Vulnerabilidades do Qualcomm Snapdragon

CVE-2025-27064 Média · 6.1 CWE-126 04/11/2025

Buffer Over-read in Core Services

Information disclosure while registering commands from clients with diag through diagHal.

CVE-2025-47355 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in DSP Service

Memory corruption while invoking remote procedure IOCTL calls.

CVE-2025-47354 Alta · 7.8 CWE-416 09/10/2025

Use After Free in DSP Service

Memory corruption while allocating buffers in DSP service.

CVE-2025-47351 Alta · 7.8 CWE-190 09/10/2025

Integer Overflow or Wraparound in DSP Service

Memory corruption while processing user buffers.

CVE-2025-47349 Alta · 7.8 CWE-823 09/10/2025

Use of Out-of-range Pointer Offset in DSP Service

Memory corruption while processing an escape call.

CVE-2025-47347 Alta · 7.8 CWE-121 09/10/2025

Stack-based Buffer Overflow in Automotive Software platform based on QNX

Memory corruption while processing control commands in the virtual memory management interface.

CVE-2025-47342 Alta · 7.1 CWE-416 09/10/2025

Use After Free in BT Controller

Transient DOS may occur when multi-profile concurrency arises with QHS enabled.

CVE-2025-47341 Alta · 7.8 CWE-120 09/10/2025

Buffer Copy Without Checking Size of Input in Camera

memory corruption while processing an image encoding completion event.

CVE-2025-47340 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in DSP Service

Memory corruption while processing IOCTL call to get the mapping.

CVE-2025-47338 Alta · 7.8 CWE-822 09/10/2025

Untrusted Pointer Dereference in DSP Service

Memory corruption while processing escape commands from userspace.

CVE-2025-27060 Alta · 8.8 CWE-822 09/10/2025

Untrusted Pointer Dereference in TZ Firmware

Memory corruption while performing SCM call with malformed inputs.

CVE-2025-27059 Alta · 8.8 CWE-823 09/10/2025

Use of Out-of-range Pointer Offset in TZ Firmware

Memory corruption while performing SCM call.

CVE-2025-27054 Alta · 7.8 CWE-787 09/10/2025

Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot.

CVE-2025-27053 Alta · 7.8 CWE-131 09/10/2025

Incorrect Calculation of Buffer Size in HLOS

Memory corruption during PlayReady APP usecase while processing TA commands.

CVE-2025-27049 Média · 5.5 CWE-126 09/10/2025

Buffer Over-read in Camera

Transient DOS while processing IOCTL call for image encoding.

CVE-2025-27048 Alta · 7.8 CWE-822 09/10/2025

Untrusted Pointer Dereference in Camera

Memory corruption while processing camera platform driver IOCTL calls.

CVE-2025-27045 Média · 6.1 CWE-126 09/10/2025

Buffer Over-read in Video

Information disclosure while processing batch command execution in Video driver.

CVE-2025-27041 Média · 5.5 CWE-126 09/10/2025

Buffer Over-read in Video

Transient DOS while processing video packets received from video firmware.

CVE-2025-27040 Média · 6.5 CWE-20 09/10/2025

Improper Input Validation in TZ Firmware

Information disclosure may occur while processing the hypervisor log.

CVE-2025-27039 Média · 6.6 CWE-390 09/10/2025

Detection of Error Condition Without Action in Computer Vision

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.

CVE-2025-21479 Alta · 8.6 KEV Alta · 56 Exploit público CWE-863 03/06/2025

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVE-2025-27038 Alta · 7.5 KEV Alta · 50 CWE-416 03/06/2025

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

CVE-2025-21480 Alta · 8.6 KEV Alta · 47 CWE-863 03/06/2025

Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVE-2024-43047 Alta · 7.8 KEV Alta · 49 CWE-416 07/10/2024

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption while maintaining memory maps of HLOS memory.

CVE-2023-33106 Alta · 7.8 KEV Alta · 49 CWE-119 05/12/2023

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.