Qualcomm Inc Snapdragon vulnerabilities

CVE-2025-59611 [MEDIUM] CWE-787 CVE-2025-59611: Memory corruption in diagnostic services due to absence of input validation Memory corruption in diagnostic services due to absence of input validation

CVE-2025-59612 [MEDIUM] CWE-121 CVE-2025-59612: Memory corruption in windows drivers while sending incorrect trusted application request Memory corruption in windows drivers while sending incorrect trusted application request

CVE-2024-45544 [MEDIUM] CWE-416 CVE-2024-45544: Memory corruption while processing IOCTL calls to add route entry in the HW. Memory corruption while processing IOCTL calls to add route entry in the HW.

CVE-2024-53015 [MEDIUM] CWE-416 CVE-2024-53015: Memory corruption while processing IOCTL command to handle buffers associated with a session. Memory corruption while processing IOCTL command to handle buffers associated with a session.

CVE-2025-27039 [MEDIUM] CWE-390 CVE-2025-27039: Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request. Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.

CVE-2024-38403 [MEDIUM] CWE-126 CVE-2024-38403: Transient DOS while parsing BTM ML IE when per STA profile is not included. Transient DOS while parsing BTM ML IE when per STA profile is not included.

CVE-2024-33068 [MEDIUM] CWE-416 CVE-2024-33068: Transient DOS while parsing fragments of MBSSID IE from beacon frame. Transient DOS while parsing fragments of MBSSID IE from beacon frame.

CVE-2024-23385 [MEDIUM] CWE-617 CVE-2024-23385: Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

CVE-2024-23362 [HIGH] CWE-20 CVE-2024-23362: Cryptographic issue while parsing RSA keys in COBR format. Cryptographic issue while parsing RSA keys in COBR format.

CVE-2023-21652 [HIGH] CWE-320 CVE-2023-21652: Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

CVE-2025-21482 [HIGH] CWE-310 CVE-2025-21482: Cryptographic issue while performing RSA PKCS padding decoding. Cryptographic issue while performing RSA PKCS padding decoding.

CVE-2023-33110 [HIGH] CWE-823 CVE-2023-33110: The session index variable in PCM host voice audio driver initialized before PCM open, accessed duri The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

CVE-2024-33016 [MEDIUM] CWE-119 CVE-2024-33016: memory corruption when an invalid firehose patch command is invoked. memory corruption when an invalid firehose patch command is invoked.

CVE-2021-30299 [MEDIUM] CWE-20 CVE-2021-30299: Possible out of bound access in audio module due to lack of validation of user provided input. Possible out of bound access in audio module due to lack of validation of user provided input.

CVE-2024-23370 [MEDIUM] CWE-416 CVE-2024-23370: Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.

CVE-2024-33039 [MEDIUM] CWE-822 CVE-2024-33039: Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.

CVE-2024-33032 [MEDIUM] CWE-129 CVE-2024-33032: Memory corruption when the user application modifies the same shared memory asynchronously when kern Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

CVE-2024-23377 [MEDIUM] CWE-823 CVE-2024-23377: Memory corruption while invoking IOCTL command from user-space, when a user modifies the original pa Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.

CVE-2024-38405 [MEDIUM] CWE-126 CVE-2024-38405: Transient DOS while processing the CU information from RNR IE. Transient DOS while processing the CU information from RNR IE.

CVE-2025-59601 [MEDIUM] CWE-1230 CVE-2025-59601: Information Disclosure when resetting device to factory default settings through powerline interface Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.