Skip to content

Known vulnerabilities in Qualcomm, Inc. Snapdragon

Is your version affected?

CVE Summary Score Published
CVE-2024-23351 Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions 8.4 High May 6, 2024
CVE-2024-21480 Memory corruption while playing audio file having large-sized input buffer 7.3 High May 6, 2024
CVE-2024-21477 Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame 7.5 High May 6, 2024
CVE-2024-21476 Memory corruption when the channel ID passed by user is not validated and further used 7.8 High May 6, 2024
CVE-2024-21475 Memory corruption when the payload received from firmware is not as per the expected protocol size 7.8 High May 6, 2024
CVE-2024-21474 Memory corruption when size of buffer from previous call is used without validation or re-initialization 8.4 High May 6, 2024
CVE-2024-21471 Memory corruption when IOMMU unmap of a GPU buffer fails in Linux 8.4 High May 6, 2024
CVE-2023-43531 Memory corruption while verifying the serialized header when the key pairs are generated 8.4 High May 6, 2024
CVE-2023-43530 Memory corruption in HLOS while checking for the storage type 5.9 Medium May 6, 2024
CVE-2023-43529 Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received 7.5 High May 6, 2024
CVE-2023-43528 Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is… 6.1 Medium May 6, 2024
CVE-2023-43527 Information disclosure while parsing dts header atom in Video 6.8 Medium May 6, 2024
CVE-2023-43526 Memory corruption while querying module parameters from Listen Sound model client in kernel from user space 6.7 Medium May 6, 2024
CVE-2023-43525 Memory corruption while copying the sound model data from user to kernel buffer during sound model register 6.7 Medium May 6, 2024
CVE-2023-43524 Memory corruption when the bandpass filter order received from AHAL is not within the expected range 6.7 Medium May 6, 2024
CVE-2023-43521 Memory corruption when multiple listeners are being registered with the same file descriptor 6.7 Medium May 6, 2024
CVE-2023-33119 Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache 8.4 High May 6, 2024
CVE-2024-21473 Memory corruption while redirecting log file to any file location with any file name 9.8 Critical Apr 1, 2024
CVE-2024-21472 Memory corruption in Kernel while handling GPU operations 8.4 High Apr 1, 2024
CVE-2024-21470 Memory corruption while allocating memory for graphics 8.4 High Apr 1, 2024
CVE-2024-21468 Memory corruption when there is failed unmap operation in GPU 8.4 High Apr 1, 2024
CVE-2024-21463 Memory corruption while processing Codec2 during v13k decoder pitch synthesis 7.3 High Apr 1, 2024
CVE-2024-21454 Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics 7.5 High Apr 1, 2024
CVE-2024-21453 Transient DOS while decoding message of size that exceeds the available system memory 7.5 High Apr 1, 2024
CVE-2024-21452 Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions 7.3 High Apr 1, 2024

Other Qualcomm, Inc. products