Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-21626 [HIGH] CWE-320 CVE-2023-21626: Cryptographic issue in HLOS due to improper authentication while performing key velocity checks usin Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

CVE-2025-47378 [HIGH] CWE-497 CVE-2025-47378: Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain. Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.

CVE-2026-24090 [HIGH] CWE-306 CVE-2026-24090: Cryptographic issue while processing partition table entries allows unauthorized modification of boo Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

CVE-2023-43543 [HIGH] CWE-416 CVE-2023-43543: Memory corruption in Audio during a playback or a recording due to race condition between allocation Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.

CVE-2022-25716 [HIGH] CWE-367 CVE-2022-25716: Memory corruption in Multimedia Framework due to unsafe access to the data members Memory corruption in Multimedia Framework due to unsafe access to the data members

CVE-2024-45565 [HIGH] CWE-367 CVE-2024-45565: Memory corruption when blob structure is modified by user-space after kernel verification. Memory corruption when blob structure is modified by user-space after kernel verification.

CVE-2023-33119 [HIGH] CWE-367 CVE-2023-33119: Memory corruption while loading a VM from a signed VM image that is not coherent in the processor ca Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.

CVE-2024-23376 [MEDIUM] CWE-416 CVE-2024-23376: Memory corruption while sending the persist buffer command packet from the user-space to the kernel Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.

CVE-2024-33053 [MEDIUM] CWE-416 CVE-2024-33053: Memory corruption when multiple threads try to unregister the CVP buffer at the same time. Memory corruption when multiple threads try to unregister the CVP buffer at the same time.

CVE-2024-33029 [MEDIUM] CWE-416 CVE-2024-33029: Memory corruption while handling the PDR in driver for getting the remote heap maps. Memory corruption while handling the PDR in driver for getting the remote heap maps.

CVE-2024-33031 [MEDIUM] CWE-20 CVE-2024-33031: Memory corruption while processing the update SIM PB records request. Memory corruption while processing the update SIM PB records request.

CVE-2025-47335 [MEDIUM] CWE-120 CVE-2025-47335: Memory corruption while parsing clock configuration data for a specific hardware type. Memory corruption while parsing clock configuration data for a specific hardware type.

CVE-2026-24076 [MEDIUM] CWE-120 CVE-2026-24076: Memory Corruption when processing registry values with incorrect types using a direct query method. Memory Corruption when processing registry values with incorrect types using a direct query method.

CVE-2023-21647 [MEDIUM] CWE-20 CVE-2023-21647: Information disclosure in Bluetooth when an GATT packet is received due to improper input validation Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.

CVE-2024-45540 [MEDIUM] CWE-416 CVE-2024-45540: Memory corruption while invoking IOCTL map buffer request from userspace. Memory corruption while invoking IOCTL map buffer request from userspace.

CVE-2025-47374 [MEDIUM] CWE-416 CVE-2025-47374: Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal hand Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

CVE-2025-47344 [MEDIUM] CWE-367 CVE-2025-47344: Memory corruption while handling sensor utility operations. Memory corruption while handling sensor utility operations.

CVE-2026-21383 [HIGH] CWE-323 CVE-2026-21383: Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requir Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

CVE-2025-47400 [HIGH] CWE-126 CVE-2025-47400: Cryptographic issue while copying data to a destination buffer without validating its size. Cryptographic issue while copying data to a destination buffer without validating its size.

CVE-2017-18153 [HIGH] CWE-416 CVE-2017-18153: A race condition exists in a driver potentially leading to a use-after-free condition. A race condition exists in a driver potentially leading to a use-after-free condition.