Qualcomm Inc Snapdragon vulnerabilities

CVE-2026-25270 [MEDIUM] CWE-787 CVE-2026-25270: Memory corruption when processing command buffer requests with invalid length parameters in the Andr Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

CVE-2026-25272 [MEDIUM] CWE-787 CVE-2026-25272: Memory Corruption when processing camera CRE driver operations with improper handling of buffer limi Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

CVE-2026-25273 [MEDIUM] CWE-787 CVE-2026-25273: Memory Corruption when processing camera operations due to out-of-bounds write during driver updates Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

CVE-2023-21647 [MEDIUM] CWE-20 CVE-2023-21647: Information disclosure in Bluetooth when an GATT packet is received due to improper input validation Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.

CVE-2024-45540 [MEDIUM] CWE-416 CVE-2024-45540: Memory corruption while invoking IOCTL map buffer request from userspace. Memory corruption while invoking IOCTL map buffer request from userspace.

CVE-2025-47374 [MEDIUM] CWE-416 CVE-2025-47374: Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal hand Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.

CVE-2023-21626 [HIGH] CWE-320 CVE-2023-21626: Cryptographic issue in HLOS due to improper authentication while performing key velocity checks usin Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

CVE-2026-21383 [HIGH] CWE-323 CVE-2026-21383: Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requir Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

CVE-2025-47400 [HIGH] CWE-126 CVE-2025-47400: Cryptographic issue while copying data to a destination buffer without validating its size. Cryptographic issue while copying data to a destination buffer without validating its size.

CVE-2026-25302 [HIGH] CWE-347 CVE-2026-25302: Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypa Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

CVE-2017-18153 [HIGH] CWE-416 CVE-2017-18153: A race condition exists in a driver potentially leading to a use-after-free condition. A race condition exists in a driver potentially leading to a use-after-free condition.

CVE-2023-33046 [HIGH] CWE-367 CVE-2023-33046: Memory corruption in Trusted Execution Environment while deinitializing an object used for license v Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

CVE-2024-49848 [MEDIUM] CWE-416 CVE-2024-49848: Memory corruption while processing multiple IOCTL calls from HLOS to DSP. Memory corruption while processing multiple IOCTL calls from HLOS to DSP.

CVE-2024-23379 [MEDIUM] CWE-415 CVE-2024-23379: Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurre Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.

CVE-2024-23374 [MEDIUM] CWE-121 CVE-2024-23374: Memory corruption is possible when an attempt is made from userspace or console to write some haptic Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.

CVE-2026-24076 [MEDIUM] CWE-120 CVE-2026-24076: Memory Corruption when processing registry values with incorrect types using a direct query method. Memory Corruption when processing registry values with incorrect types using a direct query method.

CVE-2025-47337 [MEDIUM] CWE-416 CVE-2025-47337: Memory corruption while accessing a synchronization object during concurrent operations. Memory corruption while accessing a synchronization object during concurrent operations.

CVE-2025-59614 [MEDIUM] CWE-787 CVE-2025-59614: Memory Corruption when sending random number generator command with insufficient output buffer size. Memory Corruption when sending random number generator command with insufficient output buffer size.

CVE-2025-59613 [MEDIUM] CWE-121 CVE-2025-59613: Memory Corruption when output buffer size is smaller than input buffer size during data copying oper Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.

CVE-2024-45543 [MEDIUM] CWE-787 CVE-2024-45543: Memory corruption while accessing MSM channel map and mixer functions. Memory corruption while accessing MSM channel map and mixer functions.