CVE-2024-45569

CVE-2024-45569 describes memory corruption when parsing the ML IE caused by invalid frame content in Qualcomm chipsets (Qualcomm Snapdragon Auto related). Connected sources corroborate a memory corruption condition with potential remote impact stemming from malformed ML Information Elements. Conc...

CVE-2025-21424

CVE-2025-21424 affects Qualcomm MSM NPU kernel driver. Root cause: memory corruption due to concurrent calls to NPU driver APIs (race condition between NPU host unload and exec paths cited by PacketStorm). Impact described as memory corruption with local access and high confidentiality/integrity/...

CVE-2023-43513

CVE-2023-43513: Memory corruption in Qualcomm components due to an untrusted context read pointer during event-ring processing, which may be advanced with arbitrary values and point to the middle of a ring element. According to the provided data, the CVSS v3.1 base metrics are HIGH for Confidenti...

CVE-2023-43534

CVE-2023-43534 describes a memory corruption vulnerability in Qualcomm WLAN chipsets when validating the TID to Link Mapping action request frame during station association to an access point. The attribute scores indicate a network-exposed, high-severity issue with low attack complexity and no u...

CVE-2024-33063

CVE-2024-33063 affects Qualcomm Snapdragon Auto components. The issue arises during ML IE parsing: a beacon with a common info length greater than the ML IE interior triggers a transient DoS due to an out-of-bounds read/write in util_add_mlie_for_prb_rsp_gen(). Connected sources (PT-2024-25101) d...

CVE-2024-38402

CVE-2024-38402 is a memory corruption via a refcount leak in the Qualcomm ADSPRPC DSP driver (fastrpc_get_process_gids). The vulnerability can enable use-after-free of the group_info structure, exposing kernel memory through a non-saturating refcount that can overflow with repeated calls. Disclos...

CVE-2023-33059

Mode C: CVE-2023-33059 concerns memory corruption in the Audio component when processing VOC packet data from ADSP, affecting Qualcomm audio/ADSP stacks. Root cause cited across connected sources as a buffer/memory handling issue in VOC packet processing with high impact on confidentiality, integ...

CVE-2023-28553

CVE-2023-28553 is a Qualcomm WLAN Host vulnerability described as Information Disclosure when processing WMI event commands. Connected sources identify a related issue described as a buffer over‑read in the WLAN Host component, with CVSS foundations indicating Local access, Low attack complexity,...

CVE-2023-33120

CVE-2023-33120 affects Qualcomm ADSP Audio: memory corruption occurs when a memory map command is executed consecutively. This is described across multiple sources (NVD/Red Hat/RH advisories) as a memory corruption in Audio due to repeated memory-mapping commands. The CVSS-based description in th...

CVE-2023-33111

CVE-2023-33111 details an information disclosure in Qualcomm audio components (VI calibration state via ADSP, MAX_FBSP_STATE) when responding to an AFE calibration command. Root cause is improper handling/validation of an array index in the audio path. Affected: Qualcomm chipsets used in devices ...

CVE-2024-21457

CVE-2024-21457 corresponds to a buffer over-read causing information disclosure in WLAN host communication when handling Multi-link IE in beacon frames. Multiple connected sources tie it to Qualcomm WLAN components and Qualcomm/Pixel advisories. The Pixel bulletin lists CVE-2024-21457 under Qualc...

CVE-2023-43520

CVE-2023-43520 is a memory corruption issue in Qualcomm WLAN components, arising when an Access Point includes a TID-to-link mapping Information Element in beacons and a station parses it. The vulnerability is documented across multiple sources (NVD/NVIDIA CVE entry, Red Hat advisory) with a base...

CVE-2023-28588

CVE-2023-28588 (Qualcomm Bluetooth) : A transient DoS in the Bluetooth Host during RFC slot allocation affects Qualcomm Chipsets’ Bluetooth component. Public records describe an integer overflow/wraparound issue in the Bluetooth Host as the root cause. The CVSSv3.1 base score is 7.5 (High) with n...

CVE-2023-33029

CVE-2023-33029 involves a memory corruption issue in the Qualcomm DSP Service when a remote call is made from HLOS to DSP. Reports consistently describe it as a DSP Service memory corruption vulnerability; CVSS metrics indicate local attack vector, low privileges, no user interaction, and high im...

CVE-2023-33031

CVE-2023-33031 describes a memory corruption vulnerability in Automotive Audio when copying data from the ADSP shared buffer to the VOC packet data buffer. The root cause is a missing or unsafe size check during a buffer copy, leading to memory corruption. Affected component is Automotive Audio (...

CVE-2023-43550

CVE-2023-43550 affects Qualcomm components, describing memory corruption when processing a QMI request to allocate memory from a DHMS‑supported subsystem. The CVSS v3.1 vector indicates a Local, Low‑Complexity, Privileged (low) exploit with no user interaction, and high impact to confidentiality,...

CVE-2023-43552

CVE-2023-43552 corresponds to a memory corruption flaw in Qualcomm WLAN chipsets when processing MBSSID beacons that contain multiple IE subelements. The vulnerability affects the WLAN subsystem and is rooted in memory handling during MBSSID beacon processing, with CVSS v3.1 base metrics (Network...

CVE-2023-33055

CVE-2023-33055 corresponds to memory corruption in Qualcomm audio when a callback in the driver is invoked from the ADSP. The record shows a local attack vector with low privileges and no user interaction, and a high impact on confidentiality, integrity, and availability (CVSS v3.1: AV=L/AC=L/PR=...

CVE-2023-43546

CVE-2023-43546 : Memory corruption in HGSL IOCTL context creation has been reported for Qualcomm chipsets. The vulnerability is described as a local issue with high impact (Confidentiality, Integrity, Availability all HIGH) and requires LOCAL access with LOW attack complexity and LOW privileges, ...

CVE-2023-33079

CVE-2023-33079 : Memory corruption in the Audio path when processing an invalid audio recording in the ADSP on Qualcomm components (e.g., Snapdragon). Affected in Qualcomm audio/closed-source components per CVE mapping; CVSSv3.1 base score 7.8 (High) with local attack, low complexity, low privile...

CVE-2023-33117

CVE-2023-33117 describes a memory corruption vulnerability in Qualcomm chipsets where the host (HLOS) allocates the response payload buffer to copy data received from the ADSP in response to the AVCS_LOAD_MODULE command. The CVE is documented with a Qualcomm security context and a high-severity C...

CVE-2023-43553

CVE-2023-43553 is a memory corruption issue in Qualcomm WLAN related to parsing beacon/probe frames when an AP sends more supported links in the MLIE. The vulnerability affects the WLAN stack (Qualcomm components) and is listed with a high severity (CVSS 9.8) and network attack vector, with no ex...

CVE-2024-23368

CVE-2024-23368 is a memory corruption issue in Qualcomm’s embedded platform concerning the SMEM Partition Handler. The vulnerability arises when allocating and accessing an entry in an SMEM partition, effectively a classic buffer copy without proper input size checking, which can lead to memory c...

CVE-2023-33064

CVE-2023-33064 is described as a Transient DoS in Audio when invoking the callback function of the ASM driver (Qualcomm chipsets). The vulnerability affects the Audio component via the ASM driver callback path and has a CVSS 3.1 base score of 5.5 (Local, Low Privileges, Low Auth, High Impact on A...

CVE-2024-45558

The CVE-2024-45558 entry describes a Transient Denial of Service in Qualcomm WLAN components. The vulnerability arises when the driver parses the per-STA profile Information Element and accesses the EXTN element ID without validating the IE length, enabling a DoS condition. Sources across multipl...

CVE-2024-45571

CVE-2024-45571 affects Qualcomm WLAN components. The issue is memory corruption that occurs when stopping the WLAN interface after processing a WMI command, enabling local attacker with low privileges and no user interaction to impact confidentiality, integrity, and availability (all High). No pu...

CVE-2025-21459

CVE-2025-21459 affects Qualcomm WLAN components on Qualcomm-based devices. The issue is described as a transient denial-of-service that occurs while parsing per-STA (station) configuration/profile data in the ML IE/WLAN stack. Root cause details are not provided in the supplied documents beyond t...

CVE-2023-33087

CVE-2023-33087 describes a memory corruption in Core when processing RX intent requests in Qualcomm chipsets (buffer copy without checking input size). Reported base CVSSv3.1: 7.8 (HIGH) with LOCAL attack vector, LOW exploit complexity, and no user interaction; impacts confidentiality, integrity,...

CVE-2023-33035

CVE-2023-33035 describes memory corruption in Qualcomm components when invoking the AFE callback from the ADSP. Affected software is the Audio Front End (AFE) within Qualcomm ADSP environments; the root cause is memory corruption on callback handling. The CVE is rated HIGH for confidentiality, in...

CVE-2023-33065

CVE-2023-33065 corresponds to a Qualcomm chipset issue described as a buffer over-read in Audio when accessing AVCS services from an ADSP payload. Connected sources align this as an information disclosure vulnerability affecting Audio components in Qualcomm Snapdragon/QCT environments, with local...

CVE-2024-53027

CVE-2024-53027 is a transient DoS vulnerability triggered while processing a malformed Country Information Element in Qualcomm WLAN firmware and Bluetooth stacks. Exploitation requires proximity (remote over Wi‑Fi/Bluetooth) and can crash the chipset firmware, potentially disrupting connectivity ...

CVE-2023-43547

CVE-2023-43547 describes memory corruption during IOCTL invocation in Automotive Multimedia. Connected sources attribute this to Qualcomm-driven Automotive Multimedia components, with root cause memory corruption when issuing IOCTLs. Impact is high (confidentiality, integrity, availability); expl...

CVE-2023-28582

CVE-2023-28582 is a memory corruption vulnerability in Qualcomm Data Modem triggered during the DTLS handshake when verifying the hello-verify message. Root cause: a buffer copy without checking input size. By sending crafted DTLS messages over the network, a remote attacker could potentially exe...

CVE-2024-33060

CVE-2024-33060 is a use-after-free race in Qualcomm’s DSP/adsprpc driver (fastrpc_mmap) that can occur when global and local mappings are concurrently created and freed. The vulnerability centers on fastrpc_mmap_create, fastrpc_mmap_add, and related epilogue paths (mem_map_to_dsp, munmap/mmap_fre...

CVE-2023-43514

CVE-2023-43514 describes a memory corruption issue in Qualcomm DSP firmware related to IOCTL handling for internal memory map/unmap. Reports consistently identify the root cause as memory corruption arising from operations on internal memory (memory after it has been freed) during fastrpc interna...

CVE-2024-49839

CVE-2024-49839 - Summary (mode C) Root cause: Memory corruption during management frame processing caused by a mismatch in the T2LM information element, affecting Qualcomm WLAN/capability elements. What is affected: Qualcomm chipsets with WLAN functionality that process management frames incorpor...

CVE-2024-49838

CVE-2024-49838 is an information disclosure vulnerability in Qualcomm WLAN components (Qualcomm closed- and open-source areas) caused by parsing an OCI IE with invalid length. Connected sources indicate this CVE is tracked in Qualcomm security advisories and appears in the Android March 2025 bull...

CVE-2023-33090

The CVE-2023-33090 entry concerns Qualcomm ADSP’s speaker protection v2 module. Connected data adds a known issue description (Buffer Over-read in Audio) and notes a transient DoS can occur while processing channel information. Affected component appears to be the ADSP audio path used for speaker...

CVE-2024-33050

CVE-2024-33050 affects Qualcomm WLAN host components and describes a Transient Denial of Service during MBSSID processing when constructing new Information Elements in beacon/probe frames. Root cause is a missing/improper IE length check; impact is DoS with network access, no confidentiality/inte...

CVE-2025-21435

CVE-2025-21435 : Qualcomm WLAN/ Snapdragon component vulnerability causing a transient Denial-of-Service while parsing extended Information Elements in a beacon. The issue is described as a transient DoS that can occur during beacon IE parsing; exploitation status is not detailed in the provided ...

CVE-2024-21475

CVE-2024-21475 affects Qualcomm chipsets; memory corruption occurs when the firmware payload length does not match the expected protocol size, due to improper handling of payload length. Impact is high (C/H/I/A) with a local attack vector, low privileges required, and no user interaction. Remedia...

CVE-2024-33048

Technical details about CVE-2024-33048 are not provided in the supplied documents. The records only reiterate a transient DOS during TID-to-link mapping parsing. Monitor for updates from Qualcomm/Red Hat/Android advisories.

CVE-2025-21453

CVE-2025-21453 describes memory corruption in Qualcomm components due to a use-after-free style issue when an iterator is accessed after removal, with the GPS HLOS driver specifically listed in CVE records. Public records (NVD/NCSC/Red Hat CVEs) corroborate the memory-corruption description and t...

CVE-2024-21458

CVE-2024-21458 affects Qualcomm WLAN/embedded platform software and is described as information disclosure due to a buffer over-read in handling the SA query action frame (Qualcomm WLAN component). Public references identify it as a WLAN HOST buffer over-read with potential information disclosure...

CVE-2023-33028

CVE-2023-33028 describes a memory corruption vulnerability in Qualcomm WLAN firmware during a pmk cache memory copy, classified as buffer copy without checking size. Public records indicate potential remote code execution with high impact on confidentiality, integrity, and availability (CVSS 3.1:...

CVE-2024-53014

CVE-2024-53014 = memory corruption in Qualcomm’s Audio driver during validation of ports/channels. Root cause: improper input validation within the audio component (port/channel validation). Impact is high (CVE described as local, with high confidentiality, integrity, and availability impact; att...

CVE-2023-33068

CVE-2023-33068 concerns memory corruption in the Audio component when processing IIR configuration data from an AFE calibration block on Qualcomm chipsets. The public description across sources cites a memory corruption vulnerability in the Audio path due to IIR config data handling, with CVSS me...

CVE-2023-33069

CVE-2023-33069 concerns a memory corruption vulnerability in the Audio path when processing calibration data returned from the ACDB loader, observed in Qualcomm chipsets. Affected component is the Audio subsystem responsible for calibration data handling; root cause is memory mismanagement during...

CVE-2025-21434

CVE-2025-21434 affects Qualcomm WLAN on Snapdragon platforms. The issue is a transient Denial of Service that can occur while parsing EHT operation IE or EHT capability IE, as described in Qualcomm’s security references (QC-CR#3918068) and linked CVE listings. Connected sources indicate a DoS imp...

CVE-2024-33057

CVE-2024-33057 concerns Qualcomm WLAN components and describes a Transient Denial of Service caused by parsing the multi-link element Control field when a common information length check is missing before updating the location. The primary documentation lists a High impact (CVSSv3.1: 7.5) with a ...