Qualcomm Inc Snapdragon vulnerabilities

CVE-2024-53013 [MEDIUM] CWE-120 CVE-2024-53013: Memory corruption may occur while processing voice call registration with user. Memory corruption may occur while processing voice call registration with user.

CVE-2024-53017 [MEDIUM] CWE-823 CVE-2024-53017: Memory corruption while handling test pattern generator IOCTL command. Memory corruption while handling test pattern generator IOCTL command.

CVE-2024-53016 [MEDIUM] CWE-367 CVE-2024-53016: Memory corruption while processing I2C settings in Camera driver. Memory corruption while processing I2C settings in Camera driver.

CVE-2024-53018 [MEDIUM] CWE-367 CVE-2024-53018: Memory corruption may occur while processing the OIS packet parser. Memory corruption may occur while processing the OIS packet parser.

CVE-2025-47344 [MEDIUM] CWE-367 CVE-2025-47344: Memory corruption while handling sensor utility operations. Memory corruption while handling sensor utility operations.

CVE-2025-59610 [MEDIUM] CWE-367 CVE-2025-59610: Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modi Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.

CVE-2024-43065 [HIGH] CWE-749 CVE-2024-43065: Cryptographic issues while generating an asymmetric key pair for RKP use cases. Cryptographic issues while generating an asymmetric key pair for RKP use cases.

CVE-2022-33257 [HIGH] CWE-367 CVE-2022-33257: Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

CVE-2023-28576 [HIGH] CWE-367 CVE-2023-28576: The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in users The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode may race and modify the packet header (e.g. header.count), causing checks (e.g. size checks) in kernel code to be invalid. This may lead to out-of-bounds read/write issues.

CVE-2024-33036 [MEDIUM] CWE-823 CVE-2024-33036: Memory corruption while parsing sensor packets in camera driver, user-space variable is used while a Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.

CVE-2024-33030 [MEDIUM] CWE-120 CVE-2024-33030: Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than e Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

CVE-2024-23386 [MEDIUM] CWE-20 CVE-2024-23386: memory corruption when WiFi display APIs are invoked with large random inputs. memory corruption when WiFi display APIs are invoked with large random inputs.

CVE-2025-47336 [MEDIUM] CWE-416 CVE-2025-47336: Memory corruption while performing sensor register read operations. Memory corruption while performing sensor register read operations.

CVE-2025-59611 [MEDIUM] CWE-787 CVE-2025-59611: Memory corruption in diagnostic services due to absence of input validation Memory corruption in diagnostic services due to absence of input validation

CVE-2025-59612 [MEDIUM] CWE-121 CVE-2025-59612: Memory corruption in windows drivers while sending incorrect trusted application request Memory corruption in windows drivers while sending incorrect trusted application request

CVE-2024-45544 [MEDIUM] CWE-416 CVE-2024-45544: Memory corruption while processing IOCTL calls to add route entry in the HW. Memory corruption while processing IOCTL calls to add route entry in the HW.

CVE-2024-53015 [MEDIUM] CWE-416 CVE-2024-53015: Memory corruption while processing IOCTL command to handle buffers associated with a session. Memory corruption while processing IOCTL command to handle buffers associated with a session.

CVE-2026-25263 [MEDIUM] CWE-787 CVE-2026-25263: Memory corruption while processing IOCTL command called from user space to the kernel with invalid p Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

CVE-2024-33068 [MEDIUM] CWE-416 CVE-2024-33068: Transient DOS while parsing fragments of MBSSID IE from beacon frame. Transient DOS while parsing fragments of MBSSID IE from beacon frame.

CVE-2024-23385 [MEDIUM] CWE-617 CVE-2024-23385: Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.