Qualcomm Inc Snapdragon vulnerabilities

CVE-2022-33229 [HIGH] CWE-126 CVE-2022-33229: Information disclosure due to buffer over-read in Modem while using static array to process IPv4 pac Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

CVE-2022-33258 [HIGH] CWE-126 CVE-2022-33258: Information disclosure due to buffer over-read in modem while reading configuration parameters. Information disclosure due to buffer over-read in modem while reading configuration parameters.

CVE-2022-25726 [HIGH] CWE-126 CVE-2022-25726: Information disclosure in modem data due to array out of bound access while handling the incoming DN Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

CVE-2022-25737 [HIGH] CWE-457 CVE-2022-25737: Information disclosure in modem due to missing NULL check while reading packets received from local Information disclosure in modem due to missing NULL check while reading packets received from local network

CVE-2023-33109 [HIGH] CWE-476 CVE-2023-33109: Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

CVE-2023-33027 [HIGH] CWE-126 CVE-2023-33027: Transient DOS in WLAN Firmware while parsing rsn ies. Transient DOS in WLAN Firmware while parsing rsn ies.

CVE-2023-43512 [HIGH] CWE-126 CVE-2023-43512: Transient DOS while parsing GATT service data when the total amount of memory that is required by th Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services buffer.

CVE-2023-24849 [HIGH] CWE-126 CVE-2023-24849: Information Disclosure in data Modem while parsing an FMTP line in an SDP message. Information Disclosure in data Modem while parsing an FMTP line in an SDP message.

CVE-2024-49847 [HIGH] CWE-126 CVE-2024-49847: Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.

CVE-2023-43555 [HIGH] CWE-126 CVE-2023-43555: Information disclosure in Video while parsing mp2 clip with invalid section length. Information disclosure in Video while parsing mp2 clip with invalid section length.

CVE-2025-47403 [HIGH] CWE-126 CVE-2025-47403: Transient DOS when processing a malformed Fast Transition response frame with an invalid header stru Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

CVE-2024-21466 [HIGH] CWE-191 CVE-2024-21466: Information disclosure while parsing sub-IE length during new IE generation. Information disclosure while parsing sub-IE length during new IE generation.

CVE-2024-21458 [HIGH] CWE-126 CVE-2024-21458: Information disclosure while handling SA query action frame. Information disclosure while handling SA query action frame.

CVE-2023-43537 [HIGH] CWE-126 CVE-2023-43537: Information disclosure while handling T2LM Action Frame in WLAN Host. Information disclosure while handling T2LM Action Frame in WLAN Host.

CVE-2025-47318 [HIGH] CWE-126 CVE-2025-47318: Transient DOS while parsing the EPTM test control message to get the test pattern. Transient DOS while parsing the EPTM test control message to get the test pattern.

CVE-2026-24089 [HIGH] CWE-1286 CVE-2026-24089: Memory corruption while processing fastboot commands with invalid input. Memory corruption while processing fastboot commands with invalid input.

CVE-2023-28556 [HIGH] CWE-285 CVE-2023-28556: Cryptographic issue in HLOS during key management. Cryptographic issue in HLOS during key management.

CVE-2022-33246 [HIGH] CWE-823 CVE-2022-33246: Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call s Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.

CVE-2023-33041 [HIGH] CWE-617 CVE-2023-33041: Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looki Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.

CVE-2023-33061 [HIGH] CWE-126 CVE-2023-33061: Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.