Qualcomm Inc Snapdragon vulnerabilities

CVE-2025-47401 [HIGH] CWE-126 CVE-2025-47401: Transient DOS when processing target power rate tables during channel configuration. Transient DOS when processing target power rate tables during channel configuration.

CVE-2023-21643 [HIGH] CWE-822 CVE-2023-21643: Memory corruption due to untrusted pointer dereference in automotive during system call. Memory corruption due to untrusted pointer dereference in automotive during system call.

CVE-2022-33219 [HIGH] CWE-190 CVE-2022-33219: Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new l Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer.

CVE-2022-40539 [HIGH] CWE-284 CVE-2022-40539: Memory corruption in Automotive Android OS due to improper validation of array index. Memory corruption in Automotive Android OS due to improper validation of array index.

CVE-2022-33218 [HIGH] CWE-787 CVE-2022-33218: Memory corruption in Automotive due to improper input validation. Memory corruption in Automotive due to improper input validation.

CVE-2022-25694 [HIGH] CWE-823 CVE-2022-25694: Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

CVE-2022-33225 [HIGH] CWE-416 CVE-2022-33225: Memory corruption due to use after free in trusted application environment. Memory corruption due to use after free in trusted application environment.

CVE-2022-33274 [HIGH] CWE-129 CVE-2022-33274: Memory corruption in android core due to improper validation of array index while returning feature Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.

CVE-2017-9711 [HIGH] CWE-264 CVE-2017-9711: Certain unprivileged processes are able to perform IOCTL calls. Certain unprivileged processes are able to perform IOCTL calls.

CVE-2023-28583 [HIGH] CWE-415 CVE-2023-28583: Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr da Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.

CVE-2022-33282 [HIGH] CWE-680 CVE-2022-33282: Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL c Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.

CVE-2023-28577 [HIGH] CWE-416 CVE-2023-28577: In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being use In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.

CVE-2023-21630 [HIGH] CWE-191 CVE-2023-21630: Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along wit Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.

CVE-2022-33300 [HIGH] CWE-787 CVE-2022-33300: Memory corruption in Automotive Android OS due to improper input validation. Memory corruption in Automotive Android OS due to improper input validation.

CVE-2017-15832 [HIGH] CWE-20 CVE-2017-15832: Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW

CVE-2018-5852 [HIGH] CWE-126 CVE-2018-5852: An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while readi An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

CVE-2022-33240 [HIGH] CWE-704 CVE-2022-33240: Memory corruption in Audio due to incorrect type cast during audio use-cases. Memory corruption in Audio due to incorrect type cast during audio use-cases.

CVE-2022-25721 [HIGH] CWE-843 CVE-2022-25721: Memory corruption in video driver due to type confusion error during video playback Memory corruption in video driver due to type confusion error during video playback

CVE-2018-11816 [HIGH] CWE-416 CVE-2018-11816: Crafted Binder Request Causes Heap UAF in MediaServer Crafted Binder Request Causes Heap UAF in MediaServer

CVE-2022-33275 [HIGH] CWE-129 CVE-2022-33275: Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.