Qualcomm Inc Snapdragon vulnerabilities

CVE-2025-21452 [HIGH] CWE-617 CVE-2025-21452: Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE netw Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.

CVE-2026-24084 [HIGH] CWE-1294 CVE-2026-24084: Weak configuration when UE does not verify the consistency of its additional security capabilities w Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

CVE-2025-59617 [HIGH] CWE-416 CVE-2025-59617: Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input. Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

CVE-2023-21643 [HIGH] CWE-822 CVE-2023-21643: Memory corruption due to untrusted pointer dereference in automotive during system call. Memory corruption due to untrusted pointer dereference in automotive during system call.

CVE-2023-21666 [HIGH] CWE-401 CVE-2023-21666: Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool. Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

CVE-2022-33219 [HIGH] CWE-190 CVE-2022-33219: Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new l Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer.

CVE-2022-40539 [HIGH] CWE-284 CVE-2022-40539: Memory corruption in Automotive Android OS due to improper validation of array index. Memory corruption in Automotive Android OS due to improper validation of array index.

CVE-2022-33218 [HIGH] CWE-787 CVE-2022-33218: Memory corruption in Automotive due to improper input validation. Memory corruption in Automotive due to improper input validation.

CVE-2022-40530 [HIGH] CWE-680 CVE-2022-40530: Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization p Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.

CVE-2022-25705 [HIGH] CWE-680 CVE-2022-25705: Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response

CVE-2022-25709 [HIGH] CWE-823 CVE-2022-25709: Memory corruption in modem due to use of out of range pointer offset while processing qmi msg Memory corruption in modem due to use of out of range pointer offset while processing qmi msg

CVE-2022-33278 [HIGH] CWE-120 CVE-2022-33278: Memory corruption due to buffer copy without checking the size of input in HLOS when input message s Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

CVE-2023-28577 [HIGH] CWE-416 CVE-2023-28577: In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being use In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.

CVE-2022-33225 [HIGH] CWE-416 CVE-2022-33225: Memory corruption due to use after free in trusted application environment. Memory corruption due to use after free in trusted application environment.

CVE-2022-33274 [HIGH] CWE-129 CVE-2022-33274: Memory corruption in android core due to improper validation of array index while returning feature Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.

CVE-2023-28583 [HIGH] CWE-415 CVE-2023-28583: Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr da Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.

CVE-2017-15832 [HIGH] CWE-20 CVE-2017-15832: Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW

CVE-2018-5852 [HIGH] CWE-126 CVE-2018-5852: An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while readi An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

CVE-2017-9711 [HIGH] CWE-264 CVE-2017-9711: Certain unprivileged processes are able to perform IOCTL calls. Certain unprivileged processes are able to perform IOCTL calls.

CVE-2022-33275 [HIGH] CWE-129 CVE-2022-33275: Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.