ByteOS Network

Vulnerability Details :

CVE-2018-11891

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-19 Sep, 2018 | 14:00

Updated At-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on the length of array while accessing can lead to an out of bound read in WLAN HOST function.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:19 Sep, 2018 | 14:00

Updated At:05 Aug, 2024 | 08:24

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Android for MSM, Firefox OS for MSM, QRD Android

Versions

Affected

All Android releases from CAF using the Linux kernel

Problem Types

Type	CWE ID	Description
text	N/A	Buffer Over-read in WLAN

Type: text

CWE ID: N/A

Description: Buffer Over-read in WLAN

References

Hyperlink	Resource
https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin	x_refsource_CONFIRM
https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=2fc3e8a2ae8233690872d313fbfb4c74d0c61daa	x_refsource_CONFIRM
http://www.securityfocus.com/bid/107770	vdb-entry x_refsource_BID

Hyperlink: https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin

Resource:

x_refsource_CONFIRM

Hyperlink: https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=2fc3e8a2ae8233690872d313fbfb4c74d0c61daa

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/107770

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin	x_refsource_CONFIRM x_transferred
https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=2fc3e8a2ae8233690872d313fbfb4c74d0c61daa	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/107770	vdb-entry x_refsource_BID x_transferred

Hyperlink: https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=2fc3e8a2ae8233690872d313fbfb4c74d0c61daa

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/107770

Resource:

vdb-entry

x_refsource_BID

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:19 Sep, 2018 | 14:29

Updated At:18 Apr, 2019 | 13:00

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.8	HIGH	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	8.3	HIGH	AV:A/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 8.3

Base severity: HIGH

Vector:

AV:A/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Google LLC

>>android>>-

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-129	Primary	nvd@nist.gov

CWE ID: CWE-129

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/107770	product-security@qualcomm.com	Third Party Advisory VDB Entry
https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=2fc3e8a2ae8233690872d313fbfb4c74d0c61daa	product-security@qualcomm.com	Patch Third Party Advisory
https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin	product-security@qualcomm.com	Patch Third Party Advisory

Hyperlink: http://www.securityfocus.com/bid/107770

Source: product-security@qualcomm.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=2fc3e8a2ae8233690872d313fbfb4c74d0c61daa

Source: product-security@qualcomm.com

Resource:

Patch

Third Party Advisory

Hyperlink: https://www.codeaurora.org/security-bulletin/2018/09/04/september-2018-code-aurora-security-bulletin

Source: product-security@qualcomm.com

Resource:

Patch

Third Party Advisory

Similar CVEs

197Records found

CVE-2024-49843

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:02

Improper Validation of Array Index in Graphics_Linux

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware sm4635 wsa8840 wcn7860 sm7675 wsa8845h_firmware wcn7881_firmware video_collaboration_vc1_platform_firmware wsa8845 qcm6125 wcn7881 wcn6650_firmware wcd9380_firmware sxr2330p wcn6450 qca6391_firmware wcn3950_firmware qca6391 sm8750 sm8635p wcn6650 video_collaboration_vc5_platform wcn3980 wcd9370_firmware sm8635p_firmware snapdragon_480_5g_mobile wcn3950 snapdragon_w5\+_gen_1_wearable sw5100 wsa8845_firmware wcd9370 qcs7230_firmware wcd9378 sw5100p_firmware sm7675_firmware wcn6755_firmware video_collaboration_vc5_platform_firmware sm7635_firmware sm8750p wsa8835 sm8750p_firmware wsa8845h snapdragon_480_5g_mobile_firmware fastconnect_7800 wcn6450_firmware snapdragon_4_gen_1_mobile qcs8250_firmware snapdragon_695_5g_mobile wcn7880_firmware wcn3988 wcn7880 wcd9395_firmware sm4635_firmware qcm6125_firmware wcd9378_firmware qcs6125 sm7635 qcs7230 sm7675p sw5100_firmware wcn3988_firmware sm6650_firmware qcs8250 wcd9375_firmware sm7675p_firmware wsa8810_firmware wcd9385_firmware wsa8810 wsa8832 wcd9390_firmware sm8635 snapdragon_695_5g_mobile_firmware snapdragon_8_gen_3_mobile_firmware wcd9375 sm8635_firmware snapdragon_8_gen_3_mobile sm6650 wsa8815 qcs6125_firmware snapdragon_w5\+_gen_1_wearable_firmware fastconnect_6200_firmware wcn7861 sm8750_firmware wcd9380 wsa8830 snapdragon_480\+_5g_mobile_firmware snapdragon_480\+_5g_mobile wsa8815_firmware wsa8832_firmware wcn7861_firmware wcn7860_firmware sw5100p fastconnect_6200 wsa8830_firmware wcn6755 wcn3980_firmware video_collaboration_vc1_platform snapdragon_4_gen_1_mobile_firmware wcd9390 wcd9385 wsa8840_firmware wcd9395 wsa8835_firmware sxr2330p_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-2346

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.69%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS404, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2017-18309

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.05% / 15.44%

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 21:20

A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, SD 850.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850_firmware sd_845 sd_850 sd_845_firmware Snapdragon Mobile

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2017-15861

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.01% / 1.59%

7 Day CHG~0.00%

Published-23 Feb, 2018 | 23:00

Updated-16 Sep, 2024 | 20:02

In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received from firmware and used to access an array without validation.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2020-11307

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:30

Updated-04 Aug, 2024 | 11:28

Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sd678 sa6150p_firmware sm6250p_firmware sa8145p_firmware qcs610 wcn3998_firmware qcs2290_firmware qca6431_firmware sd_636 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 msm8917 sd690_5g sd730_firmware sd_455_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qca6564 qcs6125_firmware qca6426 sd632 wcn3998 sdw2500_firmware wcd9371_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcn3615_firmware wcn3660b sd450_firmware sd662 sd460_firmware sa8155 qca6320_firmware sm7315_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3615 msm8909w sm7250p_firmware apq8009w_firmware qca6420 qca6436_firmware apq8053_firmware wcn3610_firmware qca6564au_firmware sd778g sa6155p_firmware pm8937 sd429 sdxr2_5g qcs6125 sa8155_firmware sd662_firmware sdm630 wcn3988_firmware qca6430 sa6145p_firmware sd205 qca6421 sd429_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware sdm830_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 wcn6851 wcd9335 sa6155p qcs603_firmware msm8937 qcs4290_firmware wcd9385 wcn3660_firmware pm8937_firmware qca6431 qca6696_firmware wcd9371 sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 apq8064au sa8150p sm6250_firmware wcn3910_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd210 sd660 sd855_firmware sd865_5g_firmware wcn3620_firmware sd888_5g_firmware wcn3988 sd660_firmware wcn3620 wcn6850_firmware sa8195p_firmware wsa8835_firmware apq8017 qca6564a wcn6750_firmware sd450 wcn3610 qcm6125_firmware qcm2290_firmware wcn3991 wcd9380_firmware sd_675 sdm429w msm8996au_firmware sd780g sd865_5g qca6595 qca6564au sdx55m_firmware wcn6856_firmware sd888 msm8909w_firmware qca6574 msm8996au sd632_firmware sd670_firmware sd665_firmware sdm429w_firmware wsa8835 wcd9380 sd888_5g sm6250p qualcomm215 qca6574a sd690_5g_firmware sdx50m_firmware sm7325p qca6430_firmware wcd9335_firmware wcn6750 sd439_firmware qca6574_firmware qcs605 sd855 sm4125_firmware sm7325p_firmware sd665 wcn3910 qca6320 wcn6850 msm8937_firmware sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware sd835 sm7315 sd460 qca6391 sd730 sdx55m sdxr1_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware apq8064au_firmware qcm4290 sdx50m wcn3680_firmware sd480_firmware qcs603 wcn6851_firmware sd_455 qca6574au sa8155p_firmware sd_636_firmware sd205_firmware qca6564a_firmware sd670 apq8009w qcm6125 qcm4290_firmware sd480 sd870 sd210_firmware qcs610_firmware wcn6856 sa6145p wcn3680b sd835_firmware qca6564_firmware sdxr1 sd768g apq8096au qca6595_firmware sa8145p wcn6740 qca6696 sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sdw2500 apq8053 apq8096au_firmware sa8155p sd675 sdx55 sd439 sm7250p sdm830 sd720g_firmware wcn3660 qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2020-11187

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.39%

7 Day CHG~0.00%

Published-22 Feb, 2021 | 06:25

Updated-04 Aug, 2024 | 11:28

Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware qdm5652_firmware qpm5679_firmware sdr051 qet6110_firmware qln5030 qca8337 qpa2625_firmware csrb31024 qpa8802 qpm6585_firmware qat3519 pmx24_firmware qbt2000_firmware qet5100_firmware qat5522_firmware sd765g_firmware qdm5670 qpa8686 qca6595au_firmware pm7150l qpa8821 pm7150a qdm5671 qat3518 qca6584au_firmware qpa5580_firmware sa415m wcn3998 smr526_firmware wcd9385_firmware qdm5650_firmware pm7250_firmware qdm2305_firmware qdm5620 qln1021aq qpa8821_firmware qpm5670_firmware pmk8002_firmware qdm5652 qca6574au_firmware qln1031_firmware sdx55_firmware qat5533 qca6595au qpm5679 qbt2000 wcn3998_firmware sm7250p_firmware pm855p pm7150l_firmware pmx50_firmware qca6564au_firmware qca6584au qdm2305 qat5515_firmware qln5020_firmware pm855 qdm3301_firmware qpm8830_firmware sa415m_firmware pmx55 qpa8842_firmware qdm3301 qat3519_firmware wsa8810_firmware qpm5677 qat5515 sd765g sd765_firmware qdm5677_firmware qpa6560 pm8004_firmware sdr865 sdr8150_firmware qdm5620_firmware wcd9385 wcd9341 qca6696_firmware qln5020 qln5040_firmware aqt1000 qpa8673 qdm5621 qln5030_firmware qln4642 qpm5677_firmware qdm5650 wsa8815_firmware smr525_firmware sdr052 smb1390 pmx24 pm855l_firmware qet6110 qln5040 qpa8686_firmware qpm8895 qpm6585 wcn3991 qca8337_firmware qpm5670 wcd9380_firmware smb1355 qln4650 qpa8801 pmx55_firmware qtm527 qet5100 qdm5671_firmware qpa8801_firmware qca6564au qat5533_firmware qtm527_firmware qpm8830 qpa8673_firmware qat5522 qet4101_firmware pm7250b qln4642_firmware qpa8842 sdr052_firmware wcd9380 smb1355_firmware pm7250b_firmware qca6574a pm855p_firmware sdx50m_firmware smb1390_firmware pm7250 qdm5679_firmware smr525 qpa8803 smr526 qtc801s_firmware qdm2301 qtm525 qln1036aq_firmware wsa8815 qdm5621_firmware qdm2301_firmware sd765 qca6574a_firmware sd768g_firmware sdr865_firmware qat3555 sdr051_firmware qca6391 aqt1000_firmware pm8008 qpm8895_firmware qat3518_firmware qtm525_firmware csrb31024_firmware sdx50m sdr8150 qpm5621_firmware pm855l qln1021aq_firmware qdm5670_firmware qln1036aq qtc801s qpa6560_firmware qpa8802_firmware pm7150a_firmware qca6574au qpm5621 qpm6582 pm8008_firmware wcd9341_firmware wsa8810 pmx50 qdm5677 qdm5679 pm855_firmware pm855b_firmware sd768g qpm6582_firmware qca6696 qca6391_firmware qln4650_firmware qat3516_firmware pm8004 pmk8002 qpa2625 sdx55 qet4101 qat3555_firmware qat3516 sm7250p qpa8803_firmware qpm5658 pm855b qln1031 qpm5658_firmware qpa5580 Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2021-35072

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.15% / 35.56%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:50

Updated-04 Aug, 2024 | 00:33

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware wsa8830 mdm9640_firmware qcs2290_firmware mdm9628_firmware mdm9650 qcs4290 wcn3950_firmware mdm9250 qcs2290 apq8009_firmware msm8917 wcd9370 sd632 wcn3990_firmware msm8108 qca9377 wcn3998 sdw2500_firmware msm8108_firmware wcn3950 sm4125 mdm9628 wcd9326_firmware mdm9206_firmware wcn3615_firmware wcn3660b sd450_firmware sd662 sd460_firmware apq8037 qca6320_firmware qca6584 qca6574au_firmware wcn3680b_firmware wcd9375_firmware sdx12_firmware wcn3615 wcn3998_firmware msm8909w apq8009w_firmware wcn3610_firmware apq8053_firmware qca6564au_firmware sd680_firmware qca6310 msm8208 qca9367_firmware sd429 qca9367 sd662_firmware mdm9607_firmware sd821 wcn3988_firmware sd429_firmware wcd9340 apq8017_firmware wsa8810_firmware qualcomm215_firmware sw5100 sd680 wcd9326 wcd9335 msm8937 msm8209_firmware qca6174a_firmware mdm9250_firmware qcs4290_firmware wcd9341 wcn3660_firmware wcn3910_firmware wcd9375 msm8953_firmware wsa8830_firmware msm8917_firmware sd210 wcn3620_firmware sd820 wcn3988 wsa8815_firmware wsa8835_firmware wcn3620 apq8017 msm8208_firmware qca6564a sd450 wcn3610 msm8608 qcm2290_firmware mdm9640 wcn3990 sdm429w msm8996au_firmware sw5100p wcd9330 qca6564au msm8940_firmware msm8909w_firmware qca6574 msm8996au sd632_firmware sdm429w_firmware wsa8835 qualcomm215 qca6574a mdm9206 qca9379_firmware qca6174a qca6310_firmware wcd9335_firmware wcn3980 sd439_firmware qca6574_firmware wcd9340_firmware sm4125_firmware wsa8815 wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd835 msm8209 wcn3980_firmware apq8009 sd460 wcd9330_firmware msm8920 msm8953 sd821_firmware qcm4290 wcn3680_firmware msm8920_firmware qca6574au mdm9607 qca6564a_firmware apq8009w wcd9341_firmware qcm4290_firmware wsa8810 sw5100p_firmware sd210_firmware mdm9150 wcn3680b sd835_firmware apq8096au sd820_firmware msm8608_firmware wcd9370_firmware sdw2500 msm8940 apq8053 apq8096au_firmware apq8037_firmware sd439 sdx12 sw5100_firmware wcn3660 qca9379 qcm2290 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2021-30311

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 29.13%

7 Day CHG~0.00%

Published-13 Jan, 2022 | 11:40

Updated-03 Aug, 2024 | 22:32

Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sd678 qca8337 wcd9360_firmware sdx65 wcn3950_firmware sd765g_firmware qca6595au_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 sd720g sd_8_gen1_5g_firmware sm6375_firmware sd662 sd460_firmware sm7315_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware wcd9360 qca6436_firmware sd778g sm6225 sa515m_firmware qcs6490 sdxr2_5g sd662_firmware wcn3988_firmware sm6250 sd778g_firmware wsa8810_firmware sd765g sd765_firmware qca6436 wcn6851 qca8081 wcd9385 wcd9341 qca6696_firmware qcs6490_firmware sd750g sd870_firmware qca6390 ar8035 sd750g_firmware wcd9375 sm6250_firmware wsa8830_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware qcx315 sm8475 wcn6750_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 wsa8835 qcx315_firmware sd665_firmware wcd9380 sd888_5g qca6574a sd690_5g_firmware wcn6855_firmware sm7325p wcn3980 wcn6750 sa515m wsa8815 sm7325p_firmware sd665 wcn6850 sd765 qca6426_firmware qca6574a_firmware sd768g_firmware wcn3980_firmware sm7315 sd730 sd460 qca6391 sdx55m wcn6740_firmware sdx65_firmware sd678_firmware qcm6490_firmware sd480_firmware wcn6851_firmware sm6225_firmware qca6574au wcd9341_firmware sd480 sd870 wsa8810 wcn6855 wcn6856 sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sd675 sm7250p sd720g_firmware ar8035_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2017-14889

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.56%

7 Day CHG~0.00%

Published-16 Mar, 2018 | 22:00

Updated-16 Sep, 2024 | 17:08

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to the lack of a range check on the array index into the WMI descriptor pool, arbitrary address execution may potentially occur in the process mgmt completion handler.

Vendor-n/a Google LLC

Product-android n/a

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2021-30282

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 7.69%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:25

Updated-03 Aug, 2024 | 22:32

Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 qca9377_firmware mdm9150_firmware wcn3991_firmware sd678 qcn9070 sa6150p_firmware sa8145p_firmware qcs610 sm6250p_firmware wsa8830 qcs2290_firmware fsm10056 qca8337 sd7c_firmware csrb31024 csra6620 fsm10055_firmware qcn9072 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qcs2290 qca6595au_firmware qca6390_firmware sa6155 ipq6000 sd690_5g sd730_firmware csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware wcd9370 csra6640_firmware qcn5152_firmware qca6564 qca6426 qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 sa415m sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 qcn6024_firmware sd720g sm6375_firmware sd662 sd460_firmware sa8155 qca6574au_firmware qcn5122_firmware sdx55_firmware qca6595au qca8081_firmware qcn6023_firmware sa6155_firmware sm7250p_firmware wcd9375_firmware wcn3999_firmware qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware wcd9306 sm6225 wcn3999 sa515m_firmware qcs6490 qrb5165_firmware sdxr2_5g qcn5052 sa8155_firmware ipq6010 qca4004_firmware sd662_firmware sa415m_firmware qcs405 wcn3988_firmware qcn9074 sa6145p_firmware sm6250 sd778g_firmware wcd9306_firmware wcd9340 sa8195p sd765g sd765_firmware fsm10056_firmware qca6436 wcn6851 wcd9335 sa6155p qca8081 qcs603_firmware qcn6023 qca6174a_firmware qcs4290_firmware wcd9385 qca6696_firmware qcs6490_firmware sd750g sd870_firmware ar8035 csr8811 qca6390 sd_8cx sa8150p sd750g_firmware sm6250_firmware wcd9375 wcn3910_firmware qca4004 wsa8830_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8835_firmware sa8195p_firmware qcn5121 qcx315 qcn5022_firmware qca6564a wcn6750_firmware qca8072 qcm2290_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware qcn9000 sd_675 sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware wsa8835 qca6574 qcx315_firmware sd665_firmware csr8811_firmware wcd9380 sd888_5g sm6250p qcs410 qca8075_firmware qca6574a sd690_5g_firmware ipq6005_firmware wcn6855_firmware qca6174a sm7325p sdx24_firmware qca8072_firmware wcd9335_firmware qcn5052_firmware wcn6750 ipq6018_firmware mdm9205 sa515m qca6574_firmware qcs605 wcd9340_firmware sm7325p_firmware sd665 sd7c wcn3910 wcn6850 sd765 qca6426_firmware qca6574a_firmware qca9984 ipq6028 qcn5021 qcn5152 qcn9024 sd768g_firmware sd460 qca6391 sd730 sdx55m sdxr1_firmware ipq6005 sd678_firmware ar8031_firmware csrb31024_firmware qcm4290 qcm6490_firmware qcn9070_firmware qrb5165 sd480_firmware qcs603 wcn6851_firmware ipq6028_firmware sm6225_firmware qca6574au sa8155p_firmware qcn5122 qca6564a_firmware qcn9024_firmware qcm4290_firmware sd480 sd870 qcn5121_firmware wcn6855 qcs610_firmware mdm9150 wcn6856 qsm8250 ipq6018 qcn5022 sa6145p qca6564_firmware sdxr1 ipq6010_firmware ar8031 sd768g qcs405_firmware sa8145p qca6696 mdm9205_firmware qca6391_firmware wcd9370_firmware sa6150p sdx55 qca8075 qcn5021_firmware qcn9022_firmware csra6640 qcn6024 qcn9022 sa8155p sd675 qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware qcn9074_firmware qcs410_firmware ar8035_firmware qcm2290 qsm8250_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2021-30255

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.39%

7 Day CHG~0.00%

Published-12 Nov, 2021 | 06:15

Updated-03 Aug, 2024 | 22:24

Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm7250 mdm9640_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sc8180x\+sdx55 qcs2290 qca6595au_firmware qca6335 msm8917 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sm4125 sd720g mdm9628 mdm9206_firmware qsw8573_firmware sm6375_firmware wcn3660b sd450_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware mdm9230_firmware wcn7850 qca6574au_firmware mdm9630 wcd9375_firmware qca8081_firmware wcn3998_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware qca4004_firmware sd662_firmware qca6430 wcd9306_firmware wcd9340 sd765g qualcomm215_firmware fsm10056_firmware qca6436 wcn6851 qcs603_firmware wcn7851_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g wcn3910_firmware sd_8cx mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware wcn7850_firmware msm8208_firmware wcn6750_firmware sd450 wcn3610 msm8608 mdm9640 sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware qet4101_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6174 qca6430_firmware wcd9335_firmware sd439_firmware wcn3980 qca6335_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware sd_8c_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m qca6421_firmware msm8953 sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware sdxr1 apq8096au mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sdx55 apq8053 sa8155p sd675 sd439 qet4101 wcn3660 qca9379 ar8035_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcs2290_firmware fsm10056 sm7250_firmware sd7c_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware wcn3990_firmware sm8450 qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 wcd9326_firmware wcn3615_firmware sd662 apq8037 sa8155 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 qca6310 sm6225 wcn7851 sd429 sa515m_firmware qcs6490 sdxr2_5g qca9367 sdm630 mdm9607_firmware sd821 msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware qca6694 sm8450_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 msm8976 ar8035 sm6250_firmware sc8180x\+sdx55_firmware qca6694_firmware msm8953_firmware qca6694au sda429w msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 csr6030_firmware qca6564a mdm9630_firmware qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd865_5g sdx24 sm8450p_firmware msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware sm7325 wcn6750 mdm9205 sa515m qca6574_firmware sd855 sm4125_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware msm8920 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m sdx20 sd480_firmware msm8920_firmware sd_455 sm6225_firmware qca6574au sd710 sa8155p_firmware mdm9607 sd205_firmware wcd9341_firmware qcm6125 wsa8810 sm8450p mdm9150 wcn6856 sd_8c wcn3680b sd835_firmware sd768g qca6696 sd845_firmware msm8608_firmware sdw2500 msm8940 apq8096au_firmware sd845 apq8037_firmware sd720g_firmware sdx12 qcs410_firmware mdm9330 sd850 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2021-30325

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.05% / 13.69%

7 Day CHG~0.00%

Published-11 Feb, 2022 | 10:40

Updated-03 Aug, 2024 | 22:32

Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sa6150p_firmware qcs610 ipq4028_firmware qcn5550 qca8337 ar9380 ipq8173_firmware qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qcn5064 csra6620_firmware qcs605_firmware csra6640_firmware wcn3998 wcn3950 qcn6024_firmware ipq8076a mdm9206_firmware wcn3660b sd460_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6438_firmware qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware wcn3999 qrb5165_firmware ipq5028 qca7500 ipq8072_firmware ipq4029_firmware qrb5165m_firmware sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 wcd9340 qcn6132 sd765g qualcomm215_firmware qca6436 wcn6851 sa6155p qcs603_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca6696_firmware sd870_firmware qca9988_firmware qcn5154_firmware sa8150p qca9992_firmware sd865_5g_firmware wcn3988 qca6438 sa8195p_firmware qcn5121 qcn5022_firmware qca9898 ipq4028 wcn3610 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware sda429w_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware wcd9330 ipq8076a_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 qcn5164 qca9558 qca6574 csr8811_firmware wcd9380 qualcomm215 qcn5054_firmware qcs410 qcn5024 ipq4019_firmware qca8072_firmware qca9985 qcn9012_firmware wcd9335_firmware qcn5052_firmware wcn3980 ipq6018_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware qca9984 ipq6028 ipq8064 qcn9024 pmp8074 wcn3980_firmware qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware qcn5064_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 ipq8070 qcn5502 qca9994 qca9980 qcn9024_firmware ipq8174_firmware qca6564a_firmware qca9880 sd870 qcn5121_firmware sd210_firmware qcs610_firmware sa6145p ipq6018 qca9886_firmware ar8031 apq8096au qcs405_firmware sa8145p qca6391_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware sa8155p csra6640 qca9531_firmware ar8035_firmware qcn5024_firmware wcn3991_firmware mdm9150_firmware qcn9070 sa8145p_firmware qca9563_firmware csra6620 qcn9072 qca9880_firmware qca9992 sd765g_firmware qca6390_firmware ipq6000 wcd9370 ipq8072 qcn5152_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 ipq5018 wcd9385_firmware sdxr2_5g_firmware qca9563 ipq8074a sd662 qcn5124_firmware sa8155 qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware sa6155p_firmware sm6225 ipq8174 qca9990 sdxr2_5g qcn5052 qca9367 wcn3988_firmware qcn9074 sd205 sa6145p_firmware sa8195p wsa8810_firmware sd765_firmware wcd9335 qca8081 qcn6023 ipq8071a ipq8071a_firmware wcd9385 qca6390 qca9898_firmware wcd9375 ar8035 csr8811 ipq4019 qcn9100_firmware sda429w sd210 wcn3620_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wcn6850_firmware wcn3620 qca6564a qca9988 qca8072 wcn3990 qcn9000 sd865_5g ar9380_firmware qcn9012 qca9558_firmware qcn6122_firmware ipq8065_firmware sd665_firmware qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware mdm9206 qca9889 qcn6132_firmware qca9888 ipq8074 qca9994_firmware ipq8070a_firmware ipq8076_firmware qca6574_firmware qca9886 qcn5502_firmware sd665 ipq8076 sd765 qca6574a_firmware qcn5021 qcn5152 sd768g_firmware qrb5165m sd460 qca6391 ipq6005 qcn9100 qcn9070_firmware ipq6028_firmware ipq8072a_firmware sm6225_firmware qca9531 ipq8074_firmware qca6574au qca9889_firmware sa8155p_firmware qcn5122 sd205_firmware wcd9341_firmware wsa8810 mdm9150 qcn5022 qca6564_firmware sd768g ipq6010_firmware qca6696 sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9072_firmware sm7250p ipq6000_firmware ipq8071_firmware qcn9074_firmware qcs410_firmware ipq4029 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-33044

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 6.59%

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:23

Improper Validation of Array Index in Hypervisor

Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2021-1933

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.31%

7 Day CHG~0.00%

Published-09 Sep, 2021 | 07:35

Updated-03 Aug, 2024 | 16:25

UE assertion is possible due to improper validation of invite message with SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware sd678 sm6250p_firmware qcs610 csrb31024 wcd9360_firmware sd_636 qcs4290 wcn3950_firmware sc8180x\+sdx55 qca6420_firmware qca6595au_firmware qca6390_firmware qca6335 msm8917 sd730_firmware sd_455_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qcs6125_firmware qca6584au_firmware sd632 qca9377 sa415m wcn3998 sd_8cx_firmware wcd9371_firmware whs9410 wcn3950 sd720g wcn3660b sd450_firmware sa8155 qca6574au_firmware sdx55_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3610_firmware qca6420 apq8053_firmware wcd9360 qca6564au_firmware qca6584au qca6310 whs9410_firmware sd429 qcs6125 sa8155_firmware sdm630 sa415m_firmware wcn3988_firmware qca6430 sd429_firmware sm6250 sd712_firmware wcd9340 apq8017_firmware qualcomm215_firmware qcs603_firmware qca6174a_firmware qcs4290_firmware wcn3660_firmware qca6696_firmware wcd9371 qca6390 wcd9375 sd_8cx aqt1000 wcn3910_firmware sc8180x\+sdx55_firmware sm6250_firmware msm8953_firmware sda429w msm8917_firmware sd855_firmware wcn3620_firmware sd712 wcn3988 wcn6850_firmware wcn3620 wsa8815_firmware apq8017 sd450 wcn3610 qcm6125_firmware wcn3991 sda429w_firmware wcd9380_firmware sd_675 sdm429w qca6564au sdx24 sdx55m_firmware msm8940_firmware sd670_firmware sd632_firmware sdm429w_firmware sd665_firmware wcd9380 sm6250p qualcomm215 qcs410 qca6574a sdx50m_firmware qca6174a sdx24_firmware qca6310_firmware qca6430_firmware qca6335_firmware qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 wcn3910 sd_8c_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd850_firmware sd730 sdxr1_firmware sdx55m aqt1000_firmware msm8920 msm8953 sd678_firmware qcm4290 csrb31024_firmware sdx50m wcn3680_firmware qcs603 msm8920_firmware sd_455 qca6574au sa8155p_firmware sd_636_firmware sd670 qcm6125 qcm4290_firmware qcs610_firmware sd_8c sdxr1 qca6696 sdm630_firmware sd845_firmware wcd9370_firmware sdx55 msm8940 apq8053 sa8155p sd675 sd845 sd720g_firmware qcs410_firmware wcn3660 sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-45574

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.58%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:15

Improper Validation of Array Index in Camera Driver

Memory corruption during array access in Camera kernel due to invalid index from invalid command data.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_429_mobile_firmware wcn3620_firmware sdm429w wcn3620 sdm429w_firmware wcn3660b_firmware snapdragon_429_mobile wcn3660b Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2014-10048

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.33%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:26

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, while setting the offsets, time-services allows the user to set bases greater than valid base value which will lead to array index out-of-bound.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-2320

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.32%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware qcm2150_firmware mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8976_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware mdm9655_firmware sdm660 sdm710 qm215 mdm9607 apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 qm215_firmware msm8976 sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 mdm9615_firmware apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2325

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.32%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:49

Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-2239

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 12.48%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9150, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8996AU, QCS404, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 qcs404_firmware mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware qcs404 sdx24_firmware sd_625_firmware sd_450 mdm9635m sd_8cx_firmware sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sd_652_firmware sxr1130 sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_730_firmware sd_412 qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_412_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-2326

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.49%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-2339

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.25%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:49

Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-2258

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.31%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_652 sd_425_firmware sd_665 sd_625_firmware sd_450 mdm9635m sd_8cx_firmware mdm9615 sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sd_652_firmware sxr1130 msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware mdm9625_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_855_firmware sd_712_firmware sdm630_firmware sda660_firmware mdm9625 sd_8cx sd_430 sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-0716

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

View Details

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.21% / 43.74%

7 Day CHG~0.00%

Published-09 Aug, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37203196.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-14093

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 29.98%

7 Day CHG~0.00%

Published-30 Jul, 2020 | 11:40

Updated-05 Aug, 2024 | 00:12

Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, QCM2150, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM636, SDM660, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-msm8920 qcm2150_firmware msm8953 sdm450 sdm636_firmware sdm429w msm8996au_firmware sdm632_firmware apq8098_firmware sdm450_firmware sdm632 sdx20 qcm2150 msm8920_firmware sdm439 mdm9607_firmware sdm660 mdm9650 sdm429 msm8940_firmware qcs405 msm8909w_firmware mdm9607 msm8996au qm215 sdm429w_firmware apq8017_firmware apq8009_firmware msm8909w msm8917 msm8937 mdm9207c_firmware msm8996_firmware qcs605_firmware mdm9206 mdm9207c apq8096au sdm439_firmware qcs405_firmware sda845_firmware sdm636 apq8098 sda660_firmware mdm9206_firmware qcs605 qm215_firmware msm8940 apq8053 apq8096au_firmware msm8953_firmware msm8917_firmware msm8937_firmware mdm9650_firmware sdm429_firmware sdx20_firmware sda660 apq8017 msm8996 apq8009 apq8053_firmware sdm660_firmware sda845 Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2017-0805

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

View Details

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.09% / 26.04%

7 Day CHG~0.00%

Published-24 Aug, 2017 | 00:00

Updated-20 Apr, 2025 | 01:37

A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237701.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-14080

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.37% / 58.01%

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-05 Aug, 2024 | 00:12

Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, Kamorta, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCM2150, QCS605, QM215, Rennell, SA415M, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-kamorta_firmware qcm2150_firmware mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8996au sm7150 msm8917 sdm670 qcs605_firmware sc8180x sdm670_firmware sdx24_firmware sdm636 sda845_firmware sa415m qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware sxr1130 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 sc8180x_firmware sa415m_firmware sdm710 qm215 sc7180_firmware mdm9607 sdm710_firmware msm8937 msm8905 sm8150_firmware msm8909 apq8096au sdm439_firmware rennell sc7180 sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8150 sdm850 kamorta nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33111

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.05% / 13.80%

7 Day CHG+0.01%

Published-01 Apr, 2024 | 15:05

Updated-11 Aug, 2025 | 15:06

Improper Validation of Array Index in Audio

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-10512

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.79%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

Payload size is not checked before using it as array index in audio in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware ipq4019_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware ipq8074 sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 ipq8064 sd_210_firmware sxr1130_firmware sd_415_firmware sxr1130 msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 ipq8064_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 ipq8074_firmware sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 ipq4019 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-10527

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.39%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 22:24

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6574AU, QCA8081, QCM2150, QCN7605, QCN7606, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA515M, SA6155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9640_firmware qcs610 sdm450_firmware sdm632 qcs404_firmware mdm9650 apq8009_firmware msm8917 sdm670 qcs605_firmware sda845_firmware sa415m qca4531 bitra apq8098 qcn7605 mdm9206_firmware bitra_firmware msm8905_firmware qca6574au_firmware sda660 sdx55_firmware qca8081_firmware sxr1130 msm8909w apq8053_firmware sda845 sa6155p_firmware sdm450 sdm636_firmware sa515m_firmware apq8098_firmware msm8998_firmware sdm630 mdm9607_firmware sm8250_firmware sa415m_firmware qcs405 qm215 sc7180_firmware apq8017_firmware sdm710_firmware sa6155p qca8081 msm8937 msm8905 sm8150_firmware msm8909 sxr2130_firmware rennell sc7180 msm8953_firmware saipan_firmware sm6150_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 kamorta apq8017 msm8996 saipan qcn7606_firmware mdm9640 kamorta_firmware qca4531_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdx24 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 sxr2130 sc8180x mdm9206 sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 ipq6018_firmware mdm9205 sa515m qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware sxr1130_firmware apq8009 msm8909_firmware nicobar sdm850_firmware msm8920 msm8953 sdx20 qcm2150 msm8920_firmware sdm660 sc8180x_firmware ipq8074_firmware qca6574au sdm710 mdm9607 qcn7605_firmware qcs610_firmware mdm9150 mdm9207c_firmware msm8996_firmware ipq6018 mdm9207c apq8096au sdm439_firmware qcs405_firmware sdm630_firmware mdm9205_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8940 apq8053 apq8096au_firmware sm8250 nicobar_firmware sdm660_firmware qcn7606 sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10590

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.40% / 59.57%

7 Day CHG~0.00%

Published-07 Feb, 2020 | 05:00

Updated-04 Aug, 2024 | 22:24

Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sm8250 apq8017 msm8996 saipan nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2017-0737

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

View Details

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.09% / 26.83%

7 Day CHG~0.00%

Published-09 Aug, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37563942.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-10594

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware apq8076 sc8180x mdm9206 sdm670_firmware sdx24_firmware apq8076_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10503

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.98%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 22:24

Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCN7605, SDA660, SDM450, SDM630, SDM636, SDM660, SDX20

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2017-0836

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

View Details

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.96% / 75.55%

7 Day CHG~0.00%

Published-16 Nov, 2017 | 23:00

Updated-20 Apr, 2025 | 01:37

A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64893226.

Vendor-Google LLC

Product-android Android

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-10611

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.43% / 61.53%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:32

Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, Nicobar, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm6150 msm8909w_firmware sdm429w_firmware apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 apq8064 apq8098_firmware sdx20 sdm660 msm8920_firmware mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-10499

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.49%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855

Vendor-Qualcomm Technologies, Inc.

Product-sd_730 sd_855 sd_665 sd_730_firmware ipq8074 sd_675 qcs405_firmware ipq4019_firmware ipq4019 qcs405 ipq8074_firmware ipq8064 sd_665_firmware ipq8064_firmware sd_675_firmware sd_855_firmware Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-10481

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.69%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Out of bound access occurs while handling the WMI FW event due to lack of check of buffer argument which comes directly from the WLAN FW in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM8996AU, QCA6574AU, QCA8081, QCN7605, SDX55, SM6150, SM7150, SM8150

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2023-28558

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.78%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-02 Aug, 2024 | 13:43

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN handler while processing PhyID in Tx status handler.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28557

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 13.13%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-02 Aug, 2024 | 13:43

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2023-28567

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.48%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:01

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command through WMI interfaces.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28573

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.77%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-02 Aug, 2024 | 13:43

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while parsing WMI command parameters.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-35121

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 8.66%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-04 Aug, 2024 | 00:33

An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qcm2290_firmware wcn3991_firmware wcn3991 wsa8830 wcd9380_firmware qcs2290_firmware sd865_5g sdx55m_firmware wsa8835 qcs4290 wcn3950_firmware wcd9380 sd765g_firmware qcs2290 qca6390_firmware sd690_5g wcd9370 sd690_5g_firmware qca6426 qrb5165n_firmware wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware wcn3615_firmware wsa8815 wcn6850 sd662 wcn3910 sd460_firmware sd765 qca6426_firmware wcn3680b_firmware sd768g_firmware wcd9375_firmware wcn3615 wcn3998_firmware qrb5165m sm7250p_firmware sd460 qca6391 sdx55m apq8053_firmware qca6436_firmware qrb5165n sd680_firmware msm8953 qcm4290 qrb5165_firmware qrb5165m_firmware sdxr2_5g qrb5165 wcn6851_firmware sd662_firmware wcn3988_firmware wsa8810_firmware sd765g qcm4290_firmware sd765_firmware sd870 qca6436 sd680 wcd9326 wcn6851 wsa8810 wcn3680b qcs4290_firmware wcd9385 sd768g sd750g sd870_firmware qca6391_firmware qca6390 wcd9375 sd750g_firmware wcn3910_firmware wcd9370_firmware msm8953_firmware apq8053 wsa8830_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7250p qcm2290 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2018-5851

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.03%

7 Day CHG~0.00%

Published-12 Jun, 2018 | 20:00

Updated-16 Sep, 2024 | 17:48

Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-14046

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.69%

7 Day CHG~0.00%

Published-07 Feb, 2020 | 05:00

Updated-05 Aug, 2024 | 00:05

Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS605, SDM439, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sdx24_firmware sdm439_firmware sdx24 sdm439 qcs605 qcs605_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2018-5883

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.80%

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 05:47

Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 636, SD 675, SD 730, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2018-5838

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.45%

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 19:30

Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2023-24850

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.78%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Improper Validation of Array Index in HLOS

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-14044

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.13%

7 Day CHG~0.00%

Published-07 Feb, 2020 | 05:00

Updated-05 Aug, 2024 | 00:05

Out of bound access due to access of uninitialized memory segment in an array of pointers while normal camera open close in Snapdragon Consumer IOT, Snapdragon Mobile in QCS605, SDM439, SDM630, SDM636, SDM660, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sdx24_firmware sdm636_firmware sdm439_firmware sdm636 sdm660_firmware sdm630_firmware sdx24 sdm630 sdm660 sdm439 qcs605 qcs605_firmware Snapdragon Consumer IOT, Snapdragon Mobile

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-908

Use of Uninitialized Resource

CVE-2018-3576

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.03%

7 Day CHG~0.00%

Published-12 Jun, 2018 | 20:00

Updated-16 Sep, 2024 | 19:15

improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds access in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-14036

Matching Score-6

Assigner-Qualcomm, Inc.

View Details

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.39%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

Possible buffer overflow issue in error processing due to improper validation of array index value in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8064, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9607, MDM9615, MDM9640, MSM8996AU, QCN7605

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2018-11891

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs