ByteOS

Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables

Product

Versions

Affected

MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 820, SD 820A, SDM439

Problem Types

Type	CWE ID	Description
text	N/A	Cryptographic Issues in HLOS

Type: text

CWE ID: N/A

Description: Cryptographic Issues in HLOS

References

Hyperlink	Resource
https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:30 Sep, 2019 | 16:15

Updated At:21 Jul, 2021 | 11:39

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

>>mdm9607>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

>>mdm9607_firmware>>-

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

>>msm8909w>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

>>msm8909w_firmware>>-

cpe:2.3:h:qualcomm:qualcomm_215:-:*:*:*:*:*:*:*

>>qualcomm_215>>-

cpe:2.3:o:qualcomm:qualcomm_215_firmware:-:*:*:*:*:*:*:*

>>qualcomm_215_firmware>>-

cpe:2.3:h:qualcomm:sd_210:-:*:*:*:*:*:*:*

>>sd_210>>-

cpe:2.3:o:qualcomm:sd_210_firmware:-:*:*:*:*:*:*:*

>>sd_210_firmware>>-

cpe:2.3:h:qualcomm:sd_212:-:*:*:*:*:*:*:*

>>sd_212>>-

cpe:2.3:o:qualcomm:sd_212_firmware:-:*:*:*:*:*:*:*

>>sd_212_firmware>>-

cpe:2.3:h:qualcomm:sd_205:-:*:*:*:*:*:*:*

>>sd_205>>-

cpe:2.3:o:qualcomm:sd_205_firmware:-:*:*:*:*:*:*:*

>>sd_205_firmware>>-

cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*

>>sd_425>>-

cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*

>>sd_425_firmware>>-

cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*

>>sd_427_firmware>>-

cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*

>>sd_427>>-

cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*

>>sd_430_firmware>>-

cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*

>>sd_430>>-

cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*

>>sd_435_firmware>>-

cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*

>>sd_435>>-

cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*

>>sd_439_firmware>>-

cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*

>>sd_439>>-

cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*

>>sd_429_firmware>>-

cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*

>>sd_429>>-

cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*

>>sd_450_firmware>>-

cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*

>>sd_450>>-

cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*

>>sd_625_firmware>>-

cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*

>>sd_625>>-

cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*

>>sd_632_firmware>>-

cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*

>>sd_632>>-

cpe:2.3:o:qualcomm:sd_820_firmware:-:*:*:*:*:*:*:*

>>sd_820_firmware>>-

cpe:2.3:h:qualcomm:sd_820:-:*:*:*:*:*:*:*

>>sd_820>>-

cpe:2.3:o:qualcomm:sd_820a_firmware:-:*:*:*:*:*:*:*

>>sd_820a_firmware>>-

cpe:2.3:h:qualcomm:sd_820a:-:*:*:*:*:*:*:*

>>sd_820a>>-

cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*

>>sdm439_firmware>>-

cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*

>>sdm439>>-

Weaknesses

CWE ID	Type	Source
CWE-345	Primary	nvd@nist.gov

CWE ID: CWE-345

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin	product-security@qualcomm.com	Patch Third Party Advisory

Hyperlink: https://www.codeaurora.org/security-bulletin/2019/08/05/august-2019-code-aurora-security-bulletin

Source: product-security@qualcomm.com

Resource:

Patch

Third Party Advisory

Similar CVEs

1014Records found

CVE-2018-11295

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.26%

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WMA handler carries a fixed event data from the firmware to the host . If the length and anqp length from this event data exceeds the max length, an OOB write would happen.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-11292

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.14%

7 Day CHG~0.00%

Published-20 Sep, 2018 | 13:00

Updated-05 Aug, 2024 | 08:01

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, lack of input validation in WLANWMI command handlers can lead to integer & heap overflows.

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2018-11296

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.26%

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a message from firmware in WLAN handler, a buffer overwrite can occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23354

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.13% / 33.06%

7 Day CHG-0.01%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Use After Free in Graphics Linux

Memory corruption when the IOCTL call is interrupted by a signal.

CWE ID-CWE-416

Use After Free

CVE-2022-25695

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.16%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-wcd9380_firmware wcn3615_firmware msm8996au sd429_firmware qca6595au_firmware qualcomm215_firmware sd730 qca6310 qsw8573 apq8009 mdm9607 qca6696 qca6421 wcn7850 mdm9205_firmware qca6564au msm8937 sdx24 wcn3660b sd632_firmware mdm8207_firmware sd720g qca6426_firmware sd710_firmware sd460 sd205_firmware msm8996au_firmware mdm9630 apq8056 msm8940 sdx24_firmware wsa8830 msm8920_firmware wsa8815 wcn3680b qca6430 wcn3620_firmware sd855 qcs6490_firmware wcd9340 sdx55_firmware sdxr2_5g_firmware apq8037 msm8976sg_firmware sd_8cx_gen2_firmware sc8180x\+sdx55_firmware mdm9207 sd712 mdm9650 sd765g_firmware qca6574a qca4004_firmware msm8108_firmware sd865_5g_firmware wcd9306_firmware apq8017_firmware qcm6125_firmware sdm429w_firmware sd835_firmware wcn6750 sm7325p msm8917_firmware sd_636_firmware sd695_firmware qcc5100 sd_675 qca6335 sd625_firmware msm8108 qcs405 qca6431_firmware msm8208 csra6640 sd480_firmware qet4101 qca6430_firmware qca8081 sm7315_firmware sm7325p_firmware qca6584au apq8009w sd870 mdm9150 qca9367 qca6390_firmware qcn9024_firmware sc8180x\+sdx55 wcn6855 qca6584_firmware qcx315_firmware wcn3910 sd870_firmware qcm6490_firmware sm6250 sdm630_firmware qca6431 qca6595au wcd9370 sd821_firmware qcs4290_firmware sd888_firmware wcn3980 sd439_firmware sm7315 sd765_firmware sd720g_firmware sd765g sd670 mdm9150_firmware sdx55m msm8208_firmware msm8917 sd450 wcn6850_firmware wcn3660 sd_455 sm6250p wsa8810_firmware wsa8815_firmware wcn3991_firmware sd625 sd850_firmware wcn6740 msm8608_firmware qca6436 msm8952_firmware wsa8810 sdxr1 msm8909w sdm630 sw5100p_firmware aqt1000_firmware qca4004 wsa8835_firmware wcd9335_firmware sm7250p_firmware apq8009_firmware qca6391 qcn9024 wcn3998_firmware csra6620 mdm9330_firmware wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware sd439 wcn3660_firmware sdx57m qcx315 qcc5100_firmware msm8940_firmware sd210_firmware qcm6125 fsm10055_firmware apq8052_firmware fsm10055 sdx12 sd660 csrb31024_firmware sdm429w sdx20 qcs610 qualcomm215 apq8052 qca6391_firmware sd205 wcd9326_firmware sm7250p csra6620_firmware wcn3610 sdx20_firmware wcn3910_firmware msm8209 apq8017 wcd9375 sd750g_firmware msm8976_firmware qca6696_firmware sm6250p_firmware sd865_5g qca9377 wcn3990_firmware mdm9230_firmware wcn3950_firmware wcn3988 sd778g wcd9371_firmware wcn3615 msm8976 sd750g sd768g_firmware qcs605 msm8952 sd712_firmware wcn7851 qca6310_firmware sd710 mdm9640_firmware qca6436_firmware qca9367_firmware sd_636 wcd9341_firmware sd821 sd632 wcd9340_firmware mdm9330 sd850 apq8037_firmware sd_675_firmware qca6174a_firmware qca6564a_firmware sd855_firmware sd662_firmware wcd9371 mdm9650_firmware sdx50m qcs405_firmware qcn6024_firmware qcs6490 sdx55 sd460_firmware sd_455_firmware msm8956 mdm9628 wcn3610_firmware qcm4290_firmware msm8976sg sd450_firmware sd820 wcn3660b_firmware sm4375 msm8909w_firmware qet4101_firmware sd665_firmware wcd9360_firmware sdw2500 sdw2500_firmware qsw8573_firmware sd626 sd768g wcn6740_firmware wcn6856 sd626_firmware apq8009w_firmware sda429w_firmware sdx50m_firmware qca6390 sd480 wcd9330 wcn7851_firmware sw5100 wcn6850 sa415m wcn3950 qcs603_firmware msm8608 qca6320_firmware qca6584au_firmware qcm6490 qcn6024 qca6174a wcd9335 sd7c_firmware sd670_firmware wcn3680b_firmware sd835 qca6421_firmware qca6574au_firmware sd662 mdm9250_firmware qcs610_firmware mdm9205 msm8956_firmware mdm9207_firmware qca6174 qcm2290_firmware wcd9380 mdm9630_firmware qcm4290 wcn3680 mdm9628_firmware sd660_firmware sd730_firmware sd695 qca6174_firmware wcd9375_firmware sd888 ar8035_firmware wcn6856_firmware aqt1000 mdm9230 qcs603 sdx12_firmware ar8035 wcn6855_firmware mdm8207 wcd9360 qca6420 sd780g_firmware wcn3680_firmware qcm2290 sdx65_firmware mdm9250 sa515m sd845_firmware mdm9206 sdxr1_firmware sa515m_firmware mdm9607_firmware wcn3990 apq8076 sd429 apq8076_firmware sd690_5g qca8081_firmware msm8920 wsa8835 wcn3998 wcd9306 apq8056_firmware qca8337_firmware mdm9206_firmware qcs2290 sd820_firmware sd7c wcd9385 sd678 qca6574au wcn7850_firmware sdx65 wcd9385_firmware mdm9640 apq8096au wcn6750_firmware qcs410_firmware sd210 sd680 sd888_5g sd678_firmware qca9379 qcs6125 sm4375_firmware wcn3991 qca6574 csra6640_firmware qca6574_firmware sa415m_firmware qca6564a sd675_firmware qca6574a_firmware sd665 sda429w sd888_5g_firmware wsa8830_firmware qca6320 qca8337 sd_8_gen1_5g_firmware sm6250_firmware sdxr2_5g wcd9341 wcn3980_firmware qcs2290_firmware wcn6851_firmware wcd9326 sd680_firmware qca9379_firmware msm8937_firmware qca9377_firmware apq8096au_firmware sw5100_firmware qca6584 sd780g qca6564au_firmware csrb31024 qca6426 qca6335_firmware sdx55m_firmware qcs6125_firmware sdx57m_firmware sd690_5g_firmware sm8475 wcn3620 sd765 qcs605_firmware wcd9330_firmware wcn3988_firmware qcs4290 msm8209_firmware sw5100p sd_8cx_gen2 sd845 qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2022-25711

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 5.70%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product-wcd9380_firmware wcd9340_firmware qca6595au_firmware qualcomm215_firmware wsa8835 mdm9150_firmware sdx55m sd855_firmware wcn3998 wcn6850_firmware sdx55 wsa8810_firmware qca8337_firmware wsa8815_firmware sa8150p qca6696 wcn3610_firmware wcn7850 qca6436 qca6426_firmware wcn3660b qca6574au wcn7850_firmware wcn3660b_firmware sa6150p qcs410_firmware sd205_firmware sa8155p wsa8810 sa6145p_firmware sd210 wcd9341_firmware wsa8830 sw5100p_firmware wcn6856 wsa8815 qca6390 sda429w_firmware wcn3680b aqt1000_firmware sa6155p wsa8835_firmware sa8150p_firmware qca6430 sa8145p_firmware sw5100 sd855 wcn7851_firmware qca6391 wcn3998_firmware wcd9340 wcn6850 sa8145p wcn6851 sdx55_firmware wcn3950 wcd9370_firmware sdxr2_5g_firmware qca6420_firmware sa8195p sda429w qcc5100_firmware sd210_firmware wsa8830_firmware qca8337 sd_8_gen1_5g_firmware wcn3680b_firmware sdxr2_5g sd865_5g_firmware wcd9341 wcn3980_firmware qca6574au_firmware wcn6851_firmware qcs610 qcs610_firmware qualcomm215 sa6155p_firmware qca6391_firmware qcn9074_firmware qcn9074 sd205 sa8155p_firmware qcc5100 wcd9380 sa6145p wcn3610 sw5100_firmware qca6430_firmware sa6150p_firmware qca6696_firmware sd865_5g wcn6856_firmware sd870 qca6426 sdx55m_firmware aqt1000 sm8475 wcn3950_firmware wcn3988 mdm9150 qca6390_firmware wcn6855_firmware qca6420 wcn6855 wcn3988_firmware wcn7851 qcs8155_firmware sd870_firmware qcs8155 sw5100p qca6436_firmware sa8195p_firmware qca6595au wcd9370 qcs410 wcn3980 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2022-25709

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.07% / 20.95%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-05 Mar, 2025 | 16:44

Use of Out-of-range Pointer Offset in Data Modem

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg

Product-wcn3991_firmware wsa8830 sd678 sm6250p_firmware qca8337 qca6431_firmware sd7c_firmware snapdragon_4_gen_1_firmware sdx65 wcn3950_firmware sd765g_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 wcn3990_firmware wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 qcn6024_firmware sd720g sd_8_gen1_5g_firmware wcn7850 qca6320_firmware sdx55_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sm7250p_firmware qca6436_firmware qca6310 sa515m_firmware wcn7851 sdxr2_5g sd821 wcn3988_firmware qca6421 sm6250 wcd9340 wsa8810_firmware sd765g sd765_firmware qca6436 wcn6851 wcd9335 qca8081 wcn7851_firmware qca6174a_firmware wcd9385 wcd9341 qca6431 sd750g sd870_firmware sdx70m_firmware qca6390 ar8035 sd750g_firmware wcd9375 sm6250_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware sd820 snapdragon_4_gen_1 wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware qcx315 sm8475 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd865_5g sdx55m_firmware wcn6856_firmware wsa8835 qcx315_firmware wcd9380 sm6250p sd690_5g_firmware wcn6855_firmware qca6174a qca6310_firmware wcd9335_firmware wcn3980 sa515m wcd9340_firmware sd855 wsa8815 wcn6850 sd7c qca6320 sd765 qca6426_firmware sd695 sd768g_firmware sd835 qcn9024 wcn3980_firmware sd730 qca6391 sdx55m qca6421_firmware sdx65_firmware sd821_firmware sd678_firmware sd480_firmware wcn6851_firmware qcn9024_firmware wcd9341_firmware sd480 sd870 wsa8810 wcn6855 wcn6856 sd835_firmware sd695_firmware sd768g sd820_firmware qca6391_firmware wcd9370_firmware sdx55 sd675 qcn6024 sdx70m sm7250p sd720g_firmware ar8035_firmware Snapdragon

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-25721

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.03%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 20:18

Incorrect Type Conversion in Video driver

Memory corruption in video driver due to type confusion error during video playback

Product-mdm9150_firmware qca8337_firmware sda429w_firmware sa6150p_firmware wcn3990 sa8145p_firmware qcs610 sdm429w qca8337 qca6564au sdm429w_firmware wcn3950_firmware sa8150p_firmware qca6420_firmware qualcomm215 qcs410 wcd9370 qca6574a qca6564 wcn3990_firmware qca6430_firmware wcn3980 wcn3998 wcn3950 wcd9326_firmware wcd9340_firmware wcn3660b sd855 wsa8815 wcn3660b_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcn3998_firmware wcn3980_firmware sdxr1_firmware wcn3610_firmware qca6420 qca6391 aqt1000_firmware qca6564au_firmware sa6155p_firmware qcs8155 sd429 qca6430 qca6574au qcn9074 sa6145p_firmware sd205 sd429_firmware sa8155p_firmware sd205_firmware wcd9340 sa8195p wsa8810_firmware qualcomm215_firmware wcd9341_firmware wsa8810 wcd9326 sa6155p sd210_firmware qcs610_firmware mdm9150 sa6145p wcn3680b qca6564_firmware wcd9341 sdxr1 qca6696_firmware sa8145p qca6696 qca6391_firmware wcd9370_firmware aqt1000 sa8150p sa6150p sdx55 sa8155p sda429w sd210 sd855_firmware wcn3620_firmware wsa8815_firmware wcn3620 sa8195p_firmware qcs8155_firmware qcn9074_firmware qcs410_firmware wcn3610 Snapdragon

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2022-25715

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.03%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 04:42

Updated-09 Apr, 2025 | 19:57

Incorrect type casting in Display driver

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CVE-2022-25682

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.07% / 22.44%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-wcd9380_firmware mdm9310 wcn3615_firmware msm8996au sd429_firmware qca6595au_firmware qualcomm215_firmware sd730 qca6310 qsw8573 apq8009 mdm9607 qca6696 qca6421 wcn7850 mdm9205_firmware qca6564au msm8937 sdx24 wcn3660b sd632_firmware mdm8207_firmware sd720g qca6426_firmware sd710_firmware sd460 sd205_firmware msm8996au_firmware mdm9630 apq8056 msm8940 sdx24_firmware wsa8830 msm8920_firmware wsa8815 wcn3680b qca6430 wcn3620_firmware sd855 qcs6490_firmware wcd9340 sdx55_firmware sdxr2_5g_firmware apq8037 msm8976sg_firmware sd_8cx_gen2_firmware sc8180x\+sdx55_firmware mdm9207 sd712 mdm9650 sd765g_firmware qca6574a qca4004_firmware msm8108_firmware sd865_5g_firmware wcd9306_firmware apq8017_firmware qcm6125_firmware sdm429w_firmware sd835_firmware wcn6750 sm7325p msm8917_firmware sd_636_firmware ar6003 mdm8215 sd695_firmware qcc5100 sd_675 qca6335 sd625_firmware msm8108 qcs405 qca6431_firmware msm8208 csra6640 sd480_firmware mdm9215_firmware qet4101 qca6430_firmware qca8081 sm7315_firmware sm7325p_firmware qca6584au apq8009w sd870 mdm9150 qca9367 qca6390_firmware qcn9024_firmware sc8180x\+sdx55 wcn6855 qca6584_firmware qcx315_firmware wcn3910 sd870_firmware qcm6490_firmware sm6250 sdm630_firmware qca6431 qca6595au wcd9370 sd821_firmware qcs4290_firmware sd888_firmware wcn3980 ar6003_firmware sd439_firmware mdm8215m sm7315 sd765_firmware sd720g_firmware sd765g sd670 mdm9150_firmware sdx55m msm8208_firmware msm8917 sd450 wcn6850_firmware wcn3660 sd_455 sm6250p wsa8810_firmware wsa8815_firmware wcn3991_firmware sd625 sd850_firmware wcn6740 msm8608_firmware qca6436 msm8952_firmware wsa8810 sdxr1 msm8909w sdm630 sw5100p_firmware aqt1000_firmware qca4004 wsa8835_firmware wcd9335_firmware sm7250p_firmware mdm9615m apq8009_firmware qca6391 qcn9024 wcn3998_firmware csra6620 mdm9330_firmware mdm9310_firmware wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware sd439 mdm9615m_firmware wcn3660_firmware sdx57m qcx315 qcc5100_firmware msm8940_firmware sd210_firmware qcm6125 mdm9655_firmware apq8052_firmware sdx12 sd660 csrb31024_firmware sdm429w sdx20 qcs610 qualcomm215 apq8052 qca6391_firmware sd205 wcd9326_firmware sm7250p csra6620_firmware wcn3610 sdx20_firmware wcn3910_firmware msm8209 apq8017 wcd9375 sd750g_firmware msm8976_firmware qca6696_firmware mdm9215 sm6250p_firmware sd865_5g qca9377 wcn3990_firmware mdm9230_firmware wcn3950_firmware wcn3988 sd778g wcd9371_firmware wcn3615 msm8976 sd750g sd768g_firmware mdm8615m qcs605 msm8952 sd712_firmware mdm9615_firmware wcn7851 qca6310_firmware mdm8215m_firmware sd710 mdm9640_firmware qca6436_firmware qca9367_firmware sd_636 wcd9341_firmware sd821 sd632 wcd9340_firmware mdm9330 sd850 apq8037_firmware sd_675_firmware qca6174a_firmware qca6564a_firmware sd855_firmware sd662_firmware wcd9371 mdm9650_firmware sdx50m qcs405_firmware qcn6024_firmware qcs6490 sdx55 sd460_firmware sd_455_firmware msm8956 mdm9628 wcn3610_firmware qcm4290_firmware msm8976sg sd450_firmware sd820 wcn3660b_firmware sm4375 msm8909w_firmware qet4101_firmware sd665_firmware wcd9360_firmware sdw2500 sdw2500_firmware qsw8573_firmware sd626 sd768g wcn6740_firmware wcn6856 sd626_firmware apq8009w_firmware sda429w_firmware sdx50m_firmware qca6390 sd480 wcd9330 wcn7851_firmware sw5100 mdm8215_firmware wcn6850 sa415m wcn3950 qcs603_firmware msm8608 qca6320_firmware qca6584au_firmware qcm6490 qcn6024 qca6174a wcd9335 sd7c_firmware sd670_firmware wcn3680b_firmware sd835 qca6421_firmware qca6574au_firmware sd662 mdm9250_firmware qcs610_firmware mdm9205 msm8956_firmware mdm9207_firmware qca6174 qcm2290_firmware wcd9380 mdm9630_firmware qcm4290 wcn3680 mdm9628_firmware sd660_firmware sd730_firmware sd695 qca6174_firmware wcd9375_firmware sd888 ar8035_firmware wcn6856_firmware aqt1000 mdm9230 qcs603 sdx12_firmware ar8035 wcn6855_firmware mdm8207 wcd9360 qca6420 sd780g_firmware wcn3680_firmware qcm2290 sdx65_firmware mdm9250 sa515m sd845_firmware mdm9206 sdxr1_firmware sa515m_firmware mdm9655 mdm9607_firmware wcn3990 apq8076 sd429 apq8076_firmware sd690_5g qca8081_firmware msm8920 wsa8835 wcn3998 wcd9306 apq8056_firmware qca8337_firmware mdm9206_firmware qcs2290 sd820_firmware sd7c wcd9385 sd678 qca6574au wcn7850_firmware sdx65 wcd9385_firmware mdm9640 apq8096au wcn6750_firmware qcs410_firmware sd210 sd680 sd888_5g sd678_firmware qcs6125 sm4375_firmware wcn3991 qca6574 csra6640_firmware qca6574_firmware sa415m_firmware qca6564a sd675_firmware qca6574a_firmware sd665 sda429w sd888_5g_firmware wsa8830_firmware qca6320 qca8337 sd_8_gen1_5g_firmware sm6250_firmware sdxr2_5g wcd9341 wcn3980_firmware qcs2290_firmware wcn6851_firmware wcd9326 sd680_firmware msm8937_firmware qca9377_firmware mdm8615m_firmware apq8096au_firmware sw5100_firmware qca6584 sd780g qca6564au_firmware csrb31024 qca6426 qca6335_firmware sdx55m_firmware qcs6125_firmware sdx57m_firmware sd690_5g_firmware sm8475 wcn3620 sd765 qcs605_firmware wcd9330_firmware wcn3988_firmware qcs4290 msm8209_firmware sw5100p mdm9615 sd_8cx_gen2 sd845 qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-25694

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.07% / 20.95%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-05 Mar, 2025 | 16:45

Use of Out-of-range Pointer Offset in MODEM

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sc8180x\+sdx55 qcs2290 qca6595au_firmware qca6335 msm8917 mdm8215 sd_455_firmware csra6620_firmware apq8076 qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware mdm8615m_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 qcn6024_firmware sd720g sd_8cx_gen2_firmware mdm9206_firmware qsw8573_firmware mdm9628 sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware mdm9230_firmware sm7315_firmware mdm8215m wcn7850 qca6574au_firmware mdm9630 wcd9375_firmware qca8081_firmware wcn3998_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 wcd9360 sd680_firmware qca9367_firmware mdm8207 sd_8cx_gen2 qcs6125 apq8056_firmware qca4004_firmware sd662_firmware mdm9615m qca6430 qcs405 qts110 wcd9306_firmware wcd9340 sd626_firmware sd765g qualcomm215_firmware sw5100 sd680 qca6436 wcn6851 qcs603_firmware wcn7851_firmware msm8937 apq8052 msm8209_firmware mdm9250_firmware wcn3660_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g mdm8215_firmware wcn3910_firmware mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd855_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 sd712 wcn3988 sd660_firmware wcn7850_firmware sm8475 msm8208_firmware wcn6750_firmware sd450 wcn3610 msm8608 mdm9640 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 sd625_firmware qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware qet4101_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware sd626 qca6174 qca6430_firmware sd439_firmware wcd9335_firmware wcn3980 qca6335_firmware qsw8573 qcm4325_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 msm8956_firmware qca6584_firmware qca6320 msm8937_firmware mdm9650_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 qcn9024 wcn3980_firmware sd730 wcd9330_firmware sdx55m qcc5100_firmware qca6421_firmware wcn6740_firmware ar6003_firmware sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qcn9024_firmware qca6564a_firmware apq8009w msm8976sg_firmware sdx57m qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware sd695_firmware sdxr1 apq8096au qcs405_firmware mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sd780g_firmware sdx55 sd888_firmware sd675 csra6640 sdx70m sd439 qet4101 wcn3660 qca9379 ar8035_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcs2290_firmware sd7c_firmware csrb31024 mdm9628_firmware snapdragon_4_gen_1_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware mdm9310_firmware wcd9370 sd675_firmware sd625 qca6426 qca6584au_firmware wcn3990_firmware apq8076_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware mdm9615m_firmware wcn3615_firmware sd662 apq8037 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au sm7250p_firmware wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 qca6310 wcn7851 sd429 sa515m_firmware qcs6490 sdxr2_5g qca9367 sdm630 mdm9607_firmware sd821 msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 sg4150p qca8081 qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m qcs6490_firmware sdx70m_firmware qca6390 wcd9375 sd750g_firmware aqt1000 msm8956 msm8976 sc8180x\+sdx55_firmware sm6250_firmware ar8035 msm8952 apq8056 msm8917_firmware sda429w sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 ar6003 qca6564a mdm9630_firmware sg4150p_firmware qcm6125_firmware qcm4325 qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qcc5100 sdx24 sd888 msm8952_firmware msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 apq8052_firmware mdm9615 mdm9205 sa515m qca6574_firmware sd855 sm7325p_firmware sd665 sdx57m_firmware sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware sm7315 apq8009 sd460 qca6391 sdxr1_firmware mdm9310 aqt1000_firmware msm8920 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m sdx20 sd480_firmware msm8920_firmware mdm9215 sd_455 qca6574au sd710 mdm8215m_firmware mdm9607 sd205_firmware wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 wcn3680b sd835_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sdw2500 msm8940 apq8096au_firmware qcn6024 sd845 mdm9615_firmware apq8037_firmware sm7250p sd720g_firmware sdx12 sw5100_firmware qcs410_firmware mdm9330 sd850 qts110_firmware Snapdragon

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-25723

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 26.24%

7 Day CHG~0.00%

Published-17 Oct, 2022 | 00:00

Updated-13 May, 2025 | 20:15

Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile

Product-wcn6855 wsa8830 wcn6855_firmware sm8475 wcn7851_firmware wcn6856 wsa8830_firmware wcn7850_firmware wcn7850 wcn6856_firmware wsa8835 sd_8_gen1_5g_firmware wcd9380 wcn7851 wsa8835_firmware wcd9380_firmware Snapdragon Mobile

CWE ID-CWE-416

Use After Free

CVE-2022-25693

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 26.24%

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 04:42

Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile

CWE ID-CWE-416

Use After Free

CVE-2022-25713

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.44%

7 Day CHG~0.00%

Published-02 May, 2023 | 05:08

Updated-03 Aug, 2024 | 04:49

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.

Product-wsa8830 qca8337_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware qca8337 sd865_5g qca6431_firmware sm8350-ac_firmware wsa8835 sm7250-ac_firmware qca6574 sa8540p_firmware sd_8_gen1_5g wcd9380 sa8150p_firmware qca6595au_firmware qca6390_firmware sm8350 sxr2130 qca6574a wcn685x-5_firmware qca6426 wcn685x-1 snapdragon_8cx_gen_3_compute_platform__firmware sm8450 sm8250-ab wcn3998 wcd9385_firmware qam8295p sa9000p qca6574_firmware sd_8_gen1_5g_firmware sm7250-ab wsa8815 qsm8350_firmware qsm8350 qam8295p_firmware snapdragon_xr2_5g_platform_firmware qca6426_firmware sa9000p_firmware snapdragon_x55_5g_modem-rf_system qca6574a_firmware qca6574au_firmware qca6595au wcn3998_firmware qca8081_firmware snapdragon_x55_5g_modem-rf_system_firmware sm7250p_firmware sm8250-ab_firmware qca6391 qca6436_firmware sa8295p qca6421_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware snapdragon_xr2_5g_platform snapdragon_x65_5g_modem-rf_system qca6698aq sa4155p_firmware sm8350_firmware wcn685x-5 sm8250_firmware sm7250-ab_firmware sm8250-ac qca6574au sa6145p_firmware sa8155p_firmware qca6421 sm7250-aa sa8195p wsa8810_firmware sm8450_firmware wsa8810 sm7250-aa_firmware qca6436 sa6155p sa8540p sm7250-ac qca8081 qca6698aq_firmware sa6145p sm8350-ac wcn685x-1_firmware wcd9385 sxr2130_firmware qca6431 qca6696_firmware sa8145p qca6696 qca6391_firmware sa4150p_firmware qca6390 ar8035 sa8150p sa6150p sa8155p sm8250-ac_firmware wsa8830_firmware sm8250 sd865_5g_firmware wsa8815_firmware wsa8835_firmware sm7250p snapdragon_8cx_gen_3_compute_platform_sa8195p_firmware sa8295p_firmware sa4155p sa4150p ar8035_firmware Snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-25661

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 25.51%

7 Day CHG~0.00%

Published-12 Oct, 2022 | 00:00

Updated-15 May, 2025 | 15:15

Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-qcs605 wcn6855_firmware qca6391_firmware sd888_5g_firmware sd850 qca6574_firmware sdx50m_firmware ar8035 qca6430 sa8155 wcn7850_firmware sdx24_firmware wcd9375_firmware sd855_firmware sa8540p_firmware wcn3990 qca6174a_firmware wsa8835_firmware qca6696_firmware qca8337 sa6145p qca6431_firmware wcn6855 qam8295p wsa8830 qca6696 sm8475 sdx65 sd778g_firmware sm7325p qsm8350_firmware qca6420 sa6155p wcn3998_firmware wcn6750_firmware sdx55 qca6390_firmware sm7250p ar8035_firmware wcn6740_firmware sd765 sdx55_firmware qca6574a_firmware wcd9385_firmware qca8081_firmware wcn3950_firmware qcs605_firmware sdx24 sdxr2_5g_firmware qca6436_firmware wsa8815_firmware qcm6490 sd678 sdx57m_firmware sa6145p_firmware sa9000p qca6430_firmware qca6595 sd675_firmware wcd9370_firmware aqt1000 qca6391 wcn3991_firmware sa8295p qca6174a sa8295p_firmware wsa8835 sm7250p_firmware wcn6851_firmware sd768g_firmware wcn3980_firmware sm7315_firmware qca6574a wcn6750 qca6564a qcn9012_firmware qrb5165m sdx65_firmware qca6595au wcn6851 qcn9012 qcs6490_firmware sd865_5g wcd9340_firmware wcn6850_firmware sd865_5g_firmware qca6564au_firmware qca9377_firmware wsa8830_firmware wcd9341 sd845_firmware wcn3991 wcn3998 wcn6856_firmware qca6574au sd888_firmware sm7315 wcn3990_firmware sdx55m wcd9341_firmware qcs603_firmware sd670 qca6420_firmware qca6564au sd_675 sa9000p_firmware wsa8815 sd850_firmware sd_8cx_gen3 wcd9326 wcn6856 wcn6740 qca6564a_firmware wcn7850 sd_8_gen1_5g_firmware qca6426 wcd9380 qrb5165n qcn9011_firmware qrb5165_firmware sa8155p_firmware qsm8350 sd_8cx_firmware sd780g_firmware qca8337_firmware sd870_firmware wcd9326_firmware qcn9011 sd_8cx_gen3_firmware qca6574 sd_8cx_gen2_firmware sd870 sd765_firmware wcn7851_firmware sdx57m qca6426_firmware sd845 qrb5165n_firmware qcs6490 sd778g qam8295p_firmware sd_675_firmware sd768g wsa8810 qca6335 wcn6850 sd855 sd_8cx_gen2 qca6310_firmware wcd9380_firmware sd678_firmware sd888_5g sa8155_firmware sd670_firmware sd780g qca6335_firmware qca6390 qca6421 qrb5165 sa6155 qca6595au_firmware qcm6490_firmware wsa8810_firmware qca6310 sdx55m_firmware wcd9375 wcd9370 sa8150p_firmware wcn7851 qrb5165m_firmware wcd9340 qca6436 qca9377 wcd9385 sa6155p_firmware sd_8cx sa8150p sd765g wcn3950 qca6595_firmware qcs603 sdxr2_5g sa6155_firmware aqt1000_firmware sd888 sdx50m qca6431 sd675 wcn3980 sm7325p_firmware qca8081 qca6574au_firmware sa8155p sa8540p qca6421_firmware sd765g_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-25655

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.07% / 20.95%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 04:42

Buffer copy without checking the size of input in WLAN HAL.

Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 ipq4028_firmware qcn5550 ar9380 ipq8173_firmware wcd9360_firmware qca9561_firmware qcn5124 qca4024_firmware msm8992_firmware wcn3950_firmware sc8180x\+sdx55 ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 qcn5064 mdm8215 sd_455_firmware csra6620_firmware apq8076 qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware qca9987_firmware sa415m wcn3998 qca6554a_firmware wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware sd_8cx_gen2_firmware ipq8076a mdm9628 wcn3660b sd710_firmware sd460_firmware qca4020 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 sdx20m qca6438_firmware qca9986 sd680_firmware ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware wcn3999 sd_8cx_gen2 ipq5028 qca7500 ipq8072_firmware ipq4029_firmware qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 wcd9340 qcn6132 sd765g qca1990_firmware sw5100 sd680 qca4020_firmware sa6155p qcs603_firmware mdm9250_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca6696_firmware wcd9371 sd750g qcn5154_firmware mdm8215_firmware wcn3910_firmware sd_8cx sa8150p qfe1922 wsa8830_firmware mdm9330_firmware qca9992_firmware sd660 sd855_firmware snapdragon_4_gen_1 sd712 wcn3988 qca6438 sd660_firmware sa8195p_firmware qcn5121 qcn5022_firmware qca9898 ipq4028 qca4010_firmware wcn3610 mdm9640 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware sw5100p msm8996au_firmware wcd9330 ipq8076a_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 qcn5164 qca9558 msm8976_firmware qca6574 sd670_firmware csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware ipq4019_firmware sdx50m_firmware qca9379_firmware qca9985 qcn9012_firmware qca6174 qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcm4325_firmware qcs605 wcd9340_firmware wsa8815 sd7c wcn3910 qca6320 qca6584_firmware mdm9650_firmware qca9986_firmware mdm9215_firmware wcn3660b_firmware sd695 ipq6028 ipq8064 sd835 qca9984 qcn9024 qca1990 wcn3980_firmware sd730 qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware qcc5100_firmware qcn5064_firmware sd678_firmware ar8031_firmware ipq8078_firmware qcn5054 qcs603 ipq8070 qca9994 qca6164_firmware qca9887_firmware qca9980 sd670 qcn9024_firmware ipq8174_firmware sd_636_firmware qca6564a_firmware qca9880 qcm4290_firmware sd480 qcn5121_firmware sw5100p_firmware qcs610_firmware apq8084_firmware sa6145p ipq6018 qca9886_firmware sd695_firmware sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware sa8145p qca6164 sdm630_firmware sd820_firmware qca6391_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware sa8155p csra6640 sd675 qca9531_firmware qca9379 qcm2290 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qca9561 qcn9070 sa8145p_firmware qcs2290_firmware sd7c_firmware csrb31024 mdm9628_firmware snapdragon_4_gen_1_firmware mdm9650 sd_636 csra6620 qca9987 qcn9072 qca9880_firmware qca9992 qcs4290 mdm9250 sd765g_firmware qca6420_firmware ipq8069_firmware apq8009_firmware qca6390_firmware sd690_5g ipq6000 qca6174_firmware mdm9310_firmware sd730_firmware sd675_firmware wcd9370 ipq8072 qcn5152_firmware qca6564 qca6584au_firmware wcn3990_firmware apq8076_firmware qcn9000_firmware qca9984_firmware qca9377 ipq5018 sd_8cx_firmware wcd9385_firmware wcd9326_firmware wcn3615_firmware ipq8074a sd662 qcn5124_firmware qca9982 qfe1952_firmware apq8094 sa8155 qca6320_firmware qca6584 wcn3680b_firmware qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware ipq5010 qca6564au_firmware qca6584au sa6155p_firmware qfe1952 qca6310 ipq8174 sa515m_firmware qca9990 qcn5052 qca9367 mdm9235m_firmware apq8092 apq8084 sdm630 mdm9607_firmware sa415m_firmware wcn3988_firmware msm8994_firmware qcn9074 sa6145p_firmware msm8992 sm6250 sd712_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca4010 sg4150p qca8081 qca9982_firmware qcn6023 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qca6390 qca9898_firmware sd750g_firmware aqt1000 msm8976 wcd9375 sc8180x\+sdx55_firmware sm6250_firmware csr8811 ipq4019 qcn9100_firmware msm8994 apq8092_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware sd820 wsa8835_firmware apq8017 qca6564a mdm9235m sg4150p_firmware qcm6125_firmware qcm4325 qca9882 qcm2290_firmware mdm9635m_firmware wcn3990 qcn9000 sd_675 qca6554a qca6595 ar9380_firmware qcc5100 qcn9012 qca9558_firmware qcn6122_firmware ipq8065_firmware wsa8835 msm8996au sd665_firmware sm6250p qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware mdm9206 qca9889 qca6174a qcn6132_firmware qca9888 qca6310_firmware ipq8074 apq8094_firmware qca9994_firmware mdm9635m ipq8070a_firmware mdm9615 ipq8076_firmware sa515m qca6574_firmware qca9886 sd855 sm4125_firmware sd665 ipq8076 qfe1922_firmware qca6175a sd765 qca9887 qca6574a_firmware qcn5021 ipq8069 qcn5152 sd768g_firmware sd850_firmware apq8009 sd460 qca6391 sdxr1_firmware mdm9310 ipq6005 aqt1000_firmware qcn9100 qcm4290 csrb31024_firmware sdx50m qca9882_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware mdm9215 sd_455 qca9531 ipq8074_firmware qca6574au qca9889_firmware sd710 mdm9607 qcn5122 sa8155p_firmware wcd9341_firmware sdx20m_firmware qcm6125 wsa8810 qcn5022 wcn3680b sd835_firmware qca6564_firmware sd768g ipq6010_firmware qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 sd845 mdm9615_firmware qca9990_firmware ipq8070a qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware ipq8071_firmware qcn9074_firmware qcs410_firmware sw5100_firmware mdm9330 ipq4029 qca6175a_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-25660

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 25.51%

7 Day CHG~0.00%

Published-12 Oct, 2022 | 00:00

Updated-15 May, 2025 | 15:15

Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-qcs605 wcn6855_firmware qca6391_firmware sd888_5g_firmware sd850 qca6574_firmware sdx50m_firmware ar8035 qca6430 sa8155 wcn7850_firmware sdx24_firmware wcd9375_firmware sd855_firmware sa8540p_firmware wcn3990 qca6174a_firmware wsa8835_firmware qca6696_firmware qca8337 sa6145p qca6431_firmware wcn6855 qam8295p wsa8830 qca6696 sm8475 sdx65 sd778g_firmware sm7325p qsm8350_firmware qca6420 sa6155p wcn3998_firmware wcn6750_firmware sdx55 qca6390_firmware sm7250p ar8035_firmware wcn6740_firmware sd765 sdx55_firmware qca6574a_firmware wcd9385_firmware qca8081_firmware wcn3950_firmware qcs605_firmware sdx24 sdxr2_5g_firmware qca6436_firmware wsa8815_firmware qcm6490 sd678 sdx57m_firmware sa6145p_firmware sa9000p qca6430_firmware qca6595 sd675_firmware wcd9370_firmware aqt1000 qca6391 wcn3991_firmware sa8295p qca6174a sa8295p_firmware wsa8835 sm7250p_firmware wcn6851_firmware sd768g_firmware wcn3980_firmware sm7315_firmware qca6574a wcn6750 qca6564a sdx65_firmware qca6595au wcn6851 qcs6490_firmware sd865_5g wcd9340_firmware wcn6850_firmware sd865_5g_firmware qca6564au_firmware qca9377_firmware wsa8830_firmware wcd9341 sd845_firmware wcn3991 wcn3998 wcn6856_firmware qca6574au sd888_firmware sm7315 wcn3990_firmware sdx55m wcd9341_firmware qcs603_firmware sd670 qca6420_firmware qca6564au sd_675 sa9000p_firmware wsa8815 sd850_firmware sd_8cx_gen3 wcd9326 wcn6856 wcn6740 qca6564a_firmware wcn7850 sd_8_gen1_5g_firmware qca6426 wcd9380 sa8155p_firmware qsm8350 sd_8cx_firmware sd780g_firmware qca8337_firmware sd870_firmware wcd9326_firmware sd_8cx_gen3_firmware qca6574 sd_8cx_gen2_firmware sd870 sd765_firmware wcn7851_firmware sdx57m qca6426_firmware sd845 qcs6490 sd778g qam8295p_firmware sd_675_firmware sd768g wsa8810 qca6335 wcn6850 sd855 sd_8cx_gen2 qca6310_firmware wcd9380_firmware sd678_firmware sd888_5g sa8155_firmware sd670_firmware sd780g qca6335_firmware qca6390 qca6421 sa6155 qca6595au_firmware qcm6490_firmware wsa8810_firmware qca6310 sdx55m_firmware wcd9375 wcd9370 sa8150p_firmware wcn7851 wcd9340 qca6436 qca9377 wcd9385 sa6155p_firmware sd_8cx sa8150p sd765g wcn3950 qca6595_firmware qcs603 sdxr2_5g sa6155_firmware aqt1000_firmware sd888 sdx50m qca6431 sd675 wcn3980 sm7325p_firmware qca8081 qca6574au_firmware sa8155p sa8540p qca6421_firmware sd765g_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-415

Double Free

CVE-2022-25743

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 19.97%

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-wcd9380_firmware wcn3615_firmware msm8996au sd429_firmware qca6595au_firmware qualcomm215_firmware sd730 qca6310 apq8009 mdm9607 qca6696 qca6421 qsm8250_firmware qca6564au sdx24 wcn3660b qca6426_firmware sd632_firmware sd720g sa6150p sd460 sd710_firmware sd205_firmware msm8996au_firmware apq8056 sdx24_firmware wsa8830 wsa8815 wcn3680b qca6430 wcn3620_firmware sd855 qcs6490_firmware wcd9340 sdx55_firmware sdxr2_5g_firmware msm8976sg_firmware mdm9650 sd765g_firmware qca6574a msm8108_firmware sd865_5g_firmware apq8017_firmware qcm6125_firmware sdm429w_firmware sd835_firmware wcn6750 sa8295p_firmware sm7325p msm8917_firmware sd_636_firmware sd695_firmware qcc5100 sd_675 qca6335 sd625_firmware msm8108 qcs405 qca6595 qca6431_firmware msm8208 csra6640 sd480_firmware apq8064au_firmware qca6430_firmware qca8081 sm7315_firmware sm7325p_firmware qca6584au apq8009w sd870 mdm9150 qca9367 qca6390_firmware qcn9024_firmware sa6155_firmware wcn6855 wcn3910 sd870_firmware qcm6490_firmware sm6250 qcs8155 sdm630_firmware qca6431 qca6595au wcd9370 sd821_firmware qcs4290_firmware sd888_firmware wcn3980 sm4125_firmware sd439_firmware sm7315 sd765_firmware sd720g_firmware sd765g sd670 mdm9150_firmware sdx55m msm8208_firmware msm8917 qam8295p sd450 wcn6850_firmware wcn3660 sm6250p wsa8810_firmware wsa8815_firmware wcn3991_firmware sa8150p sd625 wcn6740 msm8608_firmware qca6436 apq8064au msm8952_firmware sa8155p sdxr1 wsa8810 msm8909w sdm630 sw5100p_firmware aqt1000_firmware wsa8835_firmware wcd9335_firmware sm7250p_firmware apq8009_firmware qca6391 qcn9024 wcn3998_firmware csra6620 wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware sd439 wcn3660_firmware qcc5100_firmware sd210_firmware qcm6125 apq8052_firmware qca4020_firmware sdx12 sd660 csrb31024_firmware sa4150p_firmware sdm429w sdx20 qcs610 qualcomm215 apq8052 qca6391_firmware sd205 wcd9326_firmware sm7250p sa8155p_firmware csra6620_firmware wcn3610 sdx20_firmware sa6145p wcn3910_firmware msm8209 apq8017 wcd9375 sd750g_firmware msm8976_firmware qca6696_firmware sm6250p_firmware sd865_5g qca9377 wcn3990_firmware wcn3950_firmware wcn3988 sd778g wcd9371_firmware wcn3615 msm8976 sd750g sd768g_firmware qcs605 msm8952 qca6310_firmware sd710 qcs8155_firmware qca6436_firmware sa8195p_firmware qca4020 qca9367_firmware sd_636 wcd9341_firmware sd821 sd632 wcd9340_firmware sd_675_firmware qca6174a_firmware qca6564a_firmware sd855_firmware sd662_firmware wcd9371 mdm9650_firmware sdx50m qcs405_firmware qcn6024_firmware qcs6490 sdx55 sd460_firmware msm8956 mdm9628 wcn3610_firmware sa6155 qcm4290_firmware msm8976sg sd450_firmware sd820 wcn3660b_firmware sm4375 msm8909w_firmware sdx20m_firmware wcd9360_firmware sdw2500 sdw2500_firmware sa6145p_firmware sd626 sd768g wcn6740_firmware wcn6856 sd626_firmware sm4125 sda429w_firmware sdx50m_firmware apq8009w_firmware sa6155p qca6390 sa8150p_firmware sd480 wcd9330 sa8145p_firmware sw5100 wcn6850 sa8145p sa415m wcn3950 msm8608 qca6320_firmware qca6584au_firmware qcm6490 qcn6024 qca6174a wcd9335 wcn3999 sd835 sd670_firmware wcn3680b_firmware qca6595_firmware qca6421_firmware qca6574au_firmware sd662 mdm9250_firmware qam8295p_firmware qca6564_firmware sa8295p qcs610_firmware msm8956_firmware qca6174 qcm2290_firmware wcd9380 ar8031 qcm4290 wcn3680 mdm9628_firmware sd660_firmware sd730_firmware sd695 qca6174_firmware wcd9375_firmware sd888 sa6150p_firmware ar8035_firmware wcn6856_firmware aqt1000 sdx12_firmware ar8035 wcn6855_firmware qsm8250 qca6420 wcd9360 sd780g_firmware wcn3680_firmware qcm2290 sdx65_firmware mdm9250 sa515m sd845_firmware mdm9206 sdxr1_firmware sa515m_firmware mdm9607_firmware wcn3990 apq8076 sd429 apq8076_firmware sd690_5g qca8081_firmware wsa8835 wcn3998 ar8031_firmware apq8056_firmware qca8337_firmware mdm9206_firmware qcs2290 sd820_firmware wcd9385 sd678 qca6574au sdx65 wcd9385_firmware apq8096au wcn6750_firmware qcs410_firmware sd210 sd680 sd888_5g sd678_firmware qca9379 wcn3999_firmware qcs6125 sm4375_firmware wcn3991 qca6574 csra6640_firmware qca6574_firmware sa415m_firmware qca6564a sdx20m sa8195p sd675_firmware qca6574a_firmware sda429w sa8155_firmware wsa8830_firmware sd888_5g_firmware qca6320 qca8337 sm6250_firmware sdxr2_5g wcd9341 wcn3980_firmware qcs2290_firmware wcn6851_firmware wcd9326 sd680_firmware qca9379_firmware sa6155p_firmware sa4150p qca9377_firmware apq8096au_firmware sw5100_firmware sd780g qca6564au_firmware csrb31024 qca6426 qca6335_firmware sdx55m_firmware qcs6125_firmware sd690_5g_firmware sa8155 wcn3620 sd765 qcs605_firmware qca6564 wcd9330_firmware wcn3988_firmware qcs4290 msm8209_firmware sw5100p sd845 qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2022-25681

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 24.08%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-wcd9380_firmware wcd9340_firmware qca6595au_firmware qca6310 sd850 qca6174a_firmware qca6564a_firmware sd_675_firmware sd855_firmware sdx50m qcs6490 sdx55 qca6696 qca6421 wcn7850 sa6155 qca6564au qca6426_firmware sdx24 qrb5165m_firmware sa6145p_firmware qsm8350_firmware sdx24_firmware wsa8830 sd768g wcn6740_firmware wcn6856 wsa8815 qca6390 sdx50m_firmware sa6155p sa8150p_firmware qca6430 wcn7851_firmware sd855 qcs6490_firmware sd_8cx_gen3_firmware wcd9340 wcn6850 sdx55_firmware wcn3950 sd_8cx_firmware qcs603_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware qcm6490 qca6174a sd670_firmware sd765g_firmware qca6574a qca6595_firmware qrb5165n sd865_5g_firmware qca6421_firmware qrb5165 qca6574au_firmware qrb5165n_firmware qam8295p_firmware sa8295p wcn6750 sa8295p_firmware sm7325p wcd9380 sd_675 qca6335 sa9000p_firmware qca6595 qca6431_firmware sd_8cx_gen3 qca6430_firmware qca8081 ar8035_firmware sd888 sm7315_firmware sm7325p_firmware wcd9375_firmware wcn6856_firmware sd870 aqt1000 qcs603 qca6390_firmware ar8035 wcn6855_firmware qcn9011_firmware qca6420 sa6155_firmware sd780g_firmware wcn6855 sdx65_firmware qcn9011 sd870_firmware qcm6490_firmware sd845_firmware qca6431 qca6595au wcd9370 sd888_firmware wcn3990 wcn3980 sm7315 qca8081_firmware sd765_firmware sd765g sd670 wsa8835 sdx55m qam8295p wcn3998 wcn6850_firmware wsa8810_firmware qca8337_firmware wsa8815_firmware wcn3991_firmware sa8150p sd850_firmware qrb5165m wcn6740 wcd9385 qca6436 sd678 qca6574au wcn7850_firmware sdx65 wcd9385_firmware wcn6750_firmware sa8155p wsa8810 sd888_5g aqt1000_firmware qcn9012 wsa8835_firmware sd678_firmware sm7250p_firmware qca6391 qsm8350 qca6574 wcn3991 wcn3998_firmware sd_8cx qca6574_firmware wcn6851 sd778g_firmware qca6564a sd675 wcd9370_firmware qca6420_firmware sd675_firmware qca6574a_firmware sdx57m sa9000p sa8155_firmware sd888_5g_firmware wsa8830_firmware sa8540p_firmware qca8337 sd_8_gen1_5g_firmware sdxr2_5g wcd9341 wcn3980_firmware wcn6851_firmware wcd9326 sa6155p_firmware qca6391_firmware wcd9326_firmware qcn9012_firmware sa8540p sa8155p_firmware sm7250p sa6145p qca9377_firmware qrb5165_firmware wcd9375 qca6696_firmware sd865_5g sd780g qca6564au_firmware qca6426 qca9377 qca6335_firmware sdx55m_firmware sdx57m_firmware sm8475 sd778g wcn3950_firmware wcn3990_firmware sa8155 sd765 sd768g_firmware qcs605_firmware qcs605 wcn7851 qca6310_firmware qca6436_firmware sd_8cx_gen2 sd845 wcd9341_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-9690

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 14.90%

7 Day CHG~0.00%

Published-16 Nov, 2017 | 22:00

Updated-20 Apr, 2025 | 01:37

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a qbt1000 ioctl handler, an incorrect buffer size check has an integer overflow vulnerability potentially leading to a buffer overflow.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2022-25746

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.1||HIGH

EPSS-0.04% / 11.67%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 19:53

Buffer Copy Without Checking Size of Input in Kernel

Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.

Product-qca9377_firmware sd_8cx_gen3_firmware wcn3991_firmware wsa8830 sd678 qca8337 qca6431_firmware sdx65 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sa6155 qca6335 wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qca6426 wcn3990_firmware qrb5165n_firmware qca9377 wcn3998 sd_8cx_firmware wcd9385_firmware qam8295p sd_8cx_gen2_firmware sdxr2_5g_firmware wcd9326_firmware wcn3950 sd_8_gen1_5g_firmware qsm8350_firmware qsm8350 qam8295p_firmware qcn9011_firmware sa8155 sa9000p_firmware sm7315_firmware qca6574au_firmware sdx55_firmware wcn7850 qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware qca6310 sd_8cx_gen2 wcn7851 qcs6490 qrb5165_firmware qrb5165m_firmware sdxr2_5g sa8155_firmware qca6430 sa6145p_firmware qca6421 sd778g_firmware wcd9340 wsa8810_firmware sd765g sd765_firmware qca6436 wcd9326 wcn6851 sa6155p qca8081 qcs603_firmware wcn7851_firmware qca6174a_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware sd870_firmware sd_8cx_gen3 qca6390 ar8035 sd_8cx aqt1000 sa8150p wcd9375 wsa8830_firmware sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sm8475 qca6564a sa8295p_firmware wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd780g sd865_5g qca6595 qca6564au sdx24 sdx55m_firmware wcn6856_firmware qcn9012 sd888 sd670_firmware qca6574 wsa8835 sa8540p_firmware wcd9380 sd888_5g qca6574a sdx50m_firmware wcn6855_firmware qca6174a sm7325p sdx24_firmware qca6310_firmware qca6430_firmware qcn9012_firmware wcn3980 wcn6750 qca6335_firmware sa9000p qca6574_firmware qcs605 wcd9340_firmware sd855 wsa8815 sm7325p_firmware wcn6850 sdx57m_firmware sd765 qca6426_firmware qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware wcn3980_firmware sm7315 qca6391 sdx55m sa8295p qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware qcm6490_firmware sdx50m qrb5165 wcn6851_firmware qcs603 qcn9011 qca6574au sa8155p_firmware sd670 qca6564a_firmware sdx57m wcd9341_firmware wsa8810 sd870 wcn6855 sa8540p wcn6856 sa6145p sd768g qca6595_firmware wcn6740 qca6696 qca6391_firmware sd845_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sd845 sm7250p ar8035_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-25698

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 12.72%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22068

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 9.63%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:51

Updated-03 Aug, 2024 | 03:00

kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sm6250p_firmware wcn3998_firmware qcs610 qcs2290_firmware qca8337 wcd9360_firmware sdx65 csra6620 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9377 sa415m wcn3998 wcd9371_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcd9326_firmware wcn3615_firmware wcn3660b sd662 sd460_firmware sa8155 sm7315_firmware wcn7850 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au qca8081_firmware sa6155_firmware sdx12_firmware sm7250p_firmware wcd9375_firmware wcn3615 qca6420 qca6436_firmware apq8053_firmware qrb5165n wcd9360 qca6564au_firmware sd680_firmware sa6155p_firmware sd778g wcn3999 sa515m_firmware wcn7851 qrb5165_firmware qrb5165m_firmware sdxr2_5g sa8155_firmware sd662_firmware sa415m_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware sm6250 sd778g_firmware sa8195p wsa8810_firmware qualcomm215_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcd9326 sa6155p wcd9335 wcn6851 qca8081 wcn7851_firmware qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 qca6696_firmware wcd9371 sd750g sd870_firmware ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware sd660_firmware wcn7850_firmware wsa8815_firmware sa8195p_firmware wsa8835_firmware qca6564a wcn6750_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sw5100p sd780g sd865_5g qca6564au sdx55m_firmware wcn6856_firmware sd888 wsa8835 qca6574 sd665_firmware wcd9380 sd888_5g sm6250p wcn3999_firmware qualcomm215 qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6174a sm7325p qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware wcn6750 sa515m qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 sd768g_firmware qrb5165m wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m aqt1000_firmware wcn6740_firmware msm8953 sdx65_firmware sd678_firmware ar8031_firmware qcm4290 sdx50m qrb5165 sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware qca6564a_firmware wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 sw5100p_firmware qcs610_firmware mdm9150 wcn6856 sa6145p wcn3680b qca6564_firmware sd695_firmware sd768g ar8031 qcs405_firmware wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 sm7250p sd720g_firmware sdx12 sw5100_firmware qcs410_firmware ar8035_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2022-22061

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.97%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

CVE-2022-22093

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 24.24%

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 03:00

Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Product-wcn3991_firmware wcn3991 wsa8830 wcd9380_firmware sd780g sd865_5g qca6431_firmware sdx55m_firmware wcn6856_firmware sd888 wsa8835 wcd9380 sd765g_firmware sd888_5g qca6420_firmware qca6390_firmware wcd9370 wcn6855_firmware sm8475p_firmware sm7325p qca6426 qrb5165n_firmware qca6430_firmware wcn6750 wcn3998 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware sd_8_gen1_5g_firmware wcd9340_firmware wsa8815 sm7325p_firmware qsm8350_firmware wcn6850 qsm8350 sd765 qca6426_firmware sm7315_firmware wcn7850 sd768g_firmware wcd9375_firmware wcn3998_firmware qrb5165m sm7315 sm7250p_firmware qca6391 sdx55m qca6420 qca6436_firmware qrb5165n qca6421_firmware sm8475_firmware sm7450_firmware aqt1000_firmware sd778g wcn6740_firmware sd_8cx_gen2 wcn7851 qcs6490 qrb5165_firmware qrb5165m_firmware sdxr2_5g qcm6490_firmware wsa8832_firmware qrb5165 wcn6851_firmware qca6430 qca6421 sd778g_firmware wcd9340 wsa8810_firmware sd765g wcd9341_firmware wsa8810 sd765_firmware sd870 qca6436 wcn6851 wsa8832 wcn6855 wcn7851_firmware wcn6856 wcd9385 wcd9341 sd768g qca6431 qcs6490_firmware sd870_firmware wcn6740 qca6391_firmware qca6390 wcd9375 sd_8cx aqt1000 sd780g_firmware wcd9370_firmware sd888_firmware wsa8830_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sm7250p sm7450 sm8475 wcn6750_firmware sm8475p Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CVE-2022-22072

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.46%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:51

Updated-03 Aug, 2024 | 03:00

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Product-qca9377_firmware mdm9150_firmware wcn3990 wcd9330 qca6564au sdx24 mdm9628_firmware mdm9650 csra6620 sd670_firmware qca6574 mdm9250 apq8009_firmware qca6335 csra6620_firmware qcs605_firmware qca6574a mdm9206 csra6640_firmware qca9379_firmware qca6174a sdx24_firmware wcn3990_firmware qca6310_firmware wcd9335_firmware qca9377 wcn3980 wcn3998 qca6335_firmware wcd9326_firmware mdm9628 wcn3615_firmware mdm9206_firmware sa515m qca6574_firmware qcs605 wcn3660b wcd9340_firmware wsa8815 sd710_firmware qca6320 msm8937_firmware mdm9650_firmware qca6175a qca4020 wcn3660b_firmware qca6320_firmware qca6574a_firmware qca6574au_firmware wcn3680b_firmware sd835 wcn3615 sdx12_firmware wcn3998_firmware wcn3999_firmware wcn3980_firmware apq8009 wcn3610_firmware sdxr1_firmware apq8053_firmware wcd9330_firmware qca6564au_firmware qca6310 qca9367_firmware pm8937 mdm9626 wcn3999 sa515m_firmware ar8031_firmware qca9367 sdx20 qcs603 mdm9607_firmware qcs405 mdm9626_firmware qca6574au sd710 mdm9607 sd670 wcd9340 qca6564a_firmware apq8017_firmware wsa8810_firmware wcd9341_firmware wsa8810 qca4020_firmware wcd9326 wcd9335 qcs603_firmware mdm9150 msm8937 wcn3680b sd835_firmware qca6174a_firmware mdm9250_firmware wcd9341 sdxr1 pm8937_firmware apq8096au ar8031 qcs405_firmware sd820_firmware sd845_firmware apq8053 apq8096au_firmware csra6640 sd845 sd820 sdx20_firmware wsa8815_firmware sdx12 apq8017 qca6564a qca9379 qca6175a_firmware wcn3610 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-1284

Improper Validation of Specified Quantity in Input

CVE-2022-22080

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.03%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Product-qca9377_firmware wcn3991_firmware mdm9150_firmware wcd937 sd678 mdm9640_firmware sm6250p_firmware wsa8830 qcs610 qcs2290_firmware qca8337 mdm9628_firmware wcn361 mdm9650 csra6620 qcs4290 wcn3950_firmware sd765g_firmware wcd934 qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g sd730_firmware csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9377 sa415m wcn3998 sdxr2_5g_firmware wcn3950 sm4125 mdm9628 sd720g sd662 sd460_firmware sa8155 sm7315_firmware wcn7850 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware sdx12_firmware wcn3998_firmware sm7250p_firmware wcn3999_firmware qca6420 qca6436_firmware apq8053_firmware qrb5165n qca6564au_firmware sd680_firmware sa6155p_firmware sd778g wcn3999 sa515m_firmware qcs6490 qrb5165_firmware qrb5165m_firmware sdxr2_5g wcn7851 wcd936 wcn361_firmware sa8155_firmware sd662_firmware sa415m_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware sm6250 sd778g_firmware sa8195p wsa8810_firmware sd765g sd765_firmware qca6436 sd680 wcd937_firmware sa6155p wcn6851 wcn7851_firmware qca6174a_firmware qcs4290_firmware qca6696_firmware qcs6490_firmware sd750g sd870_firmware wcd938_firmware ar8035 qca6390 sd750g_firmware aqt1000 wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 sd660_firmware wcn6850_firmware wcn7850_firmware sa8195p_firmware wsa8815_firmware wsa8835_firmware qca6564a wcn6750_firmware wcd936_firmware wcd938 mdm9640 qcm2290_firmware wcn3991 qca8337_firmware wcn3990 sd_675 sd780g sd865_5g qca6564au sdx55m_firmware wcn6856_firmware sd888 wsa8835 qca6574 sd888_5g sm6250p qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6174a sm7325 qca6430_firmware wcn3980 wcn6750 sd439_firmware wcd934_firmware sa515m qca6574_firmware sd855 sm4125_firmware wcn6850 wcd932_firmware wcn3910 wsa8815 mdm9650_firmware sd765 wcd932 qca6426_firmware qca6574a_firmware sd695 sd768g_firmware qrb5165m wcd933 wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware qcm4290 qcm6490_firmware sdx50m qrb5165 sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware qca6564a_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 qcs610_firmware mdm9150 wcn6856 sa6145p wcn3680b qca6564_firmware sd695_firmware sd768g apq8096au ar8031 qcs405_firmware wcn6740 qca6696 qca6391_firmware sd780g_firmware sdx55 sd888_firmware apq8053 apq8096au_firmware csra6640 sa8155p sd675 sd439 sm7250p sd720g_firmware sdx12 qcs410_firmware ar8035_firmware qcm2290 wcd933_firmware sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22074

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 27.08%

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 03:00

Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware mdm9640_firmware qcs610 qca8337 qca6431_firmware sdx65 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sd632 sa415m wcn3998 wcd9371_firmware wcn3950 sd_8cx_gen2_firmware mdm9628 mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd460_firmware qca4020 wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware qca8081_firmware sa6155_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware qca9367_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware qcs6125 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 sd765g qualcomm215_firmware sw5100 sd680 qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware msm8937 mdm9250_firmware wcn3660_firmware wcd9341 pm8937_firmware qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware sd450 wcn3610 mdm9640 wcn3991 qca8337_firmware wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 qca6564au sdx55m_firmware wcn6856_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware qca9379_firmware sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m qca6421_firmware sm8475_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware wcn3680_firmware qrb5165 wcn6851_firmware qcs603 sd_636_firmware qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sdxr1 ar8031 apq8096au qcs405_firmware sdm630_firmware qca6391_firmware wcd9370_firmware sd780g_firmware sdx55 apq8053 sa8155p csra6640 sd675 sd439 wcn3660 sm8475p_firmware qca9379 ar8035_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcs2290_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6426 wcn3990_firmware qrb5165n_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware sa6155p_firmware qca6310 pm8937 wcn7851 sd429 sdxr2_5g qca9367 sdm630 mdm9607_firmware sa415m_firmware wcn3988_firmware sd429_firmware sa6145p_firmware qca6421 sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 msm8953_firmware msm8917_firmware wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware wcn6850_firmware wsa8835_firmware wcn3620 sm7450 apq8017 qca6564a qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sdx24 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware wcn6750 qca6574_firmware sd855 sd665 sd765 qca6574a_firmware sd768g_firmware qrb5165m apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware mdm9626 qcm4290 csrb31024_firmware wsa8832_firmware sdx20 sd480_firmware mdm9626_firmware qca6574au sa8155p_firmware mdm9607 wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 wcn3680b sd835_firmware sd768g wcn6740 qca6696 sdw2500 apq8096au_firmware sm7250p sw5100_firmware qcs410_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2022-22066

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 27.08%

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 03:00

Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware sd_8cx_gen3_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sc8180x\+sdx55 qcs2290 qca6595au_firmware sa6155 csra6620_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 wcd9371_firmware sd_8cx_gen2_firmware sm4125 sd720g wcn3950 sd_8_gen1_5g_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware qca6420 wcd9360 sm7450_firmware sd680_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware qcs6125 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 sd765g sw5100 qca6436 sd680 wcn6851 sa6155p wcn7851_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware sw5100p qca6564au sdx55m_firmware wcn6856_firmware qca6574 wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6426_firmware sd695 wcn3980_firmware sd730 sdx55m qca6421_firmware sm8475_firmware wcn6740_firmware sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qca6564a_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sd695_firmware ar8031 qca6595_firmware qcs405_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sm8475p_firmware ar8035_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcs2290_firmware sd7c_firmware csrb31024 csra6620 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9377 wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware sd662 sa8155 sdx55_firmware qca6595au wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware sa515m_firmware qcs6490 wcn7851 sdxr2_5g sa415m_firmware wcn3988_firmware sa6145p_firmware qca6421 sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware sd_8cx_gen3 ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 sc8180x\+sdx55_firmware sm6250_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7450 qca6564a qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qca6595 sdx24 sd888 wsa8835 sd665_firmware sd888_5g sm6250p qca6574a wcn6855_firmware qca6174a sm7325p wcn6750 sa515m qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 qca6175a sd765 qca6574a_firmware sd768g_firmware qrb5165m sm7315 sd460 qca6391 aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m wsa8832_firmware sd480_firmware qca6574au sa8155p_firmware sd710 wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 qca6564_firmware sd768g wcn6740 qca6696 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware qca6175a_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-22100

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 27.08%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22070

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 22.31%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sc8180x\+sdx55 qcs2290 qca6595au_firmware sa6155 qca6335 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 wcd9371_firmware sd_8cx_gen2_firmware sm4125 sd720g wcn3950 sd_8_gen1_5g_firmware sd710_firmware sd460_firmware sm7315_firmware qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware sdx12_firmware wcn3998_firmware qca6420 wcd9360 sm7450_firmware sd680_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware qcs6125 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 sd765g sw5100 qca6436 sd680 wcn6851 sa6155p qcs603_firmware wcn7851_firmware mdm9250_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware sd_8cx wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware sa8195p_firmware sm8475 wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware sw5100p qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6320 mdm9650_firmware qca6426_firmware sd695 sd835 wcn3980_firmware sd730 sdx55m qca6421_firmware sm8475_firmware wcn6740_firmware sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sd695_firmware sdxr1 ar8031 qca6595_firmware qcs405_firmware sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sm8475p_firmware ar8035_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcs2290_firmware sd7c_firmware csrb31024 mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware sd662 sa8155 qca6320_firmware sdx55_firmware qca6595au wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware qca6310 sa515m_firmware qcs6490 wcn7851 sdxr2_5g sdm630 sa415m_firmware wcn3988_firmware sa6145p_firmware qca6421 sd712_firmware sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 sc8180x\+sdx55_firmware sm6250_firmware sdx20_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7450 qca6564a qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qca6595 sdx24 sd888 wsa8835 sd665_firmware sd888_5g sm6250p qca6574a wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 sa515m qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 qca6175a sd765 qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m wsa8832_firmware sdx20 sd480_firmware qca6574au sa8155p_firmware sd710 wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sd845 sm7250p sd720g_firmware sdx12 sw5100_firmware qcs410_firmware qca6175a_firmware sd850 sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22084

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.12% / 31.52%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-03 Aug, 2024 | 03:00

Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware sm6250p_firmware qcs610 sdx65 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sd632 wcn3998 wcd9371_firmware wcn3950 sm4125 mdm9628 sd720g mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware qca4020 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware sa6155_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware qca9367_firmware wcn3999 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 qualcomm215_firmware sd765g sw5100 qca4020_firmware qca6436 sd680 sa6155p wcn6851 qcs603_firmware wcn7851_firmware msm8937 mdm9250_firmware wcn3660_firmware wcd9341 pm8937_firmware qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware sd450 wcn3610 wcn3991 wcd9380_firmware sdm429w msm8996au_firmware sw5100p wcd9330 qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 msm8937_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m sm8475_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sdxr1 apq8096au ar8031 qcs405_firmware sdm630_firmware sd820_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 wcn3660 sm8475p_firmware qca9379 qcm2290 wcn3991_firmware wsa8830 sd678 qcs2290_firmware mdm9628_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware qca6595au wcn3615 wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 pm8937 wcn7851 qcs6490 sd429 sdxr2_5g qca9367 sdm630 mdm9607_firmware wcn3988_firmware sa6145p_firmware sd429_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware msm8953_firmware msm8917_firmware wcn3620_firmware sd820 qcm6490 sd888_5g_firmware wsa8835_firmware sdx20_firmware wcn3620 wcn6850_firmware wsa8815_firmware sm7450 apq8017 qca6564a qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd765 qca6574a_firmware sd768g_firmware sm7315 apq8009 qca6391 sd460 sdxr1_firmware aqt1000_firmware sdx65_firmware mdm9626 qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sdx20 sd480_firmware mdm9626_firmware qca6574au sa8155p_firmware sd710 mdm9607 wcd9341_firmware wsa8810 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22058

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.07% / 21.28%

7 Day CHG~0.00%

Published-26 Sep, 2022 | 16:35

Updated-21 May, 2025 | 16:15

Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-msm8909w sd439_firmware wcn3660_firmware sd439 qca6574au_firmware qca6310 wcd9330_firmware sd429_firmware msm8996au_firmware mdm9650_firmware msm8996au sd845 qca6574a_firmware qualcomm215_firmware mdm9206 qualcomm215 sd660 wsa8810_firmware qca6320 qca6595au apq8096au_firmware wcn3660 apq8053 sd835_firmware apq8017 qca6420 mdm9640 mdm9628_firmware wcn3980 wcn3680_firmware aqt1000_firmware qca6574_firmware wcd9326 wsa8810 sdx20_firmware wcn3998_firmware msm8937 qca9379_firmware aqt1000 qca9377 qca6335 sd820 qca6696 mdm9206_firmware qca6574a sd845_firmware sd429 qca6595au_firmware sdw2500_firmware qca9379 qca6574 sd450_firmware wcn3990_firmware sd855 apq8009_firmware wcd9330 wcn3620 sd670 wcd9340_firmware apq8009w_firmware sd632_firmware qca4020_firmware mdm9640_firmware wsa8815 qca6564a sdm429w_firmware qca6320_firmware mdm9607 qcn7606_firmware sd670_firmware qcs605_firmware sd855_firmware qca6564au_firmware msm8917 qca6564a_firmware sa415m_firmware wcn3680b mdm9607_firmware wcn3660b sd835 mdm9150 sd820_firmware apq8053_firmware qca6175a qca6335_firmware wcd9341_firmware qcs603 qca6564au qcs603_firmware wcn3680b_firmware msm8953 sd632 sd660_firmware wcn3610_firmware sdxr1_firmware sd710_firmware mdm9626 mdm9626_firmware qca4020 sa415m sdw2500 msm8937_firmware sd450 qca6584_firmware wcd9335_firmware qca6310_firmware qcn7606 mdm9250_firmware wcn3620_firmware qca6430_firmware sdm429w apq8096au mdm9250 qca6696_firmware qca6174a_firmware wcd9326_firmware apq8017_firmware sdx20 csrb31024_firmware qca9367_firmware pm8937_firmware wcn3998 wcn3615_firmware wcd9341 qca6175a_firmware qcn7605_firmware qca6174a qcs605 pm8937 wcn3660b_firmware msm8909w_firmware wsa8815_firmware wcd9335 wcn3615 csrb31024 qcn7605 mdm9628 qca6430 qca9377_firmware msm8953_firmware sd710 wcn3990 wcn3680 msm8917_firmware wcn3610 wcn3980_firmware qca9367 mdm9150_firmware mdm9650 apq8009 qca6574au sdxr1 wcd9340 sdx24 sdx24_firmware apq8009w qca6584 qca6420_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2022-22098

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.07% / 22.31%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon Auto

Product-apq8096au_firmware apq8096au Snapdragon Auto

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-3696

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.62%

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 07:44

u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use for checking security permission for particular process' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8996AU, QCA4531, QCA6574AU, QCA9531, QCM2150, QCS605, SDM429W, SDX20, SDX24

CWE ID-CWE-416

Use After Free

CVE-2020-3616

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.46%

7 Day CHG~0.00%

Published-02 Jun, 2020 | 15:05

Updated-04 Aug, 2024 | 07:37

Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8909W, MSM8917, MSM8953, MSM8996AU, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-22071

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.81% / 73.28%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:51

Updated-30 Jul, 2025 | 01:37

Known KEV||Action Due Date - 2023-12-26||Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Product-ar8031 qcm2290_firmware sd778g sd855_firmware wcn6851 wcn6850_firmware sd855 wcn3988_firmware sa6155p qcs2290 wcn3999_firmware qca6436 qcs4290_firmware csra6620 sd765_firmware wcn3980_firmware sd690_5g wcd9335 qrb5165 qca6595au sm7250p sd780g csra6620_firmware msm8953 qca6574au_firmware sd750g sdx55_firmware qca6696 wcd9380 apq8053 qcs405 sm4125_firmware ar8031_firmware wsa8830_firmware wsa8815 qcm4290 wsa8810 wcn3615_firmware sd662 qca6391 qca6391_firmware qca6436_firmware wcn6750 wcn6856_firmware wcn7850 qca8081_firmware qcm4290_firmware sdx55m qrb5165m_firmware sm7250p_firmware sd662_firmware qca6390_firmware qrb5165_firmware wcn3910 qca6426_firmware wcn3910_firmware sd439_firmware qca6574au wcn3999 qca6696_firmware mdm9150_firmware sdxr2_5g_firmware qcs410_firmware sdxr2_5g qca6595au_firmware sd750g_firmware qca6426 wcn3991_firmware sd765g sm4125 wcn3950_firmware wcn6855 sd865_5g sa8195p_firmware qcs6490_firmware qcs410 sdx55m_firmware wcd9326 sa8195p sd439 sd765 csra6640 qca6574 qrb5165n_firmware wcn3998 wsa8830 wcn3980 wsa8835_firmware qca6174a wsa8835 sd865_5g_firmware wcn6740_firmware wcn3680b_firmware wcn7851_firmware wcd9370_firmware wcn3988 sd460 wcn6850 sd765g_firmware sd680 wcn3660b wcn6855_firmware qca6574a_firmware wcd9341_firmware wcd9375_firmware sa6155p_firmware sd768g wcn3950 wcn7851 sdx65 sd870 wcn3998_firmware ar8035_firmware qcs6490 sd870_firmware sd888_5g qca8337_firmware qcm2290 qcs2290_firmware qca9377 qca6390 sd480_firmware sdx12 wcd9380_firmware qcs610 qca6574a csra6640_firmware wcd9335_firmware wcd9375 qca8337 sd690_5g_firmware sm7325p_firmware sdx12_firmware qcm6490 wcn3615 sd768g_firmware qcm6490_firmware qualcomm215 qca8081 sd695 wsa8810_firmware msm8953_firmware mdm9150 qca9377_firmware qcs405_firmware sd680_firmware sdx55 qrb5165n apq8053_firmware wcn3991 wcn3680b qrb5165m sa8155p wcn6851_firmware wcn6856 sd460_firmware wcd9370 sd480 qcs610_firmware wcn6740 qualcomm215_firmware ar8035 sm7325p wcd9341 wcn6750_firmware wcn3660b_firmware wcd9326_firmware qca6574_firmware sa8155p_firmware wcd9385_firmware sd780g_firmware sd695_firmware sd778g_firmware wcd9385 sd888_5g_firmware sdx65_firmware qcs4290 qca6174a_firmware wcn7850_firmware wsa8815_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Multiple Chipsets

CWE ID-CWE-416

Use After Free

CVE-2022-22092

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 26.24%

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 03:00

Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Product-wcn3991_firmware wcn3991 wsa8830 qca8337_firmware wcd9380_firmware sd780g qca8337 sd865_5g qca6431_firmware sdx55m_firmware wcn6856_firmware sd888 sdx65 wsa8835 wcd9380 sd765g_firmware sd888_5g qca6390_firmware wcd9370 wcn6855_firmware sm8475p_firmware sm7325p qca6426 qrb5165n_firmware wcn6750 wcn3998 wcd9385_firmware sdxr2_5g_firmware sd_8_gen1_5g_firmware wsa8815 sm7325p_firmware qsm8350_firmware wcn6850 qsm8350 sd765 qca6426_firmware sm7315_firmware wcn7850 sd768g_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware qrb5165m sm7250p_firmware sm7315 qca6391 sdx55m qca6436_firmware qrb5165n qca6421_firmware sm8475_firmware sm7450_firmware wcn6740_firmware sd778g sdx65_firmware wcn7851 qcs6490 qrb5165_firmware qrb5165m_firmware sdxr2_5g qcm6490_firmware wsa8832_firmware qrb5165 wcn6851_firmware qca6421 sd778g_firmware wsa8810_firmware sd765g wsa8810 sd765_firmware sd870 qca6436 wcn6851 wsa8832 wcn6855 qca8081 wcn7851_firmware wcn6856 wcd9385 sd768g qca6431 qcs6490_firmware sd870_firmware wcn6740 qca6391_firmware qca6390 ar8035 wcd9375 sd780g_firmware wcd9370_firmware sd888_firmware wsa8830_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sm7250p sm7450 sm8475 wcn6750_firmware ar8035_firmware sm8475p Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-416

Use After Free

CVE-2022-22082

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.12% / 32.25%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-03 Aug, 2024 | 03:00

Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-22103

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.46%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:41

Updated-03 Aug, 2024 | 03:00

Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto

Product-sa8540p sa9000p sa8540p_firmware sa9000p_firmware Snapdragon Auto

CWE ID-CWE-415

Double Free

CVE-2022-22094

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 22.51%

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 03:00

memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CVE-2020-3624

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.81%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 07:37

u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCN7605, QCS605, QCS610, QM215, Rennell, SA415M, SA515M, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware kamorta_firmware mdm9635m_firmware mdm9640_firmware qcm2150_firmware qcs610 sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware sa415m mdm9635m apq8098 qcn7605 mdm9615 mdm9205 mdm9206_firmware sa515m qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware sa515m_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sa415m_firmware sdm710 qm215 sc7180_firmware mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware qcn7605_firmware qcs610_firmware mdm9150 msm8937 mdm9207c_firmware msm8905 mdm9207c sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sc7180 sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sdm850 mdm9615_firmware kamorta apq8017 saipan nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2022-22099

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.03%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto

Product-sa8540p sa9000p sa8540p_firmware sa9000p_firmware Snapdragon Auto

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2022-22090

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 12.29%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-03 Aug, 2024 | 03:00

Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

CWE ID-CWE-416

Use After Free

CVE-2022-22095

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 26.24%

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 03:00

Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Product-qcm2290_firmware wcn3991_firmware wcn3991 wsa8830 wcd9380_firmware qcs2290_firmware sd865_5g sdx55m_firmware wsa8835 qcs4290 wcn3950_firmware wcd9380 sd765g_firmware qcs2290 qca6390_firmware sd690_5g wcd9370 sd690_5g_firmware qca6426 qrb5165n_firmware wcn3998 sd439_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 wcd9326_firmware wcn3615_firmware sd855 sm4125_firmware wcn6850 wsa8815 sd662 wcn3910 sd460_firmware sd765 qca6426_firmware wcn3680b_firmware sdx55_firmware sd768g_firmware wcd9375_firmware wcn3615 wcn3998_firmware qrb5165m sm7250p_firmware sd460 qca6391 sdx55m apq8053_firmware qca6436_firmware qrb5165n sd680_firmware msm8953 qcm4290 qrb5165_firmware qrb5165m_firmware sdxr2_5g qrb5165 wcn6851_firmware sd662_firmware wcn3988_firmware wsa8810_firmware sd765g wcd9341_firmware qcm4290_firmware sd765_firmware sd870 qca6436 sd680 wcd9326 wcn6851 wsa8810 wcn3680b qcs4290_firmware wcd9385 wcd9341 sd768g sd750g sd870_firmware qca6391_firmware qca6390 wcd9375 sd750g_firmware wcn3910_firmware wcd9370_firmware sdx55 msm8953_firmware apq8053 wsa8830_firmware sd855_firmware sd865_5g_firmware sd439 wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7250p qcm2290 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-416

Use After Free

CVE-2020-3623

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

7 Day CHG~0.00%

Published-02 Jun, 2020 | 15:05

Updated-04 Aug, 2024 | 07:37

kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130

Product-sm8250 sxr2130 sm8250_firmware sxr2130_firmware Snapdragon Mobile

CWE ID-CWE-20

Improper Input Validation

CVE-2020-3647

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.81%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 07:37

u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, QCS405, SC8180X, SDX55, SM6150, SM7150, SM8150

Product-qcs405 sm7150_firmware sm6150_firmware sm6150 sdx55 mdm9607 sm8150_firmware sm8150 qcs405_firmware sdx55_firmware sm7150 mdm9607_firmware sc8180x sc8180x_firmware Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-3648

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.05%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 07:37

u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W

Product-msm8909w_firmware msm8909w Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2020-3613

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 28.55%

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:37

Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8150

Product-sm8150 sm8150_firmware Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-415

Double Free

CVE-2020-3694

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 14.22%

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 07:44

u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in Bitra, Nicobar, Saipan, SM6150, SM8150, SM8250, SXR2130