Qualcomm
Page 4 of 4 — Qualcomm CVEs from a corpus of 387, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-21430 | High | 7.5 | 2025-04-07 | Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session. |
CVE-2025-21429 | High | 7.5 | 2025-04-07 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request. |
CVE-2025-21428 | High | 7.5 | 2025-04-07 | Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session. |
CVE-2025-21425 | High | 7.3 | 2025-04-07 | Memory corruption may occur due top improper access control in HAB process. |
CVE-2025-21423 | High | 7.8 | 2025-04-07 | Memory corruption occurs when handling client calls to EnableTestMode through an Escape call. |
CVE-2025-21421 | High | 7.8 | 2025-04-07 | Memory corruption while processing escape code in API. |
CVE-2024-49848 | Medium | 6.7 | 2025-04-07 | Memory corruption while processing multiple IOCTL calls from HLOS to DSP. |
CVE-2024-45557 | High | 7.8 | 2025-04-07 | Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation. |
CVE-2024-45556 | Medium | 6.5 | 2025-04-07 | Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR. |
CVE-2024-45552 | High | 8.2 | 2025-04-07 | Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards. |
CVE-2024-45551 | Medium | 6.2 | 2025-04-07 | Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to… |
CVE-2024-45549 | High | 7.7 | 2025-04-07 | Information disclosure while creating MQ channels. |
CVE-2024-45544 | Medium | 6.6 | 2025-04-07 | Memory corruption while processing IOCTL calls to add route entry in the HW. |
CVE-2024-45543 | Medium | 6.6 | 2025-04-07 | Memory corruption while accessing MSM channel map and mixer functions. |
CVE-2024-45540 | Medium | 6.6 | 2025-04-07 | Memory corruption while invoking IOCTL map buffer request from userspace. |
CVE-2024-43067 | High | 7.8 | 2025-04-07 | Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory. |
CVE-2024-43066 | High | 7.8 | 2025-04-07 | Memory corruption while handling file descriptor during listener registration/de-registration. |
CVE-2024-43065 | High | 7.1 | 2025-04-07 | Cryptographic issues while generating an asymmetric key pair for RKP use cases. |
CVE-2024-43058 | High | 7.8 | 2025-04-07 | Memory corruption while processing IOCTL calls. |
CVE-2024-43046 | Medium | 5.5 | 2025-04-07 | There may be information disclosure during memory re-allocation in TZ Secure OS. |
CVE-2024-33058 | High | 7.5 | 2025-04-07 | Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP. |
CVE-2025-21424 | High | 7.8 | 2025-03-03 | Memory corruption while calling the NPU driver APIs concurrently. |
CVE-2024-53034 | High | 7.8 | 2025-03-03 | Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset. |
CVE-2024-53033 | High | 7.8 | 2025-03-03 | Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address. |
CVE-2024-53032 | High | 7.8 | 2025-03-03 | Memory corruption may occur in keyboard virtual device due to guest VM interaction. |
CVE-2024-53031 | High | 7.8 | 2025-03-03 | Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine. |
CVE-2024-53030 | High | 7.8 | 2025-03-03 | Memory corruption while processing input message passed from FE driver. |
CVE-2024-53029 | High | 7.8 | 2025-03-03 | Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine. |
CVE-2024-53028 | High | 7.8 | 2025-03-03 | Memory corruption may occur while processing message from frontend during allocation. |
CVE-2024-53027 | High | 7.5 | 2025-03-03 | Transient DOS may occur while processing the country IE. |
CVE-2024-53025 | Medium | 5.5 | 2025-03-03 | Transient DOS can occur while processing UCI command. |
CVE-2024-53024 | High | 7.8 | 2025-03-03 | Memory corruption in display driver while detaching a device. |
CVE-2024-53023 | High | 7.8 | 2025-03-03 | Memory corruption may occur while accessing a variable during extended back to back tests. |
CVE-2024-53022 | High | 7.8 | 2025-03-03 | Memory corruption may occur during communication between primary and guest VM. |
CVE-2024-53014 | High | 7.8 | 2025-03-03 | Memory corruption may occur while validating ports and channels in Audio driver. |
CVE-2024-53012 | High | 7.8 | 2025-03-03 | Memory corruption may occur due to improper input validation in clock device. |
CVE-2024-53011 | High | 7.9 | 2025-03-03 | Information disclosure may occur due to improper permission and access controls to Video Analytics engine. |
CVE-2024-49836 | High | 7.8 | 2025-03-03 | Memory corruption may occur during the synchronization of the camera`s frame processing pipeline. |
CVE-2024-45580 | High | 7.8 | 2025-03-03 | Memory corruption while handling multuple IOCTL calls from userspace for remote invocation. |
CVE-2024-43062 | High | 7.8 | 2025-03-03 | Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization. |
CVE-2024-43061 | High | 7.8 | 2025-03-03 | Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive. |
CVE-2024-43060 | High | 7.8 | 2025-03-03 | Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP. |
CVE-2024-43059 | High | 7.8 | 2025-03-03 | Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node. |
CVE-2024-43057 | High | 7.8 | 2025-03-03 | Memory corruption while processing command in Glink linux. |
CVE-2024-43056 | Medium | 5.5 | 2025-03-03 | Transient DOS during hypervisor virtual I/O operation in a virtual machine. |
CVE-2024-43055 | High | 7.8 | 2025-03-03 | Memory corruption while processing camera use case IOCTL call. |
CVE-2024-43051 | Medium | 5.5 | 2025-03-03 | Information disclosure while deriving keys for a session for any Widevine use case. |
CVE-2024-38426 | Medium | 5.4 | 2025-03-03 | While processing the authentication message in UE, improper authentication may lead to information disclosure. |
CVE-2024-49843 | High | 7.8 | 2025-02-03 | Memory corruption while processing IOCTL from user space to handle GPU AHB bus error. |
CVE-2024-49840 | High | 7.8 | 2025-02-03 | Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality. |
CVE-2024-49839 | High | 8.2 | 2025-02-03 | Memory corruption during management frame processing due to mismatch in T2LM info element. |
CVE-2024-49838 | High | 8.2 | 2025-02-03 | Information disclosure while parsing the OCI IE with invalid length. |
CVE-2024-49837 | High | 7.8 | 2025-02-03 | Memory corruption while reading CPU state data during guest VM suspend. |
CVE-2024-49834 | High | 7.8 | 2025-02-03 | Memory corruption while power-up or power-down sequence of the camera sensor. |
CVE-2024-49833 | High | 7.8 | 2025-02-03 | Memory corruption can occur in the camera when an invalid CID is used. |
CVE-2024-49832 | High | 7.8 | 2025-02-03 | Memory corruption in Camera due to unusually high number of nodes passed to AXI port. |
CVE-2024-45584 | High | 7.8 | 2025-02-03 | Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace. |
CVE-2024-45582 | High | 7.8 | 2025-02-03 | Memory corruption while validating number of devices in Camera kernel . |
CVE-2024-45573 | High | 7.8 | 2025-02-03 | Memory corruption may occour while generating test pattern due to negative indexing of display ID. |
CVE-2024-45571 | High | 7.8 | 2025-02-03 | Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface. |
CVE-2024-45569 | Critical | 9.8 | 2025-02-03 | Memory corruption while parsing the ML IE due to invalid frame content. |
CVE-2024-45561 | High | 7.8 | 2025-02-03 | Memory corruption while handling IOCTL call from user-space to set latency level. |
CVE-2024-45560 | High | 7.8 | 2025-02-03 | Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer. |
CVE-2024-38420 | High | 8.8 | 2025-02-03 | Memory corruption while configuring a Hypervisor based input virtual device. |
CVE-2024-38418 | High | 7.8 | 2025-02-03 | Memory corruption while parsing the memory map info in IOCTL calls. |
CVE-2024-38417 | Medium | 6.1 | 2025-02-03 | Information disclosure while processing IO control commands. |
CVE-2024-38416 | Medium | 6.1 | 2025-02-03 | Information disclosure during audio playback. |
CVE-2024-38414 | Medium | 6.1 | 2025-02-03 | Information disclosure while processing information on firmware image during core initialization. |
CVE-2024-38413 | Medium | 6.6 | 2025-02-03 | Memory corruption while processing frame packets. |
CVE-2024-38412 | Medium | 6.6 | 2025-02-03 | Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors. |
CVE-2024-38411 | Medium | 6.6 | 2025-02-03 | Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls. |
CVE-2024-38404 | High | 7.5 | 2025-02-03 | Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem. |
CVE-2024-45559 | Medium | 5.5 | 2025-01-06 | Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend. |
CVE-2024-45558 | High | 7.5 | 2025-01-06 | Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. |
CVE-2024-45555 | High | 8.4 | 2025-01-06 | Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected int… |
CVE-2024-45553 | High | 7.8 | 2025-01-06 | Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it… |
CVE-2024-45550 | High | 7.8 | 2025-01-06 | Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls. |
CVE-2024-45548 | High | 7.8 | 2025-01-06 | Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call. |
CVE-2024-45547 | High | 7.8 | 2025-01-06 | Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality. |
CVE-2024-45546 | High | 7.8 | 2025-01-06 | Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space. |
CVE-2024-45542 | High | 7.8 | 2025-01-06 | Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. |
CVE-2024-45541 | High | 7.8 | 2025-01-06 | Memory corruption when IOCTL call is invoked from user-space to read board data. |
CVE-2024-43064 | High | 7.5 | 2025-01-06 | Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU. |
CVE-2024-43063 | Medium | 6.1 | 2025-01-06 | information disclosure while invoking the mailbox read API. |
CVE-2024-33067 | Medium | 6.1 | 2025-01-06 | Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver. |
CVE-2024-33061 | Medium | 6.8 | 2025-01-06 | Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process. |
CVE-2024-33059 | Medium | 6.7 | 2025-01-06 | Memory corruption while processing frame command IOCTL calls. |
CVE-2024-33055 | Medium | 6.7 | 2025-01-06 | Memory corruption while invoking IOCTL calls to unmap the DMA buffers. |
CVE-2024-33041 | Medium | 6.7 | 2025-01-06 | Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls, |
CVE-2024-23366 | Medium | 6.6 | 2025-01-06 | Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size. |
CVE-2024-21464 | High | 8.4 | 2025-01-06 | Memory corruption while processing IPA statistics, when there are no active clients registered. |
CVE-2024-43053 | High | 7.8 | 2024-12-02 | Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information. |
CVE-2024-43052 | High | 7.8 | 2024-12-02 | Memory corruption while processing API calls to NPU with invalid input. |
CVE-2024-43050 | High | 7.8 | 2024-12-02 | Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver. |
CVE-2024-43049 | High | 7.8 | 2024-12-02 | Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver. |
CVE-2024-43048 | High | 7.8 | 2024-12-02 | Memory corruption when invalid input is passed to invoke GPU Headroom API call. |
CVE-2024-33063 | High | 7.5 | 2024-12-02 | Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present. |
CVE-2024-33056 | High | 8.4 | 2024-12-02 | Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
CVE-2024-33053 | Medium | 6.7 | 2024-12-02 | Memory corruption when multiple threads try to unregister the CVP buffer at the same time. |
CVE-2024-33044 | High | 8.4 | 2024-12-02 | Memory corruption while Configuring the SMR/S2CR register in Bypass mode. |