Qualcomm Inc Snapdragon vulnerabilities

CVE-2023-43551 [HIGH] CWE-287 CVE-2023-43551: Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the au Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

CVE-2022-33211 [CRITICAL] CWE-20 CVE-2022-33211: memory corruption in modem due to improper check while calculating size of serialized CoAP message memory corruption in modem due to improper check while calculating size of serialized CoAP message

CVE-2017-11076 [CRITICAL] CWE-823 CVE-2017-11076: On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not program On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.

CVE-2025-21450 [CRITICAL] CWE-287 CVE-2025-21450: Cryptographic issue occurs due to use of insecure connection method while downloading. Cryptographic issue occurs due to use of insecure connection method while downloading.

CVE-2024-38408 [CRITICAL] CWE-310 CVE-2024-38408: Cryptographic issue when a controller receives an LMP start encryption command under unexpected cond Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

CVE-2022-33288 [HIGH] CWE-120 CVE-2022-33288: Memory corruption due to buffer copy without checking the size of input in Core while sending SCM co Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.

CVE-2024-23384 [HIGH] CWE-416 CVE-2024-23384: Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker. Memory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.

CVE-2025-21487 [HIGH] CWE-126 CVE-2025-21487: Information disclosure while decoding RTP packet received by UE from the network, when payload lengt Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

CVE-2025-21484 [HIGH] CWE-126 CVE-2025-21484: Information disclosure when UE receives the RTP packet from the network, while decoding and reassemb Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.

CVE-2024-23354 [HIGH] CWE-416 CVE-2024-23354: Memory corruption when the IOCTL call is interrupted by a signal. Memory corruption when the IOCTL call is interrupted by a signal.

CVE-2023-33024 [HIGH] CWE-120 CVE-2023-33024: Memory corruption while sending SMS from AP firmware. Memory corruption while sending SMS from AP firmware.

CVE-2024-38399 [HIGH] CWE-416 CVE-2024-38399: Memory corruption while processing user packets to generate page faults. Memory corruption while processing user packets to generate page faults.

CVE-2023-33114 [HIGH] CWE-416 CVE-2023-33114: Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.

CVE-2023-28551 [HIGH] CWE-119 CVE-2023-28551: Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary addre Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.

CVE-2025-21437 [HIGH] CWE-416 CVE-2025-21437: Memory corruption while processing memory map or unmap IOCTL operations simultaneously. Memory corruption while processing memory map or unmap IOCTL operations simultaneously.

CVE-2024-33022 [HIGH] CWE-190 CVE-2024-33022: Memory corruption while allocating memory in HGSL driver. Memory corruption while allocating memory in HGSL driver.

CVE-2026-21379 [HIGH] CWE-126 CVE-2026-21379: Memory Corruption when allocating memory with sizes that exceed the maximum allowed value. Memory Corruption when allocating memory with sizes that exceed the maximum allowed value.

CVE-2024-38424 [HIGH] CWE-416 CVE-2024-38424: Memory corruption during GNSS HAL process initialization. Memory corruption during GNSS HAL process initialization.

CVE-2024-38409 [HIGH] CWE-120 CVE-2024-38409: Memory corruption while station LL statistic handling. Memory corruption while station LL statistic handling.

CVE-2024-33055 [HIGH] CWE-416 CVE-2024-33055: Memory corruption while invoking IOCTL calls to unmap the DMA buffers. Memory corruption while invoking IOCTL calls to unmap the DMA buffers.