Qualcomm Inc Snapdragon vulnerabilities

CVE-2024-49842 [HIGH] CWE-284 CVE-2024-49842: Memory corruption during memory mapping into protected VM address space due to incorrect API restric Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.

CVE-2025-47316 [HIGH] CWE-415 CVE-2025-47316: Memory corruption due to double free when multiple threads race to set the timestamp store. Memory corruption due to double free when multiple threads race to set the timestamp store.

CVE-2025-47361 [HIGH] CWE-129 CVE-2025-47361: Memory corruption when triggering a subsystem crash with an out-of-range identifier. Memory corruption when triggering a subsystem crash with an out-of-range identifier.

CVE-2025-27032 [HIGH] CWE-1257 CVE-2025-27032: memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded withou memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.

CVE-2025-59604 [HIGH] CWE-476 CVE-2025-59604: Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointe Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.

CVE-2024-49840 [HIGH] CWE-823 CVE-2024-49840: Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decrypti Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.

CVE-2025-21481 [HIGH] CWE-120 CVE-2025-21481: Memory corruption while performing private key encryption in trusted application. Memory corruption while performing private key encryption in trusted application.

CVE-2024-45547 [HIGH] CWE-120 CVE-2024-45547: Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS e Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.

CVE-2023-33086 [HIGH] CWE-401 CVE-2023-33086: Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.

CVE-2025-47326 [HIGH] CWE-126 CVE-2025-47326: Transient DOS while handling command data during power control processing. Transient DOS while handling command data during power control processing.

CVE-2025-47324 [HIGH] CWE-1230 CVE-2025-47324: Information disclosure while accessing and modifying the PIB file of a remote device via powerline. Information disclosure while accessing and modifying the PIB file of a remote device via powerline.

CVE-2026-21381 [HIGH] CWE-126 CVE-2026-21381: Transient DOS when receiving a service data frame with excessive length during device matching over Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.

CVE-2024-33064 [HIGH] CWE-126 CVE-2024-33064: Information disclosure while parsing the multiple MBSSID IEs from the beacon. Information disclosure while parsing the multiple MBSSID IEs from the beacon.

CVE-2024-23359 [HIGH] CWE-126 CVE-2024-23359: Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.

CVE-2024-45552 [HIGH] CWE-126 CVE-2024-45552: Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.

CVE-2022-40540 [HIGH] CWE-120 CVE-2022-40540: Memory corruption due to buffer copy without checking the size of input while loading firmware in Li Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.

CVE-2023-33092 [HIGH] CWE-120 CVE-2023-33092: Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

CVE-2023-28580 [HIGH] CWE-120 CVE-2023-28580: Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache. Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

CVE-2023-28579 [HIGH] CWE-120 CVE-2023-28579: Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PM Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

CVE-2024-45553 [HIGH] CWE-416 CVE-2024-45553: Memory corruption can occur when process-specific maps are added to the global list. If a map is rem Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.