# Qualcomm, Inc. Snapdragon.

Every CVE that names Qualcomm, Inc. Snapdragon among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Improper Validation of Array Index in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28558.md)
  `CVE-2023-28558` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129
- [Improper Validation of Array Index in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28557.md)
  `CVE-2023-28557` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129
- [Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28549.md)
  `CVE-2023-28549` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: Memory corruption
- [Improper Validation of Array Index in WLAN HAL](https://agentprime.io/advisories/CVE-2023-28548.md)
  `CVE-2023-28548` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129
- [Buffer Copy without Checking the Size of Input in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-28544.md)
  `CVE-2023-28544` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: Memory corruption
- [Stack-based Buffer Overflow in WIN Product](https://agentprime.io/advisories/CVE-2023-28538.md)
  `CVE-2023-28538` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 5 Sept 2023 · Tags: Memory corruption
- [Buffer Over-read in Bluetooth HOST](https://agentprime.io/advisories/CVE-2023-21667.md)
  `CVE-2023-21667` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.5 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-126
- [Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform](https://agentprime.io/advisories/CVE-2023-21664.md)
  `CVE-2023-21664` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: Memory corruption
- [Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display](https://agentprime.io/advisories/CVE-2023-21663.md)
  `CVE-2023-21663` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: Memory corruption
- [Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform](https://agentprime.io/advisories/CVE-2023-21662.md)
  `CVE-2023-21662` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: Memory corruption
- [Integer Overflow or Wraparound in Display](https://agentprime.io/advisories/CVE-2023-21655.md)
  `CVE-2023-21655` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: Memory corruption
- [Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio](https://agentprime.io/advisories/CVE-2023-21654.md)
  `CVE-2023-21654` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: Memory corruption
- [Reachable Assertion in Modem](https://agentprime.io/advisories/CVE-2023-21653.md)
  `CVE-2023-21653` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Sept 2023 · Tags: Denial of service
- [Reachable Assertion in Modem](https://agentprime.io/advisories/CVE-2023-21646.md)
  `CVE-2023-21646` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 5 Sept 2023 · Tags: Denial of service
- [Integer Overflow to Buffer Overflow in RIL](https://agentprime.io/advisories/CVE-2023-21644.md)
  `CVE-2023-21644` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: Memory corruption
- [Improper Validation of Array Index in Linux](https://agentprime.io/advisories/CVE-2023-21636.md)
  `CVE-2023-21636` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129
- [Improper Validation of Array Index in Audio](https://agentprime.io/advisories/CVE-2022-40534.md)
  `CVE-2022-40534` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129
- [Buffer over-read in Modem](https://agentprime.io/advisories/CVE-2022-40524.md)
  `CVE-2022-40524` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-126
- [Improper validation of array index in WLAN HAL](https://agentprime.io/advisories/CVE-2022-33275.md)
  `CVE-2022-33275` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-129
- [Buffer over-read in Automotive multimedia](https://agentprime.io/advisories/CVE-2022-33220.md)
  `CVE-2022-33220` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 5.1 Medium · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-126
- [Multiple Dmabuf Kernel Address UAF Vulnerability](https://agentprime.io/advisories/CVE-2023-28577.md)
  `CVE-2023-28577` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 8 Aug 2023 · Tags: Memory corruption
- [Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver](https://agentprime.io/advisories/CVE-2023-28576.md)
  `CVE-2023-28576` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.4 Medium · Not analysed yet · Published 8 Aug 2023 · Tags: Race condition
- [Multiple Type Confusion Vulnerability](https://agentprime.io/advisories/CVE-2023-28575.md)
  `CVE-2023-28575` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-823
- [Buffer Copy Without Checking Size of Input in QESL](https://agentprime.io/advisories/CVE-2023-28561.md)
  `CVE-2023-28561` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Aug 2023 · Tags: Memory corruption
- [Buffer Over-read in Audio](https://agentprime.io/advisories/CVE-2023-28555.md)
  `CVE-2023-28555` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-126
- [Integer Overflow or Wraparound in Audio](https://agentprime.io/advisories/CVE-2023-28537.md)
  `CVE-2023-28537` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 8 Aug 2023 · Tags: Memory corruption
- [Integer Overflow or Wraparound in Audio](https://agentprime.io/advisories/CVE-2023-22666.md)
  `CVE-2023-22666` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 8 Aug 2023 · Tags: Memory corruption
- [Key Management Errors in HLOS](https://agentprime.io/advisories/CVE-2023-21652.md)
  `CVE-2023-21652` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.7 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-320
- [Incorrect Type Conversion or Cast in Core](https://agentprime.io/advisories/CVE-2023-21651.md)
  `CVE-2023-21651` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-704
- [Improper Validation of Array Index in GPS HLOS Driver](https://agentprime.io/advisories/CVE-2023-21650.md)
  `CVE-2023-21650` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-129
- [Buffer Copy Without Checking Size of Input (\`Classic Buffer Overflow\`) in WLAN](https://agentprime.io/advisories/CVE-2023-21649.md)
  `CVE-2023-21649` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 8 Aug 2023 · Tags: Memory corruption
- [Integer Overflow to Buffer Overflow in RIL](https://agentprime.io/advisories/CVE-2023-21648.md)
  `CVE-2023-21648` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 8 Aug 2023 · Tags: Memory corruption
- [Improper Input Validation in Bluetooth HOST](https://agentprime.io/advisories/CVE-2023-21647.md)
  `CVE-2023-21647` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.5 Medium · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-20
- [Untrusted Pointer Dereference in Automotive](https://agentprime.io/advisories/CVE-2023-21643.md)
  `CVE-2023-21643` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Aug 2023 · Tags: Memory corruption
- [Incorrect Type Conversion or Cast in Trusted Execution Environment](https://agentprime.io/advisories/CVE-2023-21627.md)
  `CVE-2023-21627` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-20
- [Improper Authentication in HLOS.](https://agentprime.io/advisories/CVE-2023-21626.md)
  `CVE-2023-21626` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-320
- [Buffer Over-read in Network Services](https://agentprime.io/advisories/CVE-2023-21625.md)
  `CVE-2023-21625` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-126
- [Buffer copy without checking size of input in Audio.](https://agentprime.io/advisories/CVE-2022-40510.md)
  `CVE-2022-40510` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Aug 2023 · Tags: Memory corruption
- [Buffer Over-read in WLAN HOST](https://agentprime.io/advisories/CVE-2023-28542.md)
  `CVE-2023-28542` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 4 Jul 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Host](https://agentprime.io/advisories/CVE-2023-28541.md)
  `CVE-2023-28541` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 4 Jul 2023 · Tags: CWE-126
- [Stack-based Buffer Overflow in WLAN HOST](https://agentprime.io/advisories/CVE-2023-24854.md)
  `CVE-2023-24854` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 4 Jul 2023 · Tags: Memory corruption
- [Buffer Copy Without Checking Size of Input in WLAN HOST](https://agentprime.io/advisories/CVE-2023-24851.md)
  `CVE-2023-24851` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 4 Jul 2023 · Tags: Memory corruption
- [Integer Overflow or Wraparound in Audio](https://agentprime.io/advisories/CVE-2023-22667.md)
  `CVE-2023-22667` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 4 Jul 2023 · Tags: Memory corruption
- [Use of Out-of-range Pointer Offset in Qualcomm IPC](https://agentprime.io/advisories/CVE-2023-22387.md)
  `CVE-2023-22387` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 4 Jul 2023 · Tags: CWE-823
- [Buffer Copy Without Checking Size of Input in WLAN HOST](https://agentprime.io/advisories/CVE-2023-22386.md)
  `CVE-2023-22386` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 4 Jul 2023 · Tags: Memory corruption
- [Use After Free in Audio](https://agentprime.io/advisories/CVE-2023-21672.md)
  `CVE-2023-21672` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 4 Jul 2023 · Tags: Memory corruption
- [Permissions, Privileges, and Access Controls in Display](https://agentprime.io/advisories/CVE-2023-21641.md)
  `CVE-2023-21641` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.6 Medium · Not analysed yet · Published 4 Jul 2023 · Tags: CWE-264
- [Buffer Copy Without Checking Size of Input in Linux](https://agentprime.io/advisories/CVE-2023-21640.md)
  `CVE-2023-21640` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 4 Jul 2023 · Tags: Memory corruption
- [Buffer Copy Without Checking the Size of Input in Audio](https://agentprime.io/advisories/CVE-2023-21639.md)
  `CVE-2023-21639` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 4 Jul 2023 · Tags: Memory corruption
- [Incorrect Type Conversion or Cast in Video](https://agentprime.io/advisories/CVE-2023-21638.md)
  `CVE-2023-21638` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 4 Jul 2023 · Tags: CWE-704
- [Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux](https://agentprime.io/advisories/CVE-2023-21637.md)
  `CVE-2023-21637` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 4 Jul 2023 · Tags: Memory corruption
- [Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity](https://agentprime.io/advisories/CVE-2023-21635.md)
  `CVE-2023-21635` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 4 Jul 2023 · Tags: Memory corruption
- [Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux](https://agentprime.io/advisories/CVE-2023-21633.md)
  `CVE-2023-21633` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.7 Medium · Not analysed yet · Published 4 Jul 2023 · Tags: Memory corruption
- [Improper Input Validation in Modem](https://agentprime.io/advisories/CVE-2023-21631.md)
  `CVE-2023-21631` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 4 Jul 2023 · Tags: CWE-20
- [Double Free in Modem](https://agentprime.io/advisories/CVE-2023-21629.md)
  `CVE-2023-21629` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.8 Medium · Not analysed yet · Published 4 Jul 2023 · Tags: Memory corruption
- [Information Exposure in DSP Services](https://agentprime.io/advisories/CVE-2023-21624.md)
  `CVE-2023-21624` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 6.2 Medium · Not analysed yet · Published 4 Jul 2023 · Tags: Information disclosure
- [Improper Access control in GPU Subsystem](https://agentprime.io/advisories/CVE-2023-21670.md)
  `CVE-2023-21670` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.8 High · Not analysed yet · Published 6 Jun 2023 · Tags: Broken access control
- [Buffer Over-read in WLAN HOST](https://agentprime.io/advisories/CVE-2023-21669.md)
  `CVE-2023-21669` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.2 High · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-21661.md)
  `CVE-2023-21661` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-126
- [Buffer Over-read in WLAN Firmware](https://agentprime.io/advisories/CVE-2023-21660.md)
  `CVE-2023-21660` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.5 High · Not analysed yet · Published 6 Jun 2023 · Tags: CWE-126

Newest: <https://agentprime.io/advisories/technology/qualcomm-inc-snapdragon.md>
Older: <https://agentprime.io/advisories/technology/qualcomm-inc-snapdragon.md?cursor=WyIyMDIzLTA2LTA2VDA3OjM5OjE2LjcyMjAwMFoiLCJDVkUtMjAyMy0yMTY2MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=qualcomm-inc-snapdragon&cursor=WyIyMDIzLTA5LTA1VDA2OjI0OjE1Ljc4NDAwMFoiLCJDVkUtMjAyMy0yODU1OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/qualcomm-inc-snapdragon/?cursor=WyIyMDIzLTA5LTA1VDA2OjI0OjE1Ljc4NDAwMFoiLCJDVkUtMjAyMy0yODU1OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.