Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-21634 [HIGH] CWE-119 CVE-2023-21634: Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

CVE-2023-33071 [HIGH] CWE-284 CVE-2023-33071: Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functional Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.

CVE-2023-28574 [HIGH] CWE-20 CVE-2023-28574: Memory corruption in core services when Diag handler receives a command to configure event listeners Memory corruption in core services when Diag handler receives a command to configure event listeners.

CVE-2024-45542 [HIGH] CWE-121 CVE-2024-45542: Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

CVE-2024-33041 [HIGH] CWE-823 CVE-2024-33041: Memory corruption when input parameter validation for number of fences is missing for fence frame IO Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,

CVE-2024-23372 [HIGH] CWE-190 CVE-2024-23372: Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.

CVE-2024-21476 [HIGH] CWE-20 CVE-2024-21476: Memory corruption when the channel ID passed by user is not validated and further used. Memory corruption when the channel ID passed by user is not validated and further used.

CVE-2024-33054 [HIGH] CWE-120 CVE-2024-33054: Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machi Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.

CVE-2024-53031 [HIGH] CWE-20 CVE-2024-53031: Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine. Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.

CVE-2024-53014 [HIGH] CWE-129 CVE-2024-53014: Memory corruption may occur while validating ports and channels in Audio driver. Memory corruption may occur while validating ports and channels in Audio driver.

CVE-2023-24852 [HIGH] CWE-287 CVE-2023-24852: Memory Corruption in Core due to secure memory access by user while loading modem image. Memory Corruption in Core due to secure memory access by user while loading modem image.

CVE-2023-28578 [HIGH] CWE-20 CVE-2023-28578: Memory corruption in Core Services while executing the command for removing a single event listener. Memory corruption in Core Services while executing the command for removing a single event listener.

CVE-2023-33030 [HIGH] CWE-120 CVE-2023-33030: Memory corruption in HLOS while running playready use-case. Memory corruption in HLOS while running playready use-case.

CVE-2022-33260 [HIGH] CWE-121 CVE-2022-33260: Memory corruption due to stack based buffer overflow in core while sending command from USB of large Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.

CVE-2023-33108 [HIGH] CWE-416 CVE-2023-33108: Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE ob Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.

CVE-2023-33113 [HIGH] CWE-120 CVE-2023-33113: Memory corruption when resource manager sends the host kernel a reply message with multiple fragment Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.

CVE-2023-28550 [HIGH] CWE-119 CVE-2023-28550: Memory corruption in MPP performance while accessing DSM watermark using external memory address. Memory corruption in MPP performance while accessing DSM watermark using external memory address.

CVE-2022-25746 [HIGH] CWE-120 CVE-2022-25746: Memory corruption in kernel due to missing checks when updating the access rights of a memextent map Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.

CVE-2024-43061 [HIGH] CWE-416 CVE-2024-43061: Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.

CVE-2024-53033 [HIGH] CWE-822 CVE-2024-53033: Memory corruption while doing Escape call when user provides valid kernel address in the place of va Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.