CVE-2017-18279 | ByteOS Network

Vulnerability Details :

CVE-2017-18279

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-06 May, 2019 | 22:58

Updated At-05 Aug, 2024 | 21:13

Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:06 May, 2019 | 22:58

Updated At:05 Aug, 2024 | 21:13

▼CVE Numbering Authority (CNA)

Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016.

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Small Cell SoC, Snapdragon Mobile, Snapdragon Wear

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	CWE680: Integer Overflow to Buffer Overflow

Type: text

CWE ID: N/A

Description: CWE680: Integer Overflow to Buffer Overflow

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins	x_refsource_MISC

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins	x_refsource_MISC x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:06 May, 2019 | 23:29

Updated At:16 Apr, 2021 | 18:01

Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear in FSM9055, FSM9955, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Qualcomm Technologies, Inc.

>>fsm9055_firmware>>-

cpe:2.3:o:qualcomm:fsm9055_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:fsm9055:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>fsm9955_firmware>>-

cpe:2.3:o:qualcomm:fsm9955_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:fsm9955:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq4019_firmware>>-

cpe:2.3:o:qualcomm:ipq4019_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9640_firmware>>-

cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909w_firmware>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996au_firmware>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca9531_firmware>>-

cpe:2.3:o:qualcomm:qca9531_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca9531:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca9558_firmware>>-

cpe:2.3:o:qualcomm:qca9558_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca9558:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca9563_firmware>>-

cpe:2.3:o:qualcomm:qca9563_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca9563:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca9880_firmware>>-

cpe:2.3:o:qualcomm:qca9880_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca9880:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca9886_firmware>>-

cpe:2.3:o:qualcomm:qca9886_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca9886:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca9980_firmware>>-

cpe:2.3:o:qualcomm:qca9980_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca9980:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_210_firmware>>-

cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_212_firmware>>-

cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_205_firmware>>-

cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_425_firmware>>-

cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_427_firmware>>-

cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_430_firmware>>-

cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_435_firmware>>-

cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_450_firmware>>-

cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_615_firmware>>-

cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_616_firmware>>-

cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-190	Primary	nvd@nist.gov

CWE ID: CWE-190

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

1191Records found

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 10.82%

||

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Return of Stack Variable Address in Buses

Memory corruption when BTFM client sends new messages over Slimbus to ADSP.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware qcm8550_firmware qcs410_firmware sa6150p_firmware sw5100p ipq9574 qca6595 qcs610_firmware snapdragon_8\+_gen_1 wcd9335 wcd9370 qca8081_firmware qca6696 qam8620p_firmware wcd9340_firmware sa8530p wcd9341_firmware wcd9395_firmware qcn6024 wcn6740_firmware fastconnect_6700 snapdragon_695_5g sa4150p snapdragon_888_5g wsa8832_firmware snapdragon_x35_5g_modem-rf_system_firmware qca8337 qdu1110 wcd9395 snapdragon_4_gen_2_firmware qca6574au_firmware sm6370 qam8295p snapdragon_x12_lte_firmware wcd9341 qca6574au wcd9390 sa8620p_firmware wsa8810_firmware wsa8845h_firmware csra6640 sa9000p_firmware srv1h snapdragon_778g\+_5g_firmware fsm20055 snapdragon_8\+_gen_2 qcs5430 fsm10055 sd835_firmware qcn6024_firmware qcm5430 qcm5430_firmware video_collaboration_vc1_platform_firmware sa4155p snapdragon_888\+_5g_firmware sa8770p qcm6125_firmware ssg2115p sa8540p qsm8350_firmware snapdragon_4_gen_2 fastconnect_6900 snapdragon_8_gen_2_firmware video_collaboration_vc1_platform immersive_home_326_firmware qru1032_firmware qep8111 sa7255p sm8635 fsm10056_firmware wcd9385_firmware ipq9574_firmware qca6310 qam8255p_firmware snapdragon_778g_5g sdx61 qcs4490 snapdragon_662_firmware wsa8845 sa6155p qcm6125 qca6564au_firmware wsa8810 qam8650p video_collaboration_vc5_platform_firmware sa9000p qdu1000_firmware srv1h_firmware qca6595au sxr2250p_firmware sm7315_firmware qdu1010 sa6155p_firmware wsa8840 srv1m_firmware qcs8550_firmware sd835 qdu1210_firmware qcn9012 qcs4490_firmware snapdragon_7c\+_gen_3_compute_firmware snapdragon_680_4g wcd9370_firmware qca9367 snapdragon_8_gen_2 snapdragon_480\+_5g_firmware qdu1110_firmware snapdragon_835_pc_firmware qdu1000 sa7255p_firmware qca6574a qca6174a snapdragon_695_5g_firmware sa8195p wcd9340 qcs8250_firmware qdu1210 talynplus snapdragon_auto_5g_modem-rf_gen_2 qcm6490 sa8540p_firmware sm8550p_firmware sxr2250p qcm8550 wcn3988 sm6370_firmware fsm20055_firmware qcn9274 qcn9024 sa8775p qca6574 sxr2230p_firmware qcn9011 sa8775p_firmware qamsrv1h smart_audio_400 qcn9024_firmware wsa8845h sa6150p qcs410 sa8155p_firmware qca6564a sa8155p wsa8830 sm8550p sa6145p sa8255p_firmware snapdragon_888\+_5g ar8035 qamsrv1m_firmware qrb5165m_firmware sa8650p_firmware qcm4325 srv1l_firmware snapdragon_782g ssg2125p_firmware wcn3950_firmware qca6698aq sa7775p_firmware qrb5165n sa8530p_firmware fastconnect_6200 sm7325p_firmware sa8145p_firmware wcd9378 qdx1011 sa8150p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 snapdragon_778g_5g_firmware snapdragon_780g_5g qcs6490 qcs8250 snapdragon_778g\+_5g fastconnect_6200_firmware wsa8830_firmware qca6678aq_firmware wsa8845_firmware wsa8832 sdx61_firmware wcd9378_firmware srv1l srv1m qca6678aq ar8035_firmware qrb5165m snapdragon_680_4g_firmware qca6320 sa4150p_firmware fsm20056 sd888_firmware qca6564au qcs6125_firmware sm4635 snapdragon_460 wsa8815_firmware sa8195p_firmware qca8337_firmware snapdragon_480_5g_firmware snapdragon_4_gen_1_firmware snapdragon_x12_lte snapdragon_685_4g sg8275p_firmware qca9377_firmware qcm6490_firmware snapdragon_w5\+_gen_1 sm4635_firmware qcm4490_firmware qru1032 vision_intelligence_400_firmware wcn3950 qcs6125 flight_rb5_5g snapdragon_x65_5g_modem-rf_system_firmware qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_7c\+_gen_3_compute talynplus_firmware sa8295p_firmware smart_audio_400_firmware snapdragon_460_firmware sa4155p_firmware qca6584au sd888 qca6320_firmware wcn6755_firmware fsm10055_firmware qru1062_firmware fsm10056 qcn9011_firmware sw5100_firmware wcn6740 fsm20056_firmware qru1062 qca6310_firmware snapdragon_662 qcs7230 qca6595_firmware fastconnect_7800_firmware sm8635_firmware fastconnect_6900_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p snapdragon_x62_5g_modem-rf_system sa8150p wcn6755 snapdragon_835_pc snapdragon_888_5g_firmware immersive_home_3210 snapdragon_8\+_gen_2_firmware snapdragon_auto_5g_modem-rf_firmware snapdragon_x35_5g_modem-rf_system sxr1230p sw5100 video_collaboration_vc3_platform qca6688aq qam8295p_firmware snapdragon_8_gen_1_firmware wcn3990_firmware sm7315 qca6698aq_firmware qca6564a_firmware wcd9385 qsm8350 qca9367_firmware snapdragon_8_gen_1 sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware snapdragon_8_gen_3 qep8111_firmware sg8275p snapdragon_782g_firmware immersive_home_326 qdx1011_firmware snapdragon_auto_5g_modem-rf flight_rb5_5g_firmware ssg2125p qru1052 qcm4490 snapdragon_4_gen_1 csra6640_firmware qamsrv1m robotics_rb5 snapdragon_480\+_5g qca6174a_firmware snapdragon_685_4g_firmware sm7325p qam8650p_firmware video_collaboration_vc5_platform qcs6490_firmware snapdragon_480_5g snapdragon_x65_5g_modem-rf_system qam8620p wcd9335_firmware qrb5165n_firmware wcn3980_firmware qca6584au_firmware wsa8835 wsa8840_firmware qca6391_firmware qca6595au_firmware qdu1010_firmware sw5100p_firmware qca6696_firmware wcd9380_firmware qca6574_firmware csra6620 qca8081 wsa8815 mdm9628 sg4150p sd_8_gen1_5g qam8775p qca9377 snapdragon_ar2_gen_1_firmware qca6797aq mdm9628_firmware qcm4325_firmware sa8620p qca6574a_firmware immersive_home_3210_firmware snapdragon_8\+_gen_1_firmware sd_8_gen1_5g_firmware snapdragon_8_gen_3_firmware sa7775p qca6391 snapdragon_w5\+_gen_1_firmware snapdragon_x62_5g_modem-rf_system_firmware wcd9375_firmware qcn9274_firmware qcn9012_firmware qcs5430_firmware sg4150p_firmware qru1052_firmware snapdragon_780g_5g_firmware csra6620_firmware sa8770p_firmware sa8295p qcs8550 fastconnect_7800 sa8650p qam8775p_firmware wcd9375 qca6688aq_firmware snapdragon_ar2_gen_1 wcn3988_firmware qamsrv1h_firmware sa8145p vision_intelligence_400 wsa8835_firmware ssg2115p_firmware wcn3980 qdx1010 qcs610 Snapdragon qam8255p_firmware qca9377_firmware talynplus_firmware snapdragon_662_mobile_platform_firmware sa6150p_firmware sa8145p_firmware sxr2230p_firmware sg8275p_firmware mdm9628_firmware flight_rb5_5g_platform_firmware fsm10055_firmware wcn3950_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware wcn6755_firmware qca6595au_firmware csra6620_firmware csra6640_firmware qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qca6584au_firmware qep8111_firmware qrb5165n_firmware wcn3990_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qcn6024_firmware qamsrv1h_firmware sd_8_gen1_5g_firmware qsm8350_firmware qam8295p_firmware qcn9011_firmware sa9000p_firmware qca6320_firmware sm7315_firmware qca6574au_firmware snapdragon_695_5g_mobile_platform_firmware snapdragon_835_mobile_pc_platform_firmware wcd9375_firmware qca8081_firmware wsa8845h_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware sa8620p_firmware sa6155p_firmware qca9367_firmware snapdragon_auto_5g_modem-rf_firmware qcm8550_firmware snapdragon_x65_5g_modem-rf_system_firmware qca6678aq_firmware smart_audio_400_platform_firmware sa8775p_firmware qrb5165m_firmware wsa8840_firmware sa4155p_firmware qcs8550_firmware wcn3988_firmware qru1062_firmware sa6145p_firmware fsm20056_firmware sa7775p_firmware fastconnect_6700_firmware wsa8810_firmware fsm10056_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware fsm20055_firmware qdu1000_firmware qca6698aq_firmware qca6174a_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware qca6696_firmware qcs6490_firmware snapdragon_x12_lte_modem_firmware qru1052_firmware vision_intelligence_400_platform_firmware wsa8830_firmware wsa8815_firmware wsa8835_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware sa8295p_firmware sxr2250p_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qca6688aq_firmware qcm6125_firmware qualcomm_video_collaboration_vc1_platform_firmware robotics_rb5_platform_firmware qca8337_firmware wcd9380_firmware sm4635_firmware snapdragon_778g_5g_mobile_platform_firmware wcd9378_firmware qcs7230_firmware qdu1010_firmware sa8530p_firmware immersive_home_326_platform_firmware sxr1230p_firmware qdu1110_firmware sa8540p_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware sm8635_firmware qca6310_firmware qcn9012_firmware sm6370_firmware qcn9274_firmware wcd9335_firmware qcm4325_firmware qca6574_firmware wcd9340_firmware sm7325p_firmware qru1032_firmware wsa8845_firmware qca6574a_firmware fastconnect_6200_firmware snapdragon_x62_5g_modem-rf_system_firmware ipq9574_firmware wcn3980_firmware immersive_home_3210_platform_firmware wcn6740_firmware qcm4490_firmware snapdragon_x35_5g_modem-rf_system_firmware qcs4490_firmware qcm6490_firmware sa8650p_firmware wsa8832_firmware fastconnect_6900_firmware srv1h_firmware qca6797aq_firmware sa8155p_firmware qdx1011_firmware qca6564a_firmware qcn9024_firmware sa7255p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qdx1010_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qamsrv1m_firmware srv1m_firmware sd835_firmware qam8650p_firmware qca6595_firmware qcs5430_firmware qca6391_firmware sa4150p_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware sdx61_firmware ssg2115p_firmware sw5100_firmware qam8620p_firmware qcs410_firmware qdu1210_firmware ar8035_firmware

CWE ID-CWE-562

Return of Stack Variable Address

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.82%

||

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption when Alternative Frequency offset value is set to 255.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_wear_3100_firmware sdm429w_firmware qcm8550_firmware apq8017 sd865_5g qcs410_firmware robotics_rb3 sa6150p_firmware sxr1120 qca6595 qcs610_firmware snapdragon_8\+_gen_1 wcd9335 wcd9370 snapdragon_730g snapdragon_429_firmware snapdragon_x50_5g_modem-rf_system qca6696 wcd9340_firmware wcd9341_firmware wcd9395_firmware qca6426 wcn6740_firmware snapdragon_720g_firmware fastconnect_6700 wcn3610 snapdragon_208_firmware vision_intelligence_200_firmware snapdragon_695_5g sa4150p snapdragon_888_5g wsa8832_firmware qca6426_firmware wcd9395 snapdragon_4_gen_2_firmware qca6574au_firmware qca6564_firmware qam8295p wcd9341 sd626_firmware qca6574au snapdragon_820_automotive wcd9390 wsa8810_firmware sd730_firmware wsa8845h_firmware snapdragon_429 msm8209_firmware sa9000p_firmware snapdragon_690_5g snapdragon_778g\+_5g_firmware snapdragon_865\+_5g snapdragon_765_5g wcn3660b_firmware sd730 snapdragon_626 snapdragon_8\+_gen_2 snapdragon_820_automotive_firmware fastconnect_6800_firmware qcs5430 snapdragon_865\+_5g_firmware sd835_firmware qcm5430 qcm5430_firmware video_collaboration_vc1_platform_firmware sa4155p snapdragon_888\+_5g_firmware snapdragon_636_firmware sa8770p qcm6125_firmware snapdragon_xr2_5g_firmware snapdragon_xr1_firmware msm8108 sxr1120_firmware snapdragon_710 snapdragon_730 snapdragon_765g_5g_firmware snapdragon_660_firmware snapdragon_4_gen_2 fastconnect_6900 snapdragon_8_gen_2_firmware video_collaboration_vc1_platform sm8635 wcd9385_firmware qca6421 vision_intelligence_200 snapdragon_x55_5g_modem-rf_system qca6310 qam8255p_firmware snapdragon_778g_5g snapdragon_670 snapdragon_678_firmware sa8155_firmware qca6335 qcs4490 snapdragon_732g_firmware snapdragon_662_firmware snapdragon_7\+_gen_2_firmware snapdragon_wear_3100 wsa8845 sa6155p qca6421_firmware qcm6125 qca6564au_firmware wsa8810 205 video_collaboration_vc5_platform_firmware sa9000p snapdragon_855_firmware snapdragon_670_firmware snapdragon_678 qca6595au sxr2250p_firmware sm7315_firmware snapdragon_wear_2500 snapdragon_865_5g_firmware wcd9326_firmware sa6155p_firmware snapdragon_730g_firmware wsa8840 qcs8550_firmware sd835 qca6436_firmware qcs4490_firmware wcn3910_firmware snapdragon_675_firmware snapdragon_680_4g qca6420 wcn3910 snapdragon_212_firmware wcd9370_firmware snapdragon_8_gen_2 snapdragon_480\+_5g_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_765_5g_firmware wcn3660b qca6574a wcn3620_firmware sa8195p snapdragon_695_5g_firmware wcd9340 qcs8250_firmware qcm2290 talynplus snapdragon_835_mobile_pc_firmware qca6335_firmware qcm6490 215 sm8550p_firmware sxr2250p qcm8550 wcn3988 sa8775p qca6574 sxr2230p_firmware qca6430_firmware sa8775p_firmware snapdragon_439_firmware wsa8845h sa6150p wcd9326 qcs410 qcm2290_firmware vision_intelligence_100 sa8155p_firmware qca6564a sa8155p snapdragon_wear_2100_firmware wsa8830 snapdragon_870_5g_firmware smart_display_200_firmware snapdragon_855\+sm8550p sa6145p snapdragon_wear_2100 snapdragon_6_gen_1 sa8255p_firmware snapdragon_888\+_5g snapdragon_720g msm8996au snapdragon_208 qca6564 sa6155 wcn3620 qcm4325 snapdragon_860 snapdragon_782g qca6698aq wcn3950_firmware sm6250 fastconnect_6200 sd670 wcn3680b sm7325p_firmware sa8145p_firmware snapdragon_210_firmware snapdragon_630 sa8150p_firmware fastconnect_6700_firmware snapdragon_768g_5g video_collaboration_vc3_platform_firmware snapdragon_7_gen_1_firmware robotics_rb3_firmware snapdragon_778g_5g_firmware wcn3990 snapdragon_780g_5g sd670_firmware qcs6490 qcs8250 snapdragon_210 snapdragon_778g\+_5g fastconnect_6200_firmware wsa8830_firmware vision_intelligence_100_firmware qca6431 wsa8845_firmware sd660_firmware snapdragon_7c\+_gen_3 wsa8832 sxr2130_firmware snapdragon_680_4g_firmware qca6320 sa4150p_firmware msm8608_firmware sd888_firmware qcm2150 snapdragon_845_firmware snapdragon_630_firmware msm8209 snapdragon_439 qca6564au qcs6125_firmware snapdragon_460 snapdragon_636 wsa8815_firmware snapdragon_865_5g sa8195p_firmware qcm4290 snapdragon_480_5g_firmware snapdragon_4_gen_1_firmware msm8608 snapdragon_685_4g snapdragon_7\+_gen_2 snapdragon_xr2\+_gen_1 qcm6490_firmware snapdragon_626_firmware sm7250p_firmware wcn3680_firmware 205_firmware qcm4490_firmware vision_intelligence_400_firmware wcn3950 qcs6125 snapdragon_690_5g_firmware sm8750 talynplus_firmware sa8295p_firmware snapdragon_460_firmware snapdragon_855\+_firmware snapdragon_7_gen_1 smart_audio_200_firmware sa4155p_firmware sm7250p sm6250_firmware sa8155 snapdragon_768g_5g_firmware snapdragon_710_firmware sd888 qca6320_firmware wcn6755_firmware snapdragon_wear_2500_firmware wcn6740 snapdragon_732g qca6310_firmware sd626 fastconnect_6800 snapdragon_662 qcs7230 qca6595_firmware fastconnect_7800_firmware sm8635_firmware fastconnect_6900_firmware apq8017_firmware wcd9380 sa6145p_firmware qam8255p sa6155_firmware sxr2230p smart_audio_200 snapdragon_xr2_5g sa8150p wcn6755 215_firmware snapdragon_888_5g_firmware snapdragon_765g_5g snapdragon_8\+_gen_2_firmware msm8996au_firmware sm7435_firmware video_collaboration_vc3_platform aqt1000 qcm2150_firmware qam8295p_firmware sd855 qca6431_firmware snapdragon_8_gen_1_firmware snapdragon_632_firmware wcn3990_firmware sm7315 snapdragon_6_gen_1_firmware qca6698aq_firmware qcs2290 qca6564a_firmware wcd9385 msm8909w_firmware qcs2290_firmware snapdragon_xr2\+_gen_1_firmware wcn3615 wcn3610_firmware wcn3680 snapdragon_8_gen_1 sa8255p qcs7230_firmware qcs4290 wcd9390_firmware snapdragon_8_gen_3 qca6430 snapdragon_782g_firmware snapdragon_855 sdx55_firmware snapdragon_625_firmware sm8750_firmware wcn3615_firmware sxr2130 msm8108_firmware qcm4490 snapdragon_4_gen_1 snapdragon_870_5g snapdragon_480\+_5g sm7325p snapdragon_685_4g_firmware snapdragon_845 video_collaboration_vc5_platform qca6420_firmware snapdragon_625 aqt1000_firmware qcs6490_firmware snapdragon_480_5g sdm429w sd855_firmware wcd9335_firmware wcn3980_firmware qca6436 wsa8835 wsa8840_firmware qca6391_firmware qca6595au_firmware qca6696_firmware qcs4290_firmware wcd9380_firmware qca6574_firmware wsa8815 sd660 sg4150p sd_8_gen1_5g qam8775p snapdragon_860_firmware snapdragon_730_firmware qcm4325_firmware sm7435 snapdragon_632 snapdragon_660 qca6574a_firmware sdx55 qcm4290_firmware snapdragon_835_mobile_pc snapdragon_8\+_gen_1_firmware sd_8_gen1_5g_firmware snapdragon_8_gen_3_firmware snapdragon_7c\+_gen_3_firmware qca6391 wcd9375_firmware qcs5430_firmware sg4150p_firmware snapdragon_780g_5g_firmware sa8770p_firmware sa8295p snapdragon_x50_5g_modem-rf_system_firmware qcs8550 snapdragon_675 fastconnect_7800 qam8775p_firmware sd865_5g_firmware snapdragon_425_firmware snapdragon_xr1 wcd9375 wcn3988_firmware sa8145p snapdragon_212 vision_intelligence_400 wsa8835_firmware smart_display_200 wcn3980 msm8909w snapdragon_425 wcn3680b_firmware qcs610 Snapdragon qam8255p_firmware talynplus_firmware snapdragon_662_mobile_platform_firmware sa6150p_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware qca6431_firmware snapdragon_820_automotive_platform_firmware snapdragon_wear_2100_platform_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware wcn6755_firmware qca6420_firmware qca6595au_firmware sd730_firmware qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn3990_firmware qualcomm_video_collaboration_vc3_platform_firmware msm8108_firmware wcd9385_firmware wcd9326_firmware wcn3615_firmware sd_8_gen1_5g_firmware snapdragon_660_mobile_platform_firmware qam8295p_firmware sa9000p_firmware qca6320_firmware sm7315_firmware qca6574au_firmware sdx55_firmware snapdragon_208_processor_firmware snapdragon_212_mobile_platform_firmware snapdragon_429_mobile_platform_firmware sa6155_firmware snapdragon_695_5g_mobile_platform_firmware snapdragon_835_mobile_pc_platform_firmware sm7250p_firmware wcd9375_firmware wcn3610_firmware wsa8845h_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware sa6155p_firmware qcm8550_firmware sa8775p_firmware wsa8840_firmware sa4155p_firmware sa8155_firmware robotics_rb3_platform_firmware qcs8550_firmware wcn3988_firmware sa6145p_firmware fastconnect_6700_firmware apq8017_firmware sd626_firmware snapdragon_626_mobile_platform_firmware wsa8810_firmware sm7435_firmware wcd9395_firmware sa8255p_firmware sm8750_firmware qca6698aq_firmware msm8209_firmware qcs4290_firmware qualcomm_205_mobile_platform_firmware sa8770p_firmware qam8775p_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware snapdragon_210_processor_firmware sm6250_firmware vision_intelligence_400_platform_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware wsa8815_firmware wsa8835_firmware sd660_firmware snapdragon_636_mobile_platform_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sxr1120_firmware sa8295p_firmware sxr2250p_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qcm6125_firmware snapdragon_675_mobile_platform_firmware qcm2290_firmware qualcomm_video_collaboration_vc1_platform_firmware wcd9380_firmware qcm2150_firmware snapdragon_778g_5g_mobile_platform_firmware msm8996au_firmware qcs7230_firmware snapdragon_670_mobile_platform_firmware msm8909w_firmware sd670_firmware sdm429w_firmware snapdragon_7_gen_1_mobile_platform_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_425_mobile_platform_firmware sm8635_firmware qca6310_firmware qca6430_firmware wcd9335_firmware qca6335_firmware qcm4325_firmware qca6574_firmware wcd9340_firmware wcn3680b_firmware sm7325p_firmware wsa8845_firmware snapdragon_630_mobile_platform_firmware snapdragon_xr2_5g_platform_firmware snapdragon_439_mobile_platform_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware qcm4490_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcs4490_firmware snapdragon_632_mobile_platform_firmware wcn3680_firmware qcm6490_firmware wsa8832_firmware fastconnect_6900_firmware sa8155p_firmware smart_audio_200_platform_firmware qca6564a_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qualcomm_215_mobile_platform_firmware sd835_firmware qca6564_firmware snapdragon_wear_2500_platform_firmware qca6595_firmware qcs5430_firmware qca6391_firmware snapdragon_710_mobile_platform_firmware sa4150p_firmware msm8608_firmware sm8550p_firmware wcd9370_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware snapdragon_6_gen_1_mobile_platform_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware snapdragon_wear_3100_platform_firmware qcs410_firmware snapdragon_720g_mobile_platform_firmware snapdragon_xr1_platform_firmware snapdragon_625_mobile_platform_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 26.36%

||

7 Day CHG~0.00%

Published-06 May, 2019 | 22:31

Updated-05 Aug, 2024 | 21:13

A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.35%

||

7 Day CHG~0.00%

Published-07 Oct, 2024 | 12:58

Updated-11 Aug, 2025 | 15:06

Improper Input Validation in Camera

Memory corruption while taking snapshot when an offset variable is set by camera driver.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8845_firmware wsa8840 wcd9370 snapdragon_8cx_compute_platform_\(sc8180xp-ac\,_af\)_\"poipu_pro\"_firmware snapdragon_8cx_compute_platform_\(sc8180xp-ac\,_af\)_\"poipu_pro\"wcd9340_firmware wcd9385 wcd9341_firmware sc8380xp snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\,_af\)_\"poipu_pro\"_firmware snapdragon_7c_compute_platform_\(sc7180-ac\)_firmware snapdragon_7c\+_gen_3_compute_firmware fastconnect_6700 qca6420 snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)_firmware wsa8815_firmware qca6430 wcd9370_firmware snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"_firmware qcm6490_firmware wcd9340 wcd9341 qcm6490 wsa8810_firmware wsa8845h_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\,_af\)_\"poipu_pro\"snapdragon_7c\+_gen_3_compute wsa8835 wsa8840_firmware qca6391_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\,_ab\)qca6430_firmware qcs5430 fastconnect_6800_firmware wsa8845h wcd9380_firmware sm6250_firmware qcm5430 snapdragon_7c_compute_platform_\(sc7180-ac\)qcm5430_firmware wsa8815 wsa8830 snapdragon_8c_compute_platform_\(sc8180xp-ad\)_\"poipu_lite\"_firmware snapdragon_8c_compute_platform_\(sc8180xp-ad\)_\"poipu_lite\"snapdragon_8cx_compute_platform_\(sc8180x-aa\,_ab\)_firmware sc8180x\+sdx55_firmware sc8380xp_firmware fastconnect_6800 snapdragon_8c_compute_platform_\(sc8180x-ad\)_\"poipu_lite\"_firmware wcd9375_firmware fastconnect_7800_firmware fastconnect_6900 qca6391 sc8180x\+sdx55 qcs5430_firmware wcd9385_firmware sm6250 snapdragon_8cx_compute_platform_\(sc8180x-aa\,_ab\)fastconnect_6900_firmware wcd9380 fastconnect_6200 fastconnect_7800 snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\,_ab\)_firmware wcd9375 wsa8845 snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"fastconnect_6700_firmware video_collaboration_vc3_platform_firmware snapdragon_8c_compute_platform_\(sc8180x-ad\)_\"poipu_lite\"wsa8835_firmware wsa8810 qcs6490 fastconnect_6200_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon aqt1000_firmware qcm5430_firmware wcd9380_firmware qca6430_firmware qcs6490_firmware qcm6490_firmware qcs5430_firmware wsa8840_firmware qualcomm_video_collaboration_vc3_platform_firmware qca6391_firmware wcd9385_firmware fastconnect_6900_firmware wcd9370_firmware sc8380xp_firmware wcd9340_firmware sm6250_firmware wsa8830_firmware wsa8845_firmware fastconnect_6700_firmware wsa8815_firmware wsa8835_firmware wsa8810_firmware fastconnect_6200_firmware wcd9341_firmware fastconnect_7800_firmware qca6420_firmware wcd9375_firmware wsa8845h_firmware fastconnect_6800_firmware

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.82%

||

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Untrusted Pointer Dereference in Computer Vision

Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware wsa8845_firmware wsa8832 wsa8840 qcs8550_firmware snapdragon_8\+_gen_1 wcd9370 snapdragon_8_gen_1_firmware wcd9385 wcd9395_firmware qcs4490_firmware snapdragon_8_gen_1 wcn6740_firmware sxr1230p_firmware wcd9390_firmware fastconnect_6700 snapdragon_8_gen_3 wsa8815_firmware wsa8832_firmware sg8275p wcd9370_firmware wcd9395 snapdragon_8_gen_2 snapdragon_4_gen_2_firmware ssg2125p sg8275p_firmware qcm6490_firmware qcm4490 talynplus qcm4490_firmware wcd9390 qcm6490 wcn3950 wsa8810_firmware wsa8845h_firmware sm8550p_firmware qcm8550 wcn3988 qcs6490_firmware talynplus_firmware wsa8835 wsa8840_firmware snapdragon_8\+_gen_2 qcs5430 wsa8845h wcd9380_firmware qcm5430 wsa8815 qcm5430_firmware sd_8_gen1_5g wsa8830 snapdragon_ar2_gen_1_firmware sm8550p ssg2115p wcn6755_firmware wcn6740 snapdragon_8\+_gen_1_firmware sd_8_gen1_5g_firmware fastconnect_6900 fastconnect_7800_firmware snapdragon_4_gen_2 snapdragon_8_gen_3_firmware snapdragon_8_gen_2_firmware wcd9375_firmware sm8635 qcs5430_firmware ssg2125p_firmware sm8635_firmware wcd9385_firmware wcn3950_firmware fastconnect_6900_firmware wcd9380 qcs8550 fastconnect_7800 qcs4490 wcn6755 wcd9375 snapdragon_8\+_gen_2_firmware wsa8845 snapdragon_ar2_gen_1 wcn3988_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wsa8835_firmware sxr1230p wsa8810 ssg2115p_firmware qcs6490 wsa8830_firmware video_collaboration_vc3_platform Snapdragon wcn6740_firmware talynplus_firmware wcd9380_firmware qcm4490_firmware qcm8550_firmware qcs4490_firmware qcm6490_firmware wsa8832_firmware wsa8840_firmware sg8275p_firmware fastconnect_6900_firmware qcs8550_firmware wcn3988_firmware sxr1230p_firmware fastconnect_6700_firmware wcn3950_firmware wsa8810_firmware fastconnect_7800_firmware wcn6755_firmware snapdragon_ar2_gen_1_platform_firmware wcd9395_firmware snapdragon_8_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware sm8635_firmware qcm5430_firmware qcs6490_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware wcd9370_firmware sm8550p_firmware sd_8_gen1_5g_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8845_firmware wsa8815_firmware wsa8835_firmware ssg2115p_firmware wcd9375_firmware wsa8845h_firmware snapdragon_8_gen_2_mobile_platform_firmware

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-822

Untrusted Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 7.66%

||

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:23

Improper Validation of Array Index in Hypervisor

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware qam8255p_firmware snapdragon_850_mobile_compute_platform_firmware snapdragon_8_gen_1_mobile_platform sa6150p_firmware sm6250p_firmware qcs610 315_5g_iot_modem_firmware qca8337 qfw7124 qca6431_firmware qam8775p snapdragon_778g\+_5g_mobile_platform qamsrv1m qru1052 snapdragon_888_5g_mobile_platform snapdragon_870_5g_mobile_platform_firmware wcd9360_firmware wsa8840 wcn3950_firmware sa8150p_firmware qca6595au_firmware sa6155 video_collaboration_vc3_platform qca6335 sd_675_firmware qcm5430_firmware qep8111_firmware wcd9371_firmware qam8295p wcn3950 sd_8_gen1_5g_firmware wcn3660b qsm8350_firmware qca6688aq qsm8350 sm7315_firmware snapdragon_429_mobile_platform_firmware qca6574au_firmware snapdragon_778g\+_5g_mobile_platform_firmware qca8081_firmware sa6155_firmware wcd9375_firmware qca6420 wcd9360 snapdragon_xr2\+_gen_1_platform snapdragon_782g_mobile_platform_firmware snapdragon_auto_5g_modem-rf_firmware qca6678aq_firmware qrb5165m_firmware wsa8840_firmware qca6698aq sa4155p_firmware sa8155_firmware robotics_rb3_platform_firmware sc8380xp_firmware snapdragon_765g_5g_mobile_platform qca6430 qru1062_firmware snapdragon_678_mobile_platform_firmware robotics_rb3_platform sa7775p_firmware snapdragon_855\+wcd9340 snapdragon_8cx_compute_platform snapdragon_720g_mobile_platform snapdragon_780g_5g_mobile_platform qca6436 sa6155p qdu1000_firmware snapdragon_765_5g_mobile_platform_firmware qca6698aq_firmware snapdragon_690_5g_mobile_platform snapdragon_auto_5g_modem-rf_gen_2_firmware wcd9341 qam8775p_firmware sa8255p qca6431 qca6696_firmware wcd9371 qca6797aq qru1052_firmware sd_8cx snapdragon_855_mobile_platform_firmware sa8150p qcc710_firmware robotics_rb5_platform wsa8830_firmware sd855_firmware sd865_5g_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3988 snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware snapdragon_7c_gen_2_compute_platform_firmware sa8295p_firmware sa8770p snapdragon_730_mobile_platform_firmware snapdragon_750g_5g_mobile_platform_firmware snapdragon_675_mobile_platform_firmware qca8337_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware ssg2125p sdm429w snapdragon_8cx_gen_2_5g_compute_platform qcm8550 qca6564au snapdragon_670_mobile_platform_firmware sd670_firmware qca6574 qdu1110_firmware snapdragon_7c\+_gen_3_compute wcd9380 snapdragon_782g_mobile_platform snapdragon_wear_4100\+_platform_firmware snapdragon_x72_5g_modem-rf_system_firmware fastconnect_6700 qcs410 sxr1230p video_collaboration_vc3_platform_firmware qcn9012_firmware qca6430_firmware qcn9274_firmware wcn3980 qfw7114_firmware snapdragon_732g_mobile_platform_firmware wsa8845 qca6335_firmware wcd9340_firmware wsa8815 snapdragon_865\+_5g_mobile_platform qcs8250 qca6426_firmware wcn3660b_firmware sc8380xp snapdragon_670_mobile_platform snapdragon_x62_5g_modem-rf_system_firmware wcn3980_firmware sd730 snapdragon_xr2\+_gen_1_platform_firmware snapdragon_x50_5g_modem-rf_system_firmware sa8295p qca6421_firmware wcn6740_firmware snapdragon_8cx_compute_platform_firmware snapdragon_xr2_5g_platform qca6678aq snapdragon_x65_5g_modem-rf_system sa8650p_firmware fastconnect_6900 snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware qca6797aq_firmware qdu1010 srv1l sd670 qdx1011_firmware qca6564a_firmware sa7255p_firmware sdx57m sa8620p snapdragon_x24_lte_modem wsa8832 qdx1010_firmware sa8540p snapdragon_8cx_gen_3_compute_platform qcs610_firmware qsm8250 qamsrv1m_firmware qcm5430 sa6145p snapdragon_730_mobile_platform qcc710 qca6595_firmware sa8145p wcd9395 qcs5430_firmware snapdragon_750g_5g_mobile_platform snapdragon_888\+_5g_mobile_platform_firmware qca6391_firmware sa4150p_firmware wcd9370_firmware qdx1010 sdx55 sd888_firmware sa8155p sd675 video_collaboration_vc1_platform srv1m snapdragon_860_mobile_platform ssg2115p_firmware qcs8155_firmware qam8620p_firmware qfw7124_firmware qam8255p sa4155p qdu1210_firmware qep8111 snapdragon_720g_mobile_platform_firmware snapdragon_855_mobile_platform qsm8250_firmware ar8035_firmware wsa8830 sa8145p_firmware snapdragon_850_mobile_compute_platform snapdragon_x24_lte_modem_firmware qam8650p csrb31024 flight_rb5_5g_platform snapdragon_865_5g_mobile_platform flight_rb5_5g_platform_firmware qcn6224_firmware snapdragon_860_mobile_platform_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware qca6420_firmware snapdragon_auto_4g_modem_firmware sd730_firmware wcd9370 sd675_firmware ssg2115p qca6564 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qdu1110 qca9377 qamsrv1h sa8530p sd_8cx_firmware wcd9385_firmware wcd9326_firmware fastconnect_6200 qamsrv1h_firmware snapdragon_7c_gen_2_compute_platform qam8295p_firmware qcn9011_firmware sa8155 snapdragon_x55_5g_modem-rf_system sa9000p_firmware wcn3680b_firmware sdx55_firmware sa7255p snapdragon_778g_5g_mobile_platform wsa8845h_firmware snapdragon_8_gen_3_mobile_platform qca6595au qfw7114 sm7250p_firmware snapdragon_429_mobile_platform qca6436_firmware qrb5165n qca6564au_firmware qca6584au sa8620p_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware snapdragon_870_5g_mobile_platform qca6310 snapdragon_x72_5g_modem-rf_system qcn9274 qcs8155 snapdragon_855\+_firmware sa8775p_firmware qcs6490 video_collaboration_vc5_platform qcs8550_firmware vision_intelligence_300_platform_firmware wcn3988_firmware 315_5g_iot_modem srv1h sa6145p_firmware qca6421 sm6250 fastconnect_6700_firmware sa8195p wsa8810_firmware qcn6224 vision_intelligence_400_platform wsa8845h snapdragon_x62_5g_modem-rf_system wcd9326 snapdragon_x75_5g_modem-rf_system wcd9395_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware qcs7230 qca8081 snapdragon_x35_5g_modem-rf_system snapdragon_auto_5g_modem-rf_gen_2 snapdragon_888\+_5g_mobile_platform sa7775p qam8620p qca6174a_firmware qcs5430 sa8770p_firmware sxr2130_firmware wcd9385 qcs6490_firmware ar8035 wcd9375 aqt1000 sm6250_firmware wcd9390 vision_intelligence_400_platform_firmware snapdragon_768g_5g_mobile_platform_firmware wcn3620_firmware wsa8815_firmware qcm6490 wsa8835_firmware wcn3620 video_collaboration_vc5_platform_firmware qca6564a sa4150p qca6688aq_firmware robotics_rb5_platform_firmware snapdragon_845_mobile_platform wcn3990 sd_675 sd865_5g fastconnect_6800 qca6595 qru1032 qcs7230_firmware qdu1010_firmware qcn9012 snapdragon_8c_compute_platform sd888 sa8530p_firmware qdx1011 qdu1000 wsa8835 sxr1230p_firmware sdm429w_firmware sa8540p_firmware snapdragon_auto_5g_modem-rf sd_8_gen1_5g qcn6274 sm6250p snapdragon_678_mobile_platform sxr2130 sc8180x snapdragon_wear_4100\+_platform ssg2125p_firmware qca6574a qca6174a sm7325p qca6310_firmware qru1062 sa8650p sa9000p qca6574_firmware sd855 sm7325p_firmware sdx57m_firmware qru1032_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware qca6574a_firmware sa8775p snapdragon_730g_mobile_platform fastconnect_6200_firmware qcs9100_firmware qrb5165m vision_intelligence_300_platform sm7315 snapdragon_x55_5g_modem-rf_system_firmware qca6391 snapdragon_8cx_gen_3_compute_platform_firmware fastconnect_7800 snapdragon_7c_compute_platform_firmware aqt1000_firmware snapdragon_865\+_5g_mobile_platform_firmware snapdragon_x35_5g_modem-rf_system_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcn6274_firmware snapdragon_auto_4g_modem csrb31024_firmware qcm6490_firmware wsa8832_firmware srv1h_firmware qcn9011 sc8180x_firmware video_collaboration_vc1_platform_firmware qca6574au sa8155p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware wsa8810 snapdragon_765g_5g_mobile_platform_firmware snapdragon_730g_mobile_platform_firmware snapdragon_8_gen_1_mobile_platform_firmware srv1m_firmware snapdragon_ar2_gen_1_platform snapdragon_8c_compute_platform_firmware wcn3680b qca6564_firmware qam8650p_firmware snapdragon_675_mobile_platform wcn6740 qca6696 snapdragon_732g_mobile_platform qcs8550 snapdragon_x50_5g_modem-rf_system sa6150p snapdragon_8_gen_3_mobile_platform_firmware qcs9100 wcd9390_firmware snapdragon_768g_5g_mobile_platform qdu1210 snapdragon_765_5g_mobile_platform sm7250p qcs410_firmware snapdragon_8cx_gen_2_5g_compute_platform_firmware snapdragon_7c_compute_platform Snapdragon qam8255p_firmware qca9377_firmware snapdragon_850_mobile_compute_platform_firmware sa6150p_firmware sm6250p_firmware sa8145p_firmware 315_5g_iot_modem_firmware snapdragon_x24_lte_modem_firmware qca6431_firmware wcd9360_firmware flight_rb5_5g_platform_firmware qcn6224_firmware wcn3950_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware sd730_firmware snapdragon_auto_4g_modem_firmware sd_675_firmware sd675_firmware qcm5430_firmware qca6584au_firmware qep8111_firmware qrb5165n_firmware wcn3990_firmware qualcomm_video_collaboration_vc3_platform_firmware sd_8cx_firmware wcd9371_firmware wcd9385_firmware wcd9326_firmware qamsrv1h_firmware sd_8_gen1_5g_firmware qsm8350_firmware qam8295p_firmware qcn9011_firmware sa9000p_firmware sm7315_firmware snapdragon_429_mobile_platform_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wsa8845h_firmware sm7250p_firmware qca6436_firmware qca6564au_firmware sa8620p_firmware sa6155p_firmware snapdragon_auto_5g_modem-rf_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qca6678aq_firmware sa8775p_firmware qrb5165m_firmware wsa8840_firmware sa4155p_firmware sa8155_firmware robotics_rb3_platform_firmware qcs8550_firmware sc8380xp_firmware vision_intelligence_300_platform_firmware wcn3988_firmware qru1062_firmware sa6145p_firmware sa7775p_firmware fastconnect_6700_firmware wsa8810_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware qdu1000_firmware qca6698aq_firmware qca6174a_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware qru1052_firmware snapdragon_855_mobile_platform_firmware sm6250_firmware qcc710_firmware vision_intelligence_400_platform_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware wsa8815_firmware wsa8835_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sa8295p_firmware qca6688aq_firmware snapdragon_750g_5g_mobile_platform_firmware snapdragon_675_mobile_platform_firmware qualcomm_video_collaboration_vc1_platform_firmware robotics_rb5_platform_firmware qca8337_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware qcs7230_firmware qdu1010_firmware snapdragon_670_mobile_platform_firmware sa8530p_firmware sd670_firmware sxr1230p_firmware qdu1110_firmware sdm429w_firmware sa8540p_firmware snapdragon_x72_5g_modem-rf_system_firmware ssg2125p_firmware qca6310_firmware qca6430_firmware qcn9012_firmware qcn9274_firmware qfw7114_firmware qca6335_firmware qca6574_firmware wcd9340_firmware sm7325p_firmware sdx57m_firmware qru1032_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware fastconnect_6200_firmware qcs9100_firmware snapdragon_x62_5g_modem-rf_system_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware snapdragon_x35_5g_modem-rf_system_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcn6274_firmware csrb31024_firmware qcm6490_firmware sa8650p_firmware wsa8832_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware srv1h_firmware qca6797aq_firmware sa8155p_firmware qdx1011_firmware qca6564a_firmware sa7255p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qdx1010_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qamsrv1m_firmware srv1m_firmware qam8650p_firmware qca6564_firmware qca6595_firmware snapdragon_720g_mobile_platform_firmware qcs5430_firmware qca6391_firmware sa4150p_firmware wcd9370_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware ssg2115p_firmware qcs8155_firmware qam8620p_firmware qcs410_firmware qfw7124_firmware qdu1210_firmware ar8035_firmware qsm8250_firmware

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.12% / 32.27%

||

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-11 Aug, 2025 | 15:06

Use After Free in Automotive Multimedia

Memory corruption while invoking IOCTLs calls in Automotive Multimedia.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware qca6678aq_firmware qcm8550_firmware qcs410_firmware sa6150p_firmware sw5100p wsa8845_firmware snapdragon_480_5g_mobile qca6595 qcs610_firmware wcd9335 srv1m qca6678aq qca8081_firmware wcd9370 snapdragon_x35_5g_modem-rf ar8035_firmware qca6696 wsa8830_firmware wcd9340_firmware qrb5165m wcd9341_firmware sa4150p_firmware wcd9395_firmware qcc710_firmware fastconnect_6700 qca6564au qcs6125_firmware snapdragon_685_4g_mobile sa4150p wsa8815_firmware sa8195p_firmware qca8337_firmware qca8337 qdu1110 wcd9395 sg8275p_firmware qca6574au_firmware qam8295p wcd9341 qca6574au qru1032 wcd9390 wcn3950 wsa8810_firmware wsa8845h_firmware csra6640 qcs6125 flight_rb5_5g sa9000p_firmware srv1h qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware wsa8815 sa8295p_firmware smart_audio_400_firmware sa4155p_firmware video_collaboration_vc1_platform_firmware sa4155p sa8770p qcm6125_firmware qca6584au qcn6274_firmware qcn9011_firmware qcc710 qru1062_firmware sw5100_firmware qru1062 qfw7114_firmware qca6595_firmware qcs7230 fastconnect_7800_firmware fastconnect_6900 snapdragon_w5\+_gen_1_wearable_firmware video_collaboration_vc1_platform qru1032_firmware qep8111 sa7255p qfw7114 wcd9385_firmware fastconnect_6900_firmware qam8255p_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p sa8150p snapdragon_680_4g_mobile wsa8845 sa6155p qcm6125 snapdragon_auto_5g_modem-rf_firmware qca6564au_firmware wsa8810 qam8650p qdu1000_firmware video_collaboration_vc5_platform_firmware sa9000p srv1h_firmware sw5100 qca6595au video_collaboration_vc3_platform snapdragon_4_gen_1_mobile_firmware qdu1010 sa6155p_firmware snapdragon_685_4g_mobile_firmware wsa8840 qam8295p_firmware srv1m_firmware qcs8550_firmware snapdragon_x35_5g_modem-rf_firmware qdu1210_firmware snapdragon_8_gen_2_mobile_firmware qfw7124_firmware qca6564a_firmware qca6698aq_firmware wcd9385 qcn9012 snapdragon_695_5g_mobile_firmware snapdragon_680_4g_mobile_firmware sa8255p qcs7230_firmware wcd9390_firmware snapdragon_8_gen_2_mobile qep8111_firmware sg8275p wcd9370_firmware qdx1011_firmware snapdragon_auto_5g_modem-rf qdu1110_firmware flight_rb5_5g_firmware qdu1000 sa7255p_firmware qca6574a snapdragon_8\+_gen_2_mobile qru1052 qca6174a sa8195p wcd9340 csra6640_firmware qcs8250_firmware qdu1210 qamsrv1m robotics_rb5 snapdragon_480\+_5g_mobile_firmware qca6174a_firmware snapdragon_auto_5g_modem-rf_gen_2 qam8650p_firmware video_collaboration_vc5_platform sm8550p_firmware qcm8550 wcn3988 qcs6490_firmware qca6584au_firmware wcd9335_firmware qcn6274 qca6574 qfw7124 qrb5165n_firmware sa8775p qca6595au_firmware qca6391_firmware snapdragon_w5\+_gen_1_wearable wsa8835 wsa8840_firmware qdu1010_firmware sw5100p_firmware qcn9011 sa8775p_firmware qamsrv1h qca6696_firmware smart_audio_400 wsa8845h wcd9380_firmware sa6150p qca6574_firmware qcs410 sa8155p_firmware csra6620 qca6564a qca8081 mdm9628 sa8155p sg4150p qam8775p qca6797aq mdm9628_firmware sm8550p wcn3980_firmware sa6145p snapdragon_x75_5g_modem-rf wsa8830 qcm4325_firmware sa8255p_firmware ar8035 qca6574a_firmware qamsrv1m_firmware snapdragon_4_gen_1_mobile qrb5165m_firmware sa8650p_firmware qcm4325 wcd9375_firmware qca6391 qcn6224 qcn9012_firmware qca6698aq sg4150p_firmware wcn3950_firmware qru1052_firmware qrb5165n csra6620_firmware sa8295p sa8770p_firmware qcs8550 snapdragon_480\+_5g_mobile fastconnect_6200 fastconnect_7800 sa8145p_firmware sa8650p qam8775p_firmware snapdragon_480_5g_mobile_firmware snapdragon_8\+_gen_2_mobile_firmware qdx1011 wcd9375 sa8150p_firmware wcn3988_firmware fastconnect_6700_firmware qamsrv1h_firmware video_collaboration_vc3_platform_firmware sa8145p snapdragon_x75_5g_modem-rf_firmware wsa8835_firmware qcs6490 qcs8250 snapdragon_695_5g_mobile wcn3980 fastconnect_6200_firmware qdx1010 qcn6224_firmware qcs610 Snapdragon qca6574a_firmware snapdragon_4_gen_1_mobile_platform_firmware qca6564au_firmware wcn3980_firmware qualcomm_video_collaboration_vc1_platform_firmware mdm9628_firmware qcm6125_firmware qep8111_firmware snapdragon_x35_5g_modem-rf_system_firmware flight_rb5_5g_platform_firmware qca6696_firmware sa8150p_firmware sa8775p_firmware qcs7230_firmware srv1h_firmware wsa8835_firmware qca8337_firmware sa8255p_firmware wcn3988_firmware qualcomm_video_collaboration_vc5_platform_firmware fastconnect_6700_firmware qca6595au_firmware wcd9390_firmware qamsrv1h_firmware sm8550p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qcs6490_firmware sa8155p_firmware fastconnect_6200_firmware sa4155p_firmware wcd9395_firmware sa6145p_firmware qcn6224_firmware qdu1010_firmware sa8295p_firmware sa4150p_firmware sg4150p_firmware sa6150p_firmware qca6174a_firmware wcd9375_firmware qfw7124_firmware qca6391_firmware qca6698aq_firmware qca8081_firmware snapdragon_680_4g_mobile_platform_firmware fastconnect_6900_firmware qdu1000_firmware sa8770p_firmware wcd9385_firmware wcd9370_firmware wsa8840_firmware wcd9380_firmware qca6584au_firmware qam8775p_firmware wsa8810_firmware fastconnect_7800_firmware csra6640_firmware sw5100p_firmware wcd9341_firmware wsa8845h_firmware qcm4325_firmware qfw7114_firmware wsa8830_firmware qcm8550_firmware qdu1110_firmware qam8295p_firmware csra6620_firmware qca6574_firmware wcd9335_firmware sg8275p_firmware qamsrv1m_firmware qca6595_firmware qcn6274_firmware sa7255p_firmware sa8145p_firmware qam8650p_firmware qcn9011_firmware qru1052_firmware qualcomm_video_collaboration_vc3_platform_firmware robotics_rb5_platform_firmware wcn3950_firmware qdu1210_firmware snapdragon_480_5g_mobile_platform_firmware qdx1010_firmware qcs610_firmware qca6564a_firmware srv1m_firmware qru1062_firmware wsa8815_firmware qrb5165n_firmware qca6797aq_firmware snapdragon_8_gen_2_mobile_platform_firmware sa8195p_firmware qcn9012_firmware qdx1011_firmware sw5100_firmware qrb5165m_firmware sa9000p_firmware wcd9340_firmware ar8035_firmware snapdragon_695_5g_mobile_platform_firmware snapdragon_x75_5g_modem-rf_system_firmware wsa8845_firmware qcs6125_firmware qcc710_firmware smart_audio_400_platform_firmware qru1032_firmware qca6574au_firmware snapdragon_auto_5g_modem-rf_firmware qcs410_firmware qam8255p_firmware sa6155p_firmware sa8650p_firmware qcs8250_firmware qca6678aq_firmware qcs8550_firmware

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.05% / 16.33%

||

7 Day CHG~0.00%

Published-03 Jun, 2024 | 10:05

Updated-27 Jan, 2025 | 19:34

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS

Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.

Vendor-Qualcomm Technologies, Inc.

Product-qsm8350 sg8275p_firmware snapdragon_888_5g_mobile sc8280xp-abbb_firmware sc8180xp-ad_firmware qdx1010_firmware qca6421_firmware snapdragon_ar2_gen_1 sxr2130 qca6595au_firmware sd_8cx qca6564au snapdragon_865_5g_mobile_firmware sa9000p_firmware sa8540p snapdragon_845_mobile qca6564a_firmware qru1032 qca6310_firmware qcm8550 wcn3980_firmware sc8180xp-aaab_firmware snapdragon_xr2_5g_firmware sd855 sa8150p_firmware qca6595 qca9377_firmware qca6574a_firmware snapdragon_765g_5g_mobile snapdragon_765g_5g_mobile_firmware wsa8830_firmware qdu1000_firmware qam8775p_firmware sm8550p_firmware wsa8832_firmware sc8180x-aaab_firmware snapdragon_860_mobile_firmware snapdragon_xr2_5g qca6420 sa8155 qdx1011_firmware sc8380xp_firmware sxr2130_firmware qcn6224 qdu1210 snapdragon_675_mobile_firmware sdx55 snapdragon_8_gen_1_mobile_firmware sm7250p wsa8810_firmware snapdragon_auto_5g_modem-rf_gen_2 wsa8840 snapdragon_x24_lte_modem sxr2230p_firmware snapdragon_678_mobile_firmware wsa8810 snapdragon_670_mobile_firmware snapdragon_850_mobile_compute_firmware wsa8845h_firmware qfw7124 qam8650p sa8150p sa8255p qca6574_firmware snapdragon_865_5g_mobile sa6155 qam8775p qca6564a qca6797aq_firmware sa6155p ssg2125p_firmware snapdragon_768g_5g_mobile wcd9395_firmware sm7250p_firmware sxr1230p_firmware qdu1000 sa8770p_firmware sd_675 qca9377 qca6335 snapdragon_8_gen_2_mobile fastconnect_6200_firmware snapdragon_8_gen_1_mobile snapdragon_865\+_5g_mobile_firmware vision_intelligence_300_firmware qcn6274_firmware robotics_rb3 snapdragon_888\+_5g_mobile wcd9341_firmware snapdragon_x55_5g_modem-rf_firmware wcd9340 wcd9380_firmware sc8180xp-acaf sdx57m snapdragon_x50_5g_modem-rf_firmware sa8540p_firmware qca6430_firmware snapdragon_675_mobile sa8770p qca6436_firmware qru1052_firmware fastconnect_6800_firmware qcm8550_firmware sd_675_firmware sa9000p robotics_rb3_firmware wcd9390_firmware qca6584au sa6155p_firmware qru1052 sa8295p_firmware snapdragon_845_mobile_firmware snapdragon_x75_5g_modem-rf snapdragon_870_5g_mobile_firmware sd675 snapdragon_870_5g_mobile wcn3990_firmware wcd9385 sd670_firmware qdx1011 snapdragon_8_gen_2_mobile_firmware qca6421 sa8155p snapdragon_x65_5g_modem-rf_firmware wcd9375 wcn3950_firmware qdu1010_firmware qca8337 qca6335_firmware qca6574a wcn3980 sc8180x-aaab sd865_5g snapdragon_678_mobile sd670 qca6574au_firmware wcd9380 qca6426_firmware qca6584au_firmware sm8550p sxr2230p wcd9385_firmware qca6174a_firmware aqt1000 ssg2125p qcn6224_firmware vision_intelligence_400_firmware sc8180x-ad fastconnect_7800 fastconnect_6900_firmware ar8035 wcd9370 sa8155p_firmware snapdragon_855\+_mobile qcs8550_firmware snapdragon_765_5g_mobile sdx57m_firmware qdu1110_firmware fastconnect_6800 sd675_firmware snapdragon_768g_5g_mobile_firmware vision_intelligence_300 wsa8840_firmware ar8035_firmware qcs8550 qdu1210_firmware qcn6274 snapdragon_8\+_gen_2_mobile qdu1110 wcd9390 snapdragon_765_5g_mobile_firmware qru1062_firmware qfw7124_firmware qca8081_firmware wsa8815_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qfw7114_firmware wsa8815 sa8295p qam8650p_firmware snapdragon_855_mobile_firmware qca6174a sg8275p snapdragon_860_mobile sa8255p_firmware qam8295p_firmware sa8775p qca6595_firmware qca6420_firmware sc8280xp-abbb wsa8832 vision_intelligence_400 sa6155_firmware qca6310 sdx55_firmware sc8180x-acaf qca6574 wcd9340_firmware sc8180xp-ad qca6696 snapdragon_855\+_mobile_firmware qca6391 snapdragon_855_mobile fastconnect_6200 qca8337_firmware wsa8830 qcc710 wsa8845h qca6698aq qdu1010 wcd9370_firmware sxr1230p sc8180x-acaf_firmware sa8155_firmware qca6797aq qfw7114 qca6426 sd_8_gen1_5g_firmware qca6431_firmware ssg2115p qru1032_firmware sc8180xp-acaf_firmware sd_8_gen1_5g sd855_firmware qam8255p_firmware snapdragon_x50_5g_modem-rf snapdragon_x55_5g_modem-rf qca6431 qdx1010 sa8775p_firmware snapdragon_670_mobile qca6391_firmware wsa8835 snapdragon_x24_lte_modem_firmware wsa8835_firmware snapdragon_865\+_5g_mobile qca6436 qca6696_firmware snapdragon_888_5g_mobile_firmware wcd9326_firmware wcd9375_firmware fastconnect_6900 qca8081 sd_8cx_firmware wcn3990 wcn3950 qam8295p sc8180xp-aaab qca6698aq_firmware snapdragon_850_mobile_compute qam8255p fastconnect_7800_firmware sc8180x-ad_firmware snapdragon_8\+_gen_2_mobile_firmware snapdragon_x75_5g_modem-rf_firmware qca6564au_firmware sc8380xp qca6430 snapdragon_x65_5g_modem-rf wsa8845 aqt1000_firmware wsa8845_firmware qcc710_firmware wcd9326 wcd9395 wcd9341 qru1062 qsm8350_firmware qca6574au snapdragon_ar2_gen_1_firmware qca6595au sd865_5g_firmware snapdragon_888\+_5g_mobile_firmware ssg2115p_firmware Snapdragon qam8255p_firmware qca9377_firmware snapdragon_850_mobile_compute_platform_firmware qca8337_firmware wcd9380_firmware sxr2230p_firmware snapdragon_x24_lte_modem_firmware sg8275p_firmware qca6431_firmware qdu1010_firmware snapdragon_670_mobile_platform_firmware ar8035_firmware qcn6224_firmware sd670_firmware sxr1230p_firmware qdu1110_firmware wcn3950_firmware sa8540p_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware ssg2125p_firmware sd_675_firmware sd675_firmware qca6584au_firmware wcn3990_firmware qca6310_firmware qca6430_firmware qfw7114_firmware sd_8cx_firmware wcd9385_firmware qca6335_firmware wcd9326_firmware qca6574_firmware sd_8_gen1_5g_firmware wcd9340_firmware qsm8350_firmware sdx57m_firmware qru1032_firmware qam8295p_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware qca6426_firmware sa9000p_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware sdx55_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wsa8845h_firmware sm7250p_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware qca6436_firmware snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware snapdragon_845_mobile_platform_firmware qcn6274_firmware sa8775p_firmware wsa8840_firmware wsa8832_firmware snapdragon_x75_5g_modem-rf_system_firmware sa8155_firmware fastconnect_6900_firmware robotics_rb3_platform_firmware qcs8550_firmware sc8380xp_firmware vision_intelligence_300_platform_firmware qca6797aq_firmware qru1062_firmware sa6145p_firmware sa8155p_firmware qdx1011_firmware qca6564a_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware qdx1010_firmware qdu1000_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qca6174a_firmware qam8650p_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware sxr2130_firmware qca6696_firmware qca6595_firmware qca6391_firmware qru1052_firmware snapdragon_855_mobile_platform_firmware wcd9370_firmware sm8550p_firmware qcc710_firmware vision_intelligence_400_platform_firmware wcd9390_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware snapdragon_865_5g_mobile_platform_firmware ssg2115p_firmware fastconnect_6800_firmware qfw7124_firmware sa8295p_firmware qdu1210_firmware snapdragon_8_gen_2_mobile_platform_firmware snapdragon_675_mobile_platform_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 4.59%

||

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Use After Free in HLOS

Memory corruption when multiple listeners are being registered with the same file descriptor.

Vendor-Qualcomm Technologies, Inc.

Product-sw5100p qcs410_firmware sa6150p_firmware sd865_5g qcs610_firmware sxr2130_firmware srv1m qca8081_firmware wcd9370 ar8035_firmware qca6696 wcd9340_firmware wcd9341_firmware qcc710_firmware qca6426 wcn3610 qcn9074 wsa8815_firmware snapdragon_wear_4100\+_firmware sa8195p_firmware qca8337_firmware qca8337 qca6426_firmware qca6574au_firmware snapdragon_x72_5g_modem-rf qam8295p wcd9341 qca6574au sa8620p_firmware wcn3950 wsa8810_firmware snapdragon_870_5g_mobile_firmware sa9000p_firmware srv1h snapdragon_auto_5g_modem-rf_gen_2_firmware wcn3660b_firmware fastconnect_6800_firmware sa8295p_firmware snapdragon_870_5g_mobile video_collaboration_vc1_platform_firmware sa8770p c-v2x_9150 qca6584au qcn6274_firmware qcc710 snapdragon_xr2_5g_firmware sw5100_firmware fastconnect_6800 qfw7114_firmware snapdragon_wear_4100\+fastconnect_7800_firmware fastconnect_6900 snapdragon_w5\+_gen_1_wearable_firmware video_collaboration_vc1_platform snapdragon_865_5g_mobile_firmware sa7255p qfw7114 fastconnect_6900_firmware qam8255p_firmware wcd9380 sa6145p_firmware qam8255p snapdragon_xr2_5g snapdragon_8_gen_1_mobile_firmware sa8150p sa6155p wsa8810 qam8650p sa9000p srv1h_firmware sw5100 video_collaboration_vc3_platform c-v2x_9150_firmware sa6155p_firmware qam8295p_firmware srv1m_firmware snapdragon_x55_5g_modem-rf qfw7124_firmware qca6698aq_firmware qca6436_firmware snapdragon_8_gen_1_mobile snapdragon_x55_5g_modem-rf_firmware wcn3610_firmware sa8255p snapdragon_865\+_5g_mobile wcd9370_firmware sa7255p_firmware snapdragon_x72_5g_modem-rf_firmware wcn3660b sxr2130 qca6174a sa8195p wcd9340 qamsrv1m snapdragon_auto_5g_modem-rf_gen_2 qca6174a_firmware qam8650p_firmware wcn3988 qca6584au_firmware wcn3980_firmware qcn6274 qca6436 qfw7124 sa8775p snapdragon_w5\+_gen_1_wearable wsa8835 qca6391_firmware sw5100p_firmware sa8775p_firmware qamsrv1h qca6696_firmware wcd9380_firmware sa6150p qcs410 sa8155p_firmware qca8081 wsa8815 sa8155p wsa8830 qam8775p sa6145p snapdragon_x75_5g_modem-rf qcn9074_firmware sa8620p sa8255p_firmware ar8035 qamsrv1m_firmware sa8650p_firmware snapdragon_865_5g_mobile qca6391 qcn6224 snapdragon_865\+_5g_mobile_firmware qca6698aq wcn3950_firmware sa8770p_firmware sa8295p fastconnect_7800 sa8145p_firmware sa8650p qam8775p_firmware sd865_5g_firmware wcn3680b sa8150p_firmware wcn3988_firmware qamsrv1h_firmware video_collaboration_vc3_platform_firmware sa8145p snapdragon_x75_5g_modem-rf_firmware wsa8835_firmware wcn3980 wsa8830_firmware wcn3680b_firmware qcn6224_firmware qcs610 Snapdragon qam8255p_firmware qualcomm_video_collaboration_vc1_platform_firmware qca8337_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware qcn6224_firmware wcn3950_firmware sa8150p_firmware snapdragon_x72_5g_modem-rf_system_firmware qca6584au_firmware c-v2x_9150_firmware qfw7114_firmware qualcomm_video_collaboration_vc3_platform_firmware qamsrv1h_firmware wcd9340_firmware qam8295p_firmware snapdragon_xr2_5g_platform_firmware qca6426_firmware wcn3660b_firmware sa9000p_firmware wcn3680b_firmware qca6574au_firmware qca8081_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware wcn3610_firmware qca6436_firmware sa8620p_firmware sa6155p_firmware qcn6274_firmware sa8775p_firmware sa8650p_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware srv1h_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware sa7255p_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware sa8255p_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware qca6174a_firmware qam8650p_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware sxr2130_firmware qca6696_firmware qca6391_firmware wcd9370_firmware qcc710_firmware wsa8830_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware sw5100_firmware qcn9074_firmware fastconnect_6800_firmware qcs410_firmware sa8295p_firmware qfw7124_firmware ar8035_firmware

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 7.00%

||

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-15 Jan, 2025 | 16:52

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.12% / 32.27%

||

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-10 Jan, 2025 | 17:50

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Memory corruption while processing the IOCTL FM HCI WRITE request.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_8c_compute_firmware snapdragon_7c\+_gen_3_compute snapdragon_7c_gen_2_compute qca6391_firmware wcd9380_firmware wcd9385_firmware fastconnect_6800_firmware snapdragon_8c_compute sm6250_firmware wsa8830 fastconnect_7800 wsa8845h snapdragon_8cx_gen_3_firmware snapdragon_7c_gen_2_compute_firmware snapdragon_8cx_compute wsa8840 fastconnect_6700 qca6420 snapdragon_8cx_gen_2_5g_firmware wcd9385 fastconnect_6200 wcd9380 wsa8815 sc8380xp wsa8845 snapdragon_7c\+_gen_3_compute_firmware wsa8810 fastconnect_6900_firmware fastconnect_6800 snapdragon_8cx_compute_firmware wcd9340 snapdragon_7c_compute wcd9341 wsa8845_firmware fastconnect_6900 sc8380xp_firmware qca6430_firmware wsa8815_firmware wsa8830_firmware qca6391 snapdragon_8cx_gen_3 wsa8845h_firmware aqt1000_firmware fastconnect_7800_firmware fastconnect_6200_firmware sm6250 snapdragon_7c_compute_firmware wsa8835_firmware wsa8835 wsa8840_firmware qca6430 aqt1000 qca6420_firmware fastconnect_6700_firmware snapdragon_8cx_gen_2_5g wcd9340_firmware wcd9341_firmware wsa8810_firmware Snapdragon fastconnect_7800_firmware wcd9341_firmware wsa8845h_firmware wsa8830_firmware fastconnect_6200_firmware sm6250_firmware qca6420_firmware qca6430_firmware wcd9340_firmware wsa8845_firmware fastconnect_6800_firmware qca6391_firmware wsa8835_firmware sc8380xp_firmware fastconnect_6900_firmware wcd9385_firmware fastconnect_6700_firmware wsa8840_firmware wsa8815_firmware wcd9380_firmware wsa8810_firmware aqt1000_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 5.65%

||

7 Day CHG~0.00%

Published-03 Jun, 2024 | 10:05

Updated-27 Jan, 2025 | 19:11

Use After Free in Audio

Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.

Vendor-Qualcomm Technologies, Inc.

Product-qca6584au_firmware wsa8835 wsa8835_firmware wcn3988_firmware qca8337_firmware sa9000p qfw7124_firmware snapdragon_w5\+_gen_1_wearable wsa8830 qcc710 qca6698aq qca8081_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qca6584au qcn6224_firmware qfw7114_firmware qca8081 sa8770p_firmware snapdragon_w5\+_gen_1_wearable_firmware sw5100_firmware snapdragon_x75_5g_modem-rf qcn6224 qcn6274_firmware qfw7114 fastconnect_7800 qca6698aq_firmware sa9000p_firmware qam8255p ar8035 fastconnect_7800_firmware sw5100p_firmware sa8255p_firmware snapdragon_auto_5g_modem-rf_gen_2 sw5100p wcd9340 sa8775p qca8337 wcn3980_firmware qcc710_firmware ar8035_firmware qcn6274 qfw7124 wcn3980 qam8255p_firmware wcd9340_firmware sa8255p sa8775p_firmware wcn3988 qam8775p sa8770p wsa8830_firmware sw5100 qam8775p_firmware snapdragon_x75_5g_modem-rf_firmware Snapdragon qam8255p_firmware qca8337_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware qca6584au_firmware qcn6274_firmware sa8775p_firmware qfw7114_firmware snapdragon_x75_5g_modem-rf_system_firmware wcd9340_firmware wcn3988_firmware qcc710_firmware qcn6224_firmware wsa8830_firmware sa9000p_firmware wsa8835_firmware fastconnect_7800_firmware sw5100_firmware qca8081_firmware wcn3980_firmware sa8255p_firmware qfw7124_firmware sw5100p_firmware ar8035_firmware qca6698aq_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 13.21%

||

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Use After Free in Audio

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware wsa8830 wcd9380_firmware sa6150p_firmware ssg2125p sa8145p_firmware sxr2230p_firmware sw5100p qam8650p sd865_5g qca6595 snapdragon_8_gen_1_firmware qam8775p snapdragon_ar2_gen_1 snapdragon_685_4g_firmware wsa8835 qca6574 sxr1230p_firmware wcn3950_firmware snapdragon_8_gen_1 sd_8_gen1_5g wcd9380 sa8150p_firmware qca6595au_firmware fastconnect_6700 wcd9370 ssg2125p_firmware qca6574a ssg2115p sxr1230p wcn3980 snapdragon_8\+_gen_1 wcd9385_firmware qam8295p wcn3950 qcm4325_firmware qca6574_firmware sd_8_gen1_5g_firmware snapdragon_680_4g_firmware wsa8815 sxr2230p qam8295p_firmware snapdragon_4_gen_2 qca6574a_firmware qca6574au_firmware qca6595au wcd9375_firmware wcn3980_firmware snapdragon_w5\+_gen_1_firmware snapdragon_xr2_5g sa8295p snapdragon_w5\+_gen_1 fastconnect_7800 wcn6740_firmware sa6155p_firmware snapdragon_685_4g snapdragon_ar2_gen_1_firmware snapdragon_4_gen_2_firmware wsa8832_firmware qca6698aq sa4155p_firmware fastconnect_6900 fastconnect_6900_firmware sa4150p wcn3988_firmware qca6797aq_firmware qca6574au sa6145p_firmware sa8155p_firmware snapdragon_680_4g fastconnect_6700_firmware sa8195p wsa8810_firmware snapdragon_8\+_gen_1_firmware fastconnect_7800_firmware sw5100 wsa8810 wsa8832 sa8255p_firmware sa6155p sg4150p sw5100p_firmware qca6698aq_firmware sa6145p qam8650p_firmware wcd9385 qam8775p_firmware sa8255p qca6696_firmware qca6595_firmware sa8145p wcn6740 qca6696 qca6797aq snapdragon_xr2_5g_firmware sa4150p_firmware wcd9375 wcd9370_firmware sa8150p sa6150p sa8155p wsa8830_firmware sd865_5g_firmware wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware ssg2115p_firmware sw5100_firmware sa8295p_firmware qam8255p sa4155p sg4150p_firmware qcm4325 Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 11.21%

||

7 Day CHG~0.00%

Published-01 Jul, 2024 | 14:17

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services

Memory corruption while processing IOCTL handler in FastRPC.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8845_firmware snapdragon_7c\+_gen_3 wsa8840 wcd9370 sc8180x-ab_firmware wcd9340_firmware wcd9385 sc8380xp wcd9341_firmware sc8180xp-ab_firmware sc8280xp-bb sc8180x-af sc8180x-ab fastconnect_6700 qca6420 sc8180xp-ab sc8180xp-ad qca6430 wsa8815_firmware wcd9370_firmware sc8180xp-ad_firmware qcm6490_firmware wcd9340 wcd9341 qcm6490 sc8180xp-aa_firmware wsa8810_firmware wsa8845h_firmware sc8180x-af_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sc8180x-ac wsa8835 wsa8840_firmware qca6391_firmware sc8180x-ac_firmware qca6430_firmware sc8180x-aa fastconnect_6800_firmware qcs5430 wsa8845h sc8180xp-ac_firmware wcd9380_firmware qcm5430 sc8180x-ad_firmware qcm5430_firmware wsa8815 wsa8830 sc8180x\+sdx55_firmware sc8380xp_firmware sc8180xp-ac fastconnect_6800 sc8280xp-ab_firmware wcd9375_firmware fastconnect_7800_firmware fastconnect_6900 snapdragon_7c\+_gen_3_firmware qca6391 sc8280xp-ab qcs5430_firmware sc8180x\+sdx55 wcd9385_firmware sc8180xp-af_firmware fastconnect_6900_firmware sc8180xp-aa wcd9380 fastconnect_6200 sc8180x-aa_firmware fastconnect_7800 wcd9375 sc8180xp-af wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware sc8180x-ad wsa8835_firmware wsa8810 qcs6490 fastconnect_6200_firmware sc8280xp-bb_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon aqt1000_firmware qcm5430_firmware wcd9380_firmware qca6430_firmware qcs6490_firmware qcm6490_firmware qcs5430_firmware wsa8840_firmware qualcomm_video_collaboration_vc3_platform_firmware qca6391_firmware wcd9385_firmware fastconnect_6900_firmware wcd9370_firmware sc8380xp_firmware wcd9340_firmware wsa8830_firmware wsa8845_firmware fastconnect_6700_firmware wsa8815_firmware wsa8835_firmware wsa8810_firmware fastconnect_6200_firmware wcd9341_firmware fastconnect_7800_firmware qca6420_firmware wcd9375_firmware wsa8845h_firmware fastconnect_6800_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.89%

||

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-11 Aug, 2025 | 15:06

Use After Free in DSP Services

Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware sw5100p wcn6650 qca6595 wcd9370 qca8081_firmware qca6696 qam8620p_firmware wcd9340_firmware wcd9395_firmware wcn7881_firmware wcn6450 qcc710_firmware snapdragon_8\+_gen_1_mobile fastconnect_6700 snapdragon_685_4g_mobile wsa8832_firmware qca8337 qdu1110 wcd9395 qca6574au_firmware snapdragon_x72_5g_modem-rf qam8295p qca6574au wcd9390 sa8620p_firmware wsa8810_firmware wsa8845h_firmware sa9000p_firmware srv1h sa8770p ssg2115p qcc710 fastconnect_6900 snapdragon_w5\+_gen_1_wearable_firmware qru1032_firmware qep8111 sa7255p sm8635 qfw7114 wcd9385_firmware qam8255p_firmware qcs4490 snapdragon_680_4g_mobile wsa8845 sa6155p wsa8810 qam8650p qdu1000_firmware video_collaboration_vc5_platform_firmware sa9000p srv1h_firmware qca6595au sxr2250p_firmware qdu1010 snapdragon_662_mobile_firmware sa6155p_firmware snapdragon_685_4g_mobile_firmware wsa8840 snapdragon_ar1_gen_1 srv1m_firmware qcs8550_firmware snapdragon_x35_5g_modem-rf_firmware qdu1210_firmware snapdragon_8_gen_2_mobile_firmware qfw7124_firmware snapdragon_4_gen_2_mobile_firmware snapdragon_695_5g_mobile_firmware qcs4490_firmware sm8635p snapdragon_460_mobile snapdragon_8_gen_2_mobile wcd9370_firmware qdu1110_firmware qdu1000 sa7255p_firmware qca6574a snapdragon_8\+_gen_2_mobile snapdragon_x72_5g_modem-rf_firmware qca6174a sa8195p wcd9340 qcs8250_firmware qdu1210 talynplus snapdragon_auto_5g_modem-rf_gen_2 sm8550p_firmware sxr2250p wcn3988 snapdragon_662_mobile sa8775p qca6574 sxr2230p_firmware sa8775p_firmware qamsrv1h wsa8845h sa8155p_firmware sa8155p wsa8830 sm8550p sm7675_firmware sa8255p_firmware ar8035 qamsrv1m_firmware sm7635_firmware snapdragon_4_gen_2_mobile sa8650p_firmware wcn6450_firmware qcm4325 srv1l_firmware qcn6224 qca6698aq wcn3950_firmware sa7775p_firmware sm7635 qrb5165n ssg2125p_firmware snapdragon_480\+_5g_mobile fastconnect_6200 wcd9378 snapdragon_480_5g_mobile_firmware sm8635p_firmware qdx1011 fastconnect_6700_firmware snapdragon_x75_5g_modem-rf_firmware snapdragon_8_gen_3_mobile qcs8250 snapdragon_695_5g_mobile fastconnect_6200_firmware wsa8830_firmware snapdragon_460_mobile_firmware qcn6224_firmware wsa8845_firmware wsa8832 wcd9378_firmware snapdragon_480_5g_mobile srv1l sm7675p srv1m snapdragon_x35_5g_modem-rf ar8035_firmware sm4635 wsa8815_firmware sa8195p_firmware qca8337_firmware sm4635_firmware qcm4490_firmware qru1032 wcn3950 flight_rb5_5g qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware talynplus_firmware sa8295p_firmware qca6584au qcn6274_firmware wcn6755_firmware qru1062_firmware sw5100_firmware wcn6650_firmware qru1062 snapdragon_8_gen_3_mobile_firmware qfw7114_firmware qca6595_firmware qcs7230 fastconnect_7800_firmware sm8635_firmware fastconnect_6900_firmware robotics_rb5_firmware wcd9380 qam8255p sxr2230p wcn6755 sxr1230p sm6650 wcn7881 sw5100 snapdragon_4_gen_1_mobile_firmware qca6688aq qam8295p_firmware qca6698aq_firmware wcd9385 snapdragon_8_gen_1_mobile snapdragon_680_4g_mobile_firmware sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware qep8111_firmware qdx1011_firmware flight_rb5_5g_firmware ssg2125p qru1052 qcm4490 snapdragon_480\+_5g_mobile_firmware qamsrv1m robotics_rb5 qca6174a_firmware wcn7861_firmware wcn7861 qam8650p_firmware video_collaboration_vc5_platform sm6650_firmware qam8620p qca6584au_firmware qcn6274 qrb5165n_firmware qfw7124 wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware qdu1010_firmware sw5100p_firmware qca6696_firmware wcd9380_firmware qca6574_firmware qca8081 wsa8815 sg4150p sd_8_gen1_5g qam8775p qca6797aq snapdragon_ar2_gen_1_firmware snapdragon_x75_5g_modem-rf qcm4325_firmware sa8620p qca6574a_firmware snapdragon_4_gen_1_mobile sd_8_gen1_5g_firmware wcd9375_firmware sa7775p qca6391 snapdragon_ar1_gen_1_firmware sg4150p_firmware qru1052_firmware sa8770p_firmware sa8295p qcs8550 fastconnect_7800 sa8650p qam8775p_firmware snapdragon_8\+_gen_2_mobile_firmware qca6688aq_firmware wcd9375 snapdragon_ar2_gen_1 wcn3988_firmware qamsrv1h_firmware sm7675 snapdragon_8\+_gen_1_mobile_firmware wsa8835_firmware ssg2115p_firmware sm7675p_firmware qdx1010 snapdragon_w5\+_gen_1_wearable snapdragon_8_gen_1_mobile_firmware Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 13.24%

||

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Access of Uninitialized Pointer in SPS Applications

Memory corruption while verifying the serialized header when the key pairs are generated.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware qcm8550_firmware sa6150p_firmware sw5100p sd865_5g qca6595 wcd9370 qca8081_firmware qca6696 wcd9340_firmware sa8530p wcd9395_firmware qcc710_firmware qca6426 snapdragon_8\+_gen_1_mobile fastconnect_6700 wsa8832_firmware qca8337 qdu1110 qca6426_firmware wcd9395 qca6574au_firmware snapdragon_x72_5g_modem-rf qam8295p qca6574au wcd9390 sa8620p_firmware snapdragon_888\+_5g_mobile_firmware wsa8810_firmware sa9000p_firmware srv1h fastconnect_6800_firmware qcs5430 qcm5430 qcm5430_firmware sa8770p ssg2115p qcc710 snapdragon_xr2_5g_firmware sa8540p qsm8350_firmware fastconnect_6900 snapdragon_w5\+_gen_1_wearable_firmware qru1032_firmware qep8111 sa7255p qfw7114 wcd9385_firmware qca6421 qam8255p_firmware snapdragon_x65_5g_modem-rf qcs4490 wsa8845 sa6155p qca6421_firmware wsa8810 qam8650p qdu1000_firmware sa9000p srv1h_firmware snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile qdu1010 sa6155p_firmware wsa8840 srv1m_firmware qcs8550_firmware snapdragon_x35_5g_modem-rf_firmware qdu1210_firmware snapdragon_8_gen_2_mobile_firmware snapdragon_x55_5g_modem-rf qfw7124_firmware snapdragon_4_gen_2_mobile_firmware qca6436_firmware qcs4490_firmware snapdragon_x55_5g_modem-rf_firmware snapdragon_8_gen_2_mobile wcd9370_firmware qdu1110_firmware qdu1000 sa7255p_firmware qca6574a snapdragon_8\+_gen_2_mobile snapdragon_x72_5g_modem-rf_firmware qca6174a sa8195p wcd9340 qdu1210 talynplus snapdragon_auto_5g_modem-rf_gen_2 qcm6490 sa8540p_firmware sm8550p_firmware qcm8550 wcn3988 snapdragon_765_5g_mobile_firmware sa8775p qca6574 sa8775p_firmware qamsrv1h sa6150p sa8155p_firmware sa8155p snapdragon_765g_5g_mobile_firmware wsa8830 sm8550p sa6145p snapdragon_768g_5g_mobile_firmware sa8255p_firmware ar8035 qamsrv1m_firmware snapdragon_4_gen_2_mobile sa8650p_firmware snapdragon_8cx_gen_3_compute qcn6224 snapdragon_865\+_5g_mobile_firmware qca6698aq ssg2125p_firmware wcn3950_firmware sa8530p_firmware fastconnect_6200 sa8145p_firmware qdx1011 sa8150p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware snapdragon_x75_5g_modem-rf_firmware qcs6490 snapdragon_8_gen_3_mobile fastconnect_6200_firmware wsa8830_firmware qcn6224_firmware qca6431 qca6678aq_firmware wsa8845_firmware wsa8832 sxr2130_firmware srv1m qca6678aq snapdragon_x35_5g_modem-rf ar8035_firmware sc8380xp wsa8815_firmware sa8195p_firmware qca8337_firmware sg8275p_firmware qcm6490_firmware sm7250p_firmware qcm4490_firmware qru1032 wcn3950 snapdragon_870_5g_mobile_firmware qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware talynplus_firmware sa8295p_firmware snapdragon_870_5g_mobile sm7250p qca6584au qcn6274_firmware qru1062_firmware sw5100_firmware snapdragon_768g_5g_mobile sc8380xp_firmware qru1062 snapdragon_8_gen_3_mobile_firmware fastconnect_6800 qfw7114_firmware qca6595_firmware fastconnect_7800_firmware snapdragon_865_5g_mobile_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware qam8255p snapdragon_xr2_5g sa8150p sxr1230p sw5100 video_collaboration_vc3_platform qam8295p_firmware qca6431_firmware snapdragon_8cx_gen_3_compute_firmware qca6698aq_firmware wcd9385 snapdragon_888\+_5g_mobile qsm8350 snapdragon_8_gen_1_mobile sa8255p sxr1230p_firmware wcd9390_firmware snapdragon_865\+_5g_mobile qep8111_firmware sg8275p snapdragon_765_5g_mobile qdx1011_firmware ssg2125p qru1052 sxr2130 qcm4490 snapdragon_x65_5g_modem-rf_firmware qamsrv1m qca6174a_firmware qam8650p_firmware qcs6490_firmware qca6584au_firmware wcn3980_firmware qcn6274 qca6436 qfw7124 wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware qdu1010_firmware sw5100p_firmware qca6696_firmware wcd9380_firmware qca6574_firmware qca8081 wsa8815 sd_8_gen1_5g qam8775p qca6797aq snapdragon_ar2_gen_1_firmware snapdragon_x75_5g_modem-rf sa8620p qca6574a_firmware snapdragon_865_5g_mobile sd_8_gen1_5g_firmware wcd9375_firmware qca6391 qcs5430_firmware qru1052_firmware sa8770p_firmware sa8295p qcs8550 fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware snapdragon_8\+_gen_2_mobile_firmware wcd9375 snapdragon_765g_5g_mobile snapdragon_ar2_gen_1 wcn3988_firmware qamsrv1h_firmware sa8145p snapdragon_8\+_gen_1_mobile_firmware wsa8835_firmware ssg2115p_firmware wcn3980 qdx1010 snapdragon_w5\+_gen_1_wearable snapdragon_8_gen_1_mobile_firmware Snapdragon qam8255p_firmware talynplus_firmware qca8337_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware sg8275p_firmware qca6431_firmware qdu1010_firmware ar8035_firmware sa8530p_firmware qcn6224_firmware sxr1230p_firmware qdu1110_firmware wcn3950_firmware sa8540p_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6595au_firmware snapdragon_x72_5g_modem-rf_system_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qcm5430_firmware qca6584au_firmware qep8111_firmware qfw7114_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qamsrv1h_firmware qca6574_firmware sd_8_gen1_5g_firmware wcd9340_firmware qsm8350_firmware qru1032_firmware qam8295p_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware qca6426_firmware sa9000p_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware wcd9375_firmware qca8081_firmware wsa8845h_firmware wcn3980_firmware sm7250p_firmware snapdragon_x55_5g_modem-rf_system_firmware qca6436_firmware qca6421_firmware sa8620p_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qcm4490_firmware snapdragon_x35_5g_modem-rf_system_firmware qca6678aq_firmware qcn6274_firmware qcs4490_firmware sa8775p_firmware qcm6490_firmware wsa8840_firmware sa8650p_firmware wsa8832_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware srv1h_firmware qcs8550_firmware sc8380xp_firmware wcn3988_firmware qru1062_firmware qca6797aq_firmware sa6145p_firmware sa8155p_firmware qdx1011_firmware fastconnect_6700_firmware sa7255p_firmware wsa8810_firmware fastconnect_7800_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware qdx1010_firmware qdu1000_firmware sw5100p_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware qca6174a_firmware qam8650p_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware qca6595_firmware qcs5430_firmware qca6391_firmware qru1052_firmware wcd9370_firmware sm8550p_firmware qcc710_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware ssg2115p_firmware sw5100_firmware fastconnect_6800_firmware qfw7124_firmware sa8295p_firmware qdu1210_firmware snapdragon_8_gen_2_mobile_platform_firmware

CWE ID-CWE-824

Access of Uninitialized Pointer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.12% / 32.27%

||

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-10 Jan, 2025 | 20:14

NULL Pointer Dereference in Windows Graphics

Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_7c_gen_2_compute wcd9385_firmware sc8180xp-ad fastconnect_7800 wcd9385 wcd9380 sc8180xp-acaf wsa8815 sc8380xp wsa8845 snapdragon_7c\+_gen_3_compute_firmware wsa8810 fastconnect_6900_firmware snapdragon_7c_compute wsa8845_firmware fastconnect_6900 qca6430_firmware sc8180x-aaab sc8180x-acaf wsa8830_firmware qca6391 aqt1000_firmware sc8180x-ad_firmware sc8180xp-aaab snapdragon_7c_compute_firmware wsa8835 sc8280xp-abbb sc8280xp-abbb_firmware qca6430 wcd9340_firmware qca6420_firmware wsa8810_firmware snapdragon_7c\+_gen_3_compute qca6391_firmware wcd9380_firmware fastconnect_6800_firmware sm6250_firmware wsa8830 wsa8845h snapdragon_7c_gen_2_compute_firmware wsa8840 fastconnect_6700 qca6420 sc8180xp-aaab_firmware fastconnect_6200 sc8180xp-ad_firmware fastconnect_6800 wcd9340 sc8180x\+sdx55 wcd9341 sc8180x-acaf_firmware sc8380xp_firmware sc8180x-aaab_firmware wsa8815_firmware wsa8845h_firmware fastconnect_7800_firmware fastconnect_6200_firmware sm6250 sc8180xp-acaf_firmware wsa8835_firmware sc8180x-ad wsa8840_firmware aqt1000 fastconnect_6700_firmware wcd9341_firmware sc8180x\+sdx55_firmware Snapdragon fastconnect_7800_firmware wcd9341_firmware wsa8845h_firmware wsa8830_firmware fastconnect_6200_firmware sm6250_firmware qca6420_firmware qca6430_firmware wcd9340_firmware wsa8845_firmware fastconnect_6800_firmware qca6391_firmware wsa8835_firmware sc8380xp_firmware fastconnect_6900_firmware wcd9385_firmware fastconnect_6700_firmware wsa8840_firmware wsa8815_firmware wcd9380_firmware wsa8810_firmware aqt1000_firmware

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.89%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:01

Untrusted Pointer Dereference in Automotive Android OS

Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware qep8111 sa7255p snapdragon_x35_5g_modem-rf wcn7860 qamsrv1m qdu1210 qcn6224_firmware qam8295p_firmware wcn7881_firmware qcs8550_firmware qru1052_firmware wcn7881 qdu1010_firmware sa7775p_firmware sa8775p qca6574au_firmware qam8775p sa8195p sa8650p_firmware qcn6274_firmware qca6391 qca6584au sm8750 wcn3950_firmware vision_intelligence_400 qca6688aq_firmware qdu1110 wcn6650 qdu1210_firmware sa8255p snapdragon_480_5g_mobile wcn3950 snapdragon_w5\+_gen_1_wearable sw5100 wsa8845_firmware qcc710_firmware qru1052 qdu1000_firmware qca6574_firmware qcm8550_firmware snapdragon_8\+_gen_2_mobile sw5100p_firmware ar8035 wcn6755_firmware qep8111_firmware video_collaboration_vc5_platform_firmware sm7635_firmware srv1l_firmware qru1032 wsa8845h qca6574 sa6155p_firmware wcn6450_firmware snapdragon_4_gen_1_mobile qcm8550 snapdragon_680_4g_mobile wcd9341 sa8650p sa8770p_firmware wcn3988 wcn7880_firmware qca6698aq_firmware wcd9395_firmware qamsrv1m_firmware sa8775p_firmware wcn3990_firmware qcs6125 sm7635 snapdragon_680_4g_mobile_firmware fastconnect_6900 qca6688aq wcn3988_firmware qca6574a wcd9335 qcs8250 wcd9375_firmware wcd9385_firmware qam8650p_firmware wsa8810 qdx1011 snapdragon_8_gen_3_mobile_firmware qam8255p_firmware sa8295p wcd9375 snapdragon_685_4g_mobile_firmware sa8620p_firmware sm6650 snapdragon_w5\+_gen_1_wearable_firmware sa7255p_firmware qca6595_firmware qdu1000 fastconnect_6200_firmware qamsrv1h sa6155p snapdragon_x75_5g_modem-rf_firmware wcd9380 snapdragon_480\+_5g_mobile_firmware snapdragon_480\+_5g_mobile qamsrv1h_firmware sa8155p wcn7861_firmware wsa8832_firmware sw5100p wsa8830_firmware wcn6755 qca8081 sg4150p snapdragon_8_gen_2_mobile_firmware qca6595au_firmware qdu1110_firmware qcn6224 wcd9385 sa8255p_firmware wsa8840_firmware qca6595au qfw7124_firmware qam8255p sm4635 wsa8840 srv1h qam8620p sm8550p_firmware qfw7124 ar8035_firmware qca6696 sa8195p_firmware sg4150p_firmware sa8155p_firmware qca6595 sm7675 snapdragon_460_mobile qca8337 wsa8845h_firmware qdx1010_firmware qam8650p qca8337_firmware video_collaboration_vc1_platform_firmware wsa8845 qcm6125 wcn6650_firmware wcd9380_firmware vision_intelligence_400_firmware wcn6450 qca6391_firmware snapdragon_662_mobile_firmware qca6174a_firmware srv1m qdx1010 qdu1010 qru1062 qam8775p_firmware sm8635p video_collaboration_vc5_platform wcn3980 sm8635p_firmware snapdragon_685_4g_mobile wcd9370 wcd9340_firmware qcs7230_firmware wcd9378 sm7675_firmware sa8295p_firmware qcm4325_firmware sm8750p sa9000p wsa8835 sm8750p_firmware qca8081_firmware qca6678aq fastconnect_7800 qca6797aq_firmware snapdragon_480_5g_mobile_firmware snapdragon_x75_5g_modem-rf wcd9341_firmware wcd9340 qam8295p qcs8250_firmware snapdragon_695_5g_mobile snapdragon_8_gen_2_mobile qca6174a wcn7880 qam8620p_firmware sm4635_firmware qcm6125_firmware wcd9378_firmware wcd9335_firmware qca6574au qca6797aq qcs7230 qcs8550 sm7675p sw5100_firmware sm6650_firmware snapdragon_auto_5g_modem-rf_gen_2 qca6584au_firmware wcn3990 qca6696_firmware sm7675p_firmware snapdragon_x72_5g_modem-rf_firmware qdx1011_firmware wsa8810_firmware qru1032_firmware srv1m_firmware wsa8832 wcd9390_firmware qcn6274 sm8635 qcc710 snapdragon_695_5g_mobile_firmware sm8635_firmware snapdragon_8_gen_3_mobile wsa8815 qcs6125_firmware snapdragon_662_mobile snapdragon_x72_5g_modem-rf qru1062_firmware wcn7861 qca6574a_firmware sa8620p sm8750_firmware wsa8830 wsa8815_firmware srv1l snapdragon_8\+_gen_2_mobile_firmware wcn7860_firmware sa8770p fastconnect_6200 srv1h_firmware wcn3980_firmware snapdragon_x35_5g_modem-rf_firmware qca6678aq_firmware qca6698aq video_collaboration_vc1_platform snapdragon_4_gen_1_mobile_firmware fastconnect_6900_firmware qcm4325 snapdragon_460_mobile_firmware sa9000p_firmware qfw7114 sm8550p wcd9390 sa7775p wcd9395 qfw7114_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware wsa8835_firmware wcd9370_firmware Snapdragon

CWE ID-CWE-822

Untrusted Pointer Dereference

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 14.21%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-15 May, 2025 | 19:44

Improper Access Control in Automotive Multimedia

Memory corruption in Automotive Multimedia due to improper access control in HAB.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-284

Improper Access Control

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.50%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-17 Jun, 2025 | 21:29

Untrusted Pointer Dereference in Display

Memory corruption while reading ACPI config through the user mode app.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-822

Untrusted Pointer Dereference

CWE ID-CWE-763

Release of Invalid Pointer or Reference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 25.48%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:11

Updated-04 Aug, 2024 | 00:33

A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware mdm9150_firmware wsa8830 sa6150p_firmware sa8145p_firmware qcs610 qcs2290_firmware qca8337 wcd9360_firmware csra6620 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qcs2290 qca6595au_firmware qca6390_firmware wcd9370 csra6620_firmware qcs605_firmware csra6640_firmware qcs6125_firmware qca6426 wcn3990_firmware qrb5165n_firmware qca9377 wcn3998 wcd9385_firmware qam8295p sdxr2_5g_firmware wcn3950 qsw8573_firmware sd_8_gen1_5g_firmware sm6375_firmware wcn3660b sd662 sd460_firmware qam8295p_firmware sm7315_firmware qca6574au_firmware sdx55_firmware qca6595au sdx12_firmware wcd9375_firmware wcn3998_firmware msm8909w sm7250p_firmware apq8009w_firmware wcd9360 qca6436_firmware wcn3610_firmware qrb5165n sd778g sa6155p_firmware wcn3999 sa515m_firmware qcs6490 qrb5165_firmware qrb5165m_firmware sd429 sdxr2_5g qcs6125 sd662_firmware qcs405 wcn3988_firmware sa6145p_firmware sd205 sd429_firmware sd778g_firmware wcd9340 sa8195p wsa8810_firmware qualcomm215_firmware sd765g sw5100 sd765_firmware qca6436 wcn6851 wcd9335 sa6155p qcs603_firmware qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 qca6696_firmware qcs6490_firmware sd870_firmware ar8035 qca6390 wcd9375 aqt1000 sa8150p wcn3910_firmware wsa8830_firmware sda429w sd210 sd855_firmware sd865_5g_firmware wcn3620_firmware qcm6490 sd888_5g_firmware wcn3988 wcn3620 wcn6850_firmware wsa8815_firmware sa8195p_firmware wsa8835_firmware sm8475 sa8295p_firmware wcn6750_firmware wcn3610 qcm6125_firmware qcm2290_firmware sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware wcn3990 sdm429w sd780g sw5100p sd865_5g sdx24 sdx55m_firmware wcn6856_firmware sd888 qet4101_firmware msm8909w_firmware wsa8835 sdm429w_firmware wcd9380 sd888_5g wcn3999_firmware qualcomm215 qcs410 qca6574a wcn6855_firmware qca6174a sm7325p sdx24_firmware wcd9335_firmware wcn3980 wcn6750 qsw8573 sa515m qcs605 wcd9340_firmware sd855 wsa8815 sm7325p_firmware wcn6850 wcn3910 sd765 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd768g_firmware qrb5165m wcn3980_firmware sm7315 sd460 qca6391 sdx55m sa8295p aqt1000_firmware wcn6740_firmware ar8031_firmware qcm4290 qcm6490_firmware qrb5165 sd480_firmware qcs603 wcn6851_firmware qca6574au sa8155p_firmware sd205_firmware apq8009w wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 sw5100p_firmware sd210_firmware qcs610_firmware mdm9150 wcn6856 sa6145p sd768g ar8031 qcs405_firmware sa8145p wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sdx55 sa8155p csra6640 qet4101 sm7250p sdx12 sw5100_firmware qcs410_firmware ar8035_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-863

Incorrect Authorization

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 32.53%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-04 Aug, 2024 | 00:33

Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sd678 sm6250p_firmware qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sd765g_firmware qca6595au_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 wcn3990_firmware wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 sd720g sd_8_gen1_5g_firmware sm7315_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware wcd9360 qca6436_firmware sm7450_firmware sd778g sa515m_firmware wcn7851 sdxr2_5g wcn3988_firmware qca6421 sd778g_firmware sm6250 wsa8810_firmware sd765g sd765_firmware qca6436 wcn6851 qca8081 wcn7851_firmware wcd9385 wcd9341 qca6431 qca6696_firmware sd750g sd870_firmware qca6390 ar8035 sd750g_firmware wcd9375 sm6250_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wsa8815_firmware sm7450 sm8475 wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 wcd9380 sd888_5g sm6250p qca6574a sd690_5g_firmware wcn6855_firmware wcn3980 wcn6750 sa515m sd855 wsa8815 wcn6850 sd765 qca6426_firmware qca6574a_firmware sd695 sd768g_firmware wcn3980_firmware sm7315 sd730 qca6391 sdx55m qca6421_firmware sm8475_firmware wcn6740_firmware sdx65_firmware sd678_firmware wsa8832_firmware sd480_firmware wcn6851_firmware qca6574au wcd9341_firmware sd480 sd870 wsa8810 wcn6855 wsa8832 wcn6856 sd695_firmware sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sd675 sm7250p sd720g_firmware sm8475p_firmware ar8035_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.49%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-04 Aug, 2024 | 00:33

Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto

Vendor-Qualcomm Technologies, Inc.

Product-sa8540p sa9000p sa8540p_firmware sa9000p_firmware Snapdragon Auto

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.10% / 28.49%

||

7 Day CHG~0.00%

Published-01 Apr, 2022 | 04:40

Updated-04 Aug, 2024 | 00:33

Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware fsm10055 sa6150p_firmware sm6250p_firmware qcs610 qca8337 wcd9360_firmware sdx65 wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 wcn3950 sd720g mdm9628 mdm9206_firmware qsw8573_firmware sd_8_gen1_5g_firmware sm6375_firmware wcn3660b sd460_firmware sm7315_firmware qca6574au_firmware wcd9375_firmware wcn3998_firmware qca8081_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware wcd9360 apq8053_firmware qca9367_firmware wcn3999 qrb5165_firmware qrb5165m_firmware sa4155p_firmware qcs6125 sa8155_firmware sd662_firmware qcs405 wcd9340 sd765g qualcomm215_firmware sw5100 fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware mdm9250_firmware wcd9341 qca6696_firmware sd870_firmware sd750g wcn3910_firmware sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware sa8195p_firmware sm8475 wcn6750_firmware wcn3610 sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 qca6564au sdx55m_firmware wcn6856_firmware qet4101_firmware qca6574 wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx24_firmware qcn9012_firmware wcd9335_firmware wcn3980 sd439_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6584_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3980_firmware sd730 wcd9330_firmware sdx55m wcn6740_firmware msm8953 sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware qsm8250 sa6145p sdxr1 ar8031 apq8096au qcs405_firmware sa8145p qca6391_firmware sa4150p_firmware wcd9370_firmware sd780g_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 qet4101 qcs8155_firmware sa4155p ar8035_firmware qcm2290 qsm8250_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware fsm10056 csrb31024 mdm9628_firmware mdm9650 csra6620 fsm10055_firmware qcs4290 mdm9250 sd765g_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 qcn9011_firmware sa8155 qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware qca6584au sd778g sa6155p_firmware qcs8155 sm6225 sa515m_firmware sd429 qcs6490 sdxr2_5g qca9367 mdm9607_firmware sa415m_firmware wcn3988_firmware sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 sm6250_firmware msm8953_firmware sda429w sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a sa4150p qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sdx24 qcn9012 sd888 msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p wcn6750 sa515m qca6574_firmware sd855 sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware qrb5165m sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx20 sd480_firmware qcn9011 sm6225_firmware qca6574au sa8155p_firmware mdm9607 sd205_firmware wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 wcn3680b qca6564_firmware sd768g wcn6740 qca6696 sdw2500 sa6150p apq8096au_firmware sm7250p sd720g_firmware sdx12 sw5100_firmware qcs410_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 27.21%

||

7 Day CHG~0.00%

Published-11 Feb, 2022 | 10:40

Updated-04 Aug, 2024 | 00:33

Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware sm6375 wsa8830 wcn3991 sa6150p_firmware qca8337_firmware sa8145p_firmware wcd9380_firmware sd780g qca8337 wcn6856_firmware sd888 sdx65 wsa8835 qca6574 wcd9380 sa8150p_firmware sd888_5g qca6595au_firmware wcd9370 qca6574a wcn6855_firmware qca6174a sm7325p wcd9335_firmware qca9377 wcn6750 wcn3998 wcd9385_firmware qca6574_firmware sd_8_gen1_5g_firmware sm6375_firmware wsa8815 sm7325p_firmware wcn6850 sm7315_firmware qca6574a_firmware qca6574au_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware wcn3998_firmware sm7315 qca6391 wcn6740_firmware sd778g sa6155p_firmware sdx65_firmware qcs6490 qcm6490_firmware sd480_firmware wcn6851_firmware wcn3988_firmware qca6574au sa6145p_firmware sa8155p_firmware sd778g_firmware sa8195p wsa8810_firmware sd480 wsa8810 wcn6855 wcn6851 wcd9335 sa6155p qca8081 wcn6856 sa6145p qca6174a_firmware wcd9385 qca6696_firmware qcs6490_firmware sa8145p wcn6740 qca6696 qca6391_firmware ar8035 wcd9375 sd780g_firmware wcd9370_firmware sa8150p sa6150p sd888_firmware sa8155p wsa8830_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sdx12 sm8475 wcn6750_firmware ar8035_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.13%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:11

Updated-04 Aug, 2024 | 00:33

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-ipq5018_firmware sd_8cx_gen3_firmware qca2066 wsa8830 qcn9070 qca8337_firmware wcd9380_firmware qcn9000 qca8337 wcn6856_firmware qcn9012 sd888 sdx65 qcn9072 qcn6122_firmware wsa8835 wcd9380 ipq5028_firmware sd888_5g qca2064_firmware qca2062 wcd9370 wcn6855_firmware qcn6132_firmware qcn9000_firmware qcn9012_firmware ipq5018 wcn6750 wcd9385_firmware qcn6024_firmware sd_8_gen1_5g_firmware wcn6850 qca2065 qcn6112 qcn6100_firmware qcn6102_firmware qcn9024 wcd9375_firmware qca8081_firmware qcn6023_firmware qca6391 ipq5010 qca2062_firmware qcn6102 qcn9100 sdx65_firmware qcs6490 qcm6490_firmware ipq5028 qcn9070_firmware wcn6851_firmware qcn6112_firmware qcn9074 qcn9024_firmware qcn6132 wcn6855 wcn6851 qca8081 wcn6856 qcn6023 wcd9385 qcn6122 qcc710 qca2066_firmware qca2065_firmware qcs6490_firmware sd_8cx_gen3 qca6391_firmware ar8035 wcd9375 qca2064 wcd9370_firmware sd888_firmware qcc710_firmware qcn9100_firmware qcn9022_firmware wsa8830_firmware qcn6024 qcn9022 ipq5010_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8835_firmware qcn6100 qcn9072_firmware qcn9074_firmware sm8475 wcn6750_firmware ar8035_firmware Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.90%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 18:49

Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_210 mdm9607 sd_636_firmware sd_820_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.21%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:42

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 mdm9650 sdm429 msm8940_firmware snapdragon_high_med_2016_firmware msm8976_firmware msm8996au apq8009_firmware msm8917 sdm670 qcs605_firmware mdm9206 sdm670_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qca8081 mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 msm8909 apq8096au sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware msm8976 msm8953_firmware msm8940 apq8053 apq8096au_firmware msm8917_firmware msm8998 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 28.49%

||

7 Day CHG~0.00%

Published-01 Apr, 2022 | 04:40

Updated-04 Aug, 2024 | 00:33

Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-sa6150p_firmware ipq4028_firmware qca8337 ar9380 ipq8173_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qcs6125_firmware sa415m wcn3998 qca6554a_firmware wcn3950 ipq8076a qcn6024_firmware sd_8_gen1_5g_firmware sm6375_firmware sd460_firmware sm7315_firmware qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware wcd9360 ipq8070_firmware ipq8065 ipq8078a_firmware qrb5165_firmware ipq5028 qca7500 ipq4029_firmware qcs6125 qrb5165m_firmware sa4155p_firmware sa8155_firmware ipq6010 sd662_firmware ipq8068 qcn6132 sd765g sw5100 qca6436 wcn6851 sa6155p qca9888_firmware qcn6122 ipq8068_firmware qca6696_firmware sd870_firmware qcn5154_firmware sa8150p wsa8830_firmware qca9992_firmware sd865_5g_firmware wcn3988 sa8195p_firmware sm8475 qca9898 qcn5022_firmware wcn6750_firmware ipq4028 ipq5018_firmware sm6375 qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware sw5100p ipq8076a_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qca6574 csr8811_firmware wcd9380 qcn5054_firmware ipq4019_firmware qcn5024 qca8072_firmware qca9985 qcn9012_firmware qcn5052_firmware wcn3980 ipq6018_firmware wsa8815 wcn6850 pmp8074_firmware qcn6112 qca6426_firmware qca9984 ipq6028 ipq8064 qcn9024 pmp8074 wcn3980_firmware sdx55m ipq8064_firmware wcn6740_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware ipq8070 qca9994 qca9980 qcn9024_firmware ipq8174_firmware qca9880 sd480 sd870 wcn6855 sw5100p_firmware ipq6018 sa6145p qca9886_firmware qca6595_firmware sa8145p qca6391_firmware sa4150p_firmware qca4024 sd780g_firmware wcd9370_firmware sdx55 sd888_firmware qcn5021_firmware sa8155p sa4155p ar8035_firmware qcn5024_firmware wcn3991_firmware wsa8830 qcn9070 sa8145p_firmware csrb31024 qcn9072 qca9880_firmware qca9992 sd765g_firmware qca6390_firmware wcd9370 qcn5152_firmware qca6426 qca6584au_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq5018 wcd9385_firmware sdxr2_5g_firmware ipq8074a sd662 qcn5124_firmware qcn6100_firmware qcn6102_firmware qcn9011_firmware sa8155 qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sa6155p_firmware sd778g sm6225 sa515m_firmware ipq8174 qca9990 sdxr2_5g qcs6490 qcn5052 qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware sd778g_firmware sa8195p wsa8810_firmware sd765_firmware qca8081 ipq8071a qcn6023 ipq8071a_firmware wcd9385 qcs6490_firmware ar8035 csr8811 qca6390 qca9898_firmware ipq4019 wcd9375 qcn9100_firmware ipq5010_firmware ipq8074a_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware sa4150p qcm6125_firmware qca8072 qcn9000 sd780g qca6554a sd865_5g qca6595 ar9380_firmware qcn9012 sd888 qcn6122_firmware ipq8065_firmware wsa8835 sd888_5g qcn5154 qca8075_firmware ipq4018 qca6574a wcn6855_firmware qca9889 sm7325p qcn6132_firmware qca9888 qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 sm7325p_firmware ipq8076 sd765 qca6574a_firmware qcn5021 qcn5152 sd768g_firmware qrb5165m sm7315 sd460 qca6391 qcn6102 qcn9100 sdx65_firmware csrb31024_firmware qcm6490_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware qcn9011 sm6225_firmware qca6574au qca9889_firmware sa8155p_firmware qcn5122 qcm6125 wsa8810 wcn6856 qcn5022 ipq6010_firmware sd768g wcn6740 qca6696 sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn6100 qcn9072_firmware sm7250p sw5100_firmware qcn9074_firmware ipq4029 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.10% / 27.83%

||

7 Day CHG~0.00%

Published-01 Apr, 2022 | 04:40

Updated-04 Aug, 2024 | 00:33

Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto

Vendor-Qualcomm Technologies, Inc.

Product-qca6574au sa8155p sa8155p_firmware qca6696_firmware qca6574au_firmware qca6696 Snapdragon Auto

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 12.31%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:11

Updated-04 Aug, 2024 | 00:33

Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware sm6375 wsa8830 wcn3991 sa6150p_firmware qca8337_firmware sa8145p_firmware qcs610 wcd9380_firmware sw5100p sd780g qca8337 wcn6856_firmware sd888 sdx65 wsa8835 wcn3950_firmware wcd9380 sa8150p_firmware sd888_5g qca6595au_firmware qcs410 wcd9370 wcn6855_firmware qca6174a sm7325p wcd9335_firmware qca9377 wcn3980 wcn3998 wcn6750 wcd9385_firmware qam8295p wcn3950 sm6375_firmware wsa8815 sm7325p_firmware wcn6850 qam8295p_firmware sm7315_firmware qca6574au_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware wcn3998_firmware wcn3980_firmware sm7315 qca6391 sa8295p wcn6740_firmware sd778g sa6155p_firmware sdx65_firmware qcs6490 qcm6490_firmware sa4155p_firmware sd480_firmware wcn6851_firmware wcn3988_firmware qca6574au sa6145p_firmware sa8155p_firmware sd778g_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 sd480 wsa8810 wcn6855 wcn6851 wcd9335 sa6155p sw5100p_firmware qca8081 qcs610_firmware wcn6856 sa6145p qca6174a_firmware wcd9385 wcd9341 qca6696_firmware qcs6490_firmware sa8145p wcn6740 qca6696 qca6391_firmware sa4150p_firmware ar8035 wcd9375 sd780g_firmware wcn6750_firmware sa8150p wcd9370_firmware sa6150p sd888_firmware sa8155p wsa8830_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware sdx12 qcs410_firmware sa8295p_firmware sa4155p sa4150p ar8035_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.37%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:51

Updated-04 Aug, 2024 | 00:33

Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware sd_8cx_gen3_firmware wsa8830 sd678 qcs2290_firmware qca6431_firmware qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g qsm8350_firmware sd662 qsm8350 sd460_firmware sa8155 sa9000p_firmware wcn7850 qca6574au_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware qca6420 qca6436_firmware sd680_firmware sd778g sa6155p_firmware wcn7851 qcs6490 sdxr2_5g sa8155_firmware sd662_firmware wcn3988_firmware qca6430 qca6421 sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765g sd765_firmware qca6436 sd680 wcn6851 sa6155p wcn7851_firmware qcs4290_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware sd750g sd870_firmware sd_8cx_gen3 qca6390 wcd9375 sd750g_firmware aqt1000 wcn3910_firmware sm6250_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware sa8195p_firmware wsa8835_firmware wcn6750_firmware qcm2290_firmware wcn3991 wcd9380_firmware sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware wsa8835 qca6574 sd665_firmware sa8540p_firmware wcd9380 sd888_5g qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p qca6430_firmware wcn3980 wcn6750 sa9000p qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware qca6574a_firmware sd695 sd768g_firmware wcn3980_firmware sd460 qca6391 sd730 sdx55m qca6421_firmware aqt1000_firmware wcn6740_firmware sd678_firmware qcm4290 qcm6490_firmware sdx50m sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 sa8540p wcn6856 sd695_firmware sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sa8155p sd675 sm7250p sd720g_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-287

Improper Authentication

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 25.05%

||

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-04 Aug, 2024 | 00:33

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware sd_8cx_gen3_firmware wsa8830 sd678 sm6250p_firmware qcs610 qcs2290_firmware qca8337 qca6431_firmware sd7c_firmware wcd9360_firmware sdx65 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 wcn3990_firmware qrb5165n_firmware wcn3998 wcd9371_firmware wcd9385_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware sm4125 sd720g wcd9326_firmware wcn3950 wcn3660b qsm8350_firmware sd662 sd710_firmware qsm8350 sd460_firmware sa8155 sa9000p_firmware sm7315_firmware qca6574au_firmware sdx55_firmware wcn7850 qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware wcd9360 qrb5165n sd680_firmware sd778g sa6155p_firmware sd_8cx_gen2 sa515m_firmware qcs6490 qrb5165_firmware qrb5165m_firmware sd429 sdxr2_5g wcn7851 sa8155_firmware sd662_firmware wcn3988_firmware qca6430 sd429_firmware qca6421 sd778g_firmware sm6250 wcd9340 sa8195p wsa8810_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcd9326 sa6155p wcn6851 qca8081 wcn7851_firmware qcs4290_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware wcd9371 sd750g sd870_firmware sd_8cx_gen3 qca6390 ar8035 sd750g_firmware aqt1000 wcd9375 wcn3910_firmware sm6250_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware qcm6490 sd888_5g_firmware wcn3988 wcn3620 wcn6850_firmware wcn7850_firmware sa8195p_firmware wsa8815_firmware wsa8835_firmware wcn6750_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sdm429w sd780g sw5100p sd865_5g sdx55m_firmware wcn6856_firmware sd888 sd670_firmware qca6574 wsa8835 sdm429w_firmware sd665_firmware sa8540p_firmware wcd9380 sd888_5g sm6250p qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p qca6430_firmware wcn3980 wcn6750 sa515m sa9000p qca6574_firmware wcd9340_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd7c wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 sd768g_firmware qrb5165m wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware qcm4290 qcm6490_firmware sdx50m qrb5165 sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd710 sd670 wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 sa8540p sw5100p_firmware qcs610_firmware wcn6856 sd695_firmware sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware ar8035_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-1284

Improper Validation of Specified Quantity in Input

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.05% / 13.58%

||

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:30

Updated-04 Aug, 2024 | 00:33

Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware sd_8cx_gen3_firmware wsa8830 sd678 sm6250p_firmware qcs610 qcs2290_firmware qca8337 qca6431_firmware sd7c_firmware wcd9360_firmware sdx65 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 wcn3990_firmware qrb5165n_firmware wcn3998 sd_8cx_firmware wcd9371_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware sm4125 sd720g wcd9385_firmware wcn3950 wcn3660b qsm8350_firmware sd662 qsm8350 sd460_firmware sa9000p_firmware sm7315_firmware wcn7850 qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware qca6420 qca6436_firmware wcd9360 qrb5165n sd680_firmware sd778g sd_8cx_gen2 sa515m_firmware qcs6490 qrb5165_firmware qrb5165m_firmware sd429 sdxr2_5g wcn7851 sd662_firmware wcn3988_firmware qca6430 sd429_firmware qca6421 sd778g_firmware sm6250 wcd9340 wsa8810_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcn6851 qca8081 wcn7851_firmware qcs4290_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware wcd9371 sd750g sd870_firmware sd_8cx_gen3 qca6390 ar8035 sd_8cx aqt1000 sd750g_firmware wcd9375 sm6250_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware qcm6490 sd888_5g_firmware wcn3988 wcn3620 wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware wcn6750_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sdm429w sd780g sw5100p sd865_5g sdx55m_firmware wcn6856_firmware sd888 wsa8835 sdm429w_firmware sa8540p_firmware wcd9380 sd888_5g sm6250p qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p qca6430_firmware wcn3980 wcn6750 sa515m sa9000p wcd9340_firmware sd855 sm4125_firmware sm7325p_firmware sd7c wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 sd768g_firmware qrb5165m wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware qcm4290 qcm6490_firmware sdx50m qrb5165 sd480_firmware wcn6851_firmware qca6574au wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 sa8540p sw5100p_firmware qcs610_firmware wcn6856 sd695_firmware sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sd675 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware ar8035_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.21%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:49

Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sdm670_firmware qcs404 sdx24_firmware sm8150_firmware sxr2130_firmware sda845_firmware sdm845 mdm9205_firmware sdx24 mdm9205 qcs404_firmware qcs605 sdx55 sm7150_firmware sm6150_firmware sdm710 sm6150 sm8150 sdm850 sdm710_firmware sxr1130_firmware sdx55_firmware sm7150 sxr1130 sdm670 sxr2130 qcs605_firmware sda845 sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.76%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ4019, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS404, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, Snapdragon_High_Med_2016, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware ipq4019_firmware mdm9206 sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware qca8081 mdm9150 msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware qm215_firmware ipq4019 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.83%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:42

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8016, APQ8096AU, APQ8098, MDM9205, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sa6155p_firmware sdm636_firmware msm8996au_firmware apq8098_firmware sdm845 msm8998_firmware sdm660 apq8016_firmware sdm630 sdx24 sm8250_firmware sc8180x_firmware qcs405 sm7150_firmware sdm710 sm6150 msm8996au sdm710_firmware sm7150 sa6155p sdm670 sxr2130 qcs605_firmware sc8180x sdm670_firmware sm8150_firmware sdx24_firmware sxr2130_firmware apq8096au sdm636 qcs405_firmware sda845_firmware sdm630_firmware apq8098 mdm9205_firmware sda660_firmware mdm9205 apq8016 qcs605 apq8096au_firmware sm6150_firmware sm8250 msm8998 sm8150 sdm850 sda660 sxr1130_firmware nicobar_firmware sxr1130 sdm660_firmware sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.21%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 18:42

Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sdm670_firmware qcs404 sm8150_firmware sxr2130_firmware sda845_firmware sdm845 mdm9205_firmware mdm9205 qcs404_firmware qcs605 sdm710 sm8150 sdm850 sdm710_firmware sxr1130_firmware sxr1130 sdm670 sxr2130 qcs605_firmware sda845 sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.10% / 27.64%

||

7 Day CHG~0.00%

Published-11 Feb, 2022 | 10:40

Updated-04 Aug, 2024 | 00:33

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware wsa8830 sa6150p_firmware sa8145p_firmware qcs2290_firmware qca8337 sdx65 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qcs2290 qca6595au_firmware qca6390_firmware sd690_5g wcd9370 qrb5165n_firmware qca9377 wcn3998 wcd9385_firmware wcn3950 sd_8_gen1_5g_firmware sm6375_firmware sd662 sd460_firmware sm7315_firmware qca6574au_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qrb5165n sd778g sa6155p_firmware sm6225 qcs6490 qrb5165_firmware qrb5165m_firmware sd662_firmware wcn3988_firmware sa6145p_firmware sd778g_firmware sa8195p wsa8810_firmware sd765g sd765_firmware wcn6851 wcd9335 sa6155p qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qca6696_firmware qcs6490_firmware sd750g sd870_firmware qca6390 ar8035 sd750g_firmware wcd9375 sa8150p wcn3910_firmware wsa8830_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sm8475 wcn6750_firmware qcm2290_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 wsa8835 qca6574 wcd9380 sd888_5g qca6574a sd690_5g_firmware wcn6855_firmware qca6174a sm7325p wcd9335_firmware wcn6750 qca6574_firmware wsa8815 sm7325p_firmware wcn6850 wcn3910 sd765 qca6574a_firmware sd768g_firmware qrb5165m sm7315 sd460 qca6391 sdx55m wcn6740_firmware sdx65_firmware qcm4290 qcm6490_firmware qrb5165 sd480_firmware wcn6851_firmware sm6225_firmware qca6574au sa8155p_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 wcn6856 sa6145p sd768g sa8145p wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sa8155p sm7250p sdx12 ar8035_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.1||HIGH

EPSS-0.10% / 27.83%

||

7 Day CHG~0.00%

Published-01 Apr, 2022 | 04:40

Updated-04 Aug, 2024 | 00:33

Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn6855_firmware wsa8830_firmware wcd9380_firmware wsa8830 wsa8835 wcn6856 wsa8835_firmware wcd9380 wcn6855 sm8475 wcn6856_firmware sd_8_gen1_5g_firmware Snapdragon Connectivity, Snapdragon Mobile

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 30.13%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:11

Updated-04 Aug, 2024 | 00:33

Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.76%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS404, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 sd_855 sd_670_firmware sd_425 sdm660 sd_430_firmware qcs404_firmware sd_435 sd_636 sd_710_firmware sdm630 qcs405 sd_625 ipq8074_firmware sd_820_firmware sd_636_firmware sd_820 sd_450_firmware sd_845_firmware qca8081 qcs605_firmware sd_425_firmware qcs404 sd_850_firmware sd_625_firmware ipq8074 sd_450 qcs405_firmware sd_712_firmware sdm630_firmware sd_8cx_firmware sda660_firmware sd_845 sd_8cx qcs605 sd_427 sd_430 sd_670 sd_435_firmware sd_835_firmware sd_710 sd_835 sda660 qca8081_firmware sdm660_firmware sd_855_firmware Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.21%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:49

While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCS404, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, Snapdragon_High_Med_2016, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware qcs404 sdm636 sda845_firmware apq8098 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware sxr1130 apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.8||HIGH

EPSS-0.03% / 7.76%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9640, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM660, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 sd_855 sd_730_firmware mdm9640_firmware sd_675 sd_670_firmware sd_425 sdm660 sdx24 sd_430_firmware sd_710_firmware sd_435 sd_636 qcs405 sd_625 sd_636_firmware sd_450_firmware sd_845_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_730 sd_665 sd_850_firmware sdx24_firmware sd_625_firmware sd_450 sd_855_firmware qcs405_firmware sd_712_firmware sd_845 sd_427 qcs605 sd_430 sd_670 sd_435_firmware sd_710 sd_665_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.18%

||

7 Day CHG~0.00%

Published-23 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 21:20

Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.

Vendor-Qualcomm Technologies, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.18%

||

7 Day CHG~0.00%

Published-23 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 21:20

When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using the corresponding banked GPIO registers instead in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.

Vendor-Qualcomm Technologies, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.70%

||

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 21:13

During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9635m_firmware mdm9640_firmware sd_820a msm8996au_firmware mdm9650 sd_615_firmware msm8909w_firmware msm8996au mdm9645 sd_650 sd_820 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware ipq4019_firmware mdm9206 sd_652 sd_425_firmware sd_800_firmware sd_625_firmware sd_450 mdm9635m sd_845 mdm9206_firmware mdm9640 sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware sd_652_firmware msm8909w sd_616_firmware sd_205_firmware sd_415 sd_650_firmware sd_212 fsm9055 sd_412 sdx20 sd_616 sd_425 sd_430_firmware mdm9607_firmware sd_615 mdm9655_firmware sd_625 sd_210 mdm9607 sd_820_firmware mdm9645_firmware mdm9625_firmware fsm9055_firmware sd_800 sd_617 sd_212_firmware sd_850_firmware mdm9655 sd_412_firmware sda660_firmware mdm9625 sd_430 ipq4019 sd_810 sdx20_firmware sd_410_firmware sd_205 sd_810_firmware sd_617_firmware Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.28%

||

7 Day CHG~0.00%

Published-20 Sep, 2018 | 13:00

Updated-05 Aug, 2024 | 21:13

In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDM429, SDM439, SDM632, Snapdragon_High_Med_2016, when a Trusted Application has opened the SPI/I2C interface to a particular device, it is possible for another Trusted Application to read the data on this open interface by calling the SPI/I2C read function.

Vendor-Qualcomm Technologies, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.10%

||

7 Day CHG~0.00%

Published-28 Nov, 2018 | 15:00

Updated-05 Aug, 2024 | 21:20

Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130.

Vendor-Qualcomm Technologies, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.97%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-04 Aug, 2024 | 18:42

Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 855, SDA660, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 mdm9150_firmware sd_855 sd_820a msm8996au_firmware sdx20 sd_415 sd_616 sd_670_firmware sdm660 sdx24 mdm9607_firmware sd_615 mdm9650 sd_636 sd_710_firmware qcs405 sd_615_firmware msm8909w_firmware mdm9607 msm8996au sd_210 sd_636_firmware sd_820_firmware sd_820 sd_820a_firmware mdm9150 qcs605_firmware sd_212_firmware sdx24_firmware qcs405_firmware sd_712_firmware sda660_firmware qcs605 sd_670 mdm9650_firmware sd_710 sdx20_firmware sd_205 sda660 sd_210_firmware sd_415_firmware msm8909w sd_616_firmware sd_205_firmware sdm660_firmware sd_212 sd_855_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-732

Incorrect Permission Assignment for Critical Resource