CVE-2024-43047

CVE-2024-43047 is a memory corruption (use-after-free) issue in Qualcomm DSP driver ADSPRPC that handles DMA-mapped memory between the host OS and DSP. Public reports describe multiple kernel panics and memory-safety failures tied to fastrpc_mmap and related structures (fastrpc_mmap, fastrpc_file...

CVE-2024-21468

CVE-2024-21468 corresponds to a memory corruption issue that occurs when a GPU unmap operation fails, described across multiple sources as a memory corruption/Use-After-Free condition in Qualcomm kernel components. Affected: Qualcomm chipset GPUs and related kernel code paths. Root cause: failed ...

CVE-2025-21467

CVE-2025-21467 describes memory corruption that occurs when reading the firmware (FW) response from the shared queue in Qualcomm chipsets. The issue affects Qualcomm mobile firmware components (notably in camera-related workflows per CVE listings) and is caused by improper handling of the FW resp...

CVE-2024-33060

CVE-2024-33060 is a use-after-free race in Qualcomm’s DSP/adsprpc driver (fastrpc_mmap) that can occur when global and local mappings are concurrently created and freed. The vulnerability centers on fastrpc_mmap_create, fastrpc_mmap_add, and related epilogue paths (mem_map_to_dsp, munmap/mmap_fre...

CVE-2025-21453

CVE-2025-21453 describes memory corruption in Qualcomm components due to a use-after-free style issue when an iterator is accessed after removal, with the GPS HLOS driver specifically listed in CVE records. Public records (NVD/NCSC/Red Hat CVEs) corroborate the memory-corruption description and t...

CVE-2024-21475

CVE-2024-21475 affects Qualcomm chipsets; memory corruption occurs when the firmware payload length does not match the expected protocol size, due to improper handling of payload length. Impact is high (C/H/I/A) with a local attack vector, low privileges required, and no user interaction. Remedia...

CVE-2024-21471

CVE-2024-21471 concerns memory corruption that occurs when an IOMMU fails to unmap a GPU buffer in Linux. Multiple connected sources corroborate a memory corruption condition tied to IOMMU unmapping of GPU buffers, affecting Qualcomm-related components (as referenced in Qualcomm security discussi...

CVE-2024-33052

CVE-2024-33052 describes a memory corruption in the FM Host/HCI control path when data is provided for FM HCI commands. The vulnerability is tied to Qualcomm chipsets and is classified as local with low privileges and no user interaction, and the impact is rated high (confidentiality, integrity, ...

CVE-2023-33023

CVE-2023-33023 corresponds to a memory corruption issue in Qualcomm closed‑source components related to the finish_sign command when passing an rsp buffer. The vulnerability is described as a local issue with high impact (C/H/I/A), requiring no user interaction and no privileges, per CVSS data. C...

CVE-2023-43528

CVE-2023-43528 concerns Qualcomm chipsets’ Audio components. Information disclosure occurs when the ADSP payload size returned to HLOS in response to an Audio Stream Manager matrix session is smaller than expected, caused by a mismatch in the ADSP payload size. The vulnerability impacts confident...

CVE-2023-33066

CVE-2023-33066 describes a memory corruption in the Audio component of Qualcomm’s closed‑source stack, triggered while processing the RT proxy port register driver. The issue is linked to an out-of-range pointer offset in Audio (per VulnEnrichment), with Qualcomm’s March 2024 product-security bul...

CVE-2023-28578

CVE-2023-28578 involves memory corruption in Core Services during the removal of a single event listener. Connected sources reference Siemens SCALANCE W700 through the Nessus plugin stating this CVE maps to that product and describing the memory corruption in Core Services when removing an event ...

CVE-2023-43551

The CVE-2023-43551 entry is confirmed in connected sources as a cryptographic/authentication issue occurring during LTE attach, where a rogue base station can skip the authentication phase and immediately issue the Security Mode Command. The vulnerability is attributed to Qualcomm closed‑source c...

CVE-2023-28547

CVE-2023-28547 is a memory corruption issue in the SPS Application when requesting a public key in the sorter Trust Agent (TA), affecting Qualcomm components (including closed-source parts). Root cause described as memory corruption in SPS Application; exposed impact on confidentiality, integrity...

CVE-2023-43548

CVE-2023-43548 describes memory corruption when parsing a qcp clip with an invalid chunk data size, affecting Qualcomm chipset components (notably Qualcomm closed-source components) per the CVE entry. The NVD notes a high-severity impact with a CVSSv3.1 base score of 9.8 (Network, High confidenti...

CVE-2023-43545

CVE-2023-43545 corresponds to a memory corruption issue in WLAN host code triggered when the user space sends an excessive number of scan frequency entries or channels. Multiple connected documents identify this as a WLAN-related vulnerability (Qualcomm components table shows CVE-2023-43545 under...

CVE-2023-43527

CVE-2023-43527 is an information-disclosure issue arising from parsing the dts header atom in Video. The vulnerability affects Qualcomm-related components (including closed-source parts) and is referenced across multiple sources (Red Hat, NVD, CVE lists, and Pixel advisories) without explicit exp...

CVE-2025-27042

CVE-2025-27042 is a memory corruption vulnerability in Qualcomm video handling. The affected area is the Qualcomm video pipeline when processing video packets from the video firmware, with a root cause described as memory corruption. CVSS 3.1 base score 7.8 (HIGH) indicates local attack vector, l...

CVE-2025-27061

CVE-2025-27061 is a Qualcomm vulnerability in the Video subsystem: memory corruption/out-of-bounds write while parsing video packets from the video firmware during subsystem-failure memory handling. Affected: Qualcomm Video (closed- or firmware components) within the device’s video pipeline. Impa...

CVE-2025-27043

CVE-2025-27043 : The vulnerability is a memory corruption issue in Qualcomm video firmware caused by processing a manipulated payload in the video subsystem. The CVSS 3.1 base metrics indicate an overall HIGH impact (Confidentiality, Integrity, Availability = High) with Local attack vector, Low a...

CVE-2025-21427

CVE-2025-21427 is a Qualcomm closed‑source component vulnerability involving information disclosure during RTP payload decoding when a user equipment receives an RTP packet from the network. The root cause is described as a buffer over-read in the RTP payload decoding path, leading to potential l...

CVE-2025-21449

CVE-2025-21449 describes a transient Denial of Service in Qualcomm WLAN Embedded software triggered by processing a malformed length field in SSID Information Elements. The CVE is listed as High severity (base score 7.5) with network attack vector and no user interaction required; exploitation st...

CVE-2025-21454

CVE-2025-21454 affects Qualcomm closed‑source WLAN Embedded software. Description: transient Denial-of-Service while processing received beacon frames, attributed to a buffer over-read in WLAN SW. CVSSv3.1: Network attack, Low complexity, No privileges, No user interaction; Availability impact HI...

CVE-2025-47398

CVE-2025-47398 involves memory corruption due to improper handling of memory pointers during deallocation of GPU memory buffers. Red Hat and CVE aggregations label it as a Use After Free issue in graphics memory, implying a vulnerability in the graphics subsystem where freed memory is mishandled,...

CVE-2025-47404

CVE-2025-47404 describes memory corruption that occurs when dynamically changing the size of a previously allocated buffer while its contents are being modified. The NVD entry lists a Local attack vector with Low exploit complexity and Low privileges, resulting in High impact to confidentiality, ...