Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-21663 [HIGH] CWE-119 CVE-2023-21663: Memory Corruption while accessing metadata in Display. Memory Corruption while accessing metadata in Display.

CVE-2023-21639 [HIGH] CWE-120 CVE-2023-21639: Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL cl Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

CVE-2022-33267 [HIGH] CWE-119 CVE-2022-33267: Memory corruption in Linux while sending DRM request. Memory corruption in Linux while sending DRM request.

CVE-2022-33264 [HIGH] CWE-121 CVE-2022-33264: Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Req Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.

CVE-2024-45570 [HIGH] CWE-823 CVE-2024-45570: Memory corruption may occur during IO configuration processing when the IO port count is invalid. Memory corruption may occur during IO configuration processing when the IO port count is invalid.

CVE-2024-45563 [HIGH] CWE-787 CVE-2024-45563: Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.

CVE-2024-45583 [HIGH] CWE-416 CVE-2024-45583: Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations. Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations.

CVE-2024-49834 [HIGH] CWE-129 CVE-2024-49834: Memory corruption while power-up or power-down sequence of the camera sensor. Memory corruption while power-up or power-down sequence of the camera sensor.

CVE-2024-33023 [HIGH] CWE-416 CVE-2024-33023: Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timel Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.

CVE-2024-33028 [HIGH] CWE-416 CVE-2024-33028: Memory corruption as fence object may still be accessed in timeline destruct after isync fence is re Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.

CVE-2024-23383 [HIGH] CWE-416 CVE-2024-23383: Memory corruption when kernel driver attempts to trigger hardware fences. Memory corruption when kernel driver attempts to trigger hardware fences.

CVE-2024-21474 [HIGH] CWE-121 CVE-2024-21474: Memory corruption when size of buffer from previous call is used without validation or re-initializa Memory corruption when size of buffer from previous call is used without validation or re-initialization.

CVE-2023-43531 [HIGH] CWE-824 CVE-2023-43531: Memory corruption while verifying the serialized header when the key pairs are generated. Memory corruption while verifying the serialized header when the key pairs are generated.

CVE-2023-28547 [HIGH] CWE-120 CVE-2023-28547: Memory corruption in SPS Application while requesting for public key in sorter TA. Memory corruption in SPS Application while requesting for public key in sorter TA.

CVE-2023-33066 [HIGH] CWE-823 CVE-2023-33066: Memory corruption in Audio while processing RT proxy port register driver. Memory corruption in Audio while processing RT proxy port register driver.

CVE-2023-43535 [HIGH] CWE-129 CVE-2023-43535: Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event t Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.

CVE-2024-21475 [HIGH] CWE-823 CVE-2024-21475: Memory corruption when the payload received from firmware is not as per the expected protocol size. Memory corruption when the payload received from firmware is not as per the expected protocol size.

CVE-2023-33115 [HIGH] CWE-126 CVE-2023-33115: Memory corruption while processing buffer initialization, when trusted report for certain report typ Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.

CVE-2023-43516 [HIGH] CWE-823 CVE-2023-43516: Memory corruption when malformed message payload is received from firmware. Memory corruption when malformed message payload is received from firmware.

CVE-2023-33120 [HIGH] CWE-416 CVE-2023-33120: Memory corruption in Audio when memory map command is executed consecutively in ADSP. Memory corruption in Audio when memory map command is executed consecutively in ADSP.