CVE-2019-10586 | ByteOS Network

Vulnerability Details :

CVE-2019-10586

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-05 Mar, 2020 | 08:56

Updated At-04 Aug, 2024 | 22:24

Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:05 Mar, 2020 | 08:56

Updated At:04 Aug, 2024 | 22:24

▼CVE Numbering Authority (CNA)

Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Versions

Affected

APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Problem Types

Type	CWE ID	Description
text	N/A	Buffer Copy Without Checking Size of Input in Data Modem

Type: text

CWE ID: N/A

Description: Buffer Copy Without Checking Size of Input in Data Modem

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:05 Mar, 2020 | 09:15

Updated At:09 Mar, 2020 | 13:41

Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Qualcomm Technologies, Inc.

>>apq8009_firmware>>-

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8017_firmware>>-

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8053_firmware>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8096au_firmware>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8098_firmware>>-

cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9150_firmware>>-

cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9150:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9205_firmware>>-

cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9615_firmware>>-

cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9625_firmware>>-

cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9635m_firmware>>-

cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9640_firmware>>-

cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9645_firmware>>-

cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9655_firmware>>-

cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8905_firmware>>-

cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8905:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909_firmware>>-

cpe:2.3:o:qualcomm:msm8909_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909w_firmware>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8917_firmware>>-

cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8920_firmware>>-

cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8920:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8937_firmware>>-

cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8937:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8940_firmware>>-

cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8940:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8953_firmware>>-

cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996au_firmware>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	nvd@nist.gov

CWE ID: CWE-120

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

1594Records found

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 50.23%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 16:23

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, SD 808, and SD 810, if start_addr + size is too large in boot_clobber_check_local_address_range(), an integer overflow occurs, resulting in clobber protection check being bypassed and SBL memory corruption.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:10

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9645, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, bounds check is missing for vtable index in DAL-TO-QDI conversion framework.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-118

Incorrect Access of Indexable Resource ('Range Error')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 40.04%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:44

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in a PlayReady API function, a buffer over-read can occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 17:54

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, and SDX20, when reading CDT from eMMC with a very large meta offset (>size of default CDT-array compiled in bootloader) for one of the CDBs, a buffer overflow occurs.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.52%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.52%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached while processing a downlink message.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.14%

||

7 Day CHG~0.00%

Published-12 Nov, 2020 | 10:00

Updated-04 Aug, 2024 | 11:28

u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8064AU, APQ8096, APQ8096AU, APQ8096SG, APQ8098, MDM9206, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QCS6125, QM215, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SDA429W, SDA640, SDA660, SDA670, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM455, SDM630, SDM632, SDM636, SDM640, SDM660, SDM670, SDM710, SDM830, SDM845, SDW2500, SDX20, SDX20M, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330

Vendor-Qualcomm Technologies, Inc.

Product-sm7250 sa6150p_firmware sm6250p_firmware qcs610 sm6125 sdm640 sdm450_firmware sdm632 sm7250_firmware mdm9650 qcs4290 sa8150p_firmware sa6155 apq8009_firmware msm8917 sdm670 qcs605_firmware qcs6125_firmware apq8096sg sm6115 sm7150p sda845_firmware sdw2500_firmware apq8098 sm4250 sm4125 mdm9206_firmware apq8037 sa8155 msm8905_firmware sda660 sdx55_firmware sa6155_firmware sxr1130 msm8909w sm7250p_firmware apq8009w_firmware sxr2130p apq8053_firmware sda845 sdx20m sa6155p_firmware sxr2130p_firmware sda640 sdm450 sdm636_firmware apq8098_firmware qcs6125 msm8998_firmware sa8155_firmware sdm630 sm8250_firmware qcs405 msm8996sg_firmware qm215 sm4250_firmware sm6250 sa8195p apq8017_firmware sdm710_firmware sdm830_firmware sxr1120 sa6155p qcs603_firmware msm8937 msm8905 qcs4290_firmware sm8150_firmware msm8909 sm7150p_firmware sxr2130_firmware sa6145_firmware apq8064au sa8150p sm6250_firmware msm8953_firmware sm6150_firmware sda429w msm8917_firmware msm8998 sm7225_firmware sdx20_firmware sm8150 sa8195p_firmware sdm640_firmware apq8017 msm8996 sxr1120_firmware sm6125_firmware sm8150p qcm6125_firmware sm6115_firmware sda429w_firmware apq8096_firmware sdm429w msm8996au_firmware sdm632_firmware wcd9330 sdm845 apq8096 sdx55m_firmware sdm439 sm6150p sm6115p_firmware sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware apq8096sg_firmware sm7150 sm6250p qcs410 sda640_firmware sxr2130 sdx50m_firmware mdm9206 sdm670_firmware sdm636 sda670 sa6145 sm7225 qcs605 sm6115p sm4125_firmware sdm455_firmware msm8937_firmware mdm9650_firmware sdm429_firmware sxr1130_firmware apq8009 wcd9330_firmware msm8909_firmware sdx55m sm6150p_firmware sdm455 sm6350 sm7125 sm4250p_firmware msm8920 msm8953 apq8064au_firmware qcm4290 msm8996sg sdx50m sdx20 qcs603 sdm660 msm8920_firmware sm6350_firmware sa8155p_firmware sdm710 apq8009w sda670_firmware qcm6125 qcm4290_firmware sdx20m_firmware qcs610_firmware msm8996_firmware sm4250p apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware sm7125_firmware sa6150p sdw2500 msm8940 apq8053 apq8096au_firmware sa8155p sdx55 sm8150p_firmware sm8250 apq8037_firmware sm7250p sdm830 qcs410_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 54.86%

||

7 Day CHG~0.00%

Published-12 Nov, 2021 | 06:15

Updated-03 Aug, 2024 | 16:25

Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware fsm10055 sm7250 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sc8180x\+sdx55 sa8150p_firmware qca6595au_firmware sa6155 qca6335 msm8917 mdm8215 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware mdm8615m_firmware sd632 msm8108 sa415m wcd9371_firmware msm8108_firmware wcn3950 sd720g mdm9628 mdm9206_firmware qsw8573_firmware sm6375_firmware wcn3660b sd450_firmware qsm8350_firmware qsm8350 sd460_firmware mdm9230_firmware wcn7850 mdm8215m qca6574au_firmware mdm9630 wcd9375_firmware qca8081_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware qca4004_firmware sd662_firmware mdm9615m wcd9306_firmware sd765g qualcomm215_firmware fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g mdm8215_firmware wcn3910_firmware sd_8cx sa8150p mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd865_5g_firmware sd712 wcn3988 wcn7850_firmware sa8195p_firmware msm8208_firmware wcn6750_firmware sd450 wcn3610 msm8608 mdm9640 sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware msm8976_firmware qca6574 sd632_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6174 sd439_firmware qca6335_firmware qsw8573 qcs605 wcn6850 sd7c wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware sd_8c_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd730 wcd9330_firmware sdx55m qca6421_firmware wcn6740_firmware ar6003_firmware sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware sa6145p sdxr1 apq8096au qca6595_firmware sa8145p mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sd780g_firmware sdx55 sa8155p sd675 sd439 wcn3660 qca9379 ar8035_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware fsm10056 sm7250_firmware sd7c_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 fsm10055_firmware qcs4290 mdm9250 sd765g_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware mdm9310_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware sm8450 qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 mdm9615m_firmware sd662 apq8037 sa8155 qca6320_firmware qca6584 sdx55_firmware qca6595au wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 sa6155p_firmware qca6310 sm6225 wcn7851 sd429 qcs6490 sdxr2_5g qca9367 sdm630 mdm9607_firmware sd821 msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sa6145p_firmware sm6250 sa8195p sd712_firmware apq8017_firmware qca6694 sm8450_firmware sd765_firmware qca8081 qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m qcs6490_firmware qca6390 wcd9375 sd750g_firmware ar8035 msm8976 qca6694_firmware sc8180x\+sdx55_firmware sm6250_firmware qca6694au sda429w msm8917_firmware sd210 wcn3620_firmware sdx20_firmware sd820 sd888_5g_firmware qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 ar6003 csr6030_firmware qca6564a mdm9630_firmware qcm6125_firmware sd_675 sd780g sd865_5g qca6595 sdx24 sm8450p_firmware msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware sm7325 wcn6750 mdm9615 mdm9205 qca6574_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 sd460 qca6391 sdxr1_firmware mdm9310 msm8920 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m sdx20 sd480_firmware msm8920_firmware mdm9215 sd_455 sm6225_firmware qca6574au sa8155p_firmware mdm8215m_firmware mdm9607 sd205_firmware qcm6125 sm8450p mdm9150 wcn6856 sd_8c sd768g wcn6740 qca6696 msm8608_firmware sdw2500 sa6150p msm8940 apq8096au_firmware mdm9615_firmware apq8037_firmware sd720g_firmware sdx12 qcs410_firmware mdm9330 sd850 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 47.47%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 11:25

Updated-03 Aug, 2024 | 16:25

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm7250 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 qca6431_firmware wcd9360_firmware mdm9645 wcn3950_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 msm8917 mdm8215 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware mdm8615m_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sd720g mdm9628 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware mdm9230_firmware mdm8215m qca6574au_firmware mdm9630 wcd9375_firmware wcn3998_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware qca4004_firmware mdm9615m qca6430 wcd9306_firmware wcd9340 mdm9625_firmware sd765g qca1990_firmware qualcomm215_firmware qca6436 wcn6851 sa6155p qcs603_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware mdm9655 qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g mdm8215_firmware wcn3910_firmware sd_8cx sa8150p mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd855_firmware sd865_5g_firmware sd712 wcn3988 sa8195p_firmware msm8208_firmware wcn6750_firmware sd450 wcn3610 mdm9640 msm8608 wcn3991 sda429w_firmware wcd9380_firmware sdm429w wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6174 qca6430_firmware sd439_firmware qca6335_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware sd_8c_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 qca1990 sd730 wcd9330_firmware sdx55m qca6421_firmware wcn6740_firmware ar6003_firmware msm8953 sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware apq8084_firmware sa6145p sdxr1 apq8096au sa8145p mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sd780g_firmware sdx55 apq8053 sa8155p sd675 sd439 wcn3660 qca9379 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware sm7250_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware mdm9310_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 mdm9615m_firmware wcn3615_firmware apq8037 sa8155 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 sa6155p_firmware qca6310 sa515m_firmware sd429 sdxr2_5g qca9367 apq8084 sdm630 mdm9607_firmware sd821 mdm9655_firmware msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sa6145p_firmware sm6250 sa8195p sd712_firmware apq8017_firmware wsa8810_firmware qca6694 sd765_firmware qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m mdm9625 qca6390 wcd9375 sd750g_firmware aqt1000 msm8976 qca6694_firmware sm6250_firmware msm8953_firmware qca6694au sda429w msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 ar6003 csr6030_firmware qca6564a mdm9630_firmware qcm6125_firmware mdm9635m_firmware sd_675 sd780g sd865_5g sdx24 msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p sc8180x qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware wcn6750 mdm9635m mdm9615 mdm9205 sa515m qca6574_firmware sd855 sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 qca6391 sdxr1_firmware mdm9310 aqt1000_firmware msm8920 qcm4290 csrb31024_firmware sdx50m sdx20 sd480_firmware msm8920_firmware mdm9215 sc8180x_firmware sd_455 qca6574au sa8155p_firmware mdm8215m_firmware mdm9607 sd205_firmware mdm9645_firmware qcm6125 wsa8810 mdm9150 wcn6856 sd_8c wcn3680b sd835_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sdw2500 sa6150p msm8940 apq8096au_firmware sd845 mdm9615_firmware apq8037_firmware sd720g_firmware sdx12 qcs410_firmware mdm9330 sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.43% / 61.54%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:32

Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, Nicobar, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm6150 msm8909w_firmware sdm429w_firmware apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 apq8064 apq8098_firmware sdx20 sdm660 msm8920_firmware mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.78%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sd_625_firmware sd_450 sd_845 qcs605 sd_632_firmware sd_835_firmware sd_835 qca6574au_firmware sda660 msm8909w sd_665_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware sd_425 sdm660 sd_430_firmware sd_710_firmware sd_435 sdm630 qcs405 sd_625 qca6574au sd_820_firmware sd_636_firmware sd_439_firmware sd_429_firmware sd_730 snapdragon_high_med_2016 sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.14%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 22:24

Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware apq8076 sc8180x mdm9206 sdm670_firmware sdx24_firmware apq8076_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 sc7180_firmware mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sc7180 sdm630_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.13%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware sd_835 qca6574au_firmware sda660 sd_210_firmware sd_600 msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 47.47%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 11:25

Updated-03 Aug, 2024 | 16:25

Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm7250 mdm9640_firmware sm6250p_firmware qcs610 qca6431_firmware wcd9360_firmware mdm9645 wcn3950_firmware qca6595au_firmware qca6335 msm8917 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sd720g mdm9628 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qca6574au_firmware wcd9375_firmware wcn3998_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware qca6430 wcd9306_firmware wcd9340 mdm9625_firmware sd765g qualcomm215_firmware qca6436 wcn6851 qcs603_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware mdm9655 qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g wcn3910_firmware sd_8cx mdm9207_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware sd712 wcn3988 msm8208_firmware wcn6750_firmware sd450 wcn3610 msm8608 mdm9640 wcn3991 wcd9380_firmware wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6430_firmware sd439_firmware qca6335_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 msm8937_firmware mdm9650_firmware sd_8c_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 sd730 wcd9330_firmware sdx55m qca6421_firmware msm8953 sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware apq8084_firmware sdxr1 apq8096au mdm8207_firmware sdm630_firmware sd820_firmware qca6391_firmware wcd9370_firmware sdx55 apq8053 sa8155p sd675 sd439 wcn3660 qca9379 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sm7250_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 wcn3615_firmware apq8037 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 qca6310 sa515m_firmware sd429 sdxr2_5g qca9367 apq8084 sdm630 mdm9607_firmware sd821 mdm9655_firmware msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware qca6694 sd765_firmware qca6174a_firmware qcs4290_firmware wcd9385 mdm9625 qca6390 wcd9375 sd750g_firmware aqt1000 msm8976 qca6694_firmware sm6250_firmware msm8953_firmware qca6694au msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 csr6030_firmware qca6564a qcm6125_firmware mdm9635m_firmware sd_675 sd865_5g sdx24 msm8909w_firmware qcx315_firmware wsa8835 msm8996au sd665_firmware sd888_5g sm6250p sc8180x qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware wcn6750 mdm9635m sa515m qca6574_firmware sd855 sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 qca6391 sdxr1_firmware aqt1000_firmware msm8920 qcm4290 csrb31024_firmware sdx50m sdx20 sd480_firmware msm8920_firmware sd_455 sc8180x_firmware qca6574au sa8155p_firmware mdm9607 sd205_firmware mdm9645_firmware qcm6125 wsa8810 mdm9150 wcn6856 sd_8c wcn3680b sd835_firmware sd768g qca6696 sd845_firmware msm8608_firmware sdw2500 msm8940 apq8096au_firmware sd845 apq8037_firmware sd720g_firmware sdx12 qcs410_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.23% / 45.89%

||

7 Day CHG~0.00%

Published-07 May, 2021 | 09:10

Updated-03 Aug, 2024 | 16:25

Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qfs2580 qca9377_firmware qpm5679_firmware sm6250p_firmware pmd9607_firmware qdm5579 qfs2608_firmware qfs2530 qpm8870_firmware qln1030 pm6125 qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpa5581_firmware sa6155 pm7150l qpa8821 pm8998_firmware wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qfe4320 qsw8574_firmware sd460_firmware pm8953_firmware sd6905g qpa4360_firmware wcn3998_firmware qfe2520_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 pm6150a qpm6670_firmware qca9367_firmware pm660_firmware pm8150b sa8155_firmware qfe2101 qca6430 qat3522 pmr735a wcd9340 sdm830_firmware sd765g sdr660 qfs2630_firmware sdr865 qdm5620_firmware smb1358 smr545 qca6696_firmware qln5020 wcd9371 sd870_firmware smb1350 pmm855au_firmware sa8150p pm6350 qdm5621 qfe3340 qtc800s qat3514_firmware sd660 qet6105 pm640p_firmware sd660_firmware wcn6750_firmware qat5516_firmware pm6150l sd450 sd8885g pm855l_firmware qtc410s wcn3991 qpa8801 sdm429w pm8150l_firmware qat5533_firmware sdx55m_firmware sdxr25g qpa8673_firmware pm6150 smb1354_firmware sd670_firmware qca6574 sd632_firmware qfs2630 qpa8842 sdr052_firmware pmm8996au wcd9380 qualcomm215 qln4640 qcs410 smb1380_firmware qfe4309_firmware pmk8350_firmware smb1381 pm855p_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sd439_firmware sdxr25g_firmware qdm2301 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware qdm5621_firmware qdm2301_firmware sd835 wcn3980_firmware sd730 pm660l_firmware pm6250_firmware wcn6740_firmware pm8008 pm8350b_firmware qtm525_firmware pme605_firmware pme605 sd678_firmware apq8064au_firmware qpm5621_firmware qcs603 rsw8577 qpa6560_firmware qpa8802_firmware qln4640_firmware qfe4308_firmware qpm5621 qpm6582 sd670 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcm4290_firmware wcn6855 pm8150l pmi8998_firmware qcs610_firmware sa6145p pm660a_firmware pm215 pm4250 ar8031 wtr2965 sdm630_firmware qca6391_firmware pmx20_firmware pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 csra6640 pm8350bhs qat3555_firmware qpa8803_firmware wcn3660 qca9379 pm855b qpm5870 pm8909 wsa8830 pm660 qet6110_firmware qdm5579_firmware pm6125_firmware qbt1500 qpa5581 mdm9650 fsm10055_firmware qbt1500_firmware qpm5870_firmware qcs4290 qet6100 pmm855au qca6420_firmware smb1394_firmware apq8009_firmware smb1396 pm7150a sd675_firmware pm8350 qca6564 qpa4361_firmware pm8350c_firmware qpa5461_firmware qca6426 wcn3990_firmware qca9377 qpm5641 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware wcd9326_firmware wcn3615_firmware wtr2955 rgr7640au_firmware pm7250_firmware sdr845_firmware qdm5620 smb1380 pmk8002_firmware qsw6310_firmware sa8155 qdm4650_firmware sdx55_firmware pmm6155au_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware qsm7250_firmware qpm6670 pm7150l_firmware qpm4641 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 qca9367 sdm630 qdm4643 qfs2530_firmware wcn3988_firmware pmx55 qpm4641_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware pm8953 qat5515 qpm5677 qat3514 wcd9326 wcd9335 pm6350_firmware pm8004_firmware sdr8150_firmware qcs4290_firmware pm439 qtc800h_firmware pmk7350_firmware qpm5620 qpm4630 qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware pmm8195au qln4642 msm8917_firmware qpm5677_firmware sdx20_firmware wsa8815_firmware wtr3925_firmware pmi8937 pm8998 pmk7350 smr525_firmware qpm8820_firmware qfe4301_firmware apq8017 qln1020_firmware qpm6621_firmware pm670a_firmware qcm6125_firmware pmx55_firmware wtr2955_firmware qfe4373fc_firmware smb1398_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qpa4361 qpm4640_firmware mdm9206 wcn6855_firmware qdm5679_firmware pm8350c smr525 qca6310_firmware qfe4305_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware sd665 pm6150a_firmware pm6150_firmware sd765 pmx20 pmd9607 qca6574a_firmware qpm4630_firmware qat3555 apq8009 qpa5461 wtr2965_firmware pm670_firmware qfs2608 sd480_firmware qtc801s qpm5641_firmware sd710 pm8008_firmware sdx20m_firmware qpm6621 pmr735a_firmware pmw3100 pmx50 qca6564_firmware sdr8250 sd768g qln1030_firmware smb1350_firmware wcn6740 pmw3100_firmware pm8004 pm640l pmk8002 sdw2500 apq8096au_firmware sd845 sd455_firmware sdm830 smb1357 qcs410_firmware qpa5580 fsm10055 qfe2550 sa6150p_firmware qcs610 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 qpm6585_firmware qat3519 qbt2000_firmware qtc800h sa8150p_firmware qcs2290 sdr8250_firmware qca6335 msm8917 csra6620_firmware qcs605_firmware qln1020 smr546_firmware qdm5671 csra6640_firmware qpm4650_firmware qat3518 sd632 sdr425_firmware smr526_firmware qpa5460 pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware msm8909w sdx20m pmx50_firmware qpa8675_firmware sdr735g qpa5460_firmware wcn3999 qdm3301_firmware qsm7250 qcs6125 sd662_firmware smb1360 qcs405 qualcomm215_firmware rsw8577_firmware qdm2308_firmware fsm10056_firmware pm439_firmware qca4020_firmware qca6436 sa6155p wcn6851 qcs603_firmware qpa6560 sdr675_firmware wcn3660_firmware wcd9341 pmi8952 qdm4643_firmware pm8937_firmware qca6431 sm7350_firmware qet4100_firmware sd750g qfe4320_firmware qdm3302 wcn3910_firmware qpm5657 qpm5875_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 wtr3925 sdr052 sa8195p_firmware smb1390 qet4100 wcn3610 qpa8686_firmware qpm6585 sda429w_firmware wcd9380_firmware smb1355 qln4650 wcd9330 msm8996au_firmware sdr735g_firmware pm8350bhs_firmware wgr7640 qat5568 qet5100 qdm5671_firmware qpa8801_firmware qca6564au sd636 wcn6856_firmware pm8005_firmware qet4101_firmware pm7250b qln4642_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware sdx50m_firmware sdr735 smb1395 pm660l ar8151 smr526 wtr5975 qca6430_firmware pmk8003 qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 pm7350c_firmware qca6335_firmware qsw8573 qcs605 wcn3910 qca6320 mdm9650_firmware smb1394 qca6426_firmware pm8350_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 qpa8675 sdr051_firmware wcd9330_firmware sdx55m pm670a qca6421_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 qsw8574 sd6905g_firmware ar8031_firmware wcn3680_firmware pm855l wcn6851_firmware qdm5670_firmware sd8655g pm7150a_firmware pm8150b_firmware qfe4302 smr545_firmware qca6564a_firmware qdm2310_firmware pm4250_firmware sd480 sd870 sd8885g_firmware pm670 sd210_firmware qdm5677 pm8005 pm855_firmware qdm2302 pmm6155au sdxr1 pm855b_firmware apq8096au qcs405_firmware qpm6582_firmware pm640l_firmware qln4650_firmware qpm5875 qet5100m sd888_firmware sa8155p sd675 sd439 qet4101 qat3516 pm670l qpm5658 qcm2290 qpm5658_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware sd678 sdr051 qln5030 qcs2290_firmware pm4125 fsm10056 pmi632 qpa2625_firmware pm456 pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qpa5373 qpm4621 smb1360_firmware qet6100_firmware pm670l_firmware sdr660g sd455 sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware sd730_firmware wcd9370 sdr425 pmr525_firmware qfe3340_firmware ar8151_firmware pmi632_firmware qat5516 sd662 qpa8821_firmware qfe4308 sdr660g_firmware pm8350bh pm3003a qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware sm7350 smb1354 qca6564au_firmware qdm2305 sa6155p_firmware qca6310 qpm8820 pm8937 qpm2630 qln5020_firmware smb1398 sa6145p_firmware sdr675 sm6250 apq8017_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qca6174a_firmware wcd9385 qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware apq8064au qpa8673 qdm2310 qfe2550_firmware msm8953_firmware qln5030_firmware sda429w sd210 wcn3620_firmware qfe4302_firmware smb1396_firmware wcn6850_firmware wcn3620 wsa8835_firmware qca6564a smr546 qet6110 pmi8952_firmware qcm2290_firmware qln5040 qpm8895 sdr845 qpm5670 wcn3990 pmk8350 qdm3302_firmware sd888 pm8350b qdm2307_firmware msm8909w_firmware wsa8835 msm8996au sdm429w_firmware qpm5657_firmware sm6250p rgr7640au sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware qpm4640 wcn6750 pm7350c qet5100m_firmware qpm4650 qtm525 wtr6955 sd855 sm4125_firmware qfe4305 wtr6955_firmware pm640p sd768g_firmware sdr865_firmware pm8250_firmware sd460 qca6391 sdxr1_firmware smb1351 smb1357_firmware aqt1000_firmware pm215_firmware qpm8895_firmware pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 sdx20 pm8916 smb1395_firmware qdm4650 pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 qet6105_firmware sd8655g_firmware wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware smb231_firmware qat5568_firmware qdm2308 qat3550 wtr4905_firmware wcn6856 qdm5679 wcn3680b sd835_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware qpa2625 sa6150p pmm8195au_firmware sm7250p sd720g_firmware qpm4621_firmware sd636_firmware pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-415

Double Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.29% / 51.61%

||

7 Day CHG~0.00%

Published-17 Sep, 2021 | 07:05

Updated-03 Aug, 2024 | 16:25

A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware fsm10055 sm7250 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 ipq4028_firmware qcn5550 qca8337 ar9380 ipq8173_firmware qca9561_firmware qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 qcn5064 sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware qca9987_firmware sd632 sa415m wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware ipq8076a mdm9628 wcn3660b sd450_firmware sd460_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sdx20m qca6438_firmware qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware wcn3999 qrb5165_firmware ipq5028 qca7500 ipq8072_firmware ipq4029_firmware qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 wcd9340 sdm830_firmware sd765g qualcomm215_firmware fsm10056_firmware qca6436 wcn6851 qcn3018_firmware sa6155p qcs603_firmware mdm9250_firmware wcn3660_firmware qca9888_firmware qcn6122 ipq8068_firmware qca6696_firmware wcd9371 sd870_firmware sd750g qca9988_firmware qcn5154_firmware wcn3910_firmware sa8150p ar7420_firmware wsa8830_firmware qca9992_firmware sd865_5g_firmware sd855_firmware wcn3988 qca6438 sa8195p_firmware qcn5121 qcn5022_firmware wcn6750_firmware qca9898 sd450 ipq4028 wcn3610 mdm9640 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware sdm429w wcd9330 msm8996au_firmware ipq8076a_firmware qca7550_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qca9558 sd670_firmware qca6574 sd632_firmware csr8811_firmware qca7520_firmware wcd9380 qualcomm215 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware ipq4019_firmware sdx50m_firmware sdx24_firmware qca8072_firmware qca9985 qcn9012_firmware qca6174 qca6430_firmware sd439_firmware qcn5052_firmware qca6335_firmware ipq6018_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware wcn3910 qca6320 mdm9650_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware wcn3680 qca9984 ipq6028 ipq8064 sd835 pmp8074 qcn9024 sd730 qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware wcn6740_firmware msm8953 qcn5064_firmware sd678_firmware apq8064au_firmware ar8031_firmware wcn3680_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 ipq8070 qca9896 qcn5502 qca9994 qca9887_firmware qca9980 sd670 qcn9024_firmware ipq8174_firmware apq8009w sd_636_firmware qca6564a_firmware qca9880 qcm4290_firmware sd480 sd870 qcn5121_firmware sd210_firmware qcs610_firmware sa6145p ipq6018 qcn3018 qca9886_firmware sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware sa8145p sdm630_firmware qca6391_firmware qca4024 wcd9370_firmware sd780g_firmware sdx55 sd888_firmware apq8053 qcn5021_firmware csra6640 sa8155p sd675 sd439 qca9531_firmware wcn3660 ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware mdm9150_firmware qcn5500 wsa8830 qca9561 sd678 qcn9070 sa8145p_firmware qca7520 qcs2290_firmware fsm10056 sm7250_firmware csrb31024 qca9563_firmware mdm9628_firmware mdm9650 sd_636 csra6620 fsm10055_firmware qca9987 qcn9072 qca9880_firmware qca9992 qcs4290 mdm9250 sd765g_firmware qca6420_firmware ipq8069_firmware apq8009_firmware qca6390_firmware sd690_5g ipq6000 qca6174_firmware sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6564 qca6426 qca6584au_firmware qcn9000_firmware qca9984_firmware qca9377 ipq5018 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcn3615_firmware qca9563 ipq8074a sd662 qcn5124_firmware qca9982 sa8155 qca6320_firmware wcn3680b_firmware qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware qca6595au wcn3999_firmware wcn3610_firmware qca6436_firmware ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qca6310 ipq8174 sd429 sa515m_firmware qca9990 sdxr2_5g qcn5052 qca9367 sdm630 mdm9607_firmware sa415m_firmware wcn3988_firmware qcn9074 sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware wsa8810_firmware qca6694 qca7550 sd765_firmware qca8081 qca9982_firmware qcn6023 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 ar8035 sm6250_firmware csr8811 apq8064au ipq4019 qca6694_firmware msm8953_firmware qcn9100_firmware msm8917_firmware sd210 wcn3620_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a qca9988 qcm6125_firmware qca9882 qca8072 qcm2290_firmware qcn9000 sd_675 sd780g sd865_5g qca6595 ar9380_firmware sdx24 qcn9012 sd888 qca9558_firmware qca9896_firmware msm8909w_firmware ipq8065_firmware qcx315_firmware qcn6122_firmware msm8996au sd665_firmware sdm429w_firmware wsa8835 sd888_5g sm6250p qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware mdm9206 qca9889 qca6174a qca9888 qca6310_firmware sm7325 ipq8074 qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 qcn5502_firmware ar7420 sd855 sm4125_firmware sd665 ipq8076 sd765 qca9887 qca6574a_firmware qcn5021 ipq8069 qcn5152 sd768g_firmware apq8009 sd460 qca6391 sdxr1_firmware ipq6005 aqt1000_firmware qcn9100 mdm9626 qcm4290 csrb31024_firmware sdx50m qca9882_firmware qcn9070_firmware sdx20 sd480_firmware ipq6028_firmware ipq8072a_firmware sd_455 mdm9626_firmware qca9531 ipq8074_firmware qca6574au qca9889_firmware sa8155p_firmware mdm9607 qcn5122 sd205_firmware sdx20m_firmware qcm6125 wsa8810 qcn5500_firmware mdm9150 wcn6856 qcn5022 wcn3680b sd835_firmware qca6564_firmware sd768g ipq6010_firmware wcn6740 qca6696 sd845_firmware sdw2500 sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn9072_firmware sdm830 ipq6000_firmware sd720g_firmware sdx12 ipq8071_firmware qcs410_firmware qcn9074_firmware ipq4029 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 53.81%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 04:29

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SD 210/SD 212/SD 205, SD 425, SD 625, SD 808, SD 810, SD 820, and SDX20, while processing firmware image signature, the internal buffer may overflow if the firmware signature size is large.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.32%

||

7 Day CHG~0.00%

Published-09 Sep, 2021 | 07:35

Updated-03 Aug, 2024 | 16:25

UE assertion is possible due to improper validation of invite message with SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware sd678 sm6250p_firmware qcs610 csrb31024 wcd9360_firmware sd_636 qcs4290 wcn3950_firmware sc8180x\+sdx55 qca6420_firmware qca6595au_firmware qca6390_firmware qca6335 msm8917 sd730_firmware sd_455_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qcs6125_firmware qca6584au_firmware sd632 qca9377 sa415m wcn3998 sd_8cx_firmware wcd9371_firmware whs9410 wcn3950 sd720g wcn3660b sd450_firmware sa8155 qca6574au_firmware sdx55_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3610_firmware qca6420 apq8053_firmware wcd9360 qca6564au_firmware qca6584au qca6310 whs9410_firmware sd429 qcs6125 sa8155_firmware sdm630 sa415m_firmware wcn3988_firmware qca6430 sd429_firmware sm6250 sd712_firmware wcd9340 apq8017_firmware qualcomm215_firmware qcs603_firmware qca6174a_firmware qcs4290_firmware wcn3660_firmware qca6696_firmware wcd9371 qca6390 wcd9375 sd_8cx aqt1000 wcn3910_firmware sc8180x\+sdx55_firmware sm6250_firmware msm8953_firmware sda429w msm8917_firmware sd855_firmware wcn3620_firmware sd712 wcn3988 wcn6850_firmware wcn3620 wsa8815_firmware apq8017 sd450 wcn3610 qcm6125_firmware wcn3991 sda429w_firmware wcd9380_firmware sd_675 sdm429w qca6564au sdx24 sdx55m_firmware msm8940_firmware sd670_firmware sd632_firmware sdm429w_firmware sd665_firmware wcd9380 sm6250p qualcomm215 qcs410 qca6574a sdx50m_firmware qca6174a sdx24_firmware qca6310_firmware qca6430_firmware qca6335_firmware qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 wcn3910 sd_8c_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd850_firmware sd730 sdxr1_firmware sdx55m aqt1000_firmware msm8920 msm8953 sd678_firmware qcm4290 csrb31024_firmware sdx50m wcn3680_firmware qcs603 msm8920_firmware sd_455 qca6574au sa8155p_firmware sd_636_firmware sd670 qcm6125 qcm4290_firmware qcs610_firmware sd_8c sdxr1 qca6696 sdm630_firmware sd845_firmware wcd9370_firmware sdx55 msm8940 apq8053 sa8155p sd675 sd845 sd720g_firmware qcs410_firmware wcn3660 sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.13%

||

7 Day CHG~0.00%

Published-09 Sep, 2021 | 07:35

Updated-03 Aug, 2024 | 16:25

Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware wsa8830 sd678 sm7250 sm6250p_firmware qcs610 qca8337 sm7250_firmware qca6431_firmware wcd9360_firmware qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware msm8917 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qcs6125_firmware qca6426 sd632 wcn3990_firmware qca9377 wcn3998 sd_8cx_firmware wcd9371_firmware sdxr2_5g_firmware wcd9385_firmware wcn3950 sd720g whs9410 wcn3660b sd450_firmware qsm8350_firmware qsm8350 sa8155 qca6574au_firmware sdx55_firmware qca6595au sdx12_firmware wcd9375_firmware wcn3998_firmware wcn3610_firmware qca6420 qca6436_firmware apq8053_firmware wcd9360 sd778g whs9410_firmware qcs6490 sd429 sdxr2_5g qcs6125 sa8155_firmware wcn3988_firmware qca6430 sd205 sd429_firmware qca6421 sd778g_firmware sm6250 wcd9340 apq8017_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 wcn6851 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 wcn3660_firmware qca6431 qca6696_firmware qcs6490_firmware wcd9371 sd750g sd870_firmware ar8035 qca6390 sd_8cx aqt1000 sd750g_firmware wcd9375 sm6250_firmware wcn3910_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd210 sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware apq8017 wcn6750_firmware sd450 wcn3610 qcm6125_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware msm8940_firmware wsa8835 sd632_firmware sd665_firmware wcd9380 sd888_5g sm6250p qualcomm215 qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6174a sm7325 qca6430_firmware wcd9335_firmware wcn3980 wcn6750 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 wcn3910 sd_8c_firmware sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware wcn3980_firmware sd730 qca6391 sdx55m qca6421_firmware aqt1000_firmware wcn6740_firmware msm8920 msm8953 sd678_firmware qcm4290 qcm6490_firmware wcn3680_firmware sd480_firmware wcn6851_firmware msm8920_firmware qca6574au sa8155p_firmware sd205_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware wcn6856 sd_8c sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 msm8940 apq8053 sa8155p sd675 sd720g_firmware sdx12 qcs410_firmware wcn3660 ar8035_firmware sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.35%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, the validation of filesystem access was insufficient.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 53.81%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 09:14

Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8909W, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware mdm9635m_firmware sd_632 sd_675 sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sm7150_firmware msm8909w_firmware sd_450_firmware sd_845_firmware sm7150 qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_625_firmware sd_450 mdm9635m sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_600 sxr1130 msm8909w sd_205_firmware sd_212 sd_427_firmware sd_712 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 sd_625 qm215 mdm9607 sd_210 sd_636_firmware sd_439_firmware mdm9150 sd_429_firmware sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sd_600_firmware sd_205 sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.11% / 29.84%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 15:15

Information exposure in Powerline Communication Firmware

Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device.

Vendor-Qualcomm Technologies, Inc.

Product-qca7500_firmware qca7520_firmware qca7550 qca7520 qca7500 qca7550_firmware Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.38% / 58.59%

||

7 Day CHG~0.00%

Published-22 Jul, 2019 | 13:47

Updated-05 Aug, 2024 | 09:21

Lack of check to prevent the buffer length taking negative values can lead to stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA6174A, QCA8081, QCS404, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 qcs404_firmware mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware qca6174a sd_665 qcs404 sd_625_firmware ipq8074 sd_450 mdm9635m sd_8cx_firmware mdm9615 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sd_652_firmware qca8081_firmware sxr1130 msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware qcs405 sdm630 sd_625 ipq8074_firmware sd_820_firmware sd_210 mdm9607 sd_636_firmware mdm9625_firmware sd_439_firmware qca8081 qualcomm_215_firmware mdm9150 sd_429_firmware qca6174a_firmware sd_730 sd_212_firmware snapdragon_high_med_2016 sd_850_firmware mdm9655 sdm439_firmware qcs405_firmware sd_712_firmware sd_855_firmware sdm630_firmware sda660_firmware mdm9625 sd_8cx sd_430 sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 32.00%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Improper Input Validation in MODEM

memory corruption in modem due to improper check while calculating size of serialized CoAP message

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-131

Incorrect Calculation of Buffer Size

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.46% / 63.37%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 09:21

Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_632 sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_600 sd_652_firmware sd_415_firmware sxr1130 msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 sd_625 qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.38% / 58.59%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 09:14

Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sm7150_firmware sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sm7150 sd_410 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 mdm9635m mdm9615 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_600 sd_652_firmware sd_415_firmware sxr1130 msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_412 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware sdm630 sd_625 qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_412_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_430 sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_410_firmware sd_600_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.34%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 09:14

Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 mdm9635m sd_8cx_firmware mdm9615 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_652_firmware sxr1130 msm8909w sd_205_firmware sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 sd_625 qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware mdm9150 sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_855_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 qm215_firmware sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.10% / 29.14%

||

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware wcd9340_firmware qca6595au_firmware qca6310 sd429_firmware sd730 qcn7606_firmware sd_675_firmware sd855_firmware sd662_firmware wcd9371 sdx50m qcs6490 sdx55 sd460_firmware qca6696 qca6421 sa6155 qsm8250_firmware qca6564au qca6426_firmware qcm4290_firmware wcn3660b sd720g sm4375 wcn3660b_firmware sa6150p sd460 sd665_firmware sd710_firmware sa6145p_firmware wsa8830 sd768g sm4125 wcn6740_firmware wcn6856 qca6390 wsa8815 sdx50m_firmware sa6155p sa8150p_firmware sd480 qca6430 sa8145p_firmware wcn3620_firmware sd855 qcs6490_firmware wcd9340 wcn6850 sa8145p sdx55_firmware wcn3950 sxr2150p_firmware sdxr2_5g_firmware qcm6490 wcd9335 sd670_firmware sd765g_firmware qca6574a qca6595_firmware sd865_5g_firmware qca6421_firmware qcm6125_firmware qca6574au_firmware sd662 sdm429w_firmware qca6564_firmware wcn6750 qcs610_firmware sm7325p sd695_firmware qcm2290_firmware wcd9380 sd_675 qca6335 qcm4290 qca6595 qca6431_firmware sd695 sd730_firmware sd480_firmware qca6430_firmware sa6150p_firmware sd888 wcd9375_firmware sm7315_firmware sm7325p_firmware wcn6856_firmware sd870 aqt1000 qca6390_firmware wcn6855_firmware qsm8250 qca6420 sa6155_firmware sd780g_firmware wcn6855 qcm2290 wcn3910 sd870_firmware qcm6490_firmware sm6250 sd845_firmware sdxr1_firmware qca6431 qca6595au wcd9370 sd888_firmware qcs4290_firmware wcn3990 wcn3980 sd429 sm4125_firmware sd690_5g sm7315 sd765_firmware sd720g_firmware sd765g sd670 wsa8835 sdx55m wcn3998 wcn6850_firmware sm6250p wsa8810_firmware wsa8815_firmware wcn3991_firmware sa8150p qcs2290 wcn6740 wcd9385 qca6436 sd678 qca6574au wcd9385_firmware wcn6750_firmware qcs410_firmware sa8155p sdxr1 wsa8810 sd680 sd888_5g aqt1000_firmware wsa8835_firmware sd678_firmware wcd9335_firmware qcs6125 sm4375_firmware sm7250p_firmware qca6391 wcn3991 qca6574 wcn3998_firmware qca6574_firmware wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware sa8195p qca6574a_firmware sd675_firmware sd665 sa8155_firmware sd888_5g_firmware wsa8830_firmware qcm6125 sm6250_firmware sdxr2_5g wcd9341 wcn3980_firmware qcs2290_firmware wcn6851_firmware sdm429w wcd9326 qcs610 sa6155p_firmware sd680_firmware qca6391_firmware wcd9326_firmware sm7250p sa8155p_firmware sa6145p wcn3910_firmware wcd9375 sd750g_firmware qca6696_firmware sm6250p_firmware sxr2150p sd865_5g sd780g qca6564au_firmware qca6426 qca6335_firmware sd690_5g_firmware qcs6125_firmware sdx55m_firmware sd778g wcn3950_firmware wcd9371_firmware wcn3988 wcn3990_firmware sa8155 sd750g wcn3620 sd765 sd768g_firmware qcs605_firmware qca6564 qcs605 wcn3988_firmware qca6310_firmware qcs4290 sd710 qcn7606 qca6436_firmware sa8195p_firmware sd845 wcd9341_firmware qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.07% / 21.67%

||

7 Day CHG~0.00%

Published-26 Nov, 2024 | 08:55

Updated-09 Jan, 2025 | 20:43

Configurations in Android Build

Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.

Vendor-Qualcomm Technologies, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.08% / 24.83%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, insecure ciphersuites were included in the default configuration.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-326

Inadequate Encryption Strength

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 31.70%

||

7 Day CHG~0.00%

Published-07 Dec, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in WLAN function due to lack of input validation in values received from firmware.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.78%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:35

Updated-05 Aug, 2024 | 08:24

Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, Qualcomm 215, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.34%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:35

Updated-05 Aug, 2024 | 08:24

Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads to out of bound memory access. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, QCA9886, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 820, SD 820A, SD 835, SDX20, SDX24, Snapdragon_High_Med_2016

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware qca9377_firmware qca6584au mdm9640_firmware sd_820a msm8996au_firmware sdx20 sd_425 sdx24 sd_430_firmware mdm9607_firmware sd_435 mdm9650 sd_625 qca6574au snapdragon_high_med_2016_firmware sd_210 mdm9607 msm8996au qca6574 sd_820_firmware sd_820 sd_450_firmware sd_820a_firmware mdm9206 qca6174a_firmware qca6174a qca9379_firmware qca9886_firmware sd_212_firmware sd_425_firmware qca6584au_firmware sd_450 sd_625_firmware sdx24_firmware qca9377 mdm9206_firmware qca6574_firmware qca9886 sd_427 sd_430 qca6584_firmware sd_435_firmware sd_835_firmware mdm9650_firmware sdx20_firmware sd_835 qca6584 qca6574au_firmware sd_205 sd_210_firmware snapdragon_high_med_2016 qca9379 sd_205_firmware sd_212 mdm9640 Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-400

Uncontrolled Resource Consumption

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.78%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:35

Updated-05 Aug, 2024 | 08:24

Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.78%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 08:24

Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 mdm9150_firmware sd_855 mdm9640_firmware sd_820a msm8996au_firmware sdx20 sd_670_firmware sd_425 sdm660 sdx24 sd_430_firmware mdm9607_firmware sd_435 mdm9650 sd_636 sd_710_firmware sdm630 sd_625 mdm9607 msm8996au sd_636_firmware sd_450_firmware sd_845_firmware sd_820a_firmware mdm9150 qcs605_firmware mdm9206 sd_425_firmware sd_850_firmware sdx24_firmware sd_625_firmware sd_450 sd_855_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_845 mdm9206_firmware qcs605 sd_427 sd_430 sd_670 sd_435_firmware sd_835_firmware mdm9650_firmware sd_710 sdx20_firmware sd_835 sda660 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-665

Improper Initialization

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.78%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 08:24

While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware sd_632 mdm9640_firmware sd_820a msm8996au_firmware sd_439 sdx20 sd_415 sd_616 sd_425 sd_429 sdm439 mdm9607_firmware sd_615 mdm9650 sd_650_firmware sd_625 qca6574au sd_615_firmware msm8909w_firmware mdm9607 msm8996au qm215 sd_210 sd_650 sd_820_firmware sd_820 sd_450_firmware sd_439_firmware sd_820a_firmware mdm9150 sd_429_firmware mdm9206 sd_652 qca6174a_firmware qca6174a qca9379_firmware sd_212_firmware sd_425_firmware sd_625_firmware sd_450 sdm439_firmware qca9377 mdm9206_firmware qm215_firmware sd_632_firmware mdm9650_firmware sdx20_firmware sd_205 qca6574au_firmware sd_210_firmware sd_415_firmware sd_652_firmware msm8909w qca9379 sd_616_firmware sd_205_firmware sd_212 mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.78%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:36

Updated-05 Aug, 2024 | 08:24

Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 sd_850 mdm9150_firmware sd_855 mdm9640_firmware sd_820a msm8996au_firmware sdx20 sd_670_firmware sdm660 sdx24 sdm630 mdm9607_firmware sd_710_firmware sd_636 mdm9650 sd_625 sd_820_firmware mdm9607 msm8996au sd_636_firmware sd_820 sd_845_firmware sd_820a_firmware mdm9150 qcs605_firmware mdm9206 sd_850_firmware sdx24_firmware sd_625_firmware sd_855_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_845 mdm9206_firmware qcs605 sd_670 sd_835_firmware mdm9650_firmware sd_710 sdx20_firmware sd_835 sda660 sxr1130_firmware sxr1130 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.29% / 51.79%

||

7 Day CHG~0.00%

Published-20 Sep, 2018 | 13:00

Updated-05 Aug, 2024 | 08:01

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, Snapdragon_High_Med_2016, incorrect control flow implementation in Video while checking buffer sufficiency.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.52%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.11% / 30.32%

||

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 04:42

Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm6250p_firmware qcs610 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sd632 wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd710_firmware sd460_firmware qca4020 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware sa6155_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware qca9367_firmware wcn3999 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 qualcomm215_firmware sd765g sw5100 qca4020_firmware qca6436 sd680 sa6155p wcn6851 qcs603_firmware wcn7851_firmware wcd9341 qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware wcn3610 wcn3991 wcd9380_firmware sdm429w msm8996au_firmware sw5100p wcd9330 qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m sm8475_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sd695_firmware sdxr1 apq8096au ar8031 qcs405_firmware sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 sm8475p_firmware qca9379 qcm2290 wcn3991_firmware wsa8830 sd678 qcs2290_firmware mdm9650 sd_636 csra6620 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware qca6595au wcn3615 wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 wcn7851 qcs6490 sd429 sdxr2_5g qca9367 sdm630 wcn3988_firmware sa6145p_firmware sd429_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware msm8953_firmware msm8917_firmware wcn3620_firmware sdx20_firmware qcm6490 sd888_5g_firmware wsa8835_firmware wcn3620 wcn6850_firmware wsa8815_firmware sm7450 apq8017 qca6564a qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware sm7315 apq8009 qca6391 sd460 sdxr1_firmware aqt1000_firmware qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sdx20 sd480_firmware qca6574au sa8155p_firmware sd710 wcd9341_firmware wsa8810 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.03%

||

7 Day CHG~0.00%

Published-19 Oct, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware qcn9072_firmware msm8996au wcn3615_firmware sd730 apq8009 ipq6028 qca6696 qca6421 qcn9070 wcn7850 qcn5122 qsm8250_firmware qca6564au sdx24 wcn3660b sd720g ipq8078a sd460 msm8996au_firmware sdx24_firmware qcn5124 qca6430 ipq9008_firmware qcs6490_firmware sd_8cx_gen3_firmware sd_8cx_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware sd712 qca8386 qca6574a sd865_5g_firmware apq8017_firmware sd835_firmware sa8295p_firmware sm7325p qcn5024 mdm8215 qcc5100 qcs405 qca6595 qca6431_firmware sd480_firmware sm7315_firmware qca9367 qca6390_firmware sc8180x\+sdx55 qca6584_firmware ipq8070a sd870_firmware qcm6490_firmware ipq8078_firmware qca6595au sd821_firmware qcs4290_firmware wcn3980 qca2066 sm4125_firmware sm7315 qcn9022 sd765_firmware qca9888_firmware sdx55m qam8295p wcn6850_firmware sm6250p wcn3991_firmware sa8150p wcn6740 ipq8078 qca6436 ipq8069 ipq8071a qca4024 qca2062_firmware qca2066_firmware sw5100p_firmware qcn9012 wsa8835_firmware apq8009_firmware qca6391 qcn9024 qcn5052_firmware csra6620 wcn3998_firmware sd778g_firmware sd675 ipq8074a qcx315 qcc5100_firmware qca6554a_firmware ipq8071 qcn6122 sdx12 sd660 csrb31024_firmware sa4150p_firmware sdx20 ipq8070 qcs610 qcn9012_firmware sm7250p sa8155p_firmware csra6620_firmware wcn3610 sdx20_firmware wcn3910_firmware qrb5165_firmware sd750g_firmware qca6696_firmware qca2064 sxr2150p sd865_5g ipq8071_firmware qca9377 qcn9003_firmware wcn3990_firmware wcn3950_firmware wcn3988 wcn3615 qca8085 sd750g sd768g_firmware qcs605 mdm9615_firmware mdm9640_firmware qca4020 qca9367_firmware ipq8074a_firmware qcn5021_firmware qcn6102 ipq4018 wcd9340_firmware sd850 qca6175a_firmware sd_675_firmware sd855_firmware sd662_firmware qcn5054_firmware qca9889 sdx50m wcd9371 qca1023 sd_455_firmware mdm9628 wcn3610_firmware sa6155 qcm4290_firmware wcn3660b_firmware sm4375 sdx20m_firmware wcd9360_firmware qrb5165m_firmware qsm8350_firmware sd768g wcn6740_firmware wcn6856 sdx50m_firmware qca6175a sa6155p ipq8074_firmware sa8150p_firmware sd480 wcd9330 wcn7851_firmware mdm8215_firmware qca4024_firmware sa8145p wcn3950 ipq6018_firmware qcn5122_firmware qcn7605 ipq8078a_firmware wcn3680b_firmware ipq6010 qca6421_firmware qca6438_firmware qca6574au_firmware sd662 qrb5165n_firmware qca2065_firmware ipq4029_firmware qam8295p_firmware qca6564_firmware qcs610_firmware qcn5054 ar8031 qca6438 qcm4290 qcn6102_firmware qcn5052 sd660_firmware sd730_firmware qca6174_firmware sd888 wcn6856_firmware qcn6132_firmware aqt1000 qcn5152_firmware qcs603 ar8035 qca8072_firmware qsm8250 qca6420 wcd9360 qca4531 qca9898_firmware qcm2290 mdm9250 qcn9011 sa515m sd845_firmware qca6428_firmware sa515m_firmware qca9994_firmware apq8076 ipq6028_firmware qcn6023 mdm9645_firmware qca8081_firmware qca9984 qca9898 qca8075_firmware qcn5164 qcs2290 qrb5165m qca1064_firmware sd7c sd678 qca6574au wcd9385_firmware apq8096au qcs410_firmware qcn9000_firmware ipq8173_firmware sd680 qcn9001_firmware qca9379 sm4375_firmware ipq6010_firmware sd_8cx sa8195p qca6574a_firmware qca9888 sa8155_firmware wsa8830_firmware ipq8174_firmware sd_8_gen1_5g_firmware qcn6100 wcd9341 sd680_firmware qca9992_firmware qca2065 apq8096au_firmware qcn9001 qca6584 sd780g qca6335_firmware sdx55m_firmware qcs6125_firmware qcn9100 ipq8072_firmware sa8155 ipq6000 sd765 qca6564 wcd9330_firmware qcn9022_firmware qcs4290 ipq5028 sa4155p qcn7606 sd845 qcs410 qca6428 mdm9310 qca6595au_firmware qca1062 qca6310 qcn9000 qcn7606_firmware ipq8074 mdm9607 qca6426_firmware qca4531_firmware sa6150p sd710_firmware qca9889_firmware wsa8830 ipq8072 wsa8815 qcn9003 ipq9008 wcn3680b sd855 wcd9340 sdx55_firmware sxr2150p_firmware qca8386_firmware sc8180x\+sdx55_firmware qcn5022_firmware sa4155p_firmware mdm9650 qca8072 sd765g_firmware qca8084_firmware qcm6125_firmware wcn6750 sd_636_firmware sd695_firmware qca9994 qca6335 sd_675 qcn5024_firmware csra6640 mdm9215_firmware qca6430_firmware qca8081 sm7325p_firmware qca6584au sd870 ipq6018 ipq5018_firmware qcn9024_firmware ipq4028_firmware qcn9011_firmware sa6155_firmware wcn6855 qcx315_firmware ipq8072a wcn3910 ipq8070a_firmware sm6250 sdm630_firmware qca6431 wcd9370 sd888_firmware qcn5152 qca9992 sd720g_firmware sd765g sd670 qcn9002_firmware qcn9274 sd_455 wsa8810_firmware wsa8815_firmware sd850_firmware ipq8076a qcn7605_firmware sa8155p sdxr1 wsa8810 sdm630 aqt1000_firmware ipq8076 wcd9335_firmware sm7250p_firmware qcn5154_firmware ar9380_firmware mdm9310_firmware wcn6851 wcd9370_firmware qca6420_firmware qcn6023_firmware qca8082_firmware ipq4028 qcm6125 ipq8174 ipq8064_firmware qca4020_firmware qca6391_firmware wcd9326_firmware sa6145p apq8017 qca8085_firmware wcd9375 msm8976_firmware ipq8076_firmware mdm9215 qca2062 qca9980_firmware sm6250p_firmware sd778g wcd9371_firmware ipq8071a_firmware msm8976 qca9980 sd712_firmware wcn7851 qcn9002 qca6310_firmware sd710 qca6436_firmware sa8195p_firmware sd_636 wcd9341_firmware sd821 ipq6000_firmware qca8082 qca6174a_firmware qca6564a_firmware qcn5021 mdm9650_firmware qcs405_firmware qcn6024_firmware qcs6490 ipq5018 sdx55 sd460_firmware qca9990 qca1064 sd820 sd665_firmware sa6145p_firmware ipq5028_firmware sm4125 qca6390 ipq5010_firmware sa8145p_firmware sw5100 wcn6850 csr8811 sa415m qcs603_firmware qca6584au_firmware qca6320_firmware qcn9100_firmware qcm6490 qcn6024 qca6174a wcd9335 wcn3999 sd7c_firmware sd670_firmware sd835 qca6595_firmware qrb5165n qrb5165 mdm9250_firmware sa8295p qcn9074 qca6174 qcm2290_firmware qcn9274_firmware wcd9380 mdm9628_firmware qca2064_firmware sd695 ipq8064 sd_8cx_gen3 ipq8069_firmware wcd9375_firmware sa6150p_firmware ar8035_firmware ipq8070_firmware qcn6100_firmware sdx12_firmware qcn6112 wcn6855_firmware sd780g_firmware qca1023_firmware sdx65_firmware qcn5124_firmware mdm9206 sdxr1_firmware qcn5164_firmware mdm9607_firmware wcn3990 apq8076_firmware sd690_5g qca1062_firmware wsa8835 wcn3998 ar8031_firmware csr8811_firmware qca8337_firmware mdm9206_firmware qcn6122_firmware sd820_firmware qca9990_firmware ipq8072a_firmware wcd9385 wcn7850_firmware qcn6112_firmware sdx65 ipq4029 mdm9640 wcn6750_firmware sd888_5g qcn9070_firmware pmp8074 qca8075 pmp8074_firmware sd678_firmware wcn3999_firmware qcs6125 qca9984_firmware qca6574 qsm8350 wcn3991 csra6640_firmware qca6574_firmware sa415m_firmware ipq8076a_firmware ar9380 qca6564a sdx20m sd675_firmware sd665 sd888_5g_firmware qca6320 qca8337 sm6250_firmware sdxr2_5g qcn6132 wcn3980_firmware qcs2290_firmware wcn6851_firmware ipq4018_firmware wcd9326 qca8084 qca9379_firmware sa6155p_firmware qcn9074_firmware sa4150p qcn5154 qca9377_firmware mdm9645 sw5100_firmware ipq8173 qcn9072 qca6564au_firmware csrb31024 qca6426 sd690_5g_firmware qcn5022 sm8475 qcs605_firmware ipq5010 wcn3988_firmware qca6554a sw5100p mdm9615 sd_8cx_gen2 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.76%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:41

Updated-03 Aug, 2024 | 04:42

Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware mdm9640_firmware qca6595 qca6564au csrb31024 mdm9628_firmware wcd9360_firmware mdm9650 csra6620 qca6574 mdm9250 qca6595au_firmware sa6155 apq8009_firmware csra6620_firmware qca6574a csra6640_firmware qca9379_firmware qca6174a wcd9335_firmware qca9377 sa415m wcn3998 wcn3980 wcd9326_firmware mdm9628 wcn3615_firmware sa515m qca6574_firmware wcn3660b wsa8815 qca6584_firmware mdm9650_firmware qca4020 wcn3660b_firmware sa8155 qca6574a_firmware qca6584 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcn3615 wcn3998_firmware wcn3999_firmware wcn3980_firmware wcn3610_firmware wcd9360 apq8053_firmware apq8009 qca6564au_firmware sa6155p_firmware qca9367_firmware mdm9626 wcn3999 sa515m_firmware ar8031_firmware csrb31024_firmware qca9367 sdx20 sa8155_firmware mdm9607_firmware sa415m_firmware qcs405 mdm9626_firmware qca6574au sa8155p_firmware mdm9607 qca6564a_firmware sa8195p apq8017_firmware wsa8810_firmware wsa8810 qca4020_firmware wcd9326 wcd9335 sa6155p mdm9150 wcn3680b qca6174a_firmware mdm9250_firmware apq8096au qca6696_firmware ar8031 qca6595_firmware qcs405_firmware qca6696 sd820_firmware sdx55 apq8053 apq8096au_firmware csra6640 sa8155p sd820 sdx20_firmware wsa8815_firmware sa8195p_firmware apq8017 qca6564a qca9379 wcn3610 mdm9640 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:40

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, improper offset validation leads to buffer overflow in video parser.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.14% / 35.29%

||

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 04:49

Improper Input Validation in MODEM

Memory corruption in modem due to improper length check while copying into memory

Vendor-Qualcomm Technologies, Inc.

Product-wcd9306 wcd9380_firmware wsa8830 ssg2125p sxr2230p_firmware wcn3999 wcn7851 ar8031_firmware wsa8832_firmware wcn6856_firmware qca4004_firmware csra6620 qcs405 qca4024_firmware qts110 wcd9306_firmware sxr1230p_firmware wsa8835 wsa8810_firmware wcd9380 wsa8810 wsa8832 qca4020_firmware wcn6855 wcd9335 csra6620_firmware ssg2125p_firmware wcn6856 ssg2115p wcn7851_firmware mdm9206 csra6640_firmware wcn6855_firmware sxr1230p wcd9385 ar8031 qcs405_firmware wcd9335_firmware wcn3980 wcn3998 mdm9205_firmware wcd9385_firmware qca4024 mdm9205 mdm9206_firmware wsa8815 qca4004 csra6640 sxr2230p wsa8830_firmware qca4020 wsa8815_firmware wcn7850 wcn7850_firmware wsa8835_firmware ssg2115p_firmware wcn3999_firmware wcn3998_firmware wcn3980_firmware qts110_firmware Snapdragon wcn6855_firmware csra6640_firmware wcd9380_firmware sxr2230p_firmware csra6620_firmware qcs405_firmware wcd9335_firmware ar8031_firmware wsa8832_firmware mdm9205_firmware wcd9385_firmware wcn6856_firmware qca4004_firmware mdm9206_firmware wsa8830_firmware qca4024_firmware wcd9306_firmware sxr1230p_firmware wsa8815_firmware wsa8835_firmware wsa8810_firmware wcn7851_firmware wcn7850_firmware ssg2115p_firmware wcn3999_firmware qca4020_firmware wcn3998_firmware wcn3980_firmware ssg2125p_firmware qts110_firmware

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 46.40%

||

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-1284

Improper Validation of Specified Quantity in Input

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.22% / 44.79%

||

7 Day CHG~0.00%

Published-19 Oct, 2022 | 00:00

Updated-09 May, 2025 | 15:15

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-wcn3660 wcd9340_firmware sd210_firmware mdm9250 sw5100p msm8992 sd439 wcn3988_firmware mdm9615 msm8994_firmware mdm9215 qca6174 mdm9205_firmware mdm9645_firmware sd210 msm8976sg_firmware qca9369 mdm9206_firmware msm8940_firmware apq8096au_firmware msm8920_firmware sd460 apq8052 wcd9340 sd845 apq8056 mdm9250_firmware sdx12_firmware sw5100p_firmware wcd9326 apq8009w_firmware sdm429w sa415m mdm9628 sa8155 qca6574_firmware qca6595au mdm9205 wcn3680b sa8150p wcn3680_firmware wcn3660b wcd9330_firmware msm8208_firmware wcn3990_firmware wsa8835 apq8076 csra6640 sdm429w_firmware qca6175a qca6320_firmware sa8195p sdm630 sa6150p qca4004 qca9367 qca0000 apq8094_firmware qca6574a sd429_firmware qca6310_firmware wcn3990 wsa8810_firmware msm8952 wcd9335_firmware wcn3998_firmware wsa8815 sa6155p sa8155p sdx55 sdx12 mdm9640 qca6554a_firmware qca6564a msm8608 wcd9306 qca6564a_firmware apq8092_firmware wcd9360 wcn3660b_firmware qca4010 qca6696_firmware mdm8215_firmware qca6554a csrb31024_firmware qca4020_firmware msm8956 pm8937_firmware apq8037_firmware csra6640_firmware sd820 sd845_firmware qca6174a sd450 sd660 sdx24 msm8976sg qet4101 qsw8573 apq8037 sd205 apq8016_firmware msm8909w_firmware qca4024_firmware qca1023 msm8992_firmware msm8208 msm8108_firmware apq8009w qca9377 wcn3620 sa8155_firmware mdm8215 qca9379_firmware msm8994 msm8909w sa8145p_firmware sdx24_firmware qca6174_firmware qca4024 msm8996au_firmware apq8017_firmware msm8937 wcd9370 sa6155 apq8096au qca6574au sa6145p qcc5100_firmware wsa8815_firmware wcn3950_firmware sw5100 qca9377_firmware mdm9310_firmware msm8953_firmware sa8150p_firmware qcs405_firmware wcn3950 sa6155_firmware mdm9607 qca9379 wcd9326_firmware apq8053_firmware wcn3615 sa515m_firmware sd820_firmware wcd9341 apq8092 msm8917_firmware wcd9306_firmware mdm9650_firmware qca4004_firmware wsa8835_firmware sd821_firmware apq8056_firmware sdw2500 sd205_firmware wcn3980 qca6696 wcd9360_firmware qca1990_firmware mdm9650 sdx20m sa6150p_firmware wcn3620_firmware csrb31024 qcc5100 qca1990 mdm9615_firmware qca6174a_firmware sd_636 wcn3999 apq8017 sdw2500_firmware qualcomm215_firmware qet4101_firmware wsa8810 pm8937 wcd9341_firmware ar8031 msm8937_firmware wcn3660_firmware mdm9628_firmware msm8976_firmware qca4010_firmware qca6574a_firmware wcn3999_firmware sdx20_firmware qca6595au_firmware sd460_firmware sd439_firmware sda429w qca6175a_firmware apq8064au msm8953 sw5100_firmware qca6564au_firmware sd632 wcn3610 qca6574 wcn3610_firmware wcn3998 wcd9335 wcd9330 sa415m_firmware qcs405 msm8209 apq8076_firmware mdm9645 sa515m sdm630_firmware mdm9206 qca6584 msm8108 sd429 msm8940 mdm9607_firmware msm8956_firmware apq8009 sd835_firmware msm8917 mdm9215_firmware qca4020 apq8009_firmware sd632_firmware qca6595 csra6620 sd835 wcn3615_firmware sa6155p_firmware qca6584au qca6584au_firmware msm8209_firmware sa8195p_firmware qca6574au_firmware wcd9370_firmware sa8155p_firmware apq8094 wcn3680 apq8016 wcd9375 qca6310 sdx20m_firmware apq8064au_firmware apq8052_firmware apq8053 qca0000_firmware qca9369_firmware qsw8573_firmware sda429w_firmware sd821 wsa8830 mdm9310 msm8952_firmware qca6564 msm8996au wcd9375_firmware wcn3980_firmware msm8608_firmware qca1023_firmware qca6320 qca6595_firmware qca6564_firmware sd660_firmware sdx20 msm8976 qca9367_firmware sd_455_firmware ar8031_firmware qca6564au wcn3680b_firmware wcn3988 wsa8830_firmware msm8920 sdx55_firmware csra6620_firmware qualcomm215 sd_455 sa8145p sd_636_firmware qca6584_firmware sd450_firmware sa6145p_firmware mdm9640_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-252

Unchecked Return Value

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.29% / 52.15%

||

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 15:50

Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Vendor-Qualcomm Technologies, Inc.

Product-wcd9306 wcn3999 ar8031_firmware qca4004_firmware csra6620 qcs405 qca4024_firmware wcd9306_firmware wsa8810_firmware wsa8810 qca4020_firmware wcd9335 qca4010 csra6620_firmware csra6640_firmware ar8031 qcs405_firmware wcd9335_firmware wcn3980 wcn3998 mdm9205_firmware qca4024 mdm9205 wsa8815 qca4004 csra6640 qca4020 wsa8815_firmware wcn3999_firmware wcn3998_firmware wcn3980_firmware qca4010_firmware Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.34%

||

7 Day CHG~0.00%

Published-19 Oct, 2022 | 00:00

Updated-09 May, 2025 | 15:15

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3660 wcd9340_firmware sd210_firmware mdm9250 qcs6125_firmware sw5100p qcn6024 sd439 wcd9385_firmware wcn3988_firmware mdm9615 qca6431_firmware mdm9215 qcs610 mdm9230_firmware qam8295p_firmware qca6174 qcs6125 sd210 msm8976sg_firmware mdm8615m mdm9206_firmware apq8096au_firmware sd460 sd_8_gen1_5g_firmware apq8052 wcd9385 wcn7850_firmware sdx55m_firmware mdm8215m qrb5165n_firmware sd845 wcd9340 mdm9615m qcn7606_firmware mdm9630_firmware sd730_firmware mdm9150_firmware apq8056 wcn7850 sdx12_firmware mdm9250_firmware sw5100p_firmware sdx55m sdx65_firmware apq8009w_firmware wcn6851_firmware sa415m wcd9326 sdm429w mdm9628 sa8155 qca6574_firmware sd678_firmware qca6595au mdm8215m_firmware wcn3680b sa8150p wcn3680_firmware wcn3660b qca8337_firmware wcd9330_firmware wcn7851_firmware msm8208_firmware wsa8835 wcn3990_firmware ar8035_firmware apq8076 csra6640 sdm429w_firmware qca6175a qca6320_firmware sa8195p sa6150p qca9367 sm4125 sd865_5g qca6421_firmware qca6574a sd429_firmware qca6310_firmware sd_675 wcn3990 sdxr2_5g wsa8810_firmware sd670 msm8952 wcd9335_firmware wcn3998_firmware wsa8815 qca6436_firmware sa6155p sa8155p sdx55 qca6335 sdx12 mdm9640 qca6554a_firmware qca6564a sdx65 msm8608 qcn7605 qca6564a_firmware wcd9306 wcn3660b_firmware wcd9360 qca6391_firmware sa4155p qca6696_firmware wcn6855 sd710 mdm8215_firmware qca6554a qca4020_firmware csrb31024_firmware msm8956 sa4150p sd662_firmware csra6640_firmware sd820 sd845_firmware sdx24 sd660 qca6174a sd450 sdxr1_firmware msm8976sg qet4101 qsw8573 sd205 sm8475 mdm9615m_firmware msm8909w_firmware qca8081 aqt1000_firmware msm8208 wcd9371_firmware msm8108_firmware qcs605 apq8009w qca9377 wcn3620 wcn7851 qcn6024_firmware sa8155_firmware mdm8215 qca9379_firmware wcn6740 qca6431 sd730 msm8909w sa8145p_firmware sdx24_firmware qca6174_firmware wcn3910_firmware wcn3910 wcd9380_firmware wcn6740_firmware msm8996au_firmware apq8017_firmware wcd9370 apq8096au sd678 qca6574au sa6145p qcc5100_firmware wsa8815_firmware wcn3950_firmware sdxr2_5g_firmware sd870 sw5100 qca9377_firmware qca8081_firmware mdm9310_firmware msm8953_firmware qca6426_firmware sa8150p_firmware sd870_firmware qcs405_firmware wcn3950 mdm9607 wcd9380 mdm9150 qcs610_firmware qca9379 qcn9024_firmware wcd9326_firmware qcm6125_firmware qcn7606 sm4125_firmware apq8053_firmware qrb5165_firmware wcn3615 sd662 sd675 qca6420_firmware qrb5165 sa515m_firmware qcm6125 sd820_firmware wcd9341 msm8917_firmware wcd9306_firmware mdm9650_firmware qca6426 qca6335_firmware wsa8835_firmware sd821_firmware apq8056_firmware qca6390 sdw2500 sd205_firmware ar6003 wcn3980 qca6696 wcn6856_firmware qcx315_firmware wcd9360_firmware mdm9650 qcx315 sdx20m sa6150p_firmware qcs605_firmware wcn3620_firmware csrb31024 qcc5100 sa8295p sdxr1 mdm9615_firmware sa4155p_firmware qca6420 qca6174a_firmware qca8337 wcn3999 apq8017 sdw2500_firmware sd_675_firmware qca6430 qualcomm215_firmware qet4101_firmware wsa8810 sd675_firmware sd865_5g_firmware wcd9341_firmware wcn6850 ar8031 wcn3660_firmware mdm9628_firmware msm8976_firmware mdm9630 qrb5165m_firmware qca6574a_firmware wcn3999_firmware sdx20_firmware qca6595au_firmware sd460_firmware sd439_firmware sda429w qca6175a_firmware apq8064au sa8295p_firmware sw5100_firmware wcn3610 msm8953 sd632 qca6390_firmware qca6564au_firmware qca6574 wcn3610_firmware wcn3998 wcd9335 mdm8615m_firmware qca6430_firmware wcd9330 sa415m_firmware qcs405 qca6436 aqt1000 qca6421 qcn7605_firmware msm8209 apq8076_firmware sa515m sd855_firmware sdx50m sd855 wcn6856 qcn9024 qcs410_firmware qam8295p mdm9206 qca6584 wcn6855_firmware msm8108 qrb5165n sd429 mdm9607_firmware msm8956_firmware sa4150p_firmware apq8009 sd835_firmware wcd9371 msm8917 mdm9215_firmware qcs410 qca4020 qrb5165m apq8009_firmware sd632_firmware qca6391 qca6595 csra6620 sd835 sd710_firmware wcn3615_firmware sd670_firmware sa6155p_firmware qca6584au qca6584au_firmware msm8209_firmware sa8195p_firmware qca6574au_firmware wcd9370_firmware sa8155p_firmware mdm9330 wcn3680 wcd9375 qca6310 sdx20m_firmware ar6003_firmware apq8064au_firmware apq8053 apq8052_firmware qsw8573_firmware ar8035 sda429w_firmware sd821 wsa8830 mdm9310 msm8952_firmware qca6564 msm8996au wcd9375_firmware wcn3980_firmware msm8608_firmware qca6320 qca6595_firmware wcn6850_firmware sd660_firmware sdx20 wcn6851 qca6564_firmware msm8976 mdm9330_firmware qca9367_firmware ar8031_firmware mdm9230 wcn3988 wsa8830_firmware qca6564au wcn3680b_firmware sdx55_firmware csra6620_firmware qualcomm215 sa8145p qca6584_firmware sd450_firmware sdx50m_firmware sa6145p_firmware mdm9640_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.52%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to the compromise of secure memory.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer