Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Snapdragon — Vulnerabilities & Security Advisories 997

All 997 CVE vulnerabilities found in Snapdragon, with AI-generated Chinese analysis, references, and POCs.

This page documents software weaknesses in the Snapdragon product developed by the vendor Qualcomm, categorized under common vulnerability classifications. The collection includes detailed records of security flaws affecting Qualcomm Snapdragon processors and related components, covering vulnerability disclosures from January 2015 through December 2024. This comprehensive dataset allows security professionals and researchers to systematically track vendor advisories, understand the prevalence and evolution of specific weakness classes within mobile system-on-chip architectures, and look up a product's historical vulnerability profile for risk assessment purposes. The entries provide essential context for identifying patterns in firmware, kernel, and driver vulnerabilities that impact device integrity and user privacy. By aggregating these findings, the resource supports the analysis of attack surfaces and aids in the development of mitigation strategies for connected devices utilizing Snapdragon technology. The information is intended to facilitate transparent security research and support the broader community in maintaining the safety and reliability of mobile ecosystems. This summary serves as a gateway to deeper technical details regarding reported issues, their resolution status, and associated impact levels across different product generations.

Vendor: Qualcomm, Inc.

CVE ID Title CVSS Severity Published
CVE-2021-30299 Improper Input Validation in Audio CWE-20 6.7 Medium 2024-11-22
CVE-2017-9711 Permissions, Privileges, and Access Controls in Data CWE-264 6.7 Medium 2024-11-22
CVE-2024-38424 Use After Free in GPS CWE-416 7.8 High 2024-11-04
CVE-2024-38423 Buffer Copy Without Checking Size of Input in Graphics Linux CWE-120 7.8 High 2024-11-04
CVE-2024-38422 Integer Overflow to Buffer Overflow in Audio CWE-680 7.8 High 2024-11-04
CVE-2024-38421 Use After Free in Graphics Linux CWE-416 7.8 High 2024-11-04
CVE-2024-38419 Use After Free in Automotive GPU CWE-416 7.8 High 2024-11-04
CVE-2024-38415 Use After Free in Computer Vision CWE-416 7.8 High 2024-11-04
CVE-2024-38410 Stack-based Buffer Overflow in WLAN Windows Host CWE-121 7.8 High 2024-11-04
CVE-2024-38409 Buffer Copy Without Checking Size of Input in WLAN Windows Host CWE-120 7.8 High 2024-11-04
CVE-2024-38408 Cryptographic Issues in BT Controller CWE-310 8.2 High 2024-11-04
CVE-2024-38407 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera CWE-367 7.8 High 2024-11-04
CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera CWE-367 7.8 High 2024-11-04
CVE-2024-38405 Buffer Over-read in WLAN Host CWE-126 7.5 High 2024-11-04
CVE-2024-38403 Buffer Over-read in WLAN Firmware CWE-126 7.5 High 2024-11-04
CVE-2024-33068 Use After Free in WLAN Host Communication CWE-416 7.5 High 2024-11-04
CVE-2024-33033 Use After Free in ComputerVision CWE-416 6.7 Medium 2024-11-04
CVE-2024-33032 Improper Validation of Array Index in Camera_Linux CWE-129 6.7 Medium 2024-11-04
CVE-2024-33031 Improper Input Validation in RIL CWE-20 6.7 Medium 2024-11-04
CVE-2024-33030 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance CWE-120 6.7 Medium 2024-11-04
CVE-2024-33029 Use After Free in DSP Services CWE-416 6.7 Medium 2024-11-04
CVE-2024-23386 Improper Input Validation in Video CWE-20 6.7 Medium 2024-11-04
CVE-2024-23385 Reachable Assertion in Modem CWE-617 7.5 High 2024-11-04
CVE-2024-23377 Use of Out-of-range Pointer Offset in ComputerVision CWE-823 6.7 Medium 2024-11-04
CVE-2024-43047 Use After Free in DSP Service CWE-416 7.8 High 2024-10-07
CVE-2024-38425 Improper Authorization in Performance CWE-285 6.1 Medium 2024-10-07
CVE-2024-38399 Use After Free in Graphics CWE-416 8.4 High 2024-10-07
CVE-2024-38397 Buffer Over-read in WLAN Host Communication CWE-126 7.5 High 2024-10-07
CVE-2024-33073 Buffer Over-read in WLAN Host Communication CWE-126 8.2 High 2024-10-07
CVE-2024-33071 Buffer Over-read in WLAN Host Communication CWE-126 7.5 High 2024-10-07

All 997 known CVE vulnerabilities affecting Snapdragon with full Chinese analysis, references, and POCs where available.