CVE-2023-22387

CVE-2023-22387 describes an arbitrary memory overwrite when a VM is compromised during a TX write, causing memory corruption. The most concrete details in the connected docs are: (1) it is listed under Qualcomm components, specifically in the Qualcomm kernel area, with a high impact and Local att...

CVE-2023-33021

CVE-2023-33021 describes a memory corruption (use-after-free) in the Graphics path when processing user packets for command submission, affecting Qualcomm Snapdragon graphics components. Impact is high for confidentiality, integrity, and availability per the NVD metrics. Connected sources corrobo...

CVE-2023-28542

CVE-2023-28542 is a memory corruption issue tied to WLAN HOST when fetching TX status information. Affected component: Qualcomm WLAN-related code (WLAN HOST), with root cause described as memory corruption. Impact per sources: high (CVSSv3.1 base 7.8), local exploit Vector with low attack complex...

CVE-2024-33042

CVE-2024-33042 describes a memory corruption in Qualcomm WLAN-related components when the Alternative Frequency offset is set to 255. Connected sources identify the issue as affecting Qualcomm chipsets (WLAN subcomponent) and classify it as a high-severity, local EoP-style vulnerability with pote...

CVE-2023-21629

CVE-2023-21629 refers to memory corruption in Qualcomm closed‑source modem components caused by a double free while parsing PKCS15 SIM files. The CVSSv3.1 base metrics (6.8, MEDIUM) from NVD indicate physical access is required with low attack complexity and no privileges, but high impact to conf...

CVE-2023-28565

CVE-2023-28565 affects Qualcomm WLAN HAL (Qualcomm chipsets) through WMI command streams. Root cause according to enrichment: improper validation of an array index leading to memory corruption in WLAN HAL. The issue is described in multiple sources (e.g., Qualcomm/Red Hat advisories; vuln enrichm...

CVE-2023-22667

CVE-2023-22667 is a memory corruption issue in Qualcomm closed-source audio components triggered during ion buffer allocation while playing music. Multiple sources (NVD, Red Hat advisory, and other feeds) describe the vulnerability with high impact (confidentiality, integrity, and availability af...

CVE-2023-28564

CVE-2023-28564 is a memory-corruption vulnerability in the WLAN HAL when passing command parameters through WMI interfaces. Documented as high-severity (CVSS v3.1: 7.8; LOCAL, LOW privileges required, no user interaction) with potential impact on confidentiality, integrity, and availability. Publ...

CVE-2023-28567

CVE-2023-28567 corresponds to a memory corruption issue in the WLAN HAL when handling commands via WMI interfaces. Affected software is Qualcomm WLAN/closed‑source components; CVSSv3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges, and no user interaction. The connected records c...

CVE-2023-21633

CVE-2023-21633 is described as a memory corruption vulnerability in Linux tied to processing the QcRilRequestImsRegisterMultiIdentityMessage, with the formal name Improper Restriction of Operations within the Bounds of a Memory Buffer . The connected sources (CVE landing pages from NVD/CVELIST an...

CVE-2024-33051

CVE-2024-33051 is a WLAN firmware issue (Qualcomm) causing a transient Denial of Service when processing TIM Information Elements from beacon frames due to a missing length check. The CVE entries (NVD, Red Hat, CVE List, CNVD-style feeds) consistently describe a buffer over-read/length-check omis...

CVE-2024-43051

The CVE-2024-43051 entry describes an Information disclosure during session key derivation for Widevine use. Connected sources confirm this affects Qualcomm closed‑source components (CVE-2024-43051) and that the issue is listed in Android security bulletins with patch levels addressing these vuln...

CVE-2024-43056

CVE-2024-43056 describes a transient denial-of-service during hypervisor virtual I/O operations in Qualcomm chipset environments. The linked CVE listings emphasize that the issue manifests as a DOS in a virtual machine due to a hypervisor I/O path condition (buffer over-read is noted in CVE listi...