ByteOS

Snapdragon Mobile, Snapdragon Wear

Product

Versions

Affected

MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845

Problem Types

Type	CWE ID	Description
text	N/A	Use After Free in RIL

Type: text

CWE ID: N/A

Description: Use After Free in RIL

References

Hyperlink	Resource
https://source.android.com/security/bulletin/2018-04-01	x_refsource_CONFIRM
http://www.securityfocus.com/bid/103671	vdb-entry x_refsource_BID

Hyperlink: https://source.android.com/security/bulletin/2018-04-01

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/103671

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://source.android.com/security/bulletin/2018-04-01	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/103671	vdb-entry x_refsource_BID x_transferred

Hyperlink: https://source.android.com/security/bulletin/2018-04-01

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.securityfocus.com/bid/103671

Resource:

vdb-entry

x_refsource_BID

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:11 Apr, 2018 | 15:29

Updated At:15 May, 2018 | 13:18

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.0

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

>>msm8909w_firmware>>-

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

>>msm8909w>>-

cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*

>>sd_210_firmware>>-

cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*

>>sd_210>>-

cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*

>>sd_212_firmware>>-

cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*

>>sd_212>>-

cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*

>>sd_205_firmware>>-

cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*

>>sd_205>>-

cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*

>>sd_450_firmware>>-

cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*

>>sd_450>>-

cpe:2.3:o:qualcomm:sd_615_firmware:-:*:*:*:*:*:*:*

>>sd_615_firmware>>-

cpe:2.3:h:qualcomm:sd_615:-:*:*:*:*:*:*:*

>>sd_615>>-

cpe:2.3:o:qualcomm:sd_616_firmware:-:*:*:*:*:*:*:*

>>sd_616_firmware>>-

cpe:2.3:h:qualcomm:sd_616:-:*:*:*:*:*:*:*

>>sd_616>>-

cpe:2.3:o:qualcomm:sd_415_firmware:-:*:*:*:*:*:*:*

>>sd_415_firmware>>-

cpe:2.3:h:qualcomm:sd_415:-:*:*:*:*:*:*:*

>>sd_415>>-

cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*

>>sd_625_firmware>>-

cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*

>>sd_625>>-

cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*

>>sd_650_firmware>>-

cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*

>>sd_650>>-

cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*

>>sd_652_firmware>>-

cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*

>>sd_652>>-

cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*

>>sd_820_firmware>>-

cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*

>>sd_820>>-

cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*

>>sd_835_firmware>>-

cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*

>>sd_835>>-

cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*

>>sd_845_firmware>>-

cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*

>>sd_845>>-

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov

CWE ID: CWE-416

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/103671	product-security@qualcomm.com	Third Party Advisory VDB Entry
https://source.android.com/security/bulletin/2018-04-01	product-security@qualcomm.com	Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/103671

Source: product-security@qualcomm.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://source.android.com/security/bulletin/2018-04-01

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

1082Records found

CVE-2019-10581

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.39% / 59.54%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, MDM9206, MDM9207C, MDM9607, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8998, Nicobar, QCS605, Rennell, SA6155P, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

CWE ID-CWE-416

Use After Free

CVE-2017-7364

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 35.98%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operation could result in use after free condition.

Product-android All Qualcomm products

CWE ID-CWE-416

Use After Free

CVE-2018-3599

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.16% / 37.42%

7 Day CHG~0.00%

Published-03 Apr, 2018 | 17:00

Updated-17 Sep, 2024 | 00:01

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while notifying a DCI client, a Use After Free condition can occur.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2019-10509

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.88%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sd_625_firmware sd_450 sd_845 qcs605 sd_632_firmware sd_835_firmware sd_835 qca6574au_firmware sda660 msm8909w sd_665_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware sd_425 sdm660 sd_430_firmware sd_710_firmware sd_435 sdm630 qcs405 sd_625 qca6574au sd_820_firmware sd_636_firmware sd_439_firmware sd_429_firmware sd_730 snapdragon_high_med_2016 sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2017-14881

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.20% / 41.81%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 21:00

Updated-16 Sep, 2024 | 22:19

While calling the IPA IOCTL handler for IPA_IOC_ADD_HDR_PROC_CTX in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-13, a use-after-free condition may potentially occur.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2017-18144

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 47.32%

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 18:03

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, while processing the retransmission of WPA supplicant command send failures, there is a make after break of the connection to WPA supplicant where the local pointer is not properly updated. If the WPA supplicant command transmission fails, a Use After Free condition will occur.

CWE ID-CWE-416

Use After Free

CVE-2017-18140

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 47.32%

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 19:52

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, when processing a call disconnection, there is an attempt to print the RIL token-id to the debug log. If eMBMS service is enabled while processing the call disconnect, a Use After Free condition may potentially occur.

CWE ID-CWE-416

Use After Free

CVE-2017-18145

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.21% / 42.90%

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 16:53

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, while the DPM native process is processing framework events, the iterator pointer is deleted after processing an event. When processing subsequent events, a Use After Condition will occur.

CWE ID-CWE-416

Use After Free

CVE-2017-18136

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 47.32%

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 17:17

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, in the omx aac component, a Use After Free condition may potentially occur.

CWE ID-CWE-416

Use After Free

CVE-2017-14877

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.20% / 41.81%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 21:00

Updated-16 Sep, 2024 | 19:09

While the IPA driver in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-08-31 is processing IOCTL commands there is no mutex lock of allocated memory. If one thread sends an ioctl cmd IPA_IOC_QUERY_RT_TBL_INDEX while another sends an ioctl cmd IPA_IOC_DEL_RT_RULE, a use-after-free condition may occur.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2017-14918

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 31.78%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the GPS location wireless interface, a Use After Free condition can occur.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2017-14915

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.83% / 74.30%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-17 Sep, 2024 | 02:47

In Android before 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835, accessing SPCOM functions with a compromised client structure can result in a Use After Free condition.

Product-sd_652 sd_625 sd_835_firmware sd_625_firmware sd_650 sd_835 sd_652_firmware sd_650_firmware Snapdragon Mobile

CWE ID-CWE-416

Use After Free

CVE-2017-11006

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 31.78%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during positioning.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2017-11011

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 47.32%

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-17 Sep, 2024 | 01:46

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820, SD 835, a Use After Free condition can occur in a communication API.

CWE ID-CWE-416

Use After Free

CVE-2017-11005

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 31.78%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during a deinitialization path.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2016-10385

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.32%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists in IMS RCS.

Product-android Snapdragon Mobile

CWE ID-CWE-416

Use After Free

CVE-2018-13925

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.46% / 64.07%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 09:21

Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 sd_632 sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_600 sd_652_firmware sd_415_firmware sxr1130 msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 sd_625 qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2021-1976

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.39% / 59.54%

7 Day CHG~0.00%

Published-17 Sep, 2021 | 07:05

Updated-03 Aug, 2024 | 16:25

A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-qca9377_firmware fsm10055 sm7250 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 ipq4028_firmware qcn5550 qca8337 ar9380 ipq8173_firmware qca9561_firmware qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 qcn5064 sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware qca9987_firmware sd632 sa415m wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware ipq8076a mdm9628 wcn3660b sd450_firmware sd460_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sdx20m qca6438_firmware qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware wcn3999 qrb5165_firmware ipq5028 qca7500 ipq8072_firmware ipq4029_firmware qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 wcd9340 sdm830_firmware sd765g qualcomm215_firmware fsm10056_firmware qca6436 wcn6851 qcn3018_firmware sa6155p qcs603_firmware mdm9250_firmware wcn3660_firmware qca9888_firmware qcn6122 ipq8068_firmware qca6696_firmware wcd9371 sd870_firmware sd750g qca9988_firmware qcn5154_firmware wcn3910_firmware sa8150p ar7420_firmware wsa8830_firmware qca9992_firmware sd865_5g_firmware sd855_firmware wcn3988 qca6438 sa8195p_firmware qcn5121 qcn5022_firmware wcn6750_firmware qca9898 sd450 ipq4028 wcn3610 mdm9640 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware sdm429w wcd9330 msm8996au_firmware ipq8076a_firmware qca7550_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qca9558 sd670_firmware qca6574 sd632_firmware csr8811_firmware qca7520_firmware wcd9380 qualcomm215 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware ipq4019_firmware sdx50m_firmware sdx24_firmware qca8072_firmware qca9985 qcn9012_firmware qca6174 qca6430_firmware sd439_firmware qcn5052_firmware qca6335_firmware ipq6018_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware wcn3910 qca6320 mdm9650_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware wcn3680 qca9984 ipq6028 ipq8064 sd835 pmp8074 qcn9024 sd730 qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware wcn6740_firmware msm8953 qcn5064_firmware sd678_firmware apq8064au_firmware ar8031_firmware wcn3680_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 ipq8070 qca9896 qcn5502 qca9994 qca9887_firmware qca9980 sd670 qcn9024_firmware ipq8174_firmware apq8009w sd_636_firmware qca6564a_firmware qca9880 qcm4290_firmware sd480 sd870 qcn5121_firmware sd210_firmware qcs610_firmware sa6145p ipq6018 qcn3018 qca9886_firmware sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware sa8145p sdm630_firmware qca6391_firmware qca4024 wcd9370_firmware sd780g_firmware sdx55 sd888_firmware apq8053 qcn5021_firmware csra6640 sa8155p sd675 sd439 qca9531_firmware wcn3660 ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware mdm9150_firmware qcn5500 wsa8830 qca9561 sd678 qcn9070 sa8145p_firmware qca7520 qcs2290_firmware fsm10056 sm7250_firmware csrb31024 qca9563_firmware mdm9628_firmware mdm9650 sd_636 csra6620 fsm10055_firmware qca9987 qcn9072 qca9880_firmware qca9992 qcs4290 mdm9250 sd765g_firmware qca6420_firmware ipq8069_firmware apq8009_firmware qca6390_firmware sd690_5g ipq6000 qca6174_firmware sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6564 qca6426 qca6584au_firmware qcn9000_firmware qca9984_firmware qca9377 ipq5018 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcn3615_firmware qca9563 ipq8074a sd662 qcn5124_firmware qca9982 sa8155 qca6320_firmware wcn3680b_firmware qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware qca6595au wcn3999_firmware wcn3610_firmware qca6436_firmware ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qca6310 ipq8174 sd429 sa515m_firmware qca9990 sdxr2_5g qcn5052 qca9367 sdm630 mdm9607_firmware sa415m_firmware wcn3988_firmware qcn9074 sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware wsa8810_firmware qca6694 qca7550 sd765_firmware qca8081 qca9982_firmware qcn6023 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 ar8035 sm6250_firmware csr8811 apq8064au ipq4019 qca6694_firmware msm8953_firmware qcn9100_firmware msm8917_firmware sd210 wcn3620_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a qca9988 qcm6125_firmware qca9882 qca8072 qcm2290_firmware qcn9000 sd_675 sd780g sd865_5g qca6595 ar9380_firmware sdx24 qcn9012 sd888 qca9558_firmware qca9896_firmware msm8909w_firmware ipq8065_firmware qcx315_firmware qcn6122_firmware msm8996au sd665_firmware sdm429w_firmware wsa8835 sd888_5g sm6250p qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware mdm9206 qca9889 qca6174a qca9888 qca6310_firmware sm7325 ipq8074 qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 qcn5502_firmware ar7420 sd855 sm4125_firmware sd665 ipq8076 sd765 qca9887 qca6574a_firmware qcn5021 ipq8069 qcn5152 sd768g_firmware apq8009 sd460 qca6391 sdxr1_firmware ipq6005 aqt1000_firmware qcn9100 mdm9626 qcm4290 csrb31024_firmware sdx50m qca9882_firmware qcn9070_firmware sdx20 sd480_firmware ipq6028_firmware ipq8072a_firmware sd_455 mdm9626_firmware qca9531 ipq8074_firmware qca6574au qca9889_firmware sa8155p_firmware mdm9607 qcn5122 sd205_firmware sdx20m_firmware qcm6125 wsa8810 qcn5500_firmware mdm9150 wcn6856 qcn5022 wcn3680b sd835_firmware qca6564_firmware sd768g ipq6010_firmware wcn6740 qca6696 sd845_firmware sdw2500 sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn9072_firmware sdm830 ipq6000_firmware sd720g_firmware sdx12 ipq8071_firmware qcs410_firmware qcn9074_firmware ipq4029 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-416

Use After Free

CVE-2014-10046

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 47.32%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 03:02

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, use after free vulnerability when the PDN throttle info block is freed without clearing the corresponding active timer.

CWE ID-CWE-416

Use After Free

CVE-2020-11272

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.39% / 59.54%

7 Day CHG~0.00%

Published-22 Feb, 2021 | 06:25

Updated-04 Aug, 2024 | 11:28

Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qfs2580 qca9377_firmware qpm5679_firmware pmd9607_firmware qca8337 qdm5579 qfs2608_firmware qfs2530 qpm8870_firmware qln1030 pm6125 qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpm5541_firmware qpa5581_firmware sa6155 pm7150l qcc1110_firmware qpa8821 apq8076 wtr5975_firmware qpa5580_firmware sa415m wcn3998 wcn3950 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qfe4320 qsw8574_firmware sd460_firmware smb2351_firmware pm8953_firmware sd6905g qpa4360_firmware wcn3998_firmware qfe2520_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 pm6150a qpm6670_firmware qca9367_firmware pm660_firmware pm8150b sa8155_firmware qfe2101 qca6430 qat3522 pmr735a wcd9306_firmware wcd9340 sd765g sdr660 qfs2630_firmware sdr865 mdm9250_firmware qdm5620_firmware smb1358 smr545 qca6696_firmware qln5020 smb1350 pmm855au_firmware sd_8cx wtr3950 sa8150p pm6350 qdm5621 qfe3340 qat3514_firmware pm640p_firmware qcn7606_firmware qat5516_firmware pm6150l sd450 sd8885g pm855l_firmware qtc410s wcn3991 qpa8801 sdm429w pm8150l_firmware qat5533_firmware sdx55m_firmware sdxr25g qpa8673_firmware pm6150 smb1354_firmware qca6574 sd632_firmware qfs2630 qpa8842 pmm8996au wcd9380 qualcomm215 qcs410 qpm5579_firmware qfe4309_firmware pmk8350_firmware smb1381 pm855p_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sd439_firmware sdxr25g_firmware qdm2301 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware qdm5621_firmware qdm2301_firmware msm8937_firmware qpm6375 sd_8c_firmware wcn3980_firmware wcn6740_firmware pm8008 pm8350b_firmware qtm525_firmware qpm5621_firmware qln1021aq_firmware qpa6560_firmware qpa8802_firmware qfe4308_firmware qpm5621 qpm6582 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcm4290_firmware qcn7605_firmware pm8150l qcs610_firmware sa6145p pm215 ar8031 qpm5577 wtr2965 sd820_firmware qca6391_firmware pmx20_firmware pm8150 pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 csra6640 pm8350bhs qat3555_firmware pmi8994 qpa8803_firmware wcn3660 qca9379 pm855b smb2351 qln1031 qcn7606 qpm5870 pm8909 wsa8830 pm660 qet6110_firmware qdm5579_firmware qpm6325 pm6125_firmware qbt1500 qpa5581 csrb31024 mdm9650 pmx24_firmware qbt1500_firmware qpm5870_firmware pmk8001 qcs4290 qet6100 pmm855au mdm9250 qca6420_firmware smb1394_firmware apq8009_firmware smb1396 pm7150a sd675_firmware pm8350 qca6564 qpa4361_firmware pm8350c_firmware qpa5461_firmware qca6426 wcn3990_firmware qca9377 qpm5641 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware wcd9326_firmware wcn3615_firmware wtr2955 pm7250_firmware qdm5620 qln1021aq pmk8002_firmware qsw6310_firmware sa8155 qln1031_firmware qdm4650_firmware sdx55_firmware pmm6155au_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware qsm7250_firmware qpm6670 pm7150l_firmware wcd9306 qca6584au qpm4641 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 qca9367 mdm9655_firmware qdm4643 qfs2530_firmware sa415m_firmware pmx55 qpm4641_firmware wcn3988_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware pm8953 qat5515 qca6694 qpm5677 qat3514 wcd9326 wcd9335 pm6350_firmware pm8004_firmware sdr8150_firmware qcs4290_firmware pm439 qtc800h_firmware pmk7350_firmware qpm5620 qpm4630 qca6390 wcd9375 sd750g_firmware aqt1000 pmm8195au qln4642 msm8917_firmware qpm5677_firmware sdx20_firmware wsa8815_firmware wtr3925_firmware pmi8937 smr525_firmware pmk7350 sdw3100 qpm8820_firmware qfe4301_firmware apq8017 qpm6621_firmware pmx55_firmware wtr2955_firmware qfe4373fc_firmware qca6595 pm8150_firmware smb1398_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qpa4361 qpm4640_firmware mdm9206 qpm5577_firmware qdm5679_firmware pm8350c smr525 qfe4305_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware wtr3950_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware qca6175a sd765 pmx20 pmd9607 qca6574a_firmware qpm4630_firmware qat3555 apq8009 qpa5461 wtr2965_firmware csrb31024_firmware qfs2608 qln1036aq qtc801s qpm5641_firmware pm8008_firmware sdx20m_firmware qpm6621 pmr735a_firmware pmw3100 qca6564_firmware sdr8250 sd768g qln1030_firmware smb1350_firmware wcn6740 pmw3100_firmware pm8004 pm640l pmk8002 sdw2500 apq8096au_firmware smb1357 qcs410_firmware qca6175a_firmware qpa5580 qpm5579 qfe2550 qcs610 pmi8996 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 qpm6585_firmware qat3519 qbt2000_firmware qtc800h sa8150p_firmware sdr8250_firmware msm8917 csra6620_firmware smr546_firmware wtr3905 qdm5671 csra6640_firmware pmc1000h qpm4650_firmware qat3518 sd632 sdr425_firmware smr526_firmware pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware qca4020 qdm5652 qca6574au_firmware qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware msm8909w sdx20m sdr735g wcn3999 qdm3301_firmware pm8996 qsm7250 sd662_firmware qcc1110 qcs405 smb1360 qualcomm215_firmware qdm2308_firmware pm439_firmware qca4020_firmware qca6436 sa6155p wcn6851 qpa6560 msm8937 wcn3660_firmware wcd9341 pmi8952 qdm4643_firmware mdm9655 pm8937_firmware qca6431 sm7350_firmware qet4100_firmware sd750g qfe4320_firmware qdm3302 wcn3910_firmware qpm5657 qpm5875_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 wtr3925 sa8195p_firmware smb1390 sdw3100_firmware qet4100 wcn3610 qpa8686_firmware qpm6585 qca8337_firmware sda429w_firmware wcd9380_firmware smb1355 qln4650 wcd9330 sdr735g_firmware pm8350bhs_firmware wgr7640 qat5568 qet5100 qdm5671_firmware qpa8801_firmware qca6564au qtm527_firmware wcn6856_firmware qet4101_firmware pm7250b qln4642_firmware pmk8001_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware pm8996_firmware qet4200aq_firmware sdr735 smb1395 smr526 wtr5975 qca6430_firmware pmk8003 qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 pm7350c_firmware qsw8573 wcn3910 mdm9650_firmware smb1394 qca6426_firmware pm8350_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 wcd9330_firmware sdx55m qca6421_firmware wtr3905_firmware qfe4373fc msm8953 qat3518_firmware qfe2520 qsw8574 sd821_firmware sd6905g_firmware ar8031_firmware wcn3680_firmware pm855l wcn6851_firmware qdm5670_firmware sd8655g pm7150a_firmware pm8150b_firmware qfe4302 smr545_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware sd8885g_firmware sd210_firmware qdm5677 pm855_firmware qdm2302 pmm6155au pm855b_firmware apq8096au qca6595_firmware qcs405_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware pmi8996_firmware qln4650_firmware qpm5875 qet5100m sa8155p sd675 sd439 qet4101 pm8952 qat3516 qpm5658 ar8035_firmware qpm5658_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware qln5030 pmi632 qpa2625_firmware pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qpa5373 qpm4621 smb1360_firmware qet6100_firmware sdr660g sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware wcd9370 sdr425 pmr525_firmware qca6584au_firmware apq8076_firmware qfe3340_firmware pmi632_firmware sd_8cx_firmware qcn7605 qpm5541 qat5516 sd662 qpa8821_firmware qfe4308 sdr660g_firmware pm8350bh pm3003a wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware sm7350 smb1354 qca6564au_firmware qdm2305 sa6155p_firmware qpm8820 pm8937 qln5020_firmware smb1398 sd821 sa6145p_firmware apq8017_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware ar8035 qpa8673 qca6694_firmware qdm2310 qfe2550_firmware msm8953_firmware qln5030_firmware pm8952_firmware sda429w sd210 wcn3620_firmware qfe4302_firmware sd820 smb1396_firmware wcn6850_firmware wcn3620 wsa8835_firmware qca6564a smr546 pmx24 qet6110 pmi8952_firmware qln5040 qpm8895 qpm5670 wcn3990 qtm527 pmk8350 qdm3302_firmware pmi8994_firmware pm8350b qdm2307_firmware msm8909w_firmware wsa8835 sdm429w_firmware qpm5657_firmware sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware qpm4640 pm8956_firmware pm7350c qet5100m_firmware qpm4650 qtm525 sd855 qfe4305 pm640p sd768g_firmware sdr865_firmware pm8250_firmware sd460 qca6391 smb1351 smb1357_firmware aqt1000_firmware pm215_firmware qpm8895_firmware qcm4290 pm640a sdr8150 sdx20 pm8916 smb1395_firmware qdm4650 pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 sd8655g_firmware wcd9341_firmware wsa8810 qtc410s_firmware smb231_firmware qat5568_firmware qdm2308 qat3550 wtr4905_firmware wcn6856 qdm5679 sd_8c wcn3680b pm3003a_firmware qca6696 qfe4301 smb1381_firmware qpa2625 pmm8195au_firmware sm7250p qpm4621_firmware pm8956 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2018-13886

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.59%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 09:14

Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sm7150_firmware sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sm7150 sd_410 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 mdm9635m mdm9615 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_600 sd_652_firmware sd_415_firmware sxr1130 msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_412 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware sdm630 sd_625 qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_412_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_430 sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_410_firmware sd_600_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2018-13904

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.39% / 59.79%

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 09:14

Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 8CX, SXR1130.

CWE ID-CWE-20

Improper Input Validation

CVE-2018-13898

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.29% / 51.85%

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 09:14

Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 mdm9150_firmware sd_632 sd_675 sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware sd_450_firmware sd_845_firmware sd_410 qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sdx24_firmware sd_625_firmware sd_450 sd_8cx_firmware sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sxr1130 sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware sd_412 qualcomm_215 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 qcs405 sd_625 sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware qcs405_firmware sd_712_firmware sd_412_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 sd_427 sd_670 sd_435_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-11193

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.40% / 60.06%

7 Day CHG~0.00%

Published-12 Nov, 2020 | 10:00

Updated-04 Aug, 2024 | 11:28

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8064AU, APQ8096, APQ8096AU, APQ8096SG, APQ8098, MDM9206, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QCS6125, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA429W, SDA640, SDA660, SDA670, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM455, SDM630, SDM632, SDM636, SDM640, SDM660, SDM670, SDM710, SDM830, SDM845, SDW2500, SDX20, SDX20M, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330

Product-sm7250 sm6250p_firmware qcs610 sm6125 sdm640 sdm450_firmware sdm632 sm7250_firmware mdm9650 qcs4290 sa6155 apq8009_firmware msm8917 sdm670 sm8350 qcs605_firmware qcs6125_firmware apq8096sg sm6115 sm7150p sda845_firmware sdw2500_firmware apq8098 sm4250 sm4125 mdm9206_firmware qsm8350_firmware qsm8350 apq8037 sa8155 msm8905_firmware sda660 sdx55_firmware sa6155_firmware sxr1130 msm8909w sm7250p_firmware apq8009w_firmware sxr2130p apq8053_firmware sda845 sdx20m sa6155p_firmware sxr2130p_firmware sda640 sdm450 sdm636_firmware apq8098_firmware qcs6125 msm8998_firmware sa8155_firmware sdm630 sm8250_firmware qcs405 msm8996sg_firmware sa6145p_firmware qm215 sm4250_firmware sm6250 sdm830_firmware apq8017_firmware sdm710_firmware sxr1120 sa6155p qcs603_firmware msm8937 msm8905 sm8350p_firmware qcs4290_firmware sm8150_firmware msm8909 sm7150p_firmware sxr2130_firmware apq8064au sm6250_firmware msm8953_firmware sm6150_firmware sda429w msm8917_firmware msm8998 sm7225_firmware sdx20_firmware sm8150 sdm640_firmware apq8017 msm8996 sxr1120_firmware sm6125_firmware sm8150p qcm6125_firmware sm6115_firmware sda429w_firmware apq8096_firmware sdm429w msm8996au_firmware sdm632_firmware wcd9330 sdm845 apq8096 sdx55m_firmware sdm439 sm6150p sm6115p_firmware sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware apq8096sg_firmware sm7150 sm6250p qcs410 sda640_firmware sxr2130 sdx50m_firmware mdm9206 sm8350p sdm670_firmware sdm636 sda670 sm7225 qcs605 sm6115p sm4125_firmware sdm455_firmware msm8937_firmware mdm9650_firmware sdm429_firmware sxr1130_firmware apq8009 wcd9330_firmware msm8909_firmware sdx55m sm6150p_firmware sdm455 sm6350 sm7125 sm4250p_firmware msm8920 msm8953 apq8064au_firmware qcm4290 msm8996sg sdx50m sdx20 sm8350_firmware qcs603 sdm660 msm8920_firmware sm6350_firmware sa8155p_firmware sdm710 apq8009w sda670_firmware qcm6125 qcm4290_firmware sdx20m_firmware qcs610_firmware msm8996_firmware sa6145p sm4250p apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware sm7125_firmware sdw2500 sdx55 msm8940 apq8053 apq8096au_firmware sa8155p sm8250 sm8150p_firmware apq8037_firmware sm7250p sdm830 qcs410_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

CVE-2020-11299

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.59%

7 Day CHG~0.00%

Published-17 Mar, 2021 | 06:01

Updated-04 Aug, 2024 | 11:28

Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qfs2580 qca9377_firmware qpm5679_firmware sm6250p_firmware pmd9607_firmware qdm5579 qfs2608_firmware qfs2530 qpm8870_firmware qln1030 pm6125 qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpa5581_firmware sa6155 pm7150l qpa8821 pm8998_firmware wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qsm8350_firmware qfe4320 qsw8574_firmware qsm8350 sd460_firmware pm8953_firmware qpa4360_firmware wcn3998_firmware qfe2520_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 pm6150a qpm6670_firmware qca9367_firmware pm660_firmware pm8150b sa8155_firmware qfe2101 qca6430 qat3522 pmr735a wcd9340 sdm830_firmware sd765g sdr660 qfs2630_firmware sdr865 qdm5620_firmware smb1358 smr545 qca6696_firmware qln5020 wcd9371 sd870_firmware smb1350 pmm855au_firmware wtr3950 sa8150p pm6350 qdm5621 qfe3340 qtc800s qat3514_firmware sd660 sd865_5g_firmware pm640p_firmware sd660_firmware wcn6750_firmware qat5516_firmware pm6150l sd450 pm855l_firmware qtc410s wcn3991 qpa8801 sdm429w pm8150l_firmware qat5533_firmware sdx55m_firmware qpa8673_firmware pm6150 smb1354_firmware sd670_firmware qca6574 sd632_firmware qfs2630 qpa8842 sdr052_firmware pmm8996au wcd9380 qualcomm215 qln4640 qcs410 smb1380_firmware qfe4309_firmware pmk8350_firmware smb1381 pm855p_firmware sd690_5g_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sd439_firmware qdm2301 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware qdm5621_firmware qdm2301_firmware msm8937_firmware sd835 wcn3980_firmware sd730 pm660l_firmware pm6250_firmware wcn6740_firmware pm8008 pm8350b_firmware qtm525_firmware pme605_firmware pme605 sd678_firmware apq8064au_firmware qpm5621_firmware qcs603 rsw8577 qpa6560_firmware qpa8802_firmware qln4640_firmware qfe4308_firmware qpm5621 qpm6582 sd670 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcm4290_firmware pm8150l pmi8998_firmware qcs610_firmware sa6145p pm660a_firmware pm215 ar8031 wtr2965 sdm630_firmware sd820_firmware qca6391_firmware pmx20_firmware pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 csra6640 pm8350bhs qat3555_firmware pmi8994 qpa8803_firmware wcn3660 qca9379 pm855b qpm5870 pm8909 wsa8830 pm660 qet6110_firmware qdm5579_firmware pm6125_firmware qbt1500 qpa5581 mdm9650 sd_636 fsm10055_firmware qbt1500_firmware qpm5870_firmware pmk8001 qcs4290 qet6100 pmm855au qca6420_firmware smb1394_firmware apq8009_firmware sd690_5g smb1396 pm7150a sd675_firmware pm8350 qca6564 qpa4361_firmware pm8350c_firmware qpa5461_firmware qca6426 wcn3990_firmware qca9377 qpm5641 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware wtr2955 rgr7640au_firmware pm7250_firmware sdr845_firmware qdm5620 smb1380 pmk8002_firmware qsw6310_firmware sa8155 qdm4650_firmware sdx55_firmware pmm6155au_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware qsm7250_firmware qpm6670 pm7150l_firmware qpm4641 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 qca9367 sdm630 qdm4643 qfs2530_firmware wcn3988_firmware pmx55 qpm4641_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware pm8953 qat5515 qpm5677 qat3514 wcd9326 wcd9335 pm6350_firmware pm8004_firmware sdr8150_firmware qcs4290_firmware pm439 qtc800h_firmware pmk7350_firmware qpm5620 qpm4630 qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware pmm8195au qln4642 msm8917_firmware qpm5677_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware pmi8937 pm8998 pmk7350 smr525_firmware qpm8820_firmware wtr3925_firmware qfe4301_firmware apq8017 qln1020_firmware qpm6621_firmware pm670a_firmware qcm6125_firmware pmx55_firmware wtr2955_firmware qbt1000_firmware qfe4373fc_firmware sd865_5g qca6595 smb1398_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qpa4361 qpm4640_firmware mdm9206 qdm5679_firmware pm8350c smr525 qca6310_firmware qfe4305_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware wtr3950_firmware sd665 pm6150a_firmware pm6150_firmware sd765 pmx20 pmd9607 qca6574a_firmware qpm4630_firmware qat3555 apq8009 qpa5461 wtr2965_firmware pm670_firmware qfs2608 sd480_firmware qtc801s qpm5641_firmware sd710 pm8008_firmware sdx20m_firmware qpm6621 pmr735a_firmware pmw3100 pmx50 qca6564_firmware sdr8250 sd768g qln1030_firmware smb1350_firmware wcn6740 pmw3100_firmware pm8004 pm640l pmk8002 sdw2500 apq8096au_firmware sd845 sdm830 smb1357 qcs410_firmware qpa5580 fsm10055 qfe2550 sa6150p_firmware qcs610 pmi8996 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 qpm6585_firmware qat3519 qbt2000_firmware qtc800h sa8150p_firmware qcs2290 sdr8250_firmware qca6335 msm8917 csra6620_firmware qcs605_firmware qln1020 sd_675_firmware smr546_firmware qdm5671 csra6640_firmware qpm4650_firmware wtr3905 qat3518 sd632 sdr425_firmware smr526_firmware qpa5460 pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware msm8909w sdx20m pmx50_firmware qpa8675_firmware sdr735g qpa5460_firmware qdm3301_firmware pm8996 qsm7250 qcs6125 sd662_firmware smb1360 qcs405 qualcomm215_firmware rsw8577_firmware qdm2308_firmware fsm10056_firmware pm439_firmware qca4020_firmware qca6436 sa6155p wcn6851 qcs603_firmware qpa6560 msm8937 sdr675_firmware wcn3660_firmware wcd9341 pmi8952 qdm4643_firmware pm8937_firmware qca6431 sm7350_firmware qet4100_firmware sd750g qfe4320_firmware qdm3302 wcn3910_firmware qpm5657 qpm5875_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 wtr3925 sdr052 sa8195p_firmware smb1390 qet4100 wcn3610 qpa8686_firmware qpm6585 sda429w_firmware wcd9380_firmware smb1355 qln4650 qtc800t_firmware wcd9330 msm8996au_firmware sdr735g_firmware pm8350bhs_firmware wgr7640 qat5568 qet5100 qdm5671_firmware qpa8801_firmware qca6564au wcn6856_firmware pm8005_firmware qet4101_firmware pm7250b qln4642_firmware pmk8001_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware pm8996_firmware sdx50m_firmware sdr735 smb1395 pm660l ar8151 smr526 wtr5975 qca6430_firmware pmk8003 qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 pm7350c_firmware qca6335_firmware qsw8573 qcs605 qbt1000 wcn3910 qca6320 mdm9650_firmware smb1394 qca6426_firmware pm8350_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 qpa8675 sdr051_firmware wcd9330_firmware sdx55m pm670a qca6421_firmware wtr3905_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 qsw8574 sd821_firmware ar8031_firmware wcn3680_firmware pm855l wcn6851_firmware qdm5670_firmware pm7150a_firmware pm8150b_firmware qfe4302 sd_636_firmware smr545_firmware qca6564a_firmware qdm2310_firmware sd480 sd870 pm670 sd210_firmware qdm5677 pm8005 pm855_firmware qdm2302 pmm6155au sdxr1 pm855b_firmware apq8096au qca6595_firmware qcs405_firmware qpm6582_firmware pm640l_firmware pmi8996_firmware qln4650_firmware qpm5875 qet5100m sa8155p sd675 sd439 qet4101 qat3516 pm670l qpm5658 qcm2290 qpm5658_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware sd678 sdr051 qln5030 qcs2290_firmware pm4125 fsm10056 pmi632 qpa2625_firmware pm456 pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qpa5373 qpm4621 smb1360_firmware qet6100_firmware pm670l_firmware sdr660g sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware sd730_firmware wcd9370 sdr425 pmr525_firmware qfe3340_firmware ar8151_firmware pmi632_firmware qat5516 sd662 qpa8821_firmware qfe4308 sdr660g_firmware pm8350bh pm3003a qca6320_firmware wcn3680b_firmware qca6595au qca6436_firmware qtc800t sm7350 smb1354 qca6564au_firmware qdm2305 sa6155p_firmware qca6310 qpm8820 pm8937 qpm2630 qln5020_firmware sdxr2_5g smb1398 sd821 sa6145p_firmware sdr675 sm6250 apq8017_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qca6174a_firmware wcd9385 qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware apq8064au qpa8673 qdm2310 qfe2550_firmware msm8953_firmware qln5030_firmware sda429w sd210 wcn3620_firmware qfe4302_firmware sd820 smb1396_firmware wcn6850_firmware wcn3620 wsa8835_firmware qca6564a smr546 qet6110 pmi8952_firmware qcm2290_firmware qln5040 qpm8895 sdr845 qpm5670 wcn3990 sd_675 pmk8350 qdm3302_firmware pmi8994_firmware pm8350b qdm2307_firmware msm8909w_firmware wsa8835 msm8996au sdm429w_firmware qpm5657_firmware sd888_5g sm6250p rgr7640au sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware qpm4640 wcn6750 pm7350c qet5100m_firmware qpm4650 qtm525 wtr6955 sd855 sm4125_firmware qfe4305 wtr6955_firmware pm640p sd768g_firmware sdr865_firmware pm8250_firmware sd460 qca6391 sdxr1_firmware smb1351 smb1357_firmware aqt1000_firmware pm215_firmware qpm8895_firmware pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 sdx20 pm8916 smb1395_firmware qdm4650 pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware smb231_firmware qat5568_firmware qdm2308 qat3550 wtr4905_firmware wcn6856 qdm5679 wcn3680b sd835_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware qpa2625 sa6150p pmm8195au_firmware sm7250p sd720g_firmware qpm4621_firmware pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-11182

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.43% / 62.11%

7 Day CHG~0.00%

Published-09 Jun, 2021 | 05:00

Updated-04 Aug, 2024 | 11:28

Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-qfs2580 qpm5679_firmware sm6250p_firmware qfs2530 qpm8870_firmware qln1030 qpa8688 pm6125 qat5522_firmware wcn3950_firmware pm8150a sc8180x\+sdx55 qdm5670 qca6595au_firmware qpa5581_firmware sa6155 pm7150l qpa8821 pm8998_firmware wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g qsw8573_firmware qsw8574_firmware sd460_firmware smb2351_firmware qpa4360_firmware wcn3998_firmware pm855p qca6420 pm6150a pm660_firmware pm8150b sa8155_firmware qca6430 qat3522 pmr735a wcd9340 sdm830_firmware sd765g sdr660 sdr865 qdm5620_firmware qca6696_firmware qln5020 wcd9371 pmm855au_firmware sm4350_firmware sd_8cx sa8150p pm6350 qdm5621 qtc800s sd865_5g_firmware sd712 pm640p_firmware wcn6750_firmware qat5516_firmware pm6150l pm855l_firmware qtc410s wcn3991 qpa8801 pm8150l_firmware qat5533_firmware sdx55m_firmware qpa8673_firmware pm6150 smb1354_firmware sd670_firmware qca6574 qpa8842 sdr052_firmware wcd9380 qcs410 smb1380_firmware smb1381 pm855p_firmware sd690_5g_firmware pm7250 qpa8803 qdm2301 wcd9340_firmware wsa8815 wcn6850 qdm5621_firmware qdm2301_firmware sd_8c_firmware wcn3980_firmware sd730 pm660l_firmware pm6250_firmware pm8008 qtm525_firmware pme605_firmware pme605 qpm5621_firmware qln1021aq_firmware qcs603 qpa6560_firmware qpa8802_firmware qln4640_firmware qpm5621 qpm6582 sd670 pm8009_firmware qfs2580_firmware qcm4290_firmware pm8150l pmi8998_firmware qcs610_firmware sa6145p wtr2965 qca6391_firmware pm8150 wcd9370_firmware qat3516_firmware sdx55 qat3555_firmware qpa8803_firmware pm855b smb2351 qln1031 qsm8250_firmware wsa8830 pm660 qet6110_firmware pm6125_firmware qbt1500 qpa5581 qbt1500_firmware qcs4290 qet6100 pmm855au qca6420_firmware sd690_5g smb1396 pm7150a sd675_firmware qca6564 qpa4361_firmware qca6426 wcn3990_firmware wcd9385_firmware qdm5650_firmware sdxr2_5g_firmware wcd9326_firmware whs9410 pm7250_firmware sdr845_firmware qdm5620 qln1021aq smb1380 pmk8002_firmware qsw6310_firmware sa8155 qln1031_firmware sdx55_firmware pmm6155au_firmware qat5533 sm7250p_firmware qsm7250_firmware pm7150l_firmware qat5515_firmware pm855 qpm8830_firmware pm8250 qfs2530_firmware wcn3988_firmware pmx55 pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware qpm5677 qat5515 wcd9326 wcd9335 pm6350_firmware pm8004_firmware sdr8150_firmware qcs4290_firmware qtc800h_firmware qpm5620 qca6390 wcd9375 sd750g_firmware aqt1000 sc8180x\+sdx55_firmware pmm8195au sm6250_firmware qln4642 qpm5677_firmware wsa8815_firmware wtr3925_firmware smr525_firmware pm8998 qpm8820_firmware qln1020_firmware pm670a_firmware qcm6125_firmware pmx55_firmware sd865_5g qca6595 pm8150_firmware qpm8830 qat5522 pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qpa4361 qdm5679_firmware smr525 qca6310_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware qca6175a sd765 qca6574a_firmware qat3555 sd850_firmware wtr2965_firmware pm670_firmware qln1036aq qtc801s sd710 pm8008_firmware pmr735a_firmware pmx50 qca6564_firmware sdr8250 sd768g qln1030_firmware pm8004 pm640l pmk8002 sd845 sdm830 qcs410_firmware qca6175a_firmware qpa5580 sa6150p_firmware qcs610 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware pm855a_firmware qtc800h sa8150p_firmware qcs2290 sdr8250_firmware qca6335 qln1020 qcs605_firmware sd_675_firmware qdm5671 pmc1000h qpm4650_firmware qat3518 sdr425_firmware smr526_firmware qpa5460 pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware pm845 qdm5652 qca6574au_firmware qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware wcd9360 pmx50_firmware qpa8675_firmware whs9410_firmware sdr735g qpa5460_firmware qdm3301_firmware qsm7250 qcs6125 sd662_firmware qdm2308_firmware qca6436 wcn6851 sa6155p qcs603_firmware qpa6560 sdr675_firmware pmc7180 wcd9341 qca6431 qet4100_firmware sd750g wcn3910_firmware qpm5657 wsa8830_firmware sd855_firmware qdm5650 wcn3988 wtr3925 sdr052 sa8195p_firmware smb1390 qet4100 qpa8686_firmware qpm6585 wcd9380_firmware smb1355 qln4650 sdr735g_firmware wgr7640 qet5100 qdm5671_firmware qpa8801_firmware qca6564au pm8005_firmware qet4101_firmware pm7250b qln4642_firmware smb1355_firmware pm7250b_firmware smb1351_firmware qet4200aq_firmware sdx50m_firmware sdr735 smb1395 pm660l smr526 wtr5975 qca6430_firmware pmk8003 qtc801s_firmware wcd9335_firmware qat3522_firmware pm845_firmware wcn3980 qca6335_firmware qsw8573 qcs605 sd7c wcn3910 qca6426_firmware pm8009 qpa8675 sdr051_firmware sdx55m pm670a qca6421_firmware qat3518_firmware qsw8574 pmi8998 pm855l wcn6851_firmware qdm5670_firmware pm7150a_firmware pm8150b_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware pm670 qdm5677 pm8005 qsm8250 pm855_firmware qdm2302 pmm6155au sdxr1 pm855b_firmware qca6595_firmware qpm6582_firmware pm640l_firmware qln4650_firmware sa8155p sd675 qet4101 qat3516 pm670l qpm5658 qcm2290 qpm5658_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware sdr051 qln5030 qcs2290_firmware pm4125 pmi632 qpa2625_firmware pm456 sd7c_firmware pmr735b_firmware qet5100_firmware qet6100_firmware pm670l_firmware sdr660g sd765g_firmware qpa8686 qca6390_firmware sd730_firmware wcd9370 sdr425 pmr525_firmware pmi632_firmware sd_8cx_firmware qat5516 sd662 qpa8821_firmware sdr660g_firmware pm3003a qca6595au qca6436_firmware smb1354 qca6564au_firmware qdm2305 sa6155p_firmware qca6310 qpm8820 qpm2630 qln5020_firmware sdxr2_5g sa6145p_firmware sdr675 sm6250 sd712_firmware wsa8810_firmware sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware qpa8673 qdm2310 qln5030_firmware smb1396_firmware wcn6850_firmware wsa8835_firmware qca6564a qet6110 qln5040 qcm2290_firmware qpm8895 sdr845 qpm5670 wcn3990 sd_675 pmc7180_firmware qdm2307_firmware wsa8835 qpm5657_firmware sm6250p pm855a sdr660_firmware qca6574a smb1390_firmware qca6174a wcn6750 qpm4650 qtm525 wtr6955 sd855 sm4125_firmware wtr6955_firmware pm640p sd768g_firmware sdr865_firmware pm8250_firmware pm6250 sd460 qca6391 sdxr1_firmware smb1351 aqt1000_firmware qpm8895_firmware qcm4290 sdx50m pm640a sdr8150 smb1395_firmware qca6574au sa8155p_firmware qsw6310 wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware qdm2308 qat3550 qdm5679 sd_8c pm3003a_firmware qca6696 qtc800s_firmware sm4350 sd845_firmware smb1381_firmware qpa2625 sa6150p qpa8688_firmware pmm8195au_firmware sm7250p sd720g_firmware sd850 qln4640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-11167

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.66%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qfe3100 qfs2580 qfe2550 pmi8996 qdm2307 qfs2530 qpa8802 qln1030 pm6125 qat3519 pm8150a qtc800h qdm5670 sa6155 qca6335 msm8917 pm7150l qpa8821 qln1020 wtr3905 qdm5671 qat3518 sd632 wcn3998 wcn3950 qpa5460 wcn3660b qfe4320 qdm5652 sd6905g qpm8870 qpm5679 qbt2000 msm8909w pm855p qca6420 wcd9360 pm6150a pm8150b qsm7250 pm8996 qfe2101 qca6430 qat3522 qfe4455fc pmr735a wcd9340 sd765g qfe3440fc qca6436 sdr660 sa6155p qpa6560 msm8937 sdr865 smb1358 wcd9341 pmi8952 qca6431 qln5020 sd750g wtr3950 pm6350 qdm5621 qtc800s qdm5650 sd712 wcn3988 wtr3925 qfe2080fc sdr052 smb1390 pm6150l sd450 qet4100 wcn3610 qpm6585 qtc410s wcn3991 smb1355 qln4650 qpa8801 sdm429w wgr7640 qet5100 qca6564au sdxr25g pm6150 pm7250b qca6574 qpa8842 pmm8996au wcd9380 qualcomm215 smb1381 sdr735 pm7250 smb1395 pm660l wtr4905 qpa8803 smr526 wtr5975 wcn3980 pmk8003 qdm2301 qsw8573 qcs605 wsa8815 qbt1000 qca6320 wcn3680 qfe4309 sd835 pm8009 sdx55m pm670a qfe4373fc pm8008 msm8953 qsw8574 pmi8998 pm855l qcs603 sd8655g qfe4302 qpm5621 qpm6582 apq8009w qfe4303 pm670 pm8150l qdm5677 pm8005 pm215 qdm2302 sdxr1 apq8096au wtr2965 sdx55 apq8053 sa8155p sd675 sd439 qet4101 pmi8994 qat3516 pm670l qpm5658 wcn3660 qca9379 pm855b qln1031 pm8909 qfe4465fc sdr051 pm660 wsa8830 qln5030 qbt1500 pmi632 qpa5581 pmk8001 qet6100 sdr660g pmm855au qpa8686 smb1396 pm7150a wcd9370 qca6426 whs9410 qat5516 wtr2955 qdm5620 qln1021aq smb1380 qfe4308 apq8037 pm3003a sa8155 qat5533 qca6595au wcn3615 qtc800t pm8940 qdm2305 qca6310 qpm8820 pm8937 qfe2081fc pm855 sd429 pm8250 sd821 pmx55 sd205 qca6421 qdm3301 pm8953 qat5515 qpm5677 wcd9326 wcd9335 qet4200aq wcd9385 pm439 qca6390 wcd9375 apq8064au aqt1000 qpa8673 qdm2310 qln4642 sd210 sd820 pmi8937 pm8998 wcn3620 apq8017 qca6564a qet6110 qln5040 qpm8895 sdr845 qpm5670 wcn3990 qca6595 qpm8830 qat5522 wsa8835 msm8996au pm8150c pmr735b rgr7640au qln1035bd qpa4360 pm855a qca6574a qpa4361 qca6174a smr525 pmr525 qpm4650 qtm525 sd855 sd8cx sd665 qfe4305 qca6175a sd765 pm640p qat3555 smb1351 qca6391 qfe2082fc msm8920 sdx50m pm640a sdr8150 qln1036aq qtc801s qca6574au sd710 qsw6310 wsa8810 qdm2308 pmw3100 pmx50 qat3550 qdm5679 wcn3680b sdr8250 sd768g qca6696 qfe4301 sdw2500 pm8004 pm640l msm8940 pmk8002 qpa2625 sd845 sm7250p sdm830 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2020-11279

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.32% / 54.94%

7 Day CHG~0.00%

Published-07 May, 2021 | 09:10

Updated-04 Aug, 2024 | 11:28

Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qfe3100 qfe2080fc_firmware qca9377_firmware qfs2580 qpm5679_firmware mdm9640_firmware sm6250p_firmware pmd9607_firmware qfe4455fc_firmware qca8337 qfs2530 qpm8870_firmware qln1030 pm6125 qat5522_firmware mdm9645 wcn3950_firmware pm8150a sc8180x\+sdx55 qdm5670 qca6595au_firmware pm7150l qcc1110_firmware mdm8215 pm8998_firmware qpa8821 wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 wtr1605 sd720g mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qfe4320 qsw8574_firmware mdm9230_firmware smb2351_firmware mdm8215m pm8953_firmware qpa4360_firmware wcn3998_firmware qfe2520_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 pm6150a wtr4605_firmware qca9367_firmware mdm8207 pm660_firmware pm8150b sa8155_firmware qca4004_firmware qfe2101 mdm9615m qca6430 qat3522 qfe4455fc pmr735a wcd9306_firmware wtr1625 wcd9340 mdm9625_firmware sd765g sdr660 qfe1045_firmware qfe3345 msm8209_firmware sdr865 mdm9250_firmware qdm5620_firmware smb1358 smr545 qca6696_firmware qln5020 wcd9371 sd870_firmware smb1350 mdm8215_firmware pmm855au_firmware wtr3950 qfe3340 qdm5621 qtc800s qca4004 qat3514_firmware mdm9330_firmware sd660 sd712 pm640p_firmware sd660_firmware qat5516_firmware pm6150l sd450 sd8885g pm855l_firmware qtc410s wcn3991 qfe3335_firmware qpa8801 pm8150l_firmware qat5533_firmware sdx55m_firmware sdxr25g qpa8673_firmware pm6150 msm8976_firmware qca6574 sd632_firmware sd670_firmware qpa8842 sdr052_firmware pmm8996au wcd9380 sd850 qualcomm215 qln4640 qcs410 smb1380_firmware qfe4309_firmware smb1381 pm855p_firmware qfe3100_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sdx24_firmware sd439_firmware sdxr25g_firmware pmd9645 qdm2301 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware qca6584_firmware qdm2301_firmware msm8937_firmware qdm5621_firmware mdm9215_firmware sd835 wcn3980_firmware sd730 qfe3320_firmware pm660l_firmware pm6250_firmware ar6003_firmware pm8008 qtm525_firmware pme605_firmware wtr1605l_firmware pme605 sd678_firmware qpm5621_firmware qca6234 qln1021aq_firmware qcs603 rsw8577 qpa6560_firmware qpa8802_firmware qln4640_firmware qfe4308_firmware qpm5621 qpm6582 sd670 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcm4290_firmware wcn6855 pm8150l pmi8998_firmware qcs610_firmware apq8084_firmware sdr105 pm660a_firmware pm215 mdm8207_firmware sdm630_firmware wtr2965 mdm9205_firmware qca6391_firmware sd820_firmware pmx20_firmware pm8150 pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 qat3555_firmware pmi8994 qpa8803_firmware wcn3660 qca9379 pm855b qca6234_firmware qln1031 smb2351 pm8909 mdm9150_firmware qfe1040 pm660 qet6110_firmware pm6125_firmware qbt1500 qfe1040_firmware csrb31024 mdm9628_firmware qfe2340_firmware mdm9650 pmx24_firmware qbt1500_firmware pmk8001 qcs4290 pmm855au mdm9250 qca6420_firmware pmd9635_firmware apq8009_firmware pm7150a mdm9310_firmware sd675_firmware pm8350 qpa4361_firmware qca6426 wcn3990_firmware qca9377 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware wcd9326_firmware mdm9615m_firmware wcn3615_firmware whs9410 rgr7640au_firmware wtr2955 pm7250_firmware sdr845_firmware qdm5620 qln1021aq smb1380 pmk8002_firmware qsw6310_firmware sa8155 qca6584 qln1031_firmware sdx55_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware pm8940 mdm9207 qsm7250_firmware pm7150l_firmware wcd9306 qca6584au msm8208 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 qca9367 qfe2082fc_firmware sdm630 mdm9607_firmware mdm9655_firmware msm8976sg qfs2530_firmware pmx55 sa415m_firmware wcn3988_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sdr735_firmware pm8953 qat5515 qca6694 qpm5677 qat3514 wcd9326 wcd9335 pm8004_firmware sdr8150_firmware qcs4290_firmware pm439 qtc800h_firmware qpm5620 mdm9625 qca6390 wcd9375 aqt1000 msm8976 sc8180x\+sdx55_firmware sm6250_firmware qln4642 msm8917_firmware qpm5677_firmware sdx20_firmware wsa8815_firmware wtr3925_firmware pmi8937 pm8998 sdw3100 smr525_firmware qpm8820_firmware qfe4301_firmware apq8017 ar6003 qln1020_firmware mdm9630_firmware qcm6125_firmware pmx55_firmware wtr2955_firmware qbt1000_firmware qfe4373fc_firmware pm8019 qca6595 pm8150_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c sd665_firmware qpa4360 qpa4361 mdm9206 wcn6855_firmware qdm5679_firmware smr525 wfr1620_firmware qca6310_firmware qfe4305_firmware pm6150l_firmware pmr525 mdm9615 pm8150a_firmware qca6574_firmware wtr3950_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware sd765 pmx20 pmd9607 qca6574a_firmware qat3555 sd850_firmware apq8009 mdm9310 qfe2082fc sd8c_firmware wtr2965_firmware pm670_firmware csrb31024_firmware qln1036aq qtc801s pmi8940_firmware qfe3320 mdm8215m_firmware mdm9607 sd710 mdm9645_firmware pm8008_firmware qln1035bd_firmware pmr735a_firmware pmw3100 pmx50 pm8018 qfe3345_firmware sdr8250 sd768g qln1030_firmware smb1350_firmware pmw3100_firmware pm8004 pm640l msm8940 pmk8002 apq8096au_firmware sdw2500 sd845 mdm9615_firmware sd455_firmware smb1357 pmd9655au_firmware qcs410_firmware mdm9330 qpa5580 pm8018_firmware qfe2550 qcs610 pmi8996 qpm5620_firmware qfe1045 qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware pm855a_firmware qtc800h sdr8250_firmware qca6335 msm8917 qln1020 qcs605_firmware smr546_firmware wtr3905 qdm5671 pmc1000h qpm4650_firmware mdm8615m_firmware qat3518 sd8c sd632 smr526_firmware mdm9628 pm640a_firmware qpa5460 wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware mdm9630 qpm8870 wcd9375_firmware qpm5679 qbt2000 msm8909w wcd9360 pmx50_firmware qpa8675_firmware whs9410_firmware qpa5460_firmware pm8940_firmware qdm3301_firmware pm8996 qsm7250 qcs6125 qcc1110 smb1360 qualcomm215_firmware qfe3440fc qdm2308_firmware rsw8577_firmware pm439_firmware qca4020_firmware qca6436 wcn6851 qcs603_firmware qpa6560 msm8937 sdr675_firmware wcn3660_firmware wcd9341 pmi8952 mdm9655 pm8937_firmware qca6431 qet4100_firmware qfe4320_firmware wcn3910_firmware qpm5657 wtr1605_firmware mdm9207_firmware sd855_firmware qdm5650 wcn3988 wtr3925 qfe2080fc sdr052 smb1390 sdw3100_firmware msm8208_firmware qet4100 wcn3610 mdm9640 msm8608 qpa8686_firmware qpm6585 qca8337_firmware wcd9380_firmware smb1355 qln4650 qtc800t_firmware wcd9330 msm8996au_firmware wgr7640 csr6030 qet5100 qdm5671_firmware qpa8801_firmware qca6564au qtm527_firmware sd636 wcn6856_firmware pm8005_firmware msm8940_firmware qet4101_firmware pm7250b qln4642_firmware pmk8001_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware mdm9230 pm8996_firmware qet4200aq_firmware sdx50m_firmware sdr735 smb358s pm660l smb358s_firmware ar8151 smr526 wtr5975 qca6174 qca6430_firmware qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 qca6335_firmware qsw8573 qcs605 qbt1000 wcn3910 qca6320 mdm9650_firmware qca6426_firmware pm8350_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 qpa8675 sdr051_firmware wcd9330_firmware sdx55m qca6421_firmware wtr3905_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 qsw8574 sd821_firmware wcn3680_firmware pm855l wcn6851_firmware qdm5670_firmware pmd9635 sd8655g pm7150a_firmware pm8150b_firmware qfe4302 smr545_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware qca6694au_firmware msm8976sg_firmware sdr105_firmware pmd9645_firmware sd870 sd8885g_firmware pm670 sd210_firmware wtr1605l qdm5677 pm8005 pm855_firmware qdm2302 sdxr1 pm855b_firmware apq8096au qca6595_firmware qpm6582_firmware pm640l_firmware pmi8996_firmware wfr1620 qln4650_firmware qet5100m sa8155p sd675 wtr4605 sd439 qet4101 pm8952 qat3516 pm670l qpm5658 qpm5658_firmware wcn3991_firmware qdm5652_firmware qfe4465fc sd678 sdr051 qln5030 pmi632 qpa2625_firmware pm456 qfe2081fc_firmware smb1360_firmware qet5100_firmware qfe1100_firmware qpa5373 pm670l_firmware sdr660g qfe2340 sd455 sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware qca6174_firmware sd730_firmware wcd9370 pmr525_firmware qca6584au_firmware qfe3340_firmware ar8151_firmware pmi632_firmware qat5516 smb358_firmware qpa8821_firmware qfe4308 sdr660g_firmware apq8037 pm3003a qca6320_firmware wcn3680b_firmware qca6595au qca6436_firmware qtc800t qca6564au_firmware qdm2305 qca6310 qpm8820 pm8937 qpm2630 qfe2081fc qln5020_firmware sa515m_firmware apq8084 sd821 sdr675 sm6250 sd712_firmware apq8017_firmware wsa8810_firmware smb231 qfe1100 sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 mdm8615m qdm2302_firmware qat3550_firmware qln5040_firmware pm8019_firmware qpa8673 qca6694_firmware qdm2310 qfe2550_firmware msm8953_firmware qln5030_firmware qca6694au pm8952_firmware sd210 wcn3620_firmware qfe4302_firmware sd820 wcn6850_firmware wcn3620 wtr1625_firmware smb358 csr6030_firmware qca6564a pmx24 smr546 qet6110 pmi8952_firmware qln5040 qpm8895 sdr845 mdm9635m_firmware qpm5670 wcn3990 qtm527 qfe3440fc_firmware sdx24 pmi8994_firmware qdm2307_firmware msm8909w_firmware msm8996au qfe1035 qpm5657_firmware pmi8940 sm6250p rgr7640au qln1035bd pm855a sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware mdm9635m pm8956_firmware qet5100m_firmware qpm4650 mdm9205 qtm525 sa515m wtr6955 qfe3335 sd855 sd8cx qfe4305 wtr6955_firmware pm640p sd768g_firmware sdr865_firmware msm8209 qfe4465fc_firmware pm8250_firmware smb1351 qca6391 sd8cx_firmware sdxr1_firmware smb1357_firmware aqt1000_firmware pm215_firmware msm8920 qpm8895_firmware pm660a qpa4340 qfe1035_firmware qcm4290 sdx50m pm640a sdr8150 sdx20 pm8916 pmd9655au msm8920_firmware mdm9215 pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 sd8655g_firmware wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware smb231_firmware qdm2308 wtr4905_firmware qat3550 mdm9150 wcn6856 qdm5679 wcn3680b sd835_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware msm8608_firmware qpa2625 apq8037_firmware sm7250p sd720g_firmware pm8956 sd636_firmware pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2020-11138

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.66%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-qfe3100 qfs2580 qfe2550 msm8960 qcs610 pmi8996 qdm5579 qfe1045 qdm2307 qfs2530 qpa8802 qln1030 pm6125 qat3519 mdm9645 pm8917 pm8150a sc8180x\+sdx55 qtc800h qdm5670 qcs2290 sa6155 qca6335 msm8917 pm7150l qpa8821 mdm8215 qln1020 apq8076 wtr3905 qdm5671 pmc1000h qfe2330 msm8630 qat3518 sd632 sd8c msm8108 sa415m wcn3998 wcn3950 sm4125 sd720g wtr1605 wtr2605 mdm9628 qpa5460 wcn3660b wtr2655 qfe4320 qcc112 qca4020 mdm8215m qdm5652 mdm9630 qpm8870 qpm5679 qbt2000 msm8909w pm855p qca6420 wcd9360 pm6150a wtr1625l msm8627 sdr735g wcn3999 pm8150b qsm7250 pm8996 qcs6125 qfe2101 mdm9615m qca6430 qcc1110 qat3522 qfe4455fc pmr735a wtr1625 qcs405 smb1360 wcd9340 wfr2600 sd765g qfe3440fc wcd9320 sdr660 qca6436 wcn6851 sa6155p qpa6560 qfe3345 apq8052 sdr865 smb1358 wcd9341 pmi8952 smr545 mdm9655 qca6431 qln5020 wcd9371 smb1350 sd750g qdm3302 wtr3950 sa8150p qpm5657 pm6350 qdm5621 qfe3340 qtc800s msm8226 sd660 qdm5650 sd712 wcn3988 wtr3925 qfe2080fc sdr052 smb1390 pm6150l sd450 qet4100 wcn3610 msm8608 mdm9640 qpm6585 qtc410s wcn3991 smb1355 qln4650 qpa8801 sdm429w wcd9330 wgr7640 qat5568 qet5100 sd636 qca6564au msm8230 pm6150 qca6574 pm7250b qfs2630 qpa8842 pmm8996au wcd9380 qualcomm215 mdm9230 qln4640 qcs410 smb1381 sdr735 pm7250 wtr4905 smb1395 pm660l qpa8803 ar8151 smr526 wtr5975 qca6174 pmk8003 wcn3980 pmd9645 qdm2301 qsw8573 qcs605 wsa8815 wcn6850 wcn3910 qca6320 smb1394 wcn3680 qca9984 pm8921 sd835 qfe4309 qca1990 pm8009 qpa8675 sd730 sdx55m pm670a qfe4373fc pm8008 msm8953 qsw8574 pmi8998 mdm9225 qfe2520 apq8064 pme605 mdm9225m pm855l qcs603 rsw8577 pmd9635 qfe4302 qpm5621 qpm6582 sd670 apq8009w qfe4303 pm670 pm8150l wtr1605l qdm5677 pm8005 qsm8250 sa6145p pm215 qdm2302 pmm6155au sdxr1 ar8031 apq8096au wtr2965 wfr1620 pm8150 qpm5875 sdx55 qet5100m apq8053 sa8155p csra6640 pm8350bhs sd675 wtr4605 sd439 qet4101 pm8952 pmi8994 qat3516 pm670l wcd9310 pm8226 wcn3660 qpm5658 qca9379 pm855b smb2351 qln1031 qcm2290 qpm5870 pm8909 qfe1040 wsa8830 qfe4465fc pm660 sdr051 msm8960sg qln5030 msm8930 pm4125 qbt1500 qpa5581 pmi632 pm456 csrb31024 mdm9650 csra6620 qpa5373 qpm4621 pmk8001 qcs4290 qet6100 pmm855au sdr660g qfe2340 sd455 qpa8686 pm8110 sd690_5g smb1396 wcd9370 pm8350 qca6564 sdr425 qca6426 qpm5641 whs9410 qat5516 wtr2955 qdm5620 qln1021aq sd662 smb1380 qfe4308 pm8350bh mdm8635m apq8037 pm3003a sa8155 qat5533 wcn3615 qca6595au msm8227 wtr2100 sm7350 qtc800t pm8940 qpm6670 smb1354 wcd9306 qca6584au qdm2305 qca6310 msm8208 qpm8820 qpm4641 pm8937 qpm2630 qfe2081fc pm855 sd429 sdxr2_5g pm8250 msm8962 mpq8064 smb1398 apq8084 sdm630 sd821 apq8062 qdm4643 msm8976sg pmx55 sd205 sdr675 sm6250 qdm3301 sa8195p pm8953 qat5515 qca6694 qpm5677 smb231 qfe1100 qat3514 wcd9326 wcd9335 wcn3660a qet4200aq wcd9385 mdm8615m pm439 qpm5620 pmm8155au mdm9625 qpm4630 qca6390 wcd9375 ar8035 aqt1000 msm8956 msm8976 apq8064au pmm8195au qpa8673 qdm2310 qln4642 qca6694au apq8056 msm8952 sda429w sd210 sd820 mdm9625m pmi8937 pm8998 pmk7350 sdw3100 wcn3620 apq8017 ar6003 mdm9235m qca6564a smr546 pmx24 qet6110 qfe1055 qln5040 qpm8895 sdr845 qpm5670 wcn3990 apq8030 sd865_5g pm8019 qca6595 pmk8350 qpm8830 pm8350b qat5522 wsa8835 msm8996au pm8150c pmr735b pmi8940 sd888_5g sm6250p rgr7640au qpa4360 qln1035bd pm855a qpa4361 qca6574a qca6174a pm8350c smr525 qpm4640 wcn6750 mdm9635m pmr525 mdm9615 pm7350c qpm4650 qtm525 wtr6955 qfe3335 pm8821 sd855 sd665 sd8cx qfe4305 qca6175a sd765 pm640p pmd9607 msm8209 qat3555 apq8009 sd460 qca6391 smb1351 qpa5461 mdm9310 qfe2082fc msm8920 msm8610 pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 qfs2608 pm8916 qln1036aq qtc801s qdm4650 mdm9215 pmd9655 qca6574au qfe3320 sd710 mdm9607 qsw6310 qcm6125 qpm6621 wsa8810 qdm2308 pmw3100 pmx50 pm8018 qat3550 wcn6856 qdm5679 wcn3680b sdr8250 sd768g wcn6740 qca6696 qfe4301 pm8004 pm640l msm8940 pmk8002 qpa2625 sa6150p pm7150a_sd845 sm7250p sdm830 smb1357 mdm9330 sd850 pm6250 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-824

Access of Uninitialized Pointer

CVE-2020-11264

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.26% / 49.05%

7 Day CHG-0.00%

Published-08 Sep, 2021 | 11:25

Updated-04 Aug, 2024 | 11:28

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Product-qca9377_firmware wcn3991_firmware qca2066 sd678 sa6150p_firmware sm7250 sa8145p_firmware qcs610 wsa8830 qca1062_firmware qcs2290_firmware qca8337 sm7250_firmware csrb31024 mdm9650 sd_636 csra6620 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware qca2064_firmware qca2062 qca6174_firmware sd690_5g sd730_firmware csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware wcd9370 csra6640_firmware qcs6125_firmware qca6426 qca6584au_firmware wcn3990_firmware qca9377 sa415m wcn3998 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware sd720g wcn3615_firmware wcn3660b wcn3910_firmware qca2065 sd662 sd460_firmware qca1064 sa8155 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcd9375_firmware wcn3615 wcn3998_firmware wcn3999_firmware qca6420 qca6436_firmware apq8053_firmware sdx20m qca6564au_firmware qca6584au sa6155p_firmware sd778g wcn3999 qrb5165_firmware sdxr2_5g qcs6125 sa8155_firmware sd662_firmware sdm630 sa415m_firmware qcs405 qca6430 sc8280xp_firmware wcn3988_firmware sa6145p_firmware sm6250 sd778g_firmware wcd9340 sa8195p wsa8810_firmware sd765g sd765_firmware qca6436 wcd9326 wcd9335 sa6155p wcn6851 qcs603_firmware qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 qca2066_firmware qca6696_firmware qca2065_firmware sd750g sd870_firmware qca1062 ar8035 qca6390 sd_8cx aqt1000 apq8064au sa8150p sd750g_firmware sm6250_firmware msm8953_firmware wcd9375 wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sdx20_firmware wcn3988 sd888_5g_firmware wcn6850_firmware sd660_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qca6564a wcn6750_firmware qcm6125_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 msm8996au_firmware sd780g sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware sd888 wsa8835 qca6574 msm8996au sd665_firmware wcd9380 sd888_5g qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6174a sdx24_firmware sm7325 qca6174 qca6430_firmware wcd9335_firmware wcn3980 wcn6750 qca6574_firmware qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 wcn3910 mdm9650_firmware qca6175a sd765 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd768g_firmware sd835 wcn3980_firmware sd460 qca6391 sd730 sdx55m aqt1000_firmware qca2062_firmware wcn6740_firmware msm8953 sd678_firmware apq8064au_firmware ar8031_firmware csrb31024_firmware qcm4290 sdx50m sdx20 qrb5165 sd480_firmware qcs603 wcn6851_firmware qca6164_firmware qca6574au sa8155p_firmware sd_636_firmware qca6564a_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 sdx20m_firmware wcn6855 wsa8810 qcs610_firmware wcn6856 sa6145p wcn3680b sd835_firmware sd768g apq8096au ar8031 qcs405_firmware qca1064_firmware sa8145p qca6164 qca6696 sdm630_firmware qca6391_firmware wcn6740 qca2064 sd780g_firmware sd845_firmware wcd9370_firmware sa6150p sd888_firmware sc8280xp apq8053 apq8096au_firmware csra6640 sa8155p sd675 sd845 sdx55 sd720g_firmware qcs410_firmware qca6175a_firmware ar8035_firmware qcm2290 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-287

Improper Authentication

CVE-2020-11116

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 54.12%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 11:21

u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Bitra, Kamorta, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCM2150, QCN7605, QCS405, QCS605, QCS610, QM215, SA6155P, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Product-qca9377_firmware kamorta_firmware qcm2150_firmware mdm9640_firmware qcs610 sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sxr2130 qcs605_firmware sc8180x mdm9206 qca9379_firmware qca6174a sdm636 sda845_firmware qca9377 bitra apq8098 qcn7605 mdm9206_firmware qcs605 bitra_firmware msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sdx55_firmware msm8909w apq8009 apq8053_firmware sda845 sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm660 sc8180x_firmware qcs405 qca6574au qm215 mdm9607 qcn7605_firmware sa6155p qcs610_firmware msm8937 mdm9207c_firmware msm8905 mdm9207c qca6174a_firmware sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware qm215_firmware sdx55 msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware sm8250 sm8150 sdx20_firmware kamorta saipan qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-11163

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.59%

7 Day CHG~0.00%

Published-22 Feb, 2021 | 06:25

Updated-04 Aug, 2024 | 11:28

Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-qpm5579 qfs2580 qca9377_firmware qfe2550 qpm5679_firmware sm6250p_firmware qcs610 qca8337 qdm2307 qca6431_firmware qfs2530 qpm8870_firmware qpa8802 wcd9360_firmware qpm6585_firmware pm6125 qat3519 qbt2000_firmware qat5522_firmware pm855a_firmware wcn3950_firmware pm8150a qtc800h qdm5670 sdr8250_firmware qca6595au_firmware qpm5541_firmware qcs2290 msm8917 pm7150l qpa8821 sd_675_firmware qdm5671 pmc1000h qpm4650_firmware qcs6125_firmware qat3518 pm456_firmware qpa5580_firmware sdr425_firmware sa415m wcn3998 wcd9371_firmware smr526_firmware wcn3950 sm4125 sd720g pm640a_firmware qsw8573_firmware wcn3660b wgr7640_firmware qdm2305_firmware qfe4320 qpm5670_firmware qsw8574_firmware sd460_firmware smb2351_firmware qdm5652 qca6574au_firmware qpa4360_firmware qpm8870 wcd9375_firmware wcn3998_firmware qpm5679 qbt2000 pm855p qca6420 wcd9360 pm6150a pmx50_firmware qpa8675_firmware whs9410_firmware pm8150b qdm3301_firmware qsm7250 qcs6125 sa8155_firmware sd662_firmware qfe2101 smb1360 qca6430 qat3522 pmr735a wcd9340 sd765g qualcomm215_firmware qdm2308_firmware sdr660 pm439_firmware qca6436 qpa6560 sdr675_firmware sdr865 qdm5620_firmware wcd9341 pmi8952 pm8937_firmware qca6696_firmware qca6431 qln5020 wcd9371 qet4100_firmware qfe4320_firmware pmm855au_firmware wcn3910_firmware sd_8cx qdm5621 sd855_firmware sd865_5g_firmware qdm5650 wcn3988 wtr3925 pm640p_firmware sdr052 smb1390 wcn6750_firmware qat5516_firmware pm6150l pm855l_firmware qet4100 wcn3610 qpa8686_firmware qpm6585 qtc410s wcn3991 qca8337_firmware wcd9380_firmware smb1355 qln4650 qpa8801 wgr7640 qet5100 qdm5671_firmware qpa8801_firmware qca6564au pm8150l_firmware qat5533_firmware sdx55m_firmware qtm527_firmware qpa8673_firmware pm6150 qet4101_firmware smb1354_firmware pm7250b qln4642_firmware qpa8842 sdr052_firmware wcd9380 smb1355_firmware pm7250b_firmware smb1351_firmware qualcomm215 qln4640 qcs410 qpm5579_firmware qfe4309_firmware smb1381 pm855p_firmware sdx50m_firmware smb1395 pm7250 wtr4905 qpa8803 sdx24_firmware smr526 qca6430_firmware wcn3980 qtc801s_firmware sd439_firmware qat3522_firmware qdm2301 qsw8573 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware wcn3910 qdm5621_firmware qdm2301_firmware qpm6375 sd_8c_firmware qca6426_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 wcn3980_firmware qpa8675 sd730 sdr051_firmware sdx55m pm6250_firmware qca6421_firmware qfe4373fc pm8008 qtm525_firmware qat3518_firmware qsw8574 wcn3680_firmware qpm5621_firmware pm855l qln1021aq_firmware qdm5670_firmware qpa6560_firmware qpa8802_firmware qln4640_firmware pm7150a_firmware qfe4308_firmware pm8150b_firmware qfe4302 qpm5621 qpm6582 pmc1000h_firmware pm8009_firmware qdm2310_firmware pm4250_firmware qfe4303 qfs2580_firmware qcm4290_firmware pm8150l sd210_firmware qcs610_firmware qdm5677 pm855_firmware pm215 pm4250 qdm2302 pm855b_firmware qpm6582_firmware qpm5577 wtr2965 qpm6375_firmware qca6391_firmware pm640l_firmware pm8150 pmi8937_firmware wcd9370_firmware qat3516_firmware qln4650_firmware sdx55 qet5100m sa8155p sd675 sd439 qet4101 qat3555_firmware qat3516 qpa8803_firmware qpm5658 pm855b smb2351 qln1031 ar8035_firmware qcm2290 qpm5658_firmware wcn3991_firmware pm8909 qdm5652_firmware sdr051 qet6110_firmware qln5030 qpm6325 pm6125_firmware qcs2290_firmware qbt1500 pm4125 pmi632 qpa2625_firmware pm456 csrb31024 smb1360_firmware pmx24_firmware qbt1500_firmware qet5100_firmware qcs4290 pmm855au sd765g_firmware qpa8686 qca6420_firmware qca6390_firmware sd730_firmware pm7150a wcd9370 sd675_firmware qpa4361_firmware sdr425 pmr525_firmware qca6426 qca6584au_firmware wcn3990_firmware qca9377 pmi632_firmware sd_8cx_firmware wcd9385_firmware qdm5650_firmware sdxr2_5g_firmware wcd9326_firmware whs9410 wcn3615_firmware wtr2955 qpm5541 qat5516 pm7250_firmware qdm5620 qln1021aq sd662 qpa8821_firmware qfe4308 pmk8002_firmware qsw6310_firmware pm3003a sa8155 qln1031_firmware wcn3680b_firmware sdx55_firmware qat5533 wcn3615 qca6595au sm7250p_firmware wcn3610_firmware qca6436_firmware qsm7250_firmware smb1354 pm7150l_firmware qca6564au_firmware qca6584au qdm2305 qpm8820 pm8937 qat5515_firmware qln5020_firmware sa515m_firmware pm855 qpm8830_firmware sd429 pm8250 sdxr2_5g qfs2530_firmware sa415m_firmware pmx55 wcn3988_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sdr675 sm6250 apq8017_firmware qpm5677 qat5515 wsa8810_firmware sd765_firmware wcd9326 qdm5677_firmware pm8004_firmware qca6174a_firmware sdr8150_firmware qcs4290_firmware wcd9385 qpm6325_firmware pm439 qtc800h_firmware qdm2302_firmware qat3550_firmware qln5040_firmware pm4125_firmware qca6390 wcd9375 ar8035 aqt1000 qpa8673 sm6250_firmware qdm2310 qfe2550_firmware qln5030_firmware qln4642 msm8917_firmware qpm5677_firmware sd210 qfe4302_firmware wsa8815_firmware wtr3925_firmware pmi8937 smr525_firmware wcn6850_firmware qpm8820_firmware qfe4301_firmware apq8017 pmx24 qcm6125_firmware qet6110 pmi8952_firmware qcm2290_firmware qln5040 qpm8895 qpm5670 wcn3990 sd_675 pmx55_firmware wtr2955_firmware qtm527 qfe4373fc_firmware sd865_5g pm8150_firmware sdx24 qpm8830 qdm2307_firmware qat5522 pm8150c sd665_firmware sm6250p qpa4360 pm855a sdr660_firmware sc8180x qpa4361 pm8909_firmware qca6574a qpm5577_firmware pm8916_firmware smb1390_firmware qdm5679_firmware qca6174a smr525 qfe4305_firmware qfe4303_firmware wcn6750 pm6150l_firmware pmr525 pm8150a_firmware qet5100m_firmware qpm4650 qtm525 sa515m qln1036aq_firmware sd855 sm4125_firmware sd665 qfe4305 pm6150a_firmware pm6150_firmware sd765 pm640p qca6574a_firmware sd768g_firmware sdr865_firmware qat3555 pm8250_firmware sd460 qca6391 smb1351 aqt1000_firmware pm215_firmware qpm8895_firmware wtr2965_firmware qcm4290 csrb31024_firmware sdx50m pm640a sdr8150 pm8916 qln1036aq qtc801s smb1395_firmware sc8180x_firmware qca6574au sa8155p_firmware sd205_firmware qsw6310 pm8008_firmware wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware pmr735a_firmware qdm2308 wtr4905_firmware pmx50 qat3550 qdm5679 sd_8c wcn3680b sdr8250 sd768g pm3003a_firmware qca6696 qfe4301 smb1381_firmware pm8004 pm640l pmk8002 qpa2625 sm7250p sd720g_firmware qcs410_firmware pm6250 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2018-11930

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.88%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:35

Updated-05 Aug, 2024 | 08:24

Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, Qualcomm 215, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

CVE-2018-11905

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 31.15%

7 Day CHG~0.00%

Published-07 Dec, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in WLAN function due to lack of input validation in values received from firmware.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-11271

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 50.35%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:32

Updated-05 Aug, 2024 | 08:01

Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SM7150, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sm7150_firmware sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sm7150 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd855 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sd_652_firmware sxr1130 msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 sd_625 qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_430 sd_427 sd_670 sd_435_firmware sd855_firmware sd_710 sd_205 sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-287

Improper Authentication

CVE-2018-11936

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.66%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:35

Updated-05 Aug, 2024 | 08:24

Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads to out of bound memory access. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, QCA9886, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 820, SD 820A, SD 835, SDX20, SDX24, Snapdragon_High_Med_2016

Product-sd_427_firmware qca9377_firmware qca6584au mdm9640_firmware sd_820a msm8996au_firmware sdx20 sd_425 sdx24 sd_430_firmware mdm9607_firmware sd_435 mdm9650 sd_625 qca6574au snapdragon_high_med_2016_firmware sd_210 mdm9607 msm8996au qca6574 sd_820_firmware sd_820 sd_450_firmware sd_820a_firmware mdm9206 qca6174a_firmware qca6174a qca9379_firmware qca9886_firmware sd_212_firmware sd_425_firmware qca6584au_firmware sd_450 sd_625_firmware sdx24_firmware qca9377 mdm9206_firmware qca6574_firmware qca9886 sd_427 sd_430 qca6584_firmware sd_435_firmware sd_835_firmware mdm9650_firmware sdx20_firmware sd_835 qca6584 qca6574au_firmware sd_205 sd_210_firmware snapdragon_high_med_2016 qca9379 sd_205_firmware sd_212 mdm9640 Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2018-11287

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 50.39%

7 Day CHG~0.00%

Published-20 Sep, 2018 | 13:00

Updated-05 Aug, 2024 | 08:01

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016, incorrect control flow implementation in Video while checking buffer sufficiency.

CWE ID-CWE-20

Improper Input Validation

CVE-2018-11937

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.88%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:35

Updated-05 Aug, 2024 | 08:24

Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150

CWE ID-CWE-125

Out-of-bounds Read

CVE-2018-11940

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.88%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:36

Updated-05 Aug, 2024 | 08:24

Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SXR1130

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-11949

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.88%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 08:24

Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

CWE ID-CWE-665

Improper Initialization

CVE-2018-11945

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.35% / 57.42%

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 08:24

Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130.

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_12 sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_625_firmware sd_450 sd_16_firmware mdm9635m sd_8cx_firmware mdm9615 sd_845 mdm9206_firmware qcs605 sd_52_firmware sd_632_firmware sd_835_firmware mdm9650_firmware sd_12_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sxr1130 msm8909w sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_16 sd_855 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware mdm9625_firmware sd_439_firmware mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_855_firmware sd_712_firmware sd_52 sdm630_firmware sda660_firmware mdm9625 sd_8cx sd_430 sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-11291

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.59%

7 Day CHG~0.00%

Published-09 Jun, 2021 | 06:20

Updated-04 Aug, 2024 | 11:28

Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile

Product-qca9377_firmware wcn3991_firmware wsa8830 sd678 sm6250p_firmware qcs610 qca6431_firmware csrb31024 wcd9360_firmware qcs4290 wcn3950_firmware sc8180x\+sdx55 sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware msm8917 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qcs6125_firmware qca6426 qca6584au_firmware wcn3990_firmware qca9377 sa415m wcn3998 sd_8cx_firmware wcd9371_firmware sdxr2_5g_firmware wcd9385_firmware wcd9326_firmware sd720g wcn3615_firmware wcn3950 whs9410 wcn3660b sd450_firmware sa8155 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcd9375_firmware wcn3615 wcn3998_firmware sm7250p_firmware qca6420 qca6436_firmware apq8053_firmware wcd9360 qca6564au_firmware qca6584au whs9410_firmware sa515m_firmware sdxr2_5g qcs6125 sa8155_firmware msm8976sg sa415m_firmware qca6430 wcn3988_firmware qca6421 sm6250 wcd9340 apq8017_firmware wsa8810_firmware sd765g sd765_firmware qca6436 wcd9326 wcd9335 wcn6851 qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 qca6431 qca6696_firmware wcd9371 sd750g sd870_firmware qca6390 wcd9375 sd_8cx aqt1000 msm8976 sd750g_firmware sc8180x\+sdx55_firmware sm6250_firmware msm8953_firmware wcn3910_firmware wsa8830_firmware msm8917_firmware sd855_firmware sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware apq8017 sd450 qcm6125_firmware wcn3991 wcd9380_firmware wcn3990 sd_675 sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware msm8940_firmware msm8976_firmware sd670_firmware wsa8835 sd665_firmware wcd9380 sd888_5g sm6250p qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca9379_firmware qca6174a sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 sa515m wcd9340_firmware sd855 wsa8815 wcn6850 sd665 wcn3910 sd_8c_firmware sd765 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd768g_firmware wcn3980_firmware sd730 qca6391 sdx55m qca6421_firmware aqt1000_firmware msm8920 msm8953 sd678_firmware qcm4290 csrb31024_firmware sdx50m sd480_firmware wcn6851_firmware msm8920_firmware qca6574au sa8155p_firmware sd670 msm8976sg_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 qcs610_firmware wcn6856 sd_8c wcn3680b sd768g qca6696 qca6391_firmware sd845_firmware wcd9370_firmware sdx55 msm8940 apq8053 sa8155p sd675 sd845 sm7250p sd720g_firmware qcs410_firmware qca9379 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-2249

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.48% / 64.96%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9205, MDM9650, QCA8081, QCS605, SD 427, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

CWE ID-CWE-125

Out-of-bounds Read

CVE-2019-2287

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.97%

7 Day CHG~0.00%

Published-22 Jul, 2019 | 13:47

Updated-04 Aug, 2024 | 18:42

Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2276

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.88%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user controlled space in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX24

CWE ID-CWE-125

Out-of-bounds Read

CVE-2019-2245

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.66%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-04 Aug, 2024 | 18:42

Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sm7150_firmware sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sm7150 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_600 sd_415_firmware msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 sd_625 qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

CVE-2020-11176

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.88%

7 Day CHG~0.00%

Published-09 Jun, 2021 | 06:20

Updated-04 Aug, 2024 | 11:28

While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile

Product-qca9377_firmware wcn3991_firmware wsa8830 sd678 sm6250p_firmware qcs610 qca8337 qca6431_firmware csrb31024 wcd9360_firmware qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware msm8917 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qcs6125_firmware qca6426 qca6584au_firmware wcn3990_firmware qca9377 sa415m wcn3998 sd_8cx_firmware wcd9371_firmware sdxr2_5g_firmware wcd9385_firmware wcd9326_firmware sd720g wcn3615_firmware wcn3950 whs9410 wcn3660b sd450_firmware sa8155 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcd9375_firmware wcn3615 wcn3998_firmware sm7250p_firmware qca6420 qca6436_firmware apq8053_firmware wcd9360 qca6564au_firmware qca6584au whs9410_firmware sa515m_firmware sdxr2_5g qcs6125 sa8155_firmware msm8976sg sa415m_firmware qca6430 wcn3988_firmware qca6421 sm6250 wcd9340 apq8017_firmware wsa8810_firmware sd765g sd765_firmware qca6436 wcd9326 wcd9335 wcn6851 qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 qca6431 qca6696_firmware wcd9371 sd750g sd870_firmware ar8035 qca6390 sd_8cx aqt1000 msm8976 sd750g_firmware sm6250_firmware wcd9375 msm8953_firmware wcn3910_firmware wsa8830_firmware msm8917_firmware sd855_firmware sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware apq8017 wcn6750_firmware sd450 qcm6125_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware msm8940_firmware msm8976_firmware sd670_firmware wsa8835 sd665_firmware wcd9380 sd888_5g sm6250p qcs410 sc8180x qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca9379_firmware qca6174a sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 wcn6750 sa515m wcd9340_firmware sd855 wsa8815 wcn6850 sd665 wcn3910 sd_8c_firmware sd765 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd768g_firmware wcn3980_firmware sd730 qca6391 sdx55m qca6421_firmware aqt1000_firmware msm8920 msm8953 sd678_firmware qcm4290 csrb31024_firmware sdx50m sd480_firmware wcn6851_firmware msm8920_firmware sc8180x_firmware qca6574au sa8155p_firmware sd670 msm8976sg_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 qcs610_firmware wcn6856 sd_8c wcn3680b sd768g qca6696 qca6391_firmware sd845_firmware wcd9370_firmware sdx55 msm8940 apq8053 sa8155p sd675 sd845 sm7250p sd720g_firmware qcs410_firmware qca9379 ar8035_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2256

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.66% / 70.77%

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-04 Aug, 2024 | 18:42

An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_625_firmware sd_450 sd_8cx_firmware sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sxr1130 msm8909w sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_425 sdm660 sd_430_firmware sd_710_firmware sd_435 sdm630 sd_625 qm215 sd_210 sd_636_firmware sd_820_firmware sd_439_firmware sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_427 sd_430 sd_8cx sd_670 sd_435_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CVE-2019-2283

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 54.12%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CVE-2019-2320

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.66%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130