Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-21673 [HIGH] CWE-284 CVE-2023-21673: Improper Access to the VM resource manager can lead to Memory Corruption. Improper Access to the VM resource manager can lead to Memory Corruption.

CVE-2025-27044 [HIGH] CWE-787 CVE-2025-27044: Memory corruption while executing timestamp video decode command with large input values. Memory corruption while executing timestamp video decode command with large input values.

CVE-2025-21486 [HIGH] CWE-822 CVE-2025-21486: Memory corruption during dynamic process creation call when client is only passing address and lengt Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

CVE-2024-49842 [HIGH] CWE-284 CVE-2024-49842: Memory corruption during memory mapping into protected VM address space due to incorrect API restric Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.

CVE-2025-21476 [HIGH] CWE-120 CVE-2025-21476: Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake. Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

CVE-2025-47361 [HIGH] CWE-129 CVE-2025-47361: Memory corruption when triggering a subsystem crash with an out-of-range identifier. Memory corruption when triggering a subsystem crash with an out-of-range identifier.

CVE-2025-27032 [HIGH] CWE-1257 CVE-2025-27032: memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded withou memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

CVE-2026-25255 [HIGH] CWE-749 CVE-2026-25255: Exposed dangerous function lead to privilege escalation via gRPC server. Exposed dangerous function lead to privilege escalation via gRPC server.

CVE-2025-59604 [HIGH] CWE-476 CVE-2025-59604: Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointe Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

CVE-2025-21481 [HIGH] CWE-120 CVE-2025-21481: Memory corruption while performing private key encryption in trusted application. Memory corruption while performing private key encryption in trusted application.

CVE-2024-49840 [HIGH] CWE-823 CVE-2024-49840: Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decrypti Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.

CVE-2023-33086 [HIGH] CWE-401 CVE-2023-33086: Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.

CVE-2026-24084 [HIGH] CWE-1294 CVE-2026-24084: Weak configuration when UE does not verify the consistency of its additional security capabilities w Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

CVE-2025-47324 [HIGH] CWE-1230 CVE-2025-47324: Information disclosure while accessing and modifying the PIB file of a remote device via powerline. Information disclosure while accessing and modifying the PIB file of a remote device via powerline.

CVE-2026-57546 [HIGH] CWE-126 CVE-2026-57546: Transient DOS when processing a continuous receive command with a zero-sized global configuration ov Transient DOS when processing a continuous receive command with a zero-sized global configuration override.

CVE-2026-21381 [HIGH] CWE-126 CVE-2026-21381: Transient DOS when receiving a service data frame with excessive length during device matching over Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.

CVE-2024-33064 [HIGH] CWE-126 CVE-2024-33064: Information disclosure while parsing the multiple MBSSID IEs from the beacon. Information disclosure while parsing the multiple MBSSID IEs from the beacon.

CVE-2024-45552 [HIGH] CWE-126 CVE-2024-45552: Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.

CVE-2024-23359 [HIGH] CWE-126 CVE-2024-23359: Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.

CVE-2024-53019 [HIGH] CWE-126 CVE-2024-53019: Information disclosure may occur while decoding the RTP packet with improper header length for numbe Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.