CVE-2023-33106

CVE-2023-33106 is a memory corruption vulnerability in Qualcomm graphics drivers, caused by an out-of-range pointer offset when submitting a large list of sync points to IOCTL_KGSL_GPU_AUX_COMMAND. Affected component is Qualcomm chipsets’ graphics subsystem (KGSL driver). The issue is locally exp...

CVE-2023-33107

CVE-2023-33107 is an integer overflow/memory-corruption vulnerability in Graphics Linux affecting Qualcomm display components. The flaw occurs when assigning a shared virtual memory region during an IOCTL, enabling local attacker access with low complexity and no user interaction; impact is rated...

CVE-2026-21385

CVE-2026-21385 is a memory corruption vulnerability in the Qualcomm Display component (graphics) used by Qualcomm chipsets, caused by memory alignment handling during allocation. Exploitation has been observed in the wild in a limited, targeted manner, with attackers able to push malicious data t...

CVE-2024-23380

CVE-2024-23380 is a memory corruption issue in Qualcomm’s graphics stack related to handling user packets during a VBO bind operation. The flaw is described as a local issue with high impact to confidentiality, integrity, and availability. The CVSS indicates local access with low attack complexit...

CVE-2024-23373

CVE-2024-23373 is a memory corruption/Use-After-Free issue in Qualcomm graphics stack related to IOMMU unmap handling, where a failed unmap can cause DMA/anonymous buffers to be released. Public sources assign a HIGH impact with local attack requirements (no user interaction). The CVE is document...

CVE-2023-43513

CVE-2023-43513: Memory corruption in Qualcomm components due to an untrusted context read pointer during event-ring processing, which may be advanced with arbitrary values and point to the middle of a ring element. According to the provided data, the CVSS v3.1 base metrics are HIGH for Confidenti...

CVE-2023-43534

CVE-2023-43534 describes a memory corruption vulnerability in Qualcomm WLAN chipsets when validating the TID to Link Mapping action request frame during station association to an access point. The attribute scores indicate a network-exposed, high-severity issue with low attack complexity and no u...

CVE-2024-23372

CVE-2024-23372 is a memory corruption issue described as occurring when invoking an IOCTL for GPU memory allocation with a size parameter larger than expected. Multiple sources identify it in Qualcomm components and related display subsystems, with a high-impact profile (local attack, low privile...

CVE-2023-33029

CVE-2023-33029 involves a memory corruption issue in the Qualcomm DSP Service when a remote call is made from HLOS to DSP. Reports consistently describe it as a DSP Service memory corruption vulnerability; CVSS metrics indicate local attack vector, low privileges, no user interaction, and high im...

CVE-2023-33120

CVE-2023-33120 affects Qualcomm ADSP Audio: memory corruption occurs when a memory map command is executed consecutively. This is described across multiple sources (NVD/Red Hat/RH advisories) as a memory corruption in Audio due to repeated memory-mapping commands. The CVSS-based description in th...

CVE-2023-28588

CVE-2023-28588 (Qualcomm Bluetooth) : A transient DoS in the Bluetooth Host during RFC slot allocation affects Qualcomm Chipsets’ Bluetooth component. Public records describe an integer overflow/wraparound issue in the Bluetooth Host as the root cause. The CVSSv3.1 base score is 7.5 (High) with n...

CVE-2023-43520

CVE-2023-43520 is a memory corruption issue in Qualcomm WLAN components, arising when an Access Point includes a TID-to-link mapping Information Element in beacons and a station parses it. The vulnerability is documented across multiple sources (NVD/NVIDIA CVE entry, Red Hat advisory) with a base...

CVE-2026-24085

Technical details about CVE-2026-24085 are not publicly available in the provided documents; the memory corruption description is noted but no affected products, affected versions, root cause specifics, or fixes are disclosed. Monitor for updates.

CVE-2023-33114

CVE-2023-33114 involves memory corruption in the Neural Processing Unit (NPU) when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted concurrently. According to Qualcomm’s bulletin, this affects Qualcomm components with NPU/Kernal subsystems and is rated High severit...

CVE-2023-33034

CVE-2023-33034 is a memory-corruption issue in Qualcomm chipset software tied to parsing the ADSP response command. Affected component family: Qualcomm/Audio within Snapdragon firmware; root cause is a parsing error leading to memory corruption. CVSS v3.1 indicates a HIGH severity with LOCAL atta...

CVE-2023-33094

CVE-2023-33094 is a memory corruption issue occurring during VK synchronization with KASAN enabled in Qualcomm-related components (Display). The NVD entry lists a local attack vector with low privileges required and no user interaction, with a high impact on confidentiality, integrity, and availa...

CVE-2024-23368

CVE-2024-23368 is a memory corruption issue in Qualcomm’s embedded platform concerning the SMEM Partition Handler. The vulnerability arises when allocating and accessing an entry in an SMEM partition, effectively a classic buffer copy without proper input size checking, which can lead to memory c...

CVE-2023-33117

CVE-2023-33117 describes a memory corruption vulnerability in Qualcomm chipsets where the host (HLOS) allocates the response payload buffer to copy data received from the ADSP in response to the AVCS_LOAD_MODULE command. The CVE is documented with a Qualcomm security context and a high-severity C...

CVE-2023-33113

CVE-2023-33113 affects Qualcomm kernel, where memory corruption occurs when the resource manager replies to the host kernel with multiple fragments. Public descriptions identify a classic buffer overflow style issue in the kernel component, with CVSS indicating local, low-privilege access and hig...

CVE-2024-38415

CVE-2024-38415 corresponds to memory corruption during handling of firmware session errors in Qualcomm components (notably Qualcomm/Qualcomm Snapdragon Auto context appears in some feeds). The CVSS v3.1 metrics indicate a HIGH base score (7.8) with LOCAL attack vector, LOW privileges required, no...

CVE-2026-24089

CVE-2026-24089 describes memory corruption that occurs when processing fastboot commands with invalid input. The NVD entry lists a CVSS v3.1 base score of 7.2 (HIGH) with physical attack vector, low attack complexity, no user interaction, requiring high privileges, and a changed scope. The impact...

CVE-2024-33011

CVE-2024-33011 is described as a transient Denial-of-Service condition in the WLAN Host module (Qualcomm) when parsing the MBSSID Information Element (IE) from beacon frames with a zero-length MBSSID IE. Public sources in the provided documents identify the issue as related to Qualcomm WLAN, with...

CVE-2023-43514

CVE-2023-43514 describes a memory corruption issue in Qualcomm DSP firmware related to IOCTL handling for internal memory map/unmap. Reports consistently identify the root cause as memory corruption arising from operations on internal memory (memory after it has been freed) during fastrpc interna...

CVE-2024-33016

CVE-2024-33016 pertains to Siemens SCALANCE W700, where the vulnerability is described as memory corruption that occurs when an invalid firehose patch command is invoked. The Tenable Nessus plugin explicitly identifies this CVE in the context of Siemens SCALANCE W700 and notes the affected asset ...

CVE-2025-21430

CVE-2025-21430 is a Qualcomm WLAN (WLAN Host) vulnerability described as a transient Denial of Service during STA-to-AP connection and ADD TS request to establish a TSpec session. The CVSS 3.1 base score is 7.5 (Network, Low attack complexity, No privileges, No user interaction, Availability impa...

CVE-2024-38422

CVE-2024-38422 describes a memory corruption vulnerability in Qualcomm components related to audio processing, triggered when handling voice packets with arbitrary data received from the ADSP. The issue is evidenced in the CVE listing with a high impact (confidentiality, integrity, and availabili...

CVE-2023-33082

CVE-2023-33082 describes memory corruption when a WLAN Assoc Request includes a BTM Query or BTM Response that contains an MBO IE, affecting Qualcomm chipsets per multiple sources. The CVSS v3.1 base score is 9.8 (CRITICAL), with network attack vector, no user interaction, and high impact to conf...

CVE-2024-33015

CVE-2024-33015 describes a transient DoS in the WLAN host stack during parsing of a SCAN RNR Information Element. Root cause: when bytes from the AP cause the size of the last IE parameter to be smaller than the neighboring report, a DoS can occur. Documented references indicate this affects Qual...

CVE-2023-33072

CVE-2023-33072 is a memory corruption issue affecting Core when processing control functions, with concrete mappings in connected records to Qualcomm closed‑source components and related “Core” memory‑corruption vectors. Public references describe the issue as memory corruption in Core and, in so...

CVE-2024-23384

CVE-2024-23384 corresponds to memory corruption in the graphics stack where mapped pages in VBO are not unmapped after reclaim by the shrinker. Documented across multiple sources (NVD/Red Hat/NCSC/CVE lists) as a Qualcomm graphics Linux issue affecting display-related components; CVSS v3.1 shows ...

CVE-2024-38423

CVE-2024-38423 = memory corruption while processing GPU page table switch in Qualcomm GPU/display stack. Exploitation would be local with low complexity and could impact confidentiality, integrity, and availability (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected sources indicate Qualco...

CVE-2024-33028

CVE-2024-33028 is described as a memory corruption (use-after-free–like) issue where a fence object may be accessed during timeline destruction after an isync fence is released. Multiple connected sources reference the same description (NVD, Red Hat, Vuln enrichment) and associate it with Qualcom...

CVE-2023-28539

CVE-2023-28539 is a memory corruption in the WLAN Host when the firmware invokes multiple WMI Service Available commands. Documented across multiple sources (NVD/NVD.org, Red Hat, Qualcomm bulletins, and Android Pixel security bulletin) as a WLAN/firmware issue impacting Qualcomm components. The ...

CVE-2024-33012

CVE-2024-33012 describes a transient Denial of Service affecting Qualcomm WLAN Host code, triggered while parsing multiple MBSSID IEs in beacon frames when a tag length is non-zero and the beacon ends. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 7.5 (HIGH) wi...

CVE-2024-33025

CVE-2024-33025 is a Transient Denial of Service in the WLAN Host path affecting Qualcomm WLAN components, triggered while parsing the BSS parameter change count or MLD capabilities fields within the ML Information Element. The NVD entry notes a Network attack vector with CVSS v3.1 base score 7.5 ...

CVE-2024-33013

CVE-2024-33013 describes a transient denial-of-service affecting Qualcomm WLAN-related components. Public records here indicate the vulnerability occurs when a driver accesses ML IE memory and the offset is incremented beyond the ML IE length, potentially causing a DoS condition. Affected items i...

CVE-2024-33034

CVE-2024-33034 concerns a memory corruption issue in the Graphics Linux stack where VBOs may hold outdated or invalid GPU SMMU mappings. The root cause occurs when binding and reclaiming memory buffers happen concurrently, which can lead to memory corruption with High impact on confidentiality, i...

CVE-2023-43536

Technical details for CVE-2023-43536 are not publicly provided in the supplied documents. No confirmed affected products, versions, or fixes are disclosed here; monitor official advisories for updates.

CVE-2024-23382

CVE-2024-23382 is described as memory corruption while processing a graphics kernel driver request to create a DMA fence. The CVE appears in NVD and CVE lists with a high impact, and Red Hat also references memory corruption for this issue. Qualcomm components are listed in the 2024-08-05 Android...

CVE-2024-33026

CVE-2024-33026 is a WLAN/Qualcomm-related issue described as a transient DoS when parsing probe and association response frames, triggered when the received frame length is less than the maximum size of the timestamp. The CVE entry lists a base score of 7.5 (Network attack, Low complexity, No use...

CVE-2024-33020

CVE-2024-33020 is described as a Transient DoS during processing of TID-to-link mapping IE elements in WLAN-related code. Connected sources indicate this vulnerability is associated with Qualcomm WLAN components (WLAN subsystem) and has been cataloged under multiple CVE registries; one enrichment...

CVE-2024-33023

The CVE-2024-33023 entry describes a memory corruption issue occurring when creating a fence to wait on timeline events while simultaneously signaling those events in the Graphics/Linux stack. Public references consistently frame this as a graphics-related vulnerability affecting Qualcomm compone...

CVE-2023-28556

Technical details for CVE-2023-28556 are not publicly provided in the supplied documents. No concrete affected products, versions, root cause or fixes are disclosed here. Monitor for updates from vendors and security bulletins.

CVE-2024-33014

CVE-2024-33014 affects Qualcomm WLAN components; description: Transient Denial of Service occurs while parsing ESP Information Elements from beacon/probe response frames. CVSS v3.1 base score 7.5 (Network, Low complexity, No privileges, User interaction none; AvailabilityImpact: High). Connected ...

CVE-2023-43511

CVE-2023-43511 describes a transient DoS in WLAN firmware when parsing an IPv6 extension header for a packet whose next header is IPPROTO_NONE. The issue is reported across multiple sources (Qualcomm advisory context, Red Hat, NVD) and is associated with Qualcomm/WLAN firmware components; the vul...

CVE-2024-33024

CVE-2024-33024 affects Qualcomm WLAN/ML IE parsing. A beacon’s ML Information Element length field can exceed the ML IE length, triggering a transient Denial of Service during parsing. Documented impact is a DoS with CVSSv3.1 base score 7.5 (High). Exploitation is network-based but details on aff...

CVE-2023-21673

CVE-2023-21673 is documented across multiple feeds as an issue with Qualcomm components, described as improper access to the VM resource manager that can lead to memory corruption. The linked sources (NVD/Red Hat/PRION/VulnEnrichment) frame the vulnerability as affecting Qualcomm kernel-related c...

CVE-2023-33027

CVE-2023-33027 denotes a transient Denial of Service in WLAN firmware when parsing RSN IEs. Affected are Qualcomm WLAN components and related closed-source firmware; the NVD entry lists Network attack vector, no user interaction, low attack complexity, but availability impact is high (CVE-2023-33...

CVE-2025-59609

The CVE-2025-59609 issue is a disclosure vulnerability affecting how advertisement frames are processed when MBSSID elements are malformed or too short. The root cause is in the processing path that handles MBSSID elements, which may allow information exposure. The CVSS 3.1 vector indicates netwo...

CVE-2023-33085

CVE-2023-33085 is a memory corruption vulnerability described as a Buffer Copy Without Checking Size of Input in Wearables, linked to processing data from AON. The available documents indicate this affects wearable/Qualcomm components and is categorized with high severity (CVSS 3.1: HIGH, LOCAL e...