Skip to content

Known vulnerabilities in Qualcomm, Inc. Snapdragon

Is your version affected?

CVE Summary Score Published
CVE-2024-23368 Memory corruption when allocating and accessing an entry in an SMEM partition 7.8 High Jul 1, 2024
CVE-2024-21482 Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of… 6.8 Medium Jul 1, 2024
CVE-2024-21469 Memory corruption when an invoke call and a TEE call are bound for the same trusted application 7.3 High Jul 1, 2024
CVE-2024-21466 Information disclosure while parsing sub-IE length during new IE generation 6.5 Medium Jul 1, 2024
CVE-2024-21465 Memory corruption while processing key blob passed by the user 7.8 High Jul 1, 2024
CVE-2024-21462 Transient DOS while loading the TA ELF file 7.1 High Jul 1, 2024
CVE-2024-21461 Memory corruption while performing finish HMAC operation when context is freed by keymaster 8.4 High Jul 1, 2024
CVE-2024-21460 Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space 7.1 High Jul 1, 2024
CVE-2024-21458 Information disclosure while handling SA query action frame 6.5 Medium Jul 1, 2024
CVE-2024-21457 INformation disclosure while handling Multi-link IE in beacon frame 6.5 Medium Jul 1, 2024
CVE-2024-21456 Information Disclosure while parsing beacon frame in STA 6.5 Medium Jul 1, 2024
CVE-2023-43554 Memory corruption while processing IOCTL handler in FastRPC 8.4 High Jul 1, 2024
CVE-2024-23363 Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame 7.5 High Jun 3, 2024
CVE-2024-23360 Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers 8.4 High Jun 3, 2024
CVE-2024-21478 transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA 6.2 Medium Jun 3, 2024
CVE-2023-43556 Memory corruption in Hypervisor when platform information mentioned is not aligned 9.3 Critical Jun 3, 2024
CVE-2023-43555 Information disclosure in Video while parsing mp2 clip with invalid section length 8.2 High Jun 3, 2024
CVE-2023-43551 Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase… 9.1 Critical Jun 3, 2024
CVE-2023-43545 Memory corruption when more scan frequency list or channels are sent from the user space 6.7 Medium Jun 3, 2024
CVE-2023-43544 Memory corruption when IPC callback handle is used after it has been released during register callback by another thread 6.7 Medium Jun 3, 2024
CVE-2023-43543 Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of… 6.7 Medium Jun 3, 2024
CVE-2023-43542 Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked 7.8 High Jun 3, 2024
CVE-2023-43538 Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization 9.3 Critical Jun 3, 2024
CVE-2023-43537 Information disclosure while handling T2LM Action Frame in WLAN Host 6.5 Medium Jun 3, 2024
CVE-2024-23354 Memory corruption when the IOCTL call is interrupted by a signal 8.4 High May 6, 2024

Other Qualcomm, Inc. products