Qualcomm Inc Snapdragon vulnerabilities

CVE-2026-21368 [MEDIUM] CWE-787 CVE-2026-21368: Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during va Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.

CVE-2024-23378 [MEDIUM] CWE-120 CVE-2024-23378: Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playbac Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.

CVE-2025-47370 [MEDIUM] CWE-617 CVE-2025-47370: Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

CVE-2026-24077 [MEDIUM] CWE-191 CVE-2026-24077: Information Disclosure when processing wireless network channel switch information with improperly f Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

CVE-2025-27045 [MEDIUM] CWE-126 CVE-2025-27045: Information disclosure while processing batch command execution in Video driver. Information disclosure while processing batch command execution in Video driver.

CVE-2026-21384 [MEDIUM] CWE-787 CVE-2026-21384: Memory Corruption when updating prepared commands with invalid port indices based on user space inpu Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.

CVE-2023-33065 [HIGH] CWE-126 CVE-2023-33065: Information disclosure in Audio while accessing AVCS services from ADSP payload. Information disclosure in Audio while accessing AVCS services from ADSP payload.

CVE-2023-21629 [MEDIUM] CWE-415 CVE-2023-21629: Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

CVE-2026-24078 [MEDIUM] CWE-359 CVE-2026-24078: Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall S Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

CVE-2024-45556 [MEDIUM] CWE-1262 CVE-2024-45556: Cryptographic issue may arise because the access control configuration permits Linux to read key reg Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

CVE-2025-27030 [MEDIUM] CWE-126 CVE-2025-27030: information disclosure while invoking calibration data from user space to update firmware size. information disclosure while invoking calibration data from user space to update firmware size.

CVE-2025-27064 [MEDIUM] CWE-126 CVE-2025-27064: Information disclosure while registering commands from clients with diag through diagHal. Information disclosure while registering commands from clients with diag through diagHal.

CVE-2025-47331 [MEDIUM] CWE-126 CVE-2025-47331: Information disclosure while processing a firmware event. Information disclosure while processing a firmware event.

CVE-2024-38426 [MEDIUM] CWE-287 CVE-2024-38426: While processing the authentication message in UE, improper authentication may lead to information d While processing the authentication message in UE, improper authentication may lead to information disclosure.

CVE-2023-33014 [MEDIUM] CWE-20 CVE-2023-33014: Information disclosure in Core services while processing a Diag command. Information disclosure in Core services while processing a Diag command.

CVE-2025-47402 [MEDIUM] CWE-126 CVE-2025-47402: Transient DOS when processing a received frame with an excessively large authentication information Transient DOS when processing a received frame with an excessively large authentication information element.

CVE-2025-21464 [MEDIUM] CWE-125 CVE-2025-21464: Information disclosure while reading data from an image using specified offset and size parameters. Information disclosure while reading data from an image using specified offset and size parameters.

CVE-2024-45551 [MEDIUM] CWE-1390 CVE-2024-45551: Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.

CVE-2025-47362 [MEDIUM] CWE-126 CVE-2025-47362: Information disclosure while processing message from client with invalid payload. Information disclosure while processing message from client with invalid payload.

CVE-2026-21370 [MEDIUM] CWE-787 CVE-2026-21370: Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed va Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.