Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-21652 [HIGH] CWE-320 CVE-2023-21652: Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

CVE-2026-24078 [MEDIUM] CWE-359 CVE-2026-24078: Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall S Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

CVE-2025-47370 [MEDIUM] CWE-617 CVE-2025-47370: Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

CVE-2024-45556 [MEDIUM] CWE-1262 CVE-2024-45556: Cryptographic issue may arise because the access control configuration permits Linux to read key reg Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

CVE-2025-27030 [MEDIUM] CWE-126 CVE-2025-27030: information disclosure while invoking calibration data from user space to update firmware size. information disclosure while invoking calibration data from user space to update firmware size.

CVE-2025-27064 [MEDIUM] CWE-126 CVE-2025-27064: Information disclosure while registering commands from clients with diag through diagHal. Information disclosure while registering commands from clients with diag through diagHal.

CVE-2025-47331 [MEDIUM] CWE-126 CVE-2025-47331: Information disclosure while processing a firmware event. Information disclosure while processing a firmware event.

CVE-2024-38426 [MEDIUM] CWE-287 CVE-2024-38426: While processing the authentication message in UE, improper authentication may lead to information d While processing the authentication message in UE, improper authentication may lead to information disclosure.

CVE-2023-21629 [MEDIUM] CWE-415 CVE-2023-21629: Memory Corruption in Modem due to double free while parsing the PKCS15 sim files. Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

CVE-2025-47402 [MEDIUM] CWE-126 CVE-2025-47402: Transient DOS when processing a received frame with an excessively large authentication information Transient DOS when processing a received frame with an excessively large authentication information element.

CVE-2025-21464 [MEDIUM] CWE-125 CVE-2025-21464: Information disclosure while reading data from an image using specified offset and size parameters. Information disclosure while reading data from an image using specified offset and size parameters.

CVE-2024-45551 [MEDIUM] CWE-1390 CVE-2024-45551: Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.

CVE-2026-21370 [MEDIUM] CWE-787 CVE-2026-21370: Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed va Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.

CVE-2022-33289 [MEDIUM] CWE-129 CVE-2022-33289: Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is s Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.

CVE-2023-33014 [MEDIUM] CWE-20 CVE-2023-33014: Information disclosure in Core services while processing a Diag command. Information disclosure in Core services while processing a Diag command.

CVE-2022-33255 [MEDIUM] CWE-125 CVE-2022-33255: Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.

CVE-2022-33283 [MEDIUM] CWE-125 CVE-2022-33283: Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.

CVE-2024-21460 [MEDIUM] CWE-330 CVE-2024-21460: Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.

CVE-2025-21465 [MEDIUM] CWE-125 CVE-2025-21465: Information disclosure while processing the hash segment in an MBN file. Information disclosure while processing the hash segment in an MBN file.

CVE-2024-38425 [MEDIUM] CWE-285 CVE-2024-38425: Information disclosure while sending implicit broadcast containing APP launch information. Information disclosure while sending implicit broadcast containing APP launch information.