Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-43532 [HIGH] CWE-822 CVE-2023-43532: Memory corruption while reading ACPI config through the user mode app. Memory corruption while reading ACPI config through the user mode app.

CVE-2023-43514 [HIGH] CWE-416 CVE-2023-43514: Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.

CVE-2023-43513 [HIGH] CWE-823 CVE-2023-43513: Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

CVE-2023-33117 [HIGH] CWE-416 CVE-2023-33117: Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADS Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.

CVE-2023-33031 [HIGH] CWE-120 CVE-2023-33031: Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet d Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

CVE-2024-45541 [HIGH] CWE-120 CVE-2024-45541: Memory corruption when IOCTL call is invoked from user-space to read board data. Memory corruption when IOCTL call is invoked from user-space to read board data.

CVE-2023-43525 [HIGH] CWE-120 CVE-2023-43525: Memory corruption while copying the sound model data from user to kernel buffer during sound model r Memory corruption while copying the sound model data from user to kernel buffer during sound model register.

CVE-2023-43524 [HIGH] CWE-120 CVE-2023-43524: Memory corruption when the bandpass filter order received from AHAL is not within the expected range Memory corruption when the bandpass filter order received from AHAL is not within the expected range.

CVE-2023-33076 [HIGH] CWE-16 CVE-2023-33076: Memory corruption in Core when updating rollback version for TA and OTA feature is enabled. Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.

CVE-2023-33067 [HIGH] CWE-823 CVE-2023-33067: Memory corruption in Audio while calling START command on host voice PCM multiple times for the same Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.

CVE-2025-21453 [HIGH] CWE-416 CVE-2025-21453: Memory corruption while processing a data structure, when an iterator is accessed after it has been Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.

CVE-2025-21438 [HIGH] CWE-125 CVE-2025-21438: Memory corruption while IOCTL call is invoked from user-space to read board data. Memory corruption while IOCTL call is invoked from user-space to read board data.

CVE-2024-45557 [HIGH] CWE-823 CVE-2024-45557: Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper va Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.

CVE-2022-33243 [HIGH] CWE-284 CVE-2022-33243: Memory corruption due to improper access control in Qualcomm IPC. Memory corruption due to improper access control in Qualcomm IPC.

CVE-2024-38412 [HIGH] CWE-416 CVE-2024-38412: Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session error Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.

CVE-2024-45582 [HIGH] CWE-129 CVE-2024-45582: Memory corruption while validating number of devices in Camera kernel . Memory corruption while validating number of devices in Camera kernel .

CVE-2024-43050 [HIGH] CWE-121 CVE-2024-43050: Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WL Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

CVE-2024-43053 [HIGH] CWE-119 CVE-2024-43053: Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic informat Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.

CVE-2024-21469 [HIGH] CWE-264 CVE-2024-21469: Memory corruption when an invoke call and a TEE call are bound for the same trusted application. Memory corruption when an invoke call and a TEE call are bound for the same trusted application.

CVE-2023-43544 [HIGH] CWE-416 CVE-2023-43544: Memory corruption when IPC callback handle is used after it has been released during register callba Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.