Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Snapdragon — Vulnerabilities & Security Advisories 997

All 997 CVE vulnerabilities found in Snapdragon, with AI-generated Chinese analysis, references, and POCs.

This page documents software weaknesses in the Snapdragon product developed by the vendor Qualcomm, categorized under common vulnerability classifications. The collection includes detailed records of security flaws affecting Qualcomm Snapdragon processors and related components, covering vulnerability disclosures from January 2015 through December 2024. This comprehensive dataset allows security professionals and researchers to systematically track vendor advisories, understand the prevalence and evolution of specific weakness classes within mobile system-on-chip architectures, and look up a product's historical vulnerability profile for risk assessment purposes. The entries provide essential context for identifying patterns in firmware, kernel, and driver vulnerabilities that impact device integrity and user privacy. By aggregating these findings, the resource supports the analysis of attack surfaces and aids in the development of mitigation strategies for connected devices utilizing Snapdragon technology. The information is intended to facilitate transparent security research and support the broader community in maintaining the safety and reliability of mobile ecosystems. This summary serves as a gateway to deeper technical details regarding reported issues, their resolution status, and associated impact levels across different product generations.

Vendor: Qualcomm, Inc.

CVE ID Title CVSS Severity Published
CVE-2023-21649 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN CWE-120 6.7 Medium 2023-08-08
CVE-2023-21648 Integer Overflow to Buffer Overflow in RIL CWE-680 6.7 Medium 2023-08-08
CVE-2023-21647 Improper Input Validation in Bluetooth HOST CWE-20 6.5 Medium 2023-08-08
CVE-2023-21643 Untrusted Pointer Dereference in Automotive CWE-822 9.1 Critical 2023-08-08
CVE-2023-21627 Incorrect Type Conversion or Cast in Trusted Execution Environment CWE-20 6.7 Medium 2023-08-08
CVE-2023-21626 Improper Authentication in HLOS. CWE-320 7.1 High 2023-08-08
CVE-2023-21625 Buffer Over-read in Network Services CWE-126 8.2 High 2023-08-08
CVE-2022-40510 Buffer copy without checking size of input in Audio. CWE-457 9.8 Critical 2023-08-08
CVE-2023-28542 Buffer Over-read in WLAN HOST CWE-126 7.8 High 2023-07-04
CVE-2023-28541 Buffer Over-read in WLAN Host CWE-126 7.8 High 2023-07-04
CVE-2023-24854 Stack-based Buffer Overflow in WLAN HOST CWE-121 7.8 High 2023-07-04
CVE-2023-24851 Buffer Copy Without Checking Size of Input in WLAN HOST CWE-120 7.8 High 2023-07-04
CVE-2023-22667 Integer Overflow or Wraparound in Audio CWE-190 8.4 High 2023-07-04
CVE-2023-22387 Use of Out-of-range Pointer Offset in Qualcomm IPC CWE-823 7.8 High 2023-07-04
CVE-2023-22386 Buffer Copy Without Checking Size of Input in WLAN HOST CWE-120 7.8 High 2023-07-04
CVE-2023-21672 Use After Free in Audio CWE-416 8.4 High 2023-07-04
CVE-2023-21641 Permissions, Privileges, and Access Controls in Display CWE-264 6.6 Medium 2023-07-04
CVE-2023-21640 Buffer Copy Without Checking Size of Input in Linux CWE-120 6.7 Medium 2023-07-04
CVE-2023-21639 Buffer Copy Without Checking the Size of Input in Audio CWE-120 6.7 Medium 2023-07-04
CVE-2023-21638 Incorrect Type Conversion or Cast in Video CWE-704 6.7 Medium 2023-07-04
CVE-2023-21637 Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux CWE-119 6.7 Medium 2023-07-04
CVE-2023-21635 Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity CWE-120 6.7 Medium 2023-07-04
CVE-2023-21633 Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux CWE-119 6.7 Medium 2023-07-04
CVE-2023-21631 Improper Input Validation in Modem CWE-20 7.5 High 2023-07-04
CVE-2023-21629 Double Free in Modem CWE-415 6.8 Medium 2023-07-04
CVE-2023-21624 Information Exposure in DSP Services CWE-200 6.2 Medium 2023-07-04
CVE-2023-21670 Improper Access control in GPU Subsystem CWE-284 7.8 High 2023-06-06
CVE-2023-21669 Buffer Over-read in WLAN HOST CWE-126 8.2 High 2023-06-06
CVE-2023-21661 Buffer Over-read in WLAN Firmware CWE-126 7.5 High 2023-06-06
CVE-2023-21660 Buffer Over-read in WLAN Firmware CWE-126 7.5 High 2023-06-06

All 997 known CVE vulnerabilities affecting Snapdragon with full Chinese analysis, references, and POCs where available.