Qualcomm Qsm8250 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Qualcomm Qsm8250 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (200)

• CVE-2022-25748 — CVSS 9.8 (critical): Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute…
• CVE-2022-40510 — CVSS 9.8 (critical): Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.
• CVE-2022-40514 — CVSS 9.8 (critical): Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
• CVE-2021-30351 — CVSS 9.8 (critical): An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon…
• CVE-2020-11170 — CVSS 9.8 (critical): Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in…
• CVE-2020-11182 — CVSS 9.8 (critical): Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon…
• CVE-2021-35104 — CVSS 9.8 (critical): Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute…
• CVE-2021-30276 — CVSS 9.3 (critical): Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon…
• CVE-2023-28578 — CVSS 9.3 (critical): Memory corruption in Core Services while executing the command for removing a single event listener.
• CVE-2022-33232 — CVSS 9.3 (critical): Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.
• CVE-2021-30275 — CVSS 9.3 (critical): Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto…
• CVE-2023-21651 — CVSS 9.3 (critical): Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
• CVE-2023-33030 — CVSS 9.3 (critical): Memory corruption in HLOS while running playready use-case.
• CVE-2023-33072 — CVSS 9.3 (critical): Memory corruption in Core while processing control functions.
• CVE-2021-30285 — CVSS 9.3 (critical): Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2021-1942 — CVSS 9.3 (critical): Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-33288 — CVSS 9.3 (critical): Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection…
• CVE-2022-33231 — CVSS 9.3 (critical): Memory corruption due to double free in core while initializing the encryption key.
• CVE-2022-33257 — CVSS 9.3 (critical): Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
• CVE-2020-11301 — CVSS 9.1 (critical): Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon…
• CVE-2021-1924 — CVSS 9.0 (critical): Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute…
• CVE-2021-1889 — CVSS 8.4 (high): Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2021-1890 — CVSS 8.4 (high): Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, Snapdragon Compute…
• CVE-2023-33033 — CVSS 8.4 (high): Memory corruption in Audio during playback with speaker protection.
• CVE-2021-1905 — CVSS 8.4 (high) — actively exploited: Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon…
• CVE-2023-33023 — CVSS 8.4 (high): Memory corruption while processing finish_sign command to pass a rsp buffer.
• CVE-2021-1927 — CVSS 8.4 (high): Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute…
• CVE-2023-33022 — CVSS 8.4 (high): Memory corruption in HLOS while invoking IOCTL calls from user-space.
• CVE-2021-1939 — CVSS 8.4 (high): Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon…
• CVE-2021-1949 — CVSS 8.4 (high): Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute…
• CVE-2024-21461 — CVSS 8.4 (high): Memory corruption while performing finish HMAC operation when context is freed by keymaster.
• CVE-2023-28547 — CVSS 8.4 (high): Memory corruption in SPS Application while requesting for public key in sorter TA.
• CVE-2021-30262 — CVSS 8.4 (high): Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto…
• CVE-2023-28538 — CVSS 8.4 (high): Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
• CVE-2023-28537 — CVSS 8.4 (high): Memory corruption while allocating memory in COmxApeDec module in Audio.
• CVE-2021-30274 — CVSS 8.4 (high): Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto…
• CVE-2021-35105 — CVSS 8.4 (high): Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-40532 — CVSS 8.4 (high): Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
• CVE-2022-40531 — CVSS 8.4 (high): Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
• CVE-2022-40530 — CVSS 8.4 (high): Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.
• CVE-2022-40520 — CVSS 8.4 (high): Memory corruption due to stack-based buffer overflow in Core
• CVE-2022-25724 — CVSS 8.4 (high): Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-40517 — CVSS 8.4 (high): Memory corruption in core due to stack-based buffer overflow
• CVE-2022-25743 — CVSS 8.4 (high): Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-40516 — CVSS 8.4 (high): Memory corruption in Core due to stack-based buffer overflow.
• CVE-2022-40507 — CVSS 8.4 (high): Memory corruption due to double free in Core while mapping HLOS address to the list.
• CVE-2023-33088 — CVSS 8.4 (high): Memory corruption when processing cmd parameters while parsing vdev.
• CVE-2022-33243 — CVSS 8.4 (high): Memory corruption due to improper access control in Qualcomm IPC.
• CVE-2022-33277 — CVSS 8.4 (high): Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
• CVE-2022-33275 — CVSS 8.4 (high): Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
• CVE-2024-33056 — CVSS 8.4 (high): Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
• CVE-2024-33044 — CVSS 8.4 (high): Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
• CVE-2020-11245 — CVSS 8.4 (high): Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Auto, Snapdragon…
• CVE-2024-21468 — CVSS 8.4 (high): Memory corruption when there is failed unmap operation in GPU.
• CVE-2023-33066 — CVSS 8.4 (high): Memory corruption in Audio while processing RT proxy port register driver.
• CVE-2021-1886 — CVSS 8.4 (high): Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon…
• CVE-2021-1888 — CVSS 8.4 (high): Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute…
• CVE-2023-22667 — CVSS 8.4 (high): Memory Corruption in Audio while allocating the ion buffer during the music playback.
• CVE-2023-22666 — CVSS 8.4 (high): Memory Corruption in Audio while playing amrwbplus clips with modified content.
• CVE-2023-21666 — CVSS 8.4 (high): Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
• CVE-2021-30334 — CVSS 8.4 (high): Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute…
• CVE-2021-30335 — CVSS 8.4 (high): Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon…
• CVE-2021-30337 — CVSS 8.4 (high): Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto…
• CVE-2023-21665 — CVSS 8.4 (high): Memory corruption in Graphics while importing a file.
• CVE-2023-24852 — CVSS 8.4 (high): Memory Corruption in Core due to secure memory access by user while loading modem image.
• CVE-2023-33107 — CVSS 8.4 (high) — actively exploited: Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
• CVE-2021-30281 — CVSS 8.4 (high): Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device…
• CVE-2021-30282 — CVSS 8.4 (high): Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto…
• CVE-2023-28545 — CVSS 8.2 (high): Memory corruption in TZ Secure OS while loading an app ELF.
• CVE-2024-38408 — CVSS 8.2 (high): Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
• CVE-2022-33235 — CVSS 8.2 (high): Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto…
• CVE-2022-33252 — CVSS 8.2 (high): Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.
• CVE-2021-30349 — CVSS 8.2 (high): Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto…
• CVE-2022-33271 — CVSS 8.2 (high): Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
• CVE-2023-28585 — CVSS 8.2 (high): Memory corruption while loading an ELF segment in TEE Kernel.
• CVE-2024-38423 — CVSS 7.8 (high): Memory corruption while processing GPU page table switch.
• CVE-2020-11127 — CVSS 7.8 (high): u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of…
• CVE-2020-11165 — CVSS 7.8 (high): Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in…
• CVE-2020-11178 — CVSS 7.8 (high): Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its…
• CVE-2020-11181 — CVSS 7.8 (high): Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in…
• CVE-2020-11194 — CVSS 7.8 (high): Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon…
• CVE-2020-11195 — CVSS 7.8 (high): Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in…
• CVE-2020-11204 — CVSS 7.8 (high): Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters…
• CVE-2020-11206 — CVSS 7.8 (high): Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto…
• CVE-2020-11207 — CVSS 7.8 (high): Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute…
• CVE-2020-11239 — CVSS 7.8 (high): Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in…
• CVE-2020-11240 — CVSS 7.8 (high): Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy…
• CVE-2020-11253 — CVSS 7.8 (high): Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-11261 — CVSS 7.8 (high) — actively exploited: Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto…
• CVE-2020-11288 — CVSS 7.8 (high): Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute…
• CVE-2020-11289 — CVSS 7.8 (high): Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute…
• CVE-2020-11298 — CVSS 7.8 (high): While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by…
• CVE-2020-11304 — CVSS 7.8 (high): Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…
• CVE-2020-11306 — CVSS 7.8 (high): Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute…
• CVE-2021-1950 — CVSS 7.8 (high): Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon…
• CVE-2021-1952 — CVSS 7.8 (high): Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2021-30259 — CVSS 7.8 (high): Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2021-30279 — CVSS 7.8 (high): Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute…
• CVE-2022-33242 — CVSS 7.8 (high): Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.
• CVE-2023-22386 — CVSS 7.8 (high): Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.
• CVE-2023-22387 — CVSS 7.8 (high): Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
• CVE-2023-28546 — CVSS 7.8 (high): Memory Corruption in SPS Application while exporting public key in sorter TA.
• CVE-2023-28548 — CVSS 7.8 (high): Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
• CVE-2023-28549 — CVSS 7.8 (high): Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
• CVE-2023-28557 — CVSS 7.8 (high): Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
• CVE-2023-28558 — CVSS 7.8 (high): Memory corruption in WLAN handler while processing PhyID in Tx status handler.
• CVE-2023-28567 — CVSS 7.8 (high): Memory corruption in WLAN HAL while handling command through WMI interfaces.
• CVE-2023-28573 — CVSS 7.8 (high): Memory corruption in WLAN HAL while parsing WMI command parameters.
• CVE-2023-33017 — CVSS 7.8 (high): Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
• CVE-2023-33059 — CVSS 7.8 (high): Memory corruption in Audio while processing the VOC packet data from ADSP.
• CVE-2023-33063 — CVSS 7.8 (high) — actively exploited: Memory corruption in DSP Services during a remote call from HLOS to DSP.
• CVE-2024-21475 — CVSS 7.8 (high): Memory corruption when the payload received from firmware is not as per the expected protocol size.
• CVE-2024-21476 — CVSS 7.8 (high): Memory corruption when the channel ID passed by user is not validated and further used.
• CVE-2024-38415 — CVSS 7.8 (high): Memory corruption while handling session errors from firmware.
• CVE-2024-38418 — CVSS 7.8 (high): Memory corruption while parsing the memory map info in IOCTL calls.
• CVE-2024-38422 — CVSS 7.8 (high): Memory corruption while processing voice packet with arbitrary data received from ADSP.
• CVE-2024-43052 — CVSS 7.8 (high): Memory corruption while processing API calls to NPU with invalid input.
• CVE-2024-43057 — CVSS 7.8 (high): Memory corruption while processing command in Glink linux.
• CVE-2024-43067 — CVSS 7.8 (high): Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.
• CVE-2024-49844 — CVSS 7.8 (high): Memory corruption while triggering commands in the PlayReady Trusted application.
• CVE-2024-53014 — CVSS 7.8 (high): Memory corruption may occur while validating ports and channels in Audio driver.
• CVE-2025-21424 — CVSS 7.8 (high): Memory corruption while calling the NPU driver APIs concurrently.
• CVE-2025-21455 — CVSS 7.8 (high): Memory corruption while submitting blob data to kernel space though IOCTL.
• CVE-2025-21481 — CVSS 7.8 (high): Memory corruption while performing private key encryption in trusted application.
• CVE-2025-27042 — CVSS 7.8 (high): Memory corruption while processing video packets received from video firmware.
• CVE-2025-27053 — CVSS 7.8 (high): Memory corruption during PlayReady APP usecase while processing TA commands.
• CVE-2025-27054 — CVSS 7.8 (high): Memory corruption while processing a malformed license file during reboot.
• CVE-2025-27061 — CVSS 7.8 (high): Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
• CVE-2024-45549 — CVSS 7.7 (high): Information disclosure while creating MQ channels.
• CVE-2023-33027 — CVSS 7.5 (high): Transient DOS in WLAN Firmware while parsing rsn ies.
• CVE-2021-1974 — CVSS 7.5 (high): Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon…
• CVE-2025-21448 — CVSS 7.5 (high): Transient DOS may occur while parsing SSID in action frames.
• CVE-2025-27066 — CVSS 7.5 (high): Transient DOS while processing an ANQP message.
• CVE-2023-33015 — CVSS 7.5 (high): Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
• CVE-2021-30293 — CVSS 7.5 (high): Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…
• CVE-2023-33062 — CVSS 7.5 (high): Transient DOS in WLAN Firmware while parsing a BTM request.
• CVE-2023-33089 — CVSS 7.5 (high): Transient DOS when processing a NULL buffer while parsing WLAN vdev.
• CVE-2023-33098 — CVSS 7.5 (high): Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
• CVE-2023-33109 — CVSS 7.5 (high): Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
• CVE-2023-43511 — CVSS 7.5 (high): Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next…
• CVE-2023-43522 — CVSS 7.5 (high): Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
• CVE-2023-43533 — CVSS 7.5 (high): Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
• CVE-2023-43536 — CVSS 7.5 (high): Transient DOS while parse fils IE with length equal to 1.
• CVE-2024-23364 — CVSS 7.5 (high): Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon…
• CVE-2024-33051 — CVSS 7.5 (high): Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
• CVE-2022-33253 — CVSS 7.5 (high): Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.
• CVE-2022-33285 — CVSS 7.5 (high): Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
• CVE-2022-33286 — CVSS 7.5 (high): Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
• CVE-2022-33239 — CVSS 7.5 (high): Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto…
• CVE-2022-33238 — CVSS 7.5 (high): Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon…
• CVE-2022-33237 — CVSS 7.5 (high): Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-40512 — CVSS 7.5 (high): Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.
• CVE-2022-25749 — CVSS 7.5 (high): Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2022-25736 — CVSS 7.5 (high): Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute…
• CVE-2023-21659 — CVSS 7.5 (high): Transient DOS in WLAN Firmware while processing frames with missing header fields.
• CVE-2021-30353 — CVSS 7.5 (high): Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute…
• CVE-2021-30312 — CVSS 7.5 (high): Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute…
• CVE-2022-33234 — CVSS 7.3 (high): Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
• CVE-2025-27071 — CVSS 7.3 (high): Memory corruption while processing specific files in Powerline Communication Firmware.
• CVE-2020-11263 — CVSS 7.3 (high): An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon…
• CVE-2024-21469 — CVSS 7.3 (high): Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
• CVE-2021-30269 — CVSS 7.3 (high): Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute…
• CVE-2021-1909 — CVSS 7.3 (high): Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2021-30270 — CVSS 7.3 (high): Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon…
• CVE-2020-11252 — CVSS 7.2 (high): Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Snapdragon Auto…
• CVE-2022-40529 — CVSS 7.1 (high): Memory corruption due to improper access control in kernel while processing a mapping request from root process.
• CVE-2021-1935 — CVSS 7.1 (high): Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon…
• CVE-2021-30278 — CVSS 7.1 (high): Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute…
• CVE-2020-11132 — CVSS 7.1 (high): u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon…
• CVE-2023-28556 — CVSS 7.1 (high): Cryptographic issue in HLOS during key management.
• CVE-2022-22076 — CVSS 7.1 (high): information disclosure due to cryptographic issue in Core during RPMB read request.
• CVE-2022-40523 — CVSS 7.1 (high): Information disclosure in Kernel due to indirect branch misprediction.
• CVE-2024-21462 — CVSS 7.1 (high): Transient DOS while loading the TA ELF file.
• CVE-2020-11161 — CVSS 7.1 (high): Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon…
• CVE-2021-1894 — CVSS 7.1 (high): Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute…
• CVE-2020-11250 — CVSS 7.0 (high): Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-11262 — CVSS 7.0 (high): A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free…
• CVE-2020-11290 — CVSS 7.0 (high): Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon Auto, Snapdragon…
• CVE-2022-40518 — CVSS 6.8 (medium): Information disclosure due to buffer overread in Core
• CVE-2022-40519 — CVSS 6.8 (medium): Information disclosure due to buffer overread in Core
• CVE-2024-33016 — CVSS 6.8 (medium): memory corruption when an invalid firehose patch command is invoked.
• CVE-2022-25666 — CVSS 6.7 (medium): Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute…
• CVE-2021-30313 — CVSS 6.7 (medium): Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto…
• CVE-2023-22383 — CVSS 6.7 (medium): Memory Corruption in camera while installing a fd for a particular DMA buffer.
• CVE-2022-25677 — CVSS 6.7 (medium): Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2024-33032 — CVSS 6.7 (medium): Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.
• CVE-2024-33036 — CVSS 6.7 (medium): Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing…
• CVE-2020-11198 — CVSS 6.7 (medium): Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset…
• CVE-2024-33053 — CVSS 6.7 (medium): Memory corruption when multiple threads try to unregister the CVP buffer at the same time.
• CVE-2022-33267 — CVSS 6.7 (medium): Memory corruption in Linux while sending DRM request.
• CVE-2021-1963 — CVSS 6.7 (medium): Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute…
• CVE-2021-1961 — CVSS 6.7 (medium): Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute…
• CVE-2023-21654 — CVSS 6.7 (medium): Memory corruption in Audio during playback session with audio effects enabled.
• CVE-2024-45562 — CVSS 6.6 (medium): Memory corruption during concurrent access to server info object due to unprotected critical field.
• CVE-2024-53016 — CVSS 6.6 (medium): Memory corruption while processing I2C settings in Camera driver.
• CVE-2024-45540 — CVSS 6.6 (medium): Memory corruption while invoking IOCTL map buffer request from userspace.
• CVE-2024-45543 — CVSS 6.6 (medium): Memory corruption while accessing MSM channel map and mixer functions.
• CVE-2024-45570 — CVSS 6.6 (medium): Memory corruption may occur during IO configuration processing when the IO port count is invalid.
• CVE-2024-53013 — CVSS 6.6 (medium): Memory corruption may occur while processing voice call registration with user.
• CVE-2025-21464 — CVSS 6.5 (medium): Information disclosure while reading data from an image using specified offset and size parameters.