Qualcomm Inc Snapdragon vulnerabilities

CVE-2024-33039 [MEDIUM] CWE-822 CVE-2024-33039: Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.

CVE-2024-33032 [MEDIUM] CWE-129 CVE-2024-33032: Memory corruption when the user application modifies the same shared memory asynchronously when kern Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

CVE-2024-23377 [MEDIUM] CWE-823 CVE-2024-23377: Memory corruption while invoking IOCTL command from user-space, when a user modifies the original pa Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.

CVE-2024-38405 [MEDIUM] CWE-126 CVE-2024-38405: Transient DOS while processing the CU information from RNR IE. Transient DOS while processing the CU information from RNR IE.

CVE-2025-59601 [MEDIUM] CWE-1230 CVE-2025-59601: Information Disclosure when resetting device to factory default settings through powerline interface Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.

CVE-2025-27045 [MEDIUM] CWE-126 CVE-2025-27045: Information disclosure while processing batch command execution in Video driver. Information disclosure while processing batch command execution in Video driver.

CVE-2025-47370 [MEDIUM] CWE-617 CVE-2025-47370: Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

CVE-2023-33065 [HIGH] CWE-126 CVE-2023-33065: Information disclosure in Audio while accessing AVCS services from ADSP payload. Information disclosure in Audio while accessing AVCS services from ADSP payload.

CVE-2023-21629 [MEDIUM] CWE-415 CVE-2023-21629: Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

CVE-2024-45556 [MEDIUM] CWE-1262 CVE-2024-45556: Cryptographic issue may arise because the access control configuration permits Linux to read key reg Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

CVE-2024-45551 [MEDIUM] CWE-1390 CVE-2024-45551: Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.

CVE-2025-27030 [MEDIUM] CWE-126 CVE-2025-27030: information disclosure while invoking calibration data from user space to update firmware size. information disclosure while invoking calibration data from user space to update firmware size.

CVE-2025-27064 [MEDIUM] CWE-126 CVE-2025-27064: Information disclosure while registering commands from clients with diag through diagHal. Information disclosure while registering commands from clients with diag through diagHal.

CVE-2025-47331 [MEDIUM] CWE-126 CVE-2025-47331: Information disclosure while processing a firmware event. Information disclosure while processing a firmware event.

CVE-2024-38426 [MEDIUM] CWE-287 CVE-2024-38426: While processing the authentication message in UE, improper authentication may lead to information d While processing the authentication message in UE, improper authentication may lead to information disclosure.

CVE-2022-33289 [MEDIUM] CWE-129 CVE-2022-33289: Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is s Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.

CVE-2023-33014 [MEDIUM] CWE-20 CVE-2023-33014: Information disclosure in Core services while processing a Diag command. Information disclosure in Core services while processing a Diag command.

CVE-2025-47402 [MEDIUM] CWE-126 CVE-2025-47402: Transient DOS when processing a received frame with an excessively large authentication information Transient DOS when processing a received frame with an excessively large authentication information element.

CVE-2025-21464 [MEDIUM] CWE-125 CVE-2025-21464: Information disclosure while reading data from an image using specified offset and size parameters. Information disclosure while reading data from an image using specified offset and size parameters.

CVE-2025-21465 [MEDIUM] CWE-125 CVE-2025-21465: Information disclosure while processing the hash segment in an MBN file. Information disclosure while processing the hash segment in an MBN file.