ByteOS

Snapdragon Mobile, Snapdragon Wear

Product

Versions

Affected

MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, SDX20

Problem Types

Type	CWE ID	Description
text	N/A	Reachable Assertion in LTE

Type: text

CWE ID: N/A

Description: Reachable Assertion in LTE

References

Hyperlink	Resource
https://source.android.com/security/bulletin/2018-04-01	x_refsource_CONFIRM
http://www.securityfocus.com/bid/103671	vdb-entry x_refsource_BID

Hyperlink: https://source.android.com/security/bulletin/2018-04-01

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/103671

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://source.android.com/security/bulletin/2018-04-01	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/103671	vdb-entry x_refsource_BID x_transferred

Hyperlink: https://source.android.com/security/bulletin/2018-04-01

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/103671

Resource:

vdb-entry

x_refsource_BID

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:18 Apr, 2018 | 14:29

Updated At:24 Apr, 2018 | 12:04

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C

Type: Primary

Version: 3.0

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 7.8

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:N/I:N/A:C

CPE Matches

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

>>mdm9206_firmware>>-

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

>>mdm9206>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

>>mdm9607_firmware>>-

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

>>mdm9607>>-

cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*

>>mdm9615_firmware>>-

cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*

>>mdm9615>>-

cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*

>>mdm9625_firmware>>-

cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*

>>mdm9625>>-

cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*

>>mdm9635m_firmware>>-

cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*

>>mdm9635m>>-

cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*

>>mdm9640_firmware>>-

cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*

>>mdm9640>>-

cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*

>>mdm9645_firmware>>-

cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*

>>mdm9645>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

>>mdm9650_firmware>>-

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

>>mdm9650>>-

cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*

>>mdm9655_firmware>>-

cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*

>>mdm9655>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

>>msm8909w_firmware>>-

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

>>msm8909w>>-

cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*

>>sd_210_firmware>>-

cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*

>>sd_210>>-

cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*

>>sd_212_firmware>>-

cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*

>>sd_212>>-

cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*

>>sd_205_firmware>>-

cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*

>>sd_205>>-

cpe:2.3:o:qualcomm:sd_400_firmware:-:*:*:*:*:*:*:*

>>sd_400_firmware>>-

cpe:2.3:h:qualcomm:sd_400:-:*:*:*:*:*:*:*

>>sd_400>>-

cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*

>>sd_410_firmware>>-

cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*

>>sd_410>>-

cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*

>>sd_412_firmware>>-

cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*

>>sd_412>>-

cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*

>>sd_425_firmware>>-

cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*

>>sd_425>>-

cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*

>>sd_430_firmware>>-

cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*

>>sd_430>>-

cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*

>>sd_450_firmware>>-

cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*

>>sd_450>>-

cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*

>>sd_615_firmware>>-

cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*

>>sd_615>>-

cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*

>>sd_616_firmware>>-

cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*

>>sd_616>>-

cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*

>>sd_415_firmware>>-

cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*

>>sd_415>>-

cpe:2.3:o:qualcomm:sd_617_firmware:-:*:*:*:*:*:*:*

>>sd_617_firmware>>-

cpe:2.3:h:qualcomm:sd_617:-:*:*:*:*:*:*:*

>>sd_617>>-

cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*

>>sd_625_firmware>>-

cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*

>>sd_625>>-

cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*

>>sd_650_firmware>>-

cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*

>>sd_650>>-

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/103671	product-security@qualcomm.com	Third Party Advisory VDB Entry
https://source.android.com/security/bulletin/2018-04-01	product-security@qualcomm.com	Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/103671

Source: product-security@qualcomm.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://source.android.com/security/bulletin/2018-04-01

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

852Records found

CVE-2016-10415

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.35% / 56.80%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 17:54

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, dereference of an invalid input parameter could cause a denial of service.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2016-10464

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.24% / 46.43%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 19:56

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574AU, QCA9377, SD 210/SD 212/SD 205, SD 425, SD 600, SD 650/52, SD 808, SD 810, SD 820, and SDX20, lack of input validation for HCI H4 UART packet ID cause system denial of service.

CWE ID-CWE-20

Improper Input Validation

CVE-2015-9193

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.30% / 52.94%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:47

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, improper input validation could cause a memory overread and cause the app to crash.

CWE ID-CWE-20

Improper Input Validation

CVE-2021-30328

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.24% / 47.69%

7 Day CHG~0.00%

Published-01 Apr, 2022 | 04:40

Updated-03 Aug, 2024 | 22:32

Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Product-wcn3991_firmware sm6375 wcn3991 wsa8830 qca8337_firmware wcd9380_firmware qca8337 sd865_5g sdx55m_firmware wcn6856_firmware wcd9360_firmware sd888 sdx65 wsa8835 qcx315_firmware wcd9380 sd765g_firmware qca6595au_firmware qca6390_firmware sd690_5g wcd9370 qca6574a sd690_5g_firmware wcn6855_firmware qca6426 wcn6750 wcn3998 wcd9385_firmware sdxr2_5g_firmware sa515m sd_8_gen1_5g_firmware sm6375_firmware wsa8815 wcn6850 sd765 qca6426_firmware sm7315_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware sd768g_firmware wcd9375_firmware qca6595au qca8081_firmware wcn3998_firmware sm7250p_firmware sm7315 qca6391 wcd9360 qca6436_firmware sdx55m sdx65_firmware sa515m_firmware sdxr2_5g sd480_firmware wcn6851_firmware wcn3988_firmware qca6574au wsa8810_firmware sd765g wcd9341_firmware sd480 sd765_firmware sd870 qca6436 wcn6851 wsa8810 wcn6855 qca8081 wcn6856 wcd9385 wcd9341 sd768g qca6696_firmware sd750g sd870_firmware qca6696 qca6391_firmware qca6390 ar8035 sd750g_firmware wcd9375 wcd9370_firmware sdx55 sd888_firmware wsa8830_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7250p qcx315 sm8475 wcn6750_firmware ar8035_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-617

Reachable Assertion

CVE-2015-9222

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-19.03% / 95.09%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:36

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, processing erroneous bitstreams may result in a HW freeze. FW should detect the HW freeze based on watchdog timer, but because the watchdog timer is not enabled, an infinite loop occurs, resulting in a device freeze.

CWE ID-CWE-399

Not Available

CVE-2021-30340

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:10

Updated-03 Aug, 2024 | 22:32

Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Product-wcn3991_firmware sm6375 wcn3991 wsa8830 qca8337_firmware wcd9380_firmware sd780g qca8337 sd865_5g sdx55m_firmware wcn6856_firmware wcd9360_firmware sdx65 wsa8835 qcx315_firmware wcd9380 sd765g_firmware sd888_5g qca6595au_firmware qca6390_firmware sd690_5g wcd9370 qca6574a sd690_5g_firmware wcn6855_firmware sm7325p qca6426 wcn6750 wcn3998 wcd9385_firmware sdxr2_5g_firmware sa515m sd_8_gen1_5g_firmware sm6375_firmware wsa8815 sm7325p_firmware wcn6850 sd765 qca6426_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware sd768g_firmware wcd9375_firmware qca6595au qca8081_firmware wcn3998_firmware sm7250p_firmware qca6391 sdx55m wcd9360 qca6436_firmware wcn6740_firmware sd778g sdx65_firmware sa515m_firmware qcs6490 qcm6490_firmware sdxr2_5g sd480_firmware wcn6851_firmware wcn3988_firmware qca6574au sd778g_firmware wsa8810_firmware sd765g wcd9341_firmware sd480 sd765_firmware sd870 qca6436 wcn6851 wsa8810 wcn6855 qca8081 wcn6856 wcd9385 wcd9341 sd768g qca6696_firmware qcs6490_firmware sd750g sd870_firmware wcn6740 qca6696 qca6391_firmware qca6390 ar8035 sd750g_firmware wcd9375 sd780g_firmware wcd9370_firmware sdx55 wsa8830_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7250p qcx315 sm8475 wcn6750_firmware ar8035_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-617

Reachable Assertion

CVE-2019-10549

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.25% / 47.76%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, Rennell, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2019-10591

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.37% / 57.98%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Null pointer dereference can happen when parsing udta atom which is non-standard and having invalid depth in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8939, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 sdm429_firmware msm8905_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware qcs405 sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware apq8053 saipan_firmware sm6150_firmware apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 msm8996 saipan nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2019-10578

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.37% / 57.98%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCS605, QM215, Rennell, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qca6574au sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware msm8937 mdm9207c_firmware msm8996_firmware mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2019-10485

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.24% / 47.69%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 22:24

Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Product-mdm9150_firmware mdm9635m_firmware qcm2150_firmware mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8976_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware mdm9655_firmware sdm660 sc8180x_firmware sdm710 qm215 mdm9607 apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 qm215_firmware msm8976 sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 mdm9615_firmware apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2021-1925

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.24% / 47.69%

7 Day CHG~0.00%

Published-07 May, 2021 | 09:10

Updated-03 Aug, 2024 | 16:25

Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product-qfe3100 qfe2080fc_firmware qca9377_firmware qfs2580 qpm5679_firmware sm6250p_firmware ipq4028_firmware qfe4455fc_firmware qca8337 ar9380 ipq8173_firmware qfs2608_firmware qfs2530 qpm8870_firmware qln1030 qpa8688 pm6125 qcn5124 qat5522_firmware wcn3950_firmware pm8150a sc8180x\+sdx55 qdm5670 qca6595au_firmware qpm5541_firmware qpa5581_firmware sa6155 pm7150l qpa8821 pm8998_firmware wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware sa415m wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 qsw8573_firmware qsm8350_firmware qsw8574_firmware qsm8350 sd460_firmware smb2351_firmware sd6905g qpa4360_firmware qca8081_firmware wcn3998_firmware pm855p qca6420 pm6150a qpm6670_firmware ipq8070_firmware ipq8078a_firmware pm660_firmware pm8150b ipq8072_firmware sa8155_firmware qfe2101 qca6430 qat3522 qfe4455fc pmr735a wcd9340 sdm830_firmware sd765g sdr660 qfs2630_firmware sdr865 qdm5620_firmware qca9888_firmware smr545 qca6696_firmware qln5020 wcd9371 sd870_firmware qca1062 qcn5154_firmware pmm855au_firmware sa8150p pm6350 qdm5621 qtc800s qat3514_firmware qca9992_firmware sd660 qet6105 sd712 pm640p_firmware sd660_firmware qcn5121 qcn5022_firmware qcn7606_firmware qat5516_firmware pm6150l sd8885g pm855l_firmware qca6428_firmware qtc410s ipq4018_firmware wcn3991 qca9980_firmware qpa8801 ipq8078 pm8150l_firmware ipq8173 qat5533_firmware sdx55m_firmware sdxr25g qpa8673_firmware pm6150 smb1354_firmware sd670_firmware qca6574 qfs2630 qpa8842 csr8811_firmware sdr052_firmware wcd9380 sd850 qln4640 qcs410 qpm5579_firmware smb1380_firmware pmk8350_firmware qcn5024 pm855p_firmware smb1381 qfe3100_firmware pm7250 qpa8803 qcn9012_firmware sdxr25g_firmware qdm2301 ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware pmp8074_firmware qdm5621_firmware qdm2301_firmware qpm6375 ipq6028 ipq8064 sd835 pmp8074 wcn3980_firmware wcn6745_firmware sd730 pm660l_firmware pm6250_firmware pm8008 pm8350b_firmware qtm525_firmware pme605_firmware qcn5064_firmware pme605 sd678_firmware ipq8078_firmware qpm5621_firmware qcn5054 qln1021aq_firmware qcs603 rsw8577 qpa6560_firmware qca9994 qpa8802_firmware qln4640_firmware qca9980 qpm5621 qcn9024_firmware ipq8174_firmware pm8009_firmware qpm6582 qfs2580_firmware sd670 wcn6855 qcn7605_firmware pm8150l pmi8998_firmware qcs610_firmware sa6145p pm660a_firmware ar8031 qpm5577 wtr2965 sdm630_firmware sa2150p qca6391_firmware pm8150 qca4024 wcd9370_firmware qat3516_firmware sdx55 qcn5021_firmware csra6640 qat3555_firmware qpa8803_firmware pm855b smb2351 qln1031 qcn7606 qpm5870 wsa8830 pm660 qet6110_firmware qca1062_firmware qpm6325 pm6125_firmware qbt1500 qpa5581 csrb31024 pmx24_firmware qbt1500_firmware qpm5870_firmware qca9992 qet6100 pmm855au qca6420_firmware smb1396 pm7150a sd675_firmware ipq8072 pm8350 qpa5461_firmware qpa4361_firmware pm8350c_firmware qca6426 wcn3990_firmware qca9984_firmware qca9377 qpm5641 wcd9385_firmware qdm5650_firmware qpa4340_firmware wcd9326_firmware whs9410 pm7250_firmware sdr845_firmware qdm5620 qln1021aq ipq8074a smb1380 pmk8002_firmware qsw6310_firmware sa8155 qln1031_firmware qdm4650_firmware qcn5122_firmware pmm6155au_firmware qat5533 sdx55_firmware qcn6023_firmware sm7250p_firmware qsm7250_firmware qpm6670 pm7150l_firmware qca6584au qpm4641 qat5515_firmware ipq8174 pm855 qpm8830_firmware pm8250 qcn5052 qfe2082fc_firmware sdm630 qdm4643 qfs2530_firmware sa415m_firmware pmx55 qpm4641_firmware qcn9074 wcn3988_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware qpm5677 qat5515 qat3514 wcd9326 wcd9335 pm6350_firmware qcn6023 pm8004_firmware sdr8150_firmware qtc800h_firmware qpm5620 qpm4630 qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 sc8180x\+sdx55_firmware pmm8195au sm6250_firmware qln4642 qpm5677_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware smr525_firmware pm8998 wtr3925_firmware qpm8820_firmware qln1020_firmware qpm6621_firmware pm670a_firmware qcm6125_firmware pmx55_firmware qbt1000_firmware qca6595 pm8150_firmware smb1398_firmware qpm8830 qat5522 pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qcn5154 qca8075_firmware qpa4361 ipq6005_firmware qpm4640_firmware qpm5577_firmware wcn6855_firmware qdm5679_firmware pm8350c smr525 qca9888 qca6310_firmware ipq8070a_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware qca6175a sd765 qca6574a_firmware qpm4630_firmware qat3555 sd850_firmware qpa5461 qfe2082fc sd8c_firmware wtr2965_firmware pm670_firmware csrb31024_firmware qfs2608 qcn9070_firmware sd480_firmware qln1036aq qtc801s ipq6028_firmware ipq8072a_firmware qpm5641_firmware qca9889_firmware sd710 qcn5122 pm8008_firmware qln1035bd_firmware qpm6621 pmr735a_firmware pmx50 qcn5022 sdr8250 sd768g qca1064_firmware qln1030_firmware pm8004 pm640l pmk8002 qca8075 qcn6024 qcn9022 sd845 sd455_firmware sdm830 ipq6000_firmware qcs410_firmware qca6175a_firmware qpa5580 qpm5579 qca2066 sa6150p_firmware qcs610 qcn5550 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware qca4024_firmware pm855a_firmware ipq8078a qtc800h sa8150p_firmware qcs2290 sdr8250_firmware qca6335 qcn5064 csra6620_firmware qcs605_firmware qln1020 smr546_firmware qdm5671 csra6640_firmware pmc1000h qpm4650_firmware qat3518 sd8c sdr425_firmware smr526_firmware ipq8076a qpa5460 pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca6428 qdm5652 qca6574au_firmware qcn5164_firmware ipq8071 qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware wcd9360 qca6438_firmware pmx50_firmware qpa8675_firmware whs9410_firmware sdr735g qpa5460_firmware wcn3999 qdm3301_firmware qsm7250 ipq4029_firmware qcs6125 ipq6010 sd662_firmware qcs405 qfe3440fc qdm2308_firmware rsw8577_firmware qca6436 wcn6851 sa6155p qcs603_firmware qpa6560 sdr675_firmware pmc7180 wcd9341 qca2066_firmware qca6431 qdm4643_firmware qet4100_firmware sd750g wcn3910_firmware qpm5657 qpm5875_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 qca6438 wtr3925 qfe2080fc sdr052 sa8195p_firmware smb1390 qca9898 ipq4028 qet4100 qpa8686_firmware ipq5018_firmware qpm6585 qca8337_firmware wcd9380_firmware smb1355 ipq8072a qln4650 qtc800t_firmware sdr735g_firmware wgr7640 ipq8076a_firmware qat5568 qdm5671_firmware qet5100 qca6564au qpa8801_firmware qtm527_firmware sd636 wcn6856_firmware pm8005_firmware qcn5164 qet4101_firmware pm7250b qln4642_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware qcn5054_firmware qet4200aq_firmware sdx50m_firmware sdr735 smb1395 pm660l ar8151 smr526 qca8072_firmware wtr5975 qca6430_firmware pmk8003 qcn5052_firmware qtc801s_firmware qat3522_firmware wcd9335_firmware wcn3980 qca6335_firmware qsw8573 qcs605 qbt1000 sd7c qca6320 wcn3910 qca6426_firmware pm8350_firmware qca9984 qcn9024 pm8009 qpa8675 qcn5550_firmware sdr051_firmware sdx55m ipq8064_firmware pm670a qca6421_firmware qat3518_firmware qsw8574 pmi8998 sd6905g_firmware ar8031_firmware pm855l wcn6851_firmware qdm5670_firmware ipq8070 sd8655g pm7150a_firmware pm8150b_firmware smr545_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware sd480 sd870 qcn5121_firmware sd8885g_firmware pm670 qdm5677 pm8005 ipq6018 pm855_firmware qdm2302 pmm6155au sdxr1 pm855b_firmware qca6595_firmware qcs405_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware qln4650_firmware qpm5875 qet5100m sa8155p sd675 qet4101 qat3516 pm670l qpm5658 ar8035_firmware qcm2290 qpm5658_firmware qcn5024_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware qfe4465fc qcn9070 sd678 sdr051 qln5030 qcs2290_firmware pm4125 pmi632 qpa2625_firmware pm456 sd7c_firmware qfe2081fc_firmware pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qpm4621 qcn9072 qet6100_firmware pm670l_firmware sdr660g sd455 sd765g_firmware qpa8686 ipq8069_firmware qca6390_firmware ipq6000 sd730_firmware wcd9370 qcn5152_firmware sdr425 pmr525_firmware qca6584au_firmware qcn9000_firmware ipq5018 ar8151_firmware pmi632_firmware qcn7605 qpm5541 qat5516 wcn6745 sd662 qpa8821_firmware qcn5124_firmware sdr660g_firmware pm8350bh qca1064 pm3003a qca6320_firmware qca6595au wcn3999_firmware qca6436_firmware qtc800t smb1354 ipq5010 qca6564au_firmware qdm2305 sa6155p_firmware qca6310 qpm8820 qpm2630 qfe2081fc qln5020_firmware sa515m_firmware qca9990 smb1398 sa6145p_firmware sdr675 sm6250 sd712_firmware wsa8810_firmware sd765_firmware qdm5677_firmware qca8081 qet4200aq ipq8071a qca6174a_firmware ipq8071a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware ar8035 csr8811 qpa8673 qdm2310 qln5030_firmware qcn9100_firmware smb1396_firmware wcn6850_firmware wsa8835_firmware qca6564a smr546 pmx24 qet6110 qln5040 qca8072 qcm2290_firmware qpm8895 sdr845 qpm5670 wcn3990 qcn9000 qtm527 qfe3440fc_firmware ar9380_firmware pmk8350 qcn9012 pmc7180_firmware pm8350b qdm2307_firmware wsa8835 qpm5657_firmware sm6250p qln1035bd pm855a sdr660_firmware ipq4018 qca6574a smb1390_firmware qca9889 qca6174a ipq8074 qca9994_firmware qpm4640 qet5100m_firmware ipq8076_firmware qpm4650 qtm525 sa515m sa2150p_firmware wtr6955 sd855 sm4125_firmware sd8cx ipq8076 wtr6955_firmware pm640p qcn5021 ipq8069 qcn5152 sd768g_firmware sdr865_firmware qfe4465fc_firmware pm8250_firmware sd460 qca6391 sd8cx_firmware sdxr1_firmware smb1351 ipq6005 aqt1000_firmware qcn9100 qpm8895_firmware pm660a qpa4340 sdx50m pm640a sdr8150 smb1395_firmware qdm4650 pmd9655 ipq8074_firmware qca6574au sa8155p_firmware qsw6310 qet6105_firmware sd8655g_firmware wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware qat5568_firmware qdm2308 qat3550 wcn6856 qdm5679 sd835_firmware ipq6010_firmware pm3003a_firmware qca6696 qtc800s_firmware smb1381_firmware sd845_firmware qpa2625 sa6150p qcn9022_firmware qpa8688_firmware qca9990_firmware ipq8070a pmm8195au_firmware qcn9072_firmware sm7250p sd720g_firmware ipq8071_firmware qcn9074_firmware qpm4621_firmware ipq4029 sd636_firmware pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-617

Reachable Assertion

CVE-2021-1948

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.48% / 64.09%

7 Day CHG~0.00%

Published-09 Sep, 2021 | 07:35

Updated-03 Aug, 2024 | 16:25

Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product-fsm10055 qca2066 sm7250 sa6150p_firmware sm6250p_firmware qcs610 ipq4028_firmware qcn5550 qca8337 ar9380 ipq8173_firmware qca9561_firmware qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 qca2062 qcn5064 csra6620_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 ipq8076a sd710_firmware sd460_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 apq8053_firmware qca6438_firmware ipq8070_firmware ipq8065 ipq8078a_firmware wcn3999 qrb5165_firmware ipq5028 qca7500 ipq8072_firmware ipq4029_firmware qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 sc8280xp_firmware wcd9340 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca2066_firmware qca6696_firmware wcd9371 sd870_firmware sd750g qca1062 qcn5154_firmware wcn3910_firmware sd_8cx sa8150p wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware sd855_firmware wcn3988 qca6438 sd660_firmware sa8195p_firmware qcn5121 qcn5022_firmware wcn6750_firmware qca9898 ipq4028 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware msm8996au_firmware ipq8076a_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qca9558 sd670_firmware qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcn5024 sd690_5g_firmware ipq4019_firmware sdx50m_firmware qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 sd7c pmp8074_firmware wcn3910 qca6320 mdm9650_firmware sd_8c_firmware qca6426_firmware qca9984 ipq6028 ipq8064 sd835 pmp8074 qcn9024 wcn3980_firmware sd730 qcn5550_firmware sdx55m ipq8064_firmware qca2062_firmware wcn6740_firmware msm8953 qcn5064_firmware sd678_firmware apq8064au_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware ipq8070 qca9896 qcn5502 qca9994 qca9887_firmware qca9980 sd670 qcn9024_firmware ipq8174_firmware sd_636_firmware qca6564a_firmware qca9880 qcm4290_firmware sd480 sd870 wcn6855 qcn5121_firmware qcs610_firmware sa6145p ipq6018 qca9886_firmware sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware sa8145p sdm630_firmware qca6391_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware sc8280xp apq8053 qcn5021_firmware csra6640 sa8155p sd675 qca9531_firmware ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware qcn5500 wsa8830 sd678 qca9561 qcn9070 sa8145p_firmware qca1062_firmware qcs2290_firmware fsm10056 sm7250_firmware sd7c_firmware csrb31024 qca9563_firmware mdm9650 sd_636 csra6620 fsm10055_firmware qcn9072 qca9880_firmware qca9992 qcs4290 sd765g_firmware qca6420_firmware ipq8069_firmware qca6390_firmware qca2064_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6564 qca6426 qca6584au_firmware wcn3990_firmware qcn9000_firmware qca9984_firmware ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware qca9563 ipq8074a qca2065 sd662 qcn5124_firmware qca9982 qca1064 sa8155 qca6320_firmware wcn3680b_firmware qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware qca6595au wcn3999_firmware qca6436_firmware ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qca6310 ipq8174 sa515m_firmware qca9990 sdxr2_5g qcn5052 sdm630 sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware sm6250 sd778g_firmware sa8195p wsa8810_firmware qca6694 sd765_firmware wcd9326 wcd9335 qca8081 qca9982_firmware qcn6023 ipq8071a ipq8071a_firmware qcs4290_firmware wcd9385 qca2065_firmware qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 ar8035 sm6250_firmware csr8811 apq8064au ipq4019 qca6694_firmware msm8953_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware qcx315 qca6564a qcm6125_firmware qca9882 qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 ar9380_firmware qcn9012 sd888 qca9558_firmware qca9896_firmware qcn6122_firmware ipq8065_firmware qcx315_firmware wsa8835 msm8996au sd665_firmware sd888_5g sm6250p qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware wcn6855_firmware qca9889 qca9888 qca6310_firmware sm7325 ipq8074 qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 qcn5502_firmware sd855 sm4125_firmware sd665 ipq8076 sd765 qca9887 qca6574a_firmware qcn5021 ipq8069 qcn5152 sd768g_firmware sd460 qca6391 sdxr1_firmware ipq6005 aqt1000_firmware qcn9100 qcm4290 csrb31024_firmware sdx50m qca9882_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware qca9531 ipq8074_firmware qca6574au qca9889_firmware sd710 sa8155p_firmware qcn5122 wcd9341_firmware qcm6125 wsa8810 qcn5500_firmware wcn6856 sd_8c qcn5022 wcn3680b sd835_firmware qca6564_firmware sd768g ipq6010_firmware qca1064_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn9072_firmware ipq6000_firmware sd720g_firmware ipq8071_firmware qcn9074_firmware ipq4029 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

CVE-2021-1936

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.25% / 47.76%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 16:25

Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Product-wcn3991_firmware wsa8830 sd678 sa6150p_firmware sm6250p_firmware sa8145p_firmware qcs610 sm7250 qcs2290_firmware sm7250_firmware qca6431_firmware sd_636 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 qca6335 msm8917 sd690_5g sd730_firmware sd_455_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qca6564 qcs6125_firmware qca6426 sd632 wcn3998 sdw2500_firmware wcd9371_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcn3615_firmware wcn3660b sd450_firmware sd662 sd460_firmware sa8155 qca6320_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3615 msm8909w wcn3998_firmware apq8009w_firmware qca6420 qca6436_firmware apq8053_firmware wcn3610_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 pm8937 qcs6490 sd429 sdxr2_5g qcs6125 sa8155_firmware sd662_firmware sdm630 wcn3988_firmware qca6430 sa6145p_firmware sd205 qca6421 sd429_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 wcn6851 sa6155p qcs603_firmware msm8937 qcs4290_firmware wcd9385 wcn3660_firmware pm8937_firmware qca6431 qca6696_firmware qcs6490_firmware wcd9371 sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 apq8064au sa8150p sm6250_firmware wcn3910_firmware msm8953_firmware wsa8830_firmware sda429w msm8917_firmware sd210 sd855_firmware sd865_5g_firmware wcn3620_firmware qcm6490 sd888_5g_firmware wcn3988 wcn3620 wcn6850_firmware wsa8835_firmware sa8195p_firmware apq8017 qca6564a wcn6750_firmware sd450 wcn3610 qcm6125_firmware qcm2290_firmware wcn3991 sda429w_firmware wcd9380_firmware sd_675 sdm429w msm8996au_firmware sd780g sd865_5g qca6595 qca6564au sdx55m_firmware wcn6856_firmware sd888 msm8909w_firmware qca6574 msm8996au sd632_firmware sdm429w_firmware sd665_firmware wsa8835 wcd9380 sd888_5g sm6250p qualcomm215 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6310_firmware sm7325 qca6430_firmware wcn6750 sd439_firmware qca6335_firmware qca6574_firmware qcs605 sd855 sm4125_firmware wcn6850 sd665 wcn3910 qca6320 msm8937_firmware sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware sd460 qca6391 sd730 sdx55m sdxr1_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware apq8064au_firmware qcm4290 qcm6490_firmware sdx50m wcn3680_firmware sd480_firmware qcs603 wcn6851_firmware sd_455 qca6574au sa8155p_firmware sd_636_firmware sd205_firmware qca6564a_firmware apq8009w qcm6125 qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware wcn6856 sa6145p wcn3680b qca6564_firmware sdxr1 sd768g apq8096au qca6595_firmware sa8145p wcn6740 qca6696 sdm630_firmware qca6391_firmware sd845_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sdw2500 apq8053 apq8096au_firmware sa8155p sd675 sd845 sdx55 sd439 sd720g_firmware wcn3660 qcm2290 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2021-1941

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.37% / 58.10%

7 Day CHG~0.00%

Published-09 Sep, 2021 | 07:35

Updated-03 Aug, 2024 | 16:25

Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product-qca9377_firmware fsm10055 qca2066 sm7250 sa6150p_firmware sm6250p_firmware qcs610 ipq4028_firmware qcn5550 qca8337 ar9380 ipq8173_firmware qca6431_firmware qca9561_firmware qcn5124 qca4024_firmware wcn3950_firmware ipq8078a sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 qca2062 qcn5064 csra6620_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 ipq8076a sd710_firmware sd460_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 qca6438_firmware ipq8070_firmware ipq8065 ipq8078a_firmware wcn3999 qrb5165_firmware qca7500 ipq8072_firmware ipq4029_firmware qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 sc8280xp_firmware wcd9340 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qca9888_firmware wcd9341 ipq8068_firmware qca2066_firmware qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g qca1062 qcn5154_firmware wcn3910_firmware sd_8cx sa8150p wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware sd855_firmware wcn3988 qca6438 sd660_firmware sa8195p_firmware qcn5121 qcn5022_firmware qca9898 ipq4028 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware msm8996au_firmware ipq8076a_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qca9558 sd670_firmware qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware ipq4019_firmware sdx50m_firmware qca8072_firmware qca9985 qcn9012_firmware qca6174 qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 sd7c pmp8074_firmware wcn3910 qca6320 mdm9650_firmware sd_8c_firmware qca6426_firmware qca9984 ipq6028 ipq8064 sd835 pmp8074 qcn9024 wcn3980_firmware sd730 qcn5550_firmware sdx55m ipq8064_firmware qca6421_firmware qca2062_firmware wcn6740_firmware qcn5064_firmware sd678_firmware apq8064au_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware ipq8070 qca9896 qcn5502 qca9994 qca6164_firmware qca9887_firmware qca9980 sd670 qcn9024_firmware ipq8174_firmware sd_636_firmware qca6564a_firmware qca9880 qcm4290_firmware sd870 wcn6855 qcn5121_firmware qcs610_firmware sa6145p ipq6018 qca9886_firmware sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware sa8145p qca6164 sdm630_firmware qca6391_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware sc8280xp qcn5021_firmware sa8155p csra6640 sd675 qca9531_firmware ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware qcn5500 wsa8830 sd678 qca9561 qcn9070 sa8145p_firmware qca1062_firmware qcs2290_firmware fsm10056 sm7250_firmware sd7c_firmware csrb31024 qca9563_firmware mdm9650 sd_636 csra6620 fsm10055_firmware qcn9072 qca9880_firmware qca9992 qcs4290 sd765g_firmware qca6420_firmware ipq8069_firmware qca6390_firmware qca2064_firmware sd690_5g ipq6000 qca6174_firmware sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6564 qca6426 qca6584au_firmware wcn3990_firmware qcn9000_firmware qca9984_firmware qca9377 ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware qca9563 ipq8074a qca2065 sd662 qcn5124_firmware qca9982 qca1064 sa8155 qca6320_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware qca6436_firmware ipq5010 qca6564au_firmware qca6584au sa6155p_firmware qca6310 ipq8174 sa515m_firmware qca9990 sdxr2_5g qcn5052 sdm630 sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware qca6421 sm6250 sa8195p wsa8810_firmware qca6694 sd765_firmware wcd9326 wcd9335 qca8081 qca9982_firmware qcn6023 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qca2065_firmware qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 ar8035 sm6250_firmware csr8811 apq8064au ipq4019 qca6694_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware qca6564a qcm6125_firmware qca9882 qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 ar9380_firmware qcn9012 sd888 qca9558_firmware qca9896_firmware wsa8835 ipq8065_firmware msm8996au sd665_firmware sm6250p qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware wcn6855_firmware qca9889 qca6174a qca9888 qca6310_firmware ipq8074 qca9994_firmware ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 qcn5502_firmware sd855 sm4125_firmware sd665 ipq8076 qca6175a sd765 qca9887 qca6574a_firmware qcn5021 ipq8069 qcn5152 sd768g_firmware sd850_firmware sd460 qca6391 sdxr1_firmware ipq6005 aqt1000_firmware qcn9100 qcm4290 csrb31024_firmware sdx50m qca9882_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qca9531 ipq8074_firmware qca6574au qca9889_firmware sd710 sa8155p_firmware qcn5122 wcd9341_firmware qcm6125 wsa8810 qcn5500_firmware wcn6856 sd_8c qcn5022 sd835_firmware qca6564_firmware sd768g ipq6010_firmware qca1064_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn9072_firmware ipq6000_firmware sd720g_firmware ipq8071_firmware qcn9074_firmware qcs410_firmware ipq4029 qca6175a_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

CVE-2016-10448

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.05%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 01:55

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, a simultaneous command post for addSA or updateSA on same SA leads to memory corruption. APIs addSA and updateSA APIs access the global variable ipsec_sa_list[] outside of mutex protection.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-10433

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.1||HIGH

EPSS-0.17% / 38.41%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 19:56

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 820, and SD 820A, TOCTOU vulnerability during SSD image decryption may cause memory corruption.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2016-10474

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 17:29

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, if the buffer length passed to the RIL interface is too large, the buffer size calculation may overflow, resulting in an undersize allocation for the buffer, and subsequently buffer overwrite.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-10239

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.73%

7 Day CHG~0.00%

Published-16 May, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.

Product-android All Qualcomm Products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2016-10484

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 01:32

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, and SDX20, if a RPMB listener is registered with a very small buffer size, the calculation of the maximum transfer size for read and write operations may underflow, resulting in buffer overflow.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-10419

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 04:19

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, SD 850, and SDX20, when initializing scheduler object service request, an out of bounds access could occur due to uninitialized object number.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9161

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 03:14

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, TOCTOU condition could lead to a buffer overflow in function playready_reader_bind().

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9157

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 40.08%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 19:00

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in widevine_dash_cmd_handler(), rsp buffers are passed off to widevine commands. These rsp buffers have values in them, such as buffer lengths, that need to be validated to ensure that no buffer overflow/over-reads happen. However, rsp buffers are not always in locked memory, meaning a time-of-check, time-of-use issue can occur where we check that the value is valid, but then a race condition occurs where this memory is swapped out with a different, possibly out of range, value.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2015-9204

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 17:49

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 808, and SD 810, if cchFriendlyName is greater than TZ_PR_MAX_NAME_LEN in function playready_leavedomain_generate_challenge(), a buffer overread occurs.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9212

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:49

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, and SD 800, lack of input validation while processing TZ_PR_CMD_SAVE_KEY command could lead to a buffer overread.

Product-sd_212_firmware sd_800_firmware sd_412 sd_412_firmware sd_400 sd_210 msm8909w_firmware sd_410_firmware sd_205 sd_800 sd_210_firmware sd_410 msm8909w sd_400_firmware sd_205_firmware sd_212 Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2015-9063

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 47.79%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involving a remote UIM client.

Product-android Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9187

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 41.16%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 17:19

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, lack of buffer length validation in pvr_cmd_handler leads to unauthorized access to secure memory.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9203

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:37

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, lack of input validation in playready_set_domainid could lead to a buffer overread.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9195

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:46

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9650, MDM9655, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 808, SD 810, and SDX20, in a QTEE syscall handler, HLOS can cause a buffer overflow to occur.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9144

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 21:56

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, while processing scheduling message information, a buffer overflow can occur.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9148

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 04:25

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, SD 400, SD 425, SD 430, SD 450, SD 600, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, in the Diag User-PD command registration function, a length variable used during buffer allocation is not checked, so if it is very large, an integer overflow followed by a buffer overflow occurs.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2015-9184

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 04:13

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, and SD 835, lack of length checking in wv_dash_core_load_keys_v8() could lead to a buffer overflow vulnerability.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9183

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.21% / 42.82%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 00:31

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in TQS QSEE application, while parsing "Set Certificates" command an integer overflow may result in buffer overflow.

Product-sd_652 sd_800_firmware sd_412 sd_808_firmware sd_412_firmware sd_810 sd_650 sd_410_firmware sd_808 sd_800 sd_652_firmware sd_410 sd_617 sd_810_firmware sd_650_firmware sd_617_firmware Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2015-9028

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.73%

7 Day CHG~0.00%

Published-13 Jun, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine.

Product-android All Qualcomm products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-8593

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 40.04%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing.

Product-android Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9186

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:44

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in a PlayReady API function, a buffer over-read can occur.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9143

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 17:54

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, and SDX20, when reading CDT from eMMC with a very large meta offset (>size of default CDT-array compiled in bootloader) for one of the CDBs, a buffer overflow occurs.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9071

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.52%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall.

Product-android All Qualcomm products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-11196

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.14%

7 Day CHG~0.00%

Published-12 Nov, 2020 | 10:00

Updated-04 Aug, 2024 | 11:28

u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8064AU, APQ8096, APQ8096AU, APQ8096SG, APQ8098, MDM9206, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QCS6125, QM215, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SDA429W, SDA640, SDA660, SDA670, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM455, SDM630, SDM632, SDM636, SDM640, SDM660, SDM670, SDM710, SDM830, SDM845, SDW2500, SDX20, SDX20M, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330

Product-sm7250 sa6150p_firmware sm6250p_firmware qcs610 sm6125 sdm640 sdm450_firmware sdm632 sm7250_firmware mdm9650 qcs4290 sa8150p_firmware sa6155 apq8009_firmware msm8917 sdm670 qcs605_firmware qcs6125_firmware apq8096sg sm6115 sm7150p sda845_firmware sdw2500_firmware apq8098 sm4250 sm4125 mdm9206_firmware apq8037 sa8155 msm8905_firmware sda660 sdx55_firmware sa6155_firmware sxr1130 msm8909w sm7250p_firmware apq8009w_firmware sxr2130p apq8053_firmware sda845 sdx20m sa6155p_firmware sxr2130p_firmware sda640 sdm450 sdm636_firmware apq8098_firmware qcs6125 msm8998_firmware sa8155_firmware sdm630 sm8250_firmware qcs405 msm8996sg_firmware qm215 sm4250_firmware sm6250 sa8195p apq8017_firmware sdm710_firmware sdm830_firmware sxr1120 sa6155p qcs603_firmware msm8937 msm8905 qcs4290_firmware sm8150_firmware msm8909 sm7150p_firmware sxr2130_firmware sa6145_firmware apq8064au sa8150p sm6250_firmware msm8953_firmware sm6150_firmware sda429w msm8917_firmware msm8998 sm7225_firmware sdx20_firmware sm8150 sa8195p_firmware sdm640_firmware apq8017 msm8996 sxr1120_firmware sm6125_firmware sm8150p qcm6125_firmware sm6115_firmware sda429w_firmware apq8096_firmware sdm429w msm8996au_firmware sdm632_firmware wcd9330 sdm845 apq8096 sdx55m_firmware sdm439 sm6150p sm6115p_firmware sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware apq8096sg_firmware sm7150 sm6250p qcs410 sda640_firmware sxr2130 sdx50m_firmware mdm9206 sdm670_firmware sdm636 sda670 sa6145 sm7225 qcs605 sm6115p sm4125_firmware sdm455_firmware msm8937_firmware mdm9650_firmware sdm429_firmware sxr1130_firmware apq8009 wcd9330_firmware msm8909_firmware sdx55m sm6150p_firmware sdm455 sm6350 sm7125 sm4250p_firmware msm8920 msm8953 apq8064au_firmware qcm4290 msm8996sg sdx50m sdx20 qcs603 sdm660 msm8920_firmware sm6350_firmware sa8155p_firmware sdm710 apq8009w sda670_firmware qcm6125 qcm4290_firmware sdx20m_firmware qcs610_firmware msm8996_firmware sm4250p apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware sm7125_firmware sa6150p sdw2500 msm8940 apq8053 apq8096au_firmware sa8155p sdx55 sm8150p_firmware sm8250 apq8037_firmware sm7250p sdm830 qcs410_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2019-10618

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.09% / 25.82%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 22:31

Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QCA6390

Product-qca6390 qca6390_firmware Snapdragon Connectivity

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-1973

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

7 Day CHG~0.00%

Published-12 Nov, 2021 | 06:15

Updated-03 Aug, 2024 | 16:25

A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware fsm10055 sm7250 mdm9640_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sc8180x\+sdx55 qcs2290 qca6595au_firmware qca6335 msm8917 mdm8215 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware mdm8615m_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sm4125 sd720g mdm9628 mdm9206_firmware qsw8573_firmware sm6375_firmware wcn3660b sd450_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware mdm9230_firmware wcn7850 mdm8215m qca6574au_firmware mdm9630 wcd9375_firmware qca8081_firmware wcn3998_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware qca4004_firmware sd662_firmware mdm9615m qca6430 wcd9306_firmware wcd9340 sd765g qualcomm215_firmware fsm10056_firmware qca6436 wcn6851 qcs603_firmware wcn7851_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g mdm8215_firmware wcn3910_firmware sd_8cx mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware wcn7850_firmware msm8208_firmware wcn6750_firmware sd450 wcn3610 msm8608 mdm9640 sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware qet4101_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware qca6174 qca6430_firmware wcd9335_firmware sd439_firmware wcn3980 qca6335_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware sd_8c_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m qca6421_firmware ar6003_firmware msm8953 sd821_firmware sd678_firmware apq8064au_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware sdxr1 apq8096au mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sdx55 apq8053 sa8155p sd675 sd439 qet4101 wcn3660 qca9379 ar8035_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcs2290_firmware fsm10056 sm7250_firmware sd7c_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 fsm10055_firmware qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware mdm9310_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware wcn3990_firmware sm8450 qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 wcd9326_firmware mdm9615m_firmware wcn3615_firmware sd662 apq8037 sa8155 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 qca6310 sm6225 wcn7851 sd429 sa515m_firmware qcs6490 sdxr2_5g qca9367 sdm630 mdm9607_firmware sd821 msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware qca6694 sm8450_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 msm8976 ar8035 sm6250_firmware sc8180x\+sdx55_firmware apq8064au qca6694_firmware msm8953_firmware qca6694au sda429w msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 ar6003 csr6030_firmware qca6564a mdm9630_firmware qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd865_5g sm8450p_firmware msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware sm7325 wcn6750 mdm9615 mdm9205 sa515m qca6574_firmware sd855 sm4125_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 sd460 qca6391 sdxr1_firmware mdm9310 aqt1000_firmware msm8920 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m sdx20 sd480_firmware msm8920_firmware mdm9215 sd_455 sm6225_firmware qca6574au sd710 mdm8215m_firmware mdm9607 sa8155p_firmware sd205_firmware wcd9341_firmware qcm6125 wsa8810 sm8450p mdm9150 wcn6856 sd_8c wcn3680b sd835_firmware sd768g qca6696 sd845_firmware msm8608_firmware sdw2500 msm8940 apq8096au_firmware sd845 mdm9615_firmware apq8037_firmware sd720g_firmware sdx12 qcs410_firmware mdm9330 sd850 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-9998

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 53.81%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 04:29

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 808, SD 810, SD 820, and SDX20, while processing firmware image signature, the internal buffer may overflow if the firmware signature size is large.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-13918

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 31.79%

7 Day CHG~0.00%

Published-04 Apr, 2019 | 15:09

Updated-05 Aug, 2024 | 09:21

kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDX24, SM7150

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-13893

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.33%

7 Day CHG~0.00%

Published-11 Feb, 2019 | 15:00

Updated-05 Aug, 2024 | 09:14

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Out of bound mask range access caused by using possible old value of msg mask table count while copying masks to userspace.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-33246

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 8.26%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Use of out-of-range pointer offset in Audio

Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.

Product-sda429w_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware qcs610 msm8996au_firmware sd865_5g qca6564au sdx55m_firmware msm8996au wcn3950_firmware wcd9380 sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware qcs410 wcd9370 qca6574a qca6426 qca6430_firmware wcn3980 wcn3998 sdxr2_5g_firmware wcn3950 sd855 wsa8815 wcn6850 qca6426_firmware qca6574a_firmware qca6574au_firmware qca6595au wcn3998_firmware wcn3980_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware sdx55m aqt1000_firmware qca6564au_firmware sa6155p_firmware sdxr2_5g wcn6851_firmware qca6430 qca6574au qcn9074 sa6145p_firmware sa8155p_firmware qca6564a_firmware sa8195p wsa8810_firmware wcd9341_firmware wsa8810 sd870 qca6436 wcn6851 sa6155p qcs610_firmware sa6145p wcd9341 apq8096au qca6696_firmware sa8145p sd870_firmware qca6696 qca6391_firmware qca6390 wcd9370_firmware aqt1000 sa8150p sa6150p apq8096au_firmware sa8155p sda429w sd855_firmware sd865_5g_firmware wsa8815_firmware wcn6850_firmware sa8195p_firmware qcn9074_firmware qcs410_firmware qca6564a wcn3610 Snapdragon aqt1000_firmware qca6564au_firmware sa6155p_firmware sda429w_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware msm8996au_firmware wcn6851_firmware sdx55m_firmware sa6145p_firmware sa8155p_firmware qca6564a_firmware wcn3950_firmware wsa8810_firmware sa8150p_firmware wcd9341_firmware qca6420_firmware qca6595au_firmware qca6390_firmware qcs610_firmware qca6696_firmware qca6430_firmware sd870_firmware qca6391_firmware sdxr2_5g_firmware wcd9370_firmware apq8096au_firmware sd855_firmware sd865_5g_firmware qca6426_firmware wcn6850_firmware wsa8815_firmware qca6574a_firmware qca6574au_firmware sa8195p_firmware qcn9074_firmware qcs410_firmware wcn3980_firmware wcn3998_firmware wcn3610_firmware qca6436_firmware

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-13907

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.39% / 58.93%

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 09:14

While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key operations are invoked in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware ipq8074 sd_450 mdm9635m sd_8cx_firmware sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sd_652_firmware qca8081_firmware sxr1130 msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sd_412 qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware qcs405 sdm630 sd_625 ipq8074_firmware sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware pq4019 qca8081 qualcomm_215_firmware mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware pq4019_firmware sd_850_firmware mdm9655 sdm439_firmware qcs405_firmware sd_712_firmware sd_412_firmware sd_855_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-13912

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.11% / 29.30%

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 09:14

Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.

Product-sd_850 mdm9150_firmware mdm9640_firmware sd_820a msm8996au_firmware sd_439 snapdragon_mobile_firmware sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_845_firmware sd_820a_firmware qcs605_firmware mdm9206 snapdragon_industrial_internet_of_things_firmware sd_425_firmware snapdragon_auto_firmware snapdragon_mobile sdx24_firmware sd_625_firmware snapdragon_voice_\&_music_firmware snapdragon_consumer_internet_of_things sd_845 mdm9206_firmware qcs605 snapdragon_auto snapdragon_voice_\&_music sd_835_firmware mdm9650_firmware snapdragon_connectivity sd_835 sda660 sd_210_firmware msm8909w sd_205_firmware sd_212 sd_712 snapdragon_consumer_internet_of_things_firmware sdx20 sd_425 sdm660 sdm630 mdm9607_firmware sd_710_firmware sd_625 sd_210 mdm9607 sd_636_firmware sd_820_firmware sd_439_firmware mdm9150 sd_429_firmware sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware snapdragon_connectivity_firmware sd_670 sd_710 sdx20_firmware sd_205 sdm660_firmware snapdragon_industrial_internet_of_things mdm9640 Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-13888

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.19%

7 Day CHG~0.00%

Published-11 Feb, 2019 | 15:00

Updated-05 Aug, 2024 | 09:14

There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDM630, SDM660, ZZ_QCS605.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-33267

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 8.26%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 08:01

Improper restriction of operations within the bounds of memory buffer in Linux

Memory corruption in Linux while sending DRM request.

Product-wcn3991_firmware wcn3991 wcd9380_firmware sa6150p_firmware sa8145p_firmware qcs610 sdm429w sd865_5g qca6564au sm8150-ac sdm429 sdm429w_firmware wcn3950_firmware wcd9380 sa8150p_firmware qca6420_firmware snapdragon_wear_4100\+_platform_firmware qca6390_firmware qcs410 wcd9370 sxr2130 qca6574a snapdragon_wear_4100\+_platform wcn685x-5_firmware qca6564 qca6426 wcn685x-1 qca6430_firmware wcn3980 sm8250-ab wcn3998 wcn3950 wcn3660b sd855 wsa8815 sdm429_firmware snapdragon_xr2_5g_platform_firmware qca6426_firmware wcn3660b_firmware sa8155 snapdragon_x55_5g_modem-rf_system qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcn3998_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware sm8250-ab_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware snapdragon_x50_5g_modem-rf_system_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware snapdragon_xr2_5g_platform sa8155_firmware wcn685x-5 sm8250_firmware sm8250-ac qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware wsa8810 qca6436 sa6155p qcs610_firmware sm8150-ac_firmware qsm8250 sa6145p wcn3680b wcn685x-1_firmware qca6564_firmware sm8150_firmware sxr2130_firmware wcd9341 qca6696_firmware sa8145p qca6696 qca6391_firmware qca6390 wcd9370_firmware aqt1000 sa8150p sa6150p sdx55 snapdragon_x50_5g_modem-rf_system sa8155p sm8250-ac_firmware sm8250 sd855_firmware sd865_5g_firmware sm8150 wcn3620_firmware wsa8815_firmware wcn3620 sa8195p_firmware qcs410_firmware wcn3610 qsm8250_firmware Snapdragon aqt1000_firmware qca6564au_firmware sa6155p_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware fastconnect_6900_firmware sa8155_firmware sa6145p_firmware sa8155p_firmware sdm429w_firmware wcn3950_firmware wsa8810_firmware sa8150p_firmware wcd9341_firmware qca6420_firmware qcs610_firmware qca6564_firmware sxr2130_firmware qca6696_firmware qca6430_firmware qca6391_firmware snapdragon_855_mobile_platform_firmware wcd9370_firmware sd855_firmware sd865_5g_firmware snapdragon_xr2_5g_platform_firmware wcn3620_firmware qca6426_firmware wcn3660b_firmware wsa8815_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware sa8195p_firmware sdx55_firmware snapdragon_429_mobile_platform_firmware snapdragon_865_5g_mobile_platform_firmware wcn3680b_firmware fastconnect_6800_firmware qcs410_firmware snapdragon_x55_5g_modem-rf_system_firmware wcn3980_firmware wcn3610_firmware qca6436_firmware snapdragon_x50_5g_modem-rf_system_firmware qsm8250_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-11860

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.52%

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a potential buffer over flow could occur while processing the ndp event due to lack of check on the message length.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-11928

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.46%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:33

Updated-05 Aug, 2024 | 08:24

Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCS605, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150, SXR1130