Qualcomm Inc Snapdragon vulnerabilities

CVE-2024-33034 [HIGH] CWE-416 CVE-2024-33034: Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.

CVE-2024-43048 [HIGH] CWE-121 CVE-2024-43048: Memory corruption when invalid input is passed to invoke GPU Headroom API call. Memory corruption when invalid input is passed to invoke GPU Headroom API call.

CVE-2024-43052 [HIGH] CWE-20 CVE-2024-43052: Memory corruption while processing API calls to NPU with invalid input. Memory corruption while processing API calls to NPU with invalid input.

CVE-2024-38415 [HIGH] CWE-416 CVE-2024-38415: Memory corruption while handling session errors from firmware. Memory corruption while handling session errors from firmware.

CVE-2024-38419 [HIGH] CWE-416 CVE-2024-38419: Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

CVE-2024-38410 [HIGH] CWE-121 CVE-2024-38410: Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer m Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

CVE-2024-33038 [HIGH] CWE-822 CVE-2024-33038: Memory corruption while passing untrusted/corrupted pointers from DSP to EVA. Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.

CVE-2024-23368 [HIGH] CWE-120 CVE-2024-23368: Memory corruption when allocating and accessing an entry in an SMEM partition. Memory corruption when allocating and accessing an entry in an SMEM partition.

CVE-2023-43545 [HIGH] CWE-190 CVE-2023-43545: Memory corruption when more scan frequency list or channels are sent from the user space. Memory corruption when more scan frequency list or channels are sent from the user space.

CVE-2024-45573 [HIGH] CWE-823 CVE-2024-45573: Memory corruption may occour while generating test pattern due to negative indexing of display ID. Memory corruption may occour while generating test pattern due to negative indexing of display ID.

CVE-2024-49832 [HIGH] CWE-129 CVE-2024-49832: Memory corruption in Camera due to unusually high number of nodes passed to AXI port. Memory corruption in Camera due to unusually high number of nodes passed to AXI port.

CVE-2024-45571 [HIGH] CWE-416 CVE-2024-45571: Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command f Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.

CVE-2024-38420 [HIGH] CWE-20 CVE-2024-38420: Memory corruption while configuring a Hypervisor based input virtual device. Memory corruption while configuring a Hypervisor based input virtual device.

CVE-2024-45584 [HIGH] CWE-822 CVE-2024-45584: Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspa Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.

CVE-2023-43517 [HIGH] CWE-284 CVE-2023-43517: Memory corruption in Automotive Multimedia due to improper access control in HAB. Memory corruption in Automotive Multimedia due to improper access control in HAB.

CVE-2024-45579 [HIGH] CWE-20 CVE-2024-45579: Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.

CVE-2024-38411 [HIGH] CWE-416 CVE-2024-38411: Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls. Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls.

CVE-2024-45563 [HIGH] CWE-787 CVE-2024-45563: Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.

CVE-2024-45581 [HIGH] CWE-787 CVE-2024-45581: Memory corruption while sound model registration for voice activation with audio kernel driver. Memory corruption while sound model registration for voice activation with audio kernel driver.

CVE-2025-21442 [HIGH] CWE-680 CVE-2025-21442: Memory corruption while transmitting packet mapping information with invalid header payload size. Memory corruption while transmitting packet mapping information with invalid header payload size.