Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-21647 [MEDIUM] CWE-20 CVE-2023-21647: Information disclosure in Bluetooth when an GATT packet is received due to improper input validation Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.

CVE-2025-47374 [MEDIUM] CWE-416 CVE-2025-47374: Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal hand Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

CVE-2025-47344 [MEDIUM] CWE-367 CVE-2025-47344: Memory corruption while handling sensor utility operations. Memory corruption while handling sensor utility operations.

CVE-2025-47400 [HIGH] CWE-126 CVE-2025-47400: Cryptographic issue while copying data to a destination buffer without validating its size. Cryptographic issue while copying data to a destination buffer without validating its size.

CVE-2017-18153 [HIGH] CWE-416 CVE-2017-18153: A race condition exists in a driver potentially leading to a use-after-free condition. A race condition exists in a driver potentially leading to a use-after-free condition.

CVE-2023-33046 [HIGH] CWE-367 CVE-2023-33046: Memory corruption in Trusted Execution Environment while deinitializing an object used for license v Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

CVE-2024-49848 [MEDIUM] CWE-416 CVE-2024-49848: Memory corruption while processing multiple IOCTL calls from HLOS to DSP. Memory corruption while processing multiple IOCTL calls from HLOS to DSP.

CVE-2024-23379 [MEDIUM] CWE-415 CVE-2024-23379: Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurre Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.

CVE-2024-23374 [MEDIUM] CWE-121 CVE-2024-23374: Memory corruption is possible when an attempt is made from userspace or console to write some haptic Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.

CVE-2025-59614 [MEDIUM] CWE-787 CVE-2025-59614: Memory Corruption when sending random number generator command with insufficient output buffer size. Memory Corruption when sending random number generator command with insufficient output buffer size.

CVE-2025-59611 [MEDIUM] CWE-787 CVE-2025-59611: Memory corruption in diagnostic services due to absence of input validation Memory corruption in diagnostic services due to absence of input validation

CVE-2025-47337 [MEDIUM] CWE-416 CVE-2025-47337: Memory corruption while accessing a synchronization object during concurrent operations. Memory corruption while accessing a synchronization object during concurrent operations.

CVE-2024-45543 [MEDIUM] CWE-787 CVE-2024-45543: Memory corruption while accessing MSM channel map and mixer functions. Memory corruption while accessing MSM channel map and mixer functions.

CVE-2024-53013 [MEDIUM] CWE-120 CVE-2024-53013: Memory corruption may occur while processing voice call registration with user. Memory corruption may occur while processing voice call registration with user.

CVE-2024-53017 [MEDIUM] CWE-823 CVE-2024-53017: Memory corruption while handling test pattern generator IOCTL command. Memory corruption while handling test pattern generator IOCTL command.

CVE-2024-53016 [MEDIUM] CWE-367 CVE-2024-53016: Memory corruption while processing I2C settings in Camera driver. Memory corruption while processing I2C settings in Camera driver.

CVE-2024-53018 [MEDIUM] CWE-367 CVE-2024-53018: Memory corruption may occur while processing the OIS packet parser. Memory corruption may occur while processing the OIS packet parser.

CVE-2025-59610 [MEDIUM] CWE-367 CVE-2025-59610: Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modi Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.

CVE-2024-43065 [HIGH] CWE-749 CVE-2024-43065: Cryptographic issues while generating an asymmetric key pair for RKP use cases. Cryptographic issues while generating an asymmetric key pair for RKP use cases.

CVE-2022-33257 [HIGH] CWE-367 CVE-2022-33257: Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.