Qualcomm Inc Snapdragon vulnerabilities

CVE-2024-45563 [HIGH] CWE-787 CVE-2024-45563: Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.

CVE-2024-45581 [HIGH] CWE-787 CVE-2024-45581: Memory corruption while sound model registration for voice activation with audio kernel driver. Memory corruption while sound model registration for voice activation with audio kernel driver.

CVE-2024-33044 [HIGH] CWE-129 CVE-2024-33044: Memory corruption while Configuring the SMR/S2CR register in Bypass mode. Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

CVE-2024-33056 [HIGH] CWE-126 CVE-2024-33056: Memory corruption when allocating and accessing an entry in an SMEM partition continuously. Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

CVE-2024-33034 [HIGH] CWE-416 CVE-2024-33034: Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.

CVE-2024-49841 [HIGH] CWE-390 CVE-2024-49841: Memory corruption during memory assignment to headless peripheral VM due to incorrect error code han Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

CVE-2025-21460 [HIGH] CWE-20 CVE-2025-21460: Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously.

CVE-2024-45573 [HIGH] CWE-823 CVE-2024-45573: Memory corruption may occour while generating test pattern due to negative indexing of display ID. Memory corruption may occour while generating test pattern due to negative indexing of display ID.

CVE-2024-45571 [HIGH] CWE-416 CVE-2024-45571: Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command f Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.

CVE-2024-38420 [HIGH] CWE-20 CVE-2024-38420: Memory corruption while configuring a Hypervisor based input virtual device. Memory corruption while configuring a Hypervisor based input virtual device.

CVE-2024-45584 [HIGH] CWE-822 CVE-2024-45584: Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspa Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.

CVE-2024-43048 [HIGH] CWE-121 CVE-2024-43048: Memory corruption when invalid input is passed to invoke GPU Headroom API call. Memory corruption when invalid input is passed to invoke GPU Headroom API call.

CVE-2024-43052 [HIGH] CWE-20 CVE-2024-43052: Memory corruption while processing API calls to NPU with invalid input. Memory corruption while processing API calls to NPU with invalid input.

CVE-2024-38415 [HIGH] CWE-416 CVE-2024-38415: Memory corruption while handling session errors from firmware. Memory corruption while handling session errors from firmware.

CVE-2024-38410 [HIGH] CWE-121 CVE-2024-38410: Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer m Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

CVE-2024-33038 [HIGH] CWE-822 CVE-2024-33038: Memory corruption while passing untrusted/corrupted pointers from DSP to EVA. Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.

CVE-2024-23368 [HIGH] CWE-120 CVE-2024-23368: Memory corruption when allocating and accessing an entry in an SMEM partition. Memory corruption when allocating and accessing an entry in an SMEM partition.

CVE-2023-43542 [HIGH] CWE-120 CVE-2023-43542: Memory corruption while copying a keyblob`s material when the key material`s size is not accurately Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.

CVE-2025-21467 [HIGH] CWE-787 CVE-2025-21467: Memory corruption while reading the FW response from the shared queue. Memory corruption while reading the FW response from the shared queue.

CVE-2025-21468 [HIGH] CWE-787 CVE-2025-21468: Memory corruption while reading response from FW, when buffer size is changed by FW while driver is Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.