ByteOS

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product

Versions

Affected

MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9650, MDM9655, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, SXR1130

Problem Types

Type	CWE ID	Description
text	N/A	Information Exposure Issue in MMCP module

Type: text

CWE ID: N/A

Description: Information Exposure Issue in MMCP module

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13885	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13885

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13885	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13885

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:24 May, 2019 | 17:29

Updated At:29 May, 2019 | 18:54

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	4.9	MEDIUM	AV:L/AC:L/Au:N/C:C/I:N/A:N

Type: Primary

Version: 3.0

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 2.0

Base score: 4.9

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:C/I:N/A:N

CPE Matches

cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*

>>mdm9150_firmware>>-

cpe:2.3:h:qualcomm:mdm9150:-:*:*:*:*:*:*:*

>>mdm9150>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

>>mdm9206_firmware>>-

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

>>mdm9206>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

>>mdm9607_firmware>>-

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

>>mdm9607>>-

cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*

>>mdm9615_firmware>>-

cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*

>>mdm9615>>-

cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*

>>mdm9625_firmware>>-

cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*

>>mdm9625>>-

cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*

>>mdm9635m_firmware>>-

cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*

>>mdm9635m>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

>>mdm9650_firmware>>-

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

>>mdm9650>>-

cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*

>>mdm9655_firmware>>-

cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*

>>mdm9655>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

>>qcs605_firmware>>-

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

>>qcs605>>-

cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*

>>qm215_firmware>>-

cpe:2.3:h:qualcomm:qm215:-:*:*:*:*:*:*:*

>>qm215>>-

cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*

>>sd_210_firmware>>-

cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*

>>sd_210>>-

cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*

>>sd_212_firmware>>-

cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*

>>sd_212>>-

cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*

>>sd_205_firmware>>-

cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*

>>sd_205>>-

cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*

>>sd_425_firmware>>-

cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*

>>sd_425>>-

cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*

>>sd_427_firmware>>-

cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*

>>sd_427>>-

cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*

>>sd_430_firmware>>-

cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*

>>sd_430>>-

cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*

>>sd_435_firmware>>-

cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*

>>sd_435>>-

cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*

>>sd_439_firmware>>-

cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*

>>sd_439>>-

cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*

>>sd_429_firmware>>-

cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*

>>sd_429>>-

cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*

>>sd_450_firmware>>-

cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*

>>sd_450>>-

cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*

>>sd_625_firmware>>-

cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*

>>sd_625>>-

cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*

>>sd_632_firmware>>-

cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*

>>sd_632>>-

cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*

>>sd_636_firmware>>-

cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*

>>sd_636>>-

cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*

>>sd_675_firmware>>-

cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*

>>sd_675>>-

cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*

>>sd_712_firmware>>-

cpe:2.3:h:qualcomm:sd_712:-:*:*:*:*:*:*:*

>>sd_712>>-

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	nvd@nist.gov

CWE ID: CWE-200

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13885	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins#_CVE-2018-13885

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

393Records found

CVE-2018-5892

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.30% / 52.57%

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-17 Sep, 2024 | 03:52

The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-10428

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 03:03

Product-sd_652 sd_425_firmware sd_820a sd_625_firmware sd_450 sd_425 sd_430_firmware sd_430 sd_625 sd_820_firmware sd_820 sd_650 sd_450_firmware sd_652_firmware sd_820a_firmware sd_650_firmware Snapdragon Automobile, Snapdragon Mobile

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-10423

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 01:25

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, when a Trusted Application has opened the SPI interface to a particular device, it is possible for another Trusted Application to read the data on this open interface due to non-exclusive access of the SPI bus.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-10430

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.02%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 16:42

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, when executing a TA which has been granted privileges to the CPVC MINK class it is possible for the TA to access methods exposed by the CPVC interface.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-10339

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.10% / 27.43%

7 Day CHG~0.00%

Published-13 Jun, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-10406

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 20:47

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, and SD 835, while printing debug message of a pointer in wlan_qmi_err_cb, the real kernel address will be printed regardless of the kptr_restrict system settings.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2015-9032

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-3.3||LOW

EPSS-0.09% / 25.95%

7 Day CHG~0.00%

Published-13 Jun, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2015-9194

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 22:01

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 845, and Snapdragon_High_Med_2016, during module load at TZ Startup, memory statically allocated by modules was not being properly set to zero first. Allowing the module to execute without reset gives it access to information from previous app thus leading to information exposure.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2015-9163

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 00:36

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in a PlayReady function, information exposure can occur.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2015-9001

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-5.5||MEDIUM

EPSS-0.10% / 28.03%

7 Day CHG~0.00%

Published-16 May, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.

Product-android All Qualcomm Products

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2015-9189

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:36

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 808, and SD 810, processing of TZ application command in tz_app_cmd_handler function could lead to potential content disclosure of secure memory.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2015-9169

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 22:46

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, buffer over-read in QSEE app may cause confidential information to be leaked.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2015-9031

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-3.3||LOW

EPSS-0.09% / 25.95%

7 Day CHG~0.00%

Published-13 Jun, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2015-9123

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 16:57

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, code to zeroize AES key could be compiled out by compiler which could potentially result in information disclosure.

Product-sd_850 mdm9635m_firmware mdm9640_firmware mdm9650 sd_615_firmware msm8909w_firmware sd_820 mdm9645 sd_650 sd_450_firmware sd_845_firmware sd_410 ipq4019_firmware mdm9206 sd_652 sd_425_firmware sd_800_firmware sd_625_firmware sd_450 mdm9635m mdm9615 sd_845 mdm9206_firmware mdm9640 sd_835_firmware mdm9650_firmware sd_835 sd_210_firmware sd_415_firmware sd_652_firmware sd_600 msm8909w sd_616_firmware sd_205_firmware sd_415 sd_650_firmware sd_212 fsm9055 sd_412 sd_808_firmware sd_400 sdx20 sd_616 sd_425 sd_430_firmware mdm9607_firmware sd_615 mdm9655_firmware sd_625 sd_210 mdm9607 sd_820_firmware mdm9645_firmware mdm9625_firmware sd_808 sd_800 fsm9055_firmware sd_617 sd_400_firmware sd_212_firmware sd_850_firmware mdm9655 sd_412_firmware mdm9625 sd_430 ipq4019 sd_810 mdm9615_firmware sdx20_firmware sd_410_firmware sd_600_firmware sd_205 sd_810_firmware sd_617_firmware Snapdragon Mobile, Snapdragon Wear, Small Cell SoC

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2015-9176

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 19:00

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, Input_address is registered as a shared buffer and is not properly checked before use in OEMCrypto_Generic_Sign(). This allows addresses to be accessed that reside in secure/CP memory.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9119

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 19:10

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, sensitive information may be returned to the QMI client as a response.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2018-3598

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.12% / 32.17%

7 Day CHG~0.00%

Published-03 Apr, 2018 | 17:00

Updated-16 Sep, 2024 | 20:27

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, insufficient validation of parameters from userspace in the camera driver can lead to information leak and out-of-bounds access.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2018-13897

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.24% / 46.22%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-05 Aug, 2024 | 09:14

Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 855, SDA660, SDM630, SDM660

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2021-30284

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.27% / 50.17%

7 Day CHG~0.00%

Published-12 Nov, 2021 | 06:16

Updated-03 Aug, 2024 | 22:32

Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware sm7250 mdm9640_firmware wcn3950_firmware qca6595au_firmware msm8917 mdm8215 sd_675_firmware mdm8615m_firmware msm8108 wcn3998 msm8108_firmware wcn3950 sm4125 mdm9628 sd720g mdm9206_firmware qsw8573_firmware sm6375_firmware wcn3660b sd450_firmware sd460_firmware mdm9230_firmware mdm8215m qca6574au_firmware mdm9630 wcd9375_firmware sdx12_firmware wcn3998_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sdx20m qca9367_firmware mdm8207 qca4004_firmware sd662_firmware mdm9615m qca6430 wcd9306_firmware wcd9340 sdm830_firmware mdm9625_firmware sd765g wcn6851 msm8937 msm8209_firmware mdm9250_firmware wcd9341 sd750g sd870_firmware mdm8215_firmware wcn3910_firmware mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware msm8208_firmware wcn6750_firmware sd450 wcn3610 msm8608 mdm9640 sm6375 wcn3991 wcd9380_firmware wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware qet4101_firmware msm8976_firmware qca6574 wcd9380 mdm9230 sd690_5g_firmware sdx50m_firmware qca9379_firmware qca6174 qca6430_firmware wcd9335_firmware sd439_firmware wcn3980 qsw8573 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware mdm9215_firmware wcn3660b_firmware sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m wcn6740_firmware ar6003_firmware msm8953 sd821_firmware sd678_firmware wcn6851_firmware sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware sd480 sd870 wcn6855 sd210_firmware apq8096au mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sd675 sd439 qet4101 qca9379 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sm7250_firmware mdm9628_firmware mdm9650 sd_636 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware qca6174_firmware sd690_5g sd730_firmware mdm9310_firmware wcd9370 sd675_firmware qca6584au_firmware wcn3990_firmware qca9377 sdw2500_firmware wcd9385_firmware wcd9326_firmware mdm9615m_firmware wcn3615_firmware sd662 apq8037 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware qca6595au wcn3615 wcn3610_firmware mdm9207 qca6564au_firmware qca6584au sd778g qca6310 msm8208 wcd9306 sm6225 qcs6490 sd429 qca9367 sd821 mdm9607_firmware sdm630 msm8976sg wcn3988_firmware sd205 sd429_firmware sm6250 sd778g_firmware apq8017_firmware wsa8810_firmware qca6694 sd765_firmware wcd9326 wcd9335 qca6174a_firmware wcd9385 mdm8615m qcs6490_firmware mdm9625 qca6390 wcd9375 sd750g_firmware aqt1000 msm8976 qca6694_firmware sm6250_firmware msm8953_firmware qca6694au msm8917_firmware sd210 wcn3620_firmware sd820 qcm6490 sd888_5g_firmware wsa8835_firmware wcn3620 wcn6850_firmware wsa8815_firmware apq8017 csr6030_firmware ar6003 qca6564a mdm9630_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sd665_firmware sd888_5g qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware sm7325 wcn6750 mdm9615 mdm9205 qca6574_firmware sd855 sm4125_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 apq8009 qca6391 sd460 mdm9310 aqt1000_firmware msm8920 qcm6490_firmware sdx50m sd480_firmware msm8920_firmware mdm9215 sm6225_firmware qca6574au mdm8215m_firmware mdm9607 sd205_firmware wcd9341_firmware sdx20m_firmware wsa8810 mdm9150 wcn6856 wcn3680b sd835_firmware sd768g wcn6740 msm8608_firmware sdw2500 msm8940 apq8096au_firmware mdm9615_firmware apq8037_firmware sdm830 sd720g_firmware sdx12 mdm9330 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2014-9947

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 17.57%

7 Day CHG~0.00%

Published-06 Jun, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potentially exist.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2014-9951

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 17.57%

7 Day CHG~0.00%

Published-06 Jun, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepancy vulnerability could potentially exist.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2020-11281

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.24% / 46.92%

7 Day CHG~0.00%

Published-22 Feb, 2021 | 06:26

Updated-04 Aug, 2024 | 11:28

Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product-qfs2580 qpm5679_firmware sm6250p_firmware qca8337 ipq8173_firmware qfs2608_firmware qfs2530 qpm8870_firmware qpa8688 pm6125 qcn5124 qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpm5541_firmware qpa5581_firmware sa6155 pm7150l qpa8821 qcs6125_firmware pm456_firmware qpa5580_firmware sa415m wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 qsw8573_firmware qsm8350_firmware qsw8574_firmware qsm8350 sd460_firmware smb2351_firmware sd6905g qpa4360_firmware qca8081_firmware wcn3998_firmware pm855p qca6420 pm6150a qpm6670_firmware ipq8070_firmware ipq8078a_firmware pm660_firmware pm8150b ipq8072_firmware sa8155_firmware qca6430 qat3522 pmr735a wcd9340 sd765g sdr660 qfs2630_firmware sdr865 qdm5620_firmware qca9888_firmware smr545 qca6696_firmware qln5020 wcd9371 qca1062 qcn5154_firmware pmm855au_firmware sm4350_firmware sa8150p pm6350 qdm5621 qtc800s qat3514_firmware sd660 pm640p_firmware sd660_firmware qcn5121 qcn5022_firmware qcn7606_firmware qat5516_firmware pm6150l wcn6750_firmware sd8885g pm855l_firmware qca6428_firmware qtc410s wcn3991 qpa8801 ipq8078 pm8150l_firmware ipq8173 qat5533_firmware sdx55m_firmware sdxr25g qpa8673_firmware pm6150 smb1354_firmware qca6574 qfs2630 qpa8842 csr8811_firmware sdr052_firmware wcd9380 qln4640 qcs410 qpm5579_firmware pmk8350_firmware qcn5024 pm855p_firmware smb1381 pm7250 qpa8803 qcn9012_firmware sdxr25g_firmware qdm2301 ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qdm5621_firmware qdm2301_firmware qpm6375 ipq6028 pmp8074 wcn3980_firmware sd730 pm660l_firmware pm6250_firmware pm8008 pm8350b_firmware qtm525_firmware qcn5064_firmware ipq8078_firmware qpm5621_firmware qcn5054 qln1021aq_firmware rsw8577 qpa6560_firmware qpa8802_firmware qln4640_firmware qpm5621 qpm6582 qcn9024_firmware ipq8174_firmware pm8009_firmware qfs2580_firmware qcm4290_firmware wcn6855 qcn7605_firmware pm8150l qcs610_firmware sa6145p pm660a_firmware pm4250 ar8031 qpm5577 wtr2965 qca6391_firmware pm8150 qca4024 wcd9370_firmware qat3516_firmware sdx55 qcn5021_firmware csra6640 qat3555_firmware qpa8803_firmware pm855b smb2351 qln1031 qcn7606 qpm5870 wsa8830 pm660 qet6110_firmware qca1062_firmware qpm6325 pm6125_firmware qbt1500 qpa5581 csrb31024 pmx24_firmware qbt1500_firmware qpm5870_firmware qcs4290 qet6100 pmm855au qca6420_firmware smb1396 pm7150a sd675_firmware ipq8072 pm8350 qpa5461_firmware qpa4361_firmware pm8350c_firmware qca6426 wcn3990_firmware qca9984_firmware qpm5641 wcd9385_firmware qdm5650_firmware qpa4340_firmware whs9410 pm7250_firmware qdm5620 qln1021aq ipq8074a pmk8002_firmware qsw6310_firmware sa8155 qln1031_firmware qdm4650_firmware qcn5122_firmware pmm6155au_firmware qat5533 sdx55_firmware qcn6023_firmware sm7250p_firmware qsm7250_firmware qpm6670 pm7150l_firmware qca6584au qpm4641 qat5515_firmware ipq8174 pm855 qpm8830_firmware pm8250 qcn5052 qdm4643 qfs2530_firmware sa415m_firmware pmx55 qpm4641_firmware qcn9074 wcn3988_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware qpm5677 qat5515 qat3514 wcd9335 pm6350_firmware qcn6023 pm8004_firmware sdr8150_firmware qcs4290_firmware qtc800h_firmware qpm5620 qpm4630 qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware pmm8195au qln4642 qpm5677_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware smr525_firmware wtr3925_firmware qpm8820_firmware qpm6621_firmware qcm6125_firmware pmx55_firmware qca6595 pm8150_firmware smb1398_firmware qpm8830 qat5522 pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qcn5154 qca8075_firmware sc8180x qpa4361 ipq6005_firmware qpm4640_firmware qpm5577_firmware wcn6855_firmware qdm5679_firmware pm8350c smr525 qca9888 ipq8070a_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware qca6175a sd765 qca6574a_firmware qpm4630_firmware qat3555 qpa5461 sd8c_firmware wtr2965_firmware csrb31024_firmware qfs2608 qcn9070_firmware qln1036aq qtc801s ipq6028_firmware ipq8072a_firmware sc8180x_firmware qpm5641_firmware qca9889_firmware qcn5122 pm8008_firmware qpm6621 pmr735a_firmware pmx50 qcn5022 sdr8250 sd768g qca1064_firmware pm8004 pm640l pmk8002 qca8075 qcn6024 qcn9022 ipq6000_firmware qcs410_firmware qca6175a_firmware qpa5580 qpm5579 sa6150p_firmware qcs610 qcn5550 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware qca4024_firmware pm855a_firmware ipq8078a qtc800h sa8150p_firmware qcs2290 sdr8250_firmware qcn5064 csra6620_firmware smr546_firmware qdm5671 csra6640_firmware pmc1000h qpm4650_firmware qat3518 sd8c sdr425_firmware smr526_firmware ipq8076a pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware qca6428 qdm5652 qca6574au_firmware qcn5164_firmware ipq8071 qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware wcd9360 qca6438_firmware pmx50_firmware qpa8675_firmware whs9410_firmware sdr735g wcn3999 qdm3301_firmware qsm7250 qcs6125 ipq6010 sd662_firmware qcs405 rsw8577_firmware qdm2308_firmware qca6436 wcn6851 sa6155p qpa6560 sdr675_firmware wcd9341 qdm4643_firmware qca6431 qet4100_firmware sd750g wcn3910_firmware qpm5657 qpm5875_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 qca6438 wtr3925 sdr052 sa8195p_firmware smb1390 qet4100 qpa8686_firmware ipq5018_firmware qpm6585 qca8337_firmware wcd9380_firmware smb1355 ipq8072a qln4650 sdr735g_firmware wgr7640 ipq8076a_firmware qat5568 qdm5671_firmware qet5100 qca6564au qpa8801_firmware qtm527_firmware wcn6856_firmware qcn5164 qet4101_firmware pm7250b qln4642_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware qcn5054_firmware qet4200aq_firmware sdx50m_firmware sdr735 smb1395 pm660l smr526 qca8072_firmware qca6430_firmware pmk8003 qcn5052_firmware qtc801s_firmware qat3522_firmware wcd9335_firmware wcn3980 qsw8573 sd7c wcn3910 qca6426_firmware pm8350_firmware qca9984 qcn9024 pm8009 qpa8675 qcn5550_firmware sdr051_firmware sdx55m qca6421_firmware qat3518_firmware qsw8574 sd6905g_firmware ar8031_firmware pm855l wcn6851_firmware qdm5670_firmware ipq8070 sd8655g pm7150a_firmware pm8150b_firmware smr545_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware pm4250_firmware qcn5121_firmware sd8885g_firmware qdm5677 ipq6018 pm855_firmware qdm2302 pmm6155au pm855b_firmware qca6595_firmware qcs405_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware qln4650_firmware qpm5875 qet5100m sa8155p sd675 qet4101 qat3516 qpm5658 ar8035_firmware qcm2290 qpm5658_firmware qcn5024_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware sdr051 qcn9070 qln5030 qcs2290_firmware pm4125 pmi632 qpa2625_firmware pm456 sd7c_firmware pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qpm4621 qcn9072 qet6100_firmware sdr660g sd765g_firmware qpa8686 qca6390_firmware ipq6000 sd730_firmware wcd9370 qcn5152_firmware sdr425 pmr525_firmware qca6584au_firmware qcn9000_firmware ipq5018 pmi632_firmware qcn7605 qpm5541 qat5516 sd662 qpa8821_firmware qcn5124_firmware sdr660g_firmware pm8350bh qca1064 pm3003a qca6595au wcn3999_firmware qca6436_firmware smb1354 ipq5010 qca6564au_firmware qdm2305 sa6155p_firmware qpm8820 qln5020_firmware sa515m_firmware smb1398 sa6145p_firmware sdr675 sm6250 wsa8810_firmware sd765_firmware qdm5677_firmware qca8081 qet4200aq ipq8071a ipq8071a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware ar8035 csr8811 qpa8673 qdm2310 qln5030_firmware qcn9100_firmware smb1396_firmware wcn6850_firmware wsa8835_firmware qca6564a smr546 pmx24 qet6110 qln5040 qca8072 qcm2290_firmware qpm8895 qpm5670 wcn3990 qcn9000 qtm527 pmk8350 qcn9012 pm8350b qdm2307_firmware wsa8835 qpm5657_firmware sm6250p pm855a sdr660_firmware qca6574a smb1390_firmware qca9889 ipq8074 qpm4640 wcn6750 qet5100m_firmware ipq8076_firmware qpm4650 qtm525 sa515m sd855 sm4125_firmware sd8cx ipq8076 pm640p qcn5021 qcn5152 sd768g_firmware sdr865_firmware pm8250_firmware sd460 qca6391 sd8cx_firmware smb1351 ipq6005 aqt1000_firmware qcn9100 qpm8895_firmware pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 smb1395_firmware qdm4650 pmd9655 ipq8074_firmware qca6574au sa8155p_firmware qsw6310 sd8655g_firmware wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qat5568_firmware qdm2308 qat3550 wcn6856 qdm5679 ipq6010_firmware pm3003a_firmware qca6696 qtc800s_firmware sm4350 smb1381_firmware qpa2625 sa6150p qcn9022_firmware qpa8688_firmware ipq8070a pmm8195au_firmware qcn9072_firmware sm7250p sd720g_firmware ipq8071_firmware qcn9074_firmware qpm4621_firmware pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2020-11221

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-17 Mar, 2021 | 06:00

Updated-04 Aug, 2024 | 11:28

Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product-qfe3100 qfe2080fc_firmware qca9377_firmware qfs2580 qpm5679_firmware mdm9640_firmware sm6250p_firmware pmd9607_firmware qfe4455fc_firmware qca8337 qfs2530 qpm8870_firmware qln1030 pm6125 qat5522_firmware mdm9645 wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpm5541_firmware pm7150l qcc1110_firmware pm8998_firmware qpa8821 sd_455_firmware wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sm4125 sd720g mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qfe4320 qsw8574_firmware sd460_firmware mdm9230_firmware smb2351_firmware pm8953_firmware qpa4360_firmware wcn3998_firmware qfe2520_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 pm6150a wtr4605_firmware qca9367_firmware mdm8207 pm660_firmware pm8150b sa8155_firmware qca4004_firmware qfe2101 qca6430 qat3522 qfe4455fc pmr735a wcd9306_firmware wcd9340 sd765g sdr660 qfe1045_firmware qfe3345 msm8209_firmware sdr865 mdm9250_firmware qdm5620_firmware smb1358 qca6696_firmware qln5020 wcd9371 sd870_firmware pmm855au_firmware sd_8cx wtr3950 qfe3340 qdm5621 qtc800s qca4004 qat3514_firmware mdm9330_firmware sd660 sd865_5g_firmware sd712 pm640p_firmware sd660_firmware wcn6750_firmware qat5516_firmware pm6150l sd450 pm855l_firmware qtc410s wcn3991 qfe3335_firmware qpa8801 sdm429w pm8150l_firmware qat5533_firmware sdx55m_firmware qpa8673_firmware pm6150 smb1354_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware qpa8842 sdr052_firmware pmm8996au wcd9380 qualcomm215 qln4640 qcs410 qpm5579_firmware smb1380_firmware qfe4309_firmware smb1381 pm855p_firmware qfe3100_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sdx24_firmware sd439_firmware pmd9645 qdm2301 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware qca6584_firmware qdm2301_firmware msm8937_firmware qdm5621_firmware qpm6375 sd_8c_firmware sd835 wcn3980_firmware sd730 qfe3320_firmware pm660l_firmware pm6250_firmware pm8008 qtm525_firmware pme605_firmware pme605 sd678_firmware qpm5621_firmware qln1021aq_firmware qcs603 rsw8577 qpa6560_firmware qpa8802_firmware qln4640_firmware qfe4308_firmware qpm5621 qpm6582 sd670 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcm4290_firmware pm8150l pmi8998_firmware qcs610_firmware apq8084_firmware sdr105 pm660a_firmware pm215 pm4250 qpm5577 mdm8207_firmware sdm630_firmware wtr2965 mdm9205_firmware qca6391_firmware sa2150p pmx20_firmware sd820_firmware pm8150 pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 qat3555_firmware pmi8994 qpa8803_firmware wcn3660 qca9379 pm855b smb2351 qln1031 pm8909 mdm9150_firmware qfe1040 pm660 qet6110_firmware qpm6325 pm6125_firmware qbt1500 qfe1040_firmware csrb31024 mdm9628_firmware qfe2340_firmware mdm9650 sd_636 pmx24_firmware qbt1500_firmware pmk8001 qcs4290 pmm855au mdm9250 qca6420_firmware pmd9635_firmware apq8009_firmware pm7150a sd675_firmware qpa4361_firmware qca6426 wcn3990_firmware qca9377 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware whs9410 rgr7640au_firmware wtr2955 pm7250_firmware sdr845_firmware qdm5620 qln1021aq smb1380 pmk8002_firmware qsw6310_firmware sa8155 qca6584 qln1031_firmware sdx55_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware pm8940 mdm9207 qsm7250_firmware pm7150l_firmware wcd9306 qca6584au msm8208 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 qca9367 qfe2082fc_firmware sdm630 mdm9607_firmware mdm9655_firmware msm8976sg qfs2530_firmware pmx55 sa415m_firmware wcn3988_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware pm8953 qat5515 qca6694 qpm5677 qat3514 wcd9326 wcd9335 pm8004_firmware sdr8150_firmware qcs4290_firmware pm439 qtc800h_firmware qca6390 wcd9375 aqt1000 msm8976 sm6250_firmware qln4642 msm8917_firmware qpm5677_firmware sdx20_firmware wsa8815_firmware wtr3925_firmware pmi8937 pm8998 sdw3100 smr525_firmware qpm8820_firmware qfe4301_firmware apq8017 qln1020_firmware mdm9630_firmware qcm6125_firmware pmx55_firmware wtr2955_firmware qbt1000_firmware qfe4373fc_firmware sd865_5g qca6595 pm8150_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c sd665_firmware qpa4360 sc8180x qpa4361 mdm9206 qpm5577_firmware qdm5679_firmware smr525 qca6310_firmware qfe4305_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware wtr3950_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware sd765 pmx20 pmd9607 qca6574a_firmware qat3555 sd850_firmware apq8009 qfe2082fc wtr2965_firmware pm670_firmware csrb31024_firmware qln1036aq qtc801s pmi8940_firmware sc8180x_firmware qfe3320 sd710 mdm9607 mdm9645_firmware pm8008_firmware qln1035bd_firmware pmr735a_firmware pmw3100 pmx50 qfe3345_firmware sdr8250 sd768g qln1030_firmware pmw3100_firmware pm8004 pm640l msm8940 pmk8002 apq8096au_firmware sdw2500 sd845 smb1357 pmd9655au_firmware qca617_firmware qcs410_firmware mdm9330 qpa5580 qpm5579 qfe2550 qcs610 pmi8996 qfe1045 qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware pm855a_firmware qtc800h sdr8250_firmware qcs2290 qca6335 msm8917 qln1020 qcs605_firmware sd_675_firmware wtr3905 qdm5671 pmc1000h qpm4650_firmware qat3518 sd632 sdr425_firmware smr526_firmware mdm9628 pm640a_firmware qpa5460 wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware mdm9630 qpm8870 wcd9375_firmware qpm5679 qbt2000 msm8909w wcd9360 pmx50_firmware qpa8675_firmware whs9410_firmware qpa5460_firmware pm8940_firmware qdm3301_firmware pm8996 qsm7250 qcs6125 sd662_firmware qcc1110 smb1360 qualcomm215_firmware qfe3440fc qdm2308_firmware rsw8577_firmware pm439_firmware qca4020_firmware qca6436 wcn6851 qcs603_firmware qpa6560 msm8937 sdr675_firmware wcn3660_firmware wcd9341 pmi8952 mdm9655 pm8937_firmware qca6431 qet4100_firmware qfe4320_firmware wcn3910_firmware mdm9207_firmware sd855_firmware qdm5650 wcn3988 wtr3925 qfe2080fc sdr052 smb1390 sdw3100_firmware msm8208_firmware qet4100 wcn3610 msm8608 mdm9640 qpa8686_firmware qpm6585 qca8337_firmware sda429w_firmware wcd9380_firmware smb1355 qln4650 qtc800t_firmware wcd9330 msm8996au_firmware wgr7640 csr6030 qet5100 qdm5671_firmware qpa8801_firmware qca6564au qtm527_firmware pm8005_firmware msm8940_firmware qet4101_firmware pm7250b qln4642_firmware pmk8001_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware mdm9230 pm8996_firmware qet4200aq_firmware sdx50m_firmware smb1395 smb358s pm660l smb358s_firmware ar8151 smr526 wtr5975 qca6430_firmware wcd9335_firmware qtc801s_firmware wcn3980 qat3522_firmware qca6335_firmware qsw8573 qcs605 qbt1000 wcn3910 qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 qpa8675 sdr051_firmware wcd9330_firmware sdx55m qca6421_firmware wtr3905_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 qsw8574 sd821_firmware wcn3680_firmware qca617 pm855l wcn6851_firmware qdm5670_firmware pmd9635 pm7150a_firmware pm8150b_firmware qfe4302 sd_636_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware qca6694au_firmware pm4250_firmware msm8976sg_firmware sdr105_firmware pmd9645_firmware sd870 pm670 sd210_firmware qdm5677 pm8005 pm855_firmware qdm2302 sdxr1 pm855b_firmware apq8096au qca6595_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware pmi8996_firmware qln4650_firmware qet5100m sa8155p sd675 wtr4605 sd439 qet4101 pm8952 qat3516 pm670l qpm5658 ar8035_firmware qcm2290 qpm5658_firmware wcn3991_firmware qdm5652_firmware qfe4465fc sd678 sdr051 qln5030 qcs2290_firmware pm4125 pmi632 qpa2625_firmware pm456 qfe2081fc_firmware smb1360_firmware qet5100_firmware qpa5373 pm670l_firmware sdr660g qfe2340 sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware sd730_firmware wcd9370 sdr425 pmr525_firmware qca6584au_firmware qfe3340_firmware ar8151_firmware pmi632_firmware sd_8cx_firmware qpm5541 qat5516 smb358_firmware sd662 qpa8821_firmware qfe4308 sdr660g_firmware apq8037 pm3003a qca6320_firmware wcn3680b_firmware qca6595au qca6436_firmware qtc800t smb1354 qca6564au_firmware qdm2305 qca6310 qpm8820 pm8937 qpm2630 qfe2081fc qln5020_firmware sa515m_firmware sdxr2_5g apq8084 sd821 sdr675 sm6250 sd712_firmware apq8017_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware qln5040_firmware pm4125_firmware ar8035 qpa8673 qca6694_firmware qdm2310 qfe2550_firmware msm8953_firmware qln5030_firmware qca6694au pm8952_firmware sda429w sd210 wcn3620_firmware qfe4302_firmware sd820 wcn6850_firmware wcn3620 smb358 csr6030_firmware qca6564a pmx24 qet6110 pmi8952_firmware qcm2290_firmware qln5040 qpm8895 sdr845 qpm5670 wcn3990 sd_675 qtm527 qfe3440fc_firmware sdx24 pmi8994_firmware qdm2307_firmware msm8909w_firmware msm8996au sdm429w_firmware qfe1035 pmi8940 sm6250p rgr7640au qln1035bd pm855a sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware wcn6750 pm8956_firmware qet5100m_firmware qpm4650 mdm9205 qtm525 sa515m sa2150p_firmware wtr6955 qfe3335 sd855 sm4125_firmware qfe4305 wtr6955_firmware pm640p sd768g_firmware sdr865_firmware msm8209 qfe4465fc_firmware pm8250_firmware sd460 qca6391 sdxr1_firmware smb1351 smb1357_firmware aqt1000_firmware pm215_firmware msm8920 qpm8895_firmware pm660a qpa4340 qfe1035_firmware qcm4290 sdx50m pm640a sdr8150 sdx20 pm8916 pmd9655au msm8920_firmware smb1395_firmware sd_455 pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware smb231_firmware qdm2308 wtr4905_firmware qat3550 mdm9150 qdm5679 sd_8c wcn3680b sd835_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware msm8608_firmware qpa2625 apq8037_firmware sm7250p sd720g_firmware pm8956 sd850 pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2018-11846

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-4.7||MEDIUM

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 08:17

The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 845, SD 850

Product-sd_850 sd_212_firmware sd_210 sd_850_firmware sd_205 sd_210_firmware sd_845_firmware sd_845 sd_205_firmware sd_212 Snapdragon Mobile

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2014-10047

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.12% / 31.26%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:57

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, when writing the Full Disk Encryption key to crypto engine, information leak could occur.

Product-sd_400_firmware sd_400 sd_800_firmware sd_800 Snapdragon Mobile

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2014-10062

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 00:45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, LocationService is being exported, which is a way for a service to expose its methods to other services. This makes it possible for any other services to import LocationService and call into the exposed method for bringing up a data connection.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2014-10055

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 03:54

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, there could be leakage of protected contents if HLOS doesn't request for security restoration for OCMEM xPU's.

Product-sd_400_firmware sd_400 sd_800_firmware sd_800 Snapdragon Mobile

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-9680

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.11% / 30.16%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-9682

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-4.7||MEDIUM

EPSS-0.06% / 17.76%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a Use After Free condition.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2017-9701

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.12% / 31.12%

7 Day CHG~0.00%

Published-16 Nov, 2017 | 22:00

Updated-20 Apr, 2025 | 01:37

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing OEM unlock/unlock-go fastboot commands data leak may occur, resulting from writing uninitialized stack structure to non-volatile memory.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-9681

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.11% / 30.45%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-17 Sep, 2024 | 00:11

In Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android releases from CAF using the Linux kernel, if kernel memory address is passed from userspace through iris_vidioc_s_ext_ctrls ioctl, it will print kernel address data. A user could set it to an arbitrary kernel address, hence information disclosure (for kernel) could occur.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-9679

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.11% / 30.16%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-terminated, kernel memory contents can leak to system logs.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-8254

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.72%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is valid.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-8258

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.72%

7 Day CHG~0.00%

Published-11 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a camera driver.

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-8269

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.11% / 29.84%

7 Day CHG~0.00%

Published-11 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux kernel can lead to exposure of kernel memory.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-8239

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 32.48%

7 Day CHG~0.00%

Published-13 Jun, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentially leading to exposure of kernel memory.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2022-40523

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.04% / 10.88%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 12:21

Information exposure in Kernel

Information disclosure in Kernel due to indirect branch misprediction.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE ID-CWE-668

Exposure of Resource to Wrong Sphere

CVE-2022-40525

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.04% / 10.88%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 12:21

Information Exposure in Linux Networking Firmware

Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE ID-CWE-668

Exposure of Resource to Wrong Sphere

CVE-2024-53011

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.9||HIGH

EPSS-0.02% / 2.66%

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-11 Aug, 2025 | 15:06

Permissions, Privileges, and Access Controls in Video Analytics and Processing

Information disclosure may occur due to improper permission and access controls to Video Analytics engine.

Product-snapdragon_8_gen_3_mobile_platform_firmware qcm8550_firmware sa6150p_firmware wcn6650 wsa8845_firmware wsa8832 qcs8155_firmware wcd9378_firmware qca6595 sm8735 sm7675p wcd9370 qca6696 sm8475 wcn7880_firmware wcn7860_firmware sc8380xp sxr2330p_firmware sa4150p_firmware wcd9395_firmware wcn7881_firmware snapdragon_ar1_gen_1_platform_firmware wcn7750 wcn6450 fastconnect_6700 qca6564au sa4150p wsa8832_firmware sa8195p_firmware wcd9395 sg8275p_firmware qca6574au_firmware qca6564_firmware qca6574au wcd9390 flight_rb5_5g_platform wsa8845h_firmware sm8650q_firmware sm8750 wcn7860 sa4155p_firmware sa8155 sa4155p ssg2115p wcn6755_firmware wcn6650_firmware sc8380xp_firmware qca6595_firmware qcs7230 fastconnect_7800_firmware fastconnect_6900 sm8635 sm8635_firmware wcd9385_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware sa6155_firmware sxr2230p sa8155_firmware qmp1000_firmware wcn7880 sa8150p snapdragon_ar2_gen_1_platform_firmware sxr2330p snapdragon_8_gen_1_mobile_platform_firmware wcn6755 snapdragon_ar1_gen_1_platform snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p snapdragon_ar1_gen_1_platform_\"luna1\"_firmware qca6564au_firmware sxr1230p video_collaboration_vc5_platform_firmware snapdragon_8\+_gen_2_mobile_platform sm6650 wcn7881 qca6595au sxr2250p_firmware sa6155p_firmware wsa8840 qca6688aq qcs8550_firmware wcd9385 sm8750p snapdragon_8\+_gen_1_mobile_platform snapdragon_8_gen_2_mobile_platform qcs7230_firmware sm8635p sxr1230p_firmware wcd9390_firmware qmp1000 snapdragon_8_gen_3_mobile_platform sg8275p wcd9370_firmware sm8750_firmware ssg2125p qca6574a sa8195p wcn7861_firmware wcn7861 video_collaboration_vc5_platform sm8550p_firmware sxr2250p qcm8550 qcn9274 sm6650_firmware qrb5165n_firmware qca6574 wsa8835 qca6595au_firmware qca6391_firmware sxr2230p_firmware wsa8840_firmware snapdragon_ar2_gen_1_platform qca6696_firmware wsa8845h wcd9380_firmware sa6150p qca6574_firmware sm8650q sa8155p_firmware sa8155p wsa8830 sm8550p snapdragon_8\+_gen_1_mobile_platform_firmware sa6145p sm7675_firmware flight_rb5_5g_platform_firmware qca6574a_firmware sm7635_firmware qca6564 sa6155 wcn7750_firmware wcn6450_firmware snapdragon_ar1_gen_1_platform_\"luna1\"wcd9375_firmware robotics_rb5_platform qca6391 qcn9274_firmware sm8475_firmware ssg2125p_firmware sm7635 qrb5165n snapdragon_8_gen_2_mobile_platform_firmware snapdragon_8_gen_1_mobile_platform robotics_rb5_platform_firmware qcs8550 sm8735_firmware fastconnect_7800 sa8145p_firmware wcd9378 qcs8155 sm8635p_firmware qca6688aq_firmware sm8750p_firmware wcd9375 sa8150p_firmware fastconnect_6700_firmware sm7675 sa8145p wsa8835_firmware ssg2115p_firmware sm7675p_firmware wsa8830_firmware Snapdragon

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2020-3687

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 8.63%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 07:44

Local privilege escalation in admin services in Windows environment can occur due to an arbitrary read issue.

Product-qualcomm unspecified

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2022-22075

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.2||MEDIUM

EPSS-0.06% / 18.83%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 03:00

Information Exposure in Graphics

Information Disclosure in Graphics during GPU context switch.

Product-qca9377_firmware sa6150p_firmware qcs610 qca8337 sdx65 wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware apq8076 sd_675_firmware csra6640_firmware qcs6125_firmware sd632 msm8108 wcn3998 msm8108_firmware qam8295p wcn3950 sm4125 sd720g mdm9628 mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd710_firmware sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware msm8909w apq8009w_firmware qca6420 sdx20m sd680_firmware qca9367_firmware qrb5165_firmware sa4155p_firmware qcs6125 sa8155_firmware apq8056_firmware sd662_firmware qcs405 qca6430 wcd9340 sd626_firmware sd765g qualcomm215_firmware sw5100 sd680 qca6436 wcn6851 sa6155p wcn7851_firmware msm8209_firmware mdm9250_firmware wcd9341 qca6696_firmware sd870_firmware sd750g wcn3910_firmware sxr2150p_firmware sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 msm8208_firmware qcn7606_firmware wcn6750_firmware sa8295p_firmware wcn3610 pq8052_firmware msm8608 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 sd625_firmware qca6564au sdx55m_firmware wcn6856_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware sdx24_firmware sd626 qca6430_firmware wcd9335_firmware sd439_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 pq8052 wcn6850 wcn3910 msm8956_firmware qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m qcc5100_firmware sa8295p wcn6740_firmware sd821_firmware sd678_firmware apq8064au_firmware ar8031_firmware wcn3680_firmware qrb5165 wcn6851_firmware sd670 sd_636_firmware qca6564a_firmware apq8009w msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware qsm8250 sa6145p sd695_firmware sdxr1 ar8031 apq8096au qcs405_firmware sa8145p sdm630_firmware sd820_firmware qca6391_firmware sa4150p_firmware wcd9370_firmware sd780g_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sd439 qcs8155_firmware sa4155p sxr2150p ar8035_firmware qsm8250_firmware qcn7606 qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware mdm9628_firmware snapdragon_4_gen_1_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware sd625 qca6564 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware apq8076_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 qam8295p_firmware sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware wcn3615 qca6595au sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware qca6584au sd778g sa6155p_firmware msm8208 qca6310 qcs8155 wcn7851 sd429 sa515m_firmware qcs6490 sdxr2_5g qca9367 sdm630 mdm9607_firmware sd821 msm8976sg wcn3988_firmware qcn9074 sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 msm8956 msm8976 sm6250_firmware ar8035 apq8064au msm8952 apq8056 msm8917_firmware sda429w sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a sa4150p qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qcc5100 sdx24 sd888 msm8952_firmware msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 sa515m qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sm7315 apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 qcm6490_firmware sdx50m sdx20 sd480_firmware qca6574au sd710 sa8155p_firmware mdm9607 sd205_firmware wcd9341_firmware sdx20m_firmware qcm6125 wsa8810 mdm9150 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sdw2500 sa6150p apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware Snapdragon

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2023-21624

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.2||MEDIUM

EPSS-0.04% / 10.79%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Information Exposure in DSP Services

Information disclosure in DSP Services while loading dynamic module.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2020-11199

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-17 Mar, 2021 | 06:00

Updated-04 Aug, 2024 | 11:28

HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-qfe3100 qfe2080fc_firmware qca9377_firmware qfs2580 qpm5679_firmware mdm9640_firmware sm6250p_firmware pmd9607_firmware qfe4455fc_firmware qca8337 qfs2530 qpm8870_firmware qln1030 pm6125 qat5522_firmware mdm9645 wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpm5541_firmware pm7150l qcc1110_firmware pm8998_firmware qpa8821 sd_455_firmware wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sm4125 sd720g mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qfe4320 qsw8574_firmware sd460_firmware mdm9230_firmware smb2351_firmware pm8953_firmware qpa4360_firmware wcn3998_firmware qfe2520_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 pm6150a wtr4605_firmware qca9367_firmware mdm8207 pm660_firmware pm8150b sa8155_firmware qca4004_firmware qfe2101 qca6430 qat3522 qfe4455fc pmr735a wcd9306_firmware wcd9340 sd765g sdr660 qfe1045_firmware qfe3345 msm8209_firmware sdr865 mdm9250_firmware qdm5620_firmware smb1358 qca6696_firmware qln5020 wcd9371 sd870_firmware pmm855au_firmware sd_8cx wtr3950 qfe3340 qdm5621 qtc800s qca4004 qat3514_firmware mdm9330_firmware sd660 sd865_5g_firmware sd712 pm640p_firmware sd660_firmware wcn6750_firmware qat5516_firmware pm6150l sd450 pm855l_firmware qtc410s wcn3991 qfe3335_firmware qpa8801 sdm429w pm8150l_firmware qat5533_firmware sdx55m_firmware qpa8673_firmware pm6150 smb1354_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware qpa8842 sdr052_firmware pmm8996au wcd9380 qualcomm215 qln4640 qcs410 qpm5579_firmware smb1380_firmware qfe4309_firmware smb1381 pm855p_firmware qfe3100_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sdx24_firmware sd439_firmware pmd9645 qdm2301 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware qca6584_firmware qdm2301_firmware msm8937_firmware qdm5621_firmware qpm6375 sd_8c_firmware sd835 wcn3980_firmware sd730 qfe3320_firmware pm660l_firmware pm6250_firmware pm8008 qtm525_firmware pme605_firmware pme605 sd678_firmware qpm5621_firmware qln1021aq_firmware qcs603 rsw8577 qpa6560_firmware qpa8802_firmware qln4640_firmware qfe4308_firmware qpm5621 qpm6582 sd670 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcm4290_firmware pm8150l pmi8998_firmware qcs610_firmware apq8084_firmware sdr105 pm660a_firmware pm215 pm4250 qpm5577 mdm8207_firmware sdm630_firmware wtr2965 mdm9205_firmware qca6391_firmware sa2150p pmx20_firmware sd820_firmware pm8150 pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 qat3555_firmware pmi8994 qpa8803_firmware wcn3660 qca9379 pm855b smb2351 qln1031 pm8909 mdm9150_firmware qfe1040 pm660 qet6110_firmware qpm6325 pm6125_firmware qbt1500 qfe1040_firmware csrb31024 mdm9628_firmware qfe2340_firmware mdm9650 sd_636 pmx24_firmware qbt1500_firmware pmk8001 qcs4290 pmm855au mdm9250 qca6420_firmware pmd9635_firmware apq8009_firmware pm7150a sd675_firmware qpa4361_firmware qca6426 wcn3990_firmware qca9377 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware whs9410 rgr7640au_firmware wtr2955 pm7250_firmware sdr845_firmware qdm5620 qln1021aq smb1380 pmk8002_firmware qsw6310_firmware sa8155 qca6584 qln1031_firmware sdx55_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware pm8940 mdm9207 qsm7250_firmware pm7150l_firmware wcd9306 qca6584au msm8208 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 qca9367 qfe2082fc_firmware sdm630 mdm9607_firmware mdm9655_firmware msm8976sg qfs2530_firmware pmx55 sa415m_firmware wcn3988_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware pm8953 qat5515 qca6694 qpm5677 qat3514 wcd9326 wcd9335 pm8004_firmware sdr8150_firmware qcs4290_firmware pm439 qtc800h_firmware qca6390 wcd9375 aqt1000 msm8976 sm6250_firmware qln4642 msm8917_firmware qpm5677_firmware sdx20_firmware wsa8815_firmware wtr3925_firmware pmi8937 pm8998 sdw3100 smr525_firmware qpm8820_firmware qfe4301_firmware apq8017 qln1020_firmware mdm9630_firmware qcm6125_firmware pmx55_firmware wtr2955_firmware qbt1000_firmware qfe4373fc_firmware sd865_5g qca6595 pm8150_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c sd665_firmware qpa4360 sc8180x qpa4361 mdm9206 qpm5577_firmware qdm5679_firmware smr525 qca6310_firmware qfe4305_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware wtr3950_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware sd765 pmx20 pmd9607 qca6574a_firmware qat3555 sd850_firmware apq8009 qfe2082fc wtr2965_firmware pm670_firmware csrb31024_firmware qln1036aq qtc801s pmi8940_firmware sc8180x_firmware qfe3320 sd710 mdm9607 mdm9645_firmware pm8008_firmware qln1035bd_firmware pmr735a_firmware pmw3100 pmx50 qfe3345_firmware sdr8250 sd768g qln1030_firmware pmw3100_firmware pm8004 pm640l msm8940 pmk8002 apq8096au_firmware sdw2500 sd845 smb1357 pmd9655au_firmware qca617_firmware qcs410_firmware mdm9330 qpa5580 qpm5579 qfe2550 qcs610 pmi8996 qfe1045 qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware pm855a_firmware qtc800h sdr8250_firmware qcs2290 qca6335 msm8917 qln1020 qcs605_firmware sd_675_firmware wtr3905 qdm5671 pmc1000h qpm4650_firmware qat3518 sd632 sdr425_firmware smr526_firmware mdm9628 pm640a_firmware qpa5460 wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware mdm9630 qpm8870 wcd9375_firmware qpm5679 qbt2000 msm8909w wcd9360 pmx50_firmware qpa8675_firmware whs9410_firmware qpa5460_firmware pm8940_firmware qdm3301_firmware pm8996 qsm7250 qcs6125 sd662_firmware qcc1110 smb1360 qualcomm215_firmware qfe3440fc qdm2308_firmware rsw8577_firmware pm439_firmware qca4020_firmware qca6436 wcn6851 qcs603_firmware qpa6560 msm8937 sdr675_firmware wcn3660_firmware wcd9341 pmi8952 mdm9655 pm8937_firmware qca6431 qet4100_firmware qfe4320_firmware wcn3910_firmware mdm9207_firmware sd855_firmware qdm5650 wcn3988 wtr3925 qfe2080fc sdr052 smb1390 sdw3100_firmware msm8208_firmware qet4100 wcn3610 msm8608 mdm9640 qpa8686_firmware qpm6585 qca8337_firmware sda429w_firmware wcd9380_firmware smb1355 qln4650 qtc800t_firmware wcd9330 msm8996au_firmware wgr7640 csr6030 qet5100 qdm5671_firmware qpa8801_firmware qca6564au qtm527_firmware pm8005_firmware msm8940_firmware qet4101_firmware pm7250b qln4642_firmware pmk8001_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware mdm9230 pm8996_firmware qet4200aq_firmware sdx50m_firmware smb1395 smb358s pm660l smb358s_firmware ar8151 smr526 wtr5975 qca6430_firmware wcd9335_firmware qtc801s_firmware wcn3980 qat3522_firmware qca6335_firmware qsw8573 qcs605 qbt1000 wcn3910 qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 qpa8675 sdr051_firmware wcd9330_firmware sdx55m qca6421_firmware wtr3905_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 qsw8574 sd821_firmware wcn3680_firmware qca617 pm855l wcn6851_firmware qdm5670_firmware pmd9635 pm7150a_firmware pm8150b_firmware qfe4302 sd_636_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware qca6694au_firmware pm4250_firmware msm8976sg_firmware sdr105_firmware pmd9645_firmware sd870 pm670 sd210_firmware qdm5677 pm8005 pm855_firmware qdm2302 sdxr1 pm855b_firmware apq8096au qca6595_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware pmi8996_firmware qln4650_firmware qet5100m sa8155p sd675 wtr4605 sd439 qet4101 pm8952 qat3516 pm670l qpm5658 ar8035_firmware qcm2290 qpm5658_firmware wcn3991_firmware qdm5652_firmware qfe4465fc sd678 sdr051 qln5030 qcs2290_firmware pm4125 pmi632 qpa2625_firmware pm456 qfe2081fc_firmware smb1360_firmware qet5100_firmware qpa5373 pm670l_firmware sdr660g qfe2340 sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware sd730_firmware wcd9370 sdr425 pmr525_firmware qca6584au_firmware qfe3340_firmware ar8151_firmware pmi632_firmware sd_8cx_firmware qpm5541 qat5516 smb358_firmware sd662 qpa8821_firmware qfe4308 sdr660g_firmware apq8037 pm3003a qca6320_firmware wcn3680b_firmware qca6595au qca6436_firmware qtc800t smb1354 qca6564au_firmware qdm2305 qca6310 qpm8820 pm8937 qpm2630 qfe2081fc qln5020_firmware sa515m_firmware sdxr2_5g apq8084 sd821 sdr675 sm6250 sd712_firmware apq8017_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware qln5040_firmware pm4125_firmware ar8035 qpa8673 qca6694_firmware qdm2310 qfe2550_firmware msm8953_firmware qln5030_firmware qca6694au pm8952_firmware sda429w sd210 wcn3620_firmware qfe4302_firmware sd820 wcn6850_firmware wcn3620 smb358 csr6030_firmware qca6564a pmx24 qet6110 pmi8952_firmware qcm2290_firmware qln5040 qpm8895 sdr845 qpm5670 wcn3990 sd_675 qtm527 qfe3440fc_firmware sdx24 pmi8994_firmware qdm2307_firmware msm8909w_firmware msm8996au sdm429w_firmware qfe1035 pmi8940 sm6250p rgr7640au qln1035bd pm855a sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware wcn6750 pm8956_firmware qet5100m_firmware qpm4650 mdm9205 qtm525 sa515m sa2150p_firmware wtr6955 qfe3335 sd855 sm4125_firmware qfe4305 wtr6955_firmware pm640p sd768g_firmware sdr865_firmware msm8209 qfe4465fc_firmware pm8250_firmware sd460 qca6391 sdxr1_firmware smb1351 smb1357_firmware aqt1000_firmware pm215_firmware msm8920 qpm8895_firmware pm660a qpa4340 qfe1035_firmware qcm4290 sdx50m pm640a sdr8150 sdx20 pm8916 pmd9655au msm8920_firmware smb1395_firmware sd_455 pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware smb231_firmware qdm2308 wtr4905_firmware qat3550 mdm9150 qdm5679 sd_8c wcn3680b sd835_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware msm8608_firmware qpa2625 apq8037_firmware sm7250p sd720g_firmware pm8956 sd850 pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-18072

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.47%

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-17 Sep, 2024 | 03:03

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, Snapdragon_High_Med_2016, the probe requests originated from user's phone contains the information elements which specifies the supported wifi features. This shall impact the user's privacy if someone sniffs the probe requests originated by this DUT. Hence, control the presence of which information elements is supported.

Product-qca9377_firmware qca4531_firmware mdm9640_firmware mdm9650 sd_615_firmware qca6574 sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 mdm9206 sd_652 qca6564 qca6174a sd_425_firmware qca9379_firmware qca6584au_firmware sd_450 sd_625_firmware sdm636 qca9377 qca4531 sd_845 mdm9206_firmware qca6574_firmware qca6584_firmware sd_835_firmware mdm9650_firmware qca9378_firmware sd_835 qca6584 qca6574au_firmware sd_210_firmware sd_415_firmware sd_652_firmware sd_616_firmware sd_205_firmware sd_415 sd_650_firmware sd_212 sd_427_firmware qca6584au sd_412 sdm636_firmware sd_808_firmware sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_615 sd_435 sdm630 sd_625 qca6574au sd_210 mdm9607 sd_820_firmware sd_808 qca6174a_firmware sd_212_firmware qca6564_firmware sd_412_firmware qca9378au sdm630_firmware sd_430 sd_427 sd_810 sd_435_firmware sd_410_firmware sd_205 qca9379 sd_810_firmware sdm660_firmware mdm9640 Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2024-43046

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.02% / 4.17%

7 Day CHG~0.00%

Published-07 Apr, 2025 | 10:15

Updated-07 Apr, 2025 | 16:02

Information Exposure in TZ Secure OS

There may be information disclosure during memory re-allocation in TZ Secure OS.

Product-Snapdragon

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-15850

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.09% / 25.60%

7 Day CHG~0.00%

Published-10 Jan, 2018 | 22:00

Updated-16 Sep, 2024 | 23:20

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, userspace can read values from audio codec registers.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-14875

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.12% / 32.17%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 21:00

Updated-16 Sep, 2024 | 22:03

In the handler for the ioctl command VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-23, a heap overread vulnerability exists.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-14891

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.09% / 26.56%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 21:00

Updated-17 Sep, 2024 | 03:52

In the KGSL driver function _gpuobj_map_useraddr() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-12, the contents of the stack can get leaked due to an uninitialized variable.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-15851

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.34%

7 Day CHG~0.00%

Published-06 Jul, 2018 | 19:00

Updated-17 Sep, 2024 | 02:57

Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera crash in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2017-13218

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-4.7||MEDIUM

EPSS-0.01% / 2.01%

7 Day CHG~0.00%

Published-12 Jan, 2018 | 23:00

Updated-16 Sep, 2024 | 20:21

Access to CNTVCT_EL0 in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear could be used for side channel attacks and this could lead to local information disclosure with no additional execution privileges needed in FSM9055, IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA4531, QCA9980, QCN5502, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845.