CVE-2023-33063

CVE-2023-33063 is a Use-After-Free/memory corruption issue in Qualcomm DSP Services triggered by a remote call from HLOS to DSP. Affected: Qualcomm chipsets with DSP Services; root cause: memory corruption leading to potential unintended behavior. Documents indicate high impact (confidentiality, ...

CVE-2023-33107

CVE-2023-33107 is an integer overflow/memory-corruption vulnerability in Graphics Linux affecting Qualcomm display components. The flaw occurs when assigning a shared virtual memory region during an IOCTL, enabling local attacker access with low complexity and no user interaction; impact is rated...

CVE-2026-21385

CVE-2026-21385 is a memory corruption vulnerability in the Qualcomm Display component (graphics) used by Qualcomm chipsets, caused by memory alignment handling during allocation. Exploitation has been observed in the wild in a limited, targeted manner, with attackers able to push malicious data t...

CVE-2024-23373

CVE-2024-23373 is a memory corruption/Use-After-Free issue in Qualcomm graphics stack related to IOMMU unmap handling, where a failed unmap can cause DMA/anonymous buffers to be released. Public sources assign a HIGH impact with local attack requirements (no user interaction). The CVE is document...

CVE-2023-43513

CVE-2023-43513: Memory corruption in Qualcomm components due to an untrusted context read pointer during event-ring processing, which may be advanced with arbitrary values and point to the middle of a ring element. According to the provided data, the CVSS v3.1 base metrics are HIGH for Confidenti...

CVE-2023-33120

CVE-2023-33120 affects Qualcomm ADSP Audio: memory corruption occurs when a memory map command is executed consecutively. This is described across multiple sources (NVD/Red Hat/RH advisories) as a memory corruption in Audio due to repeated memory-mapping commands. The CVSS-based description in th...

CVE-2024-33063

CVE-2024-33063 affects Qualcomm Snapdragon Auto components. The issue arises during ML IE parsing: a beacon with a common info length greater than the ML IE interior triggers a transient DoS due to an out-of-bounds read/write in util_add_mlie_for_prb_rsp_gen(). Connected sources (PT-2024-25101) d...

CVE-2023-28588

CVE-2023-28588 (Qualcomm Bluetooth) : A transient DoS in the Bluetooth Host during RFC slot allocation affects Qualcomm Chipsets’ Bluetooth component. Public records describe an integer overflow/wraparound issue in the Bluetooth Host as the root cause. The CVSSv3.1 base score is 7.5 (High) with n...

CVE-2023-33110

The CVE-2023-33110 issue concerns the PCM host voice audio driver on Qualcomm chipsets, where a session index is initialized before PCM is opened, accessed in an event callback from ADSP, and reset on PCM close. This race can lead to memory corruption if callbacks occur as the session index is mo...

CVE-2026-24085

Technical details about CVE-2026-24085 are not publicly available in the provided documents; the memory corruption description is noted but no affected products, affected versions, root cause specifics, or fixes are disclosed. Monitor for updates.

CVE-2024-23368

CVE-2024-23368 is a memory corruption issue in Qualcomm’s embedded platform concerning the SMEM Partition Handler. The vulnerability arises when allocating and accessing an entry in an SMEM partition, effectively a classic buffer copy without proper input size checking, which can lead to memory c...

CVE-2024-38415

CVE-2024-38415 corresponds to memory corruption during handling of firmware session errors in Qualcomm components (notably Qualcomm/Qualcomm Snapdragon Auto context appears in some feeds). The CVSS v3.1 metrics indicate a HIGH base score (7.8) with LOCAL attack vector, LOW privileges required, no...

CVE-2024-33043

CVE-2024-33043 is a Qualcomm chipset issue described as a transient Denial of Service when handling a PS event with the Program Service name length offset set to 255. Documented impact is local DoS (CVSS v3.1: 5.5, Medium) with Local attack vector and Low privileges required; no exploit details o...

CVE-2023-22388

CVE-2023-22388 describes memory corruption in the Qualcomm Multi-mode Call Processor when handling a bit mask API. The issue is documented with a CVSS v3.1 base score of 9.8 (CRITICAL) and is described as network-exploitable with no user interaction and no privileges required; impact spans confid...

CVE-2024-43048

CVE-2024-43048 concerns memory corruption caused by invalid input to the GPU Headroom API call in Qualcomm closed‑source components. The available documents indicate a local attack vector with low privileges and no user interaction, and the CVSS 3.1 vector quotes a high impact on confidentiality,...

CVE-2025-21434

CVE-2025-21434 affects Qualcomm WLAN on Snapdragon platforms. The issue is a transient Denial of Service that can occur while parsing EHT operation IE or EHT capability IE, as described in Qualcomm’s security references (QC-CR#3918068) and linked CVE listings. Connected sources indicate a DoS imp...

CVE-2024-33027

CVE-2024-33027 describes memory corruption that can occur when a local, unprivileged user-space application gains kernel-level privileges by corrupting the GPU page table to modify DDR memory. Public sources characterize the impact as a local attack with high confidentiality, integrity, and avail...

CVE-2024-38422

CVE-2024-38422 describes a memory corruption vulnerability in Qualcomm components related to audio processing, triggered when handling voice packets with arbitrary data received from the ADSP. The issue is evidenced in the CVE listing with a high impact (confidentiality, integrity, and availabili...

CVE-2023-21628

CVE-2023-21628 describes a memory corruption (classic buffer overflow) in the WLAN HAL of Qualcomm chipsets when processing WMI-UTF or FTM TLV1 commands. The CVE is listed as a buffer copy without checking input size, leading to potential data corruption and high impact. Connected sources identif...

CVE-2024-49848

CVE-2024-49848 concerns memory corruption in Qualcomm ADSPRPC FP/DSP interaction (the adsprpc kernel driver) via fastrpc_mmap structures. The provided sources describe a use-after-free vulnerability in FASTRPC_ATTR_KEEP_MAP handling that can allow a freed fastrpc_mmap object to be referenced by a...

CVE-2023-28563

CVE-2023-28563 affects IOE Firmware in Qualcomm chipsets. The root cause is information disclosure when processing WMI commands in the firmware, leading to potentially exposed data (confidentiality impact high). The issue is listed in Android Pixel bulletin as a closed‑source component vulnerabil...

CVE-2024-23384

CVE-2024-23384 corresponds to memory corruption in the graphics stack where mapped pages in VBO are not unmapped after reclaim by the shrinker. Documented across multiple sources (NVD/Red Hat/NCSC/CVE lists) as a Qualcomm graphics Linux issue affecting display-related components; CVSS v3.1 shows ...

CVE-2023-33072

CVE-2023-33072 is a memory corruption issue affecting Core when processing control functions, with concrete mappings in connected records to Qualcomm closed‑source components and related “Core” memory‑corruption vectors. Public references describe the issue as memory corruption in Core and, in so...

CVE-2024-33015

CVE-2024-33015 describes a transient DoS in the WLAN host stack during parsing of a SCAN RNR Information Element. Root cause: when bytes from the AP cause the size of the last IE parameter to be smaller than the neighboring report, a DoS can occur. Documented references indicate this affects Qual...

CVE-2024-33016

CVE-2024-33016 pertains to Siemens SCALANCE W700, where the vulnerability is described as memory corruption that occurs when an invalid firehose patch command is invoked. The Tenable Nessus plugin explicitly identifies this CVE in the context of Siemens SCALANCE W700 and notes the affected asset ...

CVE-2023-28557

CVE-2023-28557 affects Qualcomm WLAN HAL, causing memory corruption when processing command parameters from an untrusted WMI payload. The issue is described as a local vulnerability with low attack complexity and exploit prerequisites, but with high impact to confidentiality, integrity, and avail...

CVE-2024-43066

CVE-2024-43066 describes a memory corruption condition that occurs when processing file descriptors during listener registration or de-registration. Multiple connected sources attribute this to Qualcomm components (including bootloader and kernel or Qualcomm closed-source components) and to Qualc...

CVE-2023-24849

CVE-2023-24849 affects Qualcomm closed‑source Data Modem; the issue is Information Disclosure caused by parsing FMTP lines in SDP messages. Root cause: a flaw in the FMTP parsing logic in the Data Modem leading to confidentiality impact (CVE exhibits High impact, with network attack vector and no...

CVE-2023-28568

CVE-2023-28568 describes an information disclosure in the WLAN HAL when the reception status handler is invoked. Public records identify the issue within Qualcomm WLAN HAL (closed-source component); CVSS metrics indicate High confidentiality impact with local attack vector and low attack complexi...

CVE-2024-33028

CVE-2024-33028 is described as a memory corruption (use-after-free–like) issue where a fence object may be accessed during timeline destruction after an isync fence is released. Multiple connected sources reference the same description (NVD, Red Hat, Vuln enrichment) and associate it with Qualcom...

CVE-2024-38423

CVE-2024-38423 = memory corruption while processing GPU page table switch in Qualcomm GPU/display stack. Exploitation would be local with low complexity and could impact confidentiality, integrity, and availability (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Connected sources indicate Qualco...

CVE-2022-40529

CVE-2022-40529 is described in connected records as memory corruption due to improper access control in the kernel when processing a mapping request from the root process. The vulnerability is listed under Qualcomm closed‑source components, indicating it affects Qualcomm kernels/closed software. ...

CVE-2023-43533

CVE-2023-43533 concerns a transient DoS in WLAN firmware on Qualcomm chipsets when a received beacon’s length is shorter than the 802.11 beacon frame. Multiple sources document the issue with the same description, indicating the WLAN firmware is the affected component and the root cause relates t...

CVE-2024-33011

CVE-2024-33011 is described as a transient Denial-of-Service condition in the WLAN Host module (Qualcomm) when parsing the MBSSID Information Element (IE) from beacon frames with a zero-length MBSSID IE. Public sources in the provided documents identify the issue as related to Qualcomm WLAN, with...

CVE-2022-40521

CVE-2022-40521 is documented with concrete details in connected sources: a Transient Denial of Service due to improper authorization in Qualcomm baseband/modem components. The issue affects Qualcomm basebands and is described as a DoS vulnerability arising from improper authorization, with a Netw...

CVE-2024-33034

CVE-2024-33034 concerns a memory corruption issue in the Graphics Linux stack where VBOs may hold outdated or invalid GPU SMMU mappings. The root cause occurs when binding and reclaiming memory buffers happen concurrently, which can lead to memory corruption with High impact on confidentiality, i...

CVE-2023-28569

CVE-2023-28569 is described across multiple sources as an information disclosure in the WLAN HAL when commands are processed via WMI interfaces. The vulnerability is associated with Qualcomm WLAN HAL components and affects Qualcomm chipsets; the confidentiality impact is High, with an attacker re...

CVE-2024-23382

CVE-2024-23382 is described as memory corruption while processing a graphics kernel driver request to create a DMA fence. The CVE appears in NVD and CVE lists with a high impact, and Red Hat also references memory corruption for this issue. Qualcomm components are listed in the 2024-08-05 Android...

CVE-2024-33012

CVE-2024-33012 describes a transient Denial of Service affecting Qualcomm WLAN Host code, triggered while parsing multiple MBSSID IEs in beacon frames when a tag length is non-zero and the beacon ends. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a base score of 7.5 (HIGH) wi...

CVE-2024-33013

CVE-2024-33013 describes a transient denial-of-service affecting Qualcomm WLAN-related components. Public records here indicate the vulnerability occurs when a driver accesses ML IE memory and the offset is incremented beyond the ML IE length, potentially causing a DoS condition. Affected items i...

CVE-2024-33025

CVE-2024-33025 is a Transient Denial of Service in the WLAN Host path affecting Qualcomm WLAN components, triggered while parsing the BSS parameter change count or MLD capabilities fields within the ML Information Element. The NVD entry notes a Network attack vector with CVSS v3.1 base score 7.5 ...

CVE-2023-43536

Technical details for CVE-2023-43536 are not publicly provided in the supplied documents. No confirmed affected products, versions, or fixes are disclosed here; monitor official advisories for updates.

CVE-2024-33023

The CVE-2024-33023 entry describes a memory corruption issue occurring when creating a fence to wait on timeline events while simultaneously signaling those events in the Graphics/Linux stack. Public references consistently frame this as a graphics-related vulnerability affecting Qualcomm compone...

CVE-2024-33026

CVE-2024-33026 is a WLAN/Qualcomm-related issue described as a transient DoS when parsing probe and association response frames, triggered when the received frame length is less than the maximum size of the timestamp. The CVE entry lists a base score of 7.5 (Network attack, Low complexity, No use...

CVE-2023-28566

CVE-2023-28566 affects Qualcomm WLAN HAL (closed‑source component) across Qualcomm chipsets. The issue is information disclosure that occurs when handling the WMI state info command in the WLAN HAL, leading to exposure of confidential information locally. The available documents identify the affe...

CVE-2023-28544

CVE-2023-28544: Memory corruption in WLAN while sending a transmit command from HLOS to UTF handlers. Documented as a Qualcomm closed‑source component issue with a high impact (CVSS 7.8, Local, Low-Privilege attacker, No user interaction). Connected sources confirm the vulnerability involves WLAN...

CVE-2023-28538

CVE-2023-28538 describes memory corruption in WIN Product when invoking the WinAcpi update driver in the UEFI region. The vulnerability is labeled with high impact (C, I, A = High) and is exploitable locally with low attack complexity and no user interaction required, requiring low privileges (pe...

CVE-2023-33036

The CVE-2023-33036 issue affects Qualcomm closed-source components in the hypervisor. It is described as a permanent DoS caused by a NULL pointer dereference when an untrusted VM lacking PSCI support issues a PSCI call, leading to hypervisor disruption (availability impact High). Reported in Qual...

CVE-2023-43511

CVE-2023-43511 describes a transient DoS in WLAN firmware when parsing an IPv6 extension header for a packet whose next header is IPPROTO_NONE. The issue is reported across multiple sources (Qualcomm advisory context, Red Hat, NVD) and is associated with Qualcomm/WLAN firmware components; the vul...

CVE-2024-33024

CVE-2024-33024 affects Qualcomm WLAN/ML IE parsing. A beacon’s ML Information Element length field can exceed the ML IE length, triggering a transient Denial of Service during parsing. Documented impact is a DoS with CVSSv3.1 base score 7.5 (High). Exploitation is network-based but details on aff...