Qualcomm Inc Snapdragon vulnerabilities

CVE-2024-49834 [HIGH] CWE-129 CVE-2024-49834: Memory corruption while power-up or power-down sequence of the camera sensor. Memory corruption while power-up or power-down sequence of the camera sensor.

CVE-2024-33023 [HIGH] CWE-416 CVE-2024-33023: Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timel Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.

CVE-2024-33028 [HIGH] CWE-416 CVE-2024-33028: Memory corruption as fence object may still be accessed in timeline destruct after isync fence is re Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.

CVE-2024-23383 [HIGH] CWE-416 CVE-2024-23383: Memory corruption when kernel driver attempts to trigger hardware fences. Memory corruption when kernel driver attempts to trigger hardware fences.

CVE-2023-28547 [HIGH] CWE-120 CVE-2023-28547: Memory corruption in SPS Application while requesting for public key in sorter TA. Memory corruption in SPS Application while requesting for public key in sorter TA.

CVE-2023-43535 [HIGH] CWE-129 CVE-2023-43535: Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event t Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.

CVE-2024-45578 [HIGH] CWE-129 CVE-2024-45578: Memory corruption while acquire and update IOCTLs during IFE output resource ID validation. Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.

CVE-2024-45577 [HIGH] CWE-20 CVE-2024-45577: Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information.

CVE-2024-45574 [HIGH] CWE-129 CVE-2024-45574: Memory corruption during array access in Camera kernel due to invalid index from invalid command dat Memory corruption during array access in Camera kernel due to invalid index from invalid command data.

CVE-2024-21475 [HIGH] CWE-823 CVE-2024-21475: Memory corruption when the payload received from firmware is not as per the expected protocol size. Memory corruption when the payload received from firmware is not as per the expected protocol size.

CVE-2023-33115 [HIGH] CWE-126 CVE-2023-33115: Memory corruption while processing buffer initialization, when trusted report for certain report typ Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.

CVE-2023-43516 [HIGH] CWE-823 CVE-2023-43516: Memory corruption when malformed message payload is received from firmware. Memory corruption when malformed message payload is received from firmware.

CVE-2023-28546 [HIGH] CWE-120 CVE-2023-28546: Memory Corruption in SPS Application while exporting public key in sorter TA. Memory Corruption in SPS Application while exporting public key in sorter TA.

CVE-2023-33034 [HIGH] CWE-195 CVE-2023-33034: Memory corruption while parsing the ADSP response command. Memory corruption while parsing the ADSP response command.

CVE-2023-28539 [HIGH] CWE-120 CVE-2023-28539: Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command. Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.

CVE-2024-49837 [HIGH] CWE-129 CVE-2024-49837: Memory corruption while reading CPU state data during guest VM suspend. Memory corruption while reading CPU state data during guest VM suspend.

CVE-2024-49843 [HIGH] CWE-129 CVE-2024-49843: Memory corruption while processing IOCTL from user space to handle GPU AHB bus error. Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.

CVE-2023-43525 [HIGH] CWE-120 CVE-2023-43525: Memory corruption while copying the sound model data from user to kernel buffer during sound model r Memory corruption while copying the sound model data from user to kernel buffer during sound model register.

CVE-2023-43526 [HIGH] CWE-120 CVE-2023-43526: Memory corruption while querying module parameters from Listen Sound model client in kernel from use Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.

CVE-2023-33067 [HIGH] CWE-823 CVE-2023-33067: Memory corruption in Audio while calling START command on host voice PCM multiple times for the same Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.