Qualcomm Inc Snapdragon vulnerabilities

CVE-2025-47399 [HIGH] CWE-120 CVE-2025-47399: Memory Corruption while processing IOCTL call to update sensor property settings with invalid input Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters.

CVE-2024-23360 [HIGH] CWE-284 CVE-2024-23360: Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers. Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers.

CVE-2024-49841 [HIGH] CWE-390 CVE-2024-49841: Memory corruption during memory assignment to headless peripheral VM due to incorrect error code han Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

CVE-2025-21460 [HIGH] CWE-20 CVE-2025-21460: Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously.

CVE-2025-21467 [HIGH] CWE-787 CVE-2025-21467: Memory corruption while reading the FW response from the shared queue. Memory corruption while reading the FW response from the shared queue.

CVE-2025-21468 [HIGH] CWE-787 CVE-2025-21468: Memory corruption while reading response from FW, when buffer size is changed by FW while driver is Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.

CVE-2025-27044 [HIGH] CWE-787 CVE-2025-27044: Memory corruption while executing timestamp video decode command with large input values. Memory corruption while executing timestamp video decode command with large input values.

CVE-2024-45548 [HIGH] CWE-126 CVE-2024-45548: Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.

CVE-2024-45546 [HIGH] CWE-126 CVE-2024-45546: Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space. Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.

CVE-2025-21425 [HIGH] CWE-284 CVE-2025-21425: Memory corruption may occur due top improper access control in HAB process. Memory corruption may occur due top improper access control in HAB process.

CVE-2025-21486 [HIGH] CWE-822 CVE-2025-21486: Memory corruption during dynamic process creation call when client is only passing address and lengt Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

CVE-2025-47316 [HIGH] CWE-415 CVE-2025-47316: Memory corruption due to double free when multiple threads race to set the timestamp store. Memory corruption due to double free when multiple threads race to set the timestamp store.

CVE-2025-59604 [HIGH] CWE-476 CVE-2025-59604: Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointe Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

CVE-2026-21382 [HIGH] CWE-120 CVE-2026-21382: Memory Corruption when handling power management requests with improperly sized input/output buffers Memory Corruption when handling power management requests with improperly sized input/output buffers.

CVE-2025-47350 [HIGH] CWE-416 CVE-2025-47350: Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.

CVE-2024-53010 [HIGH] CWE-284 CVE-2024-53010: Memory corruption may occur while attaching VM when the HLOS retains access to VM. Memory corruption may occur while attaching VM when the HLOS retains access to VM.

CVE-2025-47343 [HIGH] CWE-822 CVE-2025-47343: Memory corruption while processing a video session to set video parameters. Memory corruption while processing a video session to set video parameters.

CVE-2025-27032 [HIGH] CWE-1257 CVE-2025-27032: memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded withou memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

CVE-2025-21481 [HIGH] CWE-120 CVE-2025-21481: Memory corruption while performing private key encryption in trusted application. Memory corruption while performing private key encryption in trusted application.

CVE-2023-28540 [HIGH] CWE-287 CVE-2023-28540: Cryptographic issue in Data Modem due to improper authentication during TLS handshake. Cryptographic issue in Data Modem due to improper authentication during TLS handshake.