CVE-2018-13910 | ByteOS Network

Vulnerability Details :

CVE-2018-13910

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-14 Jun, 2019 | 17:02

Updated At-05 Aug, 2024 | 09:14

Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, Snapdragon_High_Med_2016

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:14 Jun, 2019 | 17:02

Updated At:05 Aug, 2024 | 09:14

▼CVE Numbering Authority (CNA)

Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, Snapdragon_High_Med_2016

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Versions

Affected

IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, Snapdragon_High_Med_2016

Problem Types

Type	CWE ID	Description
text	N/A	Improper Input Validation of DDR Index in AC Assign Call

Type: text

CWE ID: N/A

Description: Improper Input Validation of DDR Index in AC Assign Call

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:14 Jun, 2019 | 17:29

Updated At:18 Jun, 2019 | 14:25

Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, Snapdragon_High_Med_2016

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Qualcomm Technologies, Inc.

>>ipq8074_firmware>>-

cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9655_firmware>>-

cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996au_firmware>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca8081_firmware>>-

cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qm215_firmware>>-

cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qm215>>-

cpe:2.3:h:qualcomm:qm215:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_410_firmware>>-

cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_412_firmware>>-

cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_425_firmware>>-

cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_427_firmware>>-

cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_430_firmware>>-

cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_435_firmware>>-

cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_439_firmware>>-

cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_429_firmware>>-

cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_450_firmware>>-

cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_625_firmware>>-

cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_632_firmware>>-

cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_650_firmware>>-

cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_652_firmware>>-

cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_820_firmware>>-

cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_820a_firmware>>-

cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm439_firmware>>-

cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>snapdragon_high_med_2016_firmware>>-

cpe:2.3:o:qualcomm:snapdragon_high_med_2016_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>snapdragon_high_med_2016>>-

cpe:2.3:h:qualcomm:snapdragon_high_med_2016:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-125	Primary	nvd@nist.gov

CWE ID: CWE-125

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

957Records found

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.78%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9980, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 sd_850 sd_632 sd_855 sd_820a qualcomm_215 qca9980_firmware msm8996au_firmware sd_439 sd_670_firmware sd_425 sd_429 sdm660 sdm439 sd_710_firmware sdx24 sd_636 sd_625 msm8909w_firmware msm8996au qca9980 sd_636_firmware sd_450_firmware sd_845_firmware sd_439_firmware sd_820a_firmware qualcomm_215_firmware sd_429_firmware qcs605_firmware ipq4019_firmware sd_425_firmware sd_850_firmware sdx24_firmware sd_625_firmware sd_450 sdm439_firmware sdm660_firmware sd_712_firmware sd_845 qcs605 ipq4019 sd_670 sd_632_firmware sd_710 ipq8064 msm8909w ipq8064_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.78%

||

7 Day CHG~0.00%

Published-22 Jul, 2019 | 13:47

Updated-04 Aug, 2024 | 18:42

Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 sd_855 sd_730_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sd_425 sdm660 sdx24 sd_430_firmware sd_710_firmware sd_435 sd_636 sdm630 qcs405 sd_625 sd_210 msm8996au sd_636_firmware sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_730 sd_212_firmware sd_665 sd_850_firmware sdx24_firmware sd_625_firmware sd_450 qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_845 sd_427 qcs605 sd_430 sd_670 sd_435_firmware sd_835_firmware sd_710 sd_835 sd_205 sda660 sd_210_firmware sd_665_firmware sd_205_firmware sdm660_firmware sd_212 sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 13.02%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_670_firmware sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware qualcomm_215_firmware mdm9150 sd_730 sd_212_firmware sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.18% / 8.02%

||

7 Day CHG~0.00%

Published-01 Apr, 2022 | 04:40

Updated-04 Aug, 2024 | 00:33

Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 wcn3991_firmware wsa8830 sd678 sa6150p_firmware sa8145p_firmware qcs610 qcs2290_firmware fsm10056 qca8337 csrb31024 wcd9360_firmware sdx65 csra6620 fsm10055_firmware qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qcs2290 qca6595au_firmware qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware qcs6125_firmware qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware sa415m wcn3998 qca6554a_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware sd720g sd_8_gen1_5g_firmware sm6375_firmware sd662 sd460_firmware sa8155 sm7315_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware wcn3999_firmware wcd9360 qca6436_firmware qrb5165n qca6564au_firmware qca6584au sa6155p_firmware sd778g sm6225 wcn3999 sa515m_firmware qcs6490 qrb5165m_firmware qrb5165_firmware sdxr2_5g sa4155p_firmware qcs6125 sa8155_firmware sd662_firmware sa415m_firmware qcs405 wcn3988_firmware sa6145p_firmware sm6250 sd778g_firmware sa8195p wsa8810_firmware sd765g sw5100 sd765_firmware fsm10056_firmware qca6436 wcd9326 wcd9335 sa6155p wcn6851 qca8081 qcs4290_firmware wcd9385 wcd9341 qca6696_firmware qcs6490_firmware sd750g sd870_firmware ar8035 qca6390 sd750g_firmware aqt1000 sa8150p wcd9375 sm6250_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 sd660_firmware wcn6850_firmware wsa8815_firmware sa8195p_firmware wsa8835_firmware sm8475 qca6564a wcn6750_firmware sa4150p qcm6125_firmware qcm2290_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sw5100p sd780g qca6554a sd865_5g qca6595 qca6564au sdx55m_firmware wcn6856_firmware sd888 wsa8835 qca6574 wcd9380 sd888_5g qca6574a sd690_5g_firmware wcn6855_firmware sm7325p wcd9335_firmware wcn3980 wcn6750 sa515m qca6574_firmware sd855 wsa8815 sm7325p_firmware wcn6850 wcn3910 qca6175a sd765 qca6426_firmware qca6574a_firmware sd768g_firmware qrb5165m wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m sdxr1_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware ar8031_firmware csrb31024_firmware qcm4290 qcm6490_firmware qrb5165 sd480_firmware wcn6851_firmware sm6225_firmware qca6574au sa8155p_firmware qca6564a_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 sw5100p_firmware qcs610_firmware wcn6856 sa6145p sdxr1 sd768g ar8031 qca6595_firmware qcs405_firmware sa8145p wcn6740 qca6696 qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sdx55 sa8155p csra6640 sd675 sm7250p sd720g_firmware sw5100_firmware sa4155p qca6175a_firmware ar8035_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.15% / 5.01%

||

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 22:24

Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sd678 sm7250 qcs2290_firmware sm7250_firmware sd_636 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qcs2290 qca6390_firmware msm8917 sd690_5g sd730_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qcs6125_firmware qca6426 sd632 wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcn3615_firmware wcn3660b sd662 sd460_firmware wcn3680b_firmware sdx55_firmware wcd9375_firmware wcn3615 wcn3998_firmware qca6420 qca6436_firmware apq8053_firmware sd778g qcs6490 sd429 sdxr2_5g qcs6125 sd662_firmware sdm630 wcn3988_firmware qca6430 sd429_firmware sm6250 sd778g_firmware apq8017_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 wcn6851 qcs4290_firmware wcd9385 qcs6490_firmware sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8835_firmware apq8017 wcn6750_firmware qcm6125_firmware qcm2290_firmware wcn3991 wcd9380_firmware sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 wsa8835 sd632_firmware sd665_firmware wcd9380 sd888_5g qualcomm215 sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325 qca6430_firmware wcn6750 sd439_firmware qcs605 sd855 sm4125_firmware wcn6850 sd665 wcn3910 sd765 qca6426_firmware wcn3660b_firmware wcn3680 sd768g_firmware sd730 sd460 qca6391 sdx55m sdxr1_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware qcm4290 qcm6490_firmware sdx50m wcn3680_firmware sd480_firmware wcn6851_firmware sd_636_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wcn6856 wcn3680b sdxr1 sd768g wcn6740 sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sd675 sd439 sd720g_firmware qcm2290 sm7325_firmware Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.15% / 4.53%

||

7 Day CHG~0.00%

Published-12 Nov, 2021 | 06:15

Updated-03 Aug, 2024 | 22:24

Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm7250 sa6150p_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sc8180x\+sdx55 sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g sm6375_firmware wcn3660b qsm8350_firmware sd710_firmware qsm8350 sd460_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware sdx12_firmware qca6420 wcd9360 whs9410_firmware wcn3999 qrb5165_firmware qcs6125 sa8155_firmware qca4004_firmware sd662_firmware qcs405 qca6430 wcd9306_firmware wcd9340 sdm830_firmware sd765g qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware mdm9250_firmware wcd9341 mdm9655 qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g wcn3910_firmware sd_8cx sa8150p qca4004 wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware wcn6750_firmware wcn3610 sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6320 mdm9650_firmware sd_8c_firmware qca6426_firmware wcn3660b_firmware qca9984 sd835 wcn3980_firmware sd730 sdx55m qca6421_firmware wcn6740_firmware sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware qcm4290_firmware sd480 sd870 wcn6855 qcs610_firmware qsm8250 sa6145p sdxr1 ar8031 qca6595_firmware qcs405_firmware sa8145p sdm630_firmware mdm9205_firmware qca6391_firmware wcd9370_firmware sd780g_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 ar8035_firmware qcm2290 qsm8250_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware sm7250_firmware sd7c_firmware csrb31024 mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qca9984_firmware qca9377 sm8450 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 wcd9326_firmware sd662 sa8155 qca6320_firmware sdx55_firmware qca6595au wcn3999_firmware wcn3610_firmware qca6436_firmware qrb5165n wcd9306 qca6584au sd778g qca6564au_firmware sa6155p_firmware qca6310 sm6225 wcn7851 sa515m_firmware qcs6490 sdxr2_5g sdm630 mdm9655_firmware sa415m_firmware wcn3988_firmware sa6145p_firmware qca6421 sd778g_firmware sm6250 sd712_firmware sa8195p wsa8810_firmware sm8450_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 sc8180x\+sdx55_firmware sm6250_firmware sda429w wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 qcx315 qca6564a qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qca6595 sdx24 sm8450p_firmware sd888 wsa8835 qcx315_firmware sd665_firmware sd888_5g sm6250p qca6574a wcn6855_firmware qca6174a qca6310_firmware sm7325 wcn6750 mdm9205 sa515m qca6574_firmware sd855 sm4125_firmware sd665 qca6175a sd765 qca6574a_firmware sd768g_firmware sd850_firmware sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m sdx20 sd480_firmware sd_455 sm6225_firmware qca6574au sd710 sa8155p_firmware wcd9341_firmware qcm6125 wsa8810 sm8450p mdm9150 wcn6856 sd_8c sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sa6150p sd845 sdm830 sd720g_firmware sdx12 qcs410_firmware qca6175a_firmware sd850 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.15% / 5.01%

||

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:26

Updated-03 Aug, 2024 | 22:32

Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sd678 sa6150p_firmware sa8145p_firmware qcs2290_firmware qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qcs2290 qca6595au_firmware qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware sm8450 wcd9385_firmware wcn3950 sd720g sm6375_firmware wcn3660b sd662 sd460_firmware sa8155 sm7315_firmware qca6574au_firmware qca6595au sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3610_firmware sd778g sa6155p_firmware sm6225 qcs6490 sa8155_firmware sd662_firmware wcn3988_firmware sa6145p_firmware sm6250 sd778g_firmware sa8195p qualcomm215_firmware sd765g sm8450_firmware sd765_firmware wcn6851 sa6155p qcs4290_firmware wcd9385 qca6696_firmware qcs6490_firmware sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware wcn3910_firmware sa8150p sm6250_firmware wsa8830_firmware sda429w sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8835_firmware sa8195p_firmware wcn6750_firmware wcn3610 qcm2290_firmware sm6375 wcn3991 sda429w_firmware wcd9380_firmware sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware sm8450p_firmware sd888 wsa8835 qca6574 sd665_firmware wcd9380 sd888_5g qualcomm215 qca6574a sd690_5g_firmware wcn6855_firmware sm7325p wcn6750 qca6574_firmware sm7325p_firmware sd665 wcn3910 wcn6850 sd765 wcn3660b_firmware qca6574a_firmware sd768g_firmware sm7315 sd730 sd460 qca6391 sdx55m sdxr1_firmware wcn6740_firmware sd678_firmware qcm4290 qcm6490_firmware sd480_firmware wcn6851_firmware sm6225_firmware qca6574au sa8155p_firmware qcm4290_firmware sd480 sd870 sm8450p wcn6855 wcn6856 sa6145p sdxr1 sd768g sa8145p wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sa8155p sd675 sm7250p sd720g_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.16% / 5.53%

||

7 Day CHG~0.00%

Published-09 Sep, 2021 | 07:35

Updated-03 Aug, 2024 | 16:25

Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa6150p_firmware sm6250p_firmware sa8145p_firmware qcs610 sm7250 qcs2290_firmware qca8337 sm7250_firmware qca6431_firmware sd7c_firmware csra6620 qcs4290 wcn3950_firmware sc8180x\+sdx55 sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware qcs6125_firmware qca6426 qca6584au_firmware sa415m wcn3998 sd_8cx_firmware wcd9371_firmware sdxr2_5g_firmware wcd9385_firmware sm4125 sd720g wcn3950 qsm8350_firmware sd662 qsm8350 sd460_firmware sa8155 qca6574au_firmware sdx55_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3998_firmware wcn3999_firmware qca6420 qca6436_firmware wcd9306 qca6584au sa6155p_firmware sd778g wcn3999 sa515m_firmware qcs6490 qrb5165_firmware sdxr2_5g qcs6125 sa8155_firmware qca4004_firmware sd662_firmware sa415m_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware qca6421 sd778g_firmware sm6250 wcd9306_firmware sa8195p wcd9340 wsa8810_firmware sd765g sd765_firmware qca6436 wcn6851 wcd9335 sa6155p qcs4290_firmware wcd9385 qca6431 qca6696_firmware qcs6490_firmware wcd9371 sd750g sd870_firmware qca6390 ar8035 sd_8cx aqt1000 sa8150p sd750g_firmware sc8180x\+sdx55_firmware sm6250_firmware wcd9375 wcn3910_firmware qca4004 wsa8830_firmware sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qcx315 wcn6750_firmware qcm6125_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 qcx315_firmware wsa8835 sd665_firmware wcd9380 sd888_5g sm6250p qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325 qca6430_firmware wcd9335_firmware wcn6750 mdm9205 sa515m qca6574_firmware wcd9340_firmware sd855 sm4125_firmware wcn6850 sd665 sd7c wcn3910 wsa8815 sd_8c_firmware sd765 qca6426_firmware qca6574a_firmware sd768g_firmware sd460 qca6391 sd730 sdx55m qca6421_firmware aqt1000_firmware wcn6740_firmware sd678_firmware ar8031_firmware qcm4290 qcm6490_firmware sdx50m qrb5165 sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd670 qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 qcs610_firmware mdm9150 wcn6856 qsm8250 sd_8c sa6145p sd768g ar8031 qcs405_firmware sa8145p wcn6740 qca6696 mdm9205_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sa6150p sdx55 sa8155p csra6640 sd675 sd720g_firmware qcs410_firmware ar8035_firmware qcm2290 qsm8250_firmware sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.17% / 6.66%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 17:32

While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.91%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-17 Sep, 2024 | 04:19

A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.16% / 5.48%

||

7 Day CHG~0.00%

Published-16 Nov, 2017 | 22:00

Updated-13 May, 2026 | 00:24

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, possible buffer overflow or information leak in the functions "sme_set_ft_ies" and "csr_roam_issue_ft_preauth_req" due to incorrect initialization of WEXT callbacks and lack of the checks for buffer size.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.18% / 7.57%

||

7 Day CHG~0.00%

Published-20 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Buffer overread may occur due to non-null terminated strings while processing vsprintf in camera jpeg driver.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.71%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a buffer over-read can occur In the WMA NDP event handler functions due to lack of validation of input value event_info which is received from FW.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.71%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing start bss request from upper layer, out of bounds read occurs if ssid length is greater than maximum.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.26%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing diag event after associating to a network out of bounds read occurs if ssid of the network joined is greater than max limit.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.16% / 5.72%

||

7 Day CHG~0.00%

Published-22 Feb, 2021 | 06:25

Updated-04 Aug, 2024 | 11:28

Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Vendor-Qualcomm Technologies, Inc.

Product-qfe3100 qfe2080fc_firmware qca9377_firmware qfs2580 qpm5679_firmware mdm9640_firmware sm6250p_firmware pmd9607_firmware qfe4455fc_firmware qca8337 qfs2608_firmware qfs2530 qpm8870_firmware qln1030 qpa8688 pm6125 qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpm5541_firmware qpa5581_firmware sa6155 pm7150l qpa8821 pm8998_firmware wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sm4125 sd720g wtr1605 mdm9206_firmware qsw8573_firmware wcn3660b qsm8350_firmware qsw8574_firmware qsm8350 sd460_firmware smb2351_firmware qpa4360_firmware wcn3998_firmware pm855p qca6420 wtr4605_firmware pm6150a qpm6670_firmware qca9367_firmware mdm8207 pm660_firmware pm8150b sa8155_firmware qca4004_firmware qfe2101 qca6430 qat3522 qfe4455fc pmr735a wcd9306_firmware wcd9340 sdm830_firmware sd765g sdr660 msm8209_firmware qfs2630_firmware sdr865 mdm9250_firmware qdm5620_firmware smr545 qca6696_firmware qln5020 wcd9371 smb1350 pmm855au_firmware sm4350_firmware sd_8cx wtr3950 sa8150p pm6350 qdm5621 qtc800s qca4004 sd865_5g_firmware sd712 pm640p_firmware wcn6750_firmware qat5516_firmware pm6150l pm855l_firmware qtc410s wcn3991 qpa8801 pm8150l_firmware qat5533_firmware sdx55m_firmware qpa8673_firmware pm6150 smb1354_firmware sd670_firmware qca6574 qfs2630 qpa8842 sdr052_firmware pmm8996au wcd9380 qln4640 qcs410 qpm5579_firmware smb1380_firmware pmk8350_firmware smb1381 pm855p_firmware sd690_5g_firmware qfe3100_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sdx24_firmware qdm2301 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware qdm5621_firmware qdm2301_firmware qpm6375 sd_8c_firmware sd835 qca1990 wcn3980_firmware sd730 qfe3320_firmware pm660l_firmware pm6250_firmware pm8008 pm8350b_firmware qtm525_firmware pme605_firmware wtr1605l_firmware pme605 apq8064au_firmware qpm5621_firmware qca6234 qln1021aq_firmware qcs603 qpa6560_firmware qpa8802_firmware qln4640_firmware qpm5621 qpm6582 sd670 pm8009_firmware qfs2580_firmware qcm4290_firmware pm8150l pmi8998_firmware qcs610_firmware sa6145p sdr105 pm4250 ar8031 qpm5577 mdm8207_firmware wtr2965 mdm9205_firmware qca6391_firmware sd820_firmware pm8150 wcd9370_firmware qat3516_firmware sdx55 csra6640 qat3555_firmware pmi8994 qpa8803_firmware qca9379 pm855b qca6234_firmware qln1031 qsm8250_firmware smb2351 qpm5870 pm8909 mdm9150_firmware wsa8830 pm660 qet6110_firmware qpm6325 pm6125_firmware qbt1500 qpa5581 csrb31024 mdm9628_firmware mdm9650 pmx24_firmware fsm10055_firmware qbt1500_firmware qpm5870_firmware pmk8001 qcs4290 qet6100 pmm855au mdm9250 qca6420_firmware apq8009_firmware sd690_5g smb1396 pm7150a msm8916_firmware sd675_firmware pm8350 qca6564 qpa4361_firmware pm8350c_firmware qpa5461_firmware qca6426 wcn3990_firmware qca9377 qpm5641 wcd9385_firmware qdm5650_firmware sdxr2_5g_firmware wcd9326_firmware whs9410 wcn3615_firmware wtr2955 rgr7640au_firmware pm7250_firmware sdr845_firmware qdm5620 qln1021aq smb1380 pmk8002_firmware qsw6310_firmware sa8155 qln1031_firmware qdm4650_firmware sdx55_firmware pmm6155au_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware qsm7250_firmware mdm9207 qpm6670 pm7150l_firmware wcd9306 qca6584au msm8208 qpm4641 qat5515_firmware pm855 qpm8830_firmware pm8250 qca9367 qfe2082fc_firmware mdm9607_firmware mdm9655_firmware qdm4643 qfs2530_firmware sa415m_firmware pmx55 qpm4641_firmware wcn3988_firmware sd205 pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware qpm5677 qat5515 qca6694 wcd9326 wcd9335 pm6350_firmware pm8004_firmware sdr8150_firmware qcs4290_firmware qtc800h_firmware qpm5620 qpm4630 qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware pmm8195au qln4642 qpm5677_firmware wsa8815_firmware sd888_5g_firmware smr525_firmware pm8998 wtr3925_firmware qpm8820_firmware msm8916 qln1020_firmware qpm6621_firmware pm670a_firmware qcm6125_firmware pmx55_firmware wtr2955_firmware qbt1000_firmware sd865_5g pm8019 qca6595 pm8150_firmware smb1398_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware sc8180x qpa4361 qpm4640_firmware mdm9206 qpm5577_firmware qdm5679_firmware pm8350c smr525 qca6310_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware wtr3950_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware qca6175a sd765 qca6574a_firmware pmd9607 qpm4630_firmware qat3555 sd850_firmware apq8009 qpa5461 qfe2082fc wtr2965_firmware pm670_firmware csrb31024_firmware qfs2608 qln1036aq qtc801s sc8180x_firmware qpm5641_firmware qfe3320 sd710 mdm9607 pm8008_firmware qln1035bd_firmware qpm6621 pmr735a_firmware pmx50 qca6564_firmware sdr8250 sd768g qln1030_firmware smb1350_firmware pm8004 pm640l pmk8002 apq8096au_firmware sd845 sdm830 pmd9655au_firmware qcs410_firmware qca6175a_firmware qpa5580 qpm5579 fsm10055 qfe2550 sa6150p_firmware qcs610 pmi8996 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware pm855a_firmware qtc800h sa8150p_firmware qcs2290 sdr8250_firmware qca6335 csra6620_firmware qcs605_firmware qln1020 sd_675_firmware smr546_firmware qdm5671 csra6640_firmware pmc1000h qpm4650_firmware wtr3905 qat3518 sdr425_firmware smr526_firmware mdm9628 pm640a_firmware qpa5460 wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware wcd9360 pmx50_firmware qpa8675_firmware whs9410_firmware sdr735g qpa5460_firmware wcn3999 qdm3301_firmware pm8996 qsm7250 qcs6125 apq8016_firmware sd662_firmware smb1360 qcs405 qca1990_firmware qfe3440fc qdm2308_firmware fsm10056_firmware qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware qpa6560 sdr675_firmware wcd9341 qdm4643_firmware mdm9655 qca6431 qet4100_firmware sd750g wcn3910_firmware qpm5657 wtr1605_firmware mdm9207_firmware qpm5875_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 wtr3925 qfe2080fc sdr052 sa8195p_firmware smb1390 msm8208_firmware qet4100 wcn3610 msm8608 mdm9640 qpa8686_firmware qpm6585 qca8337_firmware wcd9380_firmware smb1355 qln4650 qtc800t_firmware wcd9330 msm8996au_firmware sdr735g_firmware wgr7640 qat5568 qet5100 qdm5671_firmware qpa8801_firmware qca6564au qtm527_firmware pm8005_firmware qet4101_firmware pm7250b qln4642_firmware pmk8001_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware pm8996_firmware qet4200aq_firmware sdx50m_firmware sdr735 smb1395 pm660l smr526 wtr5975 qca6430_firmware pmk8003 qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 qca6335_firmware qsw8573 qcs605 qbt1000 sd7c qca6320 wcn3910 mdm9650_firmware qca6426_firmware pm8350_firmware wcn3660b_firmware pm8009 qpa8675 sdr051_firmware wcd9330_firmware sdx55m pm670a qca6421_firmware wtr3905_firmware qat3518_firmware qsw8574 pmi8998 sd821_firmware ar8031_firmware pm855l wcn6851_firmware qdm5670_firmware pm7150a_firmware pm8150b_firmware smr545_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware qca6694au_firmware pm4250_firmware sdr105_firmware pm670 sd210_firmware wtr1605l qdm5677 pm8005 qsm8250 pm855_firmware qdm2302 pmm6155au sdxr1 pm855b_firmware apq8096au qca6595_firmware qcs405_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware pmi8996_firmware qln4650_firmware qpm5875 qet5100m sa8155p sd675 wtr4605 qet4101 qat3516 pm670l qpm5658 ar8035_firmware qcm2290 qpm5658_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware qfe4465fc sdr051 qln5030 qcs2290_firmware pm4125 fsm10056 pmi632 qpa2625_firmware pm456 sd7c_firmware qfe2081fc_firmware pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qpm4621 smb1360_firmware qet6100_firmware pm670l_firmware sdr660g sd765g_firmware qpa8686 qca6390_firmware sd730_firmware wcd9370 sdr425 pmr525_firmware qca6584au_firmware pmi632_firmware sd_8cx_firmware qpm5541 qat5516 smb358_firmware sd662 qpa8821_firmware sdr660g_firmware pm8350bh pm3003a qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware qtc800t smb1354 qca6564au_firmware qdm2305 sa6155p_firmware qca6310 qpm8820 qpm2630 qfe2081fc qln5020_firmware sdxr2_5g smb1398 sd821 sa6145p_firmware sdr675 sm6250 sd712_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware ar8035 pm8019_firmware apq8064au qca6694_firmware qpa8673 qdm2310 qfe2550_firmware qln5030_firmware qca6694au sd210 wcn3620_firmware sd820 smb1396_firmware wcn6850_firmware wcn3620 wsa8835_firmware smb358 qca6564a smr546 pmx24 qet6110 qln5040 qcm2290_firmware qpm8895 sdr845 qpm5670 wcn3990 sd_675 qtm527 qfe3440fc_firmware pmk8350 sdx24 pmi8994_firmware pm8350b qdm2307_firmware wsa8835 msm8996au qpm5657_firmware sd888_5g sm6250p rgr7640au qln1035bd pm855a sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qpm4640 wcn6750 qet5100m_firmware qpm4650 mdm9205 qtm525 wtr6955 sd855 sm4125_firmware wtr6955_firmware pm640p sd768g_firmware sdr865_firmware msm8209 qfe4465fc_firmware pm8250_firmware sd460 qca6391 sdxr1_firmware smb1351 aqt1000_firmware qpm8895_firmware qcm4290 sdx50m pm640a sdr8150 pm8916 pmd9655au smb1395_firmware qdm4650 pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware smb231_firmware qat5568_firmware qdm2308 qat3550 mdm9150 wtr4905_firmware qdm5679 sd_8c wcn3680b sd835_firmware pm3003a_firmware qca6696 qtc800s_firmware sm4350 apq8016 msm8608_firmware sd845_firmware smb1381_firmware qpa2625 sa6150p qpa8688_firmware pmm8195au_firmware sm7250p sd720g_firmware qpm4621_firmware sd850 pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 15.01%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 20:42

In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, while processing a StrHwPlatform with length smaller than EFICHIPINFO_MAX_ID_LENGTH, an array out of bounds access may occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.26% / 17.54%

||

7 Day CHG~0.00%

Published-23 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 21:20

Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660 and SDX20

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.26% / 17.54%

||

7 Day CHG~0.00%

Published-23 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 21:20

While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDA660, SDX20.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.98%

||

7 Day CHG~0.00%

Published-28 Nov, 2018 | 15:00

Updated-05 Aug, 2024 | 21:20

Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600.

Vendor-Qualcomm Technologies, Inc.

Product-sd_600 sd_600_firmware Snapdragon Mobile

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.35%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 20:04

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a gpt update, an out of bounds memory access may potentially occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.17% / 6.66%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 23:26

While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 15.11%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 00:26

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, privilege escalation may occur due to inherently insecure treatment of local files.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-264

Not Available

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.98%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 03:47

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, certain malformed HVEC clips could cause an assertion to fail.

Vendor-Qualcomm Technologies, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.15% / 4.69%

||

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:25

Updated-03 Aug, 2024 | 22:24

Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 qca9377_firmware mdm9150_firmware qca2066 sd678 sa6150p_firmware sm6250p_firmware sa8145p_firmware qcs610 wcn3991_firmware wsa8830 qcs2290_firmware fsm10056 qca8337 sd7c_firmware csrb31024 wcd9360_firmware sdx65 csra6620 fsm10055_firmware qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qcs2290 qca6595au_firmware qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware csra6640_firmware qca6564 qca6426 qrb5165n_firmware qca9984_firmware qca9377 sa415m sm8450 sd_8cx_firmware qcn7605 sdxr2_5g_firmware wcd9385_firmware wcn3950 sd720g sm6375_firmware sd662 sd460_firmware sa8155 sa9000p_firmware sm7315_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3999_firmware wcd9360 qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware wcd9306 qsm8250_firmware qcs8155 sm6225 wcn3999 sa515m_firmware qcs6490 qrb5165_firmware sdxr2_5g sa8155_firmware qca4004_firmware sd662_firmware sa415m_firmware qcs405 sc8280xp_firmware wcn3988_firmware sa6145p_firmware sm6250 sd778g_firmware wcd9306_firmware sa8195p sd765g sm8450_firmware sd765_firmware fsm10056_firmware qca6436 wcn6851 sa6155p qca8081 qcs603_firmware qca6174a_firmware qcs4290_firmware wcd9385 qca2066_firmware qca6696_firmware qcs6490_firmware sd750g sd870_firmware ar8035 qca6390 sd_8cx sd750g_firmware sa8150p wcd9375 sm6250_firmware wcn3910_firmware qca4004 wsa8830_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8835_firmware sa8195p_firmware qcx315 qcn7606_firmware qca6564a wcn6750_firmware qcm2290_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware sd_675 sd780g sd865_5g qca6564au sdx24 sdx55m_firmware sm8450p_firmware wcn6856_firmware sd888 wsa8835 qca6574 qcx315_firmware sd665_firmware sa8540p_firmware wcd9380 sd888_5g sd850 sm6250p qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6174a sm7325p sdx24_firmware wcn6750 mdm9205 sa515m qca6574_firmware qcs605 sa9000p sm7325p_firmware sd665 sd7c wcn3910 wcn6850 sd765 qca6426_firmware qca6574a_firmware qca9984 sd768g_firmware sd850_firmware sm7315 sd460 qca6391 sd730 sdx55m sdxr1_firmware wcn6740_firmware sdx65_firmware sd678_firmware ar8031_firmware csrb31024_firmware qcm4290 qcm6490_firmware qrb5165 sd480_firmware qcs603 wcn6851_firmware sm6225_firmware qca6574au sa8155p_firmware qca6564a_firmware qcm4290_firmware sd480 sd870 sm8450p qcn7605_firmware wcn6855 sa8540p qcs610_firmware mdm9150 wcn6856 qsm8250 sa6145p qca6564_firmware sdxr1 sd768g ar8031 qcs405_firmware sa8145p wcn6740 qca6696 mdm9205_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sc8280xp sdx55 sa8155p csra6640 sd675 sm7250p sd720g_firmware qcs8155_firmware qcs410_firmware ar8035_firmware qcm2290 qcn7606 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.14% / 3.32%

||

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:25

Updated-03 Aug, 2024 | 22:32

Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qcm2290_firmware wcn3991_firmware sm6375 wcn3991 wsa8830 qca8337_firmware wcd9380_firmware wcn3990 qcs2290_firmware qca8337 sd865_5g sdx55m_firmware wcn6856_firmware wsa8835 qcx315_firmware qcs4290 wcn3950_firmware wcd9380 sd765g_firmware sd888_5g qcs2290 qca6390_firmware sd690_5g wcd9370 sd690_5g_firmware wcn6855_firmware sm7325p qca6426 wcn3990_firmware qrb5165n_firmware qca9984_firmware wcd9335_firmware wcn3980 wcn3998 wcn6750 wcd9385_firmware sdxr2_5g_firmware wcn3950 sm6375_firmware wsa8815 sm7325p_firmware wcn6850 sd662 wcn3910 sdx57m_firmware sd460_firmware sd765 qca6426_firmware qca9984 sd768g_firmware sdx55_firmware wcd9375_firmware wcn3998_firmware wcn3999_firmware wcn3980_firmware sm7250p_firmware sd460 qca6391 sdx55m qca6436_firmware qrb5165n sd778g sm6225 wcn3999 qcs6490 qrb5165_firmware sdxr2_5g qcm4290 qcm6490_firmware qrb5165 sd480_firmware wcn6851_firmware sd662_firmware sm6225_firmware qcs405 wcn3988_firmware sd778g_firmware wsa8810_firmware sd765g sdx57m wcd9341_firmware qcm4290_firmware sd765_firmware sd480 qca6436 wcn6851 wcd9335 sd870 wcn6855 wsa8810 wcn6856 qsm8250 qcs4290_firmware wcd9385 wcd9341 sd768g qcs6490_firmware qcs405_firmware sd750g sd870_firmware qca6391_firmware qca6390 ar8035 sd750g_firmware wcd9375 wcn3910_firmware wcd9370_firmware sdx55 wsa8830_firmware sd660 sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 sd660_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7250p qcx315 wcn6750_firmware ar8035_firmware qcm2290 qsm8250_firmware Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-281

Improper Preservation of Permissions

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.16% / 5.51%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:10

Updated-03 Aug, 2024 | 22:32

Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 qca9377_firmware sa6150p_firmware sm6250p_firmware qcs610 qca8337 wcd9360_firmware sdx65 wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 qam8295p wcn3950 sd720g qsw8573_firmware sd_8_gen1_5g_firmware sm6375_firmware sd460_firmware sm7315_firmware qca6574au_firmware wcd9375_firmware wcn3998_firmware qca8081_firmware sa6155_firmware msm8909w apq8009w_firmware wcd9360 wcn3999 qrb5165_firmware qrb5165m_firmware sa4155p_firmware qcs6125 sa8155_firmware sd662_firmware qcs405 sd765g sw5100 fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware qca6696_firmware sd750g sd870_firmware wcn3910_firmware sxr2150p_firmware sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware sa8195p_firmware sm8475 sa8295p_firmware wcn6750_firmware wcn3610 sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w sw5100p qca6564au sdx55m_firmware wcn6856_firmware qet4101_firmware qca6574 wcd9380 qcs410 sd690_5g_firmware sdx24_firmware qcn9012_firmware wcd9335_firmware sd439_firmware qsw8573 qcs605 wcn6850 wcn3910 qca6426_firmware sd730 sdx55m sa8295p wcn6740_firmware sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware qsm8250 sa6145p sdxr1 ar8031 qcs405_firmware sa8145p qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sd439 qet4101 qcs8155_firmware sa4155p sxr2150p ar8035_firmware qcm2290 qsm8250_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware fsm10056 csrb31024 csra6620 fsm10055_firmware qcs4290 sd765g_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 qrb5165n_firmware qca9377 wcd9385_firmware sdxr2_5g_firmware sd662 qam8295p_firmware qcn9011_firmware sa8155 sdx55_firmware qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware qcs8155 sa515m_firmware qcs6490 sd429 sdxr2_5g sa415m_firmware wcn3988_firmware sa6145p_firmware sd205 sd429_firmware sd778g_firmware sm6250 sa8195p sd765_firmware wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 sm6250_firmware sda429w sd210 wcn3620_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wcn3620 wsa8835_firmware qcx315 qca6564a sa4150p qcm6125_firmware qcm2290_firmware sd_675 sd780g sd865_5g sdx24 qcn9012 sd888 msm8909w_firmware qcx315_firmware wsa8835 sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a wcn6855_firmware qca6174a sm7325p wcn6750 sa515m qca6574_firmware sd855 sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware qrb5165m sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sd480_firmware qcn9011 qca6574au sa8155p_firmware sd205_firmware qcm6125 mdm9150 wcn6856 qca6564_firmware sd768g wcn6740 qca6696 sa6150p sm7250p sd720g_firmware sw5100_firmware qcs410_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.62%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 18:42

Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sdm670_firmware qcs404 sm8150_firmware sxr2130_firmware sda845_firmware sdm845 mdm9205_firmware mdm9205 qcs404_firmware qcs605 sdm710 sm8150 sdm850 sdm710_firmware sxr1130_firmware sxr1130 sdm670 sxr2130 qcs605_firmware sda845 sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.78%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9150_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdx24 mdm9650 sd_636 msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware ipq4019_firmware mdm9206 sd_425_firmware qca9379_firmware qca6174a sdx24_firmware sd_625_firmware ipq8074 sd_450 qca9377 sd_845 mdm9206_firmware qcs605 sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware ipq8064 sd_210_firmware sd_600 qca8081_firmware sd_205_firmware ipq8064_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sd_625 ipq8074_firmware qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware qca8081 mdm9150 qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sd_712_firmware sd_430 ipq4019 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.23% / 14.43%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 sd_850 sd_855 sd_730_firmware sd_675 sd_670_firmware sdm660 sdx24 sdm630 sd_710_firmware sd_636 qcs405 sd_820_firmware sd_636_firmware sd_820 sd_845_firmware qcs605_firmware sd_675_firmware sd_730 sd_665 sd_850_firmware sdx24_firmware qcs405_firmware sd_712_firmware sdm630_firmware sd_8cx_firmware sda660_firmware sd_845 sd_8cx qcs605 sd_670 sd_835_firmware sd_710 sd_835 sda660 sxr1130_firmware sxr1130 sd_665_firmware sdm660_firmware sd_855_firmware Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.63%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

Buffer overflow can occur in display function due to lack of validation of header block size set by user. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SDM660, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 sd_820a msm8996au_firmware sdx20 sd_415 sd_616 sd_425 sd_670_firmware sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9650 sd_615 sd_636 sd_650_firmware sd_625 sd_615_firmware sd_710_firmware msm8909w_firmware mdm9607 msm8996au sd_210 sd_636_firmware sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware mdm9206 sd_652 sd_425_firmware sd_212_firmware sd_850_firmware sd_625_firmware sd_450 sd_712_firmware sd_845 mdm9206_firmware sd_427 sd_430 sd_670 sd_435_firmware mdm9650_firmware sd_710 sdx20_firmware sd_205 sd_210_firmware sd_415_firmware sd_652_firmware msm8909w sd_616_firmware sd_205_firmware sdm660_firmware sd_212 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.38%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:42

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 mdm9650 sdm429 msm8940_firmware snapdragon_high_med_2016_firmware msm8976_firmware msm8996au apq8009_firmware msm8917 sdm670 qcs605_firmware mdm9206 sdm670_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qca8081 mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 msm8909 apq8096au sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware msm8976 msm8953_firmware msm8940 apq8053 apq8096au_firmware msm8917_firmware msm8998 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 9.27%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-347

Improper Verification of Cryptographic Signature

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.63%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, MDM9640, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdx24 sd_636 msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware qca9379_firmware qca6174a sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 qcs605 mdm9640 sd_835_firmware sd_835 qca6574au_firmware sd_210_firmware sd_600 sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 qca6574au sd_210 mdm9607 sd_636_firmware sd_820_firmware qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware qcs405_firmware sd_712_firmware sdm630_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sd_600_firmware sd_205 qca9379 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 9.46%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 mdm9150_firmware sd_855 mdm9640_firmware sd_820a sdx20 sd_670_firmware sd_425 sdm660 sdx24 sd_430_firmware mdm9607_firmware sd_435 mdm9650 sd_636 sd_710_firmware qcs405 sd_625 msm8909w_firmware mdm9607 sd_210 sd_636_firmware sd_820_firmware sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware mdm9150 qcs605_firmware mdm9206 sd_425_firmware sd_212_firmware sd_850_firmware sdx24_firmware sd_625_firmware sd_450 sd_855_firmware qcs405_firmware sd_712_firmware sd_845 mdm9206_firmware qcs605 sd_427 sd_430 sd_670 sd_435_firmware mdm9650_firmware sd_710 sdx20_firmware sd_205 sd_210_firmware msm8909w sd_205_firmware sdm660_firmware sd_212 mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.21% / 11.98%

||

7 Day CHG~0.00%

Published-22 Jul, 2019 | 13:47

Updated-04 Aug, 2024 | 18:42

Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MDM9640, MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SDM439, SDM630, SDM660, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 sd_632 mdm9640_firmware sd_820a sd_439 sd_670_firmware sd_425 sd_429 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_636 sd_710_firmware sdm439 qcs405 sd_625 sdm630 msm8909w_firmware mdm9607 sd_636_firmware sd_450_firmware sd_845_firmware sd_439_firmware sd_820a_firmware qcs605_firmware sd_429_firmware sd_425_firmware sd_850_firmware sdx24_firmware sd_625_firmware sd_450 sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sd_845 qcs605 sd_427 sd_430 sd_670 sd_435_firmware sd_632_firmware sd_835_firmware sd_710 sd_835 sdx24 msm8909w sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.8||HIGH

EPSS-0.21% / 11.10%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9640, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM660, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 sd_855 sd_730_firmware mdm9640_firmware sd_675 sd_670_firmware sd_425 sdm660 sdx24 sd_430_firmware sd_710_firmware sd_435 sd_636 qcs405 sd_625 sd_636_firmware sd_450_firmware sd_845_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_730 sd_665 sd_850_firmware sdx24_firmware sd_625_firmware sd_450 sd_855_firmware qcs405_firmware sd_712_firmware sd_845 sd_427 qcs605 sd_430 sd_670 sd_435_firmware sd_710 sd_665_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.21% / 11.10%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS404, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 sd_855 sd_670_firmware sd_425 sdm660 sd_430_firmware qcs404_firmware sd_435 sd_636 sd_710_firmware sdm630 qcs405 sd_625 ipq8074_firmware sd_820_firmware sd_636_firmware sd_820 sd_450_firmware sd_845_firmware qca8081 qcs605_firmware sd_425_firmware qcs404 sd_850_firmware sd_625_firmware ipq8074 sd_450 qcs405_firmware sd_712_firmware sdm630_firmware sd_8cx_firmware sda660_firmware sd_845 sd_8cx qcs605 sd_427 sd_430 sd_670 sd_435_firmware sd_835_firmware sd_710 sd_835 sda660 qca8081_firmware sdm660_firmware sd_855_firmware Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.24% / 15.21%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_600 sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.18% / 8.01%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-04 Aug, 2024 | 18:42

Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 855, SDA660, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 mdm9150_firmware sd_855 sd_820a msm8996au_firmware sdx20 sd_415 sd_616 sd_670_firmware sdm660 sdx24 mdm9607_firmware sd_615 mdm9650 sd_636 sd_710_firmware qcs405 sd_615_firmware msm8909w_firmware mdm9607 msm8996au sd_210 sd_636_firmware sd_820_firmware sd_820 sd_820a_firmware mdm9150 qcs605_firmware sd_212_firmware sdx24_firmware qcs405_firmware sd_712_firmware sda660_firmware qcs605 sd_670 mdm9650_firmware sd_710 sdx20_firmware sd_205 sda660 sd_210_firmware sd_415_firmware msm8909w sd_616_firmware sd_205_firmware sdm660_firmware sd_212 sd_855_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-732

Incorrect Permission Assignment for Critical Resource

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.72%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:42

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8016, APQ8096AU, APQ8098, MDM9205, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sa6155p_firmware sdm636_firmware msm8996au_firmware apq8098_firmware sdm845 msm8998_firmware sdm660 apq8016_firmware sdm630 sdx24 sm8250_firmware sc8180x_firmware qcs405 sm7150_firmware sdm710 sm6150 msm8996au sdm710_firmware sm7150 sa6155p sdm670 sxr2130 qcs605_firmware sc8180x sdm670_firmware sm8150_firmware sdx24_firmware sxr2130_firmware apq8096au sdm636 qcs405_firmware sda845_firmware sdm630_firmware apq8098 mdm9205_firmware sda660_firmware mdm9205 apq8016 qcs605 apq8096au_firmware sm6150_firmware sm8250 msm8998 sm8150 sdm850 sda660 sxr1130_firmware nicobar_firmware sxr1130 sdm660_firmware sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.62%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 18:42

Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8098, IPQ8074, MDM9150, MDM9650, MDM9655, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCA8081, QCN7605, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 sm7150 msm8917 sdm670 qcs605_firmware sdm670_firmware ipq8074 sdm636 sda845_firmware apq8098 qcn7605 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware sda660 sdx55_firmware sxr1130_firmware qca8081_firmware sxr1130 apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9655_firmware ipq8074_firmware sdm710 qm215 apq8017_firmware sdm710_firmware qcn7605_firmware qca8081 mdm9150 msm8937 sm8150_firmware mdm9655 sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware sdx55 msm8940 apq8053 msm8953_firmware sm6150_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.38%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:49

Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sdm670_firmware qcs404 sdx24_firmware sm8150_firmware sxr2130_firmware sda845_firmware sdm845 mdm9205_firmware sdx24 mdm9205 qcs404_firmware qcs605 sdx55 sm7150_firmware sm6150_firmware sdm710 sm6150 sm8150 sdm850 sdm710_firmware sxr1130_firmware sdx55_firmware sm7150 sxr1130 sdm670 sxr2130 qcs605_firmware sda845 sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.38%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ4019, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS404, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, Snapdragon_High_Med_2016, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware ipq4019_firmware mdm9206 sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware qca8081 mdm9150 msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware qm215_firmware ipq4019 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.38%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9205, MDM9640, MSM8996AU, QCA6574, QCS605, Qualcomm 215, SD 425, SD 427, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9640_firmware sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 sd_636 snapdragon_high_med_2016_firmware qca6574 msm8996au sd_820 sd_450_firmware sd_845_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_8cx_firmware mdm9205 sd_845 qcs605 qca6574_firmware mdm9640 sd_835_firmware sd_835 sda660 sxr1130_firmware sxr1130 sd_665_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sd_425 sdm660 sdm630 sd_710_firmware sd_435 sd_625 sd_820_firmware sd_636_firmware sd_439_firmware qualcomm_215_firmware sd_429_firmware sd_730 snapdragon_high_med_2016 sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware mdm9205_firmware sda660_firmware sd_8cx sd_427 sd_670 sd_435_firmware sd_710 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.38%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:49

While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCS404, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, Snapdragon_High_Med_2016, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware qcs404 sdm636 sda845_firmware apq8098 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware sxr1130 apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.63%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-04 Aug, 2024 | 18:42

Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 820, SD 820A, SD 845 / SD 850, SDM439, SDM660, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 sd_820a msm8996au_firmware sd_439 sd_429 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware 215_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware sd_632_firmware mdm9650_firmware sd_210_firmware sd_415_firmware sd_652_firmware msm8909w sd_616_firmware sd_205_firmware sd_415 sd_650_firmware sd_212 sd_427_firmware sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_625 sd_210 mdm9607 sd_636_firmware sd_820_firmware qm215 215 sd_439_firmware mdm9150 sd_429_firmware sd_212_firmware sd_850_firmware sdm439_firmware qm215_firmware sd_427 sd_430 sd_435_firmware sdx20_firmware sd_205 sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.19% / 8.60%

||

7 Day CHG~0.00%

Published-01 Apr, 2022 | 04:40

Updated-04 Aug, 2024 | 00:33

Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto

Vendor-Qualcomm Technologies, Inc.

Product-qca6574au sa8155p sa8155p_firmware qca6696_firmware qca6574au_firmware qca6696 Snapdragon Auto

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.21% / 11.10%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-04 Aug, 2024 | 18:42

Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 sd_850 sd_855 sd_850_firmware sd_675 sd_712_firmware sd_8cx_firmware sd_670_firmware sd_845 sd_8cx sd_710_firmware qcs605 sd_670 sm7150_firmware sd_835_firmware sd_710 sd_835 sxr1130_firmware sd_845_firmware sm7150 sxr1130 qcs605_firmware sd_675_firmware sd_855_firmware Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.16% / 5.76%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:50

Updated-04 Aug, 2024 | 00:33

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware wsa8830 mdm9640_firmware qcs2290_firmware mdm9628_firmware mdm9650 qcs4290 wcn3950_firmware mdm9250 qcs2290 apq8009_firmware msm8917 wcd9370 sd632 wcn3990_firmware msm8108 qca9377 wcn3998 sdw2500_firmware msm8108_firmware wcn3950 sm4125 mdm9628 wcd9326_firmware mdm9206_firmware wcn3615_firmware wcn3660b sd450_firmware sd662 sd460_firmware apq8037 qca6320_firmware qca6584 qca6574au_firmware wcn3680b_firmware wcd9375_firmware sdx12_firmware wcn3615 wcn3998_firmware msm8909w apq8009w_firmware wcn3610_firmware apq8053_firmware qca6564au_firmware sd680_firmware qca6310 msm8208 qca9367_firmware sd429 qca9367 sd662_firmware mdm9607_firmware sd821 wcn3988_firmware sd429_firmware wcd9340 apq8017_firmware wsa8810_firmware qualcomm215_firmware sw5100 sd680 wcd9326 wcd9335 msm8937 msm8209_firmware qca6174a_firmware mdm9250_firmware qcs4290_firmware wcd9341 wcn3660_firmware wcn3910_firmware wcd9375 msm8953_firmware wsa8830_firmware msm8917_firmware sd210 wcn3620_firmware sd820 wcn3988 wsa8815_firmware wsa8835_firmware wcn3620 apq8017 msm8208_firmware qca6564a sd450 wcn3610 msm8608 qcm2290_firmware mdm9640 wcn3990 sdm429w msm8996au_firmware sw5100p wcd9330 qca6564au msm8940_firmware msm8909w_firmware qca6574 msm8996au sd632_firmware sdm429w_firmware wsa8835 qualcomm215 qca6574a mdm9206 qca9379_firmware qca6174a qca6310_firmware wcd9335_firmware wcn3980 sd439_firmware qca6574_firmware wcd9340_firmware sm4125_firmware wsa8815 wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd835 msm8209 wcn3980_firmware apq8009 sd460 wcd9330_firmware msm8920 msm8953 sd821_firmware qcm4290 wcn3680_firmware msm8920_firmware qca6574au mdm9607 qca6564a_firmware apq8009w wcd9341_firmware qcm4290_firmware wsa8810 sw5100p_firmware sd210_firmware mdm9150 wcn3680b sd835_firmware apq8096au sd820_firmware msm8608_firmware wcd9370_firmware sdw2500 msm8940 apq8053 apq8096au_firmware apq8037_firmware sd439 sdx12 sw5100_firmware wcn3660 qca9379 qcm2290 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index