Qualcomm Inc Snapdragon vulnerabilities

CVE-2022-33299 [HIGH] CWE-476 CVE-2022-33299: Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protoco Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

CVE-2023-21653 [HIGH] CWE-617 CVE-2023-21653: Transient DOS in Modem while processing RRC reconfiguration message. Transient DOS in Modem while processing RRC reconfiguration message.

CVE-2022-33305 [HIGH] CWE-476 CVE-2022-33305: Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH. Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.

CVE-2022-40508 [HIGH] CWE-617 CVE-2022-40508: Transient DOS due to reachable assertion in Modem while processing config related to cross carrier s Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.

CVE-2022-33294 [HIGH] CWE-476 CVE-2022-33294: Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registratio Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.

CVE-2024-21453 [HIGH] CWE-20 CVE-2024-21453: Transient DOS while decoding message of size that exceeds the available system memory. Transient DOS while decoding message of size that exceeds the available system memory.

CVE-2024-23353 [HIGH] CWE-126 CVE-2024-23353: Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI. Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

CVE-2023-33100 [HIGH] CWE-20 CVE-2023-33100: Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP s Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.

CVE-2023-33101 [HIGH] CWE-704 CVE-2023-33101: Transient DOS while processing DL NAS TRANSPORT message with payload length 0. Transient DOS while processing DL NAS TRANSPORT message with payload length 0.

CVE-2024-21452 [HIGH] CWE-20 CVE-2024-21452: Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions. Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.

CVE-2026-24081 [HIGH] CWE-126 CVE-2026-24081: Transient DOS when processing a channel map with insufficient used channels and adaptive frequency h Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

CVE-2026-25294 [HIGH] CWE-126 CVE-2026-25294: Transient DOS while parsing frame during channel usage. Transient DOS while parsing frame during channel usage.

CVE-2026-24085 [HIGH] CWE-121 CVE-2026-24085: Memory Corruption when processing display command line information due to improper initialization of Memory Corruption when processing display command line information due to improper initialization of a variable.

CVE-2024-45554 [HIGH] CWE-416 CVE-2024-45554: Memory corruption during concurrent SSR execution due to race condition on the global maps list. Memory corruption during concurrent SSR execution due to race condition on the global maps list.

CVE-2024-33040 [HIGH] CWE-416 CVE-2024-33040: Memory corruption while invoking redundant release command to release one buffer from user space as Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.

CVE-2024-53032 [HIGH] CWE-367 CVE-2024-53032: Memory corruption may occur in keyboard virtual device due to guest VM interaction. Memory corruption may occur in keyboard virtual device due to guest VM interaction.

CVE-2024-53028 [HIGH] CWE-367 CVE-2024-53028: Memory corruption may occur while processing message from frontend during allocation. Memory corruption may occur while processing message from frontend during allocation.

CVE-2024-38407 [HIGH] CWE-367 CVE-2024-38407: Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver. Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.

CVE-2026-25271 [HIGH] CWE-367 CVE-2026-25271: Memory Corruption when processing asynchronous input parameters due to improper handling of modified Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.

CVE-2025-27076 [HIGH] CWE-367 CVE-2025-27076: Memory corruption while processing simultaneous requests via escape path. Memory corruption while processing simultaneous requests via escape path.