Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-21636 [HIGH] CWE-129 CVE-2023-21636: Memory Corruption due to improper validation of array index in Linux while updating adn record. Memory Corruption due to improper validation of array index in Linux while updating adn record.

CVE-2023-21654 [HIGH] CWE-119 CVE-2023-21654: Memory corruption in Audio during playback session with audio effects enabled. Memory corruption in Audio during playback session with audio effects enabled.

CVE-2022-40524 [HIGH] CWE-126 CVE-2022-40524: Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service. Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.

CVE-2023-21638 [HIGH] CWE-704 CVE-2023-21638: Memory corruption in Video while calling APIs with different instance ID than the one received in in Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.

CVE-2024-53034 [HIGH] CWE-822 CVE-2024-53034: Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object h Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.

CVE-2018-11952 [HIGH] CWE-287 CVE-2018-11952: An image with a version lower than the fuse version may potentially be booted lead to improper authe An image with a version lower than the fuse version may potentially be booted lead to improper authentication.

CVE-2016-10408 [HIGH] CWE-284 CVE-2016-10408: QSEE will randomly experience a fatal error during execution due to speculative instruction fetches QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.

CVE-2025-47366 [HIGH] CWE-749 CVE-2025-47366: Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrec Cryptographic issue when a Trusted Zone with outdated code is triggered by a HLOS providing incorrect input.

CVE-2023-33105 [HIGH] CWE-16 CVE-2023-33105: Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent wit Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.

CVE-2023-33062 [HIGH] CWE-126 CVE-2023-33062: Transient DOS in WLAN Firmware while parsing a BTM request. Transient DOS in WLAN Firmware while parsing a BTM request.

CVE-2023-21625 [HIGH] CWE-126 CVE-2023-21625: Information disclosure in Network Services due to buffer over-read while the device receives DNS res Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

CVE-2024-33057 [HIGH] CWE-126 CVE-2024-33057: Transient DOS while parsing the multi-link element Control field when common information length chec Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.

CVE-2024-49838 [HIGH] CWE-126 CVE-2024-49838: Information disclosure while parsing the OCI IE with invalid length. Information disclosure while parsing the OCI IE with invalid length.

CVE-2026-21367 [HIGH] CWE-126 CVE-2026-21367: Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes durin Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.

CVE-2025-47318 [HIGH] CWE-126 CVE-2025-47318: Transient DOS while parsing the EPTM test control message to get the test pattern. Transient DOS while parsing the EPTM test control message to get the test pattern.

CVE-2024-33058 [HIGH] CWE-1220 CVE-2024-33058: Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP. Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.

CVE-2025-47383 [HIGH] CWE-325 CVE-2025-47383: Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE. Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

CVE-2022-33246 [HIGH] CWE-823 CVE-2022-33246: Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call s Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.

CVE-2022-33227 [HIGH] CWE-415 CVE-2022-33227: Memory corruption in Linux android due to double free while calling unregister provider after regist Memory corruption in Linux android due to double free while calling unregister provider after register call.

CVE-2022-33266 [HIGH] CWE-190 CVE-2022-33266: Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.