Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-24844 [HIGH] CWE-284 CVE-2023-24844: Memory Corruption in Core while invoking a call to Access Control core library with hardware protect Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.

CVE-2023-21642 [HIGH] CWE-284 CVE-2023-21642: Memory corruption in HAB Memory management due to broad system privileges via physical address. Memory corruption in HAB Memory management due to broad system privileges via physical address.

CVE-2025-27063 [HIGH] CWE-416 CVE-2025-27063: Memory corruption during video playback when video session open fails with time out error. Memory corruption during video playback when video session open fails with time out error.

CVE-2024-33027 [HIGH] CWE-284 CVE-2024-33027: Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.

CVE-2024-43067 [HIGH] CWE-367 CVE-2024-43067: Memory corruption occurs during the copying of read data from the EEPROM because the IO configuratio Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.

CVE-2025-47329 [HIGH] CWE-763 CVE-2025-47329: Memory corruption while handling invalid inputs in application info setup. Memory corruption while handling invalid inputs in application info setup.

CVE-2025-47316 [HIGH] CWE-415 CVE-2025-47316: Memory corruption due to double free when multiple threads race to set the timestamp store. Memory corruption due to double free when multiple threads race to set the timestamp store.

CVE-2025-47357 [HIGH] CWE-306 CVE-2025-47357: Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse reg Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

CVE-2024-45547 [HIGH] CWE-120 CVE-2024-45547: Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS e Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.

CVE-2023-33044 [HIGH] CWE-617 CVE-2023-33044: Transient DOS in Data modem while handling TLB control messages from the Network. Transient DOS in Data modem while handling TLB control messages from the Network.

CVE-2023-33043 [HIGH] CWE-617 CVE-2023-33043: Transient DOS in Modem when a Beam switch request is made with a non-configured BWP. Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.

CVE-2025-21429 [HIGH] CWE-126 CVE-2025-21429: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request. Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.

CVE-2025-21428 [HIGH] CWE-126 CVE-2025-21428: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the A Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.

CVE-2025-47326 [HIGH] CWE-126 CVE-2025-47326: Transient DOS while handling command data during power control processing. Transient DOS while handling command data during power control processing.

CVE-2025-21452 [HIGH] CWE-617 CVE-2025-21452: Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE netw Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.

CVE-2025-59617 [HIGH] CWE-416 CVE-2025-59617: Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input. Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input.

CVE-2023-21666 [HIGH] CWE-401 CVE-2023-21666: Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool. Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

CVE-2022-33219 [HIGH] CWE-190 CVE-2022-33219: Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new l Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer.

CVE-2022-33218 [HIGH] CWE-787 CVE-2022-33218: Memory corruption in Automotive due to improper input validation. Memory corruption in Automotive due to improper input validation.

CVE-2022-40539 [HIGH] CWE-284 CVE-2022-40539: Memory corruption in Automotive Android OS due to improper validation of array index. Memory corruption in Automotive Android OS due to improper validation of array index.