Qualcomm Inc Snapdragon vulnerabilities

CVE-2024-23362 [HIGH] CWE-20 CVE-2024-23362: Cryptographic issue while parsing RSA keys in COBR format. Cryptographic issue while parsing RSA keys in COBR format.

CVE-2023-33110 [HIGH] CWE-823 CVE-2023-33110: The session index variable in PCM host voice audio driver initialized before PCM open, accessed duri The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.

CVE-2024-33016 [MEDIUM] CWE-119 CVE-2024-33016: memory corruption when an invalid firehose patch command is invoked. memory corruption when an invalid firehose patch command is invoked.

CVE-2021-30299 [MEDIUM] CWE-20 CVE-2021-30299: Possible out of bound access in audio module due to lack of validation of user provided input. Possible out of bound access in audio module due to lack of validation of user provided input.

CVE-2024-23370 [MEDIUM] CWE-416 CVE-2024-23370: Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.

CVE-2024-33039 [MEDIUM] CWE-822 CVE-2024-33039: Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.

CVE-2024-33032 [MEDIUM] CWE-129 CVE-2024-33032: Memory corruption when the user application modifies the same shared memory asynchronously when kern Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

CVE-2024-23377 [MEDIUM] CWE-823 CVE-2024-23377: Memory corruption while invoking IOCTL command from user-space, when a user modifies the original pa Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.

CVE-2025-27039 [MEDIUM] CWE-390 CVE-2025-27039: Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request. Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.

CVE-2024-38403 [MEDIUM] CWE-126 CVE-2024-38403: Transient DOS while parsing BTM ML IE when per STA profile is not included. Transient DOS while parsing BTM ML IE when per STA profile is not included.

CVE-2024-38405 [MEDIUM] CWE-126 CVE-2024-38405: Transient DOS while processing the CU information from RNR IE. Transient DOS while processing the CU information from RNR IE.

CVE-2025-59601 [MEDIUM] CWE-1230 CVE-2025-59601: Information Disclosure when resetting device to factory default settings through powerline interface Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.

CVE-2026-21368 [MEDIUM] CWE-787 CVE-2026-21368: Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during va Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.

CVE-2025-21482 [HIGH] CWE-310 CVE-2025-21482: Cryptographic issue while performing RSA PKCS padding decoding. Cryptographic issue while performing RSA PKCS padding decoding.

CVE-2024-23378 [MEDIUM] CWE-120 CVE-2024-23378: Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playbac Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.

CVE-2026-24077 [MEDIUM] CWE-191 CVE-2026-24077: Information Disclosure when processing wireless network channel switch information with improperly f Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

CVE-2026-25262 [MEDIUM] CWE-123 CVE-2026-25262: Memory corruption while processing a crafted ELF file in the Primary Bootloader. Memory corruption while processing a crafted ELF file in the Primary Bootloader.

CVE-2025-27045 [MEDIUM] CWE-126 CVE-2025-27045: Information disclosure while processing batch command execution in Video driver. Information disclosure while processing batch command execution in Video driver.

CVE-2026-21384 [MEDIUM] CWE-787 CVE-2026-21384: Memory Corruption when updating prepared commands with invalid port indices based on user space inpu Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.

CVE-2023-33065 [HIGH] CWE-126 CVE-2023-33065: Information disclosure in Audio while accessing AVCS services from ADSP payload. Information disclosure in Audio while accessing AVCS services from ADSP payload.