CVE-2024-21468

CVE-2024-21468 corresponds to a memory corruption issue that occurs when a GPU unmap operation fails, described across multiple sources as a memory corruption/Use-After-Free condition in Qualcomm kernel components. Affected: Qualcomm chipset GPUs and related kernel code paths. Root cause: failed ...

CVE-2025-21453

CVE-2025-21453 describes memory corruption in Qualcomm components due to a use-after-free style issue when an iterator is accessed after removal, with the GPS HLOS driver specifically listed in CVE records. Public records (NVD/NCSC/Red Hat CVEs) corroborate the memory-corruption description and t...

CVE-2023-33115

CVE-2023-33115: memory corruption during buffer initialization when generating trusted reports for certain report types. The issue is documented in Qualcomm-related entries as affecting Qualcomm closed-source components (local, low-privilege access, no user interaction; high impact). Connected do...

CVE-2023-21629

CVE-2023-21629 refers to memory corruption in Qualcomm closed‑source modem components caused by a double free while parsing PKCS15 SIM files. The CVSSv3.1 base metrics (6.8, MEDIUM) from NVD indicate physical access is required with low attack complexity and no privileges, but high impact to conf...

CVE-2023-28578

CVE-2023-28578 involves memory corruption in Core Services during the removal of a single event listener. Connected sources reference Siemens SCALANCE W700 through the Nessus plugin stating this CVE maps to that product and describing the memory corruption in Core Services when removing an event ...

CVE-2023-33023

CVE-2023-33023 corresponds to a memory corruption issue in Qualcomm closed‑source components related to the finish_sign command when passing an rsp buffer. The vulnerability is described as a local issue with high impact (C/H/I/A), requiring no user interaction and no privileges, per CVSS data. C...

CVE-2023-33066

CVE-2023-33066 describes a memory corruption in the Audio component of Qualcomm’s closed‑source stack, triggered while processing the RT proxy port register driver. The issue is linked to an out-of-range pointer offset in Audio (per VulnEnrichment), with Qualcomm’s March 2024 product-security bul...

CVE-2023-43551

The CVE-2023-43551 entry is confirmed in connected sources as a cryptographic/authentication issue occurring during LTE attach, where a rogue base station can skip the authentication phase and immediately issue the Security Mode Command. The vulnerability is attributed to Qualcomm closed‑source c...

CVE-2023-28547

CVE-2023-28547 is a memory corruption issue in the SPS Application when requesting a public key in the sorter Trust Agent (TA), affecting Qualcomm components (including closed-source parts). Root cause described as memory corruption in SPS Application; exposed impact on confidentiality, integrity...

CVE-2023-28564

CVE-2023-28564 is a memory-corruption vulnerability in the WLAN HAL when passing command parameters through WMI interfaces. Documented as high-severity (CVSS v3.1: 7.8; LOCAL, LOW privileges required, no user interaction) with potential impact on confidentiality, integrity, and availability. Publ...

CVE-2023-28567

CVE-2023-28567 corresponds to a memory corruption issue in the WLAN HAL when handling commands via WMI interfaces. Affected software is Qualcomm WLAN/closed‑source components; CVSSv3.1 base score 7.8 (High) with LOCAL attack vector, LOW privileges, and no user interaction. The connected records c...

CVE-2023-28565

CVE-2023-28565 affects Qualcomm WLAN HAL (Qualcomm chipsets) through WMI command streams. Root cause according to enrichment: improper validation of an array index leading to memory corruption in WLAN HAL. The issue is described in multiple sources (e.g., Qualcomm/Red Hat advisories; vuln enrichm...

CVE-2024-49841

CVE-2024-49841 describes memory corruption during memory assignment to a headless peripheral VM stemming from incorrect error code handling in Qualcomm components (closed-source). The CVE is tracked in multiple feeds (NVD, Red Hat), with a CVSS v3.1 base score of 7.8 (HIGH), local attack vector, ...

CVE-2024-49844

The CVE-2024-49844 entry concerns memory corruption when triggering commands in the PlayReady Trusted application on Qualcomm chipsets. Affected component: PlayReady Trusted application (memory handling during command processing). Reported impact per sources: memory corruption with potential for ...

CVE-2024-38420

CVE-2024-38420 is a memory corruption vulnerability affecting Qualcomm chipsets during configuration of a Hypervisor-based input virtual device. Connected sources confirm this is tied to a local attack surface (attack vector: LOCAL) with low privileges required and no user interaction, and they r...

CVE-2024-49842

Technical details about CVE-2024-49842 are not publicly provided in the connected documents. Monitor for updates.

CVE-2023-33119

CVE-2023-33119 describes a memory corruption in a Qualcomm closed‑source component triggered while loading a VM from a signed VM image that is not coherent in the processor cache. Connected records corroborate impact as LOCAL with high severity (CONFIDENTIALITY, INTEGRITY, AVAILABILITY affected) ...

CVE-2024-33051

CVE-2024-33051 is a WLAN firmware issue (Qualcomm) causing a transient Denial of Service when processing TIM Information Elements from beacon frames due to a missing length check. The CVE entries (NVD, Red Hat, CVE List, CNVD-style feeds) consistently describe a buffer over-read/length-check omis...

CVE-2023-43542

CVE-2023-43542 describes a memory corruption in the Trusted Execution Environment from copying a keyblob’s material when the key material size isn’t properly checked. Documented details indicate a high-severity impact (C/H/I/H/A/H) with local attacker access and no user interaction required, per ...

CVE-2023-43530

CVE-2023-43530 describes a memory corruption in HLOS during storage type checks, affecting Qualcomm chipsets. The production impact is described as memory corruption rather than exploitation details in the provided documents. The CVE is referenced across multiple feeds (NVD, Red Hat, NCSC, Androi...

CVE-2023-43538

CVE-2023-43538 corresponds to a memory corruption issue in TZ Secure OS during the initialization of the Tunnel Invoke Manager. Affected component: TZ Secure OS (closed‑source Qualcomm components are implicated in related advisories). Impact per connected docs: high/critical severity with local a...

CVE-2024-43056

CVE-2024-43056 describes a transient denial-of-service during hypervisor virtual I/O operations in Qualcomm chipset environments. The linked CVE listings emphasize that the issue manifests as a DOS in a virtual machine due to a hypervisor I/O path condition (buffer over-read is noted in CVE listi...

CVE-2025-21422

CVE-2025-21422 describes a cryptographic issue in Qualcomm chipsets where processing crypto API calls lacks certain checks, potentially leading to corrupted key usage or IV reuse. Connected sources tie this to Qualcomm Chipsets/Snapdragon families and classify the impact as high. Public exploit d...

CVE-2024-53009

CVE-2024-53009 is a memory corruption vulnerability in Automotive Autonomy related to the mailbox handling. The CVE list describes the root cause as improper validation of an array index, while multiple feeds reiterate a memory corruption issue during mailbox operations in Automotive. Public sour...

CVE-2025-21427

CVE-2025-21427 is a Qualcomm closed‑source component vulnerability involving information disclosure during RTP payload decoding when a user equipment receives an RTP packet from the network. The root cause is described as a buffer over-read in the RTP payload decoding path, leading to potential l...

CVE-2025-21449

CVE-2025-21449 describes a transient Denial of Service in Qualcomm WLAN Embedded software triggered by processing a malformed length field in SSID Information Elements. The CVE is listed as High severity (base score 7.5) with network attack vector and no user interaction required; exploitation st...

CVE-2025-21454

CVE-2025-21454 affects Qualcomm closed‑source WLAN Embedded software. Description: transient Denial-of-Service while processing received beacon frames, attributed to a buffer over-read in WLAN SW. CVSSv3.1: Network attack, Low complexity, No privileges, No user interaction; Availability impact HI...