Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-21634 [HIGH] CWE-119 CVE-2023-21634: Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

CVE-2023-33071 [HIGH] CWE-284 CVE-2023-33071: Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functional Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.

CVE-2022-40517 [HIGH] CWE-787 CVE-2022-40517: Memory corruption in core due to stack-based buffer overflow Memory corruption in core due to stack-based buffer overflow

CVE-2023-28574 [HIGH] CWE-20 CVE-2023-28574: Memory corruption in core services when Diag handler receives a command to configure event listeners Memory corruption in core services when Diag handler receives a command to configure event listeners.

CVE-2024-45542 [HIGH] CWE-121 CVE-2024-45542: Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

CVE-2024-33041 [HIGH] CWE-823 CVE-2024-33041: Memory corruption when input parameter validation for number of fences is missing for fence frame IO Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,

CVE-2024-23372 [HIGH] CWE-190 CVE-2024-23372: Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.

CVE-2024-21476 [HIGH] CWE-20 CVE-2024-21476: Memory corruption when the channel ID passed by user is not validated and further used. Memory corruption when the channel ID passed by user is not validated and further used.

CVE-2024-33054 [HIGH] CWE-120 CVE-2024-33054: Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machi Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.

CVE-2023-24852 [HIGH] CWE-287 CVE-2023-24852: Memory Corruption in Core due to secure memory access by user while loading modem image. Memory Corruption in Core due to secure memory access by user while loading modem image.

CVE-2023-28578 [HIGH] CWE-20 CVE-2023-28578: Memory corruption in Core Services while executing the command for removing a single event listener. Memory corruption in Core Services while executing the command for removing a single event listener.

CVE-2024-53031 [HIGH] CWE-20 CVE-2024-53031: Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine. Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.

CVE-2024-53014 [HIGH] CWE-129 CVE-2024-53014: Memory corruption may occur while validating ports and channels in Audio driver. Memory corruption may occur while validating ports and channels in Audio driver.

CVE-2023-21627 [HIGH] CWE-20 CVE-2023-21627: Memory corruption in Trusted Execution Environment while calling service API with invalid address. Memory corruption in Trusted Execution Environment while calling service API with invalid address.

CVE-2023-33108 [HIGH] CWE-416 CVE-2023-33108: Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE ob Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.

CVE-2023-33038 [HIGH] CWE-190 CVE-2023-33038: Memory corruption while receiving a message in Bus Socket Transport Server. Memory corruption while receiving a message in Bus Socket Transport Server.

CVE-2023-21664 [HIGH] CWE-120 CVE-2023-21664: Memory Corruption in Core Platform while printing the response buffer in log. Memory Corruption in Core Platform while printing the response buffer in log.

CVE-2023-21662 [HIGH] CWE-120 CVE-2023-21662: Memory corruption in Core Platform while printing the response buffer in log. Memory corruption in Core Platform while printing the response buffer in log.

CVE-2023-28560 [HIGH] CWE-120 CVE-2023-28560: Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

CVE-2023-28558 [HIGH] CWE-129 CVE-2023-28558: Memory corruption in WLAN handler while processing PhyID in Tx status handler. Memory corruption in WLAN handler while processing PhyID in Tx status handler.