CVE-2025-21468

CVE-2025-21468 describes a memory corruption in Qualcomm chipset drivers when reading a response from firmware if the firmware changes the buffer size while the driver uses that size to append a null terminator. This is a local vulnerability with a CVSS 3.1 base score of 7.8 (High) and impact on ...

CVE-2025-21467 Out-of-bounds Write in Computer Vision

Memory corruption while reading the FW response from the shared queue...

CVE-2025-21467 Out-of-bounds Write in Computer Vision

Memory corruption while reading the FW response from the shared queue...

CVE-2025-21467

CVE-2025-21467 describes memory corruption that occurs when reading the firmware (FW) response from the shared queue in Qualcomm chipsets. The issue affects Qualcomm mobile firmware components (notably in camera-related workflows per CVE listings) and is caused by improper handling of the FW resp...

PT-2025-19880 · Qualcomm · Snapdragon +131

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs when reading a response from the firmware FW. This happens when the buffer size is modified by the FW while the driver is using this size to...

CVE-2024-53157

In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Check the DVFS OPP count returned by the firmware Fix a kernel crash with the below call trace when the SCPI firmware returns OPP count of zero. dvfsinfo.oppcount may be zero on some platforms during the reboot...

SUSE CVE-2024-38606

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate slices count returned by FW The function adfsendadmintlstart enables the telemetry TL feature on a QAT device by sending the ICPQATFWTLSTART message to the firmware. This triggers the FW to start writing TL...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption issue when parsing QMI firmware response messages...

PT-2023-19826 · Qualcomm · Snapdragon +174

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the WLAN HOST component when it parses a QMI response message from the firmware. This corruption occurs due to...

PT-2023-19829 · Qualcomm · Qm215 Firmware +147

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the WLAN HOST when it parses a QMI WLAN Firmware response message. Recommendations: At the moment, there is no...

CVE-2021-1940

Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1940

Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets are vulnerable to a resource management error vulnerability that stems from improper handling of the chipset firmware response, which could lead to memory reuse after release...

CVE-2019-10538

Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

Code injection

Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

CVE-2019-10538

Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...