Qualcomm Inc Snapdragon vulnerabilities

CVE-2024-33041 [HIGH] CWE-823 CVE-2024-33041: Memory corruption when input parameter validation for number of fences is missing for fence frame IO Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,

CVE-2024-33054 [HIGH] CWE-120 CVE-2024-33054: Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machi Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.

CVE-2023-28578 [HIGH] CWE-20 CVE-2023-28578: Memory corruption in Core Services while executing the command for removing a single event listener. Memory corruption in Core Services while executing the command for removing a single event listener.

CVE-2023-21627 [HIGH] CWE-20 CVE-2023-21627: Memory corruption in Trusted Execution Environment while calling service API with invalid address. Memory corruption in Trusted Execution Environment while calling service API with invalid address.

CVE-2022-40522 [HIGH] CWE-415 CVE-2022-40522: Memory corruption in Linux Networking due to double free while handling a hyp-assign. Memory corruption in Linux Networking due to double free while handling a hyp-assign.

CVE-2022-33292 [HIGH] CWE-416 CVE-2022-33292: Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and repo Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it.

CVE-2022-33232 [HIGH] CWE-120 CVE-2022-33232: Memory corruption due to buffer copy without checking size of input while running memory sharing tes Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

CVE-2024-53014 [HIGH] CWE-129 CVE-2024-53014: Memory corruption may occur while validating ports and channels in Audio driver. Memory corruption may occur while validating ports and channels in Audio driver.

CVE-2024-53012 [HIGH] CWE-20 CVE-2024-53012: Memory corruption may occur due to improper input validation in clock device. Memory corruption may occur due to improper input validation in clock device.

CVE-2022-33224 [HIGH] CWE-120 CVE-2022-33224: Memory corruption in core due to buffer copy without check9ing the size of input while processing io Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.

CVE-2022-33230 [HIGH] CWE-120 CVE-2022-33230: Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

CVE-2022-33267 [HIGH] CWE-119 CVE-2022-33267: Memory corruption in Linux while sending DRM request. Memory corruption in Linux while sending DRM request.

CVE-2022-25746 [HIGH] CWE-120 CVE-2022-25746: Memory corruption in kernel due to missing checks when updating the access rights of a memextent map Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.

CVE-2022-25717 [HIGH] CWE-415 CVE-2022-25717: Memory corruption in display due to double free while allocating frame buffer memory Memory corruption in display due to double free while allocating frame buffer memory

CVE-2024-33023 [HIGH] CWE-416 CVE-2024-33023: Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timel Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.

CVE-2024-33028 [HIGH] CWE-416 CVE-2024-33028: Memory corruption as fence object may still be accessed in timeline destruct after isync fence is re Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.

CVE-2024-23383 [HIGH] CWE-416 CVE-2024-23383: Memory corruption when kernel driver attempts to trigger hardware fences. Memory corruption when kernel driver attempts to trigger hardware fences.

CVE-2023-28547 [HIGH] CWE-120 CVE-2023-28547: Memory corruption in SPS Application while requesting for public key in sorter TA. Memory corruption in SPS Application while requesting for public key in sorter TA.

CVE-2023-43535 [HIGH] CWE-129 CVE-2023-43535: Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event t Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.

CVE-2023-28538 [HIGH] CWE-121 CVE-2023-28538: Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region. Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.