Qualcomm Inc Snapdragon vulnerabilities

CVE-2022-33269 [HIGH] CWE-190 CVE-2022-33269: Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment. Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

CVE-2023-21630 [HIGH] CWE-191 CVE-2023-21630: Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along wit Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.

CVE-2022-33300 [HIGH] CWE-787 CVE-2022-33300: Memory corruption in Automotive Android OS due to improper input validation. Memory corruption in Automotive Android OS due to improper input validation.

CVE-2024-53034 [HIGH] CWE-822 CVE-2024-53034: Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object h Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.

CVE-2023-21636 [HIGH] CWE-129 CVE-2023-21636: Memory Corruption due to improper validation of array index in Linux while updating adn record. Memory Corruption due to improper validation of array index in Linux while updating adn record.

CVE-2023-21654 [HIGH] CWE-119 CVE-2023-21654: Memory corruption in Audio during playback session with audio effects enabled. Memory corruption in Audio during playback session with audio effects enabled.

CVE-2022-40524 [HIGH] CWE-126 CVE-2022-40524: Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service. Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.

CVE-2023-21638 [HIGH] CWE-704 CVE-2023-21638: Memory corruption in Video while calling APIs with different instance ID than the one received in in Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.

CVE-2022-33240 [HIGH] CWE-704 CVE-2022-33240: Memory corruption in Audio due to incorrect type cast during audio use-cases. Memory corruption in Audio due to incorrect type cast during audio use-cases.

CVE-2022-33281 [HIGH] CWE-129 CVE-2022-33281: Memory corruption due to improper validation of array index in computer vision while testing EVA ker Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.

CVE-2022-33296 [HIGH] CWE-680 CVE-2022-33296: Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.

CVE-2018-11816 [HIGH] CWE-416 CVE-2018-11816: Crafted Binder Request Causes Heap UAF in MediaServer Crafted Binder Request Causes Heap UAF in MediaServer

CVE-2018-11952 [HIGH] CWE-287 CVE-2018-11952: An image with a version lower than the fuse version may potentially be booted lead to improper authe An image with a version lower than the fuse version may potentially be booted lead to improper authentication.

CVE-2016-10408 [HIGH] CWE-284 CVE-2016-10408: QSEE will randomly experience a fatal error during execution due to speculative instruction fetches QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.

CVE-2025-47366 [HIGH] CWE-749 CVE-2025-47366: Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrec Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.

CVE-2023-33105 [HIGH] CWE-16 CVE-2023-33105: Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent wit Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.

CVE-2023-21625 [HIGH] CWE-126 CVE-2023-21625: Information disclosure in Network Services due to buffer over-read while the device receives DNS res Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

CVE-2026-25292 [HIGH] CWE-1286 CVE-2026-25292: Memory Corruption when processing untrusted user input in the fastboot command handler for audio fra Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

CVE-2023-33062 [HIGH] CWE-126 CVE-2023-33062: Transient DOS in WLAN Firmware while parsing a BTM request. Transient DOS in WLAN Firmware while parsing a BTM request.

CVE-2024-33057 [HIGH] CWE-126 CVE-2024-33057: Transient DOS while parsing the multi-link element Control field when common information length chec Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.