Qualcomm Inc Snapdragon vulnerabilities

CVE-2022-33263 [HIGH] CWE-416 CVE-2022-33263: Memory corruption due to use after free in Core when multiple DCI clients register and deregister. Memory corruption due to use after free in Core when multiple DCI clients register and deregister.

CVE-2022-33301 [HIGH] CWE-704 CVE-2022-33301: Memory corruption due to incorrect type conversion or cast in audio while using audio playback/captu Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM.

CVE-2022-33298 [HIGH] CWE-416 CVE-2022-33298: Memory corruption due to use after free in Modem while modem initialization. Memory corruption due to use after free in Modem while modem initialization.

CVE-2022-25715 [HIGH] CWE-704 CVE-2022-25715: Memory corruption in display driver due to incorrect type casting while accessing the fence structur Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields

CVE-2022-25717 [HIGH] CWE-415 CVE-2022-25717: Memory corruption in display due to double free while allocating frame buffer memory Memory corruption in display due to double free while allocating frame buffer memory

CVE-2023-43532 [HIGH] CWE-822 CVE-2023-43532: Memory corruption while reading ACPI config through the user mode app. Memory corruption while reading ACPI config through the user mode app.

CVE-2023-43514 [HIGH] CWE-416 CVE-2023-43514: Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.

CVE-2023-33039 [HIGH] CWE-416 CVE-2023-33039: Memory corruption in Automotive Display while destroying the image handle created using connected di Memory corruption in Automotive Display while destroying the image handle created using connected display driver.

CVE-2024-45564 [HIGH] CWE-416 CVE-2024-45564: Memory corruption during concurrent access to server info object due to incorrect reference count up Memory corruption during concurrent access to server info object due to incorrect reference count update.

CVE-2024-45575 [HIGH] CWE-190 CVE-2024-45575: Memory corruption Camera kernel when large number of devices are attached through userspace. Memory corruption Camera kernel when large number of devices are attached through userspace.

CVE-2023-43513 [HIGH] CWE-823 CVE-2023-43513: Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

CVE-2023-33117 [HIGH] CWE-416 CVE-2023-33117: Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADS Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.

CVE-2023-33031 [HIGH] CWE-120 CVE-2023-33031: Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet d Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

CVE-2023-24850 [HIGH] CWE-129 CVE-2023-24850: Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.

CVE-2024-45541 [HIGH] CWE-120 CVE-2024-45541: Memory corruption when IOCTL call is invoked from user-space to read board data. Memory corruption when IOCTL call is invoked from user-space to read board data.

CVE-2023-43524 [HIGH] CWE-120 CVE-2023-43524: Memory corruption when the bandpass filter order received from AHAL is not within the expected range Memory corruption when the bandpass filter order received from AHAL is not within the expected range.

CVE-2023-33076 [HIGH] CWE-16 CVE-2023-33076: Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.

CVE-2025-21438 [HIGH] CWE-125 CVE-2025-21438: Memory corruption while IOCTL call is invoked from user-space to read board data. Memory corruption while IOCTL call is invoked from user-space to read board data.

CVE-2022-33243 [HIGH] CWE-284 CVE-2022-33243: Memory corruption due to improper access control in Qualcomm IPC. Memory corruption due to improper access control in Qualcomm IPC.

CVE-2025-21453 [HIGH] CWE-416 CVE-2025-21453: Memory corruption while processing a data structure, when an iterator is accessed after it has been Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.