Advisories · Technology

Qualcomm, Inc. Snapdragon.

Every CVE that names Qualcomm, Inc. Snapdragon among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-33074 CVE record

CVSS 8.4 High

Use After Free in Audio
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 7 Nov 2023
CVE-2023-33061 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 7 Nov 2023
CVE-2023-33059 CVE record

CVSS 7.8 High

Buffer Copy Without Checking Size of Input in Audio
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 7 Nov 2023
CVE-2023-33056 CVE record

CVSS 7.5 High

NULL Pointer dereference in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 7 Nov 2023
CVE-2023-33055 CVE record

CVSS 7.8 High

Buffer Copy Without Checking Size of Input in Audio
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 7 Nov 2023
CVE-2023-33048 CVE record

CVSS 7.5 High

Buffer over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 7 Nov 2023
CVE-2023-33047 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 7 Nov 2023
CVE-2023-33045 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer Copy Without Checking Size of Input in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 7 Nov 2023
CVE-2023-33031 CVE record

CVSS 7.8 High

Buffer Copy Without Checking Size of Input in Automotive Audio
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 7 Nov 2023
CVE-2023-28574 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Improper Input Validation in Core
- Qualcomm, Inc. Snapdragon
- CWE-20
Not analysed yet 7 Nov 2023
CVE-2023-28572 CVE record

CVSS 6.6 Medium

Buffer Over-read in WLAN HOST
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 7 Nov 2023
CVE-2023-28570 CVE record

CVSS 6.7 Medium

Buffer Copy without Checking Size of Input in Audio
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 7 Nov 2023
CVE-2023-28569 CVE record

CVSS 6.1 Medium

Buffer Over-read in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 7 Nov 2023
CVE-2023-28568 CVE record

CVSS 6.1 Medium

Buffer Over-read in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 7 Nov 2023
CVE-2023-28566 CVE record

CVSS 6.1 Medium

Buffer Over-read in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 7 Nov 2023
CVE-2023-28563 CVE record

CVSS 6.1 Medium

Buffer Over-read in IOE Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 7 Nov 2023
CVE-2023-28556 CVE record

CVSS 7.1 High

Improper Authorization in HLOS
- Qualcomm, Inc. Snapdragon
- Broken access control
Not analysed yet 7 Nov 2023
CVE-2023-28554 CVE record

CVSS 6.1 Medium

Buffer Over-read in Qualcomm IPC
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 7 Nov 2023
CVE-2023-28553 CVE record

CVSS 6.1 Medium

Buffer Over-read in WLAN Host
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 7 Nov 2023
CVE-2023-28545 CVE record

CVSS 8.2 High

Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 7 Nov 2023
CVE-2023-24852 CVE record

CVSS 8.4 High

Improper Authentication in Core
- Qualcomm, Inc. Snapdragon
- Authentication bypass
Not analysed yet 7 Nov 2023
CVE-2023-22388 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use of Out-of-range Pointer Offset in Multi-mode Call Processor
- Qualcomm, Inc. Snapdragon
- CWE-823
Not analysed yet 7 Nov 2023
CVE-2023-21671 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Improper Input Validation in Core
- Qualcomm, Inc. Snapdragon
- CWE-20
Not analysed yet 7 Nov 2023
CVE-2023-33039 CVE record

CVSS 8.4 High

Use After Free in Automotive Display
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 3 Oct 2023
CVE-2023-33035 CVE record

CVSS 7.8 High

Buffer Copy Without Checking Size of Input in Audio
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 3 Oct 2023
CVE-2023-33034 CVE record

CVSS 7.8 High

Signed-to-unsigned conversion error in Audio
- Qualcomm, Inc. Snapdragon
- CWE-195
Not analysed yet 3 Oct 2023
CVE-2023-33029 CVE record

CVSS 8.4 High

Use After Free in DSP Service
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 3 Oct 2023
CVE-2023-33028 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer Copy without Checking Size of Input in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 3 Oct 2023
CVE-2023-33027 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 3 Oct 2023
CVE-2023-33026 CVE record

CVSS 7.5 High

Buffer over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 3 Oct 2023
CVE-2023-28571 CVE record

CVSS 6.1 Medium

Buffer Over-read in WLAN HOST
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 3 Oct 2023
CVE-2023-28540 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper Authentication in Data Modem
- Qualcomm, Inc. Snapdragon
- Authentication bypass
Not analysed yet 3 Oct 2023
CVE-2023-28539 CVE record

CVSS 6.6 Medium

Buffer Copy Without Checking Size of Input in WLAN Host
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 3 Oct 2023
CVE-2023-24855 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Use of Out-of-range Pointer Offset in Modem
- Qualcomm, Inc. Snapdragon
- CWE-823
Not analysed yet 3 Oct 2023
CVE-2023-24853 CVE record

CVSS 8.4 High

Improper Input Validation in HLOS
- Qualcomm, Inc. Snapdragon
- CWE-20
Not analysed yet 3 Oct 2023
CVE-2023-24850 CVE record

CVSS 7.8 High

Improper Validation of Array Index in HLOS
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 3 Oct 2023
CVE-2023-24849 CVE record

CVSS 8.2 High

Buffer Over-read in Data Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 3 Oct 2023
CVE-2023-24848 CVE record

CVSS 8.2 High

Buffer Over-read in Data Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 3 Oct 2023
CVE-2023-24847 CVE record

CVSS 7.5 High

NULL pointer Dereference in Modem
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 3 Oct 2023
CVE-2023-24844 CVE record

CVSS 8.4 High

Improper Access Control in Core
- Qualcomm, Inc. Snapdragon
- Broken access control
Not analysed yet 3 Oct 2023
CVE-2023-24843 CVE record

CVSS 7.5 High

Reachable Assertion in Modem
- Qualcomm, Inc. Snapdragon
- Denial of service
Not analysed yet 3 Oct 2023
CVE-2023-22385 CVE record

CVSS 8.2 High

Buffer Over-read in Data Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 3 Oct 2023
CVE-2023-22384 CVE record

CVSS 6.7 Medium

Buffer Copy Without Checking Size of Input in VR Service
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 3 Oct 2023
CVE-2023-22382 CVE record

CVSS 7.4 High

Improper Input Validation in Automotive
- Qualcomm, Inc. Snapdragon
- CWE-20
Not analysed yet 3 Oct 2023
CVE-2023-21673 CVE record

CVSS 8.7 High

Improper Access Control in Kernel
- Qualcomm, Inc. Snapdragon
- Broken access control
Not analysed yet 3 Oct 2023
CVE-2023-28543 CVE record

CVSS 8.1 High

Out of Bounds read in SNPE Library
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-33021 CVE record

CVSS 8.4 High

Use After Free in Graphics
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-33020 CVE record

CVSS 7.5 High

Improper Authorization in WLAN Host
- Qualcomm, Inc. Snapdragon
- Broken access control
Not analysed yet 5 Sept 2023
CVE-2023-33019 CVE record

CVSS 7.5 High

Improper Authorization in WLAN Host
- Qualcomm, Inc. Snapdragon
- Broken access control
Not analysed yet 5 Sept 2023
CVE-2023-33016 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 5 Sept 2023
CVE-2023-33015 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 5 Sept 2023
CVE-2023-28584 CVE record

CVSS 7.5 High

Improper Authorization in WLAN Host
- Qualcomm, Inc. Snapdragon
- Broken access control
Not analysed yet 5 Sept 2023
CVE-2023-28581 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-28573 CVE record

CVSS 7.8 High

Improper Validation of Array Index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 5 Sept 2023
CVE-2023-28567 CVE record

CVSS 7.8 High

Improper Validation of Array Index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 5 Sept 2023
CVE-2023-28565 CVE record

CVSS 7.8 High

Improper Validation of Array Index in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 5 Sept 2023
CVE-2023-28564 CVE record

CVSS 7.8 High

Use of Out-of-range Pointer Offset in WLAN HAL
- Qualcomm, Inc. Snapdragon
- CWE-823
Not analysed yet 5 Sept 2023
CVE-2023-28562 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer Copy Without Checking Size of Input in QESL
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-28560 CVE record

CVSS 7.8 High

Buffer Copy Without Checking Size of Input in WLAN HAL
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023
CVE-2023-28559 CVE record

CVSS 7.8 High

Buffer Copy Without Checking Size of Input in WLAN HAL
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 5 Sept 2023