Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-43545 [HIGH] CWE-190 CVE-2023-43545: Memory corruption when more scan frequency list or channels are sent from the user space. Memory corruption when more scan frequency list or channels are sent from the user space.

CVE-2024-38411 [HIGH] CWE-416 CVE-2024-38411: Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls. Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls.

CVE-2023-43517 [HIGH] CWE-284 CVE-2023-43517: Memory corruption in Automotive Multimedia due to improper access control in HAB. Memory corruption in Automotive Multimedia due to improper access control in HAB.

CVE-2025-47399 [HIGH] CWE-120 CVE-2025-47399: Memory Corruption while processing IOCTL call to update sensor property settings with invalid input Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.

CVE-2025-21486 [HIGH] CWE-822 CVE-2025-21486: Memory corruption during dynamic process creation call when client is only passing address and lengt Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

CVE-2022-40529 [HIGH] CWE-284 CVE-2022-40529: Memory corruption due to improper access control in kernel while processing a mapping request from r Memory corruption due to improper access control in kernel while processing a mapping request from root process.

CVE-2025-21425 [HIGH] CWE-284 CVE-2025-21425: Memory corruption may occur due top improper access control in HAB process. Memory corruption may occur due top improper access control in HAB process.

CVE-2024-23360 [HIGH] CWE-284 CVE-2024-23360: Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers. Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers.

CVE-2025-21458 [HIGH] CWE-416 CVE-2025-21458: Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously. Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.

CVE-2025-27061 [HIGH] CWE-787 CVE-2025-27061: Memory corruption whhile handling the subsystem failure memory during the parsing of video packets r Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.

CVE-2025-27044 [HIGH] CWE-787 CVE-2025-27044: Memory corruption while executing timestamp video decode command with large input values. Memory corruption while executing timestamp video decode command with large input values.

CVE-2025-27058 [HIGH] CWE-120 CVE-2025-27058: Memory corruption while processing packet data with exceedingly large packet. Memory corruption while processing packet data with exceedingly large packet.

CVE-2025-47317 [HIGH] CWE-126 CVE-2025-47317: Memory corruption due to global buffer overflow when a test command uses an invalid payload type. Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

CVE-2025-21476 [HIGH] CWE-120 CVE-2025-21476: Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake. Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

CVE-2024-45548 [HIGH] CWE-126 CVE-2024-45548: Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.

CVE-2024-45546 [HIGH] CWE-126 CVE-2024-45546: Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space. Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.

CVE-2025-47350 [HIGH] CWE-416 CVE-2025-47350: Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.

CVE-2024-53010 [HIGH] CWE-284 CVE-2024-53010: Memory corruption may occur while attaching VM when the HLOS retains access to VM. Memory corruption may occur while attaching VM when the HLOS retains access to VM.

CVE-2025-21466 [HIGH] CWE-416 CVE-2025-21466: Memory corruption while processing a private escape command in an event trigger. Memory corruption while processing a private escape command in an event trigger.

CVE-2025-47343 [HIGH] CWE-822 CVE-2025-47343: Memory corruption while processing a video session to set video parameters. Memory corruption while processing a video session to set video parameters.