Qualcomm Inc Snapdragon vulnerabilities

CVE-2022-33290 [HIGH] CWE-476 CVE-2022-33290: Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.

CVE-2022-33299 [HIGH] CWE-476 CVE-2022-33299: Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protoco Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

CVE-2023-33101 [HIGH] CWE-704 CVE-2023-33101: Transient DOS while processing DL NAS TRANSPORT message with payload length 0. Transient DOS while processing DL NAS TRANSPORT message with payload length 0.

CVE-2024-21452 [HIGH] CWE-20 CVE-2024-21452: Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions. Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.

CVE-2026-24085 [HIGH] CWE-121 CVE-2026-24085: Memory Corruption when processing display command line information due to improper initialization of Memory Corruption when processing display command line information due to improper initialization of a variable.

CVE-2024-45554 [HIGH] CWE-416 CVE-2024-45554: Memory corruption during concurrent SSR execution due to race condition on the global maps list. Memory corruption during concurrent SSR execution due to race condition on the global maps list.

CVE-2024-33040 [HIGH] CWE-416 CVE-2024-33040: Memory corruption while invoking redundant release command to release one buffer from user space as Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.

CVE-2024-53032 [HIGH] CWE-367 CVE-2024-53032: Memory corruption may occur in keyboard virtual device due to guest VM interaction. Memory corruption may occur in keyboard virtual device due to guest VM interaction.

CVE-2024-53028 [HIGH] CWE-367 CVE-2024-53028: Memory corruption may occur while processing message from frontend during allocation. Memory corruption may occur while processing message from frontend during allocation.

CVE-2024-38407 [HIGH] CWE-367 CVE-2024-38407: Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver. Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.

CVE-2026-25271 [HIGH] CWE-367 CVE-2026-25271: Memory Corruption when processing asynchronous input parameters due to improper handling of modified Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.

CVE-2025-27076 [HIGH] CWE-367 CVE-2025-27076: Memory corruption while processing simultaneous requests via escape path. Memory corruption while processing simultaneous requests via escape path.

CVE-2025-47407 [HIGH] CWE-367 CVE-2025-47407: Memory corruption while creating a process on the digital signal processor due to allocation failure Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.

CVE-2024-23375 [MEDIUM] CWE-120 CVE-2024-23375: Memory corruption during the network scan request. Memory corruption during the network scan request.

CVE-2025-47334 [MEDIUM] CWE-120 CVE-2025-47334: Memory corruption while processing shared command buffer packet between camera userspace and kernel. Memory corruption while processing shared command buffer packet between camera userspace and kernel.

CVE-2025-47333 [MEDIUM] CWE-416 CVE-2025-47333: Memory corruption while handling buffer mapping operations in the cryptographic driver. Memory corruption while handling buffer mapping operations in the cryptographic driver.

CVE-2025-47332 [MEDIUM] CWE-367 CVE-2025-47332: Memory corruption while processing a config call from userspace. Memory corruption while processing a config call from userspace.

CVE-2022-33254 [HIGH] CWE-617 CVE-2022-33254: Transient DOS due to reachable assertion in Modem while processing SIB1 Message. Transient DOS due to reachable assertion in Modem while processing SIB1 Message.

CVE-2026-25288 [HIGH] CWE-126 CVE-2026-25288: Transient DOS when processing a short target wake time channel usage response frame with insufficien Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

CVE-2025-47342 [HIGH] CWE-416 CVE-2025-47342: Transient DOS may occur when multi-profile concurrency arises with QHS enabled. Transient DOS may occur when multi-profile concurrency arises with QHS enabled.