Qualcomm Inc Snapdragon vulnerabilities

CVE-2022-33265 [CRITICAL] CWE-787 CVE-2022-33265: Memory corruption due to information exposure in Powerline Communication Firmware while sending diff Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device.

CVE-2017-11076 [CRITICAL] CWE-823 CVE-2017-11076: On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not program On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

CVE-2025-21450 [CRITICAL] CWE-287 CVE-2025-21450: Cryptographic issue occurs due to use of insecure connection method while downloading. Cryptographic issue occurs due to use of insecure connection method while downloading.

CVE-2024-38408 [CRITICAL] CWE-310 CVE-2024-38408: Cryptographic issue when a controller receives an LMP start encryption command under unexpected cond Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

CVE-2023-43556 [HIGH] CWE-120 CVE-2023-43556: Memory corruption in Hypervisor when platform information mentioned is not aligned. Memory corruption in Hypervisor when platform information mentioned is not aligned.

CVE-2024-21481 [HIGH] CWE-119 CVE-2024-21481: Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager. Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.

CVE-2024-23384 [HIGH] CWE-416 CVE-2024-23384: Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker. Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.

CVE-2025-21487 [HIGH] CWE-126 CVE-2025-21487: Information disclosure while decoding RTP packet received by UE from the network, when payload lengt Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

CVE-2024-38399 [HIGH] CWE-416 CVE-2024-38399: Memory corruption while processing user packets to generate page faults. Memory corruption while processing user packets to generate page faults.

CVE-2024-23354 [HIGH] CWE-416 CVE-2024-23354: Memory corruption when the IOCTL call is interrupted by a signal. Memory corruption when the IOCTL call is interrupted by a signal.

CVE-2023-33024 [HIGH] CWE-120 CVE-2023-33024: Memory corruption while sending SMS from AP firmware. Memory corruption while sending SMS from AP firmware.

CVE-2023-33114 [HIGH] CWE-416 CVE-2023-33114: Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.

CVE-2025-47398 [HIGH] CWE-416 CVE-2025-47398: Memory Corruption while deallocating graphics processing unit memory buffers due to improper handlin Memory Corruption while deallocating graphics processing unit memory buffers due to improper handling of memory pointers.

CVE-2025-21437 [HIGH] CWE-416 CVE-2025-21437: Memory corruption while processing memory map or unmap IOCTL operations simultaneously. Memory corruption while processing memory map or unmap IOCTL operations simultaneously.

CVE-2024-33022 [HIGH] CWE-190 CVE-2024-33022: Memory corruption while allocating memory in HGSL driver. Memory corruption while allocating memory in HGSL driver.

CVE-2026-24074 [HIGH] CWE-787 CVE-2026-24074: Memory Corruption when processing data with large offset and length values exceeds buffer limits dur Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

CVE-2026-24083 [HIGH] CWE-822 CVE-2026-24083: Memory Corruption while processing IOCTL device driver requests with invalid arguments. Memory Corruption while processing IOCTL device driver requests with invalid arguments.

CVE-2026-21366 [HIGH] CWE-190 CVE-2026-21366: Memory corruption while processing a packet with a size close to the maximum allowed value. Memory corruption while processing a packet with a size close to the maximum allowed value.

CVE-2026-21379 [HIGH] CWE-126 CVE-2026-21379: Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

CVE-2024-38424 [HIGH] CWE-416 CVE-2024-38424: Memory corruption during GNSS HAL process initialization. Memory corruption during GNSS HAL process initialization.