Qualcomm Inc Snapdragon vulnerabilities

CVE-2025-47326 [HIGH] CWE-126 CVE-2025-47326: Transient DOS while handling command data during power control processing. Transient DOS while handling command data during power control processing.

CVE-2025-47324 [HIGH] CWE-1230 CVE-2025-47324: Information disclosure while accessing and modifying the PIB file of a remote device via powerline. Information disclosure while accessing and modifying the PIB file of a remote device via powerline.

CVE-2022-25745 [CRITICAL] CWE-670 CVE-2022-25745: Memory corruption in modem due to improper input validation while handling the incoming CoAP message Memory corruption in modem due to improper input validation while handling the incoming CoAP message

CVE-2024-21456 [CRITICAL] CWE-126 CVE-2024-21456: Information Disclosure while parsing beacon frame in STA. Information Disclosure while parsing beacon frame in STA.

CVE-2025-47345 [HIGH] CWE-323 CVE-2025-47345: Cryptographic issue may occur while encrypting license data. Cryptographic issue may occur while encrypting license data.

CVE-2022-40507 [HIGH] CWE-415 CVE-2022-40507: Memory corruption due to double free in Core while mapping HLOS address to the list. Memory corruption due to double free in Core while mapping HLOS address to the list.

CVE-2024-53026 [HIGH] CWE-126 CVE-2024-53026: Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call. Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.

CVE-2024-23359 [HIGH] CWE-126 CVE-2024-23359: Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.

CVE-2024-53019 [HIGH] CWE-126 CVE-2024-53019: Information disclosure may occur while decoding the RTP packet with improper header length for numbe Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.

CVE-2024-53020 [HIGH] CWE-126 CVE-2024-53020: Information disclosure may occur while decoding the RTP packet with invalid header extension from ne Information disclosure may occur while decoding the RTP packet with invalid header extension from network.

CVE-2026-24088 [HIGH] CWE-306 CVE-2026-24088: Cryptographic Issue while processing a specific partition which allows unauthorized write access to Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.

CVE-2023-21665 [HIGH] CWE-704 CVE-2023-21665: Memory corruption in Graphics while importing a file. Memory corruption in Graphics while importing a file.

CVE-2023-33079 [HIGH] CWE-823 CVE-2023-33079: Memory corruption in Audio while running invalid audio recording from ADSP. Memory corruption in Audio while running invalid audio recording from ADSP.

CVE-2023-28580 [HIGH] CWE-120 CVE-2023-28580: Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache. Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

CVE-2024-45555 [HIGH] CWE-787 CVE-2024-45555: Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verific Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.

CVE-2023-33055 [HIGH] CWE-120 CVE-2023-33055: Memory Corruption in Audio while invoking callback function in driver from ADSP. Memory Corruption in Audio while invoking callback function in driver from ADSP.

CVE-2023-22668 [HIGH] CWE-416 CVE-2023-22668: Memory Corruption in Audio while invoking IOCTLs calls from the user-space. Memory Corruption in Audio while invoking IOCTLs calls from the user-space.

CVE-2023-28574 [HIGH] CWE-20 CVE-2023-28574: Memory corruption in core services when Diag handler receives a command to configure event listeners Memory corruption in core services when Diag handler receives a command to configure event listeners.

CVE-2024-23372 [HIGH] CWE-190 CVE-2024-23372: Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.

CVE-2024-45542 [HIGH] CWE-121 CVE-2024-45542: Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.