CVE-2019-10567 | ByteOS Network

Vulnerability Details :

CVE-2019-10567

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-07 Feb, 2020 | 05:00

Updated At-04 Aug, 2024 | 22:24

There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting existing commands could allow unintended GPU opcodes to be executed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:07 Feb, 2020 | 05:00

Updated At:04 Aug, 2024 | 22:24

▼CVE Numbering Authority (CNA)

There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting existing commands could allow unintended GPU opcodes to be executed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Versions

Affected

APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Problem Types

Type	CWE ID	Description
text	N/A	Configuration Issue in Linux Graphics

Type: text

CWE ID: N/A

Description: Configuration Issue in Linux Graphics

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:07 Feb, 2020 | 05:15

Updated At:10 Feb, 2020 | 01:15

There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting existing commands could allow unintended GPU opcodes to be executed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8009_firmware>>-

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8017_firmware>>-

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8053_firmware>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8096au_firmware>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8098_firmware>>-

cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9150:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9150_firmware>>-

cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9207c:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9207c_firmware>>-

cpe:2.3:o:qualcomm:mdm9207c_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909w_firmware>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8917_firmware>>-

cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8920_firmware>>-

cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8920:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8937_firmware>>-

cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8937:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8940_firmware>>-

cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8940:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8953_firmware>>-

cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996au_firmware>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8998_firmware>>-

cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8998:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>nicobar_firmware>>-

cpe:2.3:o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:nicobar:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs405_firmware>>-

cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs405:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs605_firmware>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qm215_firmware>>-

cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qm215>>-

cpe:2.3:h:qualcomm:qm215:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>rennell_firmware>>-

cpe:2.3:o:qualcomm:rennell_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:rennell:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sa6155p_firmware>>-

cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>saipan_firmware>>-

cpe:2.3:o:qualcomm:saipan_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:saipan:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin	product-security@qualcomm.com	Patch Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/february-2020-bulletin

Source: product-security@qualcomm.com

Resource:

Patch

Vendor Advisory

Similar CVEs

988Records found

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.05% / 15.44%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Integer overflow or wraparound in Core

Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_8cx_gen3_firmware wsa8830 sxr2230p_firmware snapdragon_x24_lte_modem_firmware qca8337 wcn785x-5 qca6431_firmware sm7250-ac_firmware wcn3950_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sa6155 qca6335 sm8350 sdm670 snapdragon_x70_modem-rf_system wcd9370 qcs605_firmware sd_675_firmware sd675_firmware ssg2115p qca6426 wcn685x-1 wcn3990_firmware sm8450 qca9377 qualcomm_robotics_rb3_platform wcn3998 sm8250-ab sd_8cx_firmware wcd9385_firmware qam8295p sd_8cx_gen2_firmware qcn6024_firmware wcd9326_firmware wcn3950 sd_8_gen1_5g_firmware qsm8350_firmware qsm8350 qam8295p_firmware qualcomm_robotics_rb3_platform_firmware sa8155 sa9000p_firmware qca6574au_firmware sdx55_firmware snapdragon_x55_5g_modem-rf_system qca6595au wcn3998_firmware qca8081_firmware sa6155_firmware sm7250p_firmware wcd9375_firmware qca6420 qca6436_firmware qca6564au_firmware sa6155p_firmware qca6310 snapdragon_x65_5g_modem-rf_system_firmware snapdragon_x70_modem-rf_system_firmware sd_8cx_gen2 qca6698aq sa8155_firmware sm8250_firmware sm7250-ab_firmware sm8250-ac qca6430 sa6145p_firmware qca6421 sm7250-aa wcd9340 wsa8810_firmware sm8450_firmware qca6436 snapdragon_ar2_gen_1_platform_firmware wcd9326 sa6155p qca8081 qcs603_firmware qca6698aq_firmware qca6174a_firmware wcn685x-1_firmware wcd9385 sm8150_firmware sxr2130_firmware wcd9341 qca6431 qca6696_firmware sd_8cx_gen3 qca6390 ar8035 sd_8cx aqt1000 sa8150p wcd9375 sm6150_firmware sm8250-ac_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware sm8150 sdm850 wsa8815_firmware wsa8835_firmware qca6564a sa8295p_firmware wcn785x-1 qca8337_firmware wcd9380_firmware ssg2125p wcn3990 sd_675 sdm845 sd865_5g qca6595 qca6564au sm8350-ac_firmware sm8150-ac sm6150 sd670_firmware qca6574 sxr1230p_firmware wsa8835 sa8540p_firmware sd_8_gen1_5g wcd9380 ssg2125p_firmware sxr2130 qca6574a wcn685x-5_firmware qca6174a sdm670_firmware sxr1230p qca6310_firmware qca6430_firmware wcn3980 qca6335_firmware sa9000p qca6574_firmware sm7250-ab qcs605 sd855 sm6150-ac_firmware wcd9340_firmware wsa8815 sxr2230p sdx57m_firmware snapdragon_xr2_5g_platform_firmware qca6426_firmware qca6574a_firmware qcn9024 wcn785x-5_firmware snapdragon_x55_5g_modem-rf_system_firmware sm8250-ab_firmware qca6391 wcn3980_firmware snapdragon_x50_5g_modem-rf_system_firmware sa8295p qca6421_firmware aqt1000_firmware sdm850_firmware snapdragon_xr2_5g_platform snapdragon_x65_5g_modem-rf_system wsa8832_firmware sm8350_firmware qcs603 wcn685x-5 wcn785x-1_firmware qca6574au sa8155p_firmware sd670 qca6564a_firmware qcn9024_firmware sdx57m wcd9341_firmware wsa8810 sm7250-aa_firmware snapdragon_x24_lte_modem wsa8832 sa8540p sm7250-ac sm8150-ac_firmware snapdragon_ar2_gen_1_platform sa6145p sm8350-ac qca6595_firmware qca6696 qca6391_firmware wcd9370_firmware sm6150-ac sdx55 snapdragon_x50_5g_modem-rf_system sa8155p qcn6024 sd675 sm8250 sm7250p ssg2115p_firmware ar8035_firmware sdm845_firmware Snapdragon

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 7.65%

||

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Use after free in Trusted Application Environment

Memory corruption due to use after free in trusted application environment.

Vendor-Qualcomm Technologies, Inc.

Product-qca6564au_firmware wcd9380_firmware sdm429w msm8996au_firmware sd429 sdxr2_5g sd865_5g wcn6851_firmware qca6564au sdx55m_firmware mdm9628_firmware qca6574au sd205 sd429_firmware msm8996au sd205_firmware qca6564a_firmware sdm429w_firmware wcd9340 wsa8810_firmware qualcomm215_firmware wcd9380 wsa8810 sd870 qca6390_firmware qca6436 qualcomm215 wcn6851 sd210_firmware qca6574a qca6426 apq8096au sd870_firmware qca6391_firmware sdxr2_5g_firmware qca6390 mdm9628 wcd9340_firmware wcn3660b wsa8815 wcn6850 apq8096au_firmware sd210 sd865_5g_firmware wcn3620_firmware qca6426_firmware wcn3660b_firmware wcn6850_firmware qca6574a_firmware wcn3620 qca6574au_firmware wsa8815_firmware wcn3610_firmware qca6564a qca6391 sdx55m qca6436_firmware wcn3610 Snapdragon qca6564au_firmware wcd9380_firmware msm8996au_firmware sd870_firmware qca6391_firmware sdxr2_5g_firmware wcn6851_firmware sdx55m_firmware mdm9628_firmware wcd9340_firmware apq8096au_firmware sd429_firmware sd205_firmware sdm429w_firmware qca6564a_firmware sd865_5g_firmware wcn3620_firmware qca6426_firmware wsa8810_firmware qualcomm215_firmware wcn3660b_firmware wcn6850_firmware qca6574a_firmware wsa8815_firmware qca6574au_firmware qca6390_firmware wcn3610_firmware sd210_firmware qca6436_firmware

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 13.54%

||

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 08:01

Improper authentication in Qualcomm IPC

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.

Vendor-Qualcomm Technologies, Inc.

Product-sd_8cx_gen3_firmware sa6150p_firmware qcs610 qca6431_firmware wcn3950_firmware sc8180x\+sdx55 sa8150p_firmware qcs2290 qca6595au_firmware sa6155 sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 wcd9371_firmware qam8295p wcn3950 sm4125 sd720g sd_8cx_gen2_firmware sd_8_gen1_5g_firmware wcn3660b qsm8350_firmware sd710_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware sa6155_firmware qca6420 sd680_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware qca6698aq qcs6125 sa4155p_firmware sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 sd765g sw5100 sd680 qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g wcn3910_firmware sxr2150p_firmware sd_8cx sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 sd712 wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware sa8295p_firmware wcn3610 wcn3991 sda429w_firmware wcd9380_firmware ssg2125p sdm429w sw5100p qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware sxr1230p qcn9012_firmware qca6430_firmware wcd9335_firmware wcn3980 qcm4325_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6426_firmware wcn3660b_firmware sd695 qca9984 wcn3980_firmware sd730 sdx55m qcc5100_firmware sa8295p qca6421_firmware wcn6740_firmware sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware sa8540p qcs610_firmware qsm8250 sa6145p sd695_firmware sdxr1 ar8031 qca6595_firmware qcs405_firmware sa8145p sdm630_firmware qca6391_firmware sa4150p_firmware wcd9370_firmware sd780g_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 ssg2115p_firmware qcs8155_firmware sa4155p sxr2150p ar8035_firmware qsm8250_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware sd7c_firmware snapdragon_4_gen_1_firmware sd_636 csra6620 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware ssg2115p qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9984_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware sd662 qam8295p_firmware qcn9011_firmware sa8155 sa9000p_firmware wcn3680b_firmware sdx55_firmware qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware qcs8155 wcn7851 sd429 sa515m_firmware qcs6490 sdxr2_5g sdm630 sa415m_firmware wcn3988_firmware qcn9074 sd429_firmware sa6145p_firmware qca6421 sd778g_firmware sm6250 sd712_firmware sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 sg4150p qcs4290_firmware wcd9385 qcs6490_firmware sd_8cx_gen3 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 sc8180x\+sdx55_firmware sm6250_firmware sda429w wcn3620_firmware wsa8815_firmware sd888_5g_firmware qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 qca6564a sa4150p sg4150p_firmware qcm6125_firmware qcm4325 qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qca6595 qcc5100 qcn9012 sd888 wsa8835 sxr1230p_firmware sdm429w_firmware sd665_firmware sa8540p_firmware sd888_5g ssg2125p_firmware qca6574a wcn6855_firmware sm7325p wcn6750 sa515m sa9000p qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware qrb5165m sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sd480_firmware qcn9011 sd_455 qca6574au sd710 sa8155p_firmware wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 wcn3680b qca6564_firmware sd768g wcn6740 qca6696 sa6150p sm7250p sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware Snapdragon wcn3991_firmware sd_8cx_gen3_firmware mdm9150_firmware sa6150p_firmware sa8145p_firmware qcs2290_firmware qca6431_firmware sd7c_firmware snapdragon_4_gen_1_firmware wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sd730_firmware sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware csra6640_firmware qcs6125_firmware wcn3990_firmware qrb5165n_firmware qca9984_firmware sd_8cx_firmware wcd9371_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware wcd9326_firmware wcd9385_firmware sd_8_gen1_5g_firmware qsm8350_firmware sd710_firmware sd460_firmware qam8295p_firmware qcn9011_firmware sa9000p_firmware sm7315_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware sa6155_firmware wcn3998_firmware wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd680_firmware sa6155p_firmware sa515m_firmware qrb5165_firmware qrb5165m_firmware sa4155p_firmware sa8155_firmware sd662_firmware sa415m_firmware wcn3988_firmware sa6145p_firmware sd429_firmware sd712_firmware sd778g_firmware wsa8810_firmware sd765_firmware qcs603_firmware wcn7851_firmware qca6698aq_firmware qcs4290_firmware qca6696_firmware qcs6490_firmware sd870_firmware wcn3910_firmware sxr2150p_firmware sd750g_firmware sm6250_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware wsa8815_firmware sd888_5g_firmware wcn6850_firmware sd660_firmware wcn7850_firmware wsa8835_firmware sa8195p_firmware sa8295p_firmware wcn6750_firmware sg4150p_firmware qcm6125_firmware qcm2290_firmware sda429w_firmware wcd9380_firmware sdx55m_firmware wcn6856_firmware sd670_firmware sxr1230p_firmware sdm429w_firmware sd665_firmware sa8540p_firmware ssg2125p_firmware sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6430_firmware qcn9012_firmware wcd9335_firmware qcm4325_firmware qca6574_firmware wcd9340_firmware sm4125_firmware sm7325p_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware sd768g_firmware wcn3980_firmware sdxr1_firmware qcc5100_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware sd678_firmware ar8031_firmware qcm6490_firmware wsa8832_firmware sd480_firmware wcn6851_firmware sa8155p_firmware sd_636_firmware qca6564a_firmware wcd9341_firmware qcm4290_firmware sw5100p_firmware qcs610_firmware qca6564_firmware sd695_firmware qca6595_firmware qcs405_firmware sdm630_firmware qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sd888_firmware sd720g_firmware ssg2115p_firmware qcs8155_firmware qcn9074_firmware qcs410_firmware sw5100_firmware ar8035_firmware qsm8250_firmware

CWE ID-CWE-287

Improper Authentication

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.19%

||

7 Day CHG~0.00%

Published-11 Feb, 2019 | 15:00

Updated-05 Aug, 2024 | 09:14

There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDM630, SDM660, ZZ_QCS605.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 8.26%

||

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 08:01

Improper restriction of operations within the bounds of memory buffer in Linux

Memory corruption in Linux while sending DRM request.

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wcn3991 wcd9380_firmware sa6150p_firmware sa8145p_firmware qcs610 sdm429w sd865_5g qca6564au sm8150-ac sdm429 sdm429w_firmware wcn3950_firmware wcd9380 sa8150p_firmware qca6420_firmware snapdragon_wear_4100\+_platform_firmware qca6390_firmware qcs410 wcd9370 sxr2130 qca6574a snapdragon_wear_4100\+_platform wcn685x-5_firmware qca6564 qca6426 wcn685x-1 qca6430_firmware wcn3980 sm8250-ab wcn3998 wcn3950 wcn3660b sd855 wsa8815 sdm429_firmware snapdragon_xr2_5g_platform_firmware qca6426_firmware wcn3660b_firmware sa8155 snapdragon_x55_5g_modem-rf_system qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcn3998_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware sm8250-ab_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware snapdragon_x50_5g_modem-rf_system_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware snapdragon_xr2_5g_platform sa8155_firmware wcn685x-5 sm8250_firmware sm8250-ac qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware wsa8810 qca6436 sa6155p qcs610_firmware sm8150-ac_firmware qsm8250 sa6145p wcn3680b wcn685x-1_firmware qca6564_firmware sm8150_firmware sxr2130_firmware wcd9341 qca6696_firmware sa8145p qca6696 qca6391_firmware qca6390 wcd9370_firmware aqt1000 sa8150p sa6150p sdx55 snapdragon_x50_5g_modem-rf_system sa8155p sm8250-ac_firmware sm8250 sd855_firmware sd865_5g_firmware sm8150 wcn3620_firmware wsa8815_firmware wcn3620 sa8195p_firmware qcs410_firmware wcn3610 qsm8250_firmware Snapdragon aqt1000_firmware qca6564au_firmware sa6155p_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware fastconnect_6900_firmware sa8155_firmware sa6145p_firmware sa8155p_firmware sdm429w_firmware wcn3950_firmware wsa8810_firmware sa8150p_firmware wcd9341_firmware qca6420_firmware qcs610_firmware qca6564_firmware sxr2130_firmware qca6696_firmware qca6430_firmware qca6391_firmware snapdragon_855_mobile_platform_firmware wcd9370_firmware sd855_firmware sd865_5g_firmware snapdragon_xr2_5g_platform_firmware wcn3620_firmware qca6426_firmware wcn3660b_firmware wsa8815_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware sa8195p_firmware sdx55_firmware snapdragon_429_mobile_platform_firmware snapdragon_865_5g_mobile_platform_firmware wcn3680b_firmware fastconnect_6800_firmware qcs410_firmware snapdragon_x55_5g_modem-rf_system_firmware wcn3980_firmware wcn3610_firmware qca6436_firmware snapdragon_x50_5g_modem-rf_system_firmware qsm8250_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.9||HIGH

EPSS-0.09% / 27.23%

||

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 08:01

Stack-based buffer overflow in Modem

Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware snapdragon_850_mobile_compute_platform_firmware sm7325-ae_firmware mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 315_5g_iot_modem_firmware sc8180x-ab_firmware qca8337 qca6431_firmware wcd9360_firmware snapdragon_820_automotive_platform_firmware snapdragon_wear_2100_platform_firmware snapdragon_212_mobile_platform wcn3950_firmware sc8180x\+sdx55 sa8150p_firmware qcs2290 qca6595au_firmware sa6155 snapdragon_427_mobile_platform snapdragon_x70_modem-rf_system qca6335 sdm712 sdm670 mdm8215 sd_455_firmware sm8350 csra6620_firmware sd_675_firmware csra6640_firmware qcs6125_firmware mdm8615m_firmware apq5053-aa_firmware wcn685x-1 sm7350-ab_firmware msm8108 sm4375 wcn3998 sc8180xp-ad wcd9371_firmware msm8108_firmware wcn3950 qcn6024_firmware mdm9628 sm6375_firmware wcn3660b sm7150-ac sd460_firmware mdm9230_firmware sm7315_firmware mdm8215m sm7325-ae qca6574au_firmware sm4250-aa snapdragon_636_mobile_platform mdm9630 wcd9375_firmware wcn3998_firmware qca8081_firmware sa6155_firmware sm6225-ad msm8909w qca6420 wcd9360 snapdragon_auto_5g_modem-rf_firmware snapdragon_427_mobile_platform_firmware qca9367_firmware sc8180xp-af mdm8207 sdm450 smart_audio_400_platform_firmware sm6225-ad_firmware qca6698aq sc8180xp-aa_firmware qcs6125 sa8155_firmware robotics_rb3_platform_firmware sd662_firmware sm7250-ab_firmware mdm9615m qca6430 robotics_rb3_platform snapdragon_630_mobile_platform wcd9306_firmware wcd9340 sd626_firmware sw5100 qca6436 sa6155p qca6698aq_firmware msm8209_firmware msm8905 wcn685x-1_firmware mdm9250_firmware sm8150_firmware wcn3660_firmware snapdragon_wear_2500_platform wcd9341 qca6431 qca6696_firmware sc8180xp-ab_firmware wcd9371 sc8180x-ab snapdragon_x12_lte_modem mdm8215_firmware wcn3910_firmware sm4350_firmware sa8150p snapdragon_430_mobile_platform sm8250-ac_firmware wsa8830_firmware mdm9330_firmware sd855_firmware sd660 sd865_5g_firmware sm7225_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3988 sd660_firmware sm4250-aa_firmware sa8195p_firmware sm8475 wcn6750_firmware sm6125_firmware wcn3610 snapdragon_675_mobile_platform_firmware msm8608 mdm9640 sm6375 wcn3991 qca8337_firmware wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 snapdragon_w5\+_gen_1_wearable_platform qca6564au sdm429 sd670_firmware qca6574 apq8053-ac snapdragon_7c\+_gen_3_compute wcd9380 sc8180xp-aa snapdragon_wear_4100\+_platform_firmware mdm9230 qcs410 snapdragon_210_processor apq8053-ac_firmware snapdragon_430_mobile_platform_firmware sm7150-aa_firmware c-v2x_9150_firmware sc8180xp-ad_firmware sc8180x-ac_firmware sd626 qca6174 qca6430_firmware wcd9335_firmware wcn3980 qca6335_firmware sm7225 qcm4325_firmware wcd9340_firmware wsa8815 sm6150-ac_firmware wcn3910 qca6320 qca6584_firmware sdm429_firmware snapdragon_630_mobile_platform_firmware mdm9650_firmware mdm9215_firmware qca6426_firmware snapdragon_435_mobile_platform wcn3660b_firmware wcn3680 sd835 sc8180x-ad qcn9024 wcn3980_firmware sd730 wcd9330_firmware snapdragon_x50_5g_modem-rf_system_firmware sc7180-ac_firmware sm7150-aa snapdragon_820_automotive_platform sm6350 sm8475_firmware ar6003_firmware wcn6740_firmware qca6421_firmware sm7125 smart_audio_200_platform snapdragon_xr2_5g_platform snapdragon_x65_5g_modem-rf_system wcn3680_firmware sm7150-ab_firmware sm8350_firmware sdm660 sm6350_firmware wcn785x-1_firmware sdm710 sd670 smart_audio_200_platform_firmware qcn9024_firmware qca6564a_firmware sdx57m qcm4290_firmware snapdragon_x24_lte_modem sc8180xp-ac_firmware sw5100p_firmware qcs610_firmware sa6145p 9207_lte_modem_firmware sdm439_firmware sa8145p mdm8207_firmware sd820_firmware qca6391_firmware wcd9370_firmware qm215_firmware sm4350-ac_firmware sdx55 sd888_firmware sm8250 csra6640 sa8155p sd675 snapdragon_x20_lte_modem wcn3660 ar8035_firmware qcm2290 snapdragon_632_mobile_platform sdm845_firmware snapdragon_625_mobile_platform_firmware wcn3991_firmware snapdragon_wear_2100_platform wsa8830 snapdragon_662_mobile_platform_firmware sa8145p_firmware 9207_lte_modem sm6125 sdm712_firmware snapdragon_850_mobile_compute_platform snapdragon_x24_lte_modem_firmware qcs2290_firmware sdm450_firmware wcn785x-5 csrb31024 mdm9628_firmware mdm9650 csra6620 sm7250-ac_firmware qcs4290 snapdragon_x20_lte_modem_firmware mdm9250 qca6420_firmware sc7180-ac qca6390_firmware snapdragon_auto_4g_modem_firmware qca6174_firmware sd730_firmware mdm9310_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware wcn3990_firmware sm8450 qca9377 sm8250-ab wcd9385_firmware wcd9326_firmware mdm9615m_firmware wcn3615_firmware sd662 sm7325-af apq8037 snapdragon_435_mobile_platform_firmware sa8155 snapdragon_x55_5g_modem-rf_system qca6584 msm8905_firmware sdx55_firmware snapdragon_208_processor_firmware snapdragon_835_mobile_pc_platform_firmware wcn3615 qca6320_firmware wcn3680b_firmware snapdragon_212_mobile_platform_firmware sm7250p_firmware qca6595au wcn3610_firmware sm7325-af_firmware snapdragon_425_mobile_platform qca6436_firmware sm4350-ac snapdragon_w5\+_gen_1_wearable_platform_firmware wcd9306 qca6584au qca6564au_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qca6310 apq8053-aa_firmware sm6225 snapdragon_208_processor snapdragon_x70_modem-rf_system_firmware qcs6490 snapdragon_x5_lte_modem_firmware qca9367 snapdragon_625_mobile_platform snapdragon_wear_3100_platform sm8250_firmware qcs8550_firmware vision_intelligence_300_platform_firmware sm8250-ac wcn3988_firmware 315_5g_iot_modem sa6145p_firmware qm215 qca6421 sm7250-aa sm6250 c-v2x_9150 sa8195p sxr1120 sdm710_firmware apq8017_firmware wsa8810_firmware sm4375_firmware vision_intelligence_400_platform sm8450_firmware sc7180-ad wcd9326 wcd9335 sg4150p qca8081 apq8053-aa qca6174a_firmware qcs4290_firmware wcd9385 sxr2130_firmware mdm8615m qcs6490_firmware snapdragon_x12_lte_modem_firmware sm7150-ab sc8180x-ac qca6390 wcd9375 ar8035 aqt1000 snapdragon_210_processor_firmware sc8180x\+sdx55_firmware sm6250_firmware vision_intelligence_400_platform_firmware snapdragon_662_mobile_platform wcn3620_firmware sm8150 sd820 wsa8815_firmware qcm6490 wsa8835_firmware wcn3620 snapdragon_636_mobile_platform_firmware sm7350-ab apq8017 sxr1120_firmware ar6003 qca6564a mdm9630_firmware sg4150p_firmware wcn785x-1 qcm6125_firmware snapdragon_x5_lte_modem qcm4325 qcm2290_firmware snapdragon_1100_wearable_platform apq5053-aa wcn3990 sd_675 sdm845 sd865_5g 8953pro sm8350-ac_firmware sdm439 snapdragon_835_mobile_pc_platform sm8150-ac sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sc7180-ad_firmware snapdragon_auto_5g_modem-rf sm6250p sc8180xp-ac sxr2130 snapdragon_425_mobile_platform_firmware snapdragon_wear_4100\+_platform smart_audio_400_platform qca6574a wcn685x-5_firmware sc8180x-af qca6174a sm7325p sdm670_firmware qca6310_firmware sm7325 wcn6750 mdm9615 sm7150-ac_firmware sm7250-ab qca6574_firmware sd855 sm7325p_firmware sdx57m_firmware snapdragon_xr2_5g_platform_firmware qca6574a_firmware 8953pro_firmware msm8209 wcn785x-5_firmware sm7315 snapdragon_x55_5g_modem-rf_system_firmware vision_intelligence_300_platform sd460 qca6391 sm8250-ab_firmware mdm9310 aqt1000_firmware snapdragon_auto_4g_modem snapdragon_632_mobile_platform_firmware qcm4290 csrb31024_firmware qcm6490_firmware snapdragon_xr1_platform wcn685x-5 mdm9215 sd_455 sm6225_firmware sc8180xp-af_firmware qca6574au sa8155p_firmware mdm8215m_firmware wcd9341_firmware qcm6125 wsa8810 sm7250-aa_firmware sc8180x-aa_firmware sm7250-ac sm8150-ac_firmware sc8180x-aa sm8350-ac wcn3680b sd835_firmware snapdragon_675_mobile_platform snapdragon_wear_2500_platform_firmware sc8180x-af_firmware wcn6740 qca6696 qcs8550 sm4350 msm8608_firmware sm6150-ac sm7125_firmware snapdragon_x50_5g_modem-rf_system sa6150p snapdragon_1100_wearable_platform_firmware sc8180xp-ab qcn6024 mdm9615_firmware apq8037_firmware sc8180x-ad_firmware sm7250p snapdragon_wear_3100_platform_firmware sw5100_firmware qcs410_firmware mdm9330 sdm660_firmware snapdragon_xr1_platform_firmware sm7325_firmware Snapdragon qca9377_firmware snapdragon_850_mobile_compute_platform_firmware snapdragon_662_mobile_platform_firmware mdm9640_firmware sa6150p_firmware sa8145p_firmware sm6250p_firmware 315_5g_iot_modem_firmware qcs2290_firmware snapdragon_x24_lte_modem_firmware qca6431_firmware mdm9628_firmware snapdragon_820_automotive_platform_firmware wcd9360_firmware snapdragon_wear_2100_platform_firmware snapdragon_x20_lte_modem_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware snapdragon_450_mobile_platform_firmware qca6174_firmware sd730_firmware sd_455_firmware csra6620_firmware mdm9310_firmware sd_675_firmware sd675_firmware snapdragon_auto_4g_modem_firmware csra6640_firmware snapdragon_460_mobile_platform_firmware qcs6125_firmware snapdragon_480_5g_mobile_platform_firmware mdm8615m_firmware qca6584au_firmware wcn3990_firmware wcd9371_firmware msm8108_firmware wcd9385_firmware qcn6024_firmware mdm9615m_firmware wcd9326_firmware wcn3615_firmware snapdragon_660_mobile_platform_firmware sd460_firmware snapdragon_435_mobile_platform_firmware mdm9230_firmware sm7315_firmware qca6320_firmware snapdragon_429_mobile_platform_firmware qca6574au_firmware sdx55_firmware snapdragon_208_processor_firmware snapdragon_212_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware qca8081_firmware sa6155_firmware snapdragon_835_mobile_pc_platform_firmware sm7250p_firmware wcd9375_firmware wcn3610_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware snapdragon_auto_5g_modem-rf_firmware sa6155p_firmware qca9367_firmware snapdragon_427_mobile_platform_firmware snapdragon_x65_5g_modem-rf_system_firmware smart_audio_400_platform_firmware snapdragon_x70_modem-rf_system_firmware snapdragon_x5_lte_modem_firmware sa8155_firmware robotics_rb3_platform_firmware qcs8550_firmware sd662_firmware vision_intelligence_300_platform_firmware wcn3988_firmware sa6145p_firmware wcd9306_firmware fastconnect_6700_firmware apq8017_firmware sd626_firmware snapdragon_626_mobile_platform_firmware wsa8810_firmware qca6698aq_firmware msm8209_firmware qca6174a_firmware qualcomm_205_mobile_platform_firmware mdm9250_firmware qcs4290_firmware sxr2130_firmware wcn3660_firmware qca6696_firmware qcs6490_firmware snapdragon_x12_lte_modem_firmware mdm8215_firmware snapdragon_665_mobile_platform_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware snapdragon_210_processor_firmware sm6250_firmware snapdragon_712_mobile_platform_firmware vision_intelligence_400_platform_firmware wsa8830_firmware mdm9330_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware wsa8815_firmware wsa8835_firmware sd660_firmware snapdragon_636_mobile_platform_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sxr1120_firmware mdm9630_firmware sg4150p_firmware snapdragon_750g_5g_mobile_platform_firmware qcm6125_firmware snapdragon_675_mobile_platform_firmware qcm2290_firmware qca8337_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware msm8996au_firmware snapdragon_670_mobile_platform_firmware msm8909w_firmware sd670_firmware sdm429w_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_425_mobile_platform_firmware snapdragon_430_mobile_platform_firmware c-v2x_9150_firmware qca6310_firmware qca6430_firmware wcd9335_firmware qca6335_firmware qcm4325_firmware qca6574_firmware wcd9340_firmware wcn3680b_firmware sm7325p_firmware qca6584_firmware sdx57m_firmware mdm9650_firmware snapdragon_630_mobile_platform_firmware mdm9215_firmware qca6426_firmware snapdragon_439_mobile_platform_firmware snapdragon_xr2_5g_platform_firmware qca6574a_firmware fastconnect_6200_firmware wcn3660b_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware wcd9330_firmware snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware aqt1000_firmware ar6003_firmware wcn6740_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware snapdragon_632_mobile_platform_firmware wcn3680_firmware csrb31024_firmware qcm6490_firmware fastconnect_6900_firmware sa8155p_firmware mdm8215m_firmware smart_audio_200_platform_firmware qca6564a_firmware qcn9024_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qualcomm_215_mobile_platform_firmware sd835_firmware 9207_lte_modem_firmware snapdragon_wear_2500_platform_firmware mdm8207_firmware sd820_firmware qca6391_firmware snapdragon_710_mobile_platform_firmware msm8608_firmware wcd9370_firmware snapdragon_1100_wearable_platform_firmware sd888_firmware mdm9615_firmware apq8037_firmware snapdragon_wear_3100_platform_firmware sw5100_firmware qcs410_firmware snapdragon_720g_mobile_platform_firmware ar8035_firmware snapdragon_xr1_platform_firmware snapdragon_625_mobile_platform_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.46%

||

7 Day CHG~0.00%

Published-12 Nov, 2021 | 06:15

Updated-03 Aug, 2024 | 16:25

Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 qca9377_firmware mdm9150_firmware wcn3991_firmware sd678 sm7250 sm6250p_firmware wsa8830 qcs610 fsm10056 qca8337 sm7250_firmware qca6431_firmware sd7c_firmware csrb31024 wcd9360_firmware mdm9650 sd_636 sdx65 fsm10055_firmware wcn3950_firmware sc8180x\+sdx55 mdm9250 sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware qca6335 sd690_5g sd730_firmware sd_455_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qcs6125_firmware qca6426 qca6584au_firmware wcn3990_firmware sm8450 qca9377 sa415m wcn3998 sd_8cx_firmware wcd9371_firmware sdxr2_5g_firmware wcd9385_firmware wcd9326_firmware sd720g wcn3950 whs9410 sm6375_firmware qsm8350_firmware sd710_firmware qsm8350 sa8155 qca6320_firmware wcn7850 qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware wcn3998_firmware qca6420 qca6436_firmware wcd9360 qca6564au_firmware qca6584au sd778g qca6310 whs9410_firmware sa515m_firmware qcs6490 wcn7851 sdxr2_5g qcs6125 sa8155_firmware sdm630 sa415m_firmware wcn3988_firmware qca6430 qca6421 sd712_firmware sd778g_firmware sm6250 wcd9340 wsa8810_firmware sd765g sm8450_firmware sd765_firmware fsm10056_firmware qca6436 wcd9326 wcd9335 wcn6851 qca8081 qcs603_firmware wcn7851_firmware qca6174a_firmware mdm9250_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware wcd9371 sd750g sd870_firmware ar8035 qca6390 sd_8cx aqt1000 sd750g_firmware wcd9375 sc8180x\+sdx55_firmware sm6250_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sdx20_firmware qcm6490 sd712 sd888_5g_firmware sd660_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware qcx315 qca6564a wcn6750_firmware qcm6125_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd780g sd865_5g qca6564au sdx24 sdx55m_firmware sm8450p_firmware wcn6856_firmware sd670_firmware qcx315_firmware wsa8835 sd665_firmware wcd9380 sd888_5g sm6250p qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6174a sdx24_firmware qca6310_firmware sm7325 qca6430_firmware wcd9335_firmware wcn3980 wcn6750 qca6335_firmware sa515m qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 sd7c qca6320 wcn3910 mdm9650_firmware sd_8c_firmware sd765 qca6426_firmware qca6574a_firmware sd768g_firmware sd835 sd850_firmware wcn3980_firmware sd730 qca6391 sdx55m sdxr1_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware csrb31024_firmware qcm6490_firmware sdx50m sdx20 sd480_firmware qcs603 wcn6851_firmware sd_455 qca6574au sa8155p_firmware sd710 sd_636_firmware sd670 qca6564a_firmware wcd9341_firmware qcm6125 sd480 sd870 sm8450p wcn6855 wsa8810 qcs610_firmware mdm9150 wcn6856 sd_8c sd835_firmware sdxr1 sd768g wcn6740 qca6696 sdm630_firmware qca6391_firmware sd845_firmware sd780g_firmware wcd9370_firmware sdx55 sa8155p sd675 sd845 sd720g_firmware sdx12 qcs410_firmware ar8035_firmware sd850 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.50%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 09:21

Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM630, SDM660, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 sd_850 sd_632 sd_855 sd_820a sd_439 sd_670_firmware sd_429 sd_425 sdm660 sdm439 mdm9607_firmware sd_710_firmware mdm9650 sd_636 sdm630 sdx24 sd_625 msm8909w_firmware mdm9607 qm215 sd_636_firmware sd_450_firmware sd_845_firmware sd_439_firmware sd_820a_firmware sd_429_firmware qcs605_firmware mdm9206 sd_425_firmware sd_850_firmware sdx24_firmware sd_625_firmware sd_450 sdm439_firmware sd_712_firmware sdm630_firmware sd_845 qm215_firmware qcs605 mdm9206_firmware sd_670 sd_632_firmware mdm9650_firmware sd_710 msm8909w sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.52%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing diag event after associating to a network out of bounds read occurs if ssid of the network joined is greater than max limit.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.57%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 08:24

Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is allocated from userspace currently in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware mdm9206 sd_652 sd_425_firmware sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 mdm9640 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_652_firmware msm8909w sd_650_firmware sd_427_firmware sd_712 sd_855 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 qm215 mdm9607 sd_636_firmware sd_820_firmware sd_439_firmware mdm9150 sd_429_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.52%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a potential buffer over flow could occur while processing the ndp event due to lack of check on the message length.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.46%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:33

Updated-05 Aug, 2024 | 08:24

Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCS605, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdx24 mdm9650 sd_636 sm7150_firmware qca6574 msm8996au sd_820 sd_845_firmware sm7150 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 qca6564 sd_425_firmware qca9379_firmware qca6174a sdx24_firmware qca6584au_firmware sd_625_firmware ipq8074 qca9377 sd_8cx_firmware sd_845 mdm9206_firmware qca6574_firmware qca9886 qcs605 qca6584_firmware sd_835_firmware mdm9650_firmware sd_835 qca6584 qca6574au_firmware sda660 sd_210_firmware sxr1130_firmware sd_600 qca8081_firmware sxr1130 sd_205_firmware sd_212 sd_712 qca6584au sd_855 sdx20 sd_425 sdm660 sdm630 mdm9607_firmware sd_710_firmware sd_625 ipq8074_firmware qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware qca8081 qca6174a_firmware qca9886_firmware sd_212_firmware qca6564_firmware sd_850_firmware sd_855_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_670 sdx20_firmware sd_710 sd_600_firmware sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 08:24

Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4020, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9531, QCA9558, QCA9563, QCA9880, QCA9886, QCA9980, QCN5502, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9640_firmware sd_820a sd_675 qca9980_firmware msm8996au_firmware sd_670_firmware sdx24 qca9563_firmware mdm9650 sd_636 qca9558 qca9558_firmware sm7150_firmware snapdragon_high_med_2016_firmware qca6574 msm8996au qca9880_firmware sd_820 sd_450_firmware sd_845_firmware sm7150 sd_820a_firmware qcs605_firmware sd_675_firmware ipq4019_firmware mdm9206 qca6564 sd_425_firmware qca9379_firmware qca6174a sdx24_firmware qca6584au_firmware sd_625_firmware ipq8074 sd_450 qca9377 sd_8cx_firmware sd_845 mdm9206_firmware qca9563 qca6574_firmware qca9886 qcn5502_firmware qcs605 qca6584_firmware sd_835_firmware mdm9650_firmware qca4020 sd_835 qca6584 qca6574au_firmware sda660 sd_210_firmware ipq8064 sxr1130_firmware qca8081_firmware sd_600 sxr1130 sd_205_firmware ipq8064_firmware sd_212 sd_427_firmware sd_712 qca6584au sd_855 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcn5502 qca9531 sd_625 ipq8074_firmware qca6574au sd_820_firmware sd_210 mdm9607 qca9980 sd_636_firmware qca9880 qca4020_firmware qca8081 qca6174a_firmware qca9886_firmware sd_212_firmware snapdragon_high_med_2016 qca6564_firmware sd_850_firmware sd_855_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 ipq4019 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 qca9531_firmware sd_600_firmware sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.32%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing preferred network offload scan results integer overflow may lead to buffer overflow when large frame length is received from FW.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.07%

||

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 08:17

A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_835_firmware sd_850_firmware sd_835 sda660 sd_845_firmware sda660_firmware sd_845 Snapdragon Mobile

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.10% / 27.69%

||

7 Day CHG~0.00%

Published-17 Sep, 2021 | 07:05

Updated-03 Aug, 2024 | 16:25

Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sm7250 qca9561 qcs2290_firmware qca8337 sm7250_firmware ar9380 qca9563_firmware qca9561_firmware qca9880_firmware qca9992 qcs4290 wcn3950_firmware sd765g_firmware qcs2290 ipq8069_firmware qca6390_firmware sd690_5g wcd9370 qcs6125_firmware qca6426 wcn3990_firmware qca9984_firmware wcn3998 wcd9385_firmware wcn3950 sm4125 wcd9326_firmware wcn3615_firmware qca9563 qsw8573_firmware wcn3660b sd662 qca9982 sd460_firmware qca6320_firmware wcn3680b_firmware sdx55_firmware wcd9375_firmware wcn3615 wcn3998_firmware msm8909w apq8009w_firmware wcn3610_firmware apq8053_firmware ipq8065 qca9990 qrb5165_firmware sd429 qcs6125 sd662_firmware ipq8068 wcn3988_firmware sd429_firmware wcd9340 sdm830_firmware wsa8810_firmware sd765g sd765_firmware wcd9326 wcd9335 wcn6851 qca9982_firmware qcs4290_firmware wcd9385 qca9888_firmware wcd9341 ipq8068_firmware sd750g sd870_firmware qca6390 qca9898_firmware sd750g_firmware wcd9375 wcn3910_firmware msm8953_firmware wsa8830_firmware sda429w qca9992_firmware sd660 sd855_firmware sd865_5g_firmware wcn3620_firmware wcn3988 wcn6850_firmware sd660_firmware wcn3620 wsa8815_firmware wsa8835_firmware qca9898 wcn3610 qcm6125_firmware qca9882 qcm2290_firmware wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware wcn3990 qca9980_firmware sdm429w sd865_5g ar9380_firmware sdx55m_firmware qca9558 qca9558_firmware qet4101_firmware qca9896_firmware msm8909w_firmware ipq8065_firmware wsa8835 sdm429w_firmware sd665_firmware wcd9380 sd690_5g_firmware qca9889 qca9888 qca9994_firmware wcd9335_firmware wcn3980 qsw8573 qca9886 wcd9340_firmware sd855 sm4125_firmware wcn6850 sd665 wcn3910 qca6320 wsa8815 sd765 qca9887 qca6426_firmware wcn3660b_firmware qca9984 ipq8064 ipq8069 sd768g_firmware wcn3980_firmware sd460 qca6391 sdx55m ipq8064_firmware msm8953 qcm4290 qca9882_firmware qrb5165 wcn6851_firmware qca9994 qca9531 qca9887_firmware qca9889_firmware qca9980 apq8009w qca9880 wcd9341_firmware qcm6125 qcm4290_firmware sd870 wsa8810 wcn3680b qca9886_firmware sd768g qca6391_firmware wcd9370_firmware sdx55 apq8053 qca9990_firmware qet4101 qca9531_firmware sdm830 qca9896 qcm2290 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

||

7 Day CHG~0.00%

Published-29 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

When the buffer length passed is very large in WLAN, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_835_firmware sd_850_firmware sd_835 sda660 sd_845_firmware sda660_firmware sd_845 Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.57%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:33

Updated-05 Aug, 2024 | 08:24

Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing AP find event from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 625, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDX20, SDX24, SM7150

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 qca9377_firmware sd_850 mdm9150_firmware sd_855 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sdx20 sd_670_firmware sdx24 mdm9607_firmware sd_710_firmware mdm9650 sm7150_firmware sd_625 qca6574au sd_210 mdm9607 msm8996au sd_820_firmware sd_820 sd_845_firmware sm7150 sd_820a_firmware mdm9150 sd_675_firmware mdm9206 qca6174a_firmware qca6174a qca9379_firmware sd_212_firmware sd_850_firmware sdx24_firmware sd_625_firmware sd_855_firmware qca9377 sd_712_firmware sd_845 mdm9206_firmware sd_670 mdm9650_firmware sd_710 sdx20_firmware sd_205 qca6574au_firmware sd_210_firmware qca9379 sd_205_firmware sd_212 mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.00%

||

7 Day CHG~0.00%

Published-29 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

Buffer overflow can happen in WLAN module due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850, SDA660.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_850_firmware sda660 sd_845_firmware sda660_firmware sd_845 Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.70%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:17

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on integer overflow while calculating memory can lead to Buffer overflow in WLAN ext scan handler.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.32%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to buffer overflow in nan response event handler.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.52%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:17

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on input received to calculate the buffer length can lead to out of bound write to kernel stack.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

||

7 Day CHG~0.00%

Published-29 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

Improper input validation leads to buffer overwrite in the WLAN function that handles WLAN roam buffer in Snapdragon Mobile in version SD 845.

Vendor-Qualcomm Technologies, Inc.

Product-sd845_firmware sd845 Snapdragon Mobile

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 9.64%

||

7 Day CHG~0.00%

Published-07 May, 2021 | 09:10

Updated-03 Aug, 2024 | 16:25

Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qfs2580 qca9377_firmware qpm5679_firmware sm6250p_firmware ipq4028_firmware qca8337 qdm5579 ar9380 ipq8173_firmware qfs2608_firmware qfs2530 qpm8870_firmware qln1030 pm6125 qcn5124 qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpm5541_firmware qpa5581_firmware sa6155 pm7150l qcc1110_firmware pm8998_firmware qpa8821 wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware sa415m wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 qsw8573_firmware wcn3660b sd450_firmware qfe4320 qsw8574_firmware sd460_firmware smb2351_firmware pm8953_firmware sd6905g qpa4360_firmware qca8081_firmware qfe2520_firmware wcn3998_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 pm6150a qpm6670_firmware ipq8070_firmware ipq8065 ipq8078a_firmware pm660_firmware pm8150b ipq8072_firmware sa8155_firmware ipq8068 qfe2101 qca6430 qat3522 pmr735a wcd9340 sdm830_firmware sd765g sdr660 qfs2630_firmware sdr865 qdm5620_firmware smb1358 qca9888_firmware smr545 qca6696_firmware qln5020 wcd9371 sd870_firmware qcn5154_firmware pmm855au_firmware sa8150p pm6350 qdm5621 qfe3340 qtc800s qat3514_firmware qca9992_firmware sd660 qet6105 pm640p_firmware sd660_firmware qcn5121 qcn5022_firmware qat5516_firmware pm6150l sd450 sd8885g pm855l_firmware qca6428_firmware qca9985_firmware qtc410s ipq4018_firmware wcn3991 qca9980_firmware qpa8801 sdm429w ipq8078 pm8150l_firmware ipq8173 qat5533_firmware sdx55m_firmware sdxr25g qpa8673_firmware pm6150 smb1354_firmware sd670_firmware qca6574 sd632_firmware qfs2630 qpa8842 csr8811_firmware sdr052_firmware wcd9380 qualcomm215 qln4640 qcs410 qpm5579_firmware smb1380_firmware qfe4309_firmware pmk8350_firmware qcn5024 pm855p_firmware smb1381 pm7250 qca9379_firmware wtr4905 qpa8803 sdx24_firmware qca9985 qcn9012_firmware sd439_firmware sdxr25g_firmware qdm2301 ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware pmp8074_firmware qdm5621_firmware qdm2301_firmware qpm6375 ipq6028 ipq8064 pmp8074 wcn3980_firmware sd730 pm660l_firmware pm6250_firmware wcn6740_firmware pm8008 pm8350b_firmware qtm525_firmware pme605_firmware qcn5064_firmware pme605 sd678_firmware ipq8078_firmware qpm5621_firmware qcn5054 qln1021aq_firmware qcs603 qca9896 rsw8577 qpa6560_firmware qca9994 qpa8802_firmware qln4640_firmware qfe4308_firmware qca9980 qpm5621 qcn9024_firmware ipq8174_firmware apq8009w pm8009_firmware qfe4303 qfs2580_firmware qpm6582 sd670 qcm4290_firmware wcn6855 pm8150l pmi8998_firmware qcs610_firmware sa6145p pm660a_firmware pm215 pm4250 qca9886_firmware ar8031 qpm5577 wtr2965 sa2150p qca6391_firmware pm8150 qca4024 pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 qcn5021_firmware csra6640 pm8350bhs qat3555_firmware qpa8803_firmware wcn3660 qca9379 pm855b smb2351 qln1031 qsm8250_firmware qpm5870 pm8909 qcn5500 wsa8830 pm660 qca9561 qet6110_firmware qdm5579_firmware qpm6325 pm6125_firmware qbt1500 qpa5581 csrb31024 qca9563_firmware pmx24_firmware fsm10055_firmware qbt1500_firmware qpm5870_firmware qca9992 qcs4290 pmm855au qet6100 qca6420_firmware smb1394_firmware apq8009_firmware smb1396 pm7150a sd675_firmware ipq8072 pm8350 qpa5461_firmware qpa4361_firmware pm8350c_firmware qca6426 wcn3990_firmware qca9984_firmware qca9377 qpm5641 qpa5373_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware wcd9326_firmware wcn3615_firmware wtr2955 pm7250_firmware sdr845_firmware qdm5620 qln1021aq ipq8074a smb1380 qca9982 pmk8002_firmware qsw6310_firmware sa8155 qln1031_firmware qdm4650_firmware qcn5122_firmware pmm6155au_firmware qat5533 sdx55_firmware qcn6023_firmware wcn3615 sm7250p_firmware wcn3610_firmware qsm7250_firmware qpm6670 pm7150l_firmware qca6584au qpm4641 qat5515_firmware ipq8174 pm855 qpm8830_firmware sd429 pm8250 qcn5052 qdm4643 qfs2530_firmware sa415m_firmware pmx55 qpm4641_firmware qcn9074 sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware pm8953 qat5515 qpm5677 qat3514 wcd9326 wcd9335 qca9982_firmware pm6350_firmware qcn6023 pm8004_firmware sdr8150_firmware qcs4290_firmware pm439 qtc800h_firmware pmk7350_firmware qpm5620 qpm4630 qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 sm6250_firmware pmm8195au qln4642 msm8917_firmware qpm5677_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware pmi8937 pm8998 pmk7350 sdw3100 qpm8820_firmware smr525_firmware wtr3925_firmware qfe4301_firmware apq8017 qln1020_firmware qpm6621_firmware pm670a_firmware qcm6125_firmware pmx55_firmware wtr2955_firmware qfe4373fc_firmware pm8150_firmware smb1398_firmware qpm8830 qat5522 qca9896_firmware ipq8065_firmware pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qcn5154 qca8075_firmware qpa4361 ipq6005_firmware qpm4640_firmware qpm5577_firmware wcn6855_firmware qdm5679_firmware pm8350c smr525 qca9888 qca6310_firmware qfe4305_firmware ipq8070a_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware qca9886 qcn5502_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware sd765 qca6574a_firmware qpm4630_firmware qat3555 apq8009 qpa5461 sd8c_firmware wtr2965_firmware pm670_firmware csrb31024_firmware qfs2608 qcn9070_firmware sd480_firmware qln1036aq qtc801s ipq6028_firmware ipq8072a_firmware qca9531 qpm5641_firmware qca9889_firmware sd710 qcn5122 pm8008_firmware qpm6621 pmr735a_firmware pmw3100 pmx50 qcn5022 sdr8250 sd768g qln1030_firmware wcn6740 pmw3100_firmware pm8004 pm640l pmk8002 qca8075 qcn6024 qcn9022 sd845 sdm830 ipq6000_firmware qcs410_firmware qpa5580 qpm5579 fsm10055 qfe2550 sa6150p_firmware qcs610 qcn5550 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qca9561_firmware qat3519 qbt2000_firmware qca4024_firmware pm855a_firmware ipq8078a qtc800h sa8150p_firmware qcs2290 sdr8250_firmware qca6335 msm8917 qcn5064 csra6620_firmware qcs605_firmware qln1020 smr546_firmware qdm5671 csra6640_firmware pmc1000h qpm4650_firmware qat3518 sd8c sd632 sdr425_firmware smr526_firmware ipq8076a qpa5460 pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qca6428 qdm5652 qca6574au_firmware qcn5164_firmware ipq8071 qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware msm8909w wcd9360 qca6438_firmware pmx50_firmware qpa8675_firmware sdr735g qpa5460_firmware wcn3999 qdm3301_firmware qca7500 qsm7250 ipq4029_firmware qcs6125 ipq6010 sd662_firmware qcc1110 qcs405 smb1360 qualcomm215_firmware rsw8577_firmware qdm2308_firmware fsm10056_firmware pm439_firmware qca4020_firmware qca6436 sa6155p wcn6851 qcs603_firmware qpa6560 sdr675_firmware wcn3660_firmware wcd9341 ipq8068_firmware pmi8952 pm8937_firmware qca6431 qdm4643_firmware sm7350_firmware qet4100_firmware sd750g qfe4320_firmware qdm3302 wcn3910_firmware qpm5657 qpm5875_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 qca6438 wtr3925 sdr052 sa8195p_firmware smb1390 sdw3100_firmware qca9898 ipq4028 qet4100 wcn3610 qpa8686_firmware ipq5018_firmware qpm6585 qca8337_firmware sda429w_firmware wcd9380_firmware smb1355 ipq8072a qca7500_firmware qln4650 sdr735g_firmware pm8350bhs_firmware wgr7640 ipq8076a_firmware qat5568 qdm5671_firmware qet5100 qca6564au qpa8801_firmware qtm527_firmware wcn6856_firmware pm8005_firmware qcn5164 qca9558 qet4101_firmware pm7250b qln4642_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware qcn5054_firmware ipq4019_firmware sdx50m_firmware sdr735 smb1395 pm660l smr526 qca8072_firmware wtr5975 qca6430_firmware pmk8003 qcn5052_firmware qtc801s_firmware qat3522_firmware wcd9335_firmware wcn3980 pm7350c_firmware qca6335_firmware qsw8573 qcs605 wcn3910 smb1394 qca6426_firmware pm8350_firmware wcn3660b_firmware wcn3680 qca9984 qfe4309 qcn9024 pm8009 qpa8675 qcn5550_firmware sdr051_firmware sdx55m ipq8064_firmware pm670a qca6421_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 qsw8574 sd6905g_firmware ar8031_firmware wcn3680_firmware pm855l wcn6851_firmware qdm5670_firmware ipq8070 sd8655g qcn5502 pm7150a_firmware pm8150b_firmware qca9887_firmware qfe4302 smr545_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware pm4250_firmware qca9880 sd480 sd870 qcn5121_firmware sd8885g_firmware pm670 sd210_firmware qdm5677 pm8005 qsm8250 ipq6018 pm855_firmware qdm2302 pmm6155au sdxr1 pm855b_firmware qcs405_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware qln4650_firmware qpm5875 qet5100m sd888_firmware sa8155p sd675 sd439 qet4101 qca9531_firmware qat3516 pm670l qpm5658 ar8035_firmware qcm2290 qpm5658_firmware qcn5024_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware sd678 qcn9070 sdr051 qln5030 qcs2290_firmware pm4125 fsm10056 pmi632 qpa2625_firmware pm456 pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qpa5373 qpm4621 qcn9072 smb1360_firmware qca9880_firmware qet6100_firmware pm670l_firmware sdr660g sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware ipq6000 sd730_firmware wcd9370 qcn5152_firmware sdr425 pmr525_firmware qca6584au_firmware qcn9000_firmware qfe3340_firmware ipq5018 pmi632_firmware qpm5541 qat5516 qca9563 sd662 qpa8821_firmware qfe4308 qcn5124_firmware sdr660g_firmware pm8350bh pm3003a wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware sm7350 smb1354 ipq5010 qca6564au_firmware qdm2305 sa6155p_firmware qca6310 qpm8820 pm8937 qpm2630 qln5020_firmware sa515m_firmware qca9990 smb1398 sa6145p_firmware sdr675 sm6250 apq8017_firmware wsa8810_firmware sd765_firmware qdm5677_firmware qca8081 ipq8071a qca6174a_firmware ipq8071a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware ar8035 csr8811 qpa8673 ipq4019 qdm2310 qfe2550_firmware msm8953_firmware qcn9100_firmware qln5030_firmware sda429w sd210 wcn3620_firmware qfe4302_firmware smb1396_firmware wcn6850_firmware wcn3620 wsa8835_firmware qca6564a smr546 pmx24 qet6110 pmi8952_firmware qca8072 qcm2290_firmware qln5040 qpm8895 sdr845 qpm5670 wcn3990 qcn9000 qtm527 ar9380_firmware pmk8350 sdx24 qcn9012 qdm3302_firmware sd888 qca9558_firmware pm8350b qdm2307_firmware msm8909w_firmware wsa8835 sdm429w_firmware qpm5657_firmware sm6250p pm855a sdr660_firmware pm8909_firmware qca6574a ipq4018 pm8916_firmware qca9889 qca6174a smb1390_firmware ipq8074 qfe4303_firmware qca9994_firmware qpm4640 pm7350c qet5100m_firmware ipq8076_firmware qpm4650 qtm525 sa515m sa2150p_firmware wtr6955 sd855 sm4125_firmware sd8cx qfe4305 ipq8076 wtr6955_firmware qca9887 pm640p qcn5021 qcn5152 sd768g_firmware sdr865_firmware pm8250_firmware sd460 qca6391 sd8cx_firmware sdxr1_firmware smb1351 ipq6005 aqt1000_firmware pm215_firmware qcn9100 qpm8895_firmware pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 pm8916 smb1395_firmware qdm4650 pmd9655 ipq8074_firmware qca6574au sa8155p_firmware sd205_firmware qsw6310 qet6105_firmware sd8655g_firmware wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware qcn5500_firmware qat5568_firmware qdm2308 qat3550 wtr4905_firmware wcn6856 qdm5679 wcn3680b ipq6010_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware qpa2625 sa6150p qcn9022_firmware qca9990_firmware ipq8070a pmm8195au_firmware qcn9072_firmware sm7250p sd720g_firmware ipq8071_firmware qcn9074_firmware qpm4621_firmware wcn3988_firmware ipq4029 pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

||

7 Day CHG~0.00%

Published-04 Apr, 2019 | 15:09

Updated-05 Aug, 2024 | 08:24

Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sm7150_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sm7150 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_652_firmware sxr1130 msm8909w sd_205_firmware sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_855_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.32%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of length validation check for value received from firmware can lead to buffer overflow in WMA handler.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

||

7 Day CHG~0.00%

Published-29 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

Integer overflow may happen in WLAN when calculating an internal structure size due to lack of validation of the input length in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.09%

||

7 Day CHG~0.00%

Published-26 Nov, 2024 | 08:55

Updated-09 Jan, 2025 | 20:39

Improper Authentication in TrustZone

An image with a version lower than the fuse version may potentially be booted lead to improper authentication.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-287

Improper Authentication

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.14%

||

7 Day CHG~0.00%

Published-20 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, A use after free condition can occur in the SPS driver which can lead to error in kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.01% / 2.10%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in policy mgr unit test if mode parameter in wlan function is given an out of bound value it can cause an out of bound access while accessing the PCL table.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.52%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, possibility of invalid memory access while processing driver command in WLAN function.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.39%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 08:24

Improper authentication in locked memory region can lead to unprivilged access to the memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 sd_850 sd_412 sd_415 sd_616 sd_670_firmware sdm660 sdm630 mdm9607_firmware sd_615 mdm9655_firmware mdm9650 sd_636 sd_710_firmware sd_615_firmware sd_210 mdm9607 sd_636_firmware sd_845_firmware sd_410 qcs605_firmware mdm9206 sd_212_firmware sd_850_firmware mdm9655 sd_412_firmware sd_712_firmware sdm630_firmware sd_8cx_firmware sda660_firmware sd_845 mdm9206_firmware qcs605 sd_8cx sd_670 sd_835_firmware mdm9650_firmware sd_710 sd_410_firmware sd_835 sd_205 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sxr1130 sd_616_firmware sd_205_firmware sdm660_firmware sd_212 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-287

Improper Authentication

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

||

7 Day CHG~0.00%

Published-29 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy rates in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 600, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.26%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing start bss request from upper layer, out of bounds read occurs if ssid length is greater than maximum.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.52%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check Validation in WLAN function can lead to driver writes the default rsn capabilities to the memory not allocated to the frame.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.01% / 1.68%

||

7 Day CHG~0.00%

Published-20 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Anyone can execute proptrigger.sh which will lead to change in properties.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-269

Improper Privilege Management

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.26%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:17

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper length check can lead to out-of-bounds access in WLAN function.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.07%

||

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 08:17

Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 625, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDX20

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.46%

||

7 Day CHG~0.00%

Published-29 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

Buffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_835_firmware sd_850_firmware sd_835 sda660 sd_845_firmware sda660_firmware sd_845 Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.00%

||

7 Day CHG~0.00%

Published-29 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

Lack of buffer length check before copying in WLAN function while processing FIPS event, can lead to a buffer overflow in Snapdragon Mobile in version SD 845.

Vendor-Qualcomm Technologies, Inc.

Product-sd_845 sd_845_firmware Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.07%

||

7 Day CHG~0.00%

Published-29 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:17

Buffer overwrite can happen in WLAN due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850.

Vendor-Qualcomm Technologies, Inc.

Product-sd_845 sd_850 sd_845_firmware sd_850_firmware Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

||

7 Day CHG~0.00%

Published-04 Apr, 2019 | 15:09

Updated-05 Aug, 2024 | 08:17

Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 410/12, SD 820A

Vendor-Qualcomm Technologies, Inc.

Product-mdm9206 sd_820a sd_412 mdm9655 msm8996au_firmware sd_412_firmware mdm9206_firmware mdm9607_firmware mdm9655_firmware mdm9650 mdm9607 mdm9650_firmware msm8996au sd_410_firmware sd_410 sd_820a_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.07%

||

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 08:17

Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

||

7 Day CHG~0.00%

Published-29 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in version SD 845

Vendor-Qualcomm Technologies, Inc.

Product-sd_845 sd_845_firmware Snapdragon Mobile

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.00%

||

7 Day CHG~0.00%

Published-29 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

Buffer overflow can happen in WLAN function due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850, SDA660.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_850_firmware sda660 sd_845_firmware sda660_firmware sd_845 Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.46%

||

7 Day CHG~0.00%

Published-29 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

Lack of check of buffer size before copying in a WLAN function can lead to a buffer overflow in Snapdragon Mobile in version SD 845, SD 850.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850_firmware sd_845 sd_850 sd_845_firmware Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.46%

||

7 Day CHG~0.00%

Published-11 Feb, 2019 | 15:00

Updated-05 Aug, 2024 | 08:17

If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT and Snapdragon Mobile in versions MDM9607, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 636, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM630, SDM660.

Vendor-Qualcomm Technologies, Inc.

Product-sd_820a sd_412 msm8996au_firmware sdm660 sdm630 mdm9607_firmware mdm9650 mdm9655_firmware sd_636 sd_210 mdm9607 msm8996au sd_636_firmware sd_820_firmware sd_820 sd_410 sd_820a_firmware sd_212_firmware mdm9655 sd_412_firmware sdm630_firmware sd_8cx_firmware sda660_firmware sd_8cx sd_835_firmware mdm9650_firmware sd_410_firmware sd_835 sd_205 sda660 sd_210_firmware sd_205_firmware sdm660_firmware sd_212 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.07%

||

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 08:17

Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_835_firmware sd_850_firmware sd_835 sda660 sd_845_firmware sda660_firmware sd_845 Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.07%

||

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 08:17

Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, SDA660, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.46%

||

7 Day CHG~0.00%

Published-29 Oct, 2018 | 18:00

Updated-05 Aug, 2024 | 08:24

Lack of input validation while copying to buffer in WLAN will lead to a buffer overflow in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_835_firmware sd_850_firmware sd_835 sda660 sd_845_firmware sda660_firmware sd_845 Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer