Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%

Snapdragon — Vulnerabilities & Security Advisories 940

All 940 CVE vulnerabilities found in Snapdragon, with AI-generated Chinese analysis, references, and POCs.

This page documents vulnerability aggregation for Qualcomm’s Snapdragon processor platforms. The collection encompasses security weaknesses affecting Snapdragon system-on-chips, including memory safety errors, privilege escalation flaws, and side-channel vulnerabilities. It covers incidents reported between 2018 and the present, ensuring a comprehensive historical view of security developments for this hardware family. Readers can use this resource to track Qualcomm’s advisory timelines and understand the evolution of weakness classes within the Snapdragon architecture. Users may also look up a specific product variant’s vulnerability history to assess long-term security posture. This aggregated data supports security researchers, hardware developers, and enterprise buyers in evaluating risks associated with mobile and embedded devices powered by Snapdragon technology. By centralizing these entries, the page facilitates deeper analysis of pattern trends in processor security and aids in compliance assessments. The content is organized to help users identify recurring issue types and correlate them with specific hardware revisions or software updates. This approach allows stakeholders to make informed decisions regarding device procurement and patch management strategies without sifting through disparate vendor announcements. The focus remains strictly on factual vulnerability records to provide a reliable reference point for technical analysis and risk mitigation planning.

Vendor: Qualcomm, Inc.

CVE IDTitleCVSSSeverityPublished
CVE-2023-33089 NULL Pointer Dereference in WLAN Firmware CWE-476 7.5 High2023-12-05
CVE-2023-33088 NULL pointer dereference in WLAN Firmware CWE-476 8.4 High2023-12-05
CVE-2023-33087 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core CWE-120 7.8 High2023-12-05
CVE-2023-33083 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host CWE-120 9.8 Critical2023-12-05
CVE-2023-33082 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host CWE-120 9.8 Critical2023-12-05
CVE-2023-33081 Buffer over-read in WLAN Firmware CWE-126 7.5 High2023-12-05
CVE-2023-33080 Buffer over-read in WLAN Firmware CWE-126 7.5 High2023-12-05
CVE-2023-33079 Use of Out-of-range Pointer Offset in Audio CWE-823 7.8 High2023-12-05
CVE-2023-33071 Improper Access Control in Automotive OS Platform Android CWE-284 8.4 High2023-12-05
CVE-2023-33070 Improper Authentication in Automotive OS CWE-287 7.1 High2023-12-05
CVE-2023-33063 Use After Free in DSP Services CWE-416 7.8 High2023-12-05
CVE-2023-33054 Improper Authentication in GPS HLOS Driver CWE-287 9.1 Critical2023-12-05
CVE-2023-33053 Improper Validation of Array Index in Kernel CWE-129 8.4 High2023-12-05
CVE-2023-33044 Reachable Assertion in Data Modem CWE-617 7.5 High2023-12-05
CVE-2023-33043 Reachable Assertion in Modem CWE-617 7.5 High2023-12-05
CVE-2023-33042 Improper Input Validation in Modem CWE-20 7.5 High2023-12-05
CVE-2023-33041 Reachable assertion in WLAN Firmware CWE-617 7.5 High2023-12-05
CVE-2023-33024 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer CWE-120 6.7 Medium2023-12-05
CVE-2023-33022 Integer Overflow to Buffer Overflow in HLOS CWE-680 8.4 High2023-12-05
CVE-2023-33018 Integer Overflow to Buffer Overflow in User Identity Module CWE-680 7.8 High2023-12-05
CVE-2023-33017 Buffer Copy Without Checking Size of Input in Boot CWE-120 7.8 High2023-12-05
CVE-2023-28588 Integer Overflow or Wraparound in Bluetooth Host CWE-190 7.5 High2023-12-05
CVE-2023-28587 Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller CWE-119 7.8 High2023-12-05
CVE-2023-28586 Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS CWE-119 6.0 Medium2023-12-05
CVE-2023-28585 Integer Overflow to Buffer Overflow in TZ Secure OS CWE-680 8.2 High2023-12-05
CVE-2023-28580 Buffer Copy Without Checking Size of Input in WLAN Host CWE-120 6.7 Medium2023-12-05
CVE-2023-28579 Buffer Copy Without Checking Size of Input in WLAN Host CWE-120 6.7 Medium2023-12-05
CVE-2023-28551 Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS CWE-119 7.8 High2023-12-05
CVE-2023-28550 Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance CWE-119 7.8 High2023-12-05
CVE-2023-28546 Buffer Copy Without Checking Size of Input in SPS Applications CWE-120 7.8 High2023-12-05

All 940 known CVE vulnerabilities affecting Snapdragon with full Chinese analysis, references, and POCs where available.