CVE-2025-21424

CVE-2025-21424 affects Qualcomm MSM NPU kernel driver. Root cause: memory corruption due to concurrent calls to NPU driver APIs (race condition between NPU host unload and exec paths cited by PacketStorm). Impact described as memory corruption with local access and high confidentiality/integrity/...

CVE-2023-33021

CVE-2023-33021 describes a memory corruption (use-after-free) in the Graphics path when processing user packets for command submission, affecting Qualcomm Snapdragon graphics components. Impact is high for confidentiality, integrity, and availability per the NVD metrics. Connected sources corrobo...

CVE-2023-22387

CVE-2023-22387 describes an arbitrary memory overwrite when a VM is compromised during a TX write, causing memory corruption. The most concrete details in the connected docs are: (1) it is listed under Qualcomm components, specifically in the Qualcomm kernel area, with a high impact and Local att...

CVE-2023-24851

CVE-2023-24851 is a memory corruption vulnerability in the WLAN HOST component when parsing a QMI response from firmware. It is listed for Qualcomm WLAN and appears in Qualcomm’s July 2023 bulletin; CVSS v3.1 base score 7.8 (LOCAL, LOW attack complexity, HIGH impact on confidentiality, integrity,...

CVE-2024-53027

CVE-2024-53027 is a transient DoS vulnerability triggered while processing a malformed Country Information Element in Qualcomm WLAN firmware and Bluetooth stacks. Exploitation requires proximity (remote over Wi‑Fi/Bluetooth) and can crash the chipset firmware, potentially disrupting connectivity ...

CVE-2023-28542

CVE-2023-28542 is a memory corruption issue tied to WLAN HOST when fetching TX status information. Affected component: Qualcomm WLAN-related code (WLAN HOST), with root cause described as memory corruption. Impact per sources: high (CVSSv3.1 base 7.8), local exploit Vector with low attack complex...

CVE-2024-33042

CVE-2024-33042 describes a memory corruption in Qualcomm WLAN-related components when the Alternative Frequency offset is set to 255. Connected sources identify the issue as affecting Qualcomm chipsets (WLAN subcomponent) and classify it as a high-severity, local EoP-style vulnerability with pote...

CVE-2023-22386

CVE-2023-22386 is a memory-corruption vulnerability in Qualcomm WLAN components. The issue occurs when processing WLAN firmware memory allocation requests, affecting Qualcomm WLAN subsystems embedded in devices running Android. The CVE is listed in Qualcomm’s July 2023 bulletin and tied to a High...

CVE-2023-24854

CVE-2023-24854 describes a memory corruption in the WLAN HOST component when parsing a QMI WLAN firmware response message. The entry is tied to Qualcomm WLAN, with CVSS v3.1: Local attack vector, low privileges required, no user interaction, and impacts to confidentiality, integrity, and availabi...

CVE-2023-28541

CVE-2023-28541 affects Qualcomm Data Modem (WLAN), with memory corruption during DMA buffer release involving CFR data. CVSSv3.1 base score 7.8 (HIGH) via NVD/Qualcomm metrics; impact includes confidentiality, integrity, and availability. Connected sources confirm the issue under Qualcomm compone...

CVE-2024-53014

CVE-2024-53014 = memory corruption in Qualcomm’s Audio driver during validation of ports/channels. Root cause: improper input validation within the audio component (port/channel validation). Impact is high (CVE described as local, with high confidentiality, integrity, and availability impact; att...

CVE-2023-21631

CVE-2023-21631 describes a weakness in Qualcomm modem firmware due to improper input validation when processing LTE security mode command messages from the network. The vulnerability affects the modem component and can lead to high-impact outcomes (as reflected in CVSS: high/critical with Confide...

CVE-2023-21629

CVE-2023-21629 refers to memory corruption in Qualcomm closed‑source modem components caused by a double free while parsing PKCS15 SIM files. The CVSSv3.1 base metrics (6.8, MEDIUM) from NVD indicate physical access is required with low attack complexity and no privileges, but high impact to conf...

CVE-2023-28565

CVE-2023-28565 affects Qualcomm WLAN HAL (Qualcomm chipsets) through WMI command streams. Root cause according to enrichment: improper validation of an array index leading to memory corruption in WLAN HAL. The issue is described in multiple sources (e.g., Qualcomm/Red Hat advisories; vuln enrichm...

CVE-2023-22667

CVE-2023-22667 is a memory corruption issue in Qualcomm closed-source audio components triggered during ion buffer allocation while playing music. Multiple sources (NVD, Red Hat advisory, and other feeds) describe the vulnerability with high impact (confidentiality, integrity, and availability af...

CVE-2023-28564

CVE-2023-28564 is a memory-corruption vulnerability in the WLAN HAL when passing command parameters through WMI interfaces. Documented as high-severity (CVSS v3.1: 7.8; LOCAL, LOW privileges required, no user interaction) with potential impact on confidentiality, integrity, and availability. Publ...

CVE-2023-28567

CVE-2023-28567 corresponds to a memory corruption issue in the WLAN HAL when handling commands via WMI interfaces. Affected software is Qualcomm WLAN/closed‑source components; CVSSv3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges, and no user interaction. The connected records c...

CVE-2024-33051

CVE-2024-33051 is a WLAN firmware issue (Qualcomm) causing a transient Denial of Service when processing TIM Information Elements from beacon frames due to a missing length check. The CVE entries (NVD, Red Hat, CVE List, CNVD-style feeds) consistently describe a buffer over-read/length-check omis...