Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Snapdragon — Vulnerabilities & Security Advisories 997

All 997 CVE vulnerabilities found in Snapdragon, with AI-generated Chinese analysis, references, and POCs.

This page documents software weaknesses in the Snapdragon product developed by the vendor Qualcomm, categorized under common vulnerability classifications. The collection includes detailed records of security flaws affecting Qualcomm Snapdragon processors and related components, covering vulnerability disclosures from January 2015 through December 2024. This comprehensive dataset allows security professionals and researchers to systematically track vendor advisories, understand the prevalence and evolution of specific weakness classes within mobile system-on-chip architectures, and look up a product's historical vulnerability profile for risk assessment purposes. The entries provide essential context for identifying patterns in firmware, kernel, and driver vulnerabilities that impact device integrity and user privacy. By aggregating these findings, the resource supports the analysis of attack surfaces and aids in the development of mitigation strategies for connected devices utilizing Snapdragon technology. The information is intended to facilitate transparent security research and support the broader community in maintaining the safety and reliability of mobile ecosystems. This summary serves as a gateway to deeper technical details regarding reported issues, their resolution status, and associated impact levels across different product generations.

Vendor: Qualcomm, Inc.

CVE ID Title CVSS Severity Published
CVE-2023-28558 Improper Validation of Array Index in WLAN HAL CWE-129 7.8 High 2023-09-05
CVE-2023-28557 Improper Validation of Array Index in WLAN HAL CWE-129 7.8 High 2023-09-05
CVE-2023-28549 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL CWE-119 7.8 High 2023-09-05
CVE-2023-28548 Improper Validation of Array Index in WLAN HAL CWE-129 7.8 High 2023-09-05
CVE-2023-28544 Buffer Copy without Checking the Size of Input in WLAN Firmware CWE-120 7.8 High 2023-09-05
CVE-2023-28538 Stack-based Buffer Overflow in WIN Product CWE-121 8.4 High 2023-09-05
CVE-2023-21667 Buffer Over-read in Bluetooth HOST CWE-126 6.5 Medium 2023-09-05
CVE-2023-21664 Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform CWE-120 7.8 High 2023-09-05
CVE-2023-21663 Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display CWE-119 6.7 Medium 2023-09-05
CVE-2023-21662 Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform CWE-120 7.8 High 2023-09-05
CVE-2023-21655 Integer Overflow or Wraparound in Display CWE-190 6.7 Medium 2023-09-05
CVE-2023-21654 Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio CWE-119 6.7 Medium 2023-09-05
CVE-2023-21653 Reachable Assertion in Modem CWE-617 7.5 High 2023-09-05
CVE-2023-21646 Reachable Assertion in Modem CWE-617 7.5 High 2023-09-05
CVE-2023-21644 Integer Overflow to Buffer Overflow in RIL CWE-680 6.7 Medium 2023-09-05
CVE-2023-21636 Improper Validation of Array Index in Linux CWE-129 6.7 Medium 2023-09-05
CVE-2022-40534 Improper Validation of Array Index in Audio CWE-129 8.4 High 2023-09-05
CVE-2022-40524 Buffer over-read in Modem CWE-126 6.7 Medium 2023-09-05
CVE-2022-33275 Improper validation of array index in WLAN HAL CWE-129 8.4 High 2023-09-05
CVE-2022-33220 Buffer over-read in Automotive multimedia CWE-126 5.1 Medium 2023-09-05
CVE-2023-28577 Multiple Dmabuf Kernel Address UAF Vulnerability CWE-416 6.7 Medium 2023-08-08
CVE-2023-28576 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver CWE-367 6.4 Medium 2023-08-08
CVE-2023-28575 Multiple Type Confusion Vulnerability CWE-823 6.7 Medium 2023-08-08
CVE-2023-28561 Buffer Copy Without Checking Size of Input in QESL CWE-120 9.8 Critical 2023-08-08
CVE-2023-28555 Buffer Over-read in Audio CWE-126 7.5 High 2023-08-08
CVE-2023-28537 Integer Overflow or Wraparound in Audio CWE-190 8.4 High 2023-08-08
CVE-2023-22666 Integer Overflow or Wraparound in Audio CWE-190 8.4 High 2023-08-08
CVE-2023-21652 Key Management Errors in HLOS CWE-320 7.7 High 2023-08-08
CVE-2023-21651 Incorrect Type Conversion or Cast in Core CWE-704 9.3 Critical 2023-08-08
CVE-2023-21650 Improper Validation of Array Index in GPS HLOS Driver CWE-129 6.7 Medium 2023-08-08

All 997 known CVE vulnerabilities affecting Snapdragon with full Chinese analysis, references, and POCs where available.