corruption when accessing trusted execution environment without proper privilege check.

CVE-2026-25291 [HIGH] CWE-416 CVE-2026-25291: Memory corruption when performing concurrent operations on shared memory page lists due to lack of p Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

CVE-2026-25267 [HIGH] CWE-862 CVE-2026-25267: Memory corruption when non-secure loader rewrites page tables before secure memory initialization. Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

CVE-2022-40536 [HIGH] CWE-285 CVE-2022-40536: Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.

CVE-2022-25678 [CRITICAL] CWE-120 CVE-2022-25678: Memory correction in modem due to buffer overwrite during coap connection Memory correction in modem due to buffer overwrite during coap connection

CVE-2023-33054 [CRITICAL] CWE-287 CVE-2023-33054: Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data. Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.

CVE-2024-33035 [HIGH] CWE-190 CVE-2024-33035: Memory corruption while calculating total metadata size when a very high reserved size is requested Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.

CVE-2022-22063 [HIGH] CWE-787 CVE-2022-22063: Memory corruption in Core due to improper configuration in boot remapper. Memory corruption in Core due to improper configuration in boot remapper.

CVE-2024-21455 [HIGH] CWE-822 CVE-2024-21455: Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a dri Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.

CVE-2024-23380 [HIGH] CWE-416 CVE-2024-23380: Memory corruption while handling user packets during VBO bind operation. Memory corruption while handling user packets during VBO bind operation.

CVE-2024-38402 [HIGH] CWE-416 CVE-2024-38402: Memory corruption while processing IOCTL call for getting group info. Memory corruption while processing IOCTL call for getting group info.

CVE-2023-33088 [HIGH] CWE-476 CVE-2023-33088: Memory corruption when processing cmd parameters while parsing vdev. Memory corruption when processing cmd parameters while parsing vdev.

CVE-2023-28587 [HIGH] CWE-119 CVE-2023-28587: Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI int Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.

CVE-2024-23373 [HIGH] CWE-416 CVE-2024-23373: Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released. Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

CVE-2023-21671 [HIGH] CWE-20 CVE-2023-21671: Memory Corruption in Core during syscall for Sectools Fuse comparison feature. Memory Corruption in Core during syscall for Sectools Fuse comparison feature.

CVE-2023-22383 [HIGH] CWE-416 CVE-2023-22383: Memory Corruption in camera while installing a fd for a particular DMA buffer. Memory Corruption in camera while installing a fd for a particular DMA buffer.