Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-21650 [HIGH] CWE-129 CVE-2023-21650: Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length. Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

CVE-2023-21637 [HIGH] CWE-119 CVE-2023-21637: Memory corruption in Linux while calling system configuration APIs. Memory corruption in Linux while calling system configuration APIs.

CVE-2024-43050 [HIGH] CWE-121 CVE-2024-43050: Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WL Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

CVE-2024-43053 [HIGH] CWE-119 CVE-2024-43053: Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic informat Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.

CVE-2024-21469 [HIGH] CWE-264 CVE-2024-21469: Memory corruption when an invoke call and a TEE call are bound for the same trusted application. Memory corruption when an invoke call and a TEE call are bound for the same trusted application.

CVE-2023-43544 [HIGH] CWE-416 CVE-2023-43544: Memory corruption when IPC callback handle is used after it has been released during register callba Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.

CVE-2024-38412 [HIGH] CWE-416 CVE-2024-38412: Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session error Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.

CVE-2024-45582 [HIGH] CWE-129 CVE-2024-45582: Memory corruption while validating number of devices in Camera kernel . Memory corruption while validating number of devices in Camera kernel .

CVE-2024-45541 [HIGH] CWE-120 CVE-2024-45541: Memory corruption when IOCTL call is invoked from user-space to read board data. Memory corruption when IOCTL call is invoked from user-space to read board data.

CVE-2024-33027 [HIGH] CWE-284 CVE-2024-33027: Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.

CVE-2023-24844 [HIGH] CWE-284 CVE-2023-24844: Memory Corruption in Core while invoking a call to Access Control core library with hardware protect Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.

CVE-2024-45564 [HIGH] CWE-416 CVE-2024-45564: Memory corruption during concurrent access to server info object due to incorrect reference count up Memory corruption during concurrent access to server info object due to incorrect reference count update.

CVE-2025-21453 [HIGH] CWE-416 CVE-2025-21453: Memory corruption while processing a data structure, when an iterator is accessed after it has been Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.

CVE-2025-27063 [HIGH] CWE-416 CVE-2025-27063: Memory corruption during video playback when video session open fails with time out error. Memory corruption during video playback when video session open fails with time out error.

CVE-2024-43067 [HIGH] CWE-367 CVE-2024-43067: Memory corruption occurs during the copying of read data from the EEPROM because the IO configuratio Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.

CVE-2022-33231 [HIGH] CWE-415 CVE-2022-33231: Memory corruption due to double free in core while initializing the encryption key. Memory corruption due to double free in core while initializing the encryption key.

CVE-2023-33044 [HIGH] CWE-617 CVE-2023-33044: Transient DOS in Data modem while handling TLB control messages from the Network. Transient DOS in Data modem while handling TLB control messages from the Network.

CVE-2023-33043 [HIGH] CWE-617 CVE-2023-33043: Transient DOS in Modem when a Beam switch request is made with a non-configured BWP. Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.

CVE-2025-21429 [HIGH] CWE-126 CVE-2025-21429: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request. Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.

CVE-2025-21428 [HIGH] CWE-126 CVE-2025-21428: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the A Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.