Qualcomm Inc Snapdragon vulnerabilities

CVE-2025-47341 [HIGH] CWE-120 CVE-2025-47341: memory corruption while processing an image encoding completion event. memory corruption while processing an image encoding completion event.

CVE-2025-47382 [HIGH] CWE-863 CVE-2025-47382: Memory corruption while loading an invalid firmware in boot loader. Memory corruption while loading an invalid firmware in boot loader.

CVE-2025-27074 [HIGH] CWE-131 CVE-2025-27074: Memory corruption while processing a GP command response. Memory corruption while processing a GP command response.

CVE-2025-47352 [HIGH] CWE-129 CVE-2025-47352: Memory corruption while processing audio streaming operations. Memory corruption while processing audio streaming operations.

CVE-2025-47394 [HIGH] CWE-120 CVE-2025-47394: Memory corruption when copying overlapping buffers during memory operations due to incorrect offset Memory corruption when copying overlapping buffers during memory operations due to incorrect offset calculations.

CVE-2026-25266 [HIGH] CWE-749 CVE-2026-25266: Memory corruption while processing IOCTL command when device is in power-save state. Memory corruption while processing IOCTL command when device is in power-save state.

CVE-2025-47386 [HIGH] CWE-416 CVE-2025-47386: Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs. Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

CVE-2025-47373 [HIGH] CWE-787 CVE-2025-47373: Memory Corruption when accessing buffers with invalid length during TA invocation. Memory Corruption when accessing buffers with invalid length during TA invocation.

CVE-2025-47381 [HIGH] CWE-416 CVE-2025-47381: Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs. Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.

CVE-2025-47376 [HIGH] CWE-416 CVE-2025-47376: Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls. Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls.

CVE-2025-47379 [HIGH] CWE-416 CVE-2025-47379: Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization bet Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources.

CVE-2025-47377 [HIGH] CWE-416 CVE-2025-47377: Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls. Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls.

CVE-2026-25259 [HIGH] CWE-787 CVE-2026-25259: Memory corruption while processing multiple IOCTL command for escape operations. Memory corruption while processing multiple IOCTL command for escape operations.

CVE-2025-47321 [HIGH] CWE-120 CVE-2025-47321: Memory corruption while copying packets received from unix clients. Memory corruption while copying packets received from unix clients.

CVE-2025-47404 [HIGH] CWE-120 CVE-2025-47404: Memory corruption when dynamically changing the size of a previously allocated buffer while its cont Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.

CVE-2025-27070 [HIGH] CWE-787 CVE-2025-27070: Memory corruption while performing encryption and decryption commands. Memory corruption while performing encryption and decryption commands.

CVE-2023-43551 [HIGH] CWE-287 CVE-2023-43551: Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the au Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

CVE-2022-33211 [CRITICAL] CWE-20 CVE-2022-33211: memory corruption in modem due to improper check while calculating size of serialized CoAP message memory corruption in modem due to improper check while calculating size of serialized CoAP message

CVE-2017-11076 [CRITICAL] CWE-823 CVE-2017-11076: On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not program On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

CVE-2024-38408 [CRITICAL] CWE-310 CVE-2024-38408: Cryptographic issue when a controller receives an LMP start encryption command under unexpected cond Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.