CVE-2024-21468

CVE-2024-21468 corresponds to a memory corruption issue that occurs when a GPU unmap operation fails, described across multiple sources as a memory corruption/Use-After-Free condition in Qualcomm kernel components. Affected: Qualcomm chipset GPUs and related kernel code paths. Root cause: failed ...

CVE-2023-28578

CVE-2023-28578 involves memory corruption in Core Services during the removal of a single event listener. Connected sources reference Siemens SCALANCE W700 through the Nessus plugin stating this CVE maps to that product and describing the memory corruption in Core Services when removing an event ...

CVE-2023-33023

CVE-2023-33023 corresponds to a memory corruption issue in Qualcomm closed‑source components related to the finish_sign command when passing an rsp buffer. The vulnerability is described as a local issue with high impact (C/H/I/A), requiring no user interaction and no privileges, per CVSS data. C...

CVE-2023-33066

CVE-2023-33066 describes a memory corruption in the Audio component of Qualcomm’s closed‑source stack, triggered while processing the RT proxy port register driver. The issue is linked to an out-of-range pointer offset in Audio (per VulnEnrichment), with Qualcomm’s March 2024 product-security bul...

CVE-2023-43551

The CVE-2023-43551 entry is confirmed in connected sources as a cryptographic/authentication issue occurring during LTE attach, where a rogue base station can skip the authentication phase and immediately issue the Security Mode Command. The vulnerability is attributed to Qualcomm closed‑source c...

CVE-2023-43548

CVE-2023-43548 describes memory corruption when parsing a qcp clip with an invalid chunk data size, affecting Qualcomm chipset components (notably Qualcomm closed-source components) per the CVE entry. The NVD notes a high-severity impact with a CVSSv3.1 base score of 9.8 (Network, High confidenti...

CVE-2023-28547

CVE-2023-28547 is a memory corruption issue in the SPS Application when requesting a public key in the sorter Trust Agent (TA), affecting Qualcomm components (including closed-source parts). Root cause described as memory corruption in SPS Application; exposed impact on confidentiality, integrity...

CVE-2023-33086

CVE-2023-33086 affects Qualcomm closed‑source components. The issue is a transient Denial of Service when processing multiple IKEV2 Informational Requests from an IPsec server with different identifiers, leading to high impact on availability. CVSS 3.1 base score 7.5 (Network, Low attack complexi...

CVE-2024-49835

CVE-2024-49835 is described as memory corruption while reading a secure file in Qualcomm closed‑source components. The CVSS v3.1 vector indicates a local, low‑privilege, low‑complexity attacker could trigger a high‑impact issue (C: High; I: High; A: High) with no user interaction. Several connect...

CVE-2023-43542

CVE-2023-43542 describes a memory corruption in the Trusted Execution Environment from copying a keyblob’s material when the key material size isn’t properly checked. Documented details indicate a high-severity impact (C/H/I/H/A/H) with local attacker access and no user interaction required, per ...

CVE-2023-43529

CVE-2023-43529 describes a transient denial-of-service in Qualcomm Snapdragon/closed-source components caused by processing IKEv2 Informational requests when a malformed fragment packet is received. The impact is DoS affecting availability; no remote code execution or data loss is stated in the p...

CVE-2025-21432

CVE-2025-21432 concerns memory corruption while retrieving CBOR data from TA in Qualcomm closed‑source components. The CVSS 3.1 vector indicates LOCAL access with LOW privileges and LOW attack complexity, but HIGH impact across confidentiality, integrity, and availability, yielding a base score o...

CVE-2025-21449

CVE-2025-21449 describes a transient Denial of Service in Qualcomm WLAN Embedded software triggered by processing a malformed length field in SSID Information Elements. The CVE is listed as High severity (base score 7.5) with network attack vector and no user interaction required; exploitation st...

CVE-2025-21433

CVE-2025-21433 affects Qualcomm closed‑source components. The issue is a transient denial-of-service that occurs when importing a PKCS#8-encoded RSA private key with a zero-sized modulus. Root cause is a zero-sized modulus handling in the affected component(s); impact is Denial of Service (availa...

CVE-2025-21454

CVE-2025-21454 affects Qualcomm closed‑source WLAN Embedded software. Description: transient Denial-of-Service while processing received beacon frames, attributed to a buffer over-read in WLAN SW. CVSSv3.1: Network attack, Low complexity, No privileges, No user interaction; Availability impact HI...