CVE-2023-33106

CVE-2023-33106 is a memory corruption vulnerability in Qualcomm graphics drivers, caused by an out-of-range pointer offset when submitting a large list of sync points to IOCTL_KGSL_GPU_AUX_COMMAND. Affected component is Qualcomm chipsets’ graphics subsystem (KGSL driver). The issue is locally exp...

CVE-2023-33107

CVE-2023-33107 is an integer overflow/memory-corruption vulnerability in Graphics Linux affecting Qualcomm display components. The flaw occurs when assigning a shared virtual memory region during an IOCTL, enabling local attacker access with low complexity and no user interaction; impact is rated...

CVE-2026-21385

CVE-2026-21385 is a memory corruption vulnerability in the Qualcomm Display component (graphics) used by Qualcomm chipsets, caused by memory alignment handling during allocation. Exploitation has been observed in the wild in a limited, targeted manner, with attackers able to push malicious data t...

CVE-2023-43513

CVE-2023-43513: Memory corruption in Qualcomm components due to an untrusted context read pointer during event-ring processing, which may be advanced with arbitrary values and point to the middle of a ring element. According to the provided data, the CVSS v3.1 base metrics are HIGH for Confidenti...

CVE-2023-33120

CVE-2023-33120 affects Qualcomm ADSP Audio: memory corruption occurs when a memory map command is executed consecutively. This is described across multiple sources (NVD/Red Hat/RH advisories) as a memory corruption in Audio due to repeated memory-mapping commands. The CVSS-based description in th...

CVE-2023-33092

CVE-2023-33092 describes a memory corruption in the Bluetooth HOST path when processing a pin reply whose value from the APP layer exceeds the expected size. The issue is caused by a buffer copy without adequate input-size checks. Reported impact in sources indicates high/severe consequences with...

CVE-2023-28588

CVE-2023-28588 (Qualcomm Bluetooth) : A transient DoS in the Bluetooth Host during RFC slot allocation affects Qualcomm Chipsets’ Bluetooth component. Public records describe an integer overflow/wraparound issue in the Bluetooth Host as the root cause. The CVSSv3.1 base score is 7.5 (High) with n...

CVE-2023-33055

CVE-2023-33055 corresponds to memory corruption in Qualcomm audio when a callback in the driver is invoked from the ADSP. The record shows a local attack vector with low privileges and no user interaction, and a high impact on confidentiality, integrity, and availability (CVSS v3.1: AV=L/AC=L/PR=...

CVE-2023-33094

CVE-2023-33094 is a memory corruption issue occurring during VK synchronization with KASAN enabled in Qualcomm-related components (Display). The NVD entry lists a local attack vector with low privileges required and no user interaction, with a high impact on confidentiality, integrity, and availa...

CVE-2024-23368

CVE-2024-23368 is a memory corruption issue in Qualcomm’s embedded platform concerning the SMEM Partition Handler. The vulnerability arises when allocating and accessing an entry in an SMEM partition, effectively a classic buffer copy without proper input size checking, which can lead to memory c...

CVE-2023-33117

CVE-2023-33117 describes a memory corruption vulnerability in Qualcomm chipsets where the host (HLOS) allocates the response payload buffer to copy data received from the ADSP in response to the AVCS_LOAD_MODULE command. The CVE is documented with a Qualcomm security context and a high-severity C...

CVE-2025-21483

CVE-2025-21483 affects Qualcomm Snapdragon embedded platform firmware in the Data Network Stack & Connectivity component. It stems from a buffer overflow during RTP packet reassembly of NAL units, leading to memory corruption in the UE. The CVSS 3.1/3.1 vector is Network, Privileges=None, User in...

CVE-2023-22388

CVE-2023-22388 describes memory corruption in the Qualcomm Multi-mode Call Processor when handling a bit mask API. The issue is documented with a CVSS v3.1 base score of 9.8 (CRITICAL) and is described as network-exploitable with no user interaction and no privileges required; impact spans confid...

CVE-2023-28554

CVE-2023-28554 concerns Qualcomm IPC. Connected sources describe an information-disclosure vulnerability arising when reading values from shared memory inside a VM, attributed to a buffer over-read in the Qualcomm IPC path. The issue impacts confidentiality and is characterized with local access ...

CVE-2023-22668

CVE-2023-22668 describes a memory corruption issue in the audio subsystem when user-space IOCTLs are invoked on Qualcomm chipsets. Affected component: audio path in Qualcomm devices; root cause: memory corruption leading to potential impact on confidentiality, integrity, and availability (per CVS...

CVE-2023-24849

CVE-2023-24849 affects Qualcomm closed‑source Data Modem; the issue is Information Disclosure caused by parsing FMTP lines in SDP messages. Root cause: a flaw in the FMTP parsing logic in the Data Modem leading to confidentiality impact (CVE exhibits High impact, with network attack vector and no...

CVE-2023-24848

CVE-2023-24848 describes an information disclosure in the Qualcomm Data Modem during VoLTE calls when an undefined RTCP FB line value is observed. Public records here confirm the issue title and network-facing context, with CVE-2023-24848 listed in multiple feeds (NVD, CVE list) and linked to Qua...

CVE-2023-43518

CVE-2023-43518 concerns memory corruption in Qualcomm chipsets during video parsing of an invalid MP2 clip. Affected component family: Qualcomm closed‑source components; root cause: improper handling of malformed video data leading to memory corruption. Public metrics show a high/severe impact (N...

CVE-2023-33118

CVE-2023-33118 concerns memory corruption when processing the Listen Sound Model client payload buffer during a Listen Sound session get parameter request in ST HAL. Documented impact includes high confidentiality, integrity, and availability loss with a local attack vector and no user interactio...

CVE-2023-24850

CVE-2023-24850 describes memory corruption in HLOS when importing a cryptographic key into the KeyMaster Trusted Application. The vulnerability is associated with Qualcomm closed-source components and is classified with a high impact (CVSS v3.1: AV=L/AC=L/PR=L/UI=N/S=U; C/H/I/A=HIGH). The descrip...

CVE-2023-33030

CVE-2023-33030 is a memory corruption issue in HLOS observed while running the PlayReady use-case on Qualcomm chipsets. Connected details indicate the underlying cause as buffer copy without checking the size of input, leading to potential corruption. Documented impact across sources emphasizes h...

CVE-2023-22385

CVE-2023-22385 is a memory corruption issue in the Qualcomm Data Modem that can occur during MO or MT VOLTE calls. Public documents consistently describe the affected component as the Data Modem and attribute the vulnerability to memory corruption in that subsystem. The CVE appears in multiple fe...

CVE-2023-28550

CVE-2023-28550 affects Qualcomm chipsets, describing memory corruption in MPP performance when accessing the DSM watermark via an external memory address. The vulnerability is tied to improper memory bounds handling within the MPP component, leading to potential high-severity impact (as indicated...

CVE-2023-33033

Technical details (affected products, versions, root cause, fixes) for CVE-2023-33033 are not publicly provided in the supplied connected documents; monitor updates from Qualcomm/Red Hat/NVD references.

CVE-2026-24088

Technical details are not publicly available in the provided documents for CVE-2026-24088. Monitor for updates.

CVE-2023-28546

CVE-2023-28546 corresponds to memory corruption in the SPS Application when exporting a public key in the sorter TA. The connected PT-2023-21794 entry confirms the issue is memory-corruption related with potential code execution, but it does not specify affected versions and provides no informati...

CVE-2025-59610

CVE-2025-59610 represents a memory corruption vulnerability that occurs when processing IOCTL requests with mismatched API versions, caused by concurrent modification of a user-space buffer. The CVSS 3.1 vector (L/H/C/I/A) indicates a Local, High complexity, High privileges required, no user inte...

CVE-2023-28551

CVE-2023-28551 describes memory corruption in UTILS when the modem processes memory-specific Diag commands with arbitrary address values. The issue affects Qualcomm chipset components (Qualcomm closed-source/Qualcomm components) and is rated with CVSS v3.1: Local access, Low attack complexity, Lo...

CVE-2025-47379

Summary: CVE-2025-47379 describes memory corruption and potential use-after-free when multiple threads access a shared buffer in parallel due to improper synchronization between assignment and deallocation. The CVSSv3.1 base score is 7.8 (HIGH), with local attack vector, low attack complexity, an...

CVE-2024-45552

CVE-2024-45552 affects Qualcomm components (closed‑source) and involves an information-disclosure condition during a video call when a device resets due to a non-conforming RTCP packet that does not adhere to RFC standards. root cause: RTCP packet non-conformance leading to state reset and data e...

CVE-2025-21428

CVE-2025-21428 relates to memory corruption in Qualcomm chipsets when a station (STA) connects to an access point (AP) and an ADD TS request is initiated to establish a TSpec session. The vulnerability affects the WLAN host/stack in affected Qualcomm products and is classified with CVSS v3.1 vect...

CVE-2025-47333

CVE-2025-47333 affects Qualcomm chipsets' cryptographic driver, with memory corruption occurring while handling buffer mapping operations. The root cause is a flaw in how the driver manages memory during mapBuffer processing, which may lead to crashes or unpredictable behavior. Exploitation detai...

CVE-2025-47375

CVE-2025-47375: Memory corruption when multiple user-space IOCTL calls are handled concurrently. Public records (NVD entry) confirm the issue and the CVSS 3.1 vector indicates Local, Low complexity exploitation with Low privileges required and high impact to confidentiality, integrity, and availa...

CVE-2025-47369

The CVE-2025-47369 issue relates to Qualcomm’s CVP driver: a session ID returned to userland is derived from a kernel pointer via hash32_ptr, a non-cryptographic and reversible fold. This leaks kernel addresses and can deterministically reveal the original pointer due to ARM64 address layout, eff...

CVE-2025-21482

CVE-2025-21482 describes a cryptographic issue in Qualcomm closed‑source components related to RSA PKCS padding decoding. The CVE is listed as High severity with Local attack vector, Low attack complexity, Low privileges required, and no user interaction, with impacts on Confidentiality and Integ...

CVE-2025-21484

CVE-2025-21484 is an information-disclosure issue described as a buffer over-read in the Qualcomm data-network stack, triggered when a User Equipment (UE) decodes and reassembles RTP fragments received over the network. Public descriptions consistently state that the vulnerability causes informat...

CVE-2025-47383

CVE-2025-47383 describes a weak configuration that may cause a cryptographic issue when a VoWiFi call is triggered from UE. Connected records repeat the description and list a CVSS v3.1 base score of 7.2 (HIGH) with NETWORK attack vector, low attack complexity, and high impact on confidentiality,...

CVE-2025-47376

CVE-2025-47376 describes memory corruption during concurrent access to a shared buffer in IOCTL handling. The CVE entries reference a use-after-free context noted in the CVE List entry (‘Use After Free in Automotive Audio’). The NVD summary repeats memory corruption during IOCTL concurrency. CVSS...

CVE-2025-47320

CVE-2025-47320 affects Qualcomm’s audio-kernel where a memory corruption occurs while processing MFC channel configuration during music playback. The CVE entry notes a high-severity issue with local attack vector, requiring low privileges and no user interaction, affecting confidentiality, integr...

CVE-2025-47330

CVE-2025-47330 affects Qualcomm chipsets, with the issue described as a transient denial-of-service during parsing of video packets from the video firmware. The published metrics indicate local attack vector, low privileges, no user interaction, and an availability impact rated as high (CVSS 3.1:...

CVE-2025-47386

CVE-2025-47386 affects automotive audio (per CVE listing) with memory corruption arising during IOCTL handling under concurrent access to a shared buffer. The connected CVE record notes a Use After Free root cause. Exploitation details are not provided in the available documents. No explicit reme...

CVE-2025-47331

Technical details are not publicly available in the provided documents for CVE-2025-47331; monitor for updates.

CVE-2025-27063

CVE-2025-27063: Memory corruption during video playback when a video session open fails with a timeout error is identified on Qualcomm video-driver components. Affected software involves the Qualcomm video-driver/video session handling; root cause referenced as memory corruption during failure to...