Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-33046 [HIGH] CWE-367 CVE-2023-33046: Memory corruption in Trusted Execution Environment while deinitializing an object used for license v Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

CVE-2024-49848 [MEDIUM] CWE-416 CVE-2024-49848: Memory corruption while processing multiple IOCTL calls from HLOS to DSP. Memory corruption while processing multiple IOCTL calls from HLOS to DSP.

CVE-2024-23379 [MEDIUM] CWE-415 CVE-2024-23379: Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurre Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.

CVE-2024-23374 [MEDIUM] CWE-121 CVE-2024-23374: Memory corruption is possible when an attempt is made from userspace or console to write some haptic Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.

CVE-2025-47337 [MEDIUM] CWE-416 CVE-2025-47337: Memory corruption while accessing a synchronization object during concurrent operations. Memory corruption while accessing a synchronization object during concurrent operations.

CVE-2025-59614 [MEDIUM] CWE-787 CVE-2025-59614: Memory Corruption when sending random number generator command with insufficient output buffer size. Memory Corruption when sending random number generator command with insufficient output buffer size.

CVE-2025-59613 [MEDIUM] CWE-121 CVE-2025-59613: Memory Corruption when output buffer size is smaller than input buffer size during data copying oper Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.

CVE-2024-45543 [MEDIUM] CWE-787 CVE-2024-45543: Memory corruption while accessing MSM channel map and mixer functions. Memory corruption while accessing MSM channel map and mixer functions.

CVE-2024-53013 [MEDIUM] CWE-120 CVE-2024-53013: Memory corruption may occur while processing voice call registration with user. Memory corruption may occur while processing voice call registration with user.

CVE-2024-53017 [MEDIUM] CWE-823 CVE-2024-53017: Memory corruption while handling test pattern generator IOCTL command. Memory corruption while handling test pattern generator IOCTL command.

CVE-2024-53016 [MEDIUM] CWE-367 CVE-2024-53016: Memory corruption while processing I2C settings in Camera driver. Memory corruption while processing I2C settings in Camera driver.

CVE-2024-53018 [MEDIUM] CWE-367 CVE-2024-53018: Memory corruption may occur while processing the OIS packet parser. Memory corruption may occur while processing the OIS packet parser.

CVE-2025-59610 [MEDIUM] CWE-367 CVE-2025-59610: Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modi Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.

CVE-2024-43065 [HIGH] CWE-749 CVE-2024-43065: Cryptographic issues while generating an asymmetric key pair for RKP use cases. Cryptographic issues while generating an asymmetric key pair for RKP use cases.

CVE-2022-33257 [HIGH] CWE-367 CVE-2022-33257: Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

CVE-2023-28576 [HIGH] CWE-367 CVE-2023-28576: The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in users The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header (e.g. header.count), causing checks (e.g. size checks) in kernel code to be invalid. This may lead to out-of-bounds read/write issues.

CVE-2024-33036 [MEDIUM] CWE-823 CVE-2024-33036: Memory corruption while parsing sensor packets in camera driver, user-space variable is used while a Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.

CVE-2024-33030 [MEDIUM] CWE-120 CVE-2024-33030: Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than e Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

CVE-2024-23386 [MEDIUM] CWE-20 CVE-2024-23386: memory corruption when WiFi display APIs are invoked with large random inputs. memory corruption when WiFi display APIs are invoked with large random inputs.

CVE-2025-47336 [MEDIUM] CWE-416 CVE-2025-47336: Memory corruption while performing sensor register read operations. Memory corruption while performing sensor register read operations.