Qualcomm Inc Snapdragon vulnerabilities

CVE-2024-38412 [HIGH] CWE-416 CVE-2024-38412: Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session error Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.

CVE-2024-45582 [HIGH] CWE-129 CVE-2024-45582: Memory corruption while validating number of devices in Camera kernel . Memory corruption while validating number of devices in Camera kernel .

CVE-2024-43050 [HIGH] CWE-121 CVE-2024-43050: Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WL Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

CVE-2024-43053 [HIGH] CWE-119 CVE-2024-43053: Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic informat Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.

CVE-2024-21469 [HIGH] CWE-264 CVE-2024-21469: Memory corruption when an invoke call and a TEE call are bound for the same trusted application. Memory corruption when an invoke call and a TEE call are bound for the same trusted application.

CVE-2023-43544 [HIGH] CWE-416 CVE-2023-43544: Memory corruption when IPC callback handle is used after it has been released during register callba Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.

CVE-2023-21642 [HIGH] CWE-284 CVE-2023-21642: Memory corruption in HAB Memory management due to broad system privileges via physical address. Memory corruption in HAB Memory management due to broad system privileges via physical address.

CVE-2024-33027 [HIGH] CWE-284 CVE-2024-33027: Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.

CVE-2023-24844 [HIGH] CWE-284 CVE-2023-24844: Memory Corruption in Core while invoking a call to Access Control core library with hardware protect Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.

CVE-2025-27063 [HIGH] CWE-416 CVE-2025-27063: Memory corruption during video playback when video session open fails with time out error. Memory corruption during video playback when video session open fails with time out error.

CVE-2024-43067 [HIGH] CWE-367 CVE-2024-43067: Memory corruption occurs during the copying of read data from the EEPROM because the IO configuratio Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.

CVE-2025-47329 [HIGH] CWE-763 CVE-2025-47329: Memory corruption while handling invalid inputs in application info setup. Memory corruption while handling invalid inputs in application info setup.

CVE-2022-33231 [HIGH] CWE-415 CVE-2022-33231: Memory corruption due to double free in core while initializing the encryption key. Memory corruption due to double free in core while initializing the encryption key.

CVE-2025-47357 [HIGH] CWE-306 CVE-2025-47357: Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse reg Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

CVE-2023-33044 [HIGH] CWE-617 CVE-2023-33044: Transient DOS in Data modem while handling TLB control messages from the Network. Transient DOS in Data modem while handling TLB control messages from the Network.

CVE-2023-33043 [HIGH] CWE-617 CVE-2023-33043: Transient DOS in Modem when a Beam switch request is made with a non-configured BWP. Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.

CVE-2025-21429 [HIGH] CWE-126 CVE-2025-21429: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request. Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.

CVE-2025-21428 [HIGH] CWE-126 CVE-2025-21428: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the A Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.

CVE-2025-47328 [HIGH] CWE-126 CVE-2025-47328: Transient DOS while processing power control requests with invalid antenna or stream values. Transient DOS while processing power control requests with invalid antenna or stream values.

CVE-2025-47401 [HIGH] CWE-126 CVE-2025-47401: Transient DOS when processing target power rate tables during channel configuration. Transient DOS when processing target power rate tables during channel configuration.