CVE-2018-13902 | ByteOS Network

Vulnerability Details :

CVE-2018-13902

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-14 Jun, 2019 | 17:02

Updated At-05 Aug, 2024 | 09:14

Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:14 Jun, 2019 | 17:02

Updated At:05 Aug, 2024 | 09:14

▼CVE Numbering Authority (CNA)

Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Versions

Affected

MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Problem Types

Type	CWE ID	Description
text	N/A	Improper Validation of Array Index in GNSS XTRA Parser

Type: text

CWE ID: N/A

Description: Improper Validation of Array Index in GNSS XTRA Parser

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:14 Jun, 2019 | 17:29

Updated At:17 Jun, 2019 | 15:51

Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P

Type: Primary

Version: 3.0

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

Qualcomm Technologies, Inc.

>>mdm9150_firmware>>-

cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9150:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9615_firmware>>-

cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9635m_firmware>>-

cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9640_firmware>>-

cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9655_firmware>>-

cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909w_firmware>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996au_firmware>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs605_firmware>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qc_215_firmware>>-

cpe:2.3:o:qualcomm:qc_215_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qc_215:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_210_firmware>>-

cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_212_firmware>>-

cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_205_firmware>>-

cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_425_firmware>>-

cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_427_firmware>>-

cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_430_firmware>>-

cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_435_firmware>>-

cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_439_firmware>>-

cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_429_firmware>>-

cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_450_firmware>>-

cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_625_firmware>>-

cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_632_firmware>>-

cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_636_firmware>>-

cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-129	Primary	nvd@nist.gov

CWE ID: CWE-129

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

221Records found

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.43% / 61.54%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:32

Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, Nicobar, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm6150 msm8909w_firmware sdm429w_firmware apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 apq8064 apq8098_firmware sdx20 sdm660 msm8920_firmware mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware apq8076 sc8180x mdm9206 sdm670_firmware sdx24_firmware apq8076_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.53%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855

Vendor-Qualcomm Technologies, Inc.

Product-sd_730 sd_855 sd_665 sd_730_firmware ipq8074 sd_675 qcs405_firmware ipq4019_firmware ipq4019 qcs405 ipq8074_firmware ipq8064 sd_665_firmware ipq8064_firmware sd_675_firmware sd_855_firmware Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.23%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MSM8996AU, Nicobar, QCA6574AU, QCN7605, QCS405, SDM630, SDM636, SDM660, SDM845, SM6150, SM7150, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-sdm636_firmware msm8996au_firmware sdm845 sdm660 sdm630 qcs405 sm7150_firmware ipq8074_firmware qca6574au sm6150 msm8996au sm7150 qcn7605_firmware ipq4019_firmware sm8150_firmware ipq8074 apq8096au sdm636 qcs405_firmware sdm660_firmware sdm630_firmware qcn7605 ipq4019 apq8096au_firmware sm6150_firmware sm8150 ipq8064 qca6574au_firmware nicobar_firmware ipq8064_firmware nicobar sdm845_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.07% / 22.15%

||

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 12:21

Improper Validation of Array Index in Bluetooth HOST

Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sa6150p_firmware qcs610 qca8337 wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sd632 msm8108 wcn3998 msm8108_firmware wcn3950 sm4125 sd720g mdm9628 sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware msm8909w apq8009w_firmware qca6420 sdx20m sd680_firmware qrb5165_firmware qrb5165m_firmware qcs6125 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 sd626_firmware sd765g qualcomm215_firmware sw5100 sd680 qca6436 wcn6851 sa6155p wcn7851_firmware msm8209_firmware mdm9250_firmware wcn3660_firmware wcd9341 qca6696_firmware sd870_firmware sd750g wcn3910_firmware sxr2150p_firmware sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 msm8208_firmware qcn7606_firmware wcn6750_firmware sd450 wcn3610 msm8608 wcn3991 qca8337_firmware wcd9380_firmware sdm429w sw5100p msm8996au_firmware sd625_firmware qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware sdx24_firmware qcn9012_firmware sd626 qca6430_firmware sd439_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 sdx55m qcc5100_firmware wcn6740_firmware sd678_firmware apq8064au_firmware ar8031_firmware wcn3680_firmware qrb5165 wcn6851_firmware sd670 sd_636_firmware qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware sa6145p sd695_firmware sdxr1 ar8031 apq8096au qcs405_firmware sa8145p sdm630_firmware qca6391_firmware wcd9370_firmware sd780g_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sd439 wcn3660 sxr2150p qcm2290 qcn7606 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware mdm9628_firmware snapdragon_4_gen_1_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware sd625 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 qcn9011_firmware sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware wcn3615 qca6595au sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware qca6584au sd778g sa6155p_firmware msm8208 qca6310 wcn7851 sd429 qcs6490 sdxr2_5g sdm630 mdm9607_firmware wcn3988_firmware qcn9074 sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 apq8064au sm6250_firmware msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qca6564a qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qcc5100 sdx24 qcn9012 sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g qca6574a wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 qrb5165m sm7315 apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware qcm4290 qcm6490_firmware sdx50m sdx20 sd480_firmware qcn9011 qca6574au sd710 sa8155p_firmware mdm9607 sd205_firmware wcd9341_firmware sdx20m_firmware qcm6125 wsa8810 mdm9150 wcn6856 wcn3680b sd835_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sdw2500 sa6150p apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.81%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:01

Improper Validation of Array Index in Camera Driver

Memory corruption while validating number of devices in Camera kernel .

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware wsa8840 sm8550p_firmware sm7675 wsa8845h_firmware wcn7881_firmware wsa8845 wcn6650_firmware wcn7881 wcd9380_firmware wcn6450 sm8635p wcn6650 sm8635p_firmware wsa8845_firmware video_collaboration_vc3_platform_firmware wcd9370 wcd9378 qcm8550_firmware sm7675_firmware snapdragon_8\+_gen_2_mobile wcn6755_firmware sm7635_firmware wsa8835 wsa8845h fastconnect_7800 wcn6450_firmware snapdragon_8_gen_1_mobile snapdragon_8_gen_2_mobile qcm8550 wcd9395_firmware wcd9378_firmware sm7635 sm7675p fastconnect_6900 sm6650_firmware wcd9375_firmware snapdragon_8_gen_1_mobile_firmware sm7675p_firmware wcd9385_firmware wsa8832 wcd9390_firmware sm8635 snapdragon_8_gen_3_mobile_firmware wcd9375 sm8635_firmware snapdragon_8_gen_3_mobile sm6650 wcn7861 wcd9380 video_collaboration_vc3_platform wsa8830 wsa8832_firmware snapdragon_8\+_gen_2_mobile_firmware wcn7861_firmware wsa8830_firmware wcn6755 fastconnect_6900_firmware qcs6490 snapdragon_8_gen_2_mobile_firmware qcs6490_firmware sm8550p wcd9390 wcd9385 wsa8840_firmware wcd9395 wsa8835_firmware wcd9370_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.32%

||

7 Day CHG~0.00%

Published-19 Oct, 2022 | 00:00

Updated-09 May, 2025 | 15:15

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3660 wcd9340_firmware sd210_firmware mdm9250 qcs6125_firmware sw5100p qcn6024 sd439 wcd9385_firmware wcn3988_firmware mdm9615 qca6431_firmware mdm9215 qcs610 mdm9230_firmware qam8295p_firmware qca6174 qcs6125 sd210 msm8976sg_firmware mdm8615m mdm9206_firmware apq8096au_firmware sd460 sd_8_gen1_5g_firmware apq8052 wcd9385 wcn7850_firmware sdx55m_firmware mdm8215m qrb5165n_firmware sd845 wcd9340 mdm9615m qcn7606_firmware mdm9630_firmware sd730_firmware mdm9150_firmware apq8056 wcn7850 sdx12_firmware mdm9250_firmware sw5100p_firmware sdx55m sdx65_firmware apq8009w_firmware wcn6851_firmware sa415m wcd9326 sdm429w mdm9628 sa8155 qca6574_firmware sd678_firmware qca6595au mdm8215m_firmware wcn3680b sa8150p wcn3680_firmware wcn3660b qca8337_firmware wcd9330_firmware wcn7851_firmware msm8208_firmware wsa8835 wcn3990_firmware ar8035_firmware apq8076 csra6640 sdm429w_firmware qca6175a qca6320_firmware sa8195p sa6150p qca9367 sm4125 sd865_5g qca6421_firmware qca6574a sd429_firmware qca6310_firmware sd_675 wcn3990 sdxr2_5g wsa8810_firmware sd670 msm8952 wcd9335_firmware wcn3998_firmware wsa8815 qca6436_firmware sa6155p sa8155p sdx55 qca6335 sdx12 mdm9640 qca6554a_firmware qca6564a sdx65 msm8608 qcn7605 qca6564a_firmware wcd9306 wcn3660b_firmware wcd9360 qca6391_firmware sa4155p qca6696_firmware wcn6855 sd710 mdm8215_firmware qca6554a qca4020_firmware csrb31024_firmware msm8956 sa4150p sd662_firmware csra6640_firmware sd820 sd845_firmware sdx24 sd660 qca6174a sd450 sdxr1_firmware msm8976sg qet4101 qsw8573 sd205 sm8475 mdm9615m_firmware msm8909w_firmware qca8081 aqt1000_firmware msm8208 wcd9371_firmware msm8108_firmware qcs605 apq8009w qca9377 wcn3620 wcn7851 qcn6024_firmware sa8155_firmware mdm8215 qca9379_firmware wcn6740 qca6431 sd730 msm8909w sa8145p_firmware sdx24_firmware qca6174_firmware wcn3910_firmware wcn3910 wcd9380_firmware wcn6740_firmware msm8996au_firmware apq8017_firmware wcd9370 apq8096au sd678 qca6574au sa6145p qcc5100_firmware wsa8815_firmware wcn3950_firmware sdxr2_5g_firmware sd870 sw5100 qca9377_firmware qca8081_firmware mdm9310_firmware msm8953_firmware qca6426_firmware sa8150p_firmware sd870_firmware qcs405_firmware wcn3950 mdm9607 wcd9380 mdm9150 qcs610_firmware qca9379 qcn9024_firmware wcd9326_firmware qcm6125_firmware qcn7606 sm4125_firmware apq8053_firmware qrb5165_firmware wcn3615 sd662 sd675 qca6420_firmware qrb5165 sa515m_firmware qcm6125 sd820_firmware wcd9341 msm8917_firmware wcd9306_firmware mdm9650_firmware qca6426 qca6335_firmware wsa8835_firmware sd821_firmware apq8056_firmware qca6390 sdw2500 sd205_firmware ar6003 wcn3980 qca6696 wcn6856_firmware qcx315_firmware wcd9360_firmware mdm9650 qcx315 sdx20m sa6150p_firmware qcs605_firmware wcn3620_firmware csrb31024 qcc5100 sa8295p sdxr1 mdm9615_firmware sa4155p_firmware qca6420 qca6174a_firmware qca8337 wcn3999 apq8017 sdw2500_firmware sd_675_firmware qca6430 qualcomm215_firmware qet4101_firmware wsa8810 sd675_firmware sd865_5g_firmware wcd9341_firmware wcn6850 ar8031 wcn3660_firmware mdm9628_firmware msm8976_firmware mdm9630 qrb5165m_firmware qca6574a_firmware wcn3999_firmware sdx20_firmware qca6595au_firmware sd460_firmware sd439_firmware sda429w qca6175a_firmware apq8064au sa8295p_firmware sw5100_firmware wcn3610 msm8953 sd632 qca6390_firmware qca6564au_firmware qca6574 wcn3610_firmware wcn3998 wcd9335 mdm8615m_firmware qca6430_firmware wcd9330 sa415m_firmware qcs405 qca6436 aqt1000 qca6421 qcn7605_firmware msm8209 apq8076_firmware sa515m sd855_firmware sdx50m sd855 wcn6856 qcn9024 qcs410_firmware qam8295p mdm9206 qca6584 wcn6855_firmware msm8108 qrb5165n sd429 mdm9607_firmware msm8956_firmware sa4150p_firmware apq8009 sd835_firmware wcd9371 msm8917 mdm9215_firmware qcs410 qca4020 qrb5165m apq8009_firmware sd632_firmware qca6391 qca6595 csra6620 sd835 sd710_firmware wcn3615_firmware sd670_firmware sa6155p_firmware qca6584au qca6584au_firmware msm8209_firmware sa8195p_firmware qca6574au_firmware wcd9370_firmware sa8155p_firmware mdm9330 wcn3680 wcd9375 qca6310 sdx20m_firmware ar6003_firmware apq8064au_firmware apq8053 apq8052_firmware qsw8573_firmware ar8035 sda429w_firmware sd821 wsa8830 mdm9310 msm8952_firmware qca6564 msm8996au wcd9375_firmware wcn3980_firmware msm8608_firmware qca6320 qca6595_firmware wcn6850_firmware sd660_firmware sdx20 wcn6851 qca6564_firmware msm8976 mdm9330_firmware qca9367_firmware ar8031_firmware mdm9230 wcn3988 wsa8830_firmware qca6564au wcn3680b_firmware sdx55_firmware csra6620_firmware qualcomm215 sa8145p qca6584_firmware sd450_firmware sdx50m_firmware sa6145p_firmware mdm9640_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

||

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 05:47

Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in Snapdragon Mobile, Snapdragon Wear version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 835, SDA660.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.87%

||

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-13 Jan, 2025 | 21:51

Improper Validation of Array Index in DSP Services

Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8840_firmware fastconnect_7800 wsa8845h wsa8845h_firmware fastconnect_7800_firmware wcd9380_firmware wcd9385_firmware fastconnect_6900_firmware wcd9380 wcd9385 fastconnect_6900 sc8380xp_firmware sc8380xp wsa8840 wsa8845_firmware wsa8845 Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.59%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:11

Improper Validation of Array Index in Camera Driver

Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.48%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 19:30

Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur in SurfaceFlinger.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 5.69%

||

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware wcd9340_firmware qca6595au_firmware qualcomm215_firmware wsa8835 mdm9150_firmware sdx55m sd855_firmware wcn3998 wcn6850_firmware sdx55 wsa8810_firmware qca8337_firmware wsa8815_firmware sa8150p qca6696 wcn3610_firmware wcn7850 qca6436 qca6426_firmware wcn3660b qca6574au wcn7850_firmware wcn3660b_firmware sa6150p qcs410_firmware sd205_firmware sa8155p wsa8810 sa6145p_firmware sd210 wcd9341_firmware wsa8830 sw5100p_firmware wcn6856 wsa8815 qca6390 sda429w_firmware wcn3680b aqt1000_firmware sa6155p wsa8835_firmware sa8150p_firmware qca6430 sa8145p_firmware sw5100 sd855 wcn7851_firmware qca6391 wcn3998_firmware wcd9340 wcn6850 sa8145p wcn6851 sdx55_firmware wcn3950 wcd9370_firmware sdxr2_5g_firmware qca6420_firmware sa8195p sda429w qcc5100_firmware sd210_firmware wsa8830_firmware qca8337 sd_8_gen1_5g_firmware wcn3680b_firmware sdxr2_5g sd865_5g_firmware wcd9341 wcn3980_firmware qca6574au_firmware wcn6851_firmware qcs610 qcs610_firmware qualcomm215 sa6155p_firmware qca6391_firmware qcn9074_firmware qcn9074 sd205 sa8155p_firmware qcc5100 wcd9380 sa6145p wcn3610 sw5100_firmware qca6430_firmware sa6150p_firmware qca6696_firmware sd865_5g wcn6856_firmware sd870 qca6426 sdx55m_firmware aqt1000 sm8475 wcn3950_firmware wcn3988 mdm9150 qca6390_firmware wcn6855_firmware qca6420 wcn6855 wcn3988_firmware wcn7851 qcs8155_firmware sd870_firmware qcs8155 sw5100p qca6436_firmware sa8195p_firmware qca6595au wcd9370 qcs410 wcn3980 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.30% / 52.57%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 19:25

Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.03%

||

7 Day CHG~0.00%

Published-12 Jun, 2018 | 20:00

Updated-16 Sep, 2024 | 19:15

improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds access in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.02%

||

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto

Vendor-Qualcomm Technologies, Inc.

Product-sa8540p sa9000p sa8540p_firmware sa9000p_firmware Snapdragon Auto

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.18%

||

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 09:14

Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware mdm9640_firmware snapdragon_internet_of_things sd_820a msm8996au_firmware sd_439 snapdragon_mobile_firmware sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_650 sd_845_firmware sd_820a_firmware qcs605_firmware mdm9206 sd_652 snapdragon_industrial_internet_of_things_firmware sd_425_firmware snapdragon_auto_firmware snapdragon_mobile sdx24_firmware sd_625_firmware snapdragon_voice_\&_music_firmware snapdragon_consumer_internet_of_things sd_845 mdm9206_firmware qcs605 snapdragon_auto snapdragon_voice_\&_music sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware sd_652_firmware msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_712 snapdragon_consumer_internet_of_things_firmware sd_855 sdx20 sd_616 sd_425 sdm660 sdm630 mdm9607_firmware sd_615 sd_710_firmware sd_625 sd_210 mdm9607 sd_636_firmware sd_439_firmware mdm9150 sd_429_firmware sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware snapdragon_internet_of_things_firmware sd_670 sdx20_firmware sd_710 sd_205 sdm660_firmware snapdragon_industrial_internet_of_things mdm9640 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.04%

||

7 Day CHG~0.00%

Published-28 Nov, 2018 | 15:00

Updated-05 Aug, 2024 | 08:24

When a malformed command is sent to the device programmer, an out-of-bounds access can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 600, SD 820, SD 820A, SD 835, SDA660, SDX20, SDX24.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 17.30%

||

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 08:24

Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in versions MSM8996AU, QCS605, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 sd_632 sd_820a sd_412 sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_425 sd_429 sdm660 sd_430_firmware sd_710_firmware sd_435 sd_636 sdm439 sdm630 sd_625 snapdragon_high_med_2016_firmware sd_820_firmware msm8996au sd_636_firmware sd_820 sd_450_firmware sd_845_firmware sd_410 sd_439_firmware sd_820a_firmware sd_429_firmware qcs605_firmware sd_675_firmware sd_425_firmware snapdragon_high_med_2016 sd_850_firmware sd_625_firmware sd_450 sdm439_firmware sd_412_firmware sd_712_firmware sdm630_firmware sd_8cx_firmware sda660_firmware sd_845 sd_8cx sd_427 qcs605 sd_430 sd_670 sd_435_firmware sd_632_firmware sd_835_firmware sd_710 sd_410_firmware sd_835 sda660 sxr1130_firmware sxr1130 sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.01% / 2.08%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from caller function used as an array index for WMA interfaces can lead to OOB write in WLAN HOST.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.01% / 2.08%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in policy mgr unit test if mode parameter in wlan function is given an out of bound value it can cause an out of bound access while accessing the PCL table.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.8||HIGH

EPSS-0.44% / 62.19%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on the length of array while accessing can lead to an out of bound read in WLAN HOST function.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.01%

||

7 Day CHG~0.00%

Published-11 Feb, 2019 | 15:00

Updated-05 Aug, 2024 | 08:24

While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Voice & Music in versions MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware mdm9640 sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_652_firmware sd_205_firmware sd_650_firmware sd_212 sd_427_firmware sd_712 sd_855 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_210 mdm9607 sd_636_firmware sd_820_firmware sd_439_firmware sd_429_firmware sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.49%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to OOB access in WLAN HOST.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.19%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:17

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper validation of array index in WMA roam synchronization handler can lead to OOB write.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.04%

||

7 Day CHG~0.00%

Published-20 Sep, 2018 | 13:00

Updated-05 Aug, 2024 | 08:01

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDX20, Snapdragon_High_Med_2016, when sending an malformed XML data to deviceprogrammer/firehose it may do an out of bounds buffer write allowing a region of memory to be filled with 0x20.

Vendor-Qualcomm Technologies, Inc.

Product-mdm9640_firmware sdm632_firmware sd430 msm8996au_firmware sd625_firmware sdm632 sd650_firmware sd600 sdm439 mdm9650 sdm429 sd616_firmware sd616 sd820a_firmware snapdragon_high_med_2016_firmware msm8996au sd652 sd412 sd427_firmware sd625 mdm9206 sd435_firmware sd600_firmware sdm636 sd427 mdm9615 mdm9206_firmware sd430_firmware sd450_firmware sd615 mdm9640 sdm429_firmware mdm9650_firmware sda660 sd835 sd820a sd850_firmware sd617 sdm636_firmware sdx20 sdm660 sdm630 mdm9607_firmware mdm9655_firmware sd425_firmware sd205 sd617_firmware mdm9607 sd205_firmware sd410_firmware sd652_firmware sd615_firmware sd425 sd210_firmware sd435 sd212_firmware sd835_firmware snapdragon_high_med_2016 mdm9655 sdm439_firmware sd412_firmware sd212 sdm630_firmware sd820_firmware sda660_firmware sd415 sd845_firmware sd845 sd210 mdm9615_firmware sd820 sdx20_firmware sd415_firmware sd650 sd450 sdm660_firmware sd850 sd410 Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

||

7 Day CHG~0.00%

Published-18 Jan, 2019 | 22:00

Updated-05 Aug, 2024 | 08:01

Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside of the intended region in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDX24, SXR1130

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.96%

||

7 Day CHG~0.00%

Published-20 Sep, 2018 | 13:00

Updated-05 Aug, 2024 | 08:01

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, a potential buffer overflow exists when parsing TFTP options.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.19%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when WLAN FW has not filled the vdev id correctly in stats events then WLAN host driver tries to access interface array without proper bound check which can lead to invalid memory access and as a side effect kernel panic or page fault.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.96%

||

7 Day CHG~0.00%

Published-20 Sep, 2018 | 13:00

Updated-05 Aug, 2024 | 08:01

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, a potential buffer overflow exists when parsing TFTP options.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.8||HIGH

EPSS-0.07% / 23.10%

||

7 Day CHG~0.00%

Published-06 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:01

In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio_id is received from the FW and is used to access the buffer to copy the radio stats received for each radio from FW. If the radio_id received from the FW is greater than or equal to maximum, an OOB write will occur. On supported Google Pixel and Nexus devices, this has been addressed in security patch level 2018-08-05.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 8.70%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-04 Aug, 2024 | 00:33

An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qcm2290_firmware wcn3991_firmware wcn3991 wsa8830 wcd9380_firmware qcs2290_firmware sd865_5g sdx55m_firmware wsa8835 qcs4290 wcn3950_firmware wcd9380 sd765g_firmware qcs2290 qca6390_firmware sd690_5g wcd9370 sd690_5g_firmware qca6426 qrb5165n_firmware wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware wcn3615_firmware wsa8815 wcn6850 sd662 wcn3910 sd460_firmware sd765 qca6426_firmware wcn3680b_firmware sd768g_firmware wcd9375_firmware wcn3615 wcn3998_firmware qrb5165m sm7250p_firmware sd460 qca6391 sdx55m apq8053_firmware qca6436_firmware qrb5165n sd680_firmware msm8953 qcm4290 qrb5165_firmware qrb5165m_firmware sdxr2_5g qrb5165 wcn6851_firmware sd662_firmware wcn3988_firmware wsa8810_firmware sd765g qcm4290_firmware sd765_firmware sd870 qca6436 sd680 wcd9326 wcn6851 wsa8810 wcn3680b qcs4290_firmware wcd9385 sd768g sd750g sd870_firmware qca6391_firmware qca6390 wcd9375 sd750g_firmware wcn3910_firmware wcd9370_firmware msm8953_firmware apq8053 wsa8830_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7250p qcm2290 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.15% / 35.56%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:50

Updated-04 Aug, 2024 | 00:33

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware wsa8830 mdm9640_firmware qcs2290_firmware mdm9628_firmware mdm9650 qcs4290 wcn3950_firmware mdm9250 qcs2290 apq8009_firmware msm8917 wcd9370 sd632 wcn3990_firmware msm8108 qca9377 wcn3998 sdw2500_firmware msm8108_firmware wcn3950 sm4125 mdm9628 wcd9326_firmware mdm9206_firmware wcn3615_firmware wcn3660b sd450_firmware sd662 sd460_firmware apq8037 qca6320_firmware qca6584 qca6574au_firmware wcn3680b_firmware wcd9375_firmware sdx12_firmware wcn3615 wcn3998_firmware msm8909w apq8009w_firmware wcn3610_firmware apq8053_firmware qca6564au_firmware sd680_firmware qca6310 msm8208 qca9367_firmware sd429 qca9367 sd662_firmware mdm9607_firmware sd821 wcn3988_firmware sd429_firmware wcd9340 apq8017_firmware wsa8810_firmware qualcomm215_firmware sw5100 sd680 wcd9326 wcd9335 msm8937 msm8209_firmware qca6174a_firmware mdm9250_firmware qcs4290_firmware wcd9341 wcn3660_firmware wcn3910_firmware wcd9375 msm8953_firmware wsa8830_firmware msm8917_firmware sd210 wcn3620_firmware sd820 wcn3988 wsa8815_firmware wsa8835_firmware wcn3620 apq8017 msm8208_firmware qca6564a sd450 wcn3610 msm8608 qcm2290_firmware mdm9640 wcn3990 sdm429w msm8996au_firmware sw5100p wcd9330 qca6564au msm8940_firmware msm8909w_firmware qca6574 msm8996au sd632_firmware sdm429w_firmware wsa8835 qualcomm215 qca6574a mdm9206 qca9379_firmware qca6174a qca6310_firmware wcd9335_firmware wcn3980 sd439_firmware qca6574_firmware wcd9340_firmware sm4125_firmware wsa8815 wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd835 msm8209 wcn3980_firmware apq8009 sd460 wcd9330_firmware msm8920 msm8953 sd821_firmware qcm4290 wcn3680_firmware msm8920_firmware qca6574au mdm9607 qca6564a_firmware apq8009w wcd9341_firmware qcm4290_firmware wsa8810 sw5100p_firmware sd210_firmware mdm9150 wcn3680b sd835_firmware apq8096au sd820_firmware msm8608_firmware wcd9370_firmware sdw2500 msm8940 apq8053 apq8096au_firmware apq8037_firmware sd439 sdx12 sw5100_firmware wcn3660 qca9379 qcm2290 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.05% / 15.45%

||

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 21:20

A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, SD 850.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850_firmware sd_845 sd_850 sd_845_firmware Snapdragon Mobile

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.05% / 13.72%

||

7 Day CHG~0.00%

Published-11 Feb, 2022 | 10:40

Updated-03 Aug, 2024 | 22:32

Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sa6150p_firmware qcs610 ipq4028_firmware qcn5550 qca8337 ar9380 ipq8173_firmware qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qcn5064 csra6620_firmware qcs605_firmware csra6640_firmware wcn3998 wcn3950 qcn6024_firmware ipq8076a mdm9206_firmware wcn3660b sd460_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6438_firmware qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware wcn3999 qrb5165_firmware ipq5028 qca7500 ipq8072_firmware ipq4029_firmware qrb5165m_firmware sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 wcd9340 qcn6132 sd765g qualcomm215_firmware qca6436 wcn6851 sa6155p qcs603_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca6696_firmware sd870_firmware qca9988_firmware qcn5154_firmware sa8150p qca9992_firmware sd865_5g_firmware wcn3988 qca6438 sa8195p_firmware qcn5121 qcn5022_firmware qca9898 ipq4028 wcn3610 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware sda429w_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware wcd9330 ipq8076a_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 qcn5164 qca9558 qca6574 csr8811_firmware wcd9380 qualcomm215 qcn5054_firmware qcs410 qcn5024 ipq4019_firmware qca8072_firmware qca9985 qcn9012_firmware wcd9335_firmware qcn5052_firmware wcn3980 ipq6018_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware qca9984 ipq6028 ipq8064 qcn9024 pmp8074 wcn3980_firmware qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware qcn5064_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 ipq8070 qcn5502 qca9994 qca9980 qcn9024_firmware ipq8174_firmware qca6564a_firmware qca9880 sd870 qcn5121_firmware sd210_firmware qcs610_firmware sa6145p ipq6018 qca9886_firmware ar8031 apq8096au qcs405_firmware sa8145p qca6391_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware sa8155p csra6640 qca9531_firmware ar8035_firmware qcn5024_firmware wcn3991_firmware mdm9150_firmware qcn9070 sa8145p_firmware qca9563_firmware csra6620 qcn9072 qca9880_firmware qca9992 sd765g_firmware qca6390_firmware ipq6000 wcd9370 ipq8072 qcn5152_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 ipq5018 wcd9385_firmware sdxr2_5g_firmware qca9563 ipq8074a sd662 qcn5124_firmware sa8155 qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware sa6155p_firmware sm6225 ipq8174 qca9990 sdxr2_5g qcn5052 qca9367 wcn3988_firmware qcn9074 sd205 sa6145p_firmware sa8195p wsa8810_firmware sd765_firmware wcd9335 qca8081 qcn6023 ipq8071a ipq8071a_firmware wcd9385 qca6390 qca9898_firmware wcd9375 ar8035 csr8811 ipq4019 qcn9100_firmware sda429w sd210 wcn3620_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wcn6850_firmware wcn3620 qca6564a qca9988 qca8072 wcn3990 qcn9000 sd865_5g ar9380_firmware qcn9012 qca9558_firmware qcn6122_firmware ipq8065_firmware sd665_firmware qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware mdm9206 qca9889 qcn6132_firmware qca9888 ipq8074 qca9994_firmware ipq8070a_firmware ipq8076_firmware qca6574_firmware qca9886 qcn5502_firmware sd665 ipq8076 sd765 qca6574a_firmware qcn5021 qcn5152 sd768g_firmware qrb5165m sd460 qca6391 ipq6005 qcn9100 qcn9070_firmware ipq6028_firmware ipq8072a_firmware sm6225_firmware qca9531 ipq8074_firmware qca6574au qca9889_firmware sa8155p_firmware qcn5122 sd205_firmware wcd9341_firmware wsa8810 mdm9150 qcn5022 qca6564_firmware sd768g ipq6010_firmware qca6696 sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9072_firmware sm7250p ipq6000_firmware ipq8071_firmware qcn9074_firmware qcs410_firmware ipq4029 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.01% / 1.60%

||

7 Day CHG~0.00%

Published-23 Feb, 2018 | 23:00

Updated-16 Sep, 2024 | 20:02

In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is received from firmware and used to access an array without validation.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.81%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-11 Aug, 2025 | 15:06

Improper Validation of Array Index in Audio

Memory corruption may occur while validating ports and channels in Audio driver.

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w_firmware sw5100p qcm8550_firmware sd865_5g qcs410_firmware wcn6650 sa6150p_firmware sm8735 qca6595 qcs610_firmware snapdragon_8\+_gen_1 wcd9335 wcd9370 qca8081_firmware snapdragon_730g snapdragon_429_firmware qca6696 qam8620p_firmware wcn7880_firmware wcd9340_firmware sa8530p wcd9341_firmware sxr2330p_firmware wcd9395_firmware wcn7881_firmware qcn6024 wcn7750 wcn6450 qcc710_firmware qca6426 snapdragon_auto_4g wcn6740_firmware snapdragon_720g_firmware fastconnect_6700 snapdragon_695_5g sa4150p snapdragon_888_5g wsa8832_firmware qca8337 qca6426_firmware wcd9395 snapdragon_4_gen_2_firmware qca6574au_firmware sm6370 qca6564_firmware qam8295p snapdragon_x12_lte_firmware wcd9341 qca6574au wcd9390 sa8620p_firmware wsa8810_firmware sd730_firmware wsa8845h_firmware snapdragon_429 csra6640 sa9000p_firmware snapdragon_690_5g snapdragon_778g\+_5g_firmware snapdragon_865\+_5g srv1h sm8650q_firmware snapdragon_765_5g wcn3660b_firmware sd730 snapdragon_8\+_gen_2 fastconnect_6800_firmware qcs5430 wcn7860 snapdragon_865\+_5g_firmware qcn6024_firmware snapdragon_x65_5g qcm5430 qcm5430_firmware video_collaboration_vc1_platform_firmware snapdragon_888\+_5g_firmware sa4155p sa8770p qcm6125_firmware c-v2x_9150 ssg2115p qcc710 snapdragon_x50_5g snapdragon_xr2_5g_firmware sa8540p snapdragon_730 qsm8250_firmware snapdragon_765g_5g_firmware 315_5g_iot_modem_firmware snapdragon_660_firmware snapdragon_4_gen_2 fastconnect_6900 robotics_rb2 snapdragon_w5\+_gen_1_wearable_firmware snapdragon_8_gen_2_firmware snapdragon_x72_5g video_collaboration_vc1_platform qep8111 sm8635 sa7255p qfw7114 wcd9385_firmware 315_5g_iot_modem qam8255p_firmware snapdragon_778g_5g snapdragon_678_firmware sa8155_firmware wcd9360 sdx61 qcs4490 snapdragon_732g_firmware snapdragon_662_firmware snapdragon_x50_5g_firmware wsa8845 sa6155p qcm6125 qca6564au_firmware wsa8810 qam8650p video_collaboration_vc5_platform_firmware snapdragon_855_firmware sa9000p srv1h_firmware qsm8250 snapdragon_678 qca6595au sxr2250p_firmware sm7315_firmware snapdragon_865_5g_firmware wcd9326_firmware sa6155p_firmware snapdragon_730g_firmware snapdragon_ar1_gen_1 wsa8840 srv1m_firmware qcs8550_firmware qfw7124_firmware qca6436_firmware sm8750p snapdragon_x35_5g_firmware qcn9012 wcd9371_firmware qcs4490_firmware wcn3910_firmware snapdragon_7c\+_gen_3_compute_firmware snapdragon_675_firmware sm4125_firmware sm8635p snapdragon_680_4g qmp1000 qca6420 wcn3910 wcd9370_firmware qca9367 robotics_rb2_firmware snapdragon_8_gen_2 snapdragon_480\+_5g_firmware snapdragon_765_5g_firmware wcn3660b qca6574a sa7255p_firmware wcn3620_firmware qca6174a snapdragon_695_5g_firmware sa8195p snapdragon_750g_5g_firmware wcd9340 qcs8250_firmware qcm2290 talynplus qcm6490 215 sa8540p_firmware sm8550p_firmware snapdragon_x55_5g_firmware qcm8550 sxr2250p wcn3988 sm6370_firmware qcn9024 sdm429w sa8775p qca6574 sxr2230p_firmware sd675_firmware qca6430_firmware qcn9011 sa8775p_firmware snapdragon_439_firmware qamsrv1h smart_audio_400 qcn9024_firmware wsa8845h wcd9326 sa6150p sm8650q qcm2290_firmware qcs410 sa8155p_firmware qca6564a sa8155p snapdragon_855\+wsa8830 snapdragon_870_5g_firmware sm8550p snapdragon_x65_5g_firmware sa6145p qcn9074_firmware sm7675_firmware sa8255p_firmware snapdragon_888\+_5g snapdragon_x75_5g snapdragon_720g ar8035 sm7635_firmware qamsrv1m_firmware qca6564 wcn7750_firmware qrb5165m_firmware sa8650p_firmware wcn3620 wcn6450_firmware sa6155 qcm4325 snapdragon_860 snapdragon_x72_5g_firmware srv1l_firmware qcn6224 snapdragon_782g qca6698aq wcn3950_firmware ssg2125p_firmware sm7635 qrb5165n sa7775p_firmware sa8530p_firmware sm6250 fastconnect_6200 wcn3680b sm7325p_firmware sa8145p_firmware wcd9360_firmware wcd9378 sm8635p_firmware sa8150p_firmware snapdragon_768g_5g fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 snapdragon_778g_5g_firmware snapdragon_780g_5g qcs6490 qcs8250 snapdragon_778g\+_5g fastconnect_6200_firmware ar8031_firmware wsa8830_firmware qcn6224_firmware qca6678aq_firmware wsa8845_firmware sd660_firmware wsa8832 sdx61_firmware wcd9378_firmware srv1l sxr2130_firmware sm7675p srv1m qca6678aq ar8035_firmware wcn7860_firmware qrb5165m snapdragon_680_4g_firmware sa4150p_firmware sd888_firmware snapdragon_439 qca6564au qcs6125_firmware sm4635 snapdragon_460 qcn9074 wsa8815_firmware snapdragon_865_5g sa8195p_firmware qca8337_firmware snapdragon_auto_4g_firmware qcm4290 snapdragon_480_5g_firmware snapdragon_4_gen_1_firmware snapdragon_x12_lte snapdragon_685_4g ar8031 qca9377_firmware snapdragon_x62_5g snapdragon_xr2\+_gen_1 qcm6490_firmware sg8275p_firmware sm7250p_firmware wcn3680_firmware sm4635_firmware sa2150p_firmware sm4125 qcm4490_firmware vision_intelligence_400_firmware wcn3950 qcs6125 flight_rb5_5g snapdragon_690_5g_firmware sm8750 qca6797aq_firmware snapdragon_7c\+_gen_3_compute talynplus_firmware smart_audio_400_firmware snapdragon_460_firmware snapdragon_855\+_firmware sa8295p_firmware sd_675_firmware sa4155p_firmware snapdragon_auto_5g_firmware sm7250p sm6250_firmware sa8155 snapdragon_768g_5g_firmware qca6584au sd888 qcn6274_firmware wcn6755_firmware qcn9011_firmware sa2150p sw5100_firmware wcn6740 wcn6650_firmware snapdragon_732g fastconnect_6800 qfw7114_firmware snapdragon_662 qcs7230 qca6595_firmware fastconnect_7800_firmware wcd9371 sm8635_firmware fastconnect_6900_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p sa6155_firmware qmp1000_firmware snapdragon_xr2_5g wcn7880 sa8150p sxr2330p wcn6755 snapdragon_888_5g_firmware 215_firmware snapdragon_765g_5g snapdragon_8\+_gen_2_firmware sxr1230p wcn7881 sm6650 sw5100 video_collaboration_vc3_platform aqt1000 qcm2150_firmware c-v2x_9150_firmware qca6688aq qam8295p_firmware sd855 snapdragon_8_gen_1_firmware wcn3990_firmware sm7315 snapdragon_750g_5g qca6698aq_firmware qcs2290 qca6564a_firmware wcd9385 qcs2290_firmware snapdragon_xr2\+_gen_1_firmware wcn3615 qca9367_firmware wcn3680 snapdragon_8_gen_1 sa8255p qcs7230_firmware qcs4290 sxr1230p_firmware wcd9390_firmware snapdragon_x62_5g_firmware snapdragon_8_gen_3 qep8111_firmware qca6430 sg8275p snapdragon_782g_firmware snapdragon_855 sdx55_firmware snapdragon_x55_5g sm8750_firmware wcn3615_firmware flight_rb5_5g_firmware ssg2125p sxr2130 snapdragon_4_gen_1 qcm4490 snapdragon_870_5g csra6640_firmware qamsrv1m robotics_rb5 snapdragon_480\+_5g sm7325p snapdragon_685_4g_firmware wcn7861 qca6174a_firmware qam8650p_firmware video_collaboration_vc5_platform wcn7861_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sm6650_firmware snapdragon_480_5g qam8620p wcd9335_firmware qrb5165n_firmware qca6436 wcn3980_firmware sd855_firmware wsa8835 wsa8840_firmware qca6391_firmware qca6584au_firmware qcn6274 qfw7124 qca6595au_firmware sw5100p_firmware qca6696_firmware qcs4290_firmware wcd9380_firmware qca6574_firmware csra6620 qca8081 sd660 mdm9628 wsa8815 sg4150p qam8775p qca9377 snapdragon_ar2_gen_1_firmware snapdragon_auto_5g sd_8_gen1_5g qca6797aq snapdragon_730_firmware mdm9628_firmware snapdragon_860_firmware qcm4325_firmware snapdragon_x35_5g sa8620p snapdragon_660 qca6574a_firmware sdx55 qcm4290_firmware snapdragon_8\+_gen_1_firmware sd675 wcd9375_firmware snapdragon_8_gen_3_firmware sa7775p qca6391 snapdragon_ar1_gen_1_firmware snapdragon_x75_5g_firmware sd_8_gen1_5g_firmware qcn9012_firmware qcs5430_firmware sg4150p_firmware snapdragon_780g_5g_firmware sa8770p_firmware csra6620_firmware sa8295p qcs8550 snapdragon_675 sm8735_firmware fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware sm8750p_firmware wcd9375 qca6688aq_firmware snapdragon_ar2_gen_1 wcn3988_firmware qamsrv1h_firmware sm7675 sa8145p sd_675 vision_intelligence_400 wsa8835_firmware ssg2115p_firmware wcn3980 sm7675p_firmware qcm2150 wcn3680b_firmware snapdragon_w5\+_gen_1_wearable qcs610 Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.01% / 1.66%

||

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:48

Updated-11 Aug, 2025 | 15:06

Improper Validation of Array Index in Automotive Autonomy

Memory corruption while operating the mailbox in Automotive.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware qcm8550_firmware robotics_rb3 sa6150p_firmware sd865_5g qca6595 sm8735 wcd9370 qca8081_firmware snapdragon_670_mobile qca6696 qam8620p_firmware wcn7880_firmware wcd9340_firmware sa8530p wcd9341_firmware sxr2330p_firmware wcd9395_firmware wcn7881_firmware wcn7750 qcc710_firmware qca6426 fastconnect_6700 snapdragon_x50_5g_modem-rf_firmware wsa8832_firmware qca8337 qdu1110 qca6426_firmware wcd9395 sc8180xp-aaab qca6574au_firmware snapdragon_x72_5g_modem-rf qam8295p wcd9341 qca6574au wcd9390 snapdragon_888\+_5g_mobile_firmware sa8620p_firmware wsa8810_firmware wsa8845h_firmware sc8180xp-acaf sa9000p_firmware srv1h snapdragon_850_mobile_compute qcs9100 sdx80m fastconnect_6800_firmware qcs5430 wcn7860 qcm5430 qcm5430_firmware sa8770p snapdragon_678_mobile_firmware ssg2115p qcc710 snapdragon_x32_5g_modem-rf_firmware snapdragon_xr2_5g_firmware sa8540p qsm8350_firmware fastconnect_6900 qru1032_firmware qep8111 sa7255p qfw7114 wcd9385_firmware qca6421 qca6310 qam8255p_firmware sa8155_firmware snapdragon_x65_5g_modem-rf qca6335 wsa8845 sa6155p qca6421_firmware sc8180x-ad qca6564au_firmware wsa8810 qam8650p qdu1000_firmware sa9000p srv1h_firmware snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile sxr2250p_firmware qdu1010 wcd9326_firmware sa6155p_firmware snapdragon_845_mobile_firmware wsa8840 snapdragon_ar1_gen_1 srv1m_firmware snapdragon_x35_5g_modem-rf_firmware qcs8550_firmware qca6698au qdu1210_firmware snapdragon_8_gen_2_mobile_firmware snapdragon_x55_5g_modem-rf qfw7124_firmware qca6436_firmware sm8750p qcn9012 snapdragon_x55_5g_modem-rf_firmware snapdragon_x62_5g_modem-rf_firmware qmp1000 snapdragon_8_gen_2_mobile qca6420 wcd9370_firmware qdu1110_firmware qdu1000 sa7255p_firmware snapdragon_x72_5g_modem-rf_firmware qca6574a snapdragon_8\+_gen_2_mobile qca6174a sa8195p wcd9340 qdu1210 snapdragon_auto_5g_modem-rf_gen_2 qca6335_firmware qcm6490 sa8540p_firmware sxr2250p sm8550p_firmware qcm8550 wcn3988 snapdragon_765_5g_mobile_firmware qcn9274 vision_intelligence_300_firmware sa8775p qca6574 sxr2230p_firmware sd675_firmware snapdragon_855_mobile_firmware qca6698au_firmware qca6430_firmware qcn9011 sa8775p_firmware qamsrv1h sdx57m wsa8845h wcd9326 sa6150p sa8155p_firmware qca6564a sa8155p snapdragon_765g_5g_mobile_firmware wsa8830 sm8550p sa6145p snapdragon_768g_5g_mobile_firmware sa8255p_firmware ar8035 qamsrv1m_firmware wcn7750_firmware sa8650p_firmware sa6155 srv1l_firmware qcs9100_firmware snapdragon_865\+_5g_mobile_firmware qcn6224 qcs615 ssg2125p_firmware wcn3950_firmware qca6698aq sa7775p_firmware sa8530p_firmware fastconnect_6200 sd670 sa8145p_firmware sc8180x-acaf_firmware wcd9378 qdx1011 sa8150p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 robotics_rb3_firmware snapdragon_x75_5g_modem-rf_firmware sd670_firmware snapdragon_8_gen_3_mobile snapdragon_855_mobile qcs6490 sc8180xp-acaf_firmware fastconnect_6200_firmware wsa8830_firmware qcn6224_firmware qca6431 qca6678aq_firmware wsa8845_firmware wsa8832 wcd9378_firmware srv1l sdx57m_firmware sxr2130_firmware srv1m qca6678aq snapdragon_860_mobile_firmware snapdragon_x35_5g_modem-rf ar8035_firmware sc8180xp-aaab_firmware wcn7860_firmware sc8380xp snapdragon_x62_5g_modem-rf qca6564au sm4635 sc8180xp-ad sc8280xp-abbb wsa8815_firmware sa8195p_firmware qca8337_firmware sg8275p_firmware qca9377_firmware qcm6490_firmware sm7250p_firmware sm4635_firmware vision_intelligence_400_firmware qru1032 wcn3950 snapdragon_870_5g_mobile_firmware sm8750 snapdragon_auto_5g_modem-rf_gen_2_firmware qca6797aq_firmware sa8295p_firmware snapdragon_870_5g_mobile sd_675_firmware snapdragon_678_mobile sc8180x-acaf sm7250p sa8155 sd_8cx_firmware sc8180x-ad_firmware qca6584au qcn6274_firmware qcn9011_firmware qru1062_firmware snapdragon_850_mobile_compute_firmware snapdragon_675_mobile_firmware snapdragon_768g_5g_mobile sc8380xp_firmware qru1062 qca6310_firmware snapdragon_845_mobile snapdragon_8_gen_3_mobile_firmware fastconnect_6800 qfw7114_firmware qca6595_firmware fastconnect_7800_firmware snapdragon_675_mobile snapdragon_865_5g_mobile_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p sa6155_firmware qmp1000_firmware snapdragon_xr2_5g wcn7880 sa8150p sxr2330p snapdragon_x24_lte_modem sc8180x-aaab sxr1230p sc8180x-aaab_firmware wcn7881 video_collaboration_vc3_platform aqt1000 qca6688aq qam8295p_firmware sd855 qca6431_firmware wcn3990_firmware qca6698aq_firmware qca6564a_firmware wcd9385 snapdragon_888\+_5g_mobile qsm8350 snapdragon_8_gen_1_mobile sa8255p sxr1230p_firmware wcd9390_firmware snapdragon_865\+_5g_mobile qep8111_firmware qcs615_firmware qca6430 snapdragon_855\+_mobile sg8275p snapdragon_765_5g_mobile qdx1011_firmware snapdragon_860_mobile sc8180xp-ad_firmware sm8750_firmware sdx55_firmware ssg2125p qru1052 sxr2130 snapdragon_x65_5g_modem-rf_firmware qamsrv1m qca6174a_firmware wcn7861_firmware wcn7861 snapdragon_x50_5g_modem-rf qam8650p_firmware snapdragon_670_mobile_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware qam8620p wcn3980_firmware sd855_firmware qca6436 qca6584au_firmware qcn6274 snapdragon_x24_lte_modem_firmware wsa8835 qca6391_firmware wsa8840_firmware qfw7124 qca6595au_firmware qdu1010_firmware qcs8300_firmware qca6696_firmware qcs8300 wcd9380_firmware qca6574_firmware qca8081 wsa8815 sd_8_gen1_5g snapdragon_ar2_gen_1_firmware qam8775p qca9377 qca6797aq snapdragon_x75_5g_modem-rf sa8620p qca6574a_firmware sdx55 snapdragon_865_5g_mobile snapdragon_855\+_mobile_firmware sd675 wcd9375_firmware sd_8_gen1_5g_firmware sa7775p qca6391 snapdragon_ar1_gen_1_firmware qcn9274_firmware qcn9012_firmware qcs5430_firmware snapdragon_x32_5g_modem-rf qru1052_firmware sa8770p_firmware sa8295p qcs8550 sc8280xp-abbb_firmware sm8735_firmware fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware sm8750p_firmware wcd9375 snapdragon_8\+_gen_2_mobile_firmware qca6688aq_firmware vision_intelligence_300 snapdragon_ar2_gen_1 snapdragon_765g_5g_mobile wcn3988_firmware qamsrv1h_firmware sa8145p sd_675 vision_intelligence_400 sdx80m_firmware wsa8835_firmware ssg2115p_firmware sd_8cx wcn3980 qdx1010 snapdragon_8_gen_1_mobile_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.09% / 26.37%

||

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-05 Mar, 2025 | 21:05

Improper validation of array index in Multi-mode call processor

Memory corruption due to improper validation of array index in Multi-mode call processor.

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 qca8337 qca6431_firmware snapdragon_4_gen_1_firmware wcd9360_firmware sdx65 sd765g_firmware qca6595au_firmware qca6390_firmware sd690_5g wcd9370 qca6426 wcn3998 wcd9385_firmware sdxr2_5g_firmware qcn6024_firmware sd_8_gen1_5g_firmware sm7315_firmware wcn7850 qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware wcd9360 qca6436_firmware sd778g sa515m_firmware qcs6490 wcn7851 sdxr2_5g wcn3988_firmware qca6421 sd778g_firmware wsa8810_firmware sd765g sd765_firmware qca6436 wcn6851 qca8081 wcn7851_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware sd750g sd870_firmware sdx70m_firmware qca6390 ar8035 sd750g_firmware wcd9375 wsa8830_firmware sd855_firmware sd865_5g_firmware snapdragon_4_gen_1 qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware qcx315 sm8475 wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 wsa8835 qcx315_firmware wcd9380 sd888_5g qca6574a sd690_5g_firmware wcn6855_firmware sm7325p wcn6750 sa515m sd855 wsa8815 sm7325p_firmware wcn6850 sdx57m_firmware sd765 qca6426_firmware qca6574a_firmware sd695 sd768g_firmware qcn9024 sm7315 qca6391 sdx55m qca6421_firmware wcn6740_firmware sdx65_firmware qcm6490_firmware sd480_firmware wcn6851_firmware qca6574au qcn9024_firmware sdx57m wcd9341_firmware sd480 sd870 wsa8810 wcn6855 wcn6856 sd695_firmware sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware qcn6024 sdx70m sm7250p ar8035_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.81%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:02

Improper Validation of Array Index in Camera

Memory corruption while power-up or power-down sequence of the camera sensor.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware sa7255p snapdragon_ar2_gen_1 qcm6490_firmware sdm429w qamsrv1m snapdragon_778g\+_5g_mobile wcn7860 qcs5430 wcn7881_firmware qcs8550_firmware qcm6490 wcn7881 sa7775p_firmware sa8775p ssg2125p_firmware qam8775p sa8650p_firmware qcs615 qca6391 sd888 sm8750 wcn3660b wcn3950_firmware qcn9274_firmware sdm429w_firmware wcn6650 sa8255p wcd9370_firmware snapdragon_480_5g_mobile video_collaboration_vc3_platform_firmware smart_audio_400 snapdragon_w5\+_gen_1_wearable snapdragon_888_5g_mobile sw5100 sxr2230p wcn3950 wsa8845_firmware qcm8550_firmware snapdragon_8\+_gen_2_mobile sw5100p_firmware wcn6755_firmware sxr2230p_firmware sm7635_firmware sd_8_gen1_5g_firmware wsa8845h ssg2115p_firmware snapdragon_4_gen_1_mobile qcm8550 wcd9341 sa8650p sa8770p_firmware talynplus wcn3988 qca6698aq_firmware wcn7880_firmware wcd9395_firmware qamsrv1m_firmware sa8775p_firmware sm6370_firmware sm7635 talynplus_firmware wsa8835_firmware fastconnect_6900 wcn3988_firmware qcm4490 wcd9335 wcd9375_firmware qcs410_firmware snapdragon_7c\+_gen_3_compute_firmware wcd9385_firmware qam8650p_firmware wsa8810 qcn9274 snapdragon_8_gen_3_mobile_firmware csra6640 qam8255p_firmware snapdragon_782g_mobile snapdragon_888\+_5g_mobile wcd9375 sa8620p_firmware sm6650 snapdragon_888_5g_mobile_firmware snapdragon_w5\+_gen_1_wearable_firmware sa7255p_firmware qca6595_firmware sg8275p fastconnect_6200_firmware qamsrv1h qcs410 wcn6740 wcd9380 video_collaboration_vc3_platform snapdragon_480\+_5g_mobile_firmware snapdragon_480\+_5g_mobile qamsrv1h_firmware wsa8832_firmware snapdragon_778g_5g_mobile snapdragon_4_gen_2_mobile wcn7861_firmware sw5100p snapdragon_780g_5g_mobile_firmware wsa8830_firmware wcn6755 snapdragon_8_gen_2_mobile_firmware qca6595au_firmware qcs6490_firmware qrb5165m qrb5165n_firmware wcd9385 sa8255p_firmware wsa8840_firmware qca6595au csra6620 wcn3660b_firmware qam8255p sxr2250p_firmware sm4635 wsa8840 srv1h sm8550p_firmware qcn9011_firmware qcs610 qca6595 sm7675 wsa8845h_firmware wcn3620_firmware qam8650p video_collaboration_vc1_platform_firmware qcn9012 flight_rb5_5g_platform_firmware wsa8845 snapdragon_ar2_gen_1_firmware wcn6650_firmware qcs8300 sxr1230p_firmware sxr2330p csra6620_firmware wcd9380_firmware qca6391_firmware srv1m qcn9012_firmware qcs5430_firmware sm7325p_firmware qam8775p_firmware sm8635p snapdragon_ar1_gen_1 wcn3980 sm8635p_firmware qcs4490 qcm5430 qcs9100 wcd9370 wcd9378 snapdragon_782g_mobile_firmware sm7675_firmware qcs4490_firmware snapdragon_429_mobile_firmware sm8750p sa9000p snapdragon_4_gen_2_mobile_firmware qcn9011 wsa8835 sm8750p_firmware ssg2125p qca6678aq fastconnect_7800 qca6797aq_firmware snapdragon_480_5g_mobile_firmware snapdragon_8_gen_1_mobile wcd9341_firmware snapdragon_695_5g_mobile snapdragon_8_gen_2_mobile wcn7880 sm4635_firmware snapdragon_888\+_5g_mobile_firmware wcd9378_firmware robotics_rb2_firmware wcd9335_firmware qca6797aq qcm4490_firmware sm7675p qcs8550 sw5100_firmware sxr2250p qcm5430_firmware sm6650_firmware snapdragon_7c\+_gen_3_compute snapdragon_429_mobile fastconnect_6700 csra6640_firmware sm7325p snapdragon_8_gen_1_mobile_firmware sd_8_gen1_5g sm7675p_firmware snapdragon_ar1_gen_1_firmware wsa8810_firmware qcs9100_firmware snapdragon_778g_5g_mobile_firmware srv1m_firmware wsa8832 fastconnect_6700_firmware wcd9390_firmware sm8635 qcs615_firmware snapdragon_695_5g_mobile_firmware robotics_rb5 qcs610_firmware ssg2115p sm8635_firmware snapdragon_8_gen_3_mobile wsa8815 qrb5165n snapdragon_780g_5g_mobile sxr1230p qrb5165m_firmware wcn7861 sa8620p sm8750_firmware sm6370 wsa8830 wsa8815_firmware smart_audio_400_firmware snapdragon_8\+_gen_2_mobile_firmware snapdragon_8\+_gen_1_mobile_firmware sa8770p wcn7860_firmware fastconnect_6200 robotics_rb5_firmware sg8275p_firmware srv1h_firmware wcn3620 sm7315 snapdragon_778g\+_5g_mobile_firmware wcn3980_firmware qca6678aq_firmware flight_rb5_5g_platform qca6698aq qcs8300_firmware video_collaboration_vc1_platform snapdragon_4_gen_1_mobile_firmware fastconnect_6900_firmware qcs6490 sm7315_firmware sd888_firmware sa9000p_firmware sm8550p snapdragon_8\+_gen_1_mobile wcd9390 sa7775p wcd9395 sxr2330p_firmware wcn6740_firmware robotics_rb2 Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.81%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:02

Improper Validation of Array Index in Graphics_Linux

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware sm4635 wsa8840 wcn7860 sm7675 wsa8845h_firmware wcn7881_firmware video_collaboration_vc1_platform_firmware wsa8845 qcm6125 wcn7881 wcn6650_firmware wcd9380_firmware sxr2330p wcn6450 qca6391_firmware wcn3950_firmware qca6391 sm8750 sm8635p wcn6650 video_collaboration_vc5_platform wcn3980 wcd9370_firmware sm8635p_firmware snapdragon_480_5g_mobile wcn3950 snapdragon_w5\+_gen_1_wearable sw5100 wsa8845_firmware wcd9370 qcs7230_firmware wcd9378 sw5100p_firmware sm7675_firmware wcn6755_firmware video_collaboration_vc5_platform_firmware sm7635_firmware sm8750p wsa8835 sm8750p_firmware wsa8845h snapdragon_480_5g_mobile_firmware fastconnect_7800 wcn6450_firmware snapdragon_4_gen_1_mobile qcs8250_firmware snapdragon_695_5g_mobile wcn7880_firmware wcn3988 wcn7880 wcd9395_firmware sm4635_firmware qcm6125_firmware wcd9378_firmware qcs6125 sm7635 qcs7230 sm7675p sw5100_firmware wcn3988_firmware sm6650_firmware qcs8250 wcd9375_firmware sm7675p_firmware wsa8810_firmware wcd9385_firmware wsa8810 wsa8832 wcd9390_firmware sm8635 snapdragon_695_5g_mobile_firmware snapdragon_8_gen_3_mobile_firmware wcd9375 sm8635_firmware snapdragon_8_gen_3_mobile sm6650 wsa8815 qcs6125_firmware snapdragon_w5\+_gen_1_wearable_firmware fastconnect_6200_firmware wcn7861 sm8750_firmware wcd9380 wsa8830 snapdragon_480\+_5g_mobile_firmware snapdragon_480\+_5g_mobile wsa8815_firmware wsa8832_firmware wcn7861_firmware wcn7860_firmware sw5100p fastconnect_6200 wsa8830_firmware wcn6755 wcn3980_firmware video_collaboration_vc1_platform snapdragon_4_gen_1_mobile_firmware wcd9390 wcd9385 wsa8840_firmware wcd9395 wsa8835_firmware sxr2330p_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.81%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:01

Improper Validation of Array Index in Camera

Memory corruption in Camera due to unusually high number of nodes passed to AXI port.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.81%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:01

Improper Validation of Array Index in Camera

Memory corruption can occur in the camera when an invalid CID is used.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware sa7255p snapdragon_ar2_gen_1 wcn7860 qamsrv1m wcn7881_firmware qcs8550_firmware wcn7881 sa7775p_firmware sa8775p ssg2125p_firmware qam8775p sa8650p_firmware wcn3950_firmware sm8750 wcn6650 sa8255p wcd9370_firmware wcn3950 video_collaboration_vc3_platform_firmware sxr2230p wsa8845_firmware qcm8550_firmware snapdragon_8\+_gen_2_mobile wcn6755_firmware sxr2230p_firmware sm7635_firmware sd_8_gen1_5g_firmware wsa8845h ssg2115p_firmware wcn6450_firmware qcm8550 sa8650p sa8770p_firmware talynplus wcn3988 qca6698aq_firmware wcn7880_firmware wcd9395_firmware qamsrv1m_firmware sa8775p_firmware sm7635 talynplus_firmware wsa8835_firmware fastconnect_6900 wcn3988_firmware qcm4490 wcd9375_firmware wcd9385_firmware qam8650p_firmware wsa8810 snapdragon_8_gen_3_mobile_firmware qam8255p_firmware wcd9375 sa8620p_firmware sm6650 sa7255p_firmware qca6595_firmware sg8275p qamsrv1h wcn6740 wcd9380 video_collaboration_vc3_platform qamsrv1h_firmware wsa8832_firmware wcn7861_firmware snapdragon_4_gen_2_mobile wsa8830_firmware wcn6755 snapdragon_8_gen_2_mobile_firmware qca6595au_firmware qcs6490_firmware wcd9385 sa8255p_firmware wsa8840_firmware qca6595au qam8255p sxr2250p_firmware wsa8840 srv1h sm8550p_firmware sm7675 qca6595 wsa8845h_firmware qam8650p wsa8845 snapdragon_ar2_gen_1_firmware wcn6650_firmware sxr1230p_firmware sxr2330p wcd9380_firmware wcn6450 srv1m qam8775p_firmware sm8635p snapdragon_ar1_gen_1 sm8635p_firmware qcs4490 wcd9370 wcd9378 sm7675_firmware qcs4490_firmware sm8750p sa9000p snapdragon_4_gen_2_mobile_firmware wsa8835 sm8750p_firmware ssg2125p qca6678aq fastconnect_7800 qca6797aq_firmware snapdragon_8_gen_1_mobile snapdragon_8_gen_2_mobile wcn7880 wcd9378_firmware qca6797aq qcm4490_firmware sm7675p qcs8550 sxr2250p sm6650_firmware fastconnect_6700 snapdragon_8_gen_1_mobile_firmware sd_8_gen1_5g sm7675p_firmware snapdragon_ar1_gen_1_firmware wsa8810_firmware srv1m_firmware wsa8832 fastconnect_6700_firmware wcd9390_firmware sm8635 ssg2115p sm8635_firmware snapdragon_8_gen_3_mobile wsa8815 sxr1230p wcn7861 sa8620p sm8750_firmware wsa8830 wsa8815_firmware snapdragon_8\+_gen_2_mobile_firmware snapdragon_8\+_gen_1_mobile_firmware sa8770p wcn7860_firmware sg8275p_firmware srv1h_firmware qca6678aq_firmware qca6698aq fastconnect_6900_firmware qcs6490 sa9000p_firmware sm8550p snapdragon_8\+_gen_1_mobile wcd9390 sa7775p wcd9395 wcn6740_firmware sxr2330p_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.81%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-05 Mar, 2025 | 04:55

Improper Validation of Array Index in Camera

Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.

Vendor-Qualcomm Technologies, Inc.

Product-Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.59%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:15

Improper Validation of Array Index in Camera Driver

Memory corruption during array access in Camera kernel due to invalid index from invalid command data.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_429_mobile_firmware wcn3620_firmware sdm429w wcn3620 sdm429w_firmware wcn3660b_firmware snapdragon_429_mobile wcn3660b Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.09% / 27.01%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-28 Feb, 2025 | 04:55

Improper Validation of Array Index in WLAN Host Communication

Memory corruption while parsing the ML IE due to invalid frame content.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware ipq6000_firmware qcm6490_firmware qcn6224_firmware ipq8076a csr8811_firmware sa7775p_firmware sa8775p qca6574au_firmware qcn6132_firmware qam8775p sa8195p qcs615 qca6584au snapdragon_x65_5g_modem-rf_firmware qca9889_firmware qcn5152 sa8255p sxr2230p ipq6028 qcn5022_firmware qcc710_firmware sa8540p_firmware snapdragon_8\+_gen_2_mobile sxr2230p_firmware sm7635_firmware ipq9574_firmware qca6574 ipq9048 qcn5164_firmware ipq8070a qxm8083 qcm8550 sa8650p sa8770p_firmware qca6698aq_firmware qcn5024_firmware qcf8000_firmware sa8775p_firmware qamsrv1m_firmware qca9888 qca8075 immersive_home_216 qca6688aq qcn5122_firmware qcn6412 qcn9100 sa8530p_firmware ipq8173 ipq8071a qcn6402 qcf8001 ipq8174_firmware qcn5164 qca8082_firmware snapdragon_8_gen_3_mobile_firmware qam8255p_firmware wcd9375 ipq9570_firmware sm6650 qca8085 sa6155p video_collaboration_vc3_platform qcn5052 ipq5010_firmware qamsrv1h_firmware ipq5028 qcn5052_firmware wsa8830_firmware qca8081 qcn9022 immersive_home_316_firmware sdx65m_firmware wcd9385 wsa8840_firmware qfw7124_firmware ipq6028_firmware sxr2250p_firmware wsa8840 qcn6402_firmware ipq8078a_firmware qfw7124 ipq6000 qca6696 immersive_home_3210_firmware sa8155p_firmware qca4024 ipq9048_firmware qca6595 qca8337 ipq8071a_firmware qca8337_firmware qcn9012 qam8650p ipq9570 qcs8300 sxr2330p qcf8000sfp_firmware srv1m qcn9012_firmware qcs5430_firmware qcn9070_firmware qcf8000 qam8775p_firmware sm8635p_firmware qcn5154_firmware ipq8074a qcm5430 qcs9100 wcd9378 sm7675_firmware sa8295p_firmware qca8085_firmware sm8750p sa9000p wsa8835 sm8750p_firmware qcn9024 qca8081_firmware qcn9074 qca6797aq_firmware qca0000_firmware fastconnect_7800 wcd9340 snapdragon_8_gen_2_mobile ipq8174 qcn6112_firmware wcd9378_firmware qca6574au qca8084_firmware qcn9024_firmware sm6650_firmware snapdragon_auto_5g_modem-rf_gen_2 qca6584au_firmware qca6777aq fastconnect_6700 immersive_home_326 qca6696_firmware snapdragon_x72_5g_modem-rf_firmware qcs9100_firmware srv1m_firmware wsa8832 fastconnect_6700_firmware ipq5302 wcd9390_firmware qcn6274 qcs615_firmware sm8635 immersive_home_216_firmware ipq5028_firmware qca6554a_firmware ipq5332 qca8082 sm8635_firmware qca6787aq ipq6018_firmware ipq8072a_firmware qcn9000_firmware ipq5300_firmware qcf8000sfp sdx55_firmware qca6574a_firmware sa8620p qca9888_firmware qca8075_firmware qcn6023 sm8750_firmware qxm8083_firmware ipq5332_firmware ipq6010 srv1l ipq8078_firmware qca6554a sa8530p srv1h_firmware qca9889 qcn5124 ipq8070a_firmware ipq9554_firmware qcs8300_firmware qcs6490 sa8540p sa9000p_firmware sm8550p sa7775p qcn6432_firmware sxr2330p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware wsa8835_firmware qca8386_firmware sa7255p wcn7860 qamsrv1m qcs5430 qam8295p_firmware qca6787aq_firmware wcn7881_firmware qcn9074_firmware qcn9100_firmware qcs8550_firmware sdx65m qcm6490 ipq5312 wcn7881 qcn5154 ipq9554 sa8650p_firmware qcn6274_firmware sm8750 snapdragon_x65_5g_modem-rf qca8084 qcn9274_firmware csr8811 qca6688aq_firmware qcn9000 wcn6650 ipq8173_firmware wsa8845_firmware qcn6412_firmware video_collaboration_vc3_platform_firmware qca6574_firmware qcm8550_firmware wcn6755_firmware ar8035 srv1l_firmware wsa8845h ipq9008_firmware wcn6450_firmware sa6155p_firmware qcn6122_firmware qcn6112 wcn7880_firmware ipq9008 wcd9395_firmware qcn5122 sm7635 fastconnect_6900 ipq9574 qcn9160 qca6574a qcn6432 wcd9375_firmware wcd9385_firmware qam8650p_firmware qcn9274 qcn6422 immersive_home_318_firmware ipq8078a sa8295p sa8620p_firmware qcn5152_firmware sa7255p_firmware qca6595_firmware qamsrv1h sdx55 immersive_home_214 snapdragon_x75_5g_modem-rf_firmware wcd9380 ipq5302_firmware immersive_home_326_firmware sa8155p wcn7861_firmware wsa8832_firmware immersive_home_214_firmware wcn6755 qca6564au immersive_home_318 snapdragon_8_gen_2_mobile_firmware qcs6490_firmware qca6595au_firmware ipq8072a qca0000 qcn6224 sa8255p_firmware qca6595au qam8255p srv1h ipq5010 qam8620p sm8550p_firmware ar8035_firmware sa8195p_firmware sm7675 wsa8845h_firmware immersive_home_3210 wsa8845 wcn6650_firmware wcd9380_firmware wcn6450 qcn5124_firmware sm8635p ipq8076 wcd9370 wcd9340_firmware immersive_home_316 qca8386 qca6678aq snapdragon_x75_5g_modem-rf qca6564au_firmware qam8295p qcn6122 qcn6132 wcn7880 qam8620p_firmware qcn6024 qca6797aq qca4024_firmware sm7675p qcn5022 qcs8550 sxr2250p qcm5430_firmware qcn5024 sm7675p_firmware ipq6010_firmware qcn6422_firmware qcn6024_firmware ipq6018 ipq8078 ipq5300 ipq8076_firmware qcc710 ipq5312_firmware qcf8001_firmware snapdragon_8_gen_3_mobile snapdragon_x72_5g_modem-rf qcn9160_firmware wcn7861 ipq8074a_firmware wsa8830 qcn6023_firmware snapdragon_8\+_gen_2_mobile_firmware wcn7860_firmware sa8770p qca6777aq_firmware qcn9070 qca6678aq_firmware qca6698aq fastconnect_6900_firmware qcn9022_firmware qcn9072_firmware ipq8076a_firmware qfw7114 wcd9390 wcd9395 qfw7114_firmware qcn9072 wcd9370_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.10%

||

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-08 Nov, 2024 | 04:55

Improper Validation of Array Index in Camera_Linux

Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_8_gen_1_mobile_platform talynplus_firmware wsa8830 sa6150p_firmware sa8145p_firmware qcs610 qca8337 snapdragon_870_5g_mobile_platform_firmware snapdragon_865_5g_mobile_platform wcn3950_firmware sa8150p_firmware video_collaboration_vc3_platform wcd9370 qca6426 sa8530p wcd9385_firmware qam8295p wcn3950 talynplus fastconnect_6200 wcn3660b qam8295p_firmware sa9000p_firmware snapdragon_x55_5g_modem-rf_system wcn3680b_firmware sdx55_firmware snapdragon_4_gen_2_mobile_platform qca6574au_firmware wcd9375_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware sa6155p_firmware snapdragon_870_5g_mobile_platform wcn3988_firmware snapdragon_765g_5g_mobile_platform qcn9074 sa6145p_firmware c-v2x_9150 snapdragon_8\+_gen_1_mobile_platform fastconnect_6700_firmware sa8195p wsa8810_firmware sw5100 qca6436 sa6155p snapdragon_765_5g_mobile_platform_firmware snapdragon_690_5g_mobile_platform wcd9385 wcd9341 sxr2130_firmware qca6696_firmware wcd9375 sa8150p wsa8830_firmware snapdragon_768g_5g_mobile_platform_firmware sd865_5g_firmware wsa8815_firmware wcn3988 wsa8835_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sa8295p_firmware snapdragon_750g_5g_mobile_platform_firmware wcn3610 wcd9380_firmware qca8337_firmware sw5100p sd865_5g snapdragon_w5\+_gen_1_wearable_platform fastconnect_6800 sa8530p_firmware wsa8835 sa8540p_firmware wcd9380 snapdragon_wear_4100\+_platform_firmware fastconnect_6700 qcs410 sxr2130 snapdragon_4_gen_2_mobile_platform_firmware snapdragon_wear_4100\+_platform video_collaboration_vc3_platform_firmware c-v2x_9150_firmware wcn3980 sa9000p wsa8815 snapdragon_865\+_5g_mobile_platform snapdragon_xr2_5g_platform_firmware qca6426_firmware wcn3660b_firmware fastconnect_6200_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware qca6391 sa8295p fastconnect_7800 snapdragon_865\+_5g_mobile_platform_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_xr2_5g_platform qcs4490_firmware wsa8832_firmware fastconnect_6900 fastconnect_6900_firmware video_collaboration_vc1_platform_firmware qca6574au sa8155p_firmware wcd9341_firmware fastconnect_7800_firmware wsa8810 wsa8832 snapdragon_765g_5g_mobile_platform_firmware sw5100p_firmware sa8540p snapdragon_8_gen_1_mobile_platform_firmware qcs610_firmware qsm8250 sa6145p wcn3680b qcs4490 sa8145p snapdragon_750g_5g_mobile_platform qca6696 qca6391_firmware wcd9370_firmware sdx55 sa6150p snapdragon_768g_5g_mobile_platform sa8155p snapdragon_765_5g_mobile_platform video_collaboration_vc1_platform sm7250p snapdragon_8\+_gen_1_mobile_platform_firmware sw5100_firmware qcn9074_firmware qcs410_firmware qsm8250_firmware Snapdragon qualcomm_video_collaboration_vc1_platform_firmware sa6155p_firmware qca8337_firmware talynplus_firmware sa6150p_firmware snapdragon_690_5g_mobile_platform_firmware sa8145p_firmware wcd9380_firmware qcs4490_firmware wsa8832_firmware wsa8835_firmware fastconnect_6900_firmware sa8530p_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware fastconnect_6700_firmware wcn3950_firmware sa8540p_firmware wsa8815_firmware wsa8810_firmware sa8150p_firmware fastconnect_7800_firmware wcd9341_firmware sw5100p_firmware qcs610_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_8_gen_1_mobile_platform_firmware sxr2130_firmware c-v2x_9150_firmware qca6696_firmware qualcomm_video_collaboration_vc3_platform_firmware qca6391_firmware wcd9385_firmware wcd9370_firmware wcn3680b_firmware wsa8830_firmware qam8295p_firmware sd865_5g_firmware sm7250p_firmware qca6426_firmware snapdragon_xr2_5g_platform_firmware sa9000p_firmware wcn3660b_firmware fastconnect_6200_firmware qca6574au_firmware sa8195p_firmware sdx55_firmware snapdragon_865_5g_mobile_platform_firmware sw5100_firmware qcn9074_firmware fastconnect_6800_firmware qcs410_firmware sa8295p_firmware snapdragon_x55_5g_modem-rf_system_firmware wcd9375_firmware wcn3610_firmware qca6436_firmware wcn3980_firmware snapdragon_750g_5g_mobile_platform_firmware qsm8250_firmware

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.32%

||

7 Day CHG~0.00%

Published-12 Nov, 2020 | 10:00

Updated-04 Aug, 2024 | 07:37

u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8017, APQ8037, APQ8053, MDM9250, MDM9607, MDM9628, MDM9640, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCM4290, QCM6125, QCS410, QCS4290, QCS603, QCS605, QCS610, QCS6125, QM215, QSM8350, SA415M, SA6145P, SA6150P, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA429W, SDA640, SDA660, SDA670, SDA845, SDA855, SDM1000, SDM429, SDM429W, SDM439, SDM450, SDM455, SDM630, SDM632, SDM636, SDM640, SDM660, SDM670, SDM710, SDM712, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM7250, SM7250P, SM8150, SM8150P, SM8350, SM8350P, SXR1120, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sm7250 mdm9640_firmware sa6150p_firmware sm6250p_firmware qcs610 sm6125 sdm712_firmware sdm640 sdm450_firmware sdm632 sm7250_firmware mdm9628_firmware mdm9650 qcs4290 mdm9250 sa8150p_firmware apq8009_firmware sdm712 msm8917 sdm670 sm8350 qcs605_firmware qcs6125_firmware sm6115 sm7150p sda845_firmware msm8108 sa415m msm8108_firmware sm4250 sc8180xp mdm9628 sm4125 sda855 qsm8350_firmware qsm8350 apq8037 sa8155 msm8905_firmware sda660 sdx55_firmware sdm1000 sm7250p_firmware sxr1130 apq8053_firmware sda845 sa6155p_firmware msm8208 sda640 sdm450 sdm636_firmware qcs6125 sa8155_firmware sdm630 mdm9607_firmware sa415m_firmware sa6145p_firmware qm215 sc7180_firmware sm4250_firmware sm6250 sa8195p apq8017_firmware sdm710_firmware sxr1120 sa6155p qcs603_firmware msm8937 msm8209_firmware msm8905 sm8350p_firmware mdm9250_firmware qcs4290_firmware sm8150_firmware msm8909 sm7150p_firmware sc7180 sc8180xp_firmware sa8150p sm6250_firmware msm8953_firmware sm6150_firmware sda429w msm8917_firmware sm8150 sdm850 sa8195p_firmware sdm640_firmware apq8017 msm8208_firmware sxr1120_firmware sm6125_firmware sm8150p qcm6125_firmware msm8608 mdm9640 sm6115_firmware sda429w_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdx24 sdx55m_firmware sdm439 sm6150p sm6115p_firmware sdm429 msm8940_firmware sm7150_firmware sm6150 msm8996au sdm429w_firmware sm7150 sm6250p qcs410 sda640_firmware sc8180x sdx50m_firmware sm8350p sdm670_firmware sdx24_firmware sdm636 sda670 qcs605 sm6115p sm4125_firmware sdm455_firmware msm8937_firmware mdm9650_firmware sdm429_firmware sxr1130_firmware msm8209 sda855_firmware apq8009 msm8909_firmware sdx55m sm6150p_firmware sdm455 sm7125 sdm850_firmware sm4250p_firmware msm8920 msm8953 qcm4290 sdx50m sm8350_firmware qcs603 sdm660 msm8920_firmware sc8180x_firmware sa8155p_firmware sdm710 mdm9607 sda670_firmware qcm6125 qcm4290_firmware qcs610_firmware sa6145p sm4250p sdm439_firmware sdm630_firmware sda660_firmware msm8608_firmware qm215_firmware sm7125_firmware sa6150p sdx55 msm8940 apq8053 sa8155p sm8150p_firmware apq8037_firmware sdm1000_firmware sm7250p qcs410_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.16% / 36.99%

||

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:44

A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of range in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, MSM8996, MSM8996AU, QCA6174A, QCA9377, QCA9379, SDM439, SDM636, SDM660, SDX20, SDX24, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware sdm636_firmware msm8996au_firmware sdx20 sdm660 sdx24 sdm439 mdm9607_firmware mdm9650 msm8909w_firmware mdm9607 msm8996au apq8009_firmware msm8909w mdm9207c_firmware msm8996_firmware mdm9206 mdm9207c qca6174a_firmware qca6174a qca9379_firmware sm8150_firmware sdx24_firmware apq8096au sdm439_firmware sdm636 qca9377 mdm9615 mdm9206_firmware apq8053 apq8096au_firmware mdm9615_firmware mdm9650_firmware sm8150 sdx20_firmware msm8996 apq8009 qca9379 apq8053_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 07:37

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatti, APQ8053, APQ8096AU, APQ8098, Bitra, Kamorta, MSM8905, MSM8909W, MSM8917, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCA6390, QCA6574AU, QCM2150, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-kamorta_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware agatti_firmware msm8996au sdm429w_firmware sm7150 qca6390_firmware msm8917 sdm670 sxr2130 qcs605_firmware sdm670_firmware sdm636 bitra apq8098 qcs605 bitra_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8053_firmware agatti nicobar sa6155p_firmware msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware qcm2150 sdm660 sdm630 sm8250_firmware qca6574au sa8155p_firmware qm215 sdm710 sdm710_firmware sa6155p msm8905 sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qca6390 qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sa8155p sm8250 kamorta saipan nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 4.29%

||

7 Day CHG~0.00%

Published-02 May, 2023 | 05:08

Updated-03 Aug, 2024 | 08:01

Improper validation of array index in computer vision.

Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.

Vendor-Qualcomm Technologies, Inc.

Product-wcn685x-5_firmware wcn685x-1_firmware wcd9380_firmware wsa8830 wcn685x-1 sm8450 wcn785x-5 wcn685x-5 wcn785x-1_firmware wsa8830_firmware wsa8835 wsa8835_firmware wcd9380 sm8450_firmware wcn785x-5_firmware wcn785x-1 Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index