Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Snapdragon — Vulnerabilities & Security Advisories 997

All 997 CVE vulnerabilities found in Snapdragon, with AI-generated Chinese analysis, references, and POCs.

This page documents software weaknesses in the Snapdragon product developed by the vendor Qualcomm, categorized under common vulnerability classifications. The collection includes detailed records of security flaws affecting Qualcomm Snapdragon processors and related components, covering vulnerability disclosures from January 2015 through December 2024. This comprehensive dataset allows security professionals and researchers to systematically track vendor advisories, understand the prevalence and evolution of specific weakness classes within mobile system-on-chip architectures, and look up a product's historical vulnerability profile for risk assessment purposes. The entries provide essential context for identifying patterns in firmware, kernel, and driver vulnerabilities that impact device integrity and user privacy. By aggregating these findings, the resource supports the analysis of attack surfaces and aids in the development of mitigation strategies for connected devices utilizing Snapdragon technology. The information is intended to facilitate transparent security research and support the broader community in maintaining the safety and reliability of mobile ecosystems. This summary serves as a gateway to deeper technical details regarding reported issues, their resolution status, and associated impact levels across different product generations.

Vendor: Qualcomm, Inc.

CVE ID Title CVSS Severity Published
CVE-2023-43543 Use After Free in Audio CWE-416 6.7 Medium 2024-06-03
CVE-2023-43542 Buffer Copy Without Checking Size of Input in Trusted Execution Environment CWE-120 7.8 High 2024-06-03
CVE-2023-43538 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS CWE-120 9.3 Critical 2024-06-03
CVE-2023-43537 Buffer Over-read in WLAN Host CWE-126 6.5 Medium 2024-06-03
CVE-2024-23354 Use After Free in Graphics Linux CWE-416 8.4 High 2024-05-06
CVE-2024-23351 Improper Access Control in Graphics Linux CWE-284 8.4 High 2024-05-06
CVE-2024-21480 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio CWE-120 7.3 High 2024-05-06
CVE-2024-21477 Buffer Over-read in WLAN Firmware CWE-126 7.5 High 2024-05-06
CVE-2024-21476 Improper Input Validation in Secure Processor CWE-20 7.8 High 2024-05-06
CVE-2024-21475 Use of Out-of-range Pointer Offset in Video CWE-823 7.8 High 2024-05-06
CVE-2024-21474 Stack-based Buffer Overflow in PMIC CWE-121 8.4 High 2024-05-06
CVE-2024-21471 Use After Free in Graphics Linux CWE-416 8.4 High 2024-05-06
CVE-2023-43531 Access of Uninitialized Pointer in SPS Applications CWE-824 8.4 High 2024-05-06
CVE-2023-43530 Integer Overflow or Wraparound in HLOS CWE-190 5.9 Medium 2024-05-06
CVE-2023-43529 Reachable Assertion in Data Modem CWE-617 7.5 High 2024-05-06
CVE-2023-43528 Buffer Over-read in Audio CWE-126 6.1 Medium 2024-05-06
CVE-2023-43527 Buffer Over-read in Video CWE-126 6.8 Medium 2024-05-06
CVE-2023-43526 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio CWE-120 6.7 Medium 2024-05-06
CVE-2023-43525 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio CWE-120 6.7 Medium 2024-05-06
CVE-2023-43524 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio CWE-120 6.7 Medium 2024-05-06
CVE-2023-43521 Use After Free in HLOS CWE-416 6.7 Medium 2024-05-06
CVE-2023-33119 Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor CWE-367 8.4 High 2024-05-06
CVE-2024-21473 Improper Input Validation in WIN SON CWE-20 9.8 Critical 2024-04-01
CVE-2024-21472 Use After Free in Kernel CWE-416 8.4 High 2024-04-01
CVE-2024-21470 Integer Overflow to Buffer Overflow in Graphics Windows CWE-680 8.4 High 2024-04-01
CVE-2024-21468 Use After Free in Kernel CWE-416 8.4 High 2024-04-01
CVE-2024-21463 Buffer Copy Without Checking Size of Input in Audio CWE-120 7.3 High 2024-04-01
CVE-2024-21454 Integer Overflow to Buffer Overflow in Automotive Telematics CWE-680 7.5 High 2024-04-01
CVE-2024-21453 Improper Input Validation in Automotive Telematics CWE-20 7.5 High 2024-04-01
CVE-2024-21452 Improper Input Validation in Automotive Telematics CWE-20 7.3 High 2024-04-01

All 997 known CVE vulnerabilities affecting Snapdragon with full Chinese analysis, references, and POCs where available.