CVE-2019-10565 | ByteOS Network

Vulnerability Details :

CVE-2019-10565

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-06 Nov, 2019 | 17:11

Updated At-04 Aug, 2024 | 22:24

Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, QCN7605, QCS405, QCS605, SDM845, SDX24, SXR1130

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:06 Nov, 2019 | 17:11

Updated At:04 Aug, 2024 | 22:24

▼CVE Numbering Authority (CNA)

Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, QCN7605, QCS405, QCS605, SDM845, SDX24, SXR1130

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Versions

Affected

APQ8053, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, QCN7605, QCS405, QCS605, SDM845, SDX24, SXR1130

Problem Types

Type	CWE ID	Description
text	N/A	Double Free Issue in Camera Driver

Type: text

CWE ID: N/A

Description: Double Free Issue in Camera Driver

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:06 Nov, 2019 | 17:15

Updated At:21 Nov, 2019 | 15:15

Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, QCN7605, QCS405, QCS605, SDM845, SDX24, SXR1130

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8053_firmware>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9207c:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9207c_firmware>>-

cpe:2.3:o:qualcomm:mdm9207c_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8905:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8905_firmware>>-

cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909_firmware>>-

cpe:2.3:o:qualcomm:msm8909_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909w_firmware>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcn7605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcn7605_firmware>>-

cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs405_firmware>>-

cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs405:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs605_firmware>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm845_firmware>>-

cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm845:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdx24_firmware>>-

cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdx24>>-

cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sxr1130_firmware>>-

cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-415	Primary	nvd@nist.gov

CWE ID: CWE-415

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin	product-security@qualcomm.com	N/A

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Source: product-security@qualcomm.com

Resource: N/A

Similar CVEs

428Records found

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.10% / 26.56%

||

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 12:21

Double free in Video

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sa6150p_firmware qcs610 wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware qca6335 csra6620_firmware qcs605_firmware apq8076 sd_675_firmware csra6640_firmware qcs6125_firmware msm8108 wcn3998 msm8108_firmware wcn3950 sm4125 sd720g mdm9628 mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd710_firmware sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware msm8909w apq8009w_firmware qca6420 sdx20m sd680_firmware qca9367_firmware qcs6125 apq8056_firmware sd662_firmware qcs405 qca6430 wcd9340 sd626_firmware sd765g qualcomm215_firmware sw5100 sd680 qca6436 wcn6851 sa6155p wcn7851_firmware apq8052 msm8209_firmware mdm9250_firmware wcd9341 qca6696_firmware sd870_firmware sd750g wcn3910_firmware sxr2150p_firmware sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 msm8208_firmware qcn7606_firmware wcn6750_firmware wcn3610 msm8608 wcn3991 sda429w_firmware wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 sd625_firmware qca6564au sdx55m_firmware wcn6856_firmware msm8976_firmware qca6574 sd670_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware sd626 qca6430_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 msm8956_firmware qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m qcc5100_firmware wcn6740_firmware sd821_firmware sd678_firmware apq8064au_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware sd670 qca6564a_firmware apq8009w msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware sa6145p sd695_firmware sdxr1 ar8031 apq8096au qcs405_firmware sa8145p sd820_firmware qca6391_firmware wcd9370_firmware sd780g_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sxr2150p qcm2290 qcn7606 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware mdm9628_firmware snapdragon_4_gen_1_firmware mdm9650 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware sd625 qca6564 qca6426 wcn3990_firmware apq8076_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 qca6320_firmware wcn3680b_firmware sdx55_firmware wcn3615 qca6595au sm7250p_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 msm8208 wcn7851 sd429 qcs6490 sdxr2_5g qca9367 sd821 mdm9607_firmware msm8976sg wcn3988_firmware qcn9074 sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 msm8956 msm8976 sm6250_firmware apq8064au msm8952 apq8056 sda429w sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 qca6564a qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qcc5100 sd888 msm8952_firmware msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 apq8052_firmware qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sm7315 apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware qcm4290 qcm6490_firmware sdx50m sdx20 sd480_firmware qca6574au sd710 sa8155p_firmware mdm9607 sd205_firmware wcd9341_firmware sdx20m_firmware qcm6125 wsa8810 mdm9150 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sdw2500 sa6150p apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware Snapdragon qca9377_firmware wcn3991_firmware mdm9150_firmware sa6150p_firmware sa8145p_firmware qcs2290_firmware mdm9628_firmware snapdragon_4_gen_1_firmware wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware apq8009_firmware sd730_firmware csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware csra6640_firmware qcs6125_firmware apq8076_firmware wcn3990_firmware sdw2500_firmware msm8108_firmware sdxr2_5g_firmware wcd9385_firmware wcd9326_firmware wcn3615_firmware mdm9206_firmware sd_8_gen1_5g_firmware sd710_firmware sd460_firmware sm7315_firmware qca6320_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware apq8009w_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd680_firmware sa6155p_firmware qca9367_firmware apq8056_firmware sd662_firmware mdm9607_firmware wcn3988_firmware sa6145p_firmware sd429_firmware sd778g_firmware sd626_firmware wsa8810_firmware qualcomm215_firmware sd765_firmware wcn7851_firmware msm8209_firmware qca6174a_firmware mdm9250_firmware qcs4290_firmware qca6696_firmware qcs6490_firmware sd870_firmware wcn3910_firmware sxr2150p_firmware sd750g_firmware sm6250_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware wcn6850_firmware sd660_firmware wcn7850_firmware wsa8835_firmware sa8195p_firmware msm8208_firmware qcn7606_firmware wcn6750_firmware qcm6125_firmware qcm2290_firmware sda429w_firmware wcd9380_firmware msm8996au_firmware sd625_firmware sdx55m_firmware wcn6856_firmware msm8952_firmware msm8909w_firmware msm8976_firmware sd670_firmware sdm429w_firmware sd665_firmware sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6310_firmware qca6430_firmware wcd9335_firmware apq8052_firmware qca6335_firmware qca6574_firmware wcd9340_firmware sm4125_firmware sm7325p_firmware msm8956_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware sd768g_firmware wcn3980_firmware sdxr1_firmware wcd9330_firmware qcc5100_firmware aqt1000_firmware wcn6740_firmware sd821_firmware sd678_firmware apq8064au_firmware ar8031_firmware qcm6490_firmware wcn3680_firmware sd480_firmware wcn6851_firmware sa8155p_firmware sd205_firmware qca6564a_firmware msm8976sg_firmware wcd9341_firmware sdx20m_firmware qcm4290_firmware sw5100p_firmware sd210_firmware qcs610_firmware sd835_firmware qca6564_firmware sd695_firmware qcs405_firmware sd820_firmware qca6391_firmware sd845_firmware msm8608_firmware sd780g_firmware wcd9370_firmware sd888_firmware apq8096au_firmware sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware

CWE ID-CWE-415

Double Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.39% / 59.73%

||

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 04:42

Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware qcs610 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sd632 wcn3998 wcd9371_firmware wcn3950 sm4125 mdm9628 sd720g mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware qca4020 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware sa6155_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware qca9367_firmware wcn3999 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 qualcomm215_firmware sd765g qca4020_firmware qca6436 sd680 sa6155p wcn6851 qcs603_firmware wcn7851_firmware msm8937 mdm9250_firmware wcn3660_firmware wcd9341 pm8937_firmware qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware sd450 wcn3610 wcn3991 wcd9380_firmware sdm429w msm8996au_firmware wcd9330 qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 msm8937_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m sm8475_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 qcs610_firmware sa6145p sdxr1 apq8096au ar8031 qcs405_firmware sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 wcn3660 sm8475p_firmware qca9379 qcm2290 wcn3991_firmware wsa8830 sd678 qcs2290_firmware mdm9628_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware qca6595au wcn3615 wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 pm8937 wcn7851 sd429 sdxr2_5g qca9367 sdm630 mdm9607_firmware wcn3988_firmware sa6145p_firmware sd429_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware msm8953_firmware msm8917_firmware wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware wsa8835_firmware wcn3620 wcn6850_firmware sm7450 apq8017 qca6564a qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd888_5g qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd765 qca6574a_firmware sd768g_firmware sm7315 apq8009 qca6391 sd460 sdxr1_firmware aqt1000_firmware mdm9626 qcm4290 sdx50m wsa8832_firmware sdx20 sd480_firmware mdm9626_firmware qca6574au sa8155p_firmware sd710 mdm9607 wcd9341_firmware wsa8810 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware qcs410_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-415

Double Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.28% / 50.75%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-03 Aug, 2024 | 03:00

Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm6250p_firmware qcs610 sdx65 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sd632 wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd710_firmware sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware sa6155_firmware wcn3998_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware qca9367_firmware wcn3999 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 qualcomm215_firmware sd765g qca6436 sd680 wcn6851 sa6155p qcs603_firmware wcn7851_firmware wcd9341 qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware wcn3991 wcd9380_firmware sdm429w msm8996au_firmware wcd9330 qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m sm8475_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 qcs610_firmware sa6145p sd695_firmware sdxr1 apq8096au ar8031 qcs405_firmware sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 sm8475p_firmware qcm2290 wcn3991_firmware wsa8830 sd678 qcs2290_firmware mdm9650 sd_636 csra6620 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware qca6595au wcn3615 wcn3999_firmware sm7250p_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 wcn7851 qcs6490 sd429 sdxr2_5g qca9367 sdm630 wcn3988_firmware sa6145p_firmware sd429_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware msm8953_firmware msm8917_firmware wcn3620_firmware sdx20_firmware qcm6490 sd888_5g_firmware wsa8835_firmware wcn3620 wcn6850_firmware wsa8815_firmware sm7450 apq8017 qca6564a qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sdx20 sd480_firmware qca6574au sa8155p_firmware sd710 wcd9341_firmware wsa8810 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware qcs410_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-415

Double Free

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.23% / 45.68%

||

7 Day CHG~0.00%

Published-07 May, 2021 | 09:10

Updated-03 Aug, 2024 | 16:25

Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qfs2580 qca9377_firmware qpm5679_firmware sm6250p_firmware pmd9607_firmware qdm5579 qfs2608_firmware qfs2530 qpm8870_firmware qln1030 pm6125 qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpa5581_firmware sa6155 pm7150l qpa8821 pm8998_firmware wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qfe4320 qsw8574_firmware sd460_firmware pm8953_firmware sd6905g qpa4360_firmware wcn3998_firmware qfe2520_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 pm6150a qpm6670_firmware qca9367_firmware pm660_firmware pm8150b sa8155_firmware qfe2101 qca6430 qat3522 pmr735a wcd9340 sdm830_firmware sd765g sdr660 qfs2630_firmware sdr865 qdm5620_firmware smb1358 smr545 qca6696_firmware qln5020 wcd9371 sd870_firmware smb1350 pmm855au_firmware sa8150p pm6350 qdm5621 qfe3340 qtc800s qat3514_firmware sd660 qet6105 pm640p_firmware sd660_firmware wcn6750_firmware qat5516_firmware pm6150l sd450 sd8885g pm855l_firmware qtc410s wcn3991 qpa8801 sdm429w pm8150l_firmware qat5533_firmware sdx55m_firmware sdxr25g qpa8673_firmware pm6150 smb1354_firmware sd670_firmware qca6574 sd632_firmware qfs2630 qpa8842 sdr052_firmware pmm8996au wcd9380 qualcomm215 qln4640 qcs410 smb1380_firmware qfe4309_firmware pmk8350_firmware smb1381 pm855p_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sd439_firmware sdxr25g_firmware qdm2301 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware qdm5621_firmware qdm2301_firmware sd835 wcn3980_firmware sd730 pm660l_firmware pm6250_firmware wcn6740_firmware pm8008 pm8350b_firmware qtm525_firmware pme605_firmware pme605 sd678_firmware apq8064au_firmware qpm5621_firmware qcs603 rsw8577 qpa6560_firmware qpa8802_firmware qln4640_firmware qfe4308_firmware qpm5621 qpm6582 sd670 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcm4290_firmware wcn6855 pm8150l pmi8998_firmware qcs610_firmware sa6145p pm660a_firmware pm215 pm4250 ar8031 wtr2965 sdm630_firmware qca6391_firmware pmx20_firmware pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 csra6640 pm8350bhs qat3555_firmware qpa8803_firmware wcn3660 qca9379 pm855b qpm5870 pm8909 wsa8830 pm660 qet6110_firmware qdm5579_firmware pm6125_firmware qbt1500 qpa5581 mdm9650 fsm10055_firmware qbt1500_firmware qpm5870_firmware qcs4290 qet6100 pmm855au qca6420_firmware smb1394_firmware apq8009_firmware smb1396 pm7150a sd675_firmware pm8350 qca6564 qpa4361_firmware pm8350c_firmware qpa5461_firmware qca6426 wcn3990_firmware qca9377 qpm5641 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware wcd9326_firmware wcn3615_firmware wtr2955 rgr7640au_firmware pm7250_firmware sdr845_firmware qdm5620 smb1380 pmk8002_firmware qsw6310_firmware sa8155 qdm4650_firmware sdx55_firmware pmm6155au_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware qsm7250_firmware qpm6670 pm7150l_firmware qpm4641 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 qca9367 sdm630 qdm4643 qfs2530_firmware wcn3988_firmware pmx55 qpm4641_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware pm8953 qat5515 qpm5677 qat3514 wcd9326 wcd9335 pm6350_firmware pm8004_firmware sdr8150_firmware qcs4290_firmware pm439 qtc800h_firmware pmk7350_firmware qpm5620 qpm4630 qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware pmm8195au qln4642 msm8917_firmware qpm5677_firmware sdx20_firmware wsa8815_firmware wtr3925_firmware pmi8937 pm8998 pmk7350 smr525_firmware qpm8820_firmware qfe4301_firmware apq8017 qln1020_firmware qpm6621_firmware pm670a_firmware qcm6125_firmware pmx55_firmware wtr2955_firmware qfe4373fc_firmware smb1398_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qpa4361 qpm4640_firmware mdm9206 wcn6855_firmware qdm5679_firmware pm8350c smr525 qca6310_firmware qfe4305_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware sd665 pm6150a_firmware pm6150_firmware sd765 pmx20 pmd9607 qca6574a_firmware qpm4630_firmware qat3555 apq8009 qpa5461 wtr2965_firmware pm670_firmware qfs2608 sd480_firmware qtc801s qpm5641_firmware sd710 pm8008_firmware sdx20m_firmware qpm6621 pmr735a_firmware pmw3100 pmx50 qca6564_firmware sdr8250 sd768g qln1030_firmware smb1350_firmware wcn6740 pmw3100_firmware pm8004 pm640l pmk8002 sdw2500 apq8096au_firmware sd845 sd455_firmware sdm830 smb1357 qcs410_firmware qpa5580 fsm10055 qfe2550 sa6150p_firmware qcs610 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 qpm6585_firmware qat3519 qbt2000_firmware qtc800h sa8150p_firmware qcs2290 sdr8250_firmware qca6335 msm8917 csra6620_firmware qcs605_firmware qln1020 smr546_firmware qdm5671 csra6640_firmware qpm4650_firmware qat3518 sd632 sdr425_firmware smr526_firmware qpa5460 pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware msm8909w sdx20m pmx50_firmware qpa8675_firmware sdr735g qpa5460_firmware wcn3999 qdm3301_firmware qsm7250 qcs6125 sd662_firmware smb1360 qcs405 qualcomm215_firmware rsw8577_firmware qdm2308_firmware fsm10056_firmware pm439_firmware qca4020_firmware qca6436 sa6155p wcn6851 qcs603_firmware qpa6560 sdr675_firmware wcn3660_firmware wcd9341 pmi8952 qdm4643_firmware pm8937_firmware qca6431 sm7350_firmware qet4100_firmware sd750g qfe4320_firmware qdm3302 wcn3910_firmware qpm5657 qpm5875_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 wtr3925 sdr052 sa8195p_firmware smb1390 qet4100 wcn3610 qpa8686_firmware qpm6585 sda429w_firmware wcd9380_firmware smb1355 qln4650 wcd9330 msm8996au_firmware sdr735g_firmware pm8350bhs_firmware wgr7640 qat5568 qet5100 qdm5671_firmware qpa8801_firmware qca6564au sd636 wcn6856_firmware pm8005_firmware qet4101_firmware pm7250b qln4642_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware sdx50m_firmware sdr735 smb1395 pm660l ar8151 smr526 wtr5975 qca6430_firmware pmk8003 qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 pm7350c_firmware qca6335_firmware qsw8573 qcs605 wcn3910 qca6320 mdm9650_firmware smb1394 qca6426_firmware pm8350_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 qpa8675 sdr051_firmware wcd9330_firmware sdx55m pm670a qca6421_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 qsw8574 sd6905g_firmware ar8031_firmware wcn3680_firmware pm855l wcn6851_firmware qdm5670_firmware sd8655g pm7150a_firmware pm8150b_firmware qfe4302 smr545_firmware qca6564a_firmware qdm2310_firmware pm4250_firmware sd480 sd870 sd8885g_firmware pm670 sd210_firmware qdm5677 pm8005 pm855_firmware qdm2302 pmm6155au sdxr1 pm855b_firmware apq8096au qcs405_firmware qpm6582_firmware pm640l_firmware qln4650_firmware qpm5875 qet5100m sd888_firmware sa8155p sd675 sd439 qet4101 qat3516 pm670l qpm5658 qcm2290 qpm5658_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware sd678 sdr051 qln5030 qcs2290_firmware pm4125 fsm10056 pmi632 qpa2625_firmware pm456 pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qpa5373 qpm4621 smb1360_firmware qet6100_firmware pm670l_firmware sdr660g sd455 sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware sd730_firmware wcd9370 sdr425 pmr525_firmware qfe3340_firmware ar8151_firmware pmi632_firmware qat5516 sd662 qpa8821_firmware qfe4308 sdr660g_firmware pm8350bh pm3003a qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware sm7350 smb1354 qca6564au_firmware qdm2305 sa6155p_firmware qca6310 qpm8820 pm8937 qpm2630 qln5020_firmware smb1398 sa6145p_firmware sdr675 sm6250 apq8017_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qca6174a_firmware wcd9385 qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware apq8064au qpa8673 qdm2310 qfe2550_firmware msm8953_firmware qln5030_firmware sda429w sd210 wcn3620_firmware qfe4302_firmware smb1396_firmware wcn6850_firmware wcn3620 wsa8835_firmware qca6564a smr546 qet6110 pmi8952_firmware qcm2290_firmware qln5040 qpm8895 sdr845 qpm5670 wcn3990 pmk8350 qdm3302_firmware sd888 pm8350b qdm2307_firmware msm8909w_firmware wsa8835 msm8996au sdm429w_firmware qpm5657_firmware sm6250p rgr7640au sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware qpm4640 wcn6750 pm7350c qet5100m_firmware qpm4650 qtm525 wtr6955 sd855 sm4125_firmware qfe4305 wtr6955_firmware pm640p sd768g_firmware sdr865_firmware pm8250_firmware sd460 qca6391 sdxr1_firmware smb1351 smb1357_firmware aqt1000_firmware pm215_firmware qpm8895_firmware pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 sdx20 pm8916 smb1395_firmware qdm4650 pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 qet6105_firmware sd8655g_firmware wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware smb231_firmware qat5568_firmware qdm2308 qat3550 wtr4905_firmware wcn6856 qdm5679 wcn3680b sd835_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware qpa2625 sa6150p pmm8195au_firmware sm7250p sd720g_firmware qpm4621_firmware sd636_firmware pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-415

Double Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.29% / 51.67%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 09:14

Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 sd_675 sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware sd_450_firmware sd_845_firmware sd_410 qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sdx24_firmware sd_625_firmware sd_450 sd_8cx_firmware sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sxr1130 sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware sd_412 qualcomm_215 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 qcs405 sd_625 sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware qcs405_firmware sd_712_firmware sd_412_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 sd_427 sd_670 sd_435_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.39% / 59.57%

||

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 09:14

Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 8CX, SXR1130.

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 mdm9206 sd_675 mdm9655 sd_12 sd_712_firmware sd_8cx_firmware sd_670_firmware mdm9206_firmware mdm9607_firmware sd_710_firmware mdm9655_firmware mdm9650 qcs605 sd_8cx sd_670 mdm9607 mdm9650_firmware sd_710 sd_410_firmware sd_12_firmware sxr1130_firmware sd_410 sxr1130 qcs605_firmware sd_675_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.81%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 08:24

Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware mdm9206 sd_652 sd_425_firmware qca9379_firmware qca6174a sd_665 sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sd_210_firmware sd_600 sd_652_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware qcs405 sd_625 qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.35% / 57.21%

||

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 08:24

Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_12 sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_625_firmware sd_450 sd_16_firmware mdm9635m sd_8cx_firmware mdm9615 sd_845 mdm9206_firmware qcs605 sd_52_firmware sd_632_firmware sd_835_firmware mdm9650_firmware sd_12_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sxr1130 msm8909w sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_16 sd_855 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware mdm9625_firmware sd_439_firmware mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_855_firmware sd_712_firmware sd_52 sdm630_firmware sda660_firmware mdm9625 sd_8cx sd_430 sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 50.19%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:32

Updated-05 Aug, 2024 | 08:01

Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SM7150, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sm7150_firmware sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sm7150 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd855 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sd_652_firmware sxr1130 msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 sd_625 qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_430 sd_427 sd_670 sd_435_firmware sd855_firmware sd_710 sd_205 sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-287

Improper Authentication

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.48% / 64.68%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9205, MDM9650, QCA8081, QCS605, SD 427, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 sd_855 sd_730_firmware sd_675 sdx20 sd_670_firmware sdm660 sdm630 sd_710_firmware sd_435 mdm9650 sd_636 sd_625 ipq8074_firmware snapdragon_high_med_2016_firmware sd_636_firmware sd_450_firmware sd_845_firmware qca8081 qcs605_firmware sd_675_firmware sd_730 snapdragon_high_med_2016 sd_665 sd_850_firmware sd_625_firmware ipq8074 sd_450 sd_712_firmware sdm630_firmware mdm9205_firmware sd_8cx_firmware sda660_firmware mdm9205 sd_845 sd_427 qcs605 sd_8cx sd_670 sd_435_firmware sd_835_firmware mdm9650_firmware sd_710 sdx20_firmware sd_835 sda660 sxr1130_firmware qca8081_firmware sxr1130 sd_665_firmware sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.48%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:49

Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-1187

DEPRECATED: Use of Uninitialized Resource

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.38%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 18:49

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996, MSM8996AU, MSM8998, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCS605, SA6155P, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware apq8096_firmware mdm9640_firmware msm8996au_firmware sdm845 apq8096 sdx24 mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 qcs605_firmware mdm9206 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 mdm9206_firmware qca6574_firmware qca9886 qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware sa6155p qca8081 mdm9207c_firmware msm8996_firmware mdm9207c qca6174a_firmware qca9886_firmware sm8150_firmware apq8096au sdm630_firmware sda660_firmware apq8053 sm6150_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.81%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9150_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdx24 mdm9650 sd_636 msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 qca9379_firmware qca6174a sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 mdm9206_firmware qcs605 mdm9640 sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sda660 sd_665_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 qca6574au sd_820_firmware mdm9607 sd_636_firmware mdm9150 qca6174a_firmware sd_730 sd_850_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware qca9379 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.40% / 60.28%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:49

While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8976, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA845, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware sdm636_firmware sdm845_firmware msm8996au_firmware sdm845 sdx20 sdm660 sdx24 mdm9607_firmware mdm9650 qcs405 qca6574au sdm710 msm8909w_firmware mdm9607 msm8976_firmware msm8996au sm6150 apq8017_firmware sdm710_firmware qcn7605_firmware sdm670 qcs605_firmware mdm9207c_firmware mdm9206 msm8905 mdm9207c qca6174a_firmware qca6174a qca9379_firmware sdm670_firmware sm8150_firmware msm8909 sdx24_firmware apq8096au sdm636 qcs405_firmware qca9377 sda845_firmware qcn7605 mdm9206_firmware qcs605 msm8976 apq8053 apq8096au_firmware sm6150_firmware mdm9650_firmware sm8150 sdx20_firmware msm8905_firmware qca6574au_firmware apq8017 msm8909w qca9379 msm8909_firmware apq8053_firmware sdm660_firmware sda845 mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.38% / 58.85%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 18:42

Device memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8016, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SM6150, SM7150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sdm670_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 apq8016_firmware sdm630 mdm9607_firmware msm8920_firmware mdm9655_firmware sdm660 sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 msm8909 mdm9655 apq8096au sdm439_firmware sdm630_firmware sda660_firmware mdm9625 apq8016 qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.37% / 58.30%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_600 sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 53.96%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.81%

||

7 Day CHG~0.00%

Published-22 Jul, 2019 | 13:47

Updated-04 Aug, 2024 | 18:42

Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.48%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:49

Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 35.24%

||

7 Day CHG~0.00%

Published-24 Mar, 2020 | 19:01

Updated-05 Aug, 2024 | 02:46

An issue was discovered on Samsung mobile devices with O(8.x) (Qualcomm chipsets) software. There is an integer underflow in the Secure Storage Trustlet. The Samsung ID is SVE-2019-13952 (July 2019).

Vendor-n/a Qualcomm Technologies, Inc.Google LLC

Product-sdm660 android n/a

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 35.24%

||

7 Day CHG~0.00%

Published-24 Mar, 2020 | 18:23

Updated-05 Aug, 2024 | 02:46

An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820 chipsets) software. RKP memory corruption allows attackers to control the effective address in EL2. The Samsung ID is SVE-2019-15221 (October 2019).

Vendor-n/a Google LLC Qualcomm Technologies, Inc.Samsung

Product-exynos_9610 sm6150 sm8150 android exynos_7885 sm8150_fusion exynos_9820 n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.56% / 67.72%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 22:31

Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect buffer size calculation. in PostScript and PDF printers that use IPS versions prior to 2019.2 in PostScript and PDF printers that use IPS versions prior to 2019.2

Vendor-Qualcomm Technologies, Inc.HP Inc.

Product-j9v80a d3q15a d3q20a_firmware d3q21d d9l64a j6u57b_firmware k9z74d_firmware d3q21b j6u51b_firmware j6u57a_firmware w2z53b_firmware j6u57b d9l64a_firmware j3p65a_firmware j9v82a d3q21d_firmware j6u55a_firmware d3q15a_firmware k9z74a_firmware d9l63a_firmware d3q21c j6u55d_firmware d3q15d j6u57a j9v80a_firmware j9v80b_firmware j9v80b d3q17a w2z52b d3q20b_firmware w2z52b_firmware d3q21a j3p65a d3q21a_firmware d3q20d d3q19d 2dr21d d3q20c_firmware d3q20d_firmware d3q19a k9z74a j6u55a d3q20a j3p68a_firmware k9z76b_firmware d3q16d j6u51b j9v78b_firmware k9z76a_firmware d3q15b d3q17d_firmware k9z76a d3q21c_firmware ips d3q17a_firmware j9v82d_firmware d3q17d d3q16a j9v82d d9l63a d3q16d_firmware t0g70a_firmware j6u55d k9z76d_firmware k9z76d k9z76b d3q19b d3q20b d3q15b_firmware 2dr21d_firmware d3q15d_firmware j3p68a k9z74d d3q20c d3q19b_firmware w2z53b d3q16a_firmware d3q19d_firmware t0g70a j9v82a_firmware j9v78b d3q19a_firmware d3q21b_firmware PostScript and PDF printers that use IPS versions prior to 2019.2

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-131

Incorrect Calculation of Buffer Size

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 35.24%

||

7 Day CHG~0.00%

Published-24 Mar, 2020 | 18:20

Updated-05 Aug, 2024 | 02:46

An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820 chipsets) software. Arbitrary memory read and write operations can occur in RKP. The Samsung ID is SVE-2019-15143 (October 2019).

Vendor-n/a Google LLC Qualcomm Technologies, Inc.Samsung

Product-exynos_9610 sm6150 sm8150 android exynos_7885 sm8150_fusion exynos_9820 n/a

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.16% / 37.43%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a privilege escalation vulnerability exists in telephony.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.38%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.44%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 sd_850 sd_632 sd_855 sd_730_firmware sd_820a qualcomm_215 sd_675 msm8996au_firmware sd_439 sdx20 sd_670_firmware sd_429 sd_425 sdm660 sdm439 sd_710_firmware sdx24 sd_636 qcs405 sd_625 msm8909w_firmware msm8996au sd_636_firmware sd_450_firmware sd_845_firmware sd_439_firmware sd_820a_firmware qualcomm_215_firmware sd_429_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_730 sd_665 sd_850_firmware sdx24_firmware sd_625_firmware sd_450 sdm439_firmware qcs405_firmware sd_712_firmware sda660_firmware sd_845 qcs605 sd_670 sd_632_firmware sd_710 sdx20_firmware sda660 msm8909w sd_665_firmware sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.48%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.30% / 52.79%

||

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 04:42

Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sd678 qcs2290_firmware sd_636 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 msm8917 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 sd632 wcn3990_firmware wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcd9326_firmware wcn3615_firmware sd_8_gen1_5g_firmware wcn3660b sd662 sd710_firmware sd460_firmware sa8155 sm7315_firmware wcn7850 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3615 sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware apq8053_firmware sm7450_firmware sd680_firmware sd778g sa6155p_firmware wcn7851 qcs6490 sd429 sdxr2_5g sa8155_firmware sd662_firmware sdm630 wcn3988_firmware qca6430 sd429_firmware sm6250 sd778g_firmware wcd9340 sa8195p apq8017_firmware wsa8810_firmware qualcomm215_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcd9326 sa6155p wcd9335 wcn6851 wcn7851_firmware qcs4290_firmware wcd9385 wcd9341 qca6696_firmware qcs6490_firmware sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd855_firmware sd660 sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 sd660_firmware wcn6850_firmware wcn7850_firmware sa8195p_firmware sm7450 wsa8815_firmware wsa8835_firmware apq8017 sm8475 wcn6750_firmware qcm2290_firmware wcn3991 wcd9380_firmware wcn3990 sd_675 sw5100p sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 sd670_firmware qca6574 sd632_firmware wsa8835 sd665_firmware wcd9380 sd888_5g qualcomm215 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware wcn6750 qca6574_firmware wcd9340_firmware sd855 sm4125_firmware sm7325p_firmware sd665 wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd695 sd768g_firmware sd835 wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m sm8475_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware qcm4290 qcm6490_firmware sdx50m wcn3680_firmware wsa8832_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd710 sd_636_firmware sd670 wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 wsa8832 sw5100p_firmware wcn6856 wcn3680b sd835_firmware sd695_firmware sd768g wcn6740 qca6696 sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p sd675 sd439 sm7250p sd720g_firmware sw5100_firmware sm8475p_firmware qcm2290 sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.38%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, Rennell, SC7180, SC8180X, SM6150, SM7150, SM8150, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-ipq6018 qcs404 sm8150_firmware sxr2130_firmware ipq8074 qcs405_firmware rennell sc7180 qcn7605 rennell_firmware qca6390 ipq6018_firmware qcs404_firmware sc8180x_firmware qcs405 sm7150_firmware ipq8074_firmware sm6150_firmware sm6150 sc7180_firmware sm8150 sm7150 qca6390_firmware qcn7605_firmware qca8081_firmware nicobar_firmware qca8081 sxr2130 sc8180x nicobar Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.37% / 58.30%

||

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:26

Updated-04 Jun, 2025 | 15:15

Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 53.96%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sdm670_firmware sm8150_firmware ipq8074 sda845_firmware sdm845 qcs605 sm7150_firmware ipq8074_firmware sm6150_firmware sdm710 sm6150 sm8150 sdm850 sdm710_firmware sxr1130_firmware sm7150 qca8081_firmware sxr1130 sdm670 qca8081 qcs605_firmware sda845 sdm845_firmware Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.38%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS404, QCS405, QCS605, Rennell, SA6155P, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware apq8096_firmware mdm9640_firmware qca4531_firmware msm8996au_firmware sdm845 apq8096 sdx24 qcs404_firmware mdm9650 sm7150_firmware sm6150 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca6564 qca9379_firmware qca6174a sdm670_firmware qcs404 sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 qca4531 apq8098 qcn7605 ipq6018_firmware mdm9206_firmware qcs605 qca9886 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware apq8064 sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 sc7180_firmware mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p qca8081 mdm9207c_firmware msm8996_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware qca6564_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sc7180 sdm630_firmware sda660_firmware rennell_firmware apq8053 sm6150_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.43% / 61.86%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS404, QCS405, QCS605, Rennell, SA6155P, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware qca4531_firmware mdm9640_firmware msm8996au_firmware sdm845 sdx24 qcs404_firmware mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca6564 qca9379_firmware qca6174a sdm670_firmware qcs404 sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 qca4531 apq8098 qcn7605 ipq6018_firmware mdm9206_firmware qca6574_firmware qca9886 qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware apq8064 sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 sc7180_firmware mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p qca8081 mdm9207c_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware qca6564_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sc7180 sdm630_firmware sda660_firmware rennell_firmware apq8053 sm6150_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.48%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Buffer over-write when this 0-byte buffer is typecasted to some other structure and hence memory corruption in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in QCS605, SA6155P, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-sa6155p_firmware sm8150_firmware sm8150 sa6155p qcs605 qcs605_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.38%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:12

Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096, APQ8096AU, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, QCA9886, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware apq8096_firmware mdm9640_firmware qca4531_firmware msm8996au_firmware sdm845 apq8096 sdx24 mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca6564 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware qca6584au_firmware ipq8074 sdm636 qca9377 qca4531 ipq6018_firmware mdm9206_firmware qca6574_firmware qca9886 qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 apq8009 apq8053_firmware nicobar qca6584au sa6155p_firmware sdm636_firmware apq8064 sdm845_firmware sdx20 sdm660 sdm630 mdm9607_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware sa6155p mdm9207c_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware qca6564_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware apq8053 sm6150_firmware apq8096au_firmware sm8150 sdx20_firmware apq8017 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.48%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicobar, QCA6574AU, QCS605, Rennell, SA6155P, Saipan, SC8180X, SDM660, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sa6155p_firmware sdm845 sdx20 msm8998_firmware sdm660 sdx24 sm8250_firmware sc8180x_firmware sm7150_firmware qca6574au sdm710 sm6150 sdm710_firmware sm7150 sa6155p sxr2130 qcs605_firmware sc8180x sm8150_firmware sdx24_firmware sxr2130_firmware apq8096au rennell rennell_firmware qcs605 sdx55 apq8053 apq8096au_firmware saipan_firmware sm6150_firmware sm8250 msm8998 sm8150 sdx20_firmware qca6574au_firmware sdx55_firmware nicobar_firmware saipan apq8053_firmware sdm660_firmware nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.40% / 59.83%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:12

While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified in the attribute length field of extended SSI which can lead to integer underflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096, APQ8098, IPQ6018, IPQ8074, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6390, QCA6574AU, QCA8081, QCA9377, QCA9379, QCN7605, QCS404, QCS405, QCS605, Rennell, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware apq8096_firmware msm8996au_firmware sdm845 apq8096 sdx24 qcs404_firmware sm7150_firmware sm6150 msm8996au sm7150 qca6390_firmware apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x qca9379_firmware qca6174a sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 qcn7605 ipq6018_firmware qcs605 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 sdm710_firmware qcn7605_firmware qca8081 ipq6018 qca6174a_firmware sm8150_firmware sxr2130_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qca6390 apq8053 sm6150_firmware msm8998 sm8150 sdx20_firmware sdm850 nicobar_firmware qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.38%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ6018, IPQ8074, MSM8998, Nicobar, QCA8081, QCN7605, QCS404, QCS605, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sdm636_firmware apq8098_firmware sdm845 msm8998_firmware sdm660 sdm630 qcs404_firmware sc8180x_firmware sm7150_firmware ipq8074_firmware sdm710 sc7180_firmware sm6150 sdm710_firmware sm7150 qcn7605_firmware sdm670 qca8081 sxr2130 qcs605_firmware sc8180x ipq6018 sdm670_firmware qcs404 sm8150_firmware sxr2130_firmware ipq8074 sdm636 sda845_firmware rennell sc7180 sdm630_firmware apq8098 qcn7605 sda660_firmware rennell_firmware ipq6018_firmware qcs605 sm6150_firmware msm8998 sm8150 sdm850 sda660 sxr1130_firmware qca8081_firmware nicobar_firmware sxr1130 sdm660_firmware sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.38%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:12

Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9607, MDM9640, MDM9650, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCN7605, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware apq8096_firmware mdm9640_firmware msm8996au_firmware sdm845 apq8096 mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 sdm670 sxr2130 qcs605_firmware sc8180x qca9379_firmware qca6174a sdm670_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 qcn7605 ipq6018_firmware qca6574_firmware qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware sdm845_firmware apq8098_firmware msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 sdm710_firmware qcn7605_firmware sa6155p qca8081 ipq6018 qca6174a_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware sm6150_firmware apq8096au_firmware sm8250 msm8998 sm8150 sdm850 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.48%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:12

Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit integer which can lead to unexpected result during the check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, MDM9607, MSM8998, QCA6584, QCN7605, QCS605, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sdm636_firmware apq8098_firmware sdm845 msm8998_firmware sdm660 sdm630 mdm9607_firmware sm7150_firmware sdm710 sm6150 mdm9607 sdm710_firmware sm7150 qcn7605_firmware sdm670 qcs605_firmware sdm670_firmware sm8150_firmware sdm636 sdm630_firmware apq8098 qcn7605 sda660_firmware qcs605 sm6150_firmware qca6584_firmware msm8998 sm8150 sdm850 qca6584 sda660 sxr1130_firmware sxr1130 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.38%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 apq8098 mdm9206_firmware qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 apq8053_firmware nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware sa6155p msm8937 mdm9207c_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sm8250 apq8017 saipan nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.38%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, Nicobar, QCS605, QM215, Rennell, SA6155P, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware apq8064_firmware msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.14% / 34.20%

||

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:44

Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-kamorta_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 apq8098 mdm9206_firmware qcs605 msm8937_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 qca6574au sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sm8250 kamorta apq8017 msm8996 saipan sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.43% / 61.86%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Buffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS405, QCS605, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware apq8096_firmware mdm9640_firmware qca4531_firmware msm8996au_firmware sdm845 apq8096 sdx24 mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca6564 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 qca4531 apq8098 qcn7605 ipq6018_firmware mdm9206_firmware qca6574_firmware qca9886 qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware apq8064 sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p qca8081 mdm9207c_firmware msm8996_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware qca6564_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware sdm630_firmware sda660_firmware apq8053 sm6150_firmware apq8096au_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.48%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, Nicobar, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 apq8064 apq8098_firmware sdx20 sdm660 msm8920_firmware mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.40% / 59.83%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm660 qcs405 sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.38%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS605, QM215, Rennell, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.38%

||

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-05 Aug, 2024 | 00:05

Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SA415M, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware kamorta_firmware mdm9635m_firmware mdm9640_firmware apq8096_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware apq8076 sc8180x mdm9206 sdm670_firmware sdx24_firmware apq8076_firmware sdm636 sda845_firmware sa415m mdm9635m apq8098 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sa415m_firmware sdm710 qm215 sc7180_firmware mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware mdm9150 msm8937 mdm9207c_firmware msm8905 mdm9207c sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sc7180 sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 kamorta apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.43% / 61.86%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS605, QM215, Rennell, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 41.35%

||

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-02 Aug, 2024 | 15:32

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware qcn9070 ipq4028_firmware qca8337 qfw7124 ar9380 wcn785x-5 ipq8173_firmware qca9563_firmware flight_rb5_5g_platform flight_rb5_5g_platform_firmware qcn6224_firmware qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 qca9880_firmware qca9992 immersive_home_318_platform_firmware ipq8078a ipq5028_firmware ipq6000 qcn5152_firmware qca0000_firmware wcn685x-1 qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq9554 wcd9385_firmware immersive_home_216_platform ipq8076a immersive_home_316_platform immersive_home_316_platform_firmware qca8386_firmware qca9563 qcn6024_firmware qca8084_firmware immersive_home_318_platform ipq8074a qcn5124_firmware qcn9011_firmware qca8082_firmware qcn5164_firmware qcn5122_firmware sdx55_firmware qca8081_firmware qcn6023_firmware qfw7114 qrb5165n ipq5010 qca9986 ipq8070_firmware snapdragon_x65_5g_modem-rf_system_firmware ipq8065 ipq8078a_firmware qcn9274 ipq8174 qca9990 qrb5165m_firmware ipq5028 qca7500 ipq4029_firmware qcn5052 qca0000 ipq6010 ipq8068 qcn6112_firmware qcn9074 qca8085 sdx65m wcd9340 qcn6132 qcn6224 qcn9013 snapdragon_x75_5g_modem-rf_system qca8081 qcf8000 ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware wcn685x-1_firmware immersive_home_3210_platform qca8085_firmware qca9888_firmware ipq8068_firmware qcn6122 wcd9385 ipq9008_firmware qca9988_firmware ipq9570 qcn5154_firmware ar8035 csr8811 qca9898_firmware ipq4019 qcc710_firmware qcn9100_firmware robotics_rb5_platform qca9992_firmware ipq5010_firmware ipq8074a_firmware qca9898 qcn5022_firmware ipq4028 immersive_home_216_platform_firmware qca9988 wcn785x-1 qca8072 qca9985_firmware robotics_rb5_platform_firmware ipq4018_firmware qca8337_firmware wcd9380_firmware qcn9000 ipq8072a qca7500_firmware qca9980_firmware qcf8000_firmware ipq8076a_firmware ar9380_firmware ipq8078 qca8084 ipq8173 ipq9008 qcn9012 qcn5164 qca9558 qca9558_firmware immersive_home_326_platform_firmware qcn6122_firmware ipq8065_firmware csr8811_firmware qcn6274 wcd9380 ipq9554_firmware qcn5054_firmware qcn5154 qca8075_firmware ipq4018 ipq4019_firmware qcn5024 wcn685x-5_firmware qca9889 qcn6132_firmware qca9888 qca8072_firmware qca9985 qca9994_firmware qcn5052_firmware qcn9012_firmware qcn9274_firmware ipq8070a_firmware qfw7114_firmware wcn3980 ipq6018_firmware ipq8076_firmware qca9886 qcn5502_firmware wcd9340_firmware pmp8074_firmware qcn6112 ipq8076 qca9986_firmware qca9984 ipq6028 ipq8064 qcn5021 pmp8074 qcn5152 ipq9574_firmware wcn785x-5_firmware qcn9024 qrb5165m immersive_home_3210_platform_firmware qca6391 wcn3980_firmware ipq8064_firmware qcn9100 qcn6274_firmware snapdragon_x65_5g_modem-rf_system ipq8078_firmware ipq9570_firmware qcn5054 qcn9070_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn685x-5 ipq8070 ipq6028_firmware ipq8072a_firmware qcn5502 qca9994 qcn9011 qca9531 wcn785x-1_firmware qca9889_firmware ipq9574 qca9980 qcn5122 ipq8174_firmware qcn9024_firmware qca9880 immersive_home_326_platform ipq6018 qcn5022 qcn9013_firmware qca9886_firmware qcc710 ipq6010_firmware immersive_home_214_platform qca6391_firmware immersive_home_214_platform_firmware qca4024 sdx55 qca8075 qcn5021_firmware qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9072_firmware qca9531_firmware ipq6000_firmware qcn9074_firmware qfw7124_firmware ipq4029 ar8035_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')