Qualcomm Inc Snapdragon vulnerabilities

CVE-2024-33049 [HIGH] CWE-126 CVE-2024-33049: Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.

CVE-2024-21479 [HIGH] CWE-126 CVE-2024-21479: Transient DOS during music playback of ALAC content. Transient DOS during music playback of ALAC content.

CVE-2023-33103 [HIGH] CWE-20 CVE-2023-33103: Transient DOS while processing CAG info IE received from NW. Transient DOS while processing CAG info IE received from NW.

CVE-2023-43539 [HIGH] CWE-126 CVE-2023-43539: Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame.

CVE-2023-33096 [HIGH] CWE-617 CVE-2023-33096: Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16. Transient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.

CVE-2023-33057 [HIGH] CWE-20 CVE-2023-33057: Transient DOS in Multi-Mode Call Processor while processing UE policy container. Transient DOS in Multi-Mode Call Processor while processing UE policy container.

CVE-2023-33049 [HIGH] CWE-401 CVE-2023-33049: Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage. Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.

CVE-2024-33012 [HIGH] CWE-126 CVE-2024-33012: Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.

CVE-2024-33024 [HIGH] CWE-190 CVE-2024-33024: Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML I Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.

CVE-2026-24075 [HIGH] CWE-126 CVE-2026-24075: Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handle Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

CVE-2024-38418 [HIGH] CWE-367 CVE-2024-38418: Memory corruption while parsing the memory map info in IOCTL calls. Memory corruption while parsing the memory map info in IOCTL calls.

CVE-2024-45560 [HIGH] CWE-367 CVE-2024-45560: Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer. Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.

CVE-2024-38406 [HIGH] CWE-367 CVE-2024-38406: Memory corruption while handling IOCTL calls in JPEG Encoder driver. Memory corruption while handling IOCTL calls in JPEG Encoder driver.

CVE-2026-25278 [HIGH] CWE-367 CVE-2026-25278: Memory Corruption when processing I2C transfer requests due to a race condition between memory alloc Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

CVE-2025-21473 [HIGH] CWE-367 CVE-2025-21473: Memory corruption when using Virtual cdm (Camera Data Mover) to write registers. Memory corruption when using Virtual cdm (Camera Data Mover) to write registers.

CVE-2026-25260 [HIGH] CWE-367 CVE-2026-25260: Memory Corruption when accessing shared buffers without validation of concurrent user-mode input mod Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.

CVE-2022-34145 [HIGH] CWE-126 CVE-2022-34145: Transient DOS due to buffer over-read in WLAN Host while parsing frame information. Transient DOS due to buffer over-read in WLAN Host while parsing frame information.

CVE-2022-33309 [HIGH] CWE-126 CVE-2022-33309: Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size les Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.

CVE-2022-25733 [HIGH] CWE-476 CVE-2022-25733: Denial of service in modem due to null pointer dereference while processing DNS packets Denial of service in modem due to null pointer dereference while processing DNS packets

CVE-2022-33290 [HIGH] CWE-476 CVE-2022-33290: Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.