Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-28576 [HIGH] CWE-367 CVE-2023-28576: The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in users The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header (e.g. header.count), causing checks (e.g. size checks) in kernel code to be invalid. This may lead to out-of-bounds read/write issues.

CVE-2024-33016 [MEDIUM] CWE-119 CVE-2024-33016: memory corruption when an invalid firehose patch command is invoked. memory corruption when an invalid firehose patch command is invoked.

CVE-2024-33036 [MEDIUM] CWE-823 CVE-2024-33036: Memory corruption while parsing sensor packets in camera driver, user-space variable is used while a Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.

CVE-2024-33030 [MEDIUM] CWE-120 CVE-2024-33030: Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than e Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

CVE-2024-23386 [MEDIUM] CWE-20 CVE-2024-23386: memory corruption when WiFi display APIs are invoked with large random inputs. memory corruption when WiFi display APIs are invoked with large random inputs.

CVE-2025-59612 [MEDIUM] CWE-121 CVE-2025-59612: Memory corruption in windows drivers while sending incorrect trusted application request Memory corruption in windows drivers while sending incorrect trusted application request

CVE-2025-47336 [MEDIUM] CWE-416 CVE-2025-47336: Memory corruption while performing sensor register read operations. Memory corruption while performing sensor register read operations.

CVE-2024-45544 [MEDIUM] CWE-416 CVE-2024-45544: Memory corruption while processing IOCTL calls to add route entry in the HW. Memory corruption while processing IOCTL calls to add route entry in the HW.

CVE-2024-53015 [MEDIUM] CWE-416 CVE-2024-53015: Memory corruption while processing IOCTL command to handle buffers associated with a session. Memory corruption while processing IOCTL command to handle buffers associated with a session.

CVE-2025-27039 [MEDIUM] CWE-390 CVE-2025-27039: Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request. Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.

CVE-2024-38403 [MEDIUM] CWE-126 CVE-2024-38403: Transient DOS while parsing BTM ML IE when per STA profile is not included. Transient DOS while parsing BTM ML IE when per STA profile is not included.

CVE-2024-33068 [MEDIUM] CWE-416 CVE-2024-33068: Transient DOS while parsing fragments of MBSSID IE from beacon frame. Transient DOS while parsing fragments of MBSSID IE from beacon frame.

CVE-2024-23385 [MEDIUM] CWE-617 CVE-2024-23385: Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

CVE-2024-23362 [HIGH] CWE-20 CVE-2024-23362: Cryptographic issue while parsing RSA keys in COBR format. Cryptographic issue while parsing RSA keys in COBR format.

CVE-2023-21652 [HIGH] CWE-320 CVE-2023-21652: Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

CVE-2025-21482 [HIGH] CWE-310 CVE-2025-21482: Cryptographic issue while performing RSA PKCS padding decoding. Cryptographic issue while performing RSA PKCS padding decoding.

CVE-2023-33110 [HIGH] CWE-823 CVE-2023-33110: The session index variable in PCM host voice audio driver initialized before PCM open, accessed duri The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

CVE-2021-30299 [MEDIUM] CWE-20 CVE-2021-30299: Possible out of bound access in audio module due to lack of validation of user provided input. Possible out of bound access in audio module due to lack of validation of user provided input.

CVE-2024-23370 [MEDIUM] CWE-416 CVE-2024-23370: Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.

CVE-2024-23378 [MEDIUM] CWE-120 CVE-2024-23378: Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playbac Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.