Advisories · Technology

Qualcomm, Inc. Snapdragon.

Every CVE that names Qualcomm, Inc. Snapdragon among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-28558 CVE record

CVSS 7.8 High

Improper Validation of Array Index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 5 Sept 2023
CVE-2023-28557 CVE record

CVSS 7.8 High

Improper Validation of Array Index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 5 Sept 2023
CVE-2023-28549 CVE record

CVSS 7.8 High

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-28548 CVE record

CVSS 7.8 High

Improper Validation of Array Index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 5 Sept 2023
CVE-2023-28544 CVE record

CVSS 7.8 High

Buffer Copy without Checking the Size of Input in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-28538 CVE record

CVSS 8.4 High

Stack-based Buffer Overflow in WIN Product
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-21667 CVE record

CVSS 6.5 Medium

Buffer Over-read in Bluetooth HOST
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 5 Sept 2023
CVE-2023-21664 CVE record

CVSS 7.8 High

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-21663 CVE record

CVSS 6.7 Medium

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-21662 CVE record

CVSS 7.8 High

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-21655 CVE record

CVSS 6.7 Medium

Integer Overflow or Wraparound in Display
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-21654 CVE record

CVSS 6.7 Medium

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-21653 CVE record

CVSS 7.5 High

Reachable Assertion in Modem
- Qualcomm, Inc. Snapdragon
- Denial of service
Not analysed yet 5 Sept 2023
CVE-2023-21646 CVE record

CVSS 7.5 High

Reachable Assertion in Modem
- Qualcomm, Inc. Snapdragon
- Denial of service
Not analysed yet 5 Sept 2023
CVE-2023-21644 CVE record

CVSS 6.7 Medium

Integer Overflow to Buffer Overflow in RIL
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-21636 CVE record

CVSS 6.7 Medium

Improper Validation of Array Index in Linux
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 5 Sept 2023
CVE-2022-40534 CVE record

CVSS 8.4 High

Improper Validation of Array Index in Audio
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 5 Sept 2023
CVE-2022-40524 CVE record

CVSS 6.7 Medium

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 5 Sept 2023
CVE-2022-33275 CVE record

CVSS 8.4 High

Improper validation of array index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 5 Sept 2023
CVE-2022-33220 CVE record

CVSS 5.1 Medium

Buffer over-read in Automotive multimedia
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 5 Sept 2023
CVE-2023-28577 CVE record

CVSS 6.7 Medium

Multiple Dmabuf Kernel Address UAF Vulnerability
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-28576 CVE record

CVSS 6.4 Medium

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver
- Qualcomm, Inc. Snapdragon
- Race condition
Not analysed yet 8 Aug 2023
CVE-2023-28575 CVE record

CVSS 6.7 Medium

Multiple Type Confusion Vulnerability
- Qualcomm, Inc. Snapdragon
- CWE-823
Not analysed yet 8 Aug 2023
CVE-2023-28561 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer Copy Without Checking Size of Input in QESL
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-28555 CVE record

CVSS 7.5 High

Buffer Over-read in Audio
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 8 Aug 2023
CVE-2023-28537 CVE record

CVSS 8.4 High

Integer Overflow or Wraparound in Audio
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-22666 CVE record

CVSS 8.4 High

Integer Overflow or Wraparound in Audio
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-21652 CVE record

CVSS 7.7 High

Key Management Errors in HLOS
- Qualcomm, Inc. Snapdragon
- CWE-320
Not analysed yet 8 Aug 2023
CVE-2023-21651 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Incorrect Type Conversion or Cast in Core
- Qualcomm, Inc. Snapdragon
- CWE-704
Not analysed yet 8 Aug 2023
CVE-2023-21650 CVE record

CVSS 6.7 Medium

Improper Validation of Array Index in GPS HLOS Driver
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 8 Aug 2023
CVE-2023-21649 CVE record

CVSS 6.7 Medium

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-21648 CVE record

CVSS 6.7 Medium

Integer Overflow to Buffer Overflow in RIL
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-21647 CVE record

CVSS 6.5 Medium

Improper Input Validation in Bluetooth HOST
- Qualcomm, Inc. Snapdragon
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-21643 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Untrusted Pointer Dereference in Automotive
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-21627 CVE record

CVSS 6.7 Medium

Incorrect Type Conversion or Cast in Trusted Execution Environment
- Qualcomm, Inc. Snapdragon
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-21626 CVE record

CVSS 7.1 High

Improper Authentication in HLOS.
- Qualcomm, Inc. Snapdragon
- CWE-320
Not analysed yet 8 Aug 2023
CVE-2023-21625 CVE record

CVSS 8.2 High

Buffer Over-read in Network Services
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 8 Aug 2023
CVE-2022-40510 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer copy without checking size of input in Audio.
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-28542 CVE record

CVSS 7.8 High

Buffer Over-read in WLAN HOST
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Jul 2023
CVE-2023-28541 CVE record

CVSS 7.8 High

Buffer Over-read in WLAN Host
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Jul 2023
CVE-2023-24854 CVE record

CVSS 7.8 High

Stack-based Buffer Overflow in WLAN HOST
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Jul 2023
CVE-2023-24851 CVE record

CVSS 7.8 High

Buffer Copy Without Checking Size of Input in WLAN HOST
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Jul 2023
CVE-2023-22667 CVE record

CVSS 8.4 High

Integer Overflow or Wraparound in Audio
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Jul 2023
CVE-2023-22387 CVE record

CVSS 7.8 High

Use of Out-of-range Pointer Offset in Qualcomm IPC
- Qualcomm, Inc. Snapdragon
- CWE-823
Not analysed yet 4 Jul 2023
CVE-2023-22386 CVE record

CVSS 7.8 High

Buffer Copy Without Checking Size of Input in WLAN HOST
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Jul 2023
CVE-2023-21672 CVE record

CVSS 8.4 High

Use After Free in Audio
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Jul 2023
CVE-2023-21641 CVE record

CVSS 6.6 Medium

Permissions, Privileges, and Access Controls in Display
- Qualcomm, Inc. Snapdragon
- CWE-264
Not analysed yet 4 Jul 2023
CVE-2023-21640 CVE record

CVSS 6.7 Medium

Buffer Copy Without Checking Size of Input in Linux
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Jul 2023
CVE-2023-21639 CVE record

CVSS 6.7 Medium

Buffer Copy Without Checking the Size of Input in Audio
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Jul 2023
CVE-2023-21638 CVE record

CVSS 6.7 Medium

Incorrect Type Conversion or Cast in Video
- Qualcomm, Inc. Snapdragon
- CWE-704
Not analysed yet 4 Jul 2023
CVE-2023-21637 CVE record

CVSS 6.7 Medium

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Jul 2023
CVE-2023-21635 CVE record

CVSS 6.7 Medium

Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Jul 2023
CVE-2023-21633 CVE record

CVSS 6.7 Medium

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Jul 2023
CVE-2023-21631 CVE record

CVSS 7.5 High

Improper Input Validation in Modem
- Qualcomm, Inc. Snapdragon
- CWE-20
Not analysed yet 4 Jul 2023
CVE-2023-21629 CVE record

CVSS 6.8 Medium

Double Free in Modem
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Jul 2023
CVE-2023-21624 CVE record

CVSS 6.2 Medium

Information Exposure in DSP Services
- Qualcomm, Inc. Snapdragon
- Information disclosure
Not analysed yet 4 Jul 2023
CVE-2023-21670 CVE record

CVSS 7.8 High

Improper Access control in GPU Subsystem
- Qualcomm, Inc. Snapdragon
- Broken access control
Not analysed yet 6 Jun 2023
CVE-2023-21669 CVE record

CVSS 8.2 High

Buffer Over-read in WLAN HOST
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 Jun 2023
CVE-2023-21661 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 Jun 2023
CVE-2023-21660 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 Jun 2023