CVE-2025-21479

CVE-2025-21479 is a memory corruption vulnerability in Qualcomm Adreno GPU drivers caused by unauthorized command execution in a GPU micronode during a specific command sequence. Public details indicate it affects Adreno A7xx devices (e.g., Snapdragon 8 Gen 1+ era) and can enable kernel memory re...

CVE-2025-27038

CVE-2025-27038 affects Qualcomm FastConnect 7800 devices. The Nessus entry and CVE records describe memory corruption due to a use-after-free in the Adreno GPU driver when rendering graphics in Chrome, tied to Qualcomm GPU components. The issue is reported under Qualcomm/display and is listed alo...

CVE-2025-21480

CVE-2025-21480 is reported as a memory corruption due to unauthorized command execution in the GPU micronode while executing a specific sequence of commands, affecting Qualcomm chipsets (notably Qualcomm FastConnect 7800 and other chipsets). The connected documents confirm this CVE is categorized...

CVE-2024-45569

CVE-2024-45569 describes memory corruption when parsing the ML IE caused by invalid frame content in Qualcomm chipsets (Qualcomm Snapdragon Auto related). Connected sources corroborate a memory corruption condition with potential remote impact stemming from malformed ML Information Elements. Conc...

CVE-2025-21424

CVE-2025-21424 affects Qualcomm MSM NPU kernel driver. Root cause: memory corruption due to concurrent calls to NPU driver APIs (race condition between NPU host unload and exec paths cited by PacketStorm). Impact described as memory corruption with local access and high confidentiality/integrity/...

CVE-2024-53027

CVE-2024-53027 is a transient DoS vulnerability triggered while processing a malformed Country Information Element in Qualcomm WLAN firmware and Bluetooth stacks. Exploitation requires proximity (remote over Wi‑Fi/Bluetooth) and can crash the chipset firmware, potentially disrupting connectivity ...

CVE-2025-21459

CVE-2025-21459 affects Qualcomm WLAN components on Qualcomm-based devices. The issue is described as a transient denial-of-service that occurs while parsing per-STA (station) configuration/profile data in the ML IE/WLAN stack. Root cause details are not provided in the supplied documents beyond t...

CVE-2025-21468

CVE-2025-21468 describes a memory corruption in Qualcomm chipset drivers when reading a response from firmware if the firmware changes the buffer size while the driver uses that size to append a null terminator. This is a local vulnerability with a CVSS 3.1 base score of 7.8 (High) and impact on ...

CVE-2024-45582

CVE-2024-45582 affects Qualcomm camera kernel: memory corruption during validation of the number of devices in the camera core. Root cause described as an input/array validation issue leading to memory corruption. CVSS metrics indicate local access, low attack complexity with low privileges, and ...

CVE-2024-45558

The CVE-2024-45558 entry describes a Transient Denial of Service in Qualcomm WLAN components. The vulnerability arises when the driver parses the per-STA profile Information Element and accesses the EXTN element ID without validating the IE length, enabling a DoS condition. Sources across multipl...

CVE-2025-21453

CVE-2025-21453 describes memory corruption in Qualcomm components due to a use-after-free style issue when an iterator is accessed after removal, with the GPS HLOS driver specifically listed in CVE records. Public records (NVD/NCSC/Red Hat CVEs) corroborate the memory-corruption description and t...

CVE-2024-45571

CVE-2024-45571 affects Qualcomm WLAN components. The issue is memory corruption that occurs when stopping the WLAN interface after processing a WMI command, enabling local attacker with low privileges and no user interaction to impact confidentiality, integrity, and availability (all High). No pu...

CVE-2024-49833

CVE-2024-49833 is a memory corruption vulnerability in the camera triggered by an invalid CID, reported across Qualcomm components and Android security bulletins. Affected area is the camera stack from Qualcomm—details cite memory corruption as the underlying flaw with high impact (C:H, I:H, A:H)...

CVE-2024-49834

CVE-2024-49834 describes memory corruption during the power-up/power-down sequence of the camera sensor in Qualcomm-based devices. The entry indicates a LOCAL attack vector, LOW privileges required, and no user interaction, with HIGH impact on confidentiality, integrity, and availability per the ...

CVE-2024-49838

CVE-2024-49838 is an information disclosure vulnerability in Qualcomm WLAN components (Qualcomm closed- and open-source areas) caused by parsing an OCI IE with invalid length. Connected sources indicate this CVE is tracked in Qualcomm security advisories and appears in the Android March 2025 bull...

CVE-2024-49843

CVE-2024-49843 corresponds to memory corruption during processing of an IOCTL from user space to handle a GPU AHB bus error on Qualcomm chipsets. The issue affects memory handling in the IOCTL path and is exploitable with local access (CVSSv3.1: Local access, Low privileges, no user interaction) ...

CVE-2025-21483

CVE-2025-21483 affects Qualcomm Snapdragon embedded platform firmware in the Data Network Stack & Connectivity component. It stems from a buffer overflow during RTP packet reassembly of NAL units, leading to memory corruption in the UE. The CVSS 3.1/3.1 vector is Network, Privileges=None, User in...

CVE-2024-49839

CVE-2024-49839 - Summary (mode C) Root cause: Memory corruption during management frame processing caused by a mismatch in the T2LM information element, affecting Qualcomm WLAN/capability elements. What is affected: Qualcomm chipsets with WLAN functionality that process management frames incorpor...

CVE-2024-53024

CVE-2024-53024: Memory corruption in the Qualcomm display driver when detaching a device. Affected: Qualcomm display driver (closed-source component) with local attack vector and high impact on confidentiality, integrity, and availability (per CVSS v3.1). Root cause: memory corruption in the disp...

CVE-2024-53014

CVE-2024-53014 = memory corruption in Qualcomm’s Audio driver during validation of ports/channels. Root cause: improper input validation within the audio component (port/channel validation). Impact is high (CVE described as local, with high confidentiality, integrity, and availability impact; att...

CVE-2025-21434

CVE-2025-21434 affects Qualcomm WLAN on Snapdragon platforms. The issue is a transient Denial of Service that can occur while parsing EHT operation IE or EHT capability IE, as described in Qualcomm’s security references (QC-CR#3918068) and linked CVE listings. Connected sources indicate a DoS imp...

CVE-2024-45553

CVE-2024-45553 describes a memory corruption vulnerability in Qualcomm components where process-specific maps are added to a global list. The issue can manifest if a map is removed from the global list while another thread is using it for a process-specific task. The canonical description across ...

CVE-2024-49848

CVE-2024-49848 concerns memory corruption in Qualcomm ADSPRPC FP/DSP interaction (the adsprpc kernel driver) via fastrpc_mmap structures. The provided sources describe a use-after-free vulnerability in FASTRPC_ATTR_KEEP_MAP handling that can allow a freed fastrpc_mmap object to be referenced by a...

CVE-2024-53015

CVE-2024-53015 describes a memory corruption issue in Qualcomm chipsets triggered when processing IOCTL commands to handle buffers for a session. The vulnerability affects IOCTL buffer handling code and is evidenced by multiple feeds (NVD and Red Hat advisories) reporting memory corruption withou...

CVE-2024-49835

CVE-2024-49835 is described as memory corruption while reading a secure file in Qualcomm closed‑source components. The CVSS v3.1 vector indicates a local, low‑privilege, low‑complexity attacker could trigger a high‑impact issue (C: High; I: High; A: High) with no user interaction. Several connect...

CVE-2024-53011

CVE-2024-53011 is a permissions/Access-Controls information-disclosure issue affecting the Video Analytics engine. The CVSS 3.1 vector (AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) yields a base score of 7.9 (High) with LOCAL attack vector and HIGH privileges required, implying local access is needed and...

CVE-2024-53026

CVE-2024-53026 describes an information-disclosure vulnerability triggered by receiving an invalid RTCP packet during a VoLTE/VoWiFi IMS call. Connected sources associate this with Qualcomm chipsets and note public advisories/patches refer to this issue; however, concrete technical details about ...

CVE-2024-49844

The CVE-2024-49844 entry concerns memory corruption when triggering commands in the PlayReady Trusted application on Qualcomm chipsets. Affected component: PlayReady Trusted application (memory handling during command processing). Reported impact per sources: memory corruption with potential for ...

CVE-2024-38426

CVE-2024-38426 involves Qualcomm chipsets with a vulnerability in the UE authentication processing that can lead to information disclosure. The issue is described as improper authentication during the authentication message handling, affecting Qualcomm modem/closed-source components and potential...

CVE-2024-49845

CVE-2024-49845 is described as memory corruption during the FRS UDS generation process in Qualcomm chipsets (HLOS/Qualcomm components context). The issue is concrete in multiple sources (CVE records, vendor records and third‑party enrichments) and is classified with a high impact score in CVSS v3...

CVE-2024-53021

CVE-2024-53021 is a Qualcomm chipset vulnerability described in connected PT-2025-23579 and PT-2025-23577 as an information-disclosure issue that occurs while processing goodbye RTCP/RTP packets. The root cause is a buffer over-read in the data network stack during decoding/construction of RTCP h...

CVE-2025-27029

CVE-2025-27029 affects Qualcomm WLAN HAL (closed-source Qualcomm components). The issue is a transient Denial of Service caused by processing a tone measurement response buffer that is out of range. Metrics indicate network attack vector, low complexity, no privileges required, no user interactio...

CVE-2025-47319

CVE-2025-47319 describes information disclosure in Qualcomm embedded platform firmware caused by exposing internal TA-to-TA (Trusted Application to Trusted Application) communication APIs to HLOS (Host Linux Operating System). The CVE indicates a LOCAL attack vector with HIGH privileges required ...

CVE-2024-45584

CVE-2024-45584 involves memory corruption in Qualcomm chipsets caused by a sequence: a compat IOCTL call followed by a normal IOCTL call from userspace. The vulnerability arises from the call order, potentially allowing memory corruption with local access. Public descriptions consistently state t...

CVE-2024-53019

CVE-2024-53019 is a buffer over-read in Qualcomm closed-source components of the Data Network Stack during RTP packet processing. The root cause is an improper RTP header length handling for the number of contributing sources, leading to information disclosure. The CVSSv3.1 base score is 8.2 (Hig...

CVE-2024-53020

CVE-2024-53020 is reported as information disclosure that may occur when decoding RTP packets with an invalid header extension, linked to Qualcomm chipsets’ data/network stack. Connected sources describe a buffer over-read and information disclosure risk in the affected component but do not provi...

CVE-2025-21448

CVE-2025-21448 involves a transient Denial of Service in Qualcomm WLAN firmware when parsing SSIDs in action frames. Affected component: WLAN firmware; root cause: parsing SSIDs in action frames leading to DoS. Impact: availability loss (CVSSv3.1 base score 7.5, Network attack, no user interactio...

CVE-2024-43046

CVE-2024-43046 describes an information disclosure vulnerability affecting TZ Secure OS on Qualcomm chipsets, triggered by memory re-allocation where sensitive memory content may be exposed. The CVE notes a memory re-allocation issue but the provided documents do not specify affected product vers...

CVE-2025-21464

CVE-2025-21464 is documented in multiple sources as an information-disclosure (out-of-bounds read) issue affecting Qualcomm closed-source components, with the core vulnerability described as an information disclosure when reading data from an image using a specified offset and size. The CVE is li...

CVE-2024-43051

The CVE-2024-43051 entry describes an Information disclosure during session key derivation for Widevine use. Connected sources confirm this affects Qualcomm closed‑source components (CVE-2024-43051) and that the issue is listed in Android security bulletins with patch levels addressing these vuln...

CVE-2024-33058

CVE-2024-33058 concerns memory corruption that occurs when allocating memory from source DDR memory (HLOS) to the ADSP in Qualcomm closed‑source components. The CVSS 3.1 metrics show a Local attack vector, High impact on confidentiality, integrity, and availability, with a High base score (7.5) a...

CVE-2024-43056

CVE-2024-43056 describes a transient denial-of-service during hypervisor virtual I/O operations in Qualcomm chipset environments. The linked CVE listings emphasize that the issue manifests as a DOS in a virtual machine due to a hypervisor I/O path condition (buffer over-read is noted in CVE listi...

CVE-2024-45551

CVE-2024-45551 targets Qualcomm closed‑source components (Gatekeeper) and describes a cryptographic issue during PIN/password verification. The vulnerability arises when RPMB writes can be dropped on verification failure, potentially enabling a user throttling bypass. The available sources confir...

CVE-2025-21463

CVE-2025-21463 affects Qualcomm Snapdragon WLAN hosts, with a buffer over-read causing a transient Denial of Service during processing of the EHT operation IE in received beacon frames. The vulnerability originates in WLAN host communication, leading to a DoS condition (availability impact) with ...

CVE-2025-47333

CVE-2025-47333 affects Qualcomm chipsets' cryptographic driver, with memory corruption occurring while handling buffer mapping operations. The root cause is a flaw in how the driver manages memory during mapBuffer processing, which may lead to crashes or unpredictable behavior. Exploitation detai...

CVE-2024-45549

CVE-2024-45549 is a Qualcomm-related vulnerability described as information disclosure occurring when creating MQ channels. The entry is classified as High severity (CVSS 3.1 base 7.7: Local attack, no privileges required, low attack complexity, confidentiality impact High). It is associated with...

CVE-2025-27061

CVE-2025-27061 is a Qualcomm vulnerability in the Video subsystem: memory corruption/out-of-bounds write while parsing video packets from the video firmware during subsystem-failure memory handling. Affected: Qualcomm Video (closed- or firmware components) within the device’s video pipeline. Impa...

CVE-2025-47345

Technical details (affected products, versions, root cause, fixes) are not publicly provided in the connected documents. Monitor for updates from Qualcomm and related security bulletins.

CVE-2025-21446

CVE-2025-21446 affects Qualcomm chipsets where WLAN frame processing for BTM requests can trigger a transient Denial-of-Service when parsing vendor-specific information elements. The root cause is improper handling of vendor IEs in the WLAN firmware during BTM parsing, leading to resource exhaust...

CVE-2025-27042

CVE-2025-27042 is a memory corruption vulnerability in Qualcomm video handling. The affected area is the Qualcomm video pipeline when processing video packets from the video firmware, with a root cause described as memory corruption. CVSS 3.1 base score 7.8 (HIGH) indicates local attack vector, l...