Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Snapdragon — Vulnerabilities & Security Advisories 997

All 997 CVE vulnerabilities found in Snapdragon, with AI-generated Chinese analysis, references, and POCs.

This page documents software weaknesses in the Snapdragon product developed by the vendor Qualcomm, categorized under common vulnerability classifications. The collection includes detailed records of security flaws affecting Qualcomm Snapdragon processors and related components, covering vulnerability disclosures from January 2015 through December 2024. This comprehensive dataset allows security professionals and researchers to systematically track vendor advisories, understand the prevalence and evolution of specific weakness classes within mobile system-on-chip architectures, and look up a product's historical vulnerability profile for risk assessment purposes. The entries provide essential context for identifying patterns in firmware, kernel, and driver vulnerabilities that impact device integrity and user privacy. By aggregating these findings, the resource supports the analysis of attack surfaces and aids in the development of mitigation strategies for connected devices utilizing Snapdragon technology. The information is intended to facilitate transparent security research and support the broader community in maintaining the safety and reliability of mobile ecosystems. This summary serves as a gateway to deeper technical details regarding reported issues, their resolution status, and associated impact levels across different product generations.

Vendor: Qualcomm, Inc.

CVE ID Title CVSS Severity Published
CVE-2023-43515 Buffer copy without checking size of input (Classic buffer overflow) in HLOS CWE-120 6.6 Medium 2024-04-01
CVE-2023-33115 Buffer Over-read in Trusted Execution Environment CWE-126 7.8 High 2024-04-01
CVE-2023-33111 Improper Validation of Array Index in Audio CWE-129 5.5 Medium 2024-04-01
CVE-2023-33101 Incorrect Type Conversion or Cast in Multi-Mode Call Processor CWE-704 7.5 High 2024-04-01
CVE-2023-33100 Improper input validation in Multi-Mode Call Processor CWE-20 7.5 High 2024-04-01
CVE-2023-33099 Improper Input Validation in Multi-Mode Call Processor CWE-20 7.5 High 2024-04-01
CVE-2023-33023 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications CWE-120 8.4 High 2024-04-01
CVE-2023-28547 Buffer Copy Without Checking Size of Input in SPS Applications CWE-120 8.4 High 2024-04-01
CVE-2023-43553 Use of Out-of-range Pointer Offset in WLAN HOST CWE-823 9.8 Critical 2024-03-04
CVE-2023-43552 Use After Free in WLAN Host Communication CWE-416 9.8 Critical 2024-03-04
CVE-2023-43550 Integer Overflow or Wraparound in Core Services CWE-190 7.8 High 2024-03-04
CVE-2023-43549 Stack-based Buffer Overflow in WLAN HAL CWE-121 8.4 High 2024-03-04
CVE-2023-43548 Buffer Copy Without Checking Size of Input in Video CWE-120 7.3 High 2024-03-04
CVE-2023-43547 Use After Free in Automotive Multimedia CWE-416 8.4 High 2024-03-04
CVE-2023-43546 Use After Free in Automotive Multimedia CWE-416 8.4 High 2024-03-04
CVE-2023-43541 NULL Pointer Dereference in Windows Graphics CWE-476 8.4 High 2024-03-04
CVE-2023-43540 Buffer Copy Without Checking Size of Input in Bluetooth HOST CWE-120 8.4 High 2024-03-04
CVE-2023-43539 Buffer Over-read in WLAN Firmware CWE-126 7.5 High 2024-03-04
CVE-2023-33105 Configuration Issue in WLAN Host and Firmware CWE-16 7.5 High 2024-03-04
CVE-2023-33104 Improper input Validation in Multi-Mode Call Processor CWE-20 7.5 High 2024-03-04
CVE-2023-33103 Improper Input Validation in Multi-Mode Call Processor CWE-20 7.5 High 2024-03-04
CVE-2023-33096 Reachable Assertion in Multi-Mode Call Processor CWE-617 7.5 High 2024-03-04
CVE-2023-33095 Reachable Assertion in Multi-Mode Call Processor CWE-617 7.5 High 2024-03-04
CVE-2023-33090 Buffer Over-read in Audio CWE-126 5.5 Medium 2024-03-04
CVE-2023-33086 Improper Release of Memory Before Removing Last Reference in Data Modem CWE-401 7.5 High 2024-03-04
CVE-2023-33084 Improper Release of Memory Before Removing Last Reference in Data Modem CWE-401 7.5 High 2024-03-04
CVE-2023-33078 Buffer Over-read in DSP Services CWE-126 5.1 Medium 2024-03-04
CVE-2023-33066 Use of Out-of-range Pointer Offset in Audio CWE-823 8.4 High 2024-03-04
CVE-2023-28582 Buffer Copy Without Checking Size of Input in Data Modem CWE-120 9.8 Critical 2024-03-04
CVE-2023-28578 Improper Input Validation in Services CWE-20 9.3 Critical 2024-03-04

All 997 known CVE vulnerabilities affecting Snapdragon with full Chinese analysis, references, and POCs where available.