Qualcomm Inc Snapdragon vulnerabilities

CVE-2025-21452 [HIGH] CWE-617 CVE-2025-21452: Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE netw Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.

CVE-2026-21381 [HIGH] CWE-126 CVE-2026-21381: Transient DOS when receiving a service data frame with excessive length during device matching over Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.

CVE-2026-24087 [HIGH] CWE-1286 CVE-2026-24087: Memory corruption while processing fastboot OEM commands. Memory corruption while processing fastboot OEM commands.

CVE-2024-33064 [HIGH] CWE-126 CVE-2024-33064: Information disclosure while parsing the multiple MBSSID IEs from the beacon. Information disclosure while parsing the multiple MBSSID IEs from the beacon.

CVE-2024-45552 [HIGH] CWE-126 CVE-2024-45552: Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.

CVE-2023-21666 [HIGH] CWE-401 CVE-2023-21666: Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool. Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

CVE-2022-40540 [HIGH] CWE-120 CVE-2022-40540: Memory corruption due to buffer copy without checking the size of input while loading firmware in Li Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.

CVE-2023-33092 [HIGH] CWE-120 CVE-2023-33092: Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

CVE-2023-28579 [HIGH] CWE-120 CVE-2023-28579: Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PM Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

CVE-2024-45553 [HIGH] CWE-416 CVE-2024-45553: Memory corruption can occur when process-specific maps are added to the global list. If a map is rem Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.

CVE-2022-40530 [HIGH] CWE-680 CVE-2022-40530: Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization p Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.

CVE-2022-25705 [HIGH] CWE-680 CVE-2022-25705: Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response

CVE-2022-33248 [HIGH] CWE-680 CVE-2022-33248: Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

CVE-2022-25709 [HIGH] CWE-823 CVE-2022-25709: Memory corruption in modem due to use of out of range pointer offset while processing qmi msg Memory corruption in modem due to use of out of range pointer offset while processing qmi msg

CVE-2022-33278 [HIGH] CWE-120 CVE-2022-33278: Memory corruption due to buffer copy without checking the size of input in HLOS when input message s Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

CVE-2022-40531 [HIGH] CWE-704 CVE-2022-40531: Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID messa Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

CVE-2022-33277 [HIGH] CWE-120 CVE-2022-33277: Memory corruption in modem due to buffer copy without checking size of input while receiving WMI com Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

CVE-2022-33302 [HIGH] CWE-129 CVE-2022-33302: Memory corruption due to improper validation of array index in User Identity Module when APN TLV len Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

CVE-2022-33307 [HIGH] CWE-415 CVE-2022-33307: Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to b Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.

CVE-2022-25713 [HIGH] CWE-119 CVE-2022-25713: Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Mem Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.