Qualcomm Inc Snapdragon vulnerabilities

CVE-2022-25738 [HIGH] CWE-126 CVE-2022-25738: Information disclosure in modem due to buffer over-red while performing checksum of packet received Information disclosure in modem due to buffer over-red while performing checksum of packet received

CVE-2022-33229 [HIGH] CWE-126 CVE-2022-33229: Information disclosure due to buffer over-read in Modem while using static array to process IPv4 pac Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

CVE-2023-21625 [HIGH] CWE-126 CVE-2023-21625: Information disclosure in Network Services due to buffer over-read while the device receives DNS res Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

CVE-2022-33258 [HIGH] CWE-126 CVE-2022-33258: Information disclosure due to buffer over-read in modem while reading configuration parameters. Information disclosure due to buffer over-read in modem while reading configuration parameters.

CVE-2022-25726 [HIGH] CWE-126 CVE-2022-25726: Information disclosure in modem data due to array out of bound access while handling the incoming DN Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

CVE-2022-25737 [HIGH] CWE-457 CVE-2022-25737: Information disclosure in modem due to missing NULL check while reading packets received from local Information disclosure in modem due to missing NULL check while reading packets received from local network

CVE-2023-33109 [HIGH] CWE-476 CVE-2023-33109: Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

CVE-2023-43512 [HIGH] CWE-126 CVE-2023-43512: Transient DOS while parsing GATT service data when the total amount of memory that is required by th Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services buffer.

CVE-2023-43555 [HIGH] CWE-126 CVE-2023-43555: Information disclosure in Video while parsing mp2 clip with invalid section length. Information disclosure in Video while parsing mp2 clip with invalid section length.

CVE-2025-47403 [HIGH] CWE-126 CVE-2025-47403: Transient DOS when processing a malformed Fast Transition response frame with an invalid header stru Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

CVE-2024-21466 [HIGH] CWE-191 CVE-2024-21466: Information disclosure while parsing sub-IE length during new IE generation. Information disclosure while parsing sub-IE length during new IE generation.

CVE-2024-21458 [HIGH] CWE-126 CVE-2024-21458: Information disclosure while handling SA query action frame. Information disclosure while handling SA query action frame.

CVE-2023-43537 [HIGH] CWE-126 CVE-2023-43537: Information disclosure while handling T2LM Action Frame in WLAN Host. Information disclosure while handling T2LM Action Frame in WLAN Host.

CVE-2026-24089 [HIGH] CWE-1286 CVE-2026-24089: Memory corruption while processing fastboot commands with invalid input. Memory corruption while processing fastboot commands with invalid input.

CVE-2023-28556 [HIGH] CWE-285 CVE-2023-28556: Cryptographic issue in HLOS during key management. Cryptographic issue in HLOS during key management.

CVE-2022-33246 [HIGH] CWE-823 CVE-2022-33246: Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call s Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.

CVE-2023-33061 [HIGH] CWE-126 CVE-2023-33061: Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.

CVE-2022-34146 [HIGH] CWE-20 CVE-2022-34146: Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentati Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation.

CVE-2022-40502 [HIGH] CWE-20 CVE-2022-40502: Transient DOS due to improper input validation in WLAN Host. Transient DOS due to improper input validation in WLAN Host.

CVE-2022-40503 [HIGH] CWE-126 CVE-2022-40503: Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.