# Qualcomm, Inc. Snapdragon.

Every CVE that names Qualcomm, Inc. Snapdragon among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Use After Free in Automotive Audio](https://agentprime.io/advisories/CVE-2023-33118.md)
  `CVE-2023-33118` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Use After Free in Audio](https://agentprime.io/advisories/CVE-2023-33117.md)
  `CVE-2023-33117` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Buffer over-read without Checking Size of Input in WLAN Host](https://agentprime.io/advisories/CVE-2023-33116.md)
  `CVE-2023-33116` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-126
- [Use after free in Neural Processing Unit](https://agentprime.io/advisories/CVE-2023-33114.md)
  `CVE-2023-33114` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Buffer Copy Without Checking Size of Input (\`Classic Buffer Overflow\`) in Kernel](https://agentprime.io/advisories/CVE-2023-33113.md)
  `CVE-2023-33113` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33112.md)
  `CVE-2023-33112` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-126
- [Use of Out-of-range Pointer Offset in Audio](https://agentprime.io/advisories/CVE-2023-33110.md)
  `CVE-2023-33110` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-823
- [NULL Pointer Dereference in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33109.md)
  `CVE-2023-33109` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Use After Free in Graphics](https://agentprime.io/advisories/CVE-2023-33108.md)
  `CVE-2023-33108` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Use After Free in Linux Graphics](https://agentprime.io/advisories/CVE-2023-33094.md)
  `CVE-2023-33094` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables](https://agentprime.io/advisories/CVE-2023-33085.md)
  `CVE-2023-33085` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33062.md)
  `CVE-2023-33062` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-126
- [Buffer Over-read in Data Modem](https://agentprime.io/advisories/CVE-2023-33040.md)
  `CVE-2023-33040` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-126
- [Integer Overflow or Wraparound in Radio Interface Layer](https://agentprime.io/advisories/CVE-2023-33038.md)
  `CVE-2023-33038` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Cryptographic Issues in Automotive](https://agentprime.io/advisories/CVE-2023-33037.md)
  `CVE-2023-33037` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-310
- [NULL Pointer Dereference in Hypervisor](https://agentprime.io/advisories/CVE-2023-33036.md)
  `CVE-2023-33036` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Use of Out-of-range Pointer Offset in Audio](https://agentprime.io/advisories/CVE-2023-33033.md)
  `CVE-2023-33033` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-823
- [Integer Overflow or Wraparound in TZ Secure OS](https://agentprime.io/advisories/CVE-2023-33032.md)
  `CVE-2023-33032` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Buffer Copy without Checking Size of Input in HLOS](https://agentprime.io/advisories/CVE-2023-33030.md)
  `CVE-2023-33030` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Buffer Copy without Checking Size of Input in Data Modem](https://agentprime.io/advisories/CVE-2023-33025.md)
  `CVE-2023-33025` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Improper Input Validation in Services](https://agentprime.io/advisories/CVE-2023-33014.md)
  `CVE-2023-33014` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.6 High · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-20
- [Double Free in Data Network Stack & Connectivity](https://agentprime.io/advisories/CVE-2023-28583.md)
  `CVE-2023-28583` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 2 Jan 2024 · Tags: Memory corruption
- [Integer Overflow or Wraparound in Graphics Linux](https://agentprime.io/advisories/CVE-2023-33107.md)
  `CVE-2023-33107` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Use of Out-of-range Pointer Offset in Graphics](https://agentprime.io/advisories/CVE-2023-33106.md)
  `CVE-2023-33106` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-823
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33098.md)
  `CVE-2023-33098` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33097.md)
  `CVE-2023-33097` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-126
- [Buffer Copy Without Checking Size of Input in Bluetooth HOST](https://agentprime.io/advisories/CVE-2023-33092.md)
  `CVE-2023-33092` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [NULL Pointer Dereference in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33089.md)
  `CVE-2023-33089` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [NULL pointer dereference in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33088.md)
  `CVE-2023-33088` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Buffer Copy without Checking Size of Input (\`Classic Buffer Overflow\`) in Core](https://agentprime.io/advisories/CVE-2023-33087.md)
  `CVE-2023-33087` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Buffer Copy Without Checking Size of Input (\`Classic Buffer Overflow\`) in WLAN Host](https://agentprime.io/advisories/CVE-2023-33083.md)
  `CVE-2023-33083` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Buffer Copy Without Checking Size of Input (\`Classic Buffer Overflow\`) in WLAN Host](https://agentprime.io/advisories/CVE-2023-33082.md)
  `CVE-2023-33082` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Buffer over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33081.md)
  `CVE-2023-33081` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-126
- [Buffer over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33080.md)
  `CVE-2023-33080` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-126
- [Use of Out-of-range Pointer Offset in Audio](https://agentprime.io/advisories/CVE-2023-33079.md)
  `CVE-2023-33079` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-823
- [Improper Access Control in Automotive OS Platform Android](https://agentprime.io/advisories/CVE-2023-33071.md)
  `CVE-2023-33071` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 5 Dec 2023 · Tags: Broken access control
- [Improper Authentication in Automotive OS](https://agentprime.io/advisories/CVE-2023-33070.md)
  `CVE-2023-33070` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 5 Dec 2023 · Tags: Authentication bypass
- [Use After Free in DSP Services](https://agentprime.io/advisories/CVE-2023-33063.md)
  `CVE-2023-33063` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Improper Authentication in GPS HLOS Driver](https://agentprime.io/advisories/CVE-2023-33054.md)
  `CVE-2023-33054` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Dec 2023 · Tags: Authentication bypass
- [Improper Validation of Array Index in Kernel](https://agentprime.io/advisories/CVE-2023-33053.md)
  `CVE-2023-33053` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-129
- [Reachable Assertion in Data Modem](https://agentprime.io/advisories/CVE-2023-33044.md)
  `CVE-2023-33044` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: Denial of service
- [Reachable Assertion in Modem](https://agentprime.io/advisories/CVE-2023-33043.md)
  `CVE-2023-33043` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: Denial of service
- [Improper Input Validation in Modem](https://agentprime.io/advisories/CVE-2023-33042.md)
  `CVE-2023-33042` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: CWE-20
- [Reachable assertion in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-33041.md)
  `CVE-2023-33041` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: Denial of service
- [Buffer Copy Without Checking Size of Input (\`Classic Buffer Overflow\`) in Radio Interface Layer](https://agentprime.io/advisories/CVE-2023-33024.md)
  `CVE-2023-33024` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Integer Overflow to Buffer Overflow in HLOS](https://agentprime.io/advisories/CVE-2023-33022.md)
  `CVE-2023-33022` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Integer Overflow to Buffer Overflow in User Identity Module](https://agentprime.io/advisories/CVE-2023-33018.md)
  `CVE-2023-33018` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Buffer Copy Without Checking Size of Input in Boot](https://agentprime.io/advisories/CVE-2023-33017.md)
  `CVE-2023-33017` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Integer Overflow or Wraparound in Bluetooth Host](https://agentprime.io/advisories/CVE-2023-28588.md)
  `CVE-2023-28588` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller](https://agentprime.io/advisories/CVE-2023-28587.md)
  `CVE-2023-28587` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS](https://agentprime.io/advisories/CVE-2023-28586.md)
  `CVE-2023-28586` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.0 Medium · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Integer Overflow to Buffer Overflow in TZ Secure OS](https://agentprime.io/advisories/CVE-2023-28585.md)
  `CVE-2023-28585` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Buffer Copy Without Checking Size of Input in WLAN Host](https://agentprime.io/advisories/CVE-2023-28580.md)
  `CVE-2023-28580` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Buffer Copy Without Checking Size of Input in WLAN Host](https://agentprime.io/advisories/CVE-2023-28579.md)
  `CVE-2023-28579` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS](https://agentprime.io/advisories/CVE-2023-28551.md)
  `CVE-2023-28551` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance](https://agentprime.io/advisories/CVE-2023-28550.md)
  `CVE-2023-28550` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Buffer Copy Without Checking Size of Input in SPS Applications](https://agentprime.io/advisories/CVE-2023-28546.md)
  `CVE-2023-28546` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Use After Free in Audio](https://agentprime.io/advisories/CVE-2023-22668.md)
  `CVE-2023-22668` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Use After Free in Camera](https://agentprime.io/advisories/CVE-2023-22383.md)
  `CVE-2023-22383` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption
- [Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer](https://agentprime.io/advisories/CVE-2023-21634.md)
  `CVE-2023-21634` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Dec 2023 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/qualcomm-inc-snapdragon.md>
Older: <https://agentprime.io/advisories/technology/qualcomm-inc-snapdragon.md?cursor=WyIyMDIzLTEyLTA1VDAzOjAzOjQzLjU2NDAwMFoiLCJDVkUtMjAyMy0yMTYzNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=qualcomm-inc-snapdragon&cursor=WyIyMDI0LTAxLTAyVDA1OjM4OjUxLjk1OTAwMFoiLCJDVkUtMjAyMy0zMzEyMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/qualcomm-inc-snapdragon/?cursor=WyIyMDI0LTAxLTAyVDA1OjM4OjUxLjk1OTAwMFoiLCJDVkUtMjAyMy0zMzEyMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.