CVE-2019-10572 | ByteOS Network

Vulnerability Details :

CVE-2019-10572

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-18 Dec, 2019 | 05:25

Updated At-04 Aug, 2024 | 22:24

Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:18 Dec, 2019 | 05:25

Updated At:04 Aug, 2024 | 22:24

▼CVE Numbering Authority (CNA)

Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Versions

Affected

APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Problem Types

Type	CWE ID	Description
text	N/A	Use of Out-of-range Pointer Offset in Video

Type: text

CWE ID: N/A

Description: Use of Out-of-range Pointer Offset in Video

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:18 Dec, 2019 | 06:15

Updated At:23 Dec, 2019 | 15:07

Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Qualcomm Technologies, Inc.

>>apq8009_firmware>>-

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8017_firmware>>-

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8053_firmware>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8096au_firmware>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8098_firmware>>-

cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9207c_firmware>>-

cpe:2.3:o:qualcomm:mdm9207c_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9207c:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9640_firmware>>-

cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8905_firmware>>-

cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8905:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909w_firmware>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8917_firmware>>-

cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8920_firmware>>-

cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8920:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8937_firmware>>-

cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8937:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8940_firmware>>-

cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8940:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8953_firmware>>-

cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996au_firmware>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8998_firmware>>-

cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8998:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>nicobar_firmware>>-

cpe:2.3:o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:nicobar:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs405_firmware>>-

cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs405:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs605_firmware>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qm215_firmware>>-

cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qm215>>-

cpe:2.3:h:qualcomm:qm215:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sa6155p_firmware>>-

cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sda660_firmware>>-

cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-190	Primary	nvd@nist.gov

CWE ID: CWE-190

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin	product-security@qualcomm.com	Patch Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/december-2019-bulletin

Source: product-security@qualcomm.com

Resource:

Patch

Vendor Advisory

Similar CVEs

789Records found

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.30%

||

7 Day CHG~0.00%

Published-09 Sep, 2021 | 07:35

Updated-03 Aug, 2024 | 16:25

UE assertion is possible due to improper validation of invite message with SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware sd678 sm6250p_firmware qcs610 csrb31024 wcd9360_firmware sd_636 qcs4290 wcn3950_firmware sc8180x\+sdx55 qca6420_firmware qca6595au_firmware qca6390_firmware qca6335 msm8917 sd730_firmware sd_455_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qcs6125_firmware qca6584au_firmware sd632 qca9377 sa415m wcn3998 sd_8cx_firmware wcd9371_firmware whs9410 wcn3950 sd720g wcn3660b sd450_firmware sa8155 qca6574au_firmware sdx55_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3610_firmware qca6420 apq8053_firmware wcd9360 qca6564au_firmware qca6584au qca6310 whs9410_firmware sd429 qcs6125 sa8155_firmware sdm630 sa415m_firmware wcn3988_firmware qca6430 sd429_firmware sm6250 sd712_firmware wcd9340 apq8017_firmware qualcomm215_firmware qcs603_firmware qca6174a_firmware qcs4290_firmware wcn3660_firmware qca6696_firmware wcd9371 qca6390 wcd9375 sd_8cx aqt1000 wcn3910_firmware sc8180x\+sdx55_firmware sm6250_firmware msm8953_firmware sda429w msm8917_firmware sd855_firmware wcn3620_firmware sd712 wcn3988 wcn6850_firmware wcn3620 wsa8815_firmware apq8017 sd450 wcn3610 qcm6125_firmware wcn3991 sda429w_firmware wcd9380_firmware sd_675 sdm429w qca6564au sdx24 sdx55m_firmware msm8940_firmware sd670_firmware sd632_firmware sdm429w_firmware sd665_firmware wcd9380 sm6250p qualcomm215 qcs410 qca6574a sdx50m_firmware qca6174a sdx24_firmware qca6310_firmware qca6430_firmware qca6335_firmware qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 wcn3910 sd_8c_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd850_firmware sd730 sdxr1_firmware sdx55m aqt1000_firmware msm8920 msm8953 sd678_firmware qcm4290 csrb31024_firmware sdx50m wcn3680_firmware qcs603 msm8920_firmware sd_455 qca6574au sa8155p_firmware sd_636_firmware sd670 qcm6125 qcm4290_firmware qcs610_firmware sd_8c sdxr1 qca6696 sdm630_firmware sd845_firmware wcd9370_firmware sdx55 msm8940 apq8053 sa8155p sd675 sd845 sd720g_firmware qcs410_firmware wcn3660 sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.17% / 38.45%

||

7 Day CHG~0.00%

Published-03 Apr, 2018 | 17:00

Updated-17 Sep, 2024 | 04:19

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in MMCP, a downlink message is not being properly validated.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.6||HIGH

EPSS-0.21% / 43.47%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in WLAN HOST

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware wsa8845_firmware wsa8832 qcc2076_firmware qca6595 srv1m qca8081_firmware ar8035_firmware qca6696 wcd9340_firmware wcd9395_firmware qcc2073_firmware qcc710_firmware qca6564au wsa8832_firmware sa8195p_firmware qca8337_firmware qca8337 wcd9395 qca6574au_firmware qca6574au wcd9390 flight_rb5_5g_platform wsa8845h_firmware sa9000p_firmware srv1h qca6554a sa8770p qca6584au qcn6274_firmware ssg2115p qcc710 qfw7114_firmware qca6595_firmware qcs7230 fastconnect_6900 fastconnect_7800_firmware qfw7114 wcd9385_firmware fastconnect_6900_firmware qam8255p_firmware wcd9380 qam8255p sxr2230p snapdragon_ar2_gen_1_platform_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p qca6564au_firmware sxr1230p qam8650p video_collaboration_vc5_platform_firmware sa9000p snapdragon_8\+_gen_2_mobile_platform srv1h_firmware qca6595au sa6155p_firmware wsa8840 qca6688aq srv1m_firmware qcs8550_firmware qfw7124_firmware wcd9385 snapdragon_8_gen_2_mobile_platform sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware qcc2076 ssg2125p qca6554a_firmware qca6574a sa8195p wcd9340 qcs8250_firmware qamsrv1m qam8650p_firmware video_collaboration_vc5_platform sm8550p_firmware qcm8550 qca6584au_firmware qcn6274 qca6574 qfw7124 qrb5165n_firmware sa8775p qca6595au_firmware qca6391_firmware snapdragon_x75_5g_modem-rf_system sxr2230p_firmware wsa8835 wsa8840_firmware sa8775p_firmware snapdragon_ar2_gen_1_platform qamsrv1h qca6696_firmware wsa8845h wcd9380_firmware qca6574_firmware sa8155p_firmware qca8081 sa8155p wsa8830 qam8775p sm8550p sa8255p_firmware flight_rb5_5g_platform_firmware qcc2073 ar8035 qca6574a_firmware qamsrv1m_firmware sa8650p_firmware robotics_rb5_platform qca6391 qcn6224 ssg2125p_firmware qrb5165n sa8770p_firmware snapdragon_8_gen_2_mobile_platform_firmware robotics_rb5_platform_firmware qcs8550 fastconnect_7800 sa8650p qam8775p_firmware qca6688aq_firmware qamsrv1h_firmware wsa8835_firmware ssg2115p_firmware snapdragon_x75_5g_modem-rf_system_firmware qcs8250 wsa8830_firmware qcn6224_firmware Snapdragon snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.12%

||

7 Day CHG~0.00%

Published-09 Sep, 2021 | 07:35

Updated-03 Aug, 2024 | 16:25

Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware wsa8830 sd678 sm7250 sm6250p_firmware qcs610 qca8337 sm7250_firmware qca6431_firmware wcd9360_firmware qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware msm8917 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qcs6125_firmware qca6426 sd632 wcn3990_firmware qca9377 wcn3998 sd_8cx_firmware wcd9371_firmware sdxr2_5g_firmware wcd9385_firmware wcn3950 sd720g whs9410 wcn3660b sd450_firmware qsm8350_firmware qsm8350 sa8155 qca6574au_firmware sdx55_firmware qca6595au sdx12_firmware wcd9375_firmware wcn3998_firmware wcn3610_firmware qca6420 qca6436_firmware apq8053_firmware wcd9360 sd778g whs9410_firmware qcs6490 sd429 sdxr2_5g qcs6125 sa8155_firmware wcn3988_firmware qca6430 sd205 sd429_firmware qca6421 sd778g_firmware sm6250 wcd9340 apq8017_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 wcn6851 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 wcn3660_firmware qca6431 qca6696_firmware qcs6490_firmware wcd9371 sd750g sd870_firmware ar8035 qca6390 sd_8cx aqt1000 sd750g_firmware wcd9375 sm6250_firmware wcn3910_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd210 sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware apq8017 wcn6750_firmware sd450 wcn3610 qcm6125_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware msm8940_firmware wsa8835 sd632_firmware sd665_firmware wcd9380 sd888_5g sm6250p qualcomm215 qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6174a sm7325 qca6430_firmware wcd9335_firmware wcn3980 wcn6750 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 wcn3910 sd_8c_firmware sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware wcn3980_firmware sd730 qca6391 sdx55m qca6421_firmware aqt1000_firmware wcn6740_firmware msm8920 msm8953 sd678_firmware qcm4290 qcm6490_firmware wcn3680_firmware sd480_firmware wcn6851_firmware msm8920_firmware qca6574au sa8155p_firmware sd205_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware wcn6856 sd_8c sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 msm8940 apq8053 sa8155p sd675 sd720g_firmware sdx12 qcs410_firmware wcn3660 ar8035_firmware sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.11% / 29.57%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Untrusted Pointer Dereference in Video

Memory corruption in video while parsing invalid mp2 clip.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware qcs410_firmware sa6150p_firmware sd865_5g sw5100p sxr1120 qca6595 snapdragon_xr1_platform qcs610_firmware wcd9335 wcd9370 qca6696 wcd9340_firmware wcd9341_firmware wcd9395_firmware snapdragon_730_mobile_platform wcn6740_firmware fastconnect_6700 wcn3610 snapdragon_768g_5g_mobile_platform_firmware sa4150p wsa8832_firmware wcd9395 snapdragon_460_mobile_platform qca6574au_firmware qcn7606_firmware qam8295p wcd9341 qca6574au wcd9390 wsa8810_firmware sd730_firmware wsa8845h_firmware sa9000p_firmware snapdragon_835_mobile_pc_platform_firmware wcn3660b_firmware sd730 snapdragon_730g_mobile_platform_firmware fastconnect_6800_firmware sd835_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_695_5g_mobile_platform snapdragon_4_gen_1_mobile_platform_firmware video_collaboration_vc1_platform_firmware sa4155p snapdragon_778g\+_5g_mobile_platform sa8770p qcm6125_firmware ssg2115p snapdragon_480\+_5g_mobile_platform_firmware sxr1120_firmware snapdragon_695_5g_mobile_platform_firmware fastconnect_6900 snapdragon_765g_5g_mobile_platform video_collaboration_vc1_platform wcd9385_firmware snapdragon_x55_5g_modem-rf_system qca6310 qam8255p_firmware snapdragon_888_5g_mobile_platform_firmware qcs4490 snapdragon_8_gen_1_mobile_platform_firmware snapdragon_685_4g_mobile_platform snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p qcm6125 snapdragon_768g_5g_mobile_platform wsa8810 video_collaboration_vc5_platform_firmware sa9000p snapdragon_8\+_gen_2_mobile_platform qca6595au sm7315_firmware wcd9326_firmware sa6155p_firmware wsa8840 qcs8550_firmware sd835 snapdragon_870_5g_mobile_platform_firmware snapdragon_wear_4100\+_platform_firmware snapdragon_8\+_gen_1_mobile_platform qcs4490_firmware snapdragon_8_gen_2_mobile_platform wcn3910_firmware snapdragon_7c\+_gen_3_compute_firmware snapdragon_855\+\/860_mobile_platform_firmware qca6420 wcn3910 wcd9370_firmware snapdragon_845_mobile_platform snapdragon_x55_5g_modem-rf_system_firmware snapdragon_660_mobile_platform wcn3660b qca6574a sa8195p wcd9340 qcs8250_firmware qcm2290 qcm6490 sm8550p_firmware qcm8550 wcn3988 sa8775p qca6574 snapdragon_460_mobile_platform_firmware sxr2230p_firmware qca6430_firmware snapdragon_870_5g_mobile_platform sa8775p_firmware wsa8845h sa6150p wcd9326 qcs410 qcm2290_firmware sa8155p_firmware sa8155p snapdragon_675_mobile_platform wsa8830 snapdragon_662_mobile_platform sm8550p sa6145p snapdragon_8\+_gen_1_mobile_platform_firmware snapdragon_765_5g_mobile_platform sa8255p_firmware snapdragon_665_mobile_platform snapdragon_678_mobile_platform_firmware qcm4325 ssg2125p_firmware wcn3950_firmware qca6698aq sm6250 snapdragon_8_gen_1_mobile_platform fastconnect_6200 sd670 snapdragon_710_mobile_platform sa8145p_firmware sm7325p_firmware wcn3680b snapdragon_730g_mobile_platform snapdragon_888\+_5g_mobile_platform sa8150p_firmware snapdragon_855\+\/860_mobile_platform snapdragon_w5\+_gen_1_wearable_platform fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 sd670_firmware snapdragon_680_4g_mobile_platform_firmware qcs6490 qcs8250 fastconnect_6200_firmware wsa8830_firmware wsa8845_firmware sd660_firmware wsa8832 snapdragon_675_mobile_platform_firmware snapdragon_730_mobile_platform_firmware snapdragon_888_5g_mobile_platform snapdragon_w5\+_gen_1_wearable_platform_firmware qca6320 sa4150p_firmware sd888_firmware snapdragon_662_mobile_platform_firmware qcs6125_firmware wsa8815_firmware sa8195p_firmware qcm4290 snapdragon_680_4g_mobile_platform qcm6490_firmware sm7250p_firmware qcm4490_firmware snapdragon_855_mobile_platform wcn3950 snapdragon_xr2_5g_platform qcs6125 snapdragon_7c\+_gen_3_compute snapdragon_765g_5g_mobile_platform_firmware snapdragon_xr2\+_gen_1_platform_firmware snapdragon_670_mobile_platform_firmware snapdragon_780g_5g_mobile_platform snapdragon_710_mobile_platform_firmware sa8295p_firmware sa4155p_firmware snapdragon_720g_mobile_platform sm6250_firmware sm7250p snapdragon_780g_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qca6320_firmware sd888 snapdragon_4_gen_2_mobile_platform sw5100_firmware snapdragon_765_5g_mobile_platform_firmware wcn6740 qca6310_firmware fastconnect_6800 qca6595_firmware qcs7230 fastconnect_7800_firmware snapdragon_685_4g_mobile_platform_firmware snapdragon_782g_mobile_platform_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p snapdragon_732g_mobile_platform_firmware snapdragon_xr2_5g_platform_firmware snapdragon_4_gen_1_mobile_platform sa8150p snapdragon_778g_5g_mobile_platform snapdragon_665_mobile_platform_firmware snapdragon_835_mobile_pc_platform sxr1230p snapdragon_865\+_5g_mobile_platform sw5100 video_collaboration_vc3_platform aqt1000 snapdragon_865_5g_mobile_platform_firmware qam8295p_firmware sd855 wcn3990_firmware sm7315 qca6698aq_firmware qcs2290 wcd9385 qcn7606 qcs2290_firmware wcn3615 wcn3610_firmware snapdragon_678_mobile_platform sa8255p qcs7230_firmware qcs4290 snapdragon_720g_mobile_platform_firmware sxr1230p_firmware wcd9390_firmware snapdragon_778g\+_5g_mobile_platform_firmware snapdragon_865\+_5g_mobile_platform_firmware snapdragon_690_5g_mobile_platform qca6430 wcn3615_firmware ssg2125p qcm4490 snapdragon_xr2\+_gen_1_platform sm7325p video_collaboration_vc5_platform snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sd855_firmware wcd9335_firmware wcn3980_firmware snapdragon_480_5g_mobile_platform_firmware wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware sw5100p_firmware snapdragon_732g_mobile_platform snapdragon_782g_mobile_platform qca6696_firmware qcs4290_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware qca6574_firmware wsa8815 sd660 sg4150p sd_8_gen1_5g qam8775p qcm4325_firmware qca6574a_firmware qcm4290_firmware snapdragon_480\+_5g_mobile_platform sd_8_gen1_5g_firmware wcd9375_firmware qca6391 qualcomm_215_mobile_platform snapdragon_778g_5g_mobile_platform_firmware sg4150p_firmware snapdragon_480_5g_mobile_platform sa8770p_firmware sa8295p snapdragon_670_mobile_platform snapdragon_8_gen_2_mobile_platform_firmware snapdragon_xr1_platform_firmware qcs8550 fastconnect_7800 qam8775p_firmware sd865_5g_firmware qualcomm_215_mobile_platform_firmware wcd9375 wcn3988_firmware sa8145p snapdragon_wear_4100\+_platform snapdragon_888\+_5g_mobile_platform_firmware wsa8835_firmware ssg2115p_firmware snapdragon_660_mobile_platform_firmware wcn3980 snapdragon_690_5g_mobile_platform_firmware wcn3680b_firmware qcs610 Snapdragon qam8255p_firmware snapdragon_662_mobile_platform_firmware sa6150p_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware sd730_firmware snapdragon_460_mobile_platform_firmware qcs6125_firmware snapdragon_480_5g_mobile_platform_firmware wcn3990_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware wcd9326_firmware wcn3615_firmware sd_8_gen1_5g_firmware snapdragon_660_mobile_platform_firmware qam8295p_firmware sa9000p_firmware qca6320_firmware sm7315_firmware qca6574au_firmware snapdragon_695_5g_mobile_platform_firmware snapdragon_835_mobile_pc_platform_firmware wcn3680b_firmware wcd9375_firmware wsa8845h_firmware sm7250p_firmware wcn3610_firmware snapdragon_680_4g_mobile_platform_firmware sa6155p_firmware qcm8550_firmware sa8775p_firmware wsa8840_firmware sa4155p_firmware qcs8550_firmware wcn3988_firmware sa6145p_firmware fastconnect_6700_firmware wsa8810_firmware wcd9395_firmware sa8255p_firmware qca6698aq_firmware qcs4290_firmware sa8770p_firmware qam8775p_firmware qca6696_firmware qcs6490_firmware snapdragon_665_mobile_platform_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware sm6250_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware sd660_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sxr1120_firmware sa8295p_firmware qcn7606_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qcm6125_firmware snapdragon_675_mobile_platform_firmware qcm2290_firmware qualcomm_video_collaboration_vc1_platform_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware qcs7230_firmware snapdragon_670_mobile_platform_firmware sd670_firmware sxr1230p_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qca6310_firmware qca6430_firmware wcd9335_firmware qcm4325_firmware qca6574_firmware wcd9340_firmware sm7325p_firmware wsa8845_firmware snapdragon_xr2_5g_platform_firmware wcn3660b_firmware qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware aqt1000_firmware wcn6740_firmware qcm4490_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcs4490_firmware qcm6490_firmware wsa8832_firmware fastconnect_6900_firmware sa8155p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qualcomm_215_mobile_platform_firmware sd835_firmware qca6595_firmware qca6391_firmware snapdragon_710_mobile_platform_firmware sa4150p_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware wcd9390_firmware ssg2115p_firmware sw5100_firmware qcs410_firmware snapdragon_720g_mobile_platform_firmware snapdragon_xr1_platform_firmware

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-822

Untrusted Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.19% / 41.47%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 11:25

Updated-04 Aug, 2024 | 11:28

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware qca2066 sd678 sa6150p_firmware sm7250 sa8145p_firmware qcs610 wsa8830 qca1062_firmware qcs2290_firmware qca8337 sm7250_firmware csrb31024 mdm9650 sd_636 csra6620 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware qca2064_firmware qca2062 qca6174_firmware sd690_5g sd730_firmware csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware wcd9370 csra6640_firmware qcs6125_firmware qca6426 qca6584au_firmware wcn3990_firmware qca9377 sa415m wcn3998 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware sd720g wcn3615_firmware wcn3660b wcn3910_firmware qca2065 sd662 sd460_firmware qca1064 sa8155 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcd9375_firmware wcn3615 wcn3998_firmware wcn3999_firmware qca6420 qca6436_firmware apq8053_firmware sdx20m qca6564au_firmware qca6584au sa6155p_firmware sd778g wcn3999 qrb5165_firmware sdxr2_5g qcs6125 sa8155_firmware sd662_firmware sdm630 sa415m_firmware qcs405 qca6430 sc8280xp_firmware wcn3988_firmware sa6145p_firmware sm6250 sd778g_firmware wcd9340 sa8195p wsa8810_firmware sd765g sd765_firmware qca6436 wcd9326 wcd9335 sa6155p wcn6851 qcs603_firmware qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 qca2066_firmware qca6696_firmware qca2065_firmware sd750g sd870_firmware qca1062 ar8035 qca6390 sd_8cx aqt1000 apq8064au sa8150p sd750g_firmware sm6250_firmware msm8953_firmware wcd9375 wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sdx20_firmware wcn3988 sd888_5g_firmware wcn6850_firmware sd660_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qca6564a wcn6750_firmware qcm6125_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 msm8996au_firmware sd780g sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware sd888 wsa8835 qca6574 msm8996au sd665_firmware wcd9380 sd888_5g qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6174a sdx24_firmware sm7325 qca6174 qca6430_firmware wcd9335_firmware wcn3980 wcn6750 qca6574_firmware qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 wcn3910 mdm9650_firmware qca6175a sd765 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd768g_firmware sd835 wcn3980_firmware sd460 qca6391 sd730 sdx55m aqt1000_firmware qca2062_firmware wcn6740_firmware msm8953 sd678_firmware apq8064au_firmware ar8031_firmware csrb31024_firmware qcm4290 sdx50m sdx20 qrb5165 sd480_firmware qcs603 wcn6851_firmware qca6164_firmware qca6574au sa8155p_firmware sd_636_firmware qca6564a_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 sdx20m_firmware wcn6855 wsa8810 qcs610_firmware wcn6856 sa6145p wcn3680b sd835_firmware sd768g apq8096au ar8031 qcs405_firmware qca1064_firmware sa8145p qca6164 qca6696 sdm630_firmware qca6391_firmware wcn6740 qca2064 sd780g_firmware sd845_firmware wcd9370_firmware sa6150p sd888_firmware sc8280xp apq8053 apq8096au_firmware csra6640 sa8155p sd675 sd845 sdx55 sd720g_firmware qcs410_firmware qca6175a_firmware ar8035_firmware qcm2290 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-287

Improper Authentication

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 47.45%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 11:25

Updated-03 Aug, 2024 | 16:25

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm7250 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 qca6431_firmware wcd9360_firmware mdm9645 wcn3950_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 msm8917 mdm8215 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware mdm8615m_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sd720g mdm9628 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware mdm9230_firmware mdm8215m qca6574au_firmware mdm9630 wcd9375_firmware wcn3998_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware qca4004_firmware mdm9615m qca6430 wcd9306_firmware wcd9340 mdm9625_firmware sd765g qca1990_firmware qualcomm215_firmware qca6436 wcn6851 sa6155p qcs603_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware mdm9655 qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g mdm8215_firmware wcn3910_firmware sd_8cx sa8150p mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd855_firmware sd865_5g_firmware sd712 wcn3988 sa8195p_firmware msm8208_firmware wcn6750_firmware sd450 wcn3610 mdm9640 msm8608 wcn3991 sda429w_firmware wcd9380_firmware sdm429w wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6174 qca6430_firmware sd439_firmware qca6335_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware sd_8c_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 qca1990 sd730 wcd9330_firmware sdx55m qca6421_firmware wcn6740_firmware ar6003_firmware msm8953 sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware apq8084_firmware sa6145p sdxr1 apq8096au sa8145p mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sd780g_firmware sdx55 apq8053 sa8155p sd675 sd439 wcn3660 qca9379 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware sm7250_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware mdm9310_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 mdm9615m_firmware wcn3615_firmware apq8037 sa8155 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 sa6155p_firmware qca6310 sa515m_firmware sd429 sdxr2_5g qca9367 apq8084 sdm630 mdm9607_firmware sd821 mdm9655_firmware msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sa6145p_firmware sm6250 sa8195p sd712_firmware apq8017_firmware wsa8810_firmware qca6694 sd765_firmware qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m mdm9625 qca6390 wcd9375 sd750g_firmware aqt1000 msm8976 qca6694_firmware sm6250_firmware msm8953_firmware qca6694au sda429w msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 ar6003 csr6030_firmware qca6564a mdm9630_firmware qcm6125_firmware mdm9635m_firmware sd_675 sd780g sd865_5g sdx24 msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p sc8180x qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware wcn6750 mdm9635m mdm9615 mdm9205 sa515m qca6574_firmware sd855 sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 qca6391 sdxr1_firmware mdm9310 aqt1000_firmware msm8920 qcm4290 csrb31024_firmware sdx50m sdx20 sd480_firmware msm8920_firmware mdm9215 sc8180x_firmware sd_455 qca6574au sa8155p_firmware mdm8215m_firmware mdm9607 sd205_firmware mdm9645_firmware qcm6125 wsa8810 mdm9150 wcn6856 sd_8c wcn3680b sd835_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sdw2500 sa6150p msm8940 apq8096au_firmware sd845 mdm9615_firmware apq8037_firmware sd720g_firmware sdx12 qcs410_firmware mdm9330 sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.29% / 51.59%

||

7 Day CHG~0.00%

Published-17 Sep, 2021 | 07:05

Updated-03 Aug, 2024 | 16:25

A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware fsm10055 sm7250 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 ipq4028_firmware qcn5550 qca8337 ar9380 ipq8173_firmware qca9561_firmware qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 qcn5064 sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware qca9987_firmware sd632 sa415m wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware ipq8076a mdm9628 wcn3660b sd450_firmware sd460_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sdx20m qca6438_firmware qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware wcn3999 qrb5165_firmware ipq5028 qca7500 ipq8072_firmware ipq4029_firmware qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 wcd9340 sdm830_firmware sd765g qualcomm215_firmware fsm10056_firmware qca6436 wcn6851 qcn3018_firmware sa6155p qcs603_firmware mdm9250_firmware wcn3660_firmware qca9888_firmware qcn6122 ipq8068_firmware qca6696_firmware wcd9371 sd870_firmware sd750g qca9988_firmware qcn5154_firmware wcn3910_firmware sa8150p ar7420_firmware wsa8830_firmware qca9992_firmware sd865_5g_firmware sd855_firmware wcn3988 qca6438 sa8195p_firmware qcn5121 qcn5022_firmware wcn6750_firmware qca9898 sd450 ipq4028 wcn3610 mdm9640 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware sdm429w wcd9330 msm8996au_firmware ipq8076a_firmware qca7550_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qca9558 sd670_firmware qca6574 sd632_firmware csr8811_firmware qca7520_firmware wcd9380 qualcomm215 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware ipq4019_firmware sdx50m_firmware sdx24_firmware qca8072_firmware qca9985 qcn9012_firmware qca6174 qca6430_firmware sd439_firmware qcn5052_firmware qca6335_firmware ipq6018_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware wcn3910 qca6320 mdm9650_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware wcn3680 qca9984 ipq6028 ipq8064 sd835 pmp8074 qcn9024 sd730 qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware wcn6740_firmware msm8953 qcn5064_firmware sd678_firmware apq8064au_firmware ar8031_firmware wcn3680_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 ipq8070 qca9896 qcn5502 qca9994 qca9887_firmware qca9980 sd670 qcn9024_firmware ipq8174_firmware apq8009w sd_636_firmware qca6564a_firmware qca9880 qcm4290_firmware sd480 sd870 qcn5121_firmware sd210_firmware qcs610_firmware sa6145p ipq6018 qcn3018 qca9886_firmware sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware sa8145p sdm630_firmware qca6391_firmware qca4024 wcd9370_firmware sd780g_firmware sdx55 sd888_firmware apq8053 qcn5021_firmware csra6640 sa8155p sd675 sd439 qca9531_firmware wcn3660 ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware mdm9150_firmware qcn5500 wsa8830 qca9561 sd678 qcn9070 sa8145p_firmware qca7520 qcs2290_firmware fsm10056 sm7250_firmware csrb31024 qca9563_firmware mdm9628_firmware mdm9650 sd_636 csra6620 fsm10055_firmware qca9987 qcn9072 qca9880_firmware qca9992 qcs4290 mdm9250 sd765g_firmware qca6420_firmware ipq8069_firmware apq8009_firmware qca6390_firmware sd690_5g ipq6000 qca6174_firmware sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6564 qca6426 qca6584au_firmware qcn9000_firmware qca9984_firmware qca9377 ipq5018 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcn3615_firmware qca9563 ipq8074a sd662 qcn5124_firmware qca9982 sa8155 qca6320_firmware wcn3680b_firmware qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware qca6595au wcn3999_firmware wcn3610_firmware qca6436_firmware ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qca6310 ipq8174 sd429 sa515m_firmware qca9990 sdxr2_5g qcn5052 qca9367 sdm630 mdm9607_firmware sa415m_firmware wcn3988_firmware qcn9074 sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware wsa8810_firmware qca6694 qca7550 sd765_firmware qca8081 qca9982_firmware qcn6023 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 ar8035 sm6250_firmware csr8811 apq8064au ipq4019 qca6694_firmware msm8953_firmware qcn9100_firmware msm8917_firmware sd210 wcn3620_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a qca9988 qcm6125_firmware qca9882 qca8072 qcm2290_firmware qcn9000 sd_675 sd780g sd865_5g qca6595 ar9380_firmware sdx24 qcn9012 sd888 qca9558_firmware qca9896_firmware msm8909w_firmware ipq8065_firmware qcx315_firmware qcn6122_firmware msm8996au sd665_firmware sdm429w_firmware wsa8835 sd888_5g sm6250p qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware mdm9206 qca9889 qca6174a qca9888 qca6310_firmware sm7325 ipq8074 qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 qcn5502_firmware ar7420 sd855 sm4125_firmware sd665 ipq8076 sd765 qca9887 qca6574a_firmware qcn5021 ipq8069 qcn5152 sd768g_firmware apq8009 sd460 qca6391 sdxr1_firmware ipq6005 aqt1000_firmware qcn9100 mdm9626 qcm4290 csrb31024_firmware sdx50m qca9882_firmware qcn9070_firmware sdx20 sd480_firmware ipq6028_firmware ipq8072a_firmware sd_455 mdm9626_firmware qca9531 ipq8074_firmware qca6574au qca9889_firmware sa8155p_firmware mdm9607 qcn5122 sd205_firmware sdx20m_firmware qcm6125 wsa8810 qcn5500_firmware mdm9150 wcn6856 qcn5022 wcn3680b sd835_firmware qca6564_firmware sd768g ipq6010_firmware wcn6740 qca6696 sd845_firmware sdw2500 sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn9072_firmware sdm830 ipq6000_firmware sd720g_firmware sdx12 ipq8071_firmware qcs410_firmware qcn9074_firmware ipq4029 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.37% / 58.26%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:42

Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9635m_firmware qcm2150_firmware mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8976_firmware msm8996au mdm915_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware msm8939 qcs605 mdm915 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware mdm9655_firmware sdm660 sc8180x_firmware sdm710 qm215 mdm9607 apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware msm8937 msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 qm215_firmware msm8976 sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 mdm9615_firmware apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 47.45%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 11:25

Updated-03 Aug, 2024 | 16:25

Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm7250 mdm9640_firmware sm6250p_firmware qcs610 qca6431_firmware wcd9360_firmware mdm9645 wcn3950_firmware qca6595au_firmware qca6335 msm8917 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sd720g mdm9628 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qca6574au_firmware wcd9375_firmware wcn3998_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware qca6430 wcd9306_firmware wcd9340 mdm9625_firmware sd765g qualcomm215_firmware qca6436 wcn6851 qcs603_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware mdm9655 qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g wcn3910_firmware sd_8cx mdm9207_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware sd712 wcn3988 msm8208_firmware wcn6750_firmware sd450 wcn3610 msm8608 mdm9640 wcn3991 wcd9380_firmware wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6430_firmware sd439_firmware qca6335_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 msm8937_firmware mdm9650_firmware sd_8c_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 sd730 wcd9330_firmware sdx55m qca6421_firmware msm8953 sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware apq8084_firmware sdxr1 apq8096au mdm8207_firmware sdm630_firmware sd820_firmware qca6391_firmware wcd9370_firmware sdx55 apq8053 sa8155p sd675 sd439 wcn3660 qca9379 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sm7250_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 wcn3615_firmware apq8037 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 qca6310 sa515m_firmware sd429 sdxr2_5g qca9367 apq8084 sdm630 mdm9607_firmware sd821 mdm9655_firmware msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware qca6694 sd765_firmware qca6174a_firmware qcs4290_firmware wcd9385 mdm9625 qca6390 wcd9375 sd750g_firmware aqt1000 msm8976 qca6694_firmware sm6250_firmware msm8953_firmware qca6694au msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 csr6030_firmware qca6564a qcm6125_firmware mdm9635m_firmware sd_675 sd865_5g sdx24 msm8909w_firmware qcx315_firmware wsa8835 msm8996au sd665_firmware sd888_5g sm6250p sc8180x qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware wcn6750 mdm9635m sa515m qca6574_firmware sd855 sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 qca6391 sdxr1_firmware aqt1000_firmware msm8920 qcm4290 csrb31024_firmware sdx50m sdx20 sd480_firmware msm8920_firmware sd_455 sc8180x_firmware qca6574au sa8155p_firmware mdm9607 sd205_firmware mdm9645_firmware qcm6125 wsa8810 mdm9150 wcn6856 sd_8c wcn3680b sd835_firmware sd768g qca6696 sd845_firmware msm8608_firmware sdw2500 msm8940 apq8096au_firmware sd845 apq8037_firmware sd720g_firmware sdx12 qcs410_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.30% / 52.48%

||

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-11 Aug, 2025 | 15:06

Use After Free in WLAN Host Communication

Memory corruption while processing MBSSID beacon containing several subelement IE.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware immersive_home_214 sa6150p_firmware sw5100p ipq9574 qcn9000_firmware qca6595 qcn9022 ipq6028_firmware qca8081_firmware qca6696 wcd9340_firmware ipq5028_firmware wcd9395_firmware qcn6024 qcc2073_firmware qcc710_firmware ipq8076 ipq6018_firmware qcn6422_firmware qcn6023 qcn5124_firmware wsa8832_firmware qca8337 wcd9395 ipq6000 ipq8078a qca6574au_firmware ipq8078a_firmware qam8295p ipq5312 qca6574au wcd9390 wsa8845h_firmware sa9000p_firmware srv1h qcn9100_firmware qcn5122 qca6554a qcn6024_firmware sa8770p qcn9000 ssg2115p qcc710 qcn6132_firmware fastconnect_6900 qcn6402 qcn6432 immersive_home_326_firmware ipq5332_firmware qcn5052 qfw7114 wcd9385_firmware ipq9574_firmware qam8255p_firmware ipq8074a_firmware ipq8076a qcn5164 snapdragon_x65_5g_modem-rf wsa8845 sa6155p qca6564au_firmware csr8811_firmware qca8075 qam8650p video_collaboration_vc5_platform_firmware qca8085 sa9000p srv1h_firmware qca6595au sa6155p_firmware wsa8840 srv1m_firmware snapdragon_8_gen_2_mobile_firmware qfw7124_firmware qcn9012 ipq8070a_firmware qcn9070 qcf8001 qca8084 snapdragon_8_gen_2_mobile sdx65m qcc2076 ipq9570 qca6574a snapdragon_8\+_gen_2_mobile sa8195p wcd9340 qcs8250_firmware snapdragon_auto_5g_modem-rf_gen_2 ipq5302 qcn6122_firmware qcn5154_firmware sm8550p_firmware qcm8550 wcn3988 qcn5122_firmware qcn9274 qcn9024 ipq8076a_firmware sa8775p qca6574 ipq9570_firmware sxr2230p_firmware sa8775p_firmware qamsrv1h qcn6412_firmware qcn9024_firmware wsa8845h qca8082 sa6150p sa8155p_firmware sa8155p wsa8830 ipq5312_firmware sm8550p qcf8000_firmware sa6145p qcn9074_firmware ipq8174 immersive_home_318_firmware qcn6122 ipq8174_firmware sa8255p_firmware qcc2073 ar8035 ipq8072a qamsrv1m_firmware sa8650p_firmware immersive_home_216_firmware immersive_home_316 qcn6224 ipq8071a qcn6112 qca6698aq ssg2125p_firmware qrb5165n sa8145p_firmware sa8150p_firmware qcn6023_firmware qcn5164_firmware snapdragon_x75_5g_modem-rf_firmware ipq8078 qcs8250 wsa8830_firmware qcn9072 qcn6224_firmware qca6678aq_firmware qca8386_firmware wsa8845_firmware wsa8832 qca8082_firmware qcc2076_firmware immersive_home_216 srv1m qca6678aq qcn6432_firmware ar8035_firmware qcn5022_firmware qca4024_firmware qca0000_firmware ipq9008 qca6564au ipq9008_firmware qcn9074 sa8195p_firmware qca8337_firmware qca9888 ipq5332 qcn9013 sg8275p_firmware ipq8173 ipq8072a_firmware ipq6010_firmware qcn6112_firmware flight_rb5_5g qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware ipq5028 qca8085_firmware qcf8001_firmware qcn9070_firmware sa8295p_firmware qcn9022_firmware ipq5010_firmware qcn6132 ipq6018 qca6584au qcn6274_firmware sw5100_firmware qfw7114_firmware qca4024 qca6595_firmware qcs7230 fastconnect_7800_firmware qcn6422 immersive_home_214_firmware ipq5302_firmware ipq8070a fastconnect_6900_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p sa8150p immersive_home_3210 qca8075_firmware qcf8000 qcn5052_firmware sxr1230p ipq6010 sdx65m_firmware sw5100 qam8295p_firmware qcn6402_firmware qca6698aq_firmware wcd9385 qca8084_firmware sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware qcn5024 sg8275p sdx55_firmware immersive_home_326 ipq8071a_firmware flight_rb5_5g_firmware ssg2125p qca6554a_firmware ipq6028 snapdragon_x65_5g_modem-rf_firmware qcn9100 qamsrv1m robotics_rb5 qam8650p_firmware qcn9013_firmware video_collaboration_vc5_platform ipq8076_firmware qca6584au_firmware qcn5152_firmware qcn6274 qrb5165n_firmware qfw7124 wcn3980_firmware wsa8835 qca6595au_firmware qca6391_firmware qca0000 wsa8840_firmware sw5100p_firmware qca6696_firmware wcd9380_firmware qca6574_firmware qca8081 qcn5124 qam8775p qca6797aq snapdragon_ar2_gen_1_firmware qcn5152 snapdragon_x75_5g_modem-rf qcn6412 qca6574a_firmware sdx55 qcn9072_firmware qca9888_firmware ipq8074a immersive_home_3210_firmware qca9889 qcn5024_firmware qca8386 qca6391 immersive_home_318 ipq5010 qcn9274_firmware ipq8173_firmware qcn9012_firmware sa8770p_firmware sa8295p ipq6000_firmware fastconnect_7800 sa8650p qam8775p_firmware snapdragon_8\+_gen_2_mobile_firmware ipq8078_firmware qca9889_firmware snapdragon_ar2_gen_1 wcn3988_firmware immersive_home_316_firmware qamsrv1h_firmware qcn5154 sa8145p wsa8835_firmware ssg2115p_firmware csr8811 qcn5022 wcn3980 Snapdragon qcn6412_firmware qca6574a_firmware wsa8832_firmware qcn5124_firmware flight_rb5_5g_platform_firmware sa8150p_firmware qcn9024_firmware qcs7230_firmware qcn9070_firmware srv1h_firmware qcn6422_firmware wsa8835_firmware csr8811_firmware sa8255p_firmware wcn3988_firmware qualcomm_video_collaboration_vc5_platform_firmware ipq8076a_firmware qcn9022_firmware ipq8076_firmware ipq8074a_firmware sa8155p_firmware qcn6224_firmware qca8386_firmware qcn5164_firmware qcn5052_firmware immersive_home_3210_platform_firmware qca6698aq_firmware qca8081_firmware qcn6402_firmware sa8770p_firmware wcd9385_firmware fastconnect_7800_firmware wsa8845h_firmware qcm8550_firmware ipq8078_firmware ssg2125p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcn6024_firmware qamsrv1m_firmware ipq8070a_firmware qca6595_firmware ipq5302_firmware qca0000_firmware qcn5152_firmware qam8650p_firmware qcn6274_firmware qcn6432_firmware srv1m_firmware immersive_home_316_platform_firmware qrb5165n_firmware snapdragon_8_gen_2_mobile_platform_firmware qcn5024_firmware sa8195p_firmware qcc2073_firmware qca9889_firmware ipq8173_firmware qcn9012_firmware ipq6018_firmware qcn9100_firmware sw5100_firmware sa9000p_firmware wcd9340_firmware ar8035_firmware qca8084_firmware qcn5022_firmware snapdragon_x75_5g_modem-rf_system_firmware wsa8845_firmware qcf8001_firmware qcc710_firmware qca8075_firmware qca6574au_firmware qcf8000_firmware sa6155p_firmware qcn9274_firmware ipq8071a_firmware qcn9074_firmware qca6678aq_firmware qcn5122_firmware sdx65m_firmware ipq5312_firmware qca6564au_firmware wcn3980_firmware qca4024_firmware qcn9000_firmware qca6696_firmware immersive_home_326_platform_firmware qcn6122_firmware sa8775p_firmware immersive_home_318_platform_firmware qcn9013_firmware qca8337_firmware ipq6000_firmware qcn5154_firmware qca6595au_firmware wcd9390_firmware qamsrv1h_firmware sm8550p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qca6554a_firmware snapdragon_ar2_gen_1_platform_firmware ipq9570_firmware ipq8078a_firmware wcd9395_firmware sa6145p_firmware sa8295p_firmware sa6150p_firmware sxr1230p_firmware qcn9072_firmware qfw7124_firmware qca6391_firmware qcc2076_firmware ipq8174_firmware ipq6010_firmware fastconnect_6900_firmware wsa8840_firmware qca9888_firmware wcd9380_firmware qca6584au_firmware qam8775p_firmware immersive_home_216_platform_firmware ipq9008_firmware sw5100p_firmware qfw7114_firmware wsa8830_firmware qca8085_firmware sxr2230p_firmware qam8295p_firmware ssg2115p_firmware qca6574_firmware sg8275p_firmware sa8145p_firmware qcn6112_firmware qcn6023_firmware ipq5028_firmware robotics_rb5_platform_firmware ipq6028_firmware ipq8072a_firmware ipq9574_firmware qca6797aq_firmware ipq5010_firmware sdx55_firmware qca8082_firmware ipq5332_firmware immersive_home_214_platform_firmware qam8255p_firmware sa8650p_firmware qcs8250_firmware qcn6132_firmware

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 50.33%

||

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qfe3100 qfs2580 qca1023 qca8337 ar9380 qfs2530 qln1030 qpa8688 pm6125 qcn5124 mdm9645 pm8150a qdm5670 sa6155 pm7150l qpa8821 mdm8215 apq8076 qfe2320 msm8108 sa415m wcn3998 wcn3950 sm4125 sd720g wtr1605 wcn3660b qfe4320 qcc112 sd6905g pm855p qca6420 pm6150a pm8150b qca0000 qfe2101 qca6430 qat3522 qfe4455fc pmr735a wcd9340 sd765g sdr660 qfe3345 sdr865 smb1358 smr545 qln5020 wcd9371 smb1350 pmm8920au sa8150p wtr3950 pm6350 qdm5621 qfe3340 qtc800s sd660 sd712 qcn5121 pm6150l sd450 sd8885g qtc410s wcn3991 qpa8801 ipq8078 ipq8173 sdxr25g pm6150 qca6574 qfs2630 qpa8842 pmm8996au wcd9380 qualcomm215 qln4640 qcs410 smb1381 qcn5024 pm7250 wtr4905 qpa8803 pmd9645 qdm2301 wsa8815 wcn6850 qpm6375 ipq6028 ipq8064 sd835 pmp8074 qca1990 sd730 pm8008 pme605 qca6234 qcn5054 qcs603 rsw8577 qca9994 qca9980 qpm5621 qpm6582 sd670 qfe4303 wcn6855 pm8150l sa6145p pm215 ar8031 qpm5577 wtr2965 pm8150 qca4024 sdx55 apq8053 csra6640 pmi8994 wcn3660 qca9379 pm855b smb2351 qln1031 qcn7606 qpm5870 pm8909 qfe1040 wsa8830 pm660 qpm6325 qbt1500 qpa5581 csrb31024 mdm9650 qca9378a pmk8001 qca9992 qcs4290 pmm855au qet6100 mdm9250 smb1396 pm7150a ipq8072 pm8350 qca6564 qca6426 qca9377 qca4531 qpm5641 whs9410 wtr2955 qdm5620 qln1021aq ipq8074a smb1380 apq8094 sa8155 qca6584 qat5533 wcn3615 pm8940 qpm6670 wcd9306 qca6584au msm8208 qpm4641 ipq8174 pm855 sd429 pm8250 qcn5052 qca9367 apq8092 sdm630 qdm4643 pmx55 qcn9074 sd205 qca6421 qdm3301 sa8195p pm8953 qat5515 qca6694 qpm5677 qat3514 wcd9326 wcd9335 qcn6023 pm439 qpm5620 qpm4630 qca6390 wcd9375 aqt1000 msm8976 pmm8195au qln4642 msm8994 qfe2310 pmi8937 pm8998 msm8916 apq8017 pm8019 qca6595 qpm8830 apq8039 qat5522 pm8150c pmr735b qpa4360 qcn5154 qpa4361 mdm9206 pm8350c smr525 qca9888 pmr525 mdm9615 msm8929 qca9886 sd665 qca6175a sd765 pmx20 pmd9607 qat3555 apq8009 qpa5461 mdm9310 qfe2082fc qfs2608 qln1036aq qtc801s qfe3320 sd710 mdm9607 qcn5122 qpm6621 pmx50 pm8018 qcn5022 sdr8250 sd768g pm8004 pm640l msm8940 pmk8002 qca8075 qcn6024 qcn9022 sd845 sdm830 smb1357 qpa5580 qpm5579 qfe2550 qcs610 qcn5550 pmi8996 qfe1045 qdm2307 qpa8802 qat3519 ipq8078a qtc800h qcs2290 qca6335 msm8917 qcn5064 qln1020 wtr3905 qca1990a qdm5671 pmc1000h qfe2330 qat3518 sd632 sd8c ipq8076a mdm9628 qpa5460 qca4020 qca6428 qdm5652 ipq8071 qpm8870 qpm5679 qbt2000 wcd9360 sdx20m wtr1625l sdr735g wcn3999 qsm7250 pm8996 qcs6125 ipq6010 smb1360 qcs405 qfe3440fc qca6436 wcn6851 sa6155p qpa6560 msm8937 wcd9341 pmi8952 mdm9655 qca6431 sd750g qpm5657 qdm5650 wcn3988 qca6438 wtr3925 qfe2080fc sdr052 smb1390 qca9898 ipq4028 qet4100 wcn3610 msm8608 mdm9640 qpm6585 smb1355 ipq8072a qln4650 wcd9330 wgr7640 csr6030 qat5568 qet5100 sd636 qca6564au qcn5164 pm8994 pm7250b sdr735 smb1395 smb358s pm660l ar8151 smr526 wtr5975 qca6174 pmk8003 wcn3980 qsw8573 msm8939 qcs605 qbt1000 sd7c qca6320 wcn3910 wcn3680 qca9984 qfe4309 qcn9024 pm8009 qpa8675 sdx55m pm670a qfe4373fc msm8953 qsw8574 pmi8998 qfe2520 pm855l ipq8070 sd8655g qfe4302 pm670 qdm5677 pm8005 ipq6018 qdm2302 pmm6155au sdxr1 apq8096au qpm5875 qet5100m sa8155p sd675 wtr4605 sd439 qet4101 pm8952 qat3516 pm670l qpm5658 qcm2290 qfe4465fc sdr051 qcn9070 qln5030 pm4125 pmi632 pm456 qca9378 csra6620 qpa5373 qpm4621 qcn9072 sdr660g qfe2340 sd455 qpa8686 ipq6000 wcd9370 sdr425 ipq5018 qca9369 qcn7605 qpm5541 qat5516 sd662 qfe4308 pm8350bh apq8037 pm3003a qca6595au qtc800t smb1354 ipq5010 qdm2305 qca6310 qpm8820 pm8937 qpm2630 qfe2081fc qca9990 smb1398 sd821 sdr675 msm8992 sm6250 smb231 qfe1100 qca4010 qet4200aq qca8081 ipq8071a wcd9385 pmm8155au ar8035 csr8811 apq8064au qpa8673 qdm2310 sd210 sd820 wcn3620 qca6564a smr546 pmx24 qet6110 qln5040 qca8072 qpm8895 sdr845 qpm5670 wcn3990 qcn9000 qtm527 pmk8350 sdx24 qcn9012 pm8350b wsa8835 msm8996au qfe1035 pmi8940 sm6250p rgr7640au qln1035bd pm855a ipq4018 qca6574a qca9889 qca6174a ipq8074 qpm4640 wcn6750 qpm4650 qtm525 sa515m wtr6955 qfe3335 sd855 sd8cx qfe4305 ipq8076 pm640p qcn5021 ipq8069 qcn5152 msm8209 sd460 qca6391 smb1351 ipq6005 msm8920 qcn9100 mdm9626 pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 sdx20 pm8916 qdm4650 mdm9215 pmd9655 qca6574au qsw6310 qcm6125 wsa8810 qdm2308 qat3550 wcn6856 qdm5679 wcn3680b qca6696 qfe4301 sm4350 apq8016 qpa2625 sa6150p ipq8070a sm7250p ipq4029 pm8956 sd850 pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-9.12% / 92.34%

||

7 Day CHG~0.00%

Published-13 Jan, 2015 | 15:00

Updated-12 Apr, 2025 | 10:46

Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote attackers to execute arbitrary code via a long string in a UID command.

Vendor-n/a Qualcomm Technologies, Inc.

Product-eudora_worldmail n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.6||HIGH

EPSS-0.20% / 42.65%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Stack-based Buffer Overflow in WLAN HOST

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware sa6150p_firmware wsa8845_firmware wsa8832 qcc2076_firmware qca6595 srv1m qca8081_firmware ar8035_firmware qca6696 wcd9340_firmware wcd9395_firmware qcc2073_firmware qcc710_firmware qca6564au wsa8832_firmware sa8195p_firmware qca8337_firmware qca8337 wcd9395 qca6574au_firmware qca6574au wcd9390 flight_rb5_5g_platform wsa8845h_firmware sa9000p_firmware srv1h qca6554a sa8770p qca6584au qcn6274_firmware ssg2115p qcc710 qfw7114_firmware qca6595_firmware qcs7230 fastconnect_6900 fastconnect_7800_firmware qfw7114 wcd9385_firmware fastconnect_6900_firmware qam8255p_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p sa8150p snapdragon_ar2_gen_1_platform_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p qca6564au_firmware sxr1230p qam8650p video_collaboration_vc5_platform_firmware sa9000p snapdragon_8\+_gen_2_mobile_platform srv1h_firmware qca6595au sa6155p_firmware wsa8840 qca6688aq srv1m_firmware qcs8550_firmware qfw7124_firmware wcd9385 snapdragon_8_gen_2_mobile_platform sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware qcc2076 ssg2125p qca6554a_firmware qca6574a sa8195p wcd9340 qcs8250_firmware qamsrv1m qam8650p_firmware video_collaboration_vc5_platform sm8550p_firmware qcm8550 qca6584au_firmware qcn6274 qca6574 qfw7124 qrb5165n_firmware sa8775p qca6595au_firmware qca6391_firmware snapdragon_x75_5g_modem-rf_system sxr2230p_firmware wsa8835 wsa8840_firmware sa8775p_firmware snapdragon_ar2_gen_1_platform qamsrv1h qca6696_firmware wsa8845h wcd9380_firmware sa6150p qca6574_firmware sa8155p_firmware qca8081 sa8155p wsa8830 qam8775p sm8550p sa6145p sa8255p_firmware flight_rb5_5g_platform_firmware qcc2073 ar8035 qca6574a_firmware qamsrv1m_firmware sa8650p_firmware robotics_rb5_platform qca6391 qcn6224 ssg2125p_firmware qrb5165n sa8770p_firmware snapdragon_8_gen_2_mobile_platform_firmware robotics_rb5_platform_firmware qcs8550 fastconnect_7800 sa8145p_firmware sa8650p qam8775p_firmware qca6688aq_firmware sa8150p_firmware qamsrv1h_firmware sa8145p wsa8835_firmware ssg2115p_firmware snapdragon_x75_5g_modem-rf_system_firmware qcs8250 wsa8830_firmware qcn6224_firmware Snapdragon

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.11% / 29.57%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Video

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.

Vendor-Qualcomm Technologies, Inc.

Product-sw5100p qcs410_firmware sa6150p_firmware sd865_5g qca6595 qcs610_firmware wcd9335 wcd9370 qca6696 wcd9340_firmware wcd9341_firmware snapdragon_730_mobile_platform wcn6740_firmware fastconnect_6700 wcn3610 snapdragon_768g_5g_mobile_platform_firmware sa4150p wsa8832_firmware snapdragon_460_mobile_platform qca6574au_firmware qcn7606_firmware qam8295p wcd9341 qca6574au wsa8810_firmware sd730_firmware sa9000p_firmware srv1h snapdragon_835_mobile_pc_platform_firmware wcn3660b_firmware sd730 snapdragon_730g_mobile_platform_firmware fastconnect_6800_firmware sd835_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_695_5g_mobile_platform snapdragon_4_gen_1_mobile_platform_firmware video_collaboration_vc1_platform_firmware sa4155p snapdragon_778g\+_5g_mobile_platform sa8770p ssg2115p snapdragon_480\+_5g_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware fastconnect_6900 snapdragon_765g_5g_mobile_platform video_collaboration_vc1_platform wcd9385_firmware snapdragon_x55_5g_modem-rf_system qca6310 qam8255p_firmware snapdragon_888_5g_mobile_platform_firmware qcs4490 snapdragon_8_gen_1_mobile_platform_firmware snapdragon_685_4g_mobile_platform sa6155p snapdragon_768g_5g_mobile_platform wsa8810 qam8650p sa9000p srv1h_firmware qca6595au sm7315_firmware sa6155p_firmware srv1m_firmware sd835 snapdragon_870_5g_mobile_platform_firmware snapdragon_wear_4100\+_platform_firmware snapdragon_8\+_gen_1_mobile_platform qcs4490_firmware wcn3910_firmware snapdragon_7c\+_gen_3_compute_firmware snapdragon_855\+\/860_mobile_platform_firmware qca6420 wcn3910 wcd9370_firmware snapdragon_845_mobile_platform snapdragon_x55_5g_modem-rf_system_firmware snapdragon_660_mobile_platform wcn3660b qca6574a sa8195p wcd9340 qcm2290 qcm6490 wcn3988 sa8775p qca6574 snapdragon_460_mobile_platform_firmware sxr2230p_firmware qca6430_firmware snapdragon_870_5g_mobile_platform sa8775p_firmware qamsrv1h sa6150p qcs410 qcm2290_firmware sa8155p_firmware sa8155p snapdragon_675_mobile_platform wsa8830 snapdragon_662_mobile_platform sa6145p snapdragon_8\+_gen_1_mobile_platform_firmware snapdragon_765_5g_mobile_platform sa8255p_firmware snapdragon_665_mobile_platform qamsrv1m_firmware sa8650p_firmware snapdragon_678_mobile_platform_firmware qca6698aq ssg2125p_firmware sm6250 wcn3950_firmware snapdragon_8_gen_1_mobile_platform fastconnect_6200 wcn3680b sa8145p_firmware sm7325p_firmware snapdragon_730g_mobile_platform snapdragon_888\+_5g_mobile_platform sa8150p_firmware snapdragon_855\+\/860_mobile_platform snapdragon_w5\+_gen_1_wearable_platform fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 snapdragon_680_4g_mobile_platform_firmware qcs6490 fastconnect_6200_firmware wsa8830_firmware sd660_firmware wsa8832 srv1m snapdragon_675_mobile_platform_firmware snapdragon_730_mobile_platform_firmware snapdragon_888_5g_mobile_platform snapdragon_w5\+_gen_1_wearable_platform_firmware qca6320 sa4150p_firmware sd888_firmware snapdragon_662_mobile_platform_firmware wsa8815_firmware sa8195p_firmware qcm4290 snapdragon_680_4g_mobile_platform qcm6490_firmware sm7250p_firmware qcm4490_firmware snapdragon_855_mobile_platform wcn3950 snapdragon_xr2_5g_platform snapdragon_7c\+_gen_3_compute snapdragon_765g_5g_mobile_platform_firmware snapdragon_xr2\+_gen_1_platform_firmware snapdragon_780g_5g_mobile_platform sa8295p_firmware sa4155p_firmware snapdragon_720g_mobile_platform sm6250_firmware sm7250p snapdragon_780g_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qca6320_firmware sd888 snapdragon_4_gen_2_mobile_platform sw5100_firmware snapdragon_765_5g_mobile_platform_firmware wcn6740 qca6310_firmware fastconnect_6800 qca6595_firmware snapdragon_685_4g_mobile_platform_firmware fastconnect_7800_firmware snapdragon_782g_mobile_platform_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p snapdragon_732g_mobile_platform_firmware snapdragon_xr2_5g_platform_firmware snapdragon_4_gen_1_mobile_platform sa8150p snapdragon_778g_5g_mobile_platform snapdragon_665_mobile_platform_firmware snapdragon_835_mobile_pc_platform sxr1230p snapdragon_865\+_5g_mobile_platform sw5100 video_collaboration_vc3_platform aqt1000 snapdragon_865_5g_mobile_platform_firmware qam8295p_firmware sd855 wcn3990_firmware sm7315 qca6698aq_firmware qcs2290 wcd9385 qcn7606 qcs2290_firmware wcn3610_firmware snapdragon_678_mobile_platform sa8255p snapdragon_720g_mobile_platform_firmware qcs4290 sxr1230p_firmware snapdragon_778g\+_5g_mobile_platform_firmware snapdragon_865\+_5g_mobile_platform_firmware snapdragon_690_5g_mobile_platform qca6430 ssg2125p qcm4490 qamsrv1m snapdragon_xr2\+_gen_1_platform sm7325p qam8650p_firmware snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sd855_firmware wcd9335_firmware wcn3980_firmware snapdragon_480_5g_mobile_platform_firmware wsa8835 qca6595au_firmware qca6391_firmware sw5100p_firmware snapdragon_732g_mobile_platform snapdragon_782g_mobile_platform qca6696_firmware qcs4290_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware qca6574_firmware wsa8815 sd660 sd_8_gen1_5g qam8775p qca6574a_firmware qcm4290_firmware snapdragon_480\+_5g_mobile_platform sd_8_gen1_5g_firmware wcd9375_firmware qca6391 snapdragon_778g_5g_mobile_platform_firmware snapdragon_480_5g_mobile_platform sa8770p_firmware sa8295p fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware wcd9375 wcn3988_firmware qamsrv1h_firmware sa8145p snapdragon_wear_4100\+_platform snapdragon_888\+_5g_mobile_platform_firmware wsa8835_firmware ssg2115p_firmware snapdragon_660_mobile_platform_firmware wcn3980 snapdragon_690_5g_mobile_platform_firmware wcn3680b_firmware qcs610 Snapdragon qcm2290_firmware qam8255p_firmware qualcomm_video_collaboration_vc1_platform_firmware snapdragon_662_mobile_platform_firmware wcd9380_firmware sa6150p_firmware snapdragon_778g_5g_mobile_platform_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware sxr1230p_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware sd730_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn3990_firmware qca6310_firmware qca6430_firmware wcd9335_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qamsrv1h_firmware qca6574_firmware sd_8_gen1_5g_firmware wcd9340_firmware sm7325p_firmware snapdragon_660_mobile_platform_firmware qam8295p_firmware snapdragon_xr2_5g_platform_firmware wcn3660b_firmware sa9000p_firmware qca6320_firmware sm7315_firmware qca6574au_firmware snapdragon_695_5g_mobile_platform_firmware snapdragon_835_mobile_pc_platform_firmware wcn3680b_firmware wcd9375_firmware qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware sm7250p_firmware snapdragon_x55_5g_modem-rf_system_firmware wcn3610_firmware snapdragon_680_4g_mobile_platform_firmware aqt1000_firmware wcn6740_firmware sa6155p_firmware qcm4490_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcs4490_firmware sa8775p_firmware qcm6490_firmware sa8650p_firmware sa4155p_firmware wsa8832_firmware fastconnect_6900_firmware srv1h_firmware qcn7606_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware fastconnect_6700_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware sa8255p_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware sd835_firmware qcs4290_firmware sa8770p_firmware qam8650p_firmware qam8775p_firmware qca6696_firmware qcs6490_firmware qca6595_firmware qca6391_firmware snapdragon_665_mobile_platform_firmware sa4150p_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware wcd9370_firmware sm6250_firmware sd888_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware snapdragon_780g_5g_mobile_platform_firmware sd660_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware ssg2115p_firmware sw5100_firmware fastconnect_6800_firmware qcs410_firmware sa8295p_firmware snapdragon_720g_mobile_platform_firmware snapdragon_675_mobile_platform_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-3.83% / 87.68%

||

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 11:28

u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8053, QCA6390, QCA9379, QCN7605, SC8180X, SDX55

Vendor-Qualcomm Technologies, Inc.

Product-apq8053 qca9379_firmware sdx55 qca9379 sdx55_firmware qca6390_firmware qcn7605_firmware qcn7605 qca6390 apq8053_firmware sc8180x sc8180x_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 53.80%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sdm670_firmware sm8150_firmware ipq8074 sda845_firmware sdm845 qcs605 sm7150_firmware ipq8074_firmware sm6150_firmware sdm710 sm6150 sm8150 sdm850 sdm710_firmware sxr1130_firmware sm7150 qca8081_firmware sxr1130 sdm670 qca8081 qcs605_firmware sda845 sdm845_firmware Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.40% / 59.58%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:12

While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified in the attribute length field of extended SSI which can lead to integer underflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096, APQ8098, IPQ6018, IPQ8074, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6390, QCA6574AU, QCA8081, QCA9377, QCA9379, QCN7605, QCS404, QCS405, QCS605, Rennell, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware apq8096_firmware msm8996au_firmware sdm845 apq8096 sdx24 qcs404_firmware sm7150_firmware sm6150 msm8996au sm7150 qca6390_firmware apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x qca9379_firmware qca6174a sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 qcn7605 ipq6018_firmware qcs605 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 sdm710_firmware qcn7605_firmware qca8081 ipq6018 qca6174a_firmware sm8150_firmware sxr2130_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qca6390 apq8053 sm6150_firmware msm8998 sm8150 sdx20_firmware sdm850 nicobar_firmware qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.32%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8998, Nicobar, QCA6574AU, QCS605, Rennell, SA6155P, Saipan, SC8180X, SDM660, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sa6155p_firmware sdm845 sdx20 msm8998_firmware sdm660 sdx24 sm8250_firmware sc8180x_firmware sm7150_firmware qca6574au sdm710 sm6150 sdm710_firmware sm7150 sa6155p sxr2130 qcs605_firmware sc8180x sm8150_firmware sdx24_firmware sxr2130_firmware apq8096au rennell rennell_firmware qcs605 sdx55 apq8053 apq8096au_firmware saipan_firmware sm6150_firmware sm8250 msm8998 sm8150 sdx20_firmware qca6574au_firmware sdx55_firmware nicobar_firmware saipan apq8053_firmware sdm660_firmware nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.32%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 22:24

Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9635m_firmware qcm2150_firmware mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8976_firmware msm8996au sm7150 msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m mdm9615 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware mdm9655_firmware sdm660 sdm710 qm215 mdm9607 mdm9625_firmware sdm710_firmware msm8939_firmware msm8937 mdm9207c_firmware msm8905 mdm9207c snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware mdm9655 sdm439_firmware sdm630_firmware sda660_firmware mdm9625 qm215_firmware msm8976 sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 sm8250 msm8917_firmware mdm9615_firmware msm8998 sm8150 sdm850 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.40% / 59.58%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.77%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sd_625_firmware sd_450 sd_845 qcs605 sd_632_firmware sd_835_firmware sd_835 qca6574au_firmware sda660 msm8909w sd_665_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware sd_425 sdm660 sd_430_firmware sd_710_firmware sd_435 sdm630 qcs405 sd_625 qca6574au sd_820_firmware sd_636_firmware sd_439_firmware sd_429_firmware sd_730 snapdragon_high_med_2016 sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.51%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overflow can occur while reading firmware logs.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 46.38%

||

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-1284

Improper Validation of Specified Quantity in Input

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.14% / 34.27%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 04:49

Always Incorrect Control Flow Implementation in MODEM

Memory corruption in modem due to improper input validation while handling the incoming CoAP message

Vendor-Qualcomm Technologies, Inc.

Product-qca4004 wcd9306 qts110 wcd9306_firmware snapdragon_wear_1300 mdm9205_firmware snapdragon_wear_1300_firmware mdm9205 qca4004_firmware qts110_firmware Snapdragon 9205_lte_modem_firmware snapdragon_wear_1300_platform_firmware wcd9306_firmware qca4004_firmware qts110_firmware

CWE ID-CWE-670

Always-Incorrect Control Flow Implementation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 47.79%

||

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:26

Updated-04 Jun, 2025 | 15:15

Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.12% / 31.58%

||

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 04:42

Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sd678 qcs2290_firmware sd_636 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 msm8917 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 sd632 wcn3990_firmware wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcd9326_firmware wcn3615_firmware sd_8_gen1_5g_firmware wcn3660b sd662 sd710_firmware sd460_firmware sa8155 sm7315_firmware wcn7850 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3615 sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware apq8053_firmware sm7450_firmware sd680_firmware sd778g sa6155p_firmware wcn7851 qcs6490 sd429 sdxr2_5g sa8155_firmware sd662_firmware sdm630 wcn3988_firmware qca6430 sd429_firmware sm6250 sd778g_firmware wcd9340 sa8195p apq8017_firmware wsa8810_firmware qualcomm215_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcd9326 sa6155p wcd9335 wcn6851 wcn7851_firmware qcs4290_firmware wcd9385 wcd9341 qca6696_firmware qcs6490_firmware sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd855_firmware sd660 sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 sd660_firmware wcn6850_firmware wcn7850_firmware sa8195p_firmware sm7450 wsa8815_firmware wsa8835_firmware apq8017 sm8475 wcn6750_firmware qcm2290_firmware wcn3991 wcd9380_firmware wcn3990 sd_675 sw5100p sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 sd670_firmware qca6574 sd632_firmware wsa8835 sd665_firmware wcd9380 sd888_5g qualcomm215 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware wcn6750 qca6574_firmware wcd9340_firmware sd855 sm4125_firmware sm7325p_firmware sd665 wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd695 sd768g_firmware sd835 wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m sm8475_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware qcm4290 qcm6490_firmware sdx50m wcn3680_firmware wsa8832_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd710 sd_636_firmware sd670 wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 wsa8832 sw5100p_firmware wcn6856 wcn3680b sd835_firmware sd695_firmware sd768g wcn6740 qca6696 sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p sd675 sd439 sm7250p sd720g_firmware sw5100_firmware sm8475p_firmware qcm2290 sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.19% / 41.11%

||

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 04:42

Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm6250p_firmware qcs610 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sd632 wcn3998 wcd9371_firmware wcn3950 sm4125 mdm9628 sd720g mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware qca4020 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware sa6155_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware qca9367_firmware wcn3999 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 qualcomm215_firmware sd765g sw5100 qca4020_firmware qca6436 sd680 sa6155p wcn6851 wcn7851_firmware mdm9250_firmware wcn3660_firmware wcd9341 qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware sd450 wcn3610 wcn3991 wcd9380_firmware sdm429w msm8996au_firmware sw5100p wcd9330 qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m sm8475_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware sd_636_firmware sd670 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sd695_firmware sdxr1 apq8096au ar8031 qcs405_firmware sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 wcn3660 sm8475p_firmware qca9379 qcm2290 wcn3991_firmware wsa8830 sd678 qcs2290_firmware mdm9628_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware qca6595au wcn3615 wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 wcn7851 qcs6490 sd429 sdxr2_5g qca9367 sdm630 mdm9607_firmware wcn3988_firmware sa6145p_firmware sd429_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware msm8953_firmware msm8917_firmware wcn3620_firmware sdx20_firmware qcm6490 sd888_5g_firmware wsa8835_firmware wcn3620 wcn6850_firmware wsa8815_firmware sm7450 apq8017 qca6564a qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware sm7315 apq8009 qca6391 sd460 sdxr1_firmware aqt1000_firmware mdm9626 qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sdx20 sd480_firmware mdm9626_firmware qca6574au sa8155p_firmware sd710 mdm9607 wcd9341_firmware wsa8810 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.19% / 41.11%

||

7 Day CHG~0.00%

Published-19 Oct, 2022 | 00:00

Updated-09 May, 2025 | 15:15

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3660 wcd9340_firmware sd210_firmware mdm9250 qcs6125_firmware sw5100p sd439 wcd9385_firmware wcn3988_firmware qca6431_firmware qcs610 qam8295p_firmware qcs6125 sd210 msm8976sg_firmware mdm9206_firmware sd778g apq8096au_firmware sd460 sd_8_gen1_5g_firmware apq8052 wcd9385 wcn7850_firmware sdx55m_firmware wcd9340 sd845 qcn7606_firmware sd730_firmware mdm9150_firmware sd690_5g_firmware apq8056 sd690_5g wcn7850 mdm9250_firmware sw5100p_firmware sdx55m wcd9326 apq8009w_firmware wcn6851_firmware sdm429w mdm9628 sa8155 qca6574_firmware sd678_firmware qca6595au sm7250p_firmware sd480_firmware wcn3680b sa8150p wcn3680_firmware sd665 wcn3660b wcd9330_firmware wcn7851_firmware msm8208_firmware wsa8835 wcn3990_firmware fsm10056_firmware csra6640 apq8076 wcn6750 sdm429w_firmware qca6320_firmware sa8195p sa6150p qca9367 sd768g_firmware sm4125 sd780g_firmware sd865_5g qca6421_firmware qca6574a sd429_firmware qca6310_firmware sd_675 wcn3990 sdxr2_5g wsa8810_firmware sd670 msm8952 wcd9335_firmware wcn3998_firmware qcs4290 wsa8815 qca6436_firmware sd888_5g sa6155p sa8155p sdx55 qca6335 qca6564a msm8608 wcn3991_firmware qca6564a_firmware wcn3660b_firmware qca6391_firmware sa4155p qca6696_firmware wcn6855 sm6250 sd710 sd480 qca4020_firmware sd765 wcn6750_firmware msm8956 sa4150p sd662_firmware sd695 csra6640_firmware sd820 sd845_firmware qca6174a sd660 sd450 sxr2150p sdxr1_firmware msm8976sg sd205 sm8475 msm8909w_firmware wcd9371_firmware aqt1000_firmware msm8208 qcm2290_firmware msm8108_firmware qcs605 apq8009w qca9377 wcn3620 wcn7851 qcs4290_firmware sa8155_firmware qca9379_firmware wcn6740 qca6431 sd730 msm8909w fsm10056 sa8145p_firmware wcn3910 wcn3910_firmware sd888 wcd9380_firmware wcn6740_firmware msm8996au_firmware apq8017_firmware wcd9370 sa6155 apq8096au sd678 qca6574au sa6145p qcc5100_firmware wsa8815_firmware sd680 wcn3950_firmware sdxr2_5g_firmware sd870 sw5100 qca9377_firmware sm7325p sm4375 msm8953_firmware qca6426_firmware sa8150p_firmware sd870_firmware qcs405_firmware wcn3950 qcs2290_firmware sa6155_firmware mdm9607 wcd9380 qcm4290_firmware mdm9150 qcs610_firmware qca9379 qcm4290 wcd9326_firmware qcm6125_firmware qcn7606 sm4125_firmware apq8053_firmware sd662 wcn3615 sd675 wcn3991 sd695_firmware qca6420_firmware sm7325p_firmware sd750g qcm6125 sd820_firmware wcd9341 msm8917_firmware mdm9650_firmware qca6426 qca6335_firmware wsa8835_firmware sd821_firmware qcs2290 apq8056_firmware qca6390 sdw2500 sd205_firmware sd750g_firmware qca6696 wcn3980 wcn6856_firmware mdm9650 sdx20m sa6150p_firmware qcs605_firmware sd780g wcn3620_firmware sd680_firmware qcc5100 sa8295p sdxr1 sa4155p_firmware qca6420 qca6174a_firmware sd_636 sm7250p sd888_firmware wcn3999 apq8017 sm6250p sdw2500_firmware sd_675_firmware qca6430 qualcomm215_firmware sd675_firmware wsa8810 sd865_5g_firmware wcd9341_firmware wcn6850 ar8031 wcn3660_firmware sxr2150p_firmware mdm9628_firmware msm8976_firmware qca6574a_firmware wcn3999_firmware sdx20_firmware qca6595au_firmware qcm2290 sd460_firmware sd439_firmware sda429w sd720g apq8064au sa8295p_firmware sw5100_firmware wcn3610 sd765g_firmware sd632 msm8953 qca6390_firmware qca6564au_firmware qca6574 wcn3610_firmware wcn3998 sm7315_firmware wcd9335 sd665_firmware qca6430_firmware sm6250_firmware wcd9330 qcs405 qca6436 sm6250p_firmware aqt1000 qca6421 qcm6490 msm8209 apq8076_firmware sd855_firmware sdx50m sd855 wcn6856 qcs410_firmware qam8295p mdm9206 wcn6855_firmware qcm6490_firmware msm8108 sd429 mdm9607_firmware msm8956_firmware sm4375_firmware sa4150p_firmware apq8009 sd720g_firmware sd835_firmware sd778g_firmware wcd9371 msm8917 qcs410 qca4020 apq8009_firmware sd632_firmware qca6391 qca6595 csra6620 sd768g sd835 sd710_firmware wcn3615_firmware sd670_firmware sa6155p_firmware qca6584au qca6584au_firmware qcs6490_firmware msm8209_firmware sa8195p_firmware qca6574au_firmware wcd9370_firmware sa8155p_firmware sd888_5g_firmware wcn3680 wcd9375 qca6310 sdx20m_firmware apq8064au_firmware apq8053 apq8052_firmware sda429w_firmware sd821 wsa8830 msm8952_firmware qca6564 msm8996au wcd9375_firmware wcn3980_firmware sd765_firmware sd765g msm8608_firmware qca6320 qca6595_firmware wcn6850_firmware sd660_firmware sdx20 wcn6851 qca6564_firmware msm8976 sm7315 qca9367_firmware qcs6490 ar8031_firmware wcn3988 qca6564au wsa8830_firmware wcn3680b_firmware sdx55_firmware csra6620_firmware qualcomm215 sd_636_firmware sa8145p sd450_firmware sdx50m_firmware sa6145p_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.17% / 38.34%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 04:42

Buffer Copy Without Checking Size of Input in MODEM

Memory correction in modem due to buffer overwrite during coap connection

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.14% / 34.01%

||

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 04:42

Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sd678 qcs2290_firmware sd_636 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 msm8917 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 sd632 wcn3990_firmware wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcd9326_firmware wcn3615_firmware sd_8_gen1_5g_firmware wcn3660b sd662 sd710_firmware sd460_firmware sa8155 sm7315_firmware wcn7850 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3615 sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware apq8053_firmware sm7450_firmware sd680_firmware sd778g sa6155p_firmware wcn7851 qcs6490 sd429 sdxr2_5g sa8155_firmware sd662_firmware sdm630 wcn3988_firmware qca6430 sd429_firmware sm6250 sd778g_firmware wcd9340 sa8195p apq8017_firmware wsa8810_firmware qualcomm215_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcd9326 sa6155p wcd9335 wcn6851 wcn7851_firmware qcs4290_firmware wcd9385 wcd9341 qca6696_firmware qcs6490_firmware sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd855_firmware sd660 sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 sd660_firmware wcn6850_firmware wcn7850_firmware sa8195p_firmware sm7450 wsa8815_firmware wsa8835_firmware apq8017 sm8475 wcn6750_firmware qcm2290_firmware wcn3991 wcd9380_firmware wcn3990 sd_675 sw5100p sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 sd670_firmware qca6574 sd632_firmware wsa8835 sd665_firmware wcd9380 sd888_5g qualcomm215 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware wcn6750 qca6574_firmware wcd9340_firmware sd855 sm4125_firmware sm7325p_firmware sd665 wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd695 sd768g_firmware sd835 wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m sm8475_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware qcm4290 qcm6490_firmware sdx50m wcn3680_firmware wsa8832_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd710 sd_636_firmware sd670 wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 wsa8832 sw5100p_firmware wcn6856 wcn3680b sd835_firmware sd695_firmware sd768g wcn6740 qca6696 sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p sd675 sd439 sm7250p sd720g_firmware sw5100_firmware sm8475p_firmware qcm2290 sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.29% / 52.13%

||

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 15:50

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Vendor-Qualcomm Technologies, Inc.

Product-wcd9306 wcn3999 ar8031_firmware qca4004_firmware csra6620 qcs405 qca4024_firmware wcd9306_firmware wsa8810_firmware wsa8810 qca4020_firmware wcd9335 qca4010 csra6620_firmware csra6640_firmware ar8031 qcs405_firmware wcd9335_firmware wcn3980 wcn3998 mdm9205_firmware qca4024 mdm9205 wsa8815 qca4004 csra6640 qca4020 wsa8815_firmware wcn3999_firmware wcn3998_firmware wcn3980_firmware qca4010_firmware Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.14% / 34.03%

||

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 04:42

Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm6250p_firmware qcs610 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sd632 wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g mdm9628 mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware qca4020 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware sa6155_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware qca9367_firmware wcn3999 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 sd765g qualcomm215_firmware sw5100 sd680 qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware msm8937 mdm9250_firmware wcn3660_firmware wcd9341 pm8937_firmware qca6696_firmware wcd9371 sd870_firmware sd750g wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware sd450 wcn3610 wcn3991 wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 msm8937_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m sm8475_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sd695_firmware sdxr1 ar8031 apq8096au qcs405_firmware sdm630_firmware sd820_firmware qca6391_firmware wcd9370_firmware sd780g_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 wcn3660 sm8475p_firmware qca9379 qcm2290 wcn3991_firmware wsa8830 sd678 qcs2290_firmware mdm9628_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 pm8937 wcn7851 sd429 qcs6490 sdxr2_5g qca9367 sdm630 mdm9607_firmware wcn3988_firmware sd429_firmware sa6145p_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware msm8953_firmware msm8917_firmware wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 sm7450 apq8017 qca6564a qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware sm7315 apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware mdm9626 qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sdx20 sd480_firmware mdm9626_firmware qca6574au sd710 sa8155p_firmware mdm9607 wcd9341_firmware wsa8810 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.11% / 30.29%

||

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 04:42

Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm6250p_firmware qcs610 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sd632 wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd710_firmware sd460_firmware qca4020 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware sa6155_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware qca9367_firmware wcn3999 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 qualcomm215_firmware sd765g sw5100 qca4020_firmware qca6436 sd680 sa6155p wcn6851 qcs603_firmware wcn7851_firmware wcd9341 qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware wcn3610 wcn3991 wcd9380_firmware sdm429w msm8996au_firmware sw5100p wcd9330 qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m sm8475_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sd695_firmware sdxr1 apq8096au ar8031 qcs405_firmware sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 sm8475p_firmware qca9379 qcm2290 wcn3991_firmware wsa8830 sd678 qcs2290_firmware mdm9650 sd_636 csra6620 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware qca6595au wcn3615 wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 wcn7851 qcs6490 sd429 sdxr2_5g qca9367 sdm630 wcn3988_firmware sa6145p_firmware sd429_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware msm8953_firmware msm8917_firmware wcn3620_firmware sdx20_firmware qcm6490 sd888_5g_firmware wsa8835_firmware wcn3620 wcn6850_firmware wsa8815_firmware sm7450 apq8017 qca6564a qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware sm7315 apq8009 qca6391 sd460 sdxr1_firmware aqt1000_firmware qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sdx20 sd480_firmware qca6574au sa8155p_firmware sd710 wcd9341_firmware wsa8810 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.32%

||

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:37

Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, Rennell, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-apq8053 sdx20_firmware rennell sdx20 rennell_firmware apq8053_firmware Snapdragon Consumer IOT, Snapdragon Mobile

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.37% / 58.26%

||

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 07:44

u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ5018, IPQ6018, IPQ8074, Kamorta, Nicobar, QCA6390, QCN7605, QCS404, QCS405, Rennell, SA415M, Saipan, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250

Vendor-Qualcomm Technologies, Inc.

Product-ipq5018_firmware kamorta_firmware qcs404_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 sm7150_firmware ipq8074_firmware sm6150 sc7180_firmware sm7150 qca6390_firmware qcn7605_firmware sc8180x ipq6018 qcs404 sm8150_firmware ipq8074 qcs405_firmware ipq5018 rennell sa415m sc7180 qcn7605 rennell_firmware qca6390 ipq6018_firmware sdx55 saipan_firmware sm6150_firmware sm8250 sm8150 kamorta sdx55_firmware nicobar_firmware saipan nicobar Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.38% / 58.58%

||

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 07:44

u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ5018, IPQ6018, IPQ8074, Kamorta, MSM8998, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, QCS605, Rennell, SA415M, SC7180, SC8180X, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SM8250, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-ipq5018_firmware sdm850_firmware kamorta_firmware sdm636_firmware apq8098_firmware sdm845 msm8998_firmware sdm660 sdm630 qcs404_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 sm7150_firmware ipq8074_firmware sdm710 sc7180_firmware sm6150 sdm710_firmware sm7150 qca6390_firmware qcn7605_firmware sdm670 qca8081 qcs605_firmware sc8180x ipq6018 sdm670_firmware qcs404 sm8150_firmware ipq8074 sdm636 qcs405_firmware ipq5018 rennell sa415m sc7180 sda845_firmware apq8098 qcn7605 sdm630_firmware rennell_firmware qca6390 ipq6018_firmware qcs605 sm6150_firmware sm8250 msm8998 sm8150 sdm850 sxr1130_firmware kamorta qca8081_firmware nicobar_firmware sxr1130 sdm660_firmware sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 07:44

u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from server' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in Agatti, Kamorta, Nicobar, QCM6125, QCS610, Rennell, SA415M, Saipan, SC7180, SC8180X, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-kamorta_firmware qcs610 sdx24 sm8250_firmware sc8180x_firmware sa415m_firmware sm7150_firmware sm6150 sc7180_firmware agatti_firmware qcm6125 sm7150 qcs610_firmware sxr2130 sc8180x sm8150_firmware sdx24_firmware sxr2130_firmware rennell sa415m sc7180 rennell_firmware sdx55 saipan_firmware nicobar sm6150_firmware sm8250 sm8150 kamorta sdx55_firmware nicobar_firmware saipan agatti qcm6125_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.29% / 52.30%

||

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 07:44

u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link Layer Length Overfow issue (CVE-2019-16336,CVE-2019-17519) and Silent Length Overflow issue(CVE-2019-17518) mentioned in sweyntooth paper)' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8076, AR9344, Bitra, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, Nicobar, QCA6174A, QCA9377, QCM2150, QCM6125, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SC8180X, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware kamorta_firmware qcm2150_firmware qcs610 sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 qcs404_firmware sdm429 msm8940_firmware sm7150_firmware sm6150 ar9344 sm7150 msm8917 sdm670 qcs605_firmware apq8076 sc8180x mdm9206 qca6174a sdm670_firmware qcs404 sdx24_firmware apq8076_firmware sdm636 qca9377 bitra mdm9206_firmware qcs605 bitra_firmware msm8937_firmware sdm429_firmware msm8905_firmware sxr1130_firmware sxr1130 apq8053_firmware nicobar msm8953 sdm450 sdm636_firmware sdx20 qcm2150 sdm660 sdm630 mdm9607_firmware sc8180x_firmware qcs405 sdm710 qm215 mdm9607 sdm710_firmware qcm6125 qcs610_firmware msm8937 mdm9207c_firmware msm8905 mdm9207c qca6174a_firmware sm8150_firmware sdm439_firmware qcs405_firmware rennell sdm630_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 msm8917_firmware sm8150 ar9344_firmware sdx20_firmware kamorta nicobar_firmware sdm660_firmware qcm6125_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.95%

||

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 07:44

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatti, APQ8053, APQ8096AU, APQ8098, Bitra, Kamorta, MSM8905, MSM8909W, MSM8917, MSM8940, MSM8953, MSM8996AU, Nicobar, QCA6390, QCA6574AU, QCM2150, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-kamorta_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware agatti_firmware msm8996au sdm429w_firmware sm7150 qca6390_firmware msm8917 sdm670 sxr2130 qcs605_firmware sdm670_firmware sdm636 bitra apq8098 qcs605 bitra_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8053_firmware agatti nicobar sa6155p_firmware msm8953 sdm450 sdm636_firmware apq8098_firmware qcm2150 sdm660 sdm630 sm8250_firmware qca6574au sa8155p_firmware qm215 sdm710 sdm710_firmware sa6155p msm8905 sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qca6390 qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware sa8155p sm8150 sm8250 kamorta saipan nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.32%

||

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 07:44

Possible out of bound memory access in audio due to integer underflow while processing modified contents in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qfe3100 qfs2580 qfe2550 msm8960 qcs610 pmi8996 qdm5579 qfe1045 qdm2307 qfs2530 qpa8802 qln1030 pm6125 qat3519 mdm9645 pm8917 pm8150a sc8180x\+sdx55 qtc800h qdm5670 qcs2290 sa6155 qca6335 msm8917 pm7150l qpa8821 mdm8215 qln1020 apq8076 wtr3905 qdm5671 pmc1000h qfe2330 msm8630 qat3518 sd632 msm8108 sa415m wcn3998 wcn3950 sm4125 sd720g wtr1605 wtr2605 mdm9628 qpa5460 wcn3660b wtr2655 qfe4320 qcc112 qca4020 mdm8215m qdm5652 mdm9630 qpm8870 qpm5679 qbt2000 msm8909w pm855p qca6420 wcd9360 pm6150a wtr1625l msm8627 sdr735g wcn3999 pm8150b qsm7250 pm8996 qcs6125 pm8922 qfe2101 mdm9615m qca6430 qcc1110 qat3522 qfe4455fc pmr735a wtr1625 qcs405 smb1360 wcd9340 wfr2600 sd765g qfe3440fc wcd9320 sdr660 qca6436 wcn6851 sa6155p qpa6560 qfe3345 apq8052 msm8937 sdr865 smb1358 wcd9341 pmi8952 smr545 mdm9655 qca6431 qln5020 wcd9371 smb1350 sd750g qdm3302 sd_8cx wtr3950 sa8150p qpm5657 pm6350 qdm5621 qfe3340 qtc800s msm8226 sd660 qdm5650 sd712 wcn3988 wtr3925 qfe2080fc sdr052 smb1390 pm6150l sd450 qet4100 wcn3610 msm8608 mdm9640 qpm6585 qtc410s wcn3991 smb1355 qln4650 qpa8801 sdm429w wcd9330 wgr7640 qat5568 qet5100 qca6564au msm8230 pm6150 qca6574 pm7250b qfs2630 qpa8842 pmm8996au wcd9380 qualcomm215 mdm9230 qln4640 qcs410 smb1381 sdr735 pm7250 wtr4905 smb1395 pm660l qpa8803 ar8151 smr526 wtr5975 qca6174 pmk8003 wcn3980 pmd9645 qdm2301 qsw8573 qcs605 wsa8815 wcn6850 qbt1000 wcn3910 qca6320 smb1394 wcn3680 qca9984 pm8921 sd835 qfe4309 qca1990 pm8009 qpa8675 sd730 sdx55m pm670a qfe4373fc pm8008 msm8953 qsw8574 pmi8998 mdm9225 qfe2520 apq8064 pme605 mdm9225m pm855l qcs603 rsw8577 pmd9635 qfe4302 qpm5621 qpm6582 sd670 apq8009w qfe4303 pm670 pm8150l wtr1605l qdm5677 pm8005 qsm8250 sa6145p pm215 qdm2302 msm8626 pmm6155au sdxr1 ar8031 apq8096au wtr2965 wfr1620 pm8150 qpm5875 sdx55 qet5100m apq8053 sa8155p csra6640 pm8350bhs sd675 wtr4605 sd439 qet4101 pm8952 pmi8994 qat3516 pm670l wcd9310 pm8226 wcn3660 qpm5658 qca9379 pm855b smb2351 qln1031 qcm2290 qpm5870 pm8909 qfe1040 wsa8830 qfe4465fc pm660 rtr8600 sdr051 msm8960sg qln5030 msm8930 wcn2243 pm4125 qbt1500 qpa5581 pmi632 pm456 csrb31024 mdm9650 sd_636 csra6620 qpa5373 qpm4621 pmk8001 qcs4290 qet6100 pmm855au sdr660g qfe2340 qpa8686 pm8110 sd690_5g smb1396 pm7150a wcd9370 pm8350 qca6564 sdr425 qca6426 qpm5641 whs9410 qat5516 wtr2955 qdm5620 qln1021aq sd662 smb1380 qfe4308 pm8350bh mdm8635m apq8037 pm3003a sa8155 qca6584 qat5533 wcn3615 qca6595au msm8227 wtr2100 sm7350 qtc800t pm8940 qpm6670 smb1354 wcd9306 qca6584au qdm2305 qca6310 msm8208 qpm8820 qpm4641 pm8937 qpm2630 qfe2081fc pm855 sd429 sdxr2_5g pm8250 msm8962 mpq8064 smb1398 apq8084 sdm630 sd821 apq8062 qdm4643 msm8976sg pmx55 sd205 sdr675 qca6421 sm6250 qdm3301 sa8195p pm8953 qat5515 qca6694 qpm5677 smb231 qfe1100 qat3514 wcd9326 wcd9335 wcn3660a qet4200aq wcd9385 mdm8615m pm439 qpm5620 pmm8155au mdm9625 qpm4630 qca6390 wcd9375 ar8035 aqt1000 msm8956 msm8976 apq8064au pmm8195au qpa8673 qdm2310 qln4642 qca6694au apq8056 msm8952 ar9374 sda429w sd210 sd820 mdm9625m pmi8937 pm8998 pmk7350 sdw3100 wcn3620 apq8017 ar6003 mdm9235m qca6564a smr546 pmx24 qet6110 qfe1055 qln5040 qpm8895 sdr845 qpm5670 wcn3990 sd_675 apq8030 sd865_5g pm8019 qca6595 pmk8350 rtr8601 qpm8830 pm8350b qat5522 wsa8835 msm8996au apq8060a pm8150c pmr735b pmi8940 sd888_5g sm6250p rgr7640au qpa4360 qln1035bd pm855a qpa4361 qca6574a mdm9206 qca6174a pm8350c smr525 qpm4640 wcn6750 mdm9635m pmr525 mdm9615 pm7350c qpm4650 qtm525 wtr6955 qfe3335 pm8821 sd855 sd665 qfe4305 qca6175a sd765 pm640p pmd9607 msm8209 qat3555 apq8009 sd460 qca6391 smb1351 qpa5461 mdm9310 qfe2082fc msm8920 qsc1215 msm8610 pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 qfs2608 pm8916 qln1036aq qtc801s qdm4650 mdm9215 sd_455 pmd9655 qca6574au qfe3320 sd710 mdm9607 qsw6310 qcm6125 qpm6621 wsa8810 qdm2308 pmw3100 pmx50 pm8018 qat3550 wcn6856 qdm5679 sd_8c wcn3680b sdr8250 sd768g wcn6740 qca6696 qfe4301 pm8004 pm640l msm8940 pmk8002 qpa2625 sa6150p sd845 sm7250p sdm830 smb1357 mdm9330 pm8956 sd850 pm6250 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.30% / 52.45%

||

7 Day CHG~0.00%

Published-30 Jul, 2020 | 11:40

Updated-04 Aug, 2024 | 07:44

Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCM2150, QCN7605, QCS405, QCS605, QM215, SA6155P, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX55, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 mdm9650 sdm429 msm8940_firmware msm8909w_firmware msm8996au sdm429w_firmware apq8009_firmware msm8917 sxr2130 qcs605_firmware sc8180x mdm9206 qca9379_firmware qca6174a sdm636 sda845_firmware qca9377 apq8098 qcn7605 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sdx55_firmware msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm660 sc8180x_firmware qcs405 qca6574au qm215 mdm9607 apq8017_firmware qcn7605_firmware sa6155p mdm9150 msm8937 mdm9207c_firmware msm8905 mdm9207c qca6174a_firmware sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware qm215_firmware sdx55 msm8953_firmware msm8940 saipan_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 saipan nicobar_firmware qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.17%

||

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:44

Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sxr2130 qcs605_firmware mdm9206 sdm636 apq8098 mdm9206_firmware qcs605 sdm429_firmware msm8905_firmware qca6574au_firmware sda660 msm8909w apq8009 apq8053_firmware msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware qcs405 qca6574au qm215 mdm9607 apq8017_firmware mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware apq8053 apq8096au_firmware saipan_firmware sm6150_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 msm8996 saipan sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-3.07% / 86.22%

||

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 07:44

u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, QCA6574AU, QCS405, QCS610, QRB5165, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8250

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9640_firmware qcs610 sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm632 sdx24 mdm9650 sdm429 msm8909w_firmware msm8996au sdm429w_firmware apq8009_firmware sc8180x ipq4019_firmware mdm9206 sdx24_firmware ipq8074 sdm636 sda845_firmware apq8098 ipq6018_firmware mdm9206_firmware mdm9640 sdm429_firmware mdm9650_firmware msm8905_firmware ipq8064 qca6574au_firmware sda660 sdx55_firmware msm8909w apq8009 apq8053_firmware ipq8064_firmware sda845 msm8953 sdm636_firmware apq8098_firmware qrb5165_firmware sdx20 qrb5165 sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au mdm9607 apq8017_firmware qcs610_firmware mdm9150 mdm9207c_firmware ipq6018 msm8905 mdm9207c apq8096au qcs405_firmware sdm630_firmware sda660_firmware ipq4019 sdx55 msm8953_firmware apq8053 apq8096au_firmware sm8250 sdx20_firmware apq8017 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.21% / 43.31%

||

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:44

Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-kamorta_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 apq8098 mdm9206_firmware qcs605 msm8937_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 qca6574au sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sm8250 kamorta apq8017 msm8996 saipan sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.30% / 52.45%

||

7 Day CHG~0.00%

Published-30 Jul, 2020 | 11:40

Updated-04 Aug, 2024 | 07:44

Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCM2150, QCN7605, QCS405, QCS605, QM215, SA6155P, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sxr2130 qcs605_firmware sc8180x mdm9206 qca9379_firmware qca6174a sdm636 sda845_firmware qca9377 qcn7605 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sdx55_firmware msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware sdx20 qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm660 sc8180x_firmware qcs405 qca6574au qm215 mdm9607 apq8017_firmware qcn7605_firmware sa6155p msm8937 mdm9207c_firmware msm8905 mdm9207c qca6174a_firmware sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware qm215_firmware sdx55 msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware sm8250 sm8150 sdx20_firmware apq8017 saipan nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.45% / 62.89%

||

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 07:44

u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Kamorta, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, QCS605, Rennell, SA415M, SC7180, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware kamorta_firmware sdm845 qcs404_firmware sc8180x_firmware sa415m_firmware qcs405 sm7150_firmware ipq8074_firmware sdm710 sc7180_firmware sm6150 sdm710_firmware sm7150 qca6390_firmware qcn7605_firmware sdm670 qca8081 qcs605_firmware sc8180x ipq6018 sdm670_firmware qcs404 sm8150_firmware ipq8074 qcs405_firmware rennell sa415m sc7180 sda845_firmware qcn7605 rennell_firmware qca6390 ipq6018_firmware qcs605 sm6150_firmware sm8150 sdm850 sxr1130_firmware kamorta qca8081_firmware nicobar_firmware sxr1130 sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.04%

||

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:44

Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validation checks in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-kamorta_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 apq8098 mdm9206_firmware qcs605 msm8937_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 qca6574au sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sm8250 kamorta apq8017 msm8996 saipan sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 47.55%

||

7 Day CHG~0.00%

Published-31 Jul, 2020 | 05:00

Updated-04 Aug, 2024 | 07:44

Authenticated and encrypted payload MMEs can be forged and remotely sent to any HPAV2 system using a jailbreak key recoverable from code.

Vendor-Qualcomm Technologies, Inc.

Product--n/a

CWE ID-CWE-327

Use of a Broken or Risky Cryptographic Algorithm