Qualcomm Inc Snapdragon vulnerabilities

CVE-2024-45575 [HIGH] CWE-190 CVE-2024-45575: Memory corruption Camera kernel when large number of devices are attached through userspace. Memory corruption Camera kernel when large number of devices are attached through userspace.

CVE-2024-45574 [HIGH] CWE-129 CVE-2024-45574: Memory corruption during array access in Camera kernel due to invalid index from invalid command dat Memory corruption during array access in Camera kernel due to invalid index from invalid command data.

CVE-2025-21441 [HIGH] CWE-787 CVE-2025-21441: Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

CVE-2024-45570 [HIGH] CWE-823 CVE-2024-45570: Memory corruption may occur during IO configuration processing when the IO port count is invalid. Memory corruption may occur during IO configuration processing when the IO port count is invalid.

CVE-2024-45583 [HIGH] CWE-416 CVE-2024-45583: Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations. Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations.

CVE-2025-21440 [HIGH] CWE-787 CVE-2025-21440: Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

CVE-2025-21438 [HIGH] CWE-125 CVE-2025-21438: Memory corruption while IOCTL call is invoked from user-space to read board data. Memory corruption while IOCTL call is invoked from user-space to read board data.

CVE-2024-45557 [HIGH] CWE-823 CVE-2024-45557: Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper va Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.

CVE-2025-21436 [HIGH] CWE-416 CVE-2025-21436: Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.

CVE-2025-21423 [HIGH] CWE-129 CVE-2025-21423: Memory corruption occurs when handling client calls to EnableTestMode through an Escape call. Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.

CVE-2025-21439 [HIGH] CWE-787 CVE-2025-21439: Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.

CVE-2025-21422 [HIGH] CWE-310 CVE-2025-21422: Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usag Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.

CVE-2025-47329 [HIGH] CWE-763 CVE-2025-47329: Memory corruption while handling invalid inputs in application info setup. Memory corruption while handling invalid inputs in application info setup.

CVE-2024-49842 [HIGH] CWE-284 CVE-2024-49842: Memory corruption during memory mapping into protected VM address space due to incorrect API restric Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.

CVE-2025-47361 [HIGH] CWE-129 CVE-2025-47361: Memory corruption when triggering a subsystem crash with an out-of-range identifier. Memory corruption when triggering a subsystem crash with an out-of-range identifier.

CVE-2024-49840 [HIGH] CWE-823 CVE-2024-49840: Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decrypti Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.

CVE-2024-45547 [HIGH] CWE-120 CVE-2024-45547: Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS e Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.

CVE-2025-47357 [HIGH] CWE-306 CVE-2025-47357: Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse reg Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

CVE-2023-33086 [HIGH] CWE-401 CVE-2023-33086: Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.

CVE-2025-47328 [HIGH] CWE-126 CVE-2025-47328: Transient DOS while processing power control requests with invalid antenna or stream values. Transient DOS while processing power control requests with invalid antenna or stream values.