CVE-2019-14000 | ByteOS Network

Vulnerability Details :

CVE-2019-14000

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-05 Mar, 2020 | 08:56

Updated At-05 Aug, 2024 | 00:05

Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory corruption and potential information leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCS404, QCS405, QCS605, QM215, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:05 Mar, 2020 | 08:56

Updated At:05 Aug, 2024 | 00:05

▼CVE Numbering Authority (CNA)

Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory corruption and potential information leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCS404, QCS405, QCS605, QM215, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Versions

Affected

APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCS404, QCS405, QCS605, QM215, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Problem Types

Type	CWE ID	Description
text	N/A	Information Exposure Issue in Qualcomm IPC

Type: text

CWE ID: N/A

Description: Information Exposure Issue in Qualcomm IPC

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:05 Mar, 2020 | 09:15

Updated At:24 Aug, 2020 | 17:37

Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory corruption and potential information leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCS404, QCS405, QCS605, QM215, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Qualcomm Technologies, Inc.

>>apq8009_firmware>>-

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8017_firmware>>-

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8053_firmware>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8096_firmware>>-

cpe:2.3:o:qualcomm:apq8096_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8096au_firmware>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8098_firmware>>-

cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq6018_firmware>>-

cpe:2.3:o:qualcomm:ipq6018_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq6018:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq8074_firmware>>-

cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9150_firmware>>-

cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9150:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9205_firmware>>-

cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9640_firmware>>-

cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9645_firmware>>-

cpe:2.3:o:qualcomm:mdm9645_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9645:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9655_firmware>>-

cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8905_firmware>>-

cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8905:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8917_firmware>>-

cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8920_firmware>>-

cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8920:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8937_firmware>>-

cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8937:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8940_firmware>>-

cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8940:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8953_firmware>>-

cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996_firmware>>-

cpe:2.3:o:qualcomm:msm8996_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996au_firmware>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8998:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8998_firmware>>-

cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2020-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

2155Records found

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.01% / 2.11%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:17

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper check In the WMA API for the inputs received from the firmware and then fills the same to the host structure will lead to OOB write.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.08%

||

7 Day CHG~0.00%

Published-20 Sep, 2018 | 13:00

Updated-05 Aug, 2024 | 08:01

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, lack of input validation in WLANWMI command handlers can lead to integer & heap overflows.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.55%

||

7 Day CHG~0.00%

Published-04 Sep, 2018 | 16:00

Updated-05 Aug, 2024 | 08:01

In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of partition via a non zero check, there could be possibility where the 'TotalPart' could cross 'GptHeader->MaxPtCnt' and which could result in OOB write in patching GPT.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-682

Incorrect Calculation

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 6.80%

||

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-05 Feb, 2025 | 18:05

Use After Free in Audio

Memory corruption in Audio when SSR event is triggered after music playback is stopped.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware wsa8830 wcd9380_firmware sa6150p_firmware ssg2125p sa8145p_firmware sxr2230p_firmware sw5100p qam8650p sd865_5g sg8275p_firmware snapdragon_w5\+_gen_1_wearable_platform wcn785x-5 qca6595 qam8775p wsa8840 wsa8835 qca6574 sxr1230p_firmware wcn3950_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wcd9380 sa8150p_firmware qca6595au_firmware ssg2125p_firmware qca6574a ssg2115p wcn685x-5_firmware sxr1230p wcn685x-1 sg8275p snapdragon_8_gen_2_mobile_platform wcn6750 wcn3980 wcd9385_firmware qam8295p wcn3950 wsa8845 qcm4325_firmware qca6574_firmware wsa8815 sxr2230p wsa8845_firmware qam8295p_firmware snapdragon_xr2_5g_platform_firmware qca6574a_firmware qca6574au_firmware qca6595au sm6225-ad wsa8845h_firmware wcn785x-5_firmware wcn3980_firmware sa8295p snapdragon_w5\+_gen_1_wearable_platform_firmware sm8475_firmware sa6155p_firmware sm6225 snapdragon_xr2_5g_platform sm6225-ad_firmware wsa8840_firmware qca6698aq sa4155p_firmware wsa8832_firmware wcn685x-5 sm6225_firmware wcn3988_firmware qca6797aq_firmware wcn785x-1_firmware qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware snapdragon_8\+_gen_2_mobile_platform sw5100 wsa8810 wsa8845h wsa8832 wcd9395_firmware sa8255p_firmware sa6155p sw5100p_firmware sm8550p qca6698aq_firmware sa6145p wcn685x-1_firmware wcd9385 qam8650p_firmware qam8775p_firmware sa8255p qca6696_firmware qca6595_firmware sa8145p wcd9395 qca6696 qca6797aq sa4150p_firmware wcn6750_firmware sa8150p sm8550p_firmware sa6150p wcd9390 wcd9390_firmware sa8155p wsa8830_firmware sd865_5g_firmware wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware ssg2115p_firmware sw5100_firmware sm8475 sa8295p_firmware qam8255p sa4155p sa4150p snapdragon_8_gen_2_mobile_platform_firmware wcn785x-1 qcm4325 Snapdragon

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.88%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:46

Updated-11 Aug, 2025 | 15:06

Time-of-check Time-of-use (TOCTOU) Race Condition in Trusted Execution Environment

Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware wsa8845_firmware wsa8832 wsa8840 qam8295p_firmware qca6595 qcs8550_firmware qca8081_firmware ar8035_firmware qca6696 qrb5165m qca6698aq_firmware wcd9385 qcn9012 wcd9395_firmware qcn6024 snapdragon_8_gen_2_mobile_platform qcs7230_firmware sxr1230p_firmware wcd9390_firmware sg8275p wsa8832_firmware qca8337_firmware snapdragon_x70_modem-rf_system_firmware qca8337 wcd9395 ssg2125p sg8275p_firmware qca6574au_firmware snapdragon_8cx_gen_3_compute_platform_firmware qam8295p qcs8250_firmware qca6574au wcd9390 sa8540p_firmware flight_rb5_5g_platform video_collaboration_vc5_platform wsa8845h_firmware sm8550p_firmware qcm8550 sa9000p_firmware snapdragon_x65_5g_modem-rf_system qcn9024 snapdragon_x65_5g_modem-rf_system_firmware qrb5165n_firmware wsa8835 wsa8840_firmware sxr2230p_firmware qca6391_firmware qcn9011 snapdragon_ar2_gen_1_platform sa8295p_firmware qca6696_firmware qcn9024_firmware snapdragon_8cx_gen_3_compute_platform qcn6024_firmware wsa8845h wcd9380_firmware qca8081 wsa8830 sm8550p ssg2115p qcn9011_firmware flight_rb5_5g_platform_firmware ar8035 sa8540p qrb5165m_firmware qca6595_firmware qcs7230 fastconnect_6900 fastconnect_7800_firmware robotics_rb5_platform qca6391 snapdragon_x70_modem-rf_system qcn9012_firmware qca6698aq ssg2125p_firmware wcd9385_firmware qrb5165n fastconnect_6900_firmware sa8295p snapdragon_8_gen_2_mobile_platform_firmware robotics_rb5_platform_firmware wcd9380 qcs8550 sxr2230p fastconnect_7800 snapdragon_ar2_gen_1_platform_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 wsa8835_firmware sxr1230p ssg2115p_firmware video_collaboration_vc5_platform_firmware qcs8250 sa9000p snapdragon_8\+_gen_2_mobile_platform wsa8830_firmware Snapdragon

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.57%

||

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Signed-to-unsigned conversion error in Audio

Memory corruption while parsing the ADSP response command.

Vendor-Qualcomm Technologies, Inc.

Product-qcs410_firmware sa6150p_firmware qca6595 qcs610_firmware wcd9335 wcd9370 qca6696 qrb5165m wcd9341_firmware sa4150p_firmware sd888_firmware wcn6740_firmware sa4150p sm7325-af_firmware wsa8815_firmware sm7325-ae_firmware sa8195p_firmware sm7325 qcm6490_firmware qca6574au_firmware sm8350-ac_firmware qam8295p wcd9341 qca6574au flight_rb5_5g_platform wcn3950 wsa8810_firmware csra6640 apq5053-aa_firmware snapdragon_7c\+_gen_3_compute sm7350-ab_firmware wcn3991 sa8295p_firmware sm6375_firmware apq5053-aa sa4155p_firmware video_collaboration_vc1_platform_firmware sa4155p sm8350 sd888 qcn9011_firmware sm6375 wcn685x-5 wcn6740 qca6595_firmware video_collaboration_vc1_platform wcd9385_firmware wcd9380 sa6145p_firmware sa8150p sa6155p sm7350-ab sm8350_firmware wsa8810 sm4350-ac sm8350-ac video_collaboration_vc3_platform qca6595au sm7315_firmware sm7325_firmware sa6155p_firmware wcn3991_firmware qam8295p_firmware sm7315 qca6698aq_firmware wcd9385 qcn9012 snapdragon_7c\+_gen_3_compute_firmware wcn6750 wcn6750_firmware wcd9370_firmware sm7325-ae sa8195p csra6640_firmware sm7325p qcm6490 wcn3998 wcn3998_firmware wcn3988 qcs6490_firmware wcd9335_firmware wcn3980_firmware qrb5165n_firmware sm7325-af wsa8835 qca6595au_firmware qca6391_firmware qcn9011 qca6696_firmware wcd9380_firmware sa6150p qcs410 sa8155p_firmware csra6620 wsa8815 sa8155p sm4375 wsa8830 sm4375_firmware sa6145p flight_rb5_5g_platform_firmware qrb5165m_firmware wcd9375_firmware robotics_rb5_platform qca6391 qcn9012_firmware qca6698aq wcn3950_firmware qrb5165n csra6620_firmware sa8295p robotics_rb5_platform_firmware wcn685x-1 sa8145p_firmware sm7325p_firmware wcd9375 wcn685x-5_firmware sa8150p_firmware wcn3988_firmware video_collaboration_vc3_platform_firmware sa8145p sm4350-ac_firmware wsa8835_firmware qcs6490 wcn3980 wsa8830_firmware wcn685x-1_firmware qcs610 Snapdragon

CWE ID-CWE-195

Signed to Unsigned Conversion Error

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.49%

||

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 08:17

A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD 845, SD 850, SDA660

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.50%

||

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Memory Corruption in Core Platform while printing the response buffer in log.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_8cx_gen3_firmware sa6150p_firmware qca8337 qca6431_firmware sdx65 wcn3950_firmware ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 qcs605_firmware sd_675_firmware wcn3998 qam8295p sd_8cx_gen2_firmware qcn6024_firmware qca8386_firmware wcn3950 sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware qca6420 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware qca6698aq sa4155p_firmware sa8155_firmware qca6430 sdx65m wcd9340 qcn6132 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qcn6122 wcd9341 qca6431 qca6696_firmware sd870_firmware ipq9008_firmware sd_8cx sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd660_firmware wcn7850_firmware sa8195p_firmware sa8295p_firmware wcn6750_firmware ipq5018_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p qca8084 qca6564au sdx55m_firmware wcn6856_firmware ipq9008 sd670_firmware qca6574 wcd9380 sdx50m_firmware sxr1230p sdx24_firmware qca6430_firmware qcn9012_firmware qcn9274_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 qca6426_firmware qcn9024 ipq9574_firmware wcn3980_firmware sdx55m sa8295p qca6421_firmware wcn6740_firmware sd678_firmware qrb5165 wcn6851_firmware qcs603 sd670 qca6564a_firmware qcn9024_firmware sdx57m sd870 wsa8832 wcn6855 sa8540p sa6145p qca6595_firmware sa8145p qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sdx70m ssg2115p_firmware qcs8155_firmware sa4155p ar8035_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sa8145p_firmware sxr2230p_firmware fsm10056 qca8082 qcn9072 qca8386 sd765g_firmware qca6420_firmware qca6390_firmware wcd9370 sd675_firmware ssg2115p qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware ipq5018 qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware qam8295p_firmware qcn9011_firmware qca8082_firmware sa8155 sa9000p_firmware sdx55_firmware qca6595au qcn6023_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware sd778g sa6155p_firmware qca6310 qcn9274 qcs8155 wcn7851 qcs6490 sdxr2_5g qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 sdx65m_firmware qca6174a_firmware wcd9385 qca8085_firmware qcs6490_firmware sd_8cx_gen3 sdx70m_firmware ar8035 qca6390 wcd9375 aqt1000 qcn9100_firmware ipq5010_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qca6564a sa4150p wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 sxr1230p_firmware sa8540p_firmware sd_8_gen1_5g sd888_5g ssg2125p_firmware qca6574a wcn6855_firmware qca6174a sm7325p qcn6132_firmware qca6310_firmware wcn6750 sa9000p qca6574_firmware sd855 sm7325p_firmware sxr2230p sdx57m_firmware sd765 qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware sm7315 qca6391 aqt1000_firmware qcn9100 sdx65_firmware qcm6490_firmware sdx50m wsa8832_firmware qcn9070_firmware qcn9011 qca6574au sa8155p_firmware ipq9574 wcd9341_firmware wsa8810 wcn6856 qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sa6150p qcn9022_firmware qcn6024 qcn9022 sd845 qcn9072_firmware sm7250p qcn9074_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.28%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WMA handler carries a fixed event data from the firmware to the host . If the length and anqp length from this event data exceeds the max length, an OOB write would happen.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.28%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a message from firmware in WLAN handler, a buffer overwrite can occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.54%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-07 Mar, 2025 | 11:47

Improper Input Validation in Automotive OS Platform

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.54%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-06 Mar, 2025 | 17:52

Improper Input Validation in Automotive OS Platform

Memory corruption may occur during communication between primary and guest VM.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.38%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-11 Aug, 2025 | 15:06

Improper Input Validation in Automotive

Memory corruption while triggering commands in the PlayReady Trusted application.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware sdm429w_firmware qcm8550_firmware wcn6650 sd865_5g sa6150p_firmware qcs8155_firmware sxr1120 sm8735 qca6595 wcd9335 wcd9370 qca8081_firmware snapdragon_670_mobile qca6696 qam8620p_firmware wcn7880_firmware wcd9340_firmware sa8530p wcd9341_firmware sxr2330p_firmware wcd9395_firmware wcn7881_firmware wcn7750 wcn6450 qcc710_firmware qca6426 fastconnect_6700 sa4150p wsa8832_firmware snapdragon_wear_4100\+_firmware qca8337 qdu1110 qca6426_firmware wcd9395 qca6574au_firmware snapdragon_x72_5g_modem-rf qca6564_firmware qam8295p wcd9341 qca6574au wcd9390 snapdragon_888\+_5g_mobile_firmware sa8620p_firmware wsa8810_firmware wsa8845h_firmware sa9000p_firmware srv1h sm8650q_firmware wcn3660b_firmware qcs9100 fastconnect_6800_firmware qcs5430 wcn7860 qcm5430 qcm5430_firmware sa4155p snapdragon_712_mobile_firmware sa8770p qcc710 snapdragon_x32_5g_modem-rf_firmware snapdragon_xr2_5g_firmware snapdragon_xr1_firmware sa8540p sxr1120_firmware qsm8250_firmware qsm8350_firmware snapdragon_wear_4100\+fastconnect_6900 qru1032_firmware qep8111 sm8635 sa7255p qfw7114 wcd9385_firmware qca6421 qam8255p_firmware sa8155_firmware snapdragon_x65_5g_modem-rf wsa8845 sa6155p qca6421_firmware qca6564au_firmware snapdragon_429_mobile_firmware wsa8810 qam8650p video_collaboration_vc5_platform_firmware sa9000p qdu1000_firmware qsm8250 srv1h_firmware snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile qdu1010 wcd9326_firmware sa6155p_firmware wsa8840 snapdragon_ar1_gen_1 srv1m_firmware qcs8550_firmware snapdragon_x35_5g_modem-rf_firmware qdu1210_firmware snapdragon_x55_5g_modem-rf qfw7124_firmware qca6436_firmware sm8750p qcn9012 snapdragon_x55_5g_modem-rf_firmware sm8635p snapdragon_x62_5g_modem-rf_firmware qmp1000 wcd9370_firmware snapdragon_712_mobile qdu1110_firmware qdu1000 wcn3660b qca6574a snapdragon_x72_5g_modem-rf_firmware sa7255p_firmware wcn3620_firmware qca6174a sa8195p wcd9340 qcs8250_firmware qdu1210 snapdragon_auto_5g_modem-rf_gen_2 sa8540p_firmware qcm6490 qcm8550 snapdragon_765_5g_mobile_firmware qcn9274 vision_intelligence_300_firmware sa8775p qca6574 qcn9011 sa8775p_firmware qamsrv1h wsa8845h sa6150p wcd9326 sm8650q sa8155p_firmware qca6564a sa8155p snapdragon_765g_5g_mobile_firmware wsa8830 sa6145p snapdragon_768g_5g_mobile_firmware sm7675_firmware sa8255p_firmware ar8035 sm7635_firmware qamsrv1m_firmware qca6564 wcn7750_firmware sa8650p_firmware qrb5165m_firmware wcn3620 wcn6450_firmware sa6155 srv1l_firmware qcs9100_firmware snapdragon_865\+_5g_mobile_firmware qcn6224 snapdragon_429_mobile qcs615 sa7775p_firmware qca6698aq sm7635 qrb5165n sa8530p_firmware fastconnect_6200 sd670 wcn3680b sa8145p_firmware wcd9378 qcs8155 sm8635p_firmware sm6650p_firmware qdx1011 sa8150p_firmware fastconnect_6700_firmware snapdragon_710_mobile_firmware video_collaboration_vc3_platform_firmware wcn3990 snapdragon_x75_5g_modem-rf_firmware sd670_firmware snapdragon_8_gen_3_mobile qcs6490 qcs8250 fastconnect_6200_firmware wsa8830_firmware qcn6224_firmware qca6431 qca6678aq_firmware wsa8845_firmware wsa8832 wcd9378_firmware srv1l sxr2130_firmware sm7675p srv1m qca6678aq snapdragon_x35_5g_modem-rf ar8035_firmware wcn7860_firmware qrb5165m sc8380xp sa4150p_firmware snapdragon_x62_5g_modem-rf qca6564au sc8280xp-abbb wsa8815_firmware sa8195p_firmware qca8337_firmware qcm6490_firmware sm7250p_firmware qru1032 vision_intelligence_400_firmware flight_rb5_5g snapdragon_870_5g_mobile_firmware sm8750 qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware sa8295p_firmware snapdragon_870_5g_mobile sa4155p_firmware sm7250p sa8155 qca6584au qcn6274_firmware wcn6755_firmware qcn9011_firmware qru1062_firmware wcn6650_firmware snapdragon_768g_5g_mobile sc8380xp_firmware qru1062 snapdragon_8_gen_3_mobile_firmware fastconnect_6800 qfw7114_firmware qcs7230 qca6595_firmware fastconnect_7800_firmware snapdragon_865_5g_mobile_firmware sm8635_firmware fastconnect_6900_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p sa6155_firmware qmp1000_firmware snapdragon_xr2_5g wcn7880 sa8150p wcn6755 sxr2330p wcn7881 sm6650 video_collaboration_vc3_platform sm6650p qca6688aq qam8295p_firmware qca6431_firmware wcn3990_firmware qca6698aq_firmware qca6564a_firmware wcd9385 snapdragon_888\+_5g_mobile qsm8350 snapdragon_8_gen_1_mobile sa8255p qcs7230_firmware wcd9390_firmware snapdragon_865\+_5g_mobile qep8111_firmware qcs615_firmware snapdragon_765_5g_mobile qdx1011_firmware sdx55_firmware sm8750_firmware flight_rb5_5g_firmware qru1052 sxr2130 snapdragon_x65_5g_modem-rf_firmware qamsrv1m robotics_rb5 qca6174a_firmware wcn7861_firmware wcn7861 qam8650p_firmware video_collaboration_vc5_platform snapdragon_670_mobile_firmware qcs6490_firmware sm6650_firmware sdm429w qam8620p wcd9335_firmware qrb5165n_firmware qca6436 wcn3980_firmware qca6584au_firmware wsa8835 wsa8840_firmware qca6391_firmware qcn6274 qfw7124 qca6595au_firmware qdu1010_firmware qcs8300_firmware qca6696_firmware qcs8300 wcd9380_firmware qca6574_firmware qca8081 wsa8815 sd_8_gen1_5g qam8775p qca6797aq snapdragon_x75_5g_modem-rf sa8620p sdx55 qca6574a_firmware snapdragon_865_5g_mobile sd_8_gen1_5g_firmware wcd9375_firmware sa7775p qca6391 snapdragon_ar1_gen_1_firmware snapdragon_710_mobile qcn9274_firmware qcn9012_firmware qcs5430_firmware snapdragon_x32_5g_modem-rf qru1052_firmware sa8770p_firmware sa8295p qcs8550 sm8735_firmware sc8280xp-abbb_firmware fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware sm8750p_firmware snapdragon_xr1 wcd9375 qca6688aq_firmware vision_intelligence_300 snapdragon_765g_5g_mobile qamsrv1h_firmware sm7675 sa8145p wsa8835_firmware vision_intelligence_400 wcn3980 sm7675p_firmware qdx1010 wcn3680b_firmware snapdragon_8_gen_1_mobile_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.38%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:12

Improper Input Validation in Camera Driver

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.02% / 2.62%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:31

Updated-09 May, 2025 | 19:17

Out-of-bounds Write in Camera Driver

Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 5.89%

||

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-28 Feb, 2025 | 06:09

Integer Overflow to Buffer Overflow in Automotive OS Platform

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.

Vendor-Qualcomm Technologies, Inc.

Product-sa8770p_firmware sa7775p qca6564a qam8620p qam8255p_firmware sa8540p sa8155p qam8255p srv1h sa7255p qca6688aq_firmware srv1h_firmware snapdragon_820_automotive_firmware qca6595au_firmware sa8145p_firmware qam8650p_firmware sa8155_firmware srv1l msm8996au_firmware sa8255p_firmware sa8650p_firmware sa8540p_firmware sa6155_firmware qca6595au sa7255p_firmware sa6145p sa8295p_firmware qca6696 sa8295p qca6584au_firmware sa6150p qca6574au_firmware srv1m_firmware sa8155 qca6584au sa6150p_firmware qca6595 sa8155p_firmware qca6595_firmware qca6564au srv1l_firmware msm8996au qamsrv1h sa8255p sa6155 qca6574a qamsrv1m_firmware qam8775p_firmware qam8295p_firmware sa8620p_firmware sa8650p qam8650p sa8770p sa8195p_firmware qca6574a_firmware sa8620p sa8145p qca6564a_firmware sa8150p_firmware qca6696_firmware sa8775p sa6155p sa9000p_firmware sa8150p qca6698aq qamsrv1h_firmware sa6155p_firmware srv1m qam8775p sa7775p_firmware qam8295p snapdragon_820_automotive qam8620p_firmware sa9000p qca6564au_firmware sa8775p_firmware qca6698aq_firmware qca6574au sa6145p_firmware sa8195p qamsrv1m qca6688aq Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.38%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:14

Improper Input Validation in Camera Driver

Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.66%

||

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:28

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800 wcd9380_firmware wsa8830 sdm429w wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware qcc2073 wsa8835 wsa8840 sdm429w_firmware fastconnect_6700_firmware snapdragon_7c\+_gen_3_compute wcd9380 fastconnect_7800_firmware wsa8845h fastconnect_6700 snapdragon_8cx_gen_3_compute_platform wcd9385 qcc2076_firmware wcd9385_firmware wsa8845 qcc2073_firmware wcn3660b wsa8830_firmware qcc2076 wsa8845_firmware wcn3620_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3660b_firmware wsa8835_firmware sc8380xp snapdragon_429_mobile_platform_firmware wcn3620 wsa8845h_firmware snapdragon_429_mobile_platform snapdragon_8cx_gen_3_compute_platform_firmware Snapdragon wcd9380_firmware qcc2076_firmware wsa8840_firmware wcd9385_firmware fastconnect_6900_firmware qcc2073_firmware sc8380xp_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wsa8845h_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.66%

||

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:29

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800 qca2062_firmware qca2066 wcd9380_firmware sdm429w wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware wsa8840 sdm429w_firmware fastconnect_6700_firmware snapdragon_7c\+_gen_3_compute wcd9380 fastconnect_7800_firmware wsa8845h fastconnect_6700 qca2064_firmware qca2062 wcd9385 qca2066_firmware qca2065_firmware qcc2076_firmware wcd9385_firmware wsa8845 snapdragon_429_mobile_platform qcc2073_firmware qca2064 wcn3660b qca2065 qcc2076 wsa8845_firmware wcn3620_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3660b_firmware sc8380xp snapdragon_429_mobile_platform_firmware wcn3620 wsa8845h_firmware qcc2073 Snapdragon qca2062_firmware wcd9380_firmware qca2066_firmware qca2065_firmware qcc2076_firmware wsa8840_firmware wcd9385_firmware fastconnect_6900_firmware qcc2073_firmware sc8380xp_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wsa8845h_firmware qca2064_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.66%

||

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:28

Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware qca2066 wsa8830 wcd9380_firmware qca1062_firmware sdm429w snapdragon_8cx_gen_2_5g_compute_platform fastconnect_6800 snapdragon_8c_compute_platform wsa8840 wsa8835 sdm429w_firmware snapdragon_7c\+_gen_3_compute wcd9380 qca6420_firmware qca6595au_firmware fastconnect_6700 video_collaboration_vc3_platform qca2064_firmware qca2062 qca6174_firmware wcd9370 sc8180x qcm5430_firmware qca6174a video_collaboration_vc3_platform_firmware qca6174 qca9377 qca6430_firmware qcc2076_firmware qcn7605 wcd9385_firmware wsa8845 qcc2073_firmware fastconnect_6200 wcd9340_firmware wcn3660b wsa8815 qca2065 wsa8845_firmware qca1064 wcn3660b_firmware snapdragon_429_mobile_platform_firmware sc8380xp fastconnect_6200_firmware sdx55_firmware qca6595au wcd9375_firmware wsa8845h_firmware qca6391 snapdragon_429_mobile_platform qca6420 snapdragon_8cx_gen_3_compute_platform_firmware fastconnect_7800 aqt1000_firmware qca2062_firmware snapdragon_8cx_compute_platform_firmware qcs6490 qcm6490_firmware wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware sc8180x_firmware qca6164_firmware qca6430 fastconnect_6700_firmware snapdragon_8cx_compute_platform wcd9340 wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware wsa8810 wsa8845h qcn7605_firmware snapdragon_8cx_gen_3_compute_platform qcm5430 snapdragon_8c_compute_platform_firmware qcs5430 qca6174a_firmware wcd9385 wcd9341 qca2066_firmware qca2065_firmware qcs6490_firmware qca1064_firmware qca6164 qca1062 qcs5430_firmware qca6391_firmware wcd9375 qca2064 aqt1000 wcd9370_firmware sdx55 wsa8830_firmware qcc2076 wcn3620_firmware snapdragon_7c\+_gen_3_compute_firmware qcm6490 wsa8815_firmware wsa8835_firmware wcn3620 snapdragon_8cx_gen_2_5g_compute_platform_firmware fastconnect_6800_firmware qcn7606_firmware qcc2073 qcn7606 Snapdragon aqt1000_firmware qca2062_firmware qca9377_firmware wcd9380_firmware qca1062_firmware qcm6490_firmware wsa8840_firmware fastconnect_6900_firmware sc8380xp_firmware qca6164_firmware sdm429w_firmware fastconnect_6700_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware qca6420_firmware qca6595au_firmware qcn7605_firmware qca2064_firmware qca6174_firmware qcm5430_firmware qca6174a_firmware qca2066_firmware qca2065_firmware qca6430_firmware qca1064_firmware qcc2076_firmware qcs5430_firmware qcs6490_firmware qualcomm_video_collaboration_vc3_platform_firmware qca6391_firmware wcd9385_firmware qcc2073_firmware wcd9370_firmware wcd9340_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware wsa8815_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_6200_firmware wcd9375_firmware wsa8845h_firmware fastconnect_6800_firmware qcn7606_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.04% / 10.67%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:58

Improper Input Validation in Computer Vision

Memory corruption while processing frame packets.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware wsa8840 snapdragon_8_gen_3_mobile_firmware wsa8845_firmware wsa8845h_firmware wsa8845 snapdragon_8_gen_3_mobile wcd9395_firmware wcd9390 wsa8840_firmware wsa8845h wcd9395 fastconnect_7800 wcd9390_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 26.57%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 14:49

Stack based buffer overflow in Core

Memory corruption in core due to stack-based buffer overflow

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_8cx_gen3_firmware sa6150p_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 qca4024_firmware wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sa415m wcn3998 wcd9371_firmware qam8295p wcn3950 qcn6024_firmware sd720g sm4125 sd_8cx_gen2_firmware qca8386_firmware qca8084_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware sm7315_firmware qca6574au_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 sd680_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware sa4155p_firmware sa8155_firmware qca4004_firmware ipq6010 sd662_firmware qcs405 qca6430 wcd9306_firmware wcd9340 sd765g sw5100 fsm10056_firmware sd680 qca6436 wcn6851 sa6155p qcs603_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g ipq9008_firmware wcn3910_firmware sxr2150p_firmware sd_8cx sa8150p qca4004 wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware sa8195p_firmware qcn5121 qcn5022_firmware qcn7606_firmware wcn6750_firmware sa8295p_firmware wcn3991 qca8337_firmware wcd9380_firmware sw5100p qca8084 qca6564au sdx55m_firmware wcn6856_firmware ipq9008 sd670_firmware qca6574 csr8811_firmware wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware sdx24_firmware qca8072_firmware qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6320 qca6426_firmware qca9984 ipq6028 sd835 qcn9024 ipq9574_firmware wcn3980_firmware sd730 sdx55m qcc5100_firmware sa8295p qca6421_firmware wcn6740_firmware sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 sd670 qcn9024_firmware qca6564a_firmware qcm4290_firmware sd870 wcn6855 qcn5121_firmware sw5100p_firmware sa8540p qcs610_firmware qsm8250 sa6145p ipq6018 sdxr1 ar8031 qca6595_firmware qcs405_firmware sa8145p mdm9205_firmware qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware sd780g_firmware sdx55 sd888_firmware qcn5021_firmware sa8155p csra6640 sd675 qcs8155_firmware sa4155p sxr2150p ar8035_firmware qsm8250_firmware qcn7606 qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcn9070 sa8145p_firmware qcs2290_firmware fsm10056 sd7c_firmware csrb31024 csra6620 qca8082 qcn9072 qca8386 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware qcn5152_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware sd662 qam8295p_firmware qcn9011_firmware sa8155 qca8082_firmware qca6320_firmware sa9000p_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n wcd9306 sd778g qca6564au_firmware sa6155p_firmware qca6310 qcn9274 qcs8155 sa515m_firmware qcs6490 sdxr2_5g qcn5052 sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sm6250 sa8195p sd712_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 qca6174a_firmware qcs4290_firmware wcd9385 qca8085_firmware qcs6490_firmware sd_8cx_gen3 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 csr8811 sm6250_firmware wsa8815_firmware sd888_5g_firmware qcm6490 wcn6850_firmware wsa8835_firmware qcx315 qca6564a sa4150p qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 qcc5100 sdx24 qcn9012 sd888 wsa8835 qcx315_firmware sa8540p_firmware sd888_5g sm6250p qca8075_firmware sc8180x qca6574a ipq6005_firmware wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 mdm9205 sa9000p qca6574_firmware sa515m sd855 sm4125_firmware sm7325p_firmware sd765 qca6574a_firmware qcn5021 qcn5152 sd768g_firmware qrb5165m sd850_firmware sm7315 sd460 qca6391 sdxr1_firmware ipq6005 aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m qcn9070_firmware ipq6028_firmware qcn9011 sc8180x_firmware qca6574au sd710 sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware wsa8810 mdm9150 wcn6856 qcn5022 sd835_firmware qca6564_firmware sd768g ipq6010_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 sd845 qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware sd850 Snapdragon

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-4.31% / 88.44%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 19:38

Stack based buffer overflow in Core

Memory corruption due to stack-based buffer overflow in Core

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_8cx_gen3_firmware mdm9640_firmware sa6150p_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 sd_455_firmware qcs605_firmware sd_675_firmware sa415m wcn3998 wcd9371_firmware qam8295p sd_8cx_gen2_firmware qcn6024_firmware sd720g wcn3950 sd_8_gen1_5g_firmware qsm8350_firmware sd710_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware qca6420 wcd9360 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware sa4155p_firmware sa8155_firmware qca4004_firmware qca6430 wcd9306_firmware wcd9340 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd750g sd870_firmware sxr2150p_firmware sd_8cx sa8150p qca4004 wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 sa8295p_firmware wcn6750_firmware mdm9640 wcn3991 qca8337_firmware wcd9380_firmware msm8996au_firmware qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware sdx24_firmware qca6430_firmware qcn9012_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c qca6320 mdm9650_firmware qca6426_firmware sd835 qcn9024 wcn3980_firmware sd730 sdx55m sa8295p qca6421_firmware wcn6740_firmware sd678_firmware apq8064au_firmware qrb5165 wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware qcn9024_firmware sd870 wcn6855 sa8540p qcs610_firmware qsm8250 sa6145p sdxr1 apq8096au qca6595_firmware sa8145p sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 qcs8155_firmware sa4155p sxr2150p ar8035_firmware qsm8250_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware fsm10056 sd7c_firmware csrb31024 mdm9650 sd_636 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware qam8295p_firmware qcn9011_firmware sa8155 qca6320_firmware sa9000p_firmware sdx55_firmware qca6595au sm7250p_firmware qca6436_firmware qrb5165n qca6564au_firmware qca6584au sa6155p_firmware qca6310 sd778g wcd9306 qcs8155 sa515m_firmware qcs6490 wcn7851 sdxr2_5g sdm630 sa415m_firmware wcn3988_firmware sa6145p_firmware qca6421 sd712_firmware sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware wcd9385 qcs6490_firmware sd_8cx_gen3 ar8035 qca6390 sd750g_firmware apq8064au aqt1000 wcd9375 sm6250_firmware sd820 qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qcx315 qca6564a sa4150p wcn3990 sd_675 sd780g sd865_5g qca6595 sdx24 qcn9012 sd888 wsa8835 qcx315_firmware msm8996au sa8540p_firmware sd888_5g sm6250p sc8180x qca6574a wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 mdm9205 sa515m qca6574_firmware sa9000p sd855 sm7325p_firmware sd765 qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware sm7315 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware csrb31024_firmware qcm6490_firmware sdx50m qcn9011 sc8180x_firmware sd_455 qca6574au sa8155p_firmware sd710 wcd9341_firmware wsa8810 mdm9150 wcn6856 sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sa6150p apq8096au_firmware qcn6024 sd845 sm7250p sd720g_firmware qcs410_firmware sd850 Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.54%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-07 Mar, 2025 | 11:47

Improper Input Validation in Automotive OS Platform

Memory corruption while processing input message passed from FE driver.

Vendor-Qualcomm Technologies, Inc.

Product-sa9000p qca6595au_firmware sa8650p_firmware qca6678aq sa8255p sa8155p_firmware qamsrv1m_firmware qcs9100 msm8996au msm8996au_firmware sa8620p_firmware sa8155p qam8650p_firmware qca6574a_firmware qca6595_firmware snapdragon_820_automotive_firmware qca6584au_firmware sa6155_firmware qam8620p srv1h qca6564au qca6564a_firmware sa7255p sa8620p qam8620p_firmware sa7255p_firmware qam8775p_firmware qam8295p_firmware qca6797aq qam8255p qca6688aq sa7775p_firmware sa8255p_firmware sa8155_firmware sa8770p_firmware sa8295p_firmware sa6150p qca6696_firmware qam8295p sa8150p qca6595au sa6150p_firmware qcs9100_firmware sa8295p sa8145p sa8150p_firmware srv1l sa6145p sa6155p_firmware qca6698aq_firmware qam8650p qam8775p qca6595 qca6688aq_firmware sa8770p srv1h_firmware sa8775p srv1m snapdragon_820_automotive sa8775p_firmware sa9000p_firmware qamsrv1m qca6564au_firmware qca6574au qca6797aq_firmware srv1m_firmware sa7775p sa8650p sa8540p_firmware sa8145p_firmware sa6155 sa8195p_firmware qca6698aq sa8195p qca6584au sa6155p qamsrv1h qca6564a qca6574au_firmware qamsrv1h_firmware qca6678aq_firmware qca6574a qam8255p_firmware sa6145p_firmware sa8155 srv1l_firmware qca6696 sa8540p Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.62%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:11

Out-of-bounds Write in SPS Applications

Memory corruption while reading secure file.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1011_firmware wcd9340_firmware qcs6125_firmware sa8775p snapdragon_765_5g_mobile qca6678aq wcd9385_firmware wcn3988_firmware snapdragon_x35_5g_modem-rf_firmware qca6431_firmware snapdragon_8cx_gen_3_compute_firmware qca6678aq_firmware qam8295p_firmware qcs6125 snapdragon_685_4g_mobile qca6698aq_firmware sa8775p_firmware snapdragon_ar1_gen_1 qfw7114_firmware wsa8832_firmware snapdragon_xr2\+_gen_1_firmware qcs615_firmware sd_8_gen1_5g_firmware qdx1010 snapdragon_x55_5g_modem-rf_firmware wcd9385 wcd9340 qsm8350 qcn7606_firmware snapdragon_855\+_mobile qca6797aq sd730_firmware qcs8550_firmware snapdragon_780g_5g_mobile_firmware sm6370_firmware fastconnect_6900 wcd9326 sm6650p snapdragon_865\+_5g_mobile_firmware qcn9274 snapdragon_4_gen_1_mobile fastconnect_6200_firmware qca6574_firmware sa8155 qca6595au sm7250p_firmware qfw7124_firmware snapdragon_675_mobile_firmware snapdragon_x50_5g_modem-rf sa8150p qca8337_firmware sxr1120_firmware video_collaboration_vc1_platform_firmware wsa8835 wcn3990_firmware snapdragon_888\+_5g_mobile_firmware ar8035_firmware csra6640 sg4150p_firmware snapdragon_680_4g_mobile_firmware sc8380xp_firmware sa9000p_firmware wcd9390 sa8195p sa6150p wcd9390_firmware snapdragon_xr1 sm4125 wcd9395 snapdragon_x55_5g_modem-rf snapdragon_730_mobile_firmware qcs5430_firmware sm8650q sd865_5g smart_audio_400_firmware qca6421_firmware qca6688aq qca6574a snapdragon_x65_5g_modem-rf snapdragon_x72_5g_modem-rf wcn3990 sxr2330p wsa8810_firmware sd670 qru1062_firmware wcd9335_firmware qru1052_firmware qdu1110_firmware qcs4290 wsa8815 fastconnect_6200 qca6436_firmware sm8650q_firmware sa6155p sa8155p sa7255p snapdragon_780g_5g_mobile sa8650p_firmware qcc710 qca6797aq_firmware fastconnect_7800 qca6391_firmware qcn6224 wcn7881_firmware qca6696_firmware snapdragon_888\+_5g_mobile sm6250 snapdragon_730_mobile snapdragon_765_5g_mobile_firmware sa9000p sa4150p csra6640_firmware sxr2330p_firmware srv1l wsa8845h qdx1011 snapdragon_860_mobile_firmware sa8540p_firmware srv1h_firmware snapdragon_888_5g_mobile_firmware qca6174a snapdragon_8cx_gen_3_compute snapdragon_778g\+_5g_mobile_firmware sm4635_firmware qcn6274 snapdragon_x62_5g_modem-rf_firmware sm8750p snapdragon_690_5g_mobile sa8530p sm7675 qca8081 aqt1000_firmware qcm2290_firmware wsa8840_firmware wsa8845 qru1032 qca6688aq_firmware sm4635 qam8620p qcs4290_firmware sa8155_firmware qru1052 wcn6740 snapdragon_678_mobile sa8255p_firmware qca6431 sd730 snapdragon_8_gen_1_mobile snapdragon_x50_5g_modem-rf_firmware snapdragon_778g_5g_mobile sa8145p_firmware snapdragon_720g_mobile_firmware wcn3910 wcn3910_firmware sd888 snapdragon_690_5g_mobile_firmware wcd9380_firmware sm8635p_firmware wcn6740_firmware qamsrv1h sa8650p snapdragon_695_5g_mobile_firmware qam8650p qdu1000 wcd9370 sa6155 qca6574au sa6145p snapdragon_710_mobile snapdragon_8_gen_1_mobile_firmware wsa8815_firmware snapdragon_768g_5g_mobile smart_audio_400 snapdragon_xr1_firmware wcn3950_firmware snapdragon_670_mobile_firmware snapdragon_782g_mobile_firmware sm7325p qca8081_firmware qcm5430_firmware sa8620p snapdragon_8_gen_3_mobile_firmware qmp1000 qca6426_firmware srv1h sa8150p_firmware wcn3950 wcd9395_firmware qcs2290_firmware sm8635 sa6155_firmware snapdragon_x75_5g_modem-rf wcd9380 qdu1210_firmware qcm4290_firmware wcn7860_firmware qcs8550 sa8770p sm8635_firmware wcn6650 qcm4290 wcd9326_firmware qdu1010_firmware qcm6125_firmware qcn7606 sm4125_firmware snapdragon_480\+_5g_mobile snapdragon_auto_5g_modem-rf_gen_2 qam8620p_firmware video_collaboration_vc1_platform qca6420_firmware sm7325p_firmware snapdragon_xr2\+_gen_1 snapdragon_662_mobile_firmware robotics_rb2_firmware wsa8840 fastconnect_7800_firmware qcm6125 sc8380xp wcd9341 snapdragon_x35_5g_modem-rf qcs5430 sm8635p qca6426 qdu1110 wsa8835_firmware sm8735 qru1032_firmware qcs2290 qam8255p_firmware snapdragon_730g_mobile wcn3980 qca6696 snapdragon_765g_5g_mobile snapdragon_685_4g_mobile_firmware sa6150p_firmware wcn6755 qcn6224_firmware sd_8_gen1_5g qcs8300_firmware qcs8300 sa8295p sm7675p_firmware qep8111 robotics_rb2 qca6420 qdu1210 qca8337 qca6174a_firmware fastconnect_6800_firmware sm7250p snapdragon_460_mobile_firmware sd888_firmware wcd9378 snapdragon_xr2_5g wcn6450 sm7675_firmware sm7675p wcn6650_firmware qca6698aq snapdragon_888_5g_mobile qca6430 snapdragon_680_4g_mobile sxr2130_firmware wcn7860 wsa8810 sd865_5g_firmware snapdragon_768g_5g_mobile_firmware qmp1000_firmware wcd9341_firmware snapdragon_x32_5g_modem-rf sa7775p qam8775p snapdragon_4_gen_1_mobile_firmware qca6574a_firmware qfw7124 qca6595au_firmware snapdragon_460_mobile qcm2290 wcn7750_firmware qcs9100 sa8530p_firmware sa8540p snapdragon_730g_mobile_firmware sa8295p_firmware snapdragon_480_5g_mobile snapdragon_x65_5g_modem-rf_firmware qca6574 snapdragon_auto_5g_modem-rf_gen_2_firmware sm7315_firmware sxr2130 wcd9335 sm8750_firmware qamsrv1h_firmware fastconnect_6800 qdu1010 sa7255p_firmware fastconnect_6700_firmware sm8750p_firmware snapdragon_480_5g_mobile_firmware qcm5430 sm7635 qca6430_firmware sxr1120 sm6250_firmware snapdragon_695_5g_mobile sm6650p_firmware snapdragon_670_mobile snapdragon_x32_5g_modem-rf_firmware qcs9100_firmware qamsrv1m snapdragon_8_gen_3_mobile qca6436 aqt1000 qcn6274_firmware snapdragon_765g_5g_mobile_firmware snapdragon_778g_5g_mobile_firmware qca6421 qcm6490 qcc710_firmware sd855_firmware sm8750 sm6650_firmware srv1m_firmware snapdragon_665_mobile wcn7880 sd855 qam8295p snapdragon_778g\+_5g_mobile snapdragon_480\+_5g_mobile_firmware sa8770p_firmware snapdragon_855_mobile snapdragon_865\+_5g_mobile qcm6490_firmware snapdragon_7c\+_gen_3_compute snapdragon_855\+_mobile_firmware wcn7750 sa4150p_firmware snapdragon_732g_mobile wsa8845_firmware qcm8550 snapdragon_675_mobile snapdragon_7c\+_gen_3_compute_firmware snapdragon_x72_5g_modem-rf_firmware snapdragon_750g_5g_mobile qca6391 qca6595 sa8620p_firmware wcn7880_firmware csra6620 snapdragon_855_mobile_firmware wsa8845h_firmware snapdragon_865_5g_mobile_firmware sd670_firmware sa6155p_firmware qam8775p_firmware wcn6450_firmware wcn7861 qca6584au qca6584au_firmware qcs6490_firmware sa8195p_firmware qca6574au_firmware wcd9370_firmware snapdragon_720g_mobile snapdragon_782g_mobile sa8155p_firmware qfw7114 sm6650 snapdragon_870_5g_mobile_firmware qam8255p sm8735_firmware wcn6755_firmware wsa8832 srv1m qep8111_firmware wcd9375 snapdragon_678_mobile_firmware qru1062 sa7775p_firmware sm6370 ar8035 snapdragon_xr2_5g_firmware qcs615 wsa8830 video_collaboration_vc3_platform qcm8550_firmware snapdragon_ar1_gen_1_firmware wcd9375_firmware snapdragon_865_5g_mobile wcn3980_firmware snapdragon_662_mobile srv1l_firmware wcn7861_firmware sa8255p fastconnect_6700 video_collaboration_vc3_platform_firmware qca6595_firmware snapdragon_x75_5g_modem-rf_firmware wcn7881 qsm8350_firmware snapdragon_x62_5g_modem-rf qdu1000_firmware sm7315 snapdragon_710_mobile_firmware qcs6490 snapdragon_665_mobile_firmware snapdragon_870_5g_mobile wcn3988 wsa8830_firmware snapdragon_732g_mobile_firmware csra6620_firmware qam8650p_firmware sm7635_firmware sa8145p fastconnect_6900_firmware wcd9378_firmware qcn9274_firmware qamsrv1m_firmware snapdragon_860_mobile sa6145p_firmware sg4150p snapdragon_750g_5g_mobile_firmware qdx1010_firmware Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.53%

||

7 Day CHG~0.00%

Published-07 Apr, 2025 | 10:16

Updated-08 Apr, 2025 | 03:55

Out-of-bounds Read in Windows WLAN Host

Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.

Vendor-Qualcomm Technologies, Inc.

Product-Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.38%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:11

Improper Input Validation in HLOS

Memory corruption during the FRS UDS generation process.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1011_firmware wcd9340_firmware sa8775p snapdragon_765_5g_mobile qca6678aq wcd9385_firmware wcn3988_firmware snapdragon_x35_5g_modem-rf_firmware qca6431_firmware qca6678aq_firmware qam8295p_firmware qca6698aq_firmware sa8775p_firmware snapdragon_ar1_gen_1 qfw7114_firmware wsa8832_firmware qcs615_firmware sd_8_gen1_5g_firmware qdx1010 wcd9385 snapdragon_x55_5g_modem-rf_firmware wcd9340 qsm8350 qca6797aq qcs8550_firmware fastconnect_6900 snapdragon_865\+_5g_mobile_firmware sm6650p qcn9274 fastconnect_6200_firmware qca6574_firmware qfw7124_firmware qca6595au sm7250p_firmware sa8150p qca8337_firmware wsa8835 snapdragon_888\+_5g_mobile_firmware ar8035_firmware sc8380xp_firmware sa9000p_firmware wcd9390 sa8195p sa6150p wcd9390_firmware wcd9395 snapdragon_x55_5g_modem-rf qcs5430_firmware sm8650q sd865_5g qca6421_firmware qca6688aq qca6574a snapdragon_x65_5g_modem-rf snapdragon_x72_5g_modem-rf wsa8810_firmware sxr2330p qru1062_firmware qru1052_firmware qdu1110_firmware wsa8815 fastconnect_6200 qca6436_firmware sm8650q_firmware sa6155p sa8155p sa7255p sa8650p_firmware qcc710 qca6797aq_firmware qca6391_firmware fastconnect_7800 qcn6224 wcn7881_firmware qca6696_firmware snapdragon_888\+_5g_mobile snapdragon_765_5g_mobile_firmware sa9000p sxr2330p_firmware wsa8845h srv1l qdx1011 sa8540p_firmware srv1h_firmware snapdragon_888_5g_mobile_firmware qca6174a sm4635_firmware qcn6274 snapdragon_x62_5g_modem-rf_firmware sm8750p sa8530p sm7675 qca8081 wsa8840_firmware wsa8845 qru1032 qca6688aq_firmware sm4635 qam8620p qru1052 sa8255p_firmware qca6431 snapdragon_8_gen_1_mobile sa8145p_firmware wcd9380_firmware sm8635p_firmware qamsrv1h sa8650p qam8650p qdu1000 wcd9370 qca6574au sa6145p snapdragon_8_gen_1_mobile_firmware wsa8815_firmware snapdragon_768g_5g_mobile wcn3950_firmware qca8081_firmware qcm5430_firmware sa8620p snapdragon_8_gen_3_mobile_firmware qmp1000 qca6426_firmware sa8150p_firmware srv1h wcn3950 wcd9395_firmware qdu1210_firmware sm8635 wcn7860_firmware snapdragon_x75_5g_modem-rf wcd9380 qcs8550 sa8770p sm8635_firmware wcn6650 qdu1010_firmware snapdragon_auto_5g_modem-rf_gen_2 qam8620p_firmware wsa8840 fastconnect_7800_firmware sc8380xp snapdragon_x35_5g_modem-rf qcs5430 sm8635p qca6426 qdu1110 wsa8835_firmware sm8735 qru1032_firmware qam8255p_firmware qca6696 snapdragon_765g_5g_mobile sc8280xp-abbb_firmware sa6150p_firmware wcn6755 qcn6224_firmware sd_8_gen1_5g qcs8300_firmware qcs8300 sa8295p sm7675p_firmware qep8111 qca6174a_firmware qdu1210 qca8337 fastconnect_6800_firmware sm7250p wcd9378 snapdragon_xr2_5g wcn6450 sm7675_firmware wcn6650_firmware qca6698aq sm7675p snapdragon_888_5g_mobile wcn7860 sxr2130_firmware wsa8810 sd865_5g_firmware snapdragon_768g_5g_mobile_firmware qmp1000_firmware snapdragon_x32_5g_modem-rf sa7775p qam8775p qca6574a_firmware qfw7124 qca6595au_firmware wcn7750_firmware qcs9100 sa8530p_firmware sa8540p sa8295p_firmware snapdragon_x65_5g_modem-rf_firmware qca6574 snapdragon_auto_5g_modem-rf_gen_2_firmware sxr2130 sm8750_firmware qamsrv1h_firmware fastconnect_6800 qdu1010 sa7255p_firmware fastconnect_6700_firmware sm8750p_firmware qcm5430 sm7635 sm6650p_firmware qcs9100_firmware snapdragon_x32_5g_modem-rf_firmware qamsrv1m qca6436 snapdragon_8_gen_3_mobile snapdragon_765g_5g_mobile_firmware qcn6274_firmware qca6421 qcm6490 qcc710_firmware sm8750 sm6650_firmware srv1m_firmware wcn7880 qam8295p sa8770p_firmware snapdragon_865\+_5g_mobile qcm6490_firmware sc8280xp-abbb wcn7750 wsa8845_firmware qcm8550 snapdragon_x72_5g_modem-rf_firmware wcn7880_firmware qca6391 qca6595 sa8620p_firmware wsa8845h_firmware snapdragon_865_5g_mobile_firmware sa6155p_firmware wcn6450_firmware wcn7861 qam8775p_firmware qca6584au_firmware qca6584au qcs6490_firmware sa8195p_firmware qca6574au_firmware wcd9370_firmware sa8155p_firmware qfw7114 sm6650 qam8255p snapdragon_870_5g_mobile_firmware sm8735_firmware wsa8832 wcn6755_firmware qep8111_firmware srv1m wcd9375 qru1062 sa7775p_firmware ar8035 snapdragon_xr2_5g_firmware qcs615 wsa8830 video_collaboration_vc3_platform qcm8550_firmware snapdragon_ar1_gen_1_firmware wcd9375_firmware snapdragon_865_5g_mobile srv1l_firmware wcn7861_firmware sa8255p fastconnect_6700 video_collaboration_vc3_platform_firmware qca6595_firmware wcn7881 qsm8350_firmware snapdragon_x75_5g_modem-rf_firmware snapdragon_x62_5g_modem-rf qdu1000_firmware qcs6490 snapdragon_870_5g_mobile wcn3988 wsa8830_firmware qam8650p_firmware sm7635_firmware sa8145p fastconnect_6900_firmware wcd9378_firmware qcn9274_firmware qamsrv1m_firmware sa6145p_firmware qdx1010_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.05% / 16.44%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:12

Out-of-bounds Write in Audio

Memory corruption while sound model registration for voice activation with audio kernel driver.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.89%

||

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-11 Aug, 2025 | 15:06

Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8845_firmware qcc2076_firmware wsa8840 wcd9370 sc8180xp-aaab_firmware wcd9340_firmware wcd9385 sc8380xp wcd9341_firmware qca1064 qcn7606 snapdragon_7c_compute_platform_firmware qcn7605_firmware snapdragon_7c\+_gen_3_compute_firmware qcc2073_firmware fastconnect_6700 qca1064_firmware qca6420 sc8180xp-ad sc8280xp-abbb snapdragon_7c_gen_2_compute_platform_firmware qca6430 wsa8815_firmware wcd9370_firmware sc8180xp-ad_firmware qcn7605 qcc2076 qcm6490_firmware sc8180xp-aaab qcn7606_firmware qca6595au wcd9340 wcd9341 qcm6490 wsa8810_firmware wsa8845h_firmware qca2062 qca6420_firmware aqt1000_firmware qcs6490_firmware sc8180xp-acaf qca2064_firmware snapdragon_7c\+_gen_3_compute wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware qca2066_firmware qca6430_firmware fastconnect_6800_firmware qcs5430 wsa8845h wcd9380_firmware qcm5430 sm6250_firmware sc8180x-ad_firmware qcm5430_firmware sc8180x-acaf wsa8815 wsa8830 sc8180x\+sdx55_firmware qca2062_firmware qcc2073 sc8380xp_firmware qca2065 fastconnect_6800 qca1062 fastconnect_7800_firmware fastconnect_6900 wcd9375_firmware qca6391 qcs5430_firmware sc8180x\+sdx55 snapdragon_7c_gen_2_compute_platform wcd9385_firmware sm6250 fastconnect_6900_firmware wcd9380 qca1062_firmware fastconnect_6200 sc8280xp-abbb_firmware fastconnect_7800 sc8180x-acaf_firmware wcd9375 snapdragon_7c_compute_platform wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware qca2064 sc8180x-ad sc8180x-aaab wsa8810 sc8180x-aaab_firmware wsa8835_firmware qca2066 qcs6490 sc8180xp-acaf_firmware fastconnect_6200_firmware qca2065_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.66%

||

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:27

Stack-based Buffer Overflow in Performance

Memory corruption when invalid input is passed to invoke GPU Headroom API call.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_662_mobile_platform_firmware wsa8830 wcd9380_firmware sm4635_firmware wcn3990 sdm429w wcd9378_firmware qcm8550 wsa8840 wsa8835 sdm429w_firmware wcn3950_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wcd9380 wcn6755_firmware snapdragon_480_5g_mobile_platform snapdragon_4_gen_1_mobile_platform_firmware wcd9370 sm8635_firmware snapdragon_460_mobile_platform_firmware snapdragon_480\+_5g_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn7880 wcn3990_firmware snapdragon_8_gen_2_mobile_platform wcd9335_firmware wcd9385_firmware wsa8845 wcn3950 wcn7881_firmware fastconnect_6200 qcm4325_firmware wcn3660b wsa8815 snapdragon_460_mobile_platform wsa8845_firmware snapdragon_4_gen_1_mobile_platform wcn3660b_firmware snapdragon_429_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware sm8750p fastconnect_6200_firmware wcd9375_firmware snapdragon_8_gen_3_mobile_platform wsa8845h_firmware snapdragon_429_mobile_platform snapdragon_680_4g_mobile_platform_firmware wcn7860 fastconnect_7800 qcm8550_firmware wcn7881 wcn7861_firmware wsa8840_firmware wsa8832_firmware sm4635 fastconnect_6900 fastconnect_6900_firmware sm8635 wcn3988_firmware wcn7880_firmware wsa8810_firmware wcd9341_firmware vision_intelligence_400_platform fastconnect_7800_firmware snapdragon_8\+_gen_2_mobile_platform wsa8845h wcn6755 wcd9395_firmware wcd9335 sg4150p sm8750_firmware sm8750p_firmware wsa8810 wsa8832 sm8550p snapdragon_680_4g_mobile_platform sm8750 wcd9385 wcd9341 wcn7860_firmware wcd9395 wcn7861 wcd9375 wcd9370_firmware sm8550p_firmware wcd9390 vision_intelligence_400_platform_firmware snapdragon_8_gen_3_mobile_platform_firmware snapdragon_662_mobile_platform snapdragon_685_4g_mobile_platform wsa8830_firmware wcd9390_firmware wcn3620_firmware wcn3988 wsa8815_firmware wsa8835_firmware wcn3620 snapdragon_695_5g_mobile_platform snapdragon_685_4g_mobile_platform_firmware wcd9378 sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware snapdragon_480\+_5g_mobile_platform qcm4325 Snapdragon snapdragon_662_mobile_platform_firmware wcd9380_firmware qcm8550_firmware sm4635_firmware wcd9378_firmware wcn7861_firmware wsa8832_firmware wsa8840_firmware fastconnect_6900_firmware wcn3988_firmware wcn7880_firmware sdm429w_firmware wcn3950_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware wcn6755_firmware wcd9395_firmware sm8750_firmware sm8750p_firmware snapdragon_4_gen_1_mobile_platform_firmware sm8635_firmware snapdragon_460_mobile_platform_firmware snapdragon_8_gen_2_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn3990_firmware wcn7860_firmware wcd9335_firmware wcd9385_firmware wcn7881_firmware qcm4325_firmware wcd9370_firmware sm8550p_firmware snapdragon_8_gen_3_mobile_platform_firmware vision_intelligence_400_platform_firmware wcd9390_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware wsa8815_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_6200_firmware snapdragon_695_5g_mobile_platform_firmware wcd9375_firmware wsa8845h_firmware sg4150p_firmware snapdragon_680_4g_mobile_platform_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.05% / 15.40%

||

7 Day CHG~0.00%

Published-01 Apr, 2022 | 04:40

Updated-03 Aug, 2024 | 16:25

Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 sd_8cx_gen3_firmware mdm9150_firmware wcn3991_firmware sd678 sa6150p_firmware sm6250p_firmware sa8145p_firmware qcs610 wsa8830 qcs2290_firmware fsm10056 qca8337 sd7c_firmware wcd9360_firmware csra6620 fsm10055_firmware qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware qca6564 qca6426 qrb5165n_firmware qca9984_firmware sa415m wcn3998 wcd9385_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware wcn3950 sd720g sm6375_firmware sd662 sd460_firmware qcn9011_firmware sa8155 qca6574au_firmware sdx55_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware wcn3999_firmware qca6420 qca6436_firmware wcd9360 qrb5165n qca6564au_firmware sd778g sa6155p_firmware sm6225 wcn3999 sd_8cx_gen2 sa515m_firmware qcs6490 qrb5165_firmware qrb5165m_firmware sdxr2_5g sa4155p_firmware sa8155_firmware sd662_firmware sa415m_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware sm6250 sd778g_firmware wcd9340 sa8195p wsa8810_firmware sd765g sw5100 sd765_firmware fsm10056_firmware qca6436 wcn6851 wcd9335 sa6155p qcs4290_firmware wcd9385 wcd9341 qca6696_firmware qcs6490_firmware sd750g sd870_firmware sd_8cx_gen3 qca6390 ar8035 sd750g_firmware aqt1000 sa8150p sxr2150p_firmware sm6250_firmware wcd9375 wcn3910_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qcx315 qca6564a wcn6750_firmware sa4150p qcm2290_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware sd_675 sw5100p sd865_5g qca6564au sdx55m_firmware wcn6856_firmware qcn9012 wsa8835 qca6574 qcx315_firmware wcd9380 sd888_5g sm6250p qcs410 qca6574a sd690_5g_firmware wcn6855_firmware sm7325p qca6430_firmware qcn9012_firmware wcd9335_firmware wcn3980 wcn6750 sa515m qca6574_firmware wcd9340_firmware sd855 wsa8815 sm7325p_firmware sd7c wcn3910 wcn6850 sdx57m_firmware sd765 qca6426_firmware qca6574a_firmware qca9984 sd768g_firmware qrb5165m wcn3980_firmware sd460 qca6391 sd730 sdx55m sxr2150p aqt1000_firmware sd678_firmware ar8031_firmware qcm4290 qcm6490_firmware qrb5165 sd480_firmware wcn6851_firmware qcn9011 sm6225_firmware qca6574au sa8155p_firmware qca6564a_firmware sdx57m wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 sw5100p_firmware qcs610_firmware mdm9150 wcn6856 qsm8250 sa6145p qca6564_firmware sd768g ar8031 qcs405_firmware sa8145p qca6696 qca6391_firmware sa4150p_firmware wcd9370_firmware sa6150p sdx55 sa8155p csra6640 sd675 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware sa4155p ar8035_firmware qcm2290 qsm8250_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 10.49%

||

7 Day CHG~0.00%

Published-07 Apr, 2021 | 07:55

Updated-03 Aug, 2024 | 16:25

Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qfe3100 qca9377_firmware qca2066 wcn3990 qca1062_firmware qfe4455fc_firmware qfe3440fc_firmware wgr7640 wcn6856_firmware pm8005_firmware qfe2081fc_firmware qca6420_firmware qca6595au_firmware smb1351_firmware sd850 qln1035bd qca6335 qca6174_firmware pm8998_firmware smb1380_firmware smb1381 pm855p_firmware wcn6855_firmware wtr5975_firmware qfe3100_firmware smb1390_firmware qca6174a sd8c wcn3990_firmware qca6310_firmware wtr5975 qca6174 qca9377 qca6430_firmware wcn3998 wcd9335_firmware qcn7605 qca6335_firmware wcd9340_firmware wgr7640_firmware wsa8815 sd8cx wcn6850 smb1380 qca1064 smb2351_firmware sd835 qca6595au wcn3998_firmware sd850_firmware smb1351 qca6391 pm855p qca6420 sd8cx_firmware aqt1000_firmware qfe2082fc qca6310 sd8c_firmware pmi8998 qfe2081fc pm855 sdr8150 qfe2082fc_firmware wcn6851_firmware qca6164_firmware qca6430 qfe4455fc wcd9340 qln1035bd_firmware wsa8810_firmware wcd9341_firmware qfe3440fc wsa8810 wcn6855 wcn6851 wcd9335 qcn7605_firmware pmi8998_firmware qat3550 pm8005 wcn6856 pm855_firmware sd835_firmware qca6174a_firmware sdr8150_firmware wcd9341 qca2066_firmware qet4100_firmware smb1350 qca1064_firmware qca1062 qat3550_firmware qca6164 smb1350_firmware qca6391_firmware smb1381_firmware sd845_firmware aqt1000 sd845 wsa8815_firmware wcn6850_firmware pm8998 smb1390 qcn7606_firmware smb2351 qet4100 qcn7606 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 3.88%

||

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in Computer Vision

Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware sa6150p_firmware wsa8845_firmware wsa8832 sa6155p_firmware wsa8840 qam8295p_firmware qcs8550_firmware qca6696 snapdragon_8_gen_2_mobile_firmware wcd9385 wcd9395_firmware sxr1230p_firmware wcd9390_firmware snapdragon_8_gen_2_mobile sg8275p wsa8832_firmware sa8195p_firmware wcd9395 ssg2125p sg8275p_firmware snapdragon_8\+_gen_2_mobile qca6574au_firmware sa8195p qam8295p qca6574au wcd9390 wsa8845h_firmware sm8550p_firmware qcm8550 qcs6490_firmware wsa8835 wsa8840_firmware sa8295p_firmware qca6696_firmware wsa8845h wcd9380_firmware sa6150p sa8155p_firmware sa8155p wsa8830 sm8550p sa6145p ssg2115p snapdragon_8_gen_3_mobile_firmware fastconnect_7800_firmware fastconnect_6900 ssg2125p_firmware wcd9385_firmware fastconnect_6900_firmware sa8295p qcs8550 sa6145p_firmware wcd9380 fastconnect_7800 sa8145p_firmware sa8150p snapdragon_8\+_gen_2_mobile_firmware sa8150p_firmware wsa8845 sa6155p video_collaboration_vc3_platform_firmware sa8145p wsa8835_firmware ssg2115p_firmware sxr1230p qcs6490 snapdragon_8_gen_3_mobile wsa8830_firmware video_collaboration_vc3_platform Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.06%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 04:42

Updated-09 Apr, 2025 | 19:57

Incorrect type casting in Display driver

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 24.05%

||

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware wcd9340_firmware qca6595au_firmware qca6310 sd850 qca6174a_firmware qca6564a_firmware sd_675_firmware sd855_firmware sdx50m qcs6490 sdx55 qca6696 qca6421 wcn7850 sa6155 qca6564au qca6426_firmware sdx24 qrb5165m_firmware sa6145p_firmware qsm8350_firmware sdx24_firmware wsa8830 sd768g wcn6740_firmware wcn6856 wsa8815 qca6390 sdx50m_firmware sa6155p sa8150p_firmware qca6430 wcn7851_firmware sd855 qcs6490_firmware sd_8cx_gen3_firmware wcd9340 wcn6850 sdx55_firmware wcn3950 sd_8cx_firmware qcs603_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware qcm6490 qca6174a sd670_firmware sd765g_firmware qca6574a qca6595_firmware qrb5165n sd865_5g_firmware qca6421_firmware qrb5165 qca6574au_firmware qrb5165n_firmware qam8295p_firmware sa8295p wcn6750 sa8295p_firmware sm7325p wcd9380 sd_675 qca6335 sa9000p_firmware qca6595 qca6431_firmware sd_8cx_gen3 qca6430_firmware qca8081 ar8035_firmware sd888 sm7315_firmware sm7325p_firmware wcd9375_firmware wcn6856_firmware sd870 aqt1000 qcs603 qca6390_firmware ar8035 wcn6855_firmware qcn9011_firmware qca6420 sa6155_firmware sd780g_firmware wcn6855 sdx65_firmware qcn9011 sd870_firmware qcm6490_firmware sd845_firmware qca6431 qca6595au wcd9370 sd888_firmware wcn3990 wcn3980 sm7315 qca8081_firmware sd765_firmware sd765g sd670 wsa8835 sdx55m qam8295p wcn3998 wcn6850_firmware wsa8810_firmware qca8337_firmware wsa8815_firmware wcn3991_firmware sa8150p sd850_firmware qrb5165m wcn6740 wcd9385 qca6436 sd678 qca6574au wcn7850_firmware sdx65 wcd9385_firmware wcn6750_firmware sa8155p wsa8810 sd888_5g aqt1000_firmware qcn9012 wsa8835_firmware sd678_firmware sm7250p_firmware qca6391 qsm8350 qca6574 wcn3991 wcn3998_firmware sd_8cx qca6574_firmware wcn6851 sd778g_firmware qca6564a sd675 wcd9370_firmware qca6420_firmware sd675_firmware qca6574a_firmware sdx57m sa9000p sa8155_firmware sd888_5g_firmware wsa8830_firmware sa8540p_firmware qca8337 sd_8_gen1_5g_firmware sdxr2_5g wcd9341 wcn3980_firmware wcn6851_firmware wcd9326 sa6155p_firmware qca6391_firmware wcd9326_firmware qcn9012_firmware sa8540p sa8155p_firmware sm7250p sa6145p qca9377_firmware qrb5165_firmware wcd9375 qca6696_firmware sd865_5g sd780g qca6564au_firmware qca6426 qca9377 qca6335_firmware sdx55m_firmware sdx57m_firmware sm8475 sd778g wcn3950_firmware wcn3990_firmware sa8155 sd765 sd768g_firmware qcs605_firmware qcs605 wcn7851 qca6310_firmware qca6436_firmware sd_8cx_gen2 sd845 wcd9341_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 8.88%

||

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware wcd9340_firmware qca6310 qualcomm215_firmware wsa8835 mdm9150_firmware sdx55m sd855_firmware wcn3998 wcn6850_firmware wsa8810_firmware wsa8815_firmware wcn3610_firmware qca6436 qca6426_firmware wcn3660b wcn3660b_firmware sd710_firmware qcs410_firmware sd205_firmware wsa8810 sdxr1 sd210 wcd9341_firmware wsa8830 sw5100p_firmware wsa8815 qca6390 sda429w_firmware wcn3680b aqt1000_firmware wsa8835_firmware qca6430 sw5100 sd855 qca6391 wcn3998_firmware wcd9340 wcn6850 wcn6851 wcn3950 wcd9370_firmware sdxr2_5g_firmware qca6420_firmware sda429w qcc5100_firmware sd210_firmware wsa8830_firmware wcn3680b_firmware sdxr2_5g sd865_5g_firmware wcd9341 wcn3980_firmware wcn6851_firmware wcd9326 qcs610 qcs610_firmware qualcomm215 qca6391_firmware sd205 wcd9326_firmware qcc5100 wcd9380 wcn3610 qca6335 sw5100_firmware qca6430_firmware sd865_5g qca6426 sd870 qca6335_firmware sdx55m_firmware aqt1000 wcn3990_firmware wcn3950_firmware wcn3988 mdm9150 qca6390_firmware qca6420 wcn3988_firmware qca6310_firmware sd710 sd870_firmware sw5100p sd845_firmware sdxr1_firmware qca6436_firmware sd845 wcd9370 qcs410 wcn3990 wcn3980 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 25.47%

||

7 Day CHG~0.00%

Published-12 Oct, 2022 | 00:00

Updated-15 May, 2025 | 15:15

Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qcs605 wcn6855_firmware qca6391_firmware sd888_5g_firmware sd850 qca6574_firmware sdx50m_firmware ar8035 qca6430 sa8155 wcn7850_firmware sdx24_firmware wcd9375_firmware sd855_firmware sa8540p_firmware wcn3990 qca6174a_firmware wsa8835_firmware qca6696_firmware qca8337 sa6145p qca6431_firmware wcn6855 qam8295p wsa8830 qca6696 sm8475 sdx65 sd778g_firmware sm7325p qsm8350_firmware qca6420 sa6155p wcn3998_firmware wcn6750_firmware sdx55 qca6390_firmware sm7250p ar8035_firmware wcn6740_firmware sd765 sdx55_firmware qca6574a_firmware wcd9385_firmware qca8081_firmware wcn3950_firmware qcs605_firmware sdx24 sdxr2_5g_firmware qca6436_firmware wsa8815_firmware qcm6490 sd678 sdx57m_firmware sa6145p_firmware sa9000p qca6430_firmware qca6595 sd675_firmware wcd9370_firmware aqt1000 qca6391 wcn3991_firmware sa8295p qca6174a sa8295p_firmware wsa8835 sm7250p_firmware wcn6851_firmware sd768g_firmware wcn3980_firmware sm7315_firmware qca6574a wcn6750 qca6564a sdx65_firmware qca6595au wcn6851 qcs6490_firmware sd865_5g wcd9340_firmware wcn6850_firmware sd865_5g_firmware qca6564au_firmware qca9377_firmware wsa8830_firmware wcd9341 sd845_firmware wcn3991 wcn3998 wcn6856_firmware qca6574au sd888_firmware sm7315 wcn3990_firmware sdx55m wcd9341_firmware qcs603_firmware sd670 qca6420_firmware qca6564au sd_675 sa9000p_firmware wsa8815 sd850_firmware sd_8cx_gen3 wcd9326 wcn6856 wcn6740 qca6564a_firmware wcn7850 sd_8_gen1_5g_firmware qca6426 wcd9380 sa8155p_firmware qsm8350 sd_8cx_firmware sd780g_firmware qca8337_firmware sd870_firmware wcd9326_firmware sd_8cx_gen3_firmware qca6574 sd_8cx_gen2_firmware sd870 sd765_firmware wcn7851_firmware sdx57m qca6426_firmware sd845 qcs6490 sd778g qam8295p_firmware sd_675_firmware sd768g wsa8810 qca6335 wcn6850 sd855 sd_8cx_gen2 qca6310_firmware wcd9380_firmware sd678_firmware sd888_5g sa8155_firmware sd670_firmware sd780g qca6335_firmware qca6390 qca6421 sa6155 qca6595au_firmware qcm6490_firmware wsa8810_firmware qca6310 sdx55m_firmware wcd9375 wcd9370 sa8150p_firmware wcn7851 wcd9340 qca6436 qca9377 wcd9385 sa6155p_firmware sd_8cx sa8150p sd765g wcn3950 qca6595_firmware qcs603 sdxr2_5g sa6155_firmware aqt1000_firmware sd888 sdx50m qca6431 sd675 wcn3980 sm7325p_firmware qca8081 qca6574au_firmware sa8155p sa8540p qca6421_firmware sd765g_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-415

Double Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.03% / 5.48%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:58

Use After Free in Computer Vision

Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware wsa8840 snapdragon_8_gen_3_mobile_firmware wsa8845_firmware wsa8845h_firmware wsa8845 snapdragon_8_gen_3_mobile wcd9395_firmware wcd9390 wsa8840_firmware wsa8845h wcd9395 fastconnect_7800 wcd9390_firmware Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 8.28%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 04:56

Updated-09 Apr, 2025 | 19:53

Use-After-Free Issue in Display

Memory corruption in display due to double free while allocating frame buffer memory

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware qca8337_firmware sda429w_firmware wcn3990 qcs610 sdm429w msm8996au_firmware qca8337 qca6564au mdm9650 msm8996au sdm429w_firmware wcn3950_firmware mdm9250 qca6420_firmware qualcomm215 qcs410 wcd9370 qca6574a wcn3990_firmware qca6430_firmware wcd9335_firmware wcn3980 wcn3998 wcn3950 wcd9326_firmware sa515m wcd9340_firmware wcn3660b sd855 wsa8815 mdm9650_firmware wcn3660b_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware sd835 wcn3998_firmware wcn3980_firmware sdxr1_firmware wcn3610_firmware qca6420 qca6391 aqt1000_firmware qca6564au_firmware qcs8155 sa515m_firmware sd429 qca6430 qca6574au qcn9074 sd205 sd429_firmware sa8155p_firmware sd205_firmware wcd9340 qca6564a_firmware wsa8810_firmware qualcomm215_firmware wcd9341_firmware wsa8810 wcd9326 wcd9335 sd210_firmware qcs610_firmware mdm9150 wcn3680b sd835_firmware mdm9250_firmware wcd9341 sdxr1 apq8096au qca6391_firmware wcd9370_firmware aqt1000 sdx55 apq8096au_firmware sa8155p sda429w sd210 sd855_firmware wcn3620_firmware wsa8815_firmware wcn3620 qcs8155_firmware qcn9074_firmware qcs410_firmware qca6564a wcn3610 Snapdragon

CWE ID-CWE-415

Double Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 19.97%

||

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware wcn3615_firmware msm8996au sd429_firmware qca6595au_firmware qualcomm215_firmware sd730 qca6310 apq8009 mdm9607 qca6696 qca6421 qsm8250_firmware qca6564au sdx24 wcn3660b qca6426_firmware sd632_firmware sd720g sa6150p sd460 sd710_firmware sd205_firmware msm8996au_firmware apq8056 sdx24_firmware wsa8830 wsa8815 wcn3680b qca6430 wcn3620_firmware sd855 qcs6490_firmware wcd9340 sdx55_firmware sdxr2_5g_firmware msm8976sg_firmware mdm9650 sd765g_firmware qca6574a msm8108_firmware sd865_5g_firmware apq8017_firmware qcm6125_firmware sdm429w_firmware sd835_firmware wcn6750 sa8295p_firmware sm7325p msm8917_firmware sd_636_firmware sd695_firmware qcc5100 sd_675 qca6335 sd625_firmware msm8108 qcs405 qca6595 qca6431_firmware msm8208 csra6640 sd480_firmware apq8064au_firmware qca6430_firmware qca8081 sm7315_firmware sm7325p_firmware qca6584au apq8009w sd870 mdm9150 qca9367 qca6390_firmware qcn9024_firmware sa6155_firmware wcn6855 wcn3910 sd870_firmware qcm6490_firmware sm6250 qcs8155 sdm630_firmware qca6431 qca6595au wcd9370 sd821_firmware qcs4290_firmware sd888_firmware wcn3980 sm4125_firmware sd439_firmware sm7315 sd765_firmware sd720g_firmware sd765g sd670 mdm9150_firmware sdx55m msm8208_firmware msm8917 qam8295p sd450 wcn6850_firmware wcn3660 sm6250p wsa8810_firmware wsa8815_firmware wcn3991_firmware sa8150p sd625 wcn6740 msm8608_firmware qca6436 apq8064au msm8952_firmware sa8155p sdxr1 wsa8810 msm8909w sdm630 sw5100p_firmware aqt1000_firmware wsa8835_firmware wcd9335_firmware sm7250p_firmware apq8009_firmware qca6391 qcn9024 wcn3998_firmware csra6620 wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware sd439 wcn3660_firmware qcc5100_firmware sd210_firmware qcm6125 apq8052_firmware qca4020_firmware sdx12 sd660 csrb31024_firmware sa4150p_firmware sdm429w sdx20 qcs610 qualcomm215 apq8052 qca6391_firmware sd205 wcd9326_firmware sm7250p sa8155p_firmware csra6620_firmware wcn3610 sdx20_firmware sa6145p wcn3910_firmware msm8209 apq8017 wcd9375 sd750g_firmware msm8976_firmware qca6696_firmware sm6250p_firmware sd865_5g qca9377 wcn3990_firmware wcn3950_firmware wcn3988 sd778g wcd9371_firmware wcn3615 msm8976 sd750g sd768g_firmware qcs605 msm8952 qca6310_firmware sd710 qcs8155_firmware qca6436_firmware sa8195p_firmware qca4020 qca9367_firmware sd_636 wcd9341_firmware sd821 sd632 wcd9340_firmware sd_675_firmware qca6174a_firmware qca6564a_firmware sd855_firmware sd662_firmware wcd9371 mdm9650_firmware sdx50m qcs405_firmware qcn6024_firmware qcs6490 sdx55 sd460_firmware msm8956 mdm9628 wcn3610_firmware sa6155 qcm4290_firmware msm8976sg sd450_firmware sd820 wcn3660b_firmware sm4375 msm8909w_firmware sdx20m_firmware wcd9360_firmware sdw2500 sdw2500_firmware sa6145p_firmware sd626 sd768g wcn6740_firmware wcn6856 sd626_firmware sm4125 sda429w_firmware sdx50m_firmware apq8009w_firmware sa6155p qca6390 sa8150p_firmware sd480 wcd9330 sa8145p_firmware sw5100 wcn6850 sa8145p sa415m wcn3950 msm8608 qca6320_firmware qca6584au_firmware qcm6490 qcn6024 qca6174a wcd9335 wcn3999 sd835 sd670_firmware wcn3680b_firmware qca6595_firmware qca6421_firmware qca6574au_firmware sd662 mdm9250_firmware qam8295p_firmware qca6564_firmware sa8295p qcs610_firmware msm8956_firmware qca6174 qcm2290_firmware wcd9380 ar8031 qcm4290 wcn3680 mdm9628_firmware sd660_firmware sd730_firmware sd695 qca6174_firmware wcd9375_firmware sd888 sa6150p_firmware ar8035_firmware wcn6856_firmware aqt1000 sdx12_firmware ar8035 wcn6855_firmware qsm8250 qca6420 wcd9360 sd780g_firmware wcn3680_firmware qcm2290 sdx65_firmware mdm9250 sa515m sd845_firmware mdm9206 sdxr1_firmware sa515m_firmware mdm9607_firmware wcn3990 apq8076 sd429 apq8076_firmware sd690_5g qca8081_firmware wsa8835 wcn3998 ar8031_firmware apq8056_firmware qca8337_firmware mdm9206_firmware qcs2290 sd820_firmware wcd9385 sd678 qca6574au sdx65 wcd9385_firmware apq8096au wcn6750_firmware qcs410_firmware sd210 sd680 sd888_5g sd678_firmware qca9379 wcn3999_firmware qcs6125 sm4375_firmware wcn3991 qca6574 csra6640_firmware qca6574_firmware sa415m_firmware qca6564a sdx20m sa8195p sd675_firmware qca6574a_firmware sda429w sa8155_firmware wsa8830_firmware sd888_5g_firmware qca6320 qca8337 sm6250_firmware sdxr2_5g wcd9341 wcn3980_firmware qcs2290_firmware wcn6851_firmware wcd9326 sd680_firmware qca9379_firmware sa6155p_firmware sa4150p qca9377_firmware apq8096au_firmware sw5100_firmware sd780g qca6564au_firmware csrb31024 qca6426 qca6335_firmware sdx55m_firmware qcs6125_firmware sd690_5g_firmware sa8155 wcn3620 sd765 qcs605_firmware qca6564 wcd9330_firmware wcn3988_firmware qcs4290 msm8209_firmware sw5100p sd845 qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 25.47%

||

7 Day CHG~0.00%

Published-12 Oct, 2022 | 00:00

Updated-15 May, 2025 | 15:15

Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qcs605 wcn6855_firmware qca6391_firmware sd888_5g_firmware sd850 qca6574_firmware sdx50m_firmware ar8035 qca6430 sa8155 wcn7850_firmware sdx24_firmware wcd9375_firmware sd855_firmware sa8540p_firmware wcn3990 qca6174a_firmware wsa8835_firmware qca6696_firmware qca8337 sa6145p qca6431_firmware wcn6855 qam8295p wsa8830 qca6696 sm8475 sdx65 sd778g_firmware sm7325p qsm8350_firmware qca6420 sa6155p wcn3998_firmware wcn6750_firmware sdx55 qca6390_firmware sm7250p ar8035_firmware wcn6740_firmware sd765 sdx55_firmware qca6574a_firmware wcd9385_firmware qca8081_firmware wcn3950_firmware qcs605_firmware sdx24 sdxr2_5g_firmware qca6436_firmware wsa8815_firmware qcm6490 sd678 sdx57m_firmware sa6145p_firmware sa9000p qca6430_firmware qca6595 sd675_firmware wcd9370_firmware aqt1000 qca6391 wcn3991_firmware sa8295p qca6174a sa8295p_firmware wsa8835 sm7250p_firmware wcn6851_firmware sd768g_firmware wcn3980_firmware sm7315_firmware qca6574a wcn6750 qca6564a qcn9012_firmware qrb5165m sdx65_firmware qca6595au wcn6851 qcn9012 qcs6490_firmware sd865_5g wcd9340_firmware wcn6850_firmware sd865_5g_firmware qca6564au_firmware qca9377_firmware wsa8830_firmware wcd9341 sd845_firmware wcn3991 wcn3998 wcn6856_firmware qca6574au sd888_firmware sm7315 wcn3990_firmware sdx55m wcd9341_firmware qcs603_firmware sd670 qca6420_firmware qca6564au sd_675 sa9000p_firmware wsa8815 sd850_firmware sd_8cx_gen3 wcd9326 wcn6856 wcn6740 qca6564a_firmware wcn7850 sd_8_gen1_5g_firmware qca6426 wcd9380 qrb5165n qcn9011_firmware qrb5165_firmware sa8155p_firmware qsm8350 sd_8cx_firmware sd780g_firmware qca8337_firmware sd870_firmware wcd9326_firmware qcn9011 sd_8cx_gen3_firmware qca6574 sd_8cx_gen2_firmware sd870 sd765_firmware wcn7851_firmware sdx57m qca6426_firmware sd845 qrb5165n_firmware qcs6490 sd778g qam8295p_firmware sd_675_firmware sd768g wsa8810 qca6335 wcn6850 sd855 sd_8cx_gen2 qca6310_firmware wcd9380_firmware sd678_firmware sd888_5g sa8155_firmware sd670_firmware sd780g qca6335_firmware qca6390 qca6421 qrb5165 sa6155 qca6595au_firmware qcm6490_firmware wsa8810_firmware qca6310 sdx55m_firmware wcd9375 wcd9370 sa8150p_firmware wcn7851 qrb5165m_firmware wcd9340 qca6436 qca9377 wcd9385 sa6155p_firmware sd_8cx sa8150p sd765g wcn3950 qca6595_firmware qcs603 sdxr2_5g sa6155_firmware aqt1000_firmware sd888 sdx50m qca6431 sd675 wcn3980 sm7325p_firmware qca8081 qca6574au_firmware sa8155p sa8540p qca6421_firmware sd765g_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.13%

||

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Use After Free in DSP Services

Memory corruption while processing IOCTL call for getting group info.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware qcm8550_firmware qcs410_firmware sa6150p_firmware sw5100p qca6595 qcs610_firmware wcd9335 wcd9370 qca8081_firmware qca6696 qam8620p_firmware wcd9340_firmware wcd9341_firmware wcd9395_firmware qcn6024 qcc710_firmware snapdragon_8\+_gen_1_mobile wcn6740_firmware fastconnect_6700 snapdragon_780g_5g_mobile snapdragon_685_4g_mobile sa4150p snapdragon_782g_mobile_firmware wsa8832_firmware qca8337 qdu1110 wcd9395 qca6574au_firmware snapdragon_x72_5g_modem-rf sm6370 qam8295p snapdragon_x12_lte_firmware wcd9341 qca6574au wcd9390 snapdragon_888\+_5g_mobile_firmware sa8620p_firmware wsa8810_firmware wsa8845h_firmware csra6640 snapdragon_778g_5g_mobile_firmware sa9000p_firmware srv1h qcs5430 qcn6024_firmware qcm5430 qcm5430_firmware video_collaboration_vc1_platform_firmware sa4155p sa8770p qcm6125_firmware ssg2115p qcc710 qsm8350_firmware fastconnect_6900 snapdragon_w5\+_gen_1_wearable_firmware video_collaboration_vc1_platform qru1032_firmware qep8111 sa7255p sm8635 qfw7114 wcd9385_firmware qam8255p_firmware sdx61 snapdragon_x65_5g_modem-rf qcs4490 snapdragon_680_4g_mobile wsa8845 sa6155p qcm6125 qca6564au_firmware wsa8810 qam8650p video_collaboration_vc5_platform_firmware sa9000p qdu1000_firmware srv1h_firmware snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile sxr2250p_firmware sm7315_firmware qdu1010 snapdragon_662_mobile_firmware sa6155p_firmware snapdragon_685_4g_mobile_firmware wsa8840 srv1m_firmware qcs8550_firmware snapdragon_782g_mobile snapdragon_x35_5g_modem-rf_firmware qdu1210_firmware snapdragon_8_gen_2_mobile_firmware qfw7124_firmware snapdragon_4_gen_2_mobile_firmware qcn9012 snapdragon_695_5g_mobile_firmware qcs4490_firmware snapdragon_7c\+_gen_3_compute_firmware snapdragon_x62_5g_modem-rf_firmware snapdragon_460_mobile snapdragon_8_gen_2_mobile wcd9370_firmware qdu1110_firmware qdu1000 sa7255p_firmware qca6574a snapdragon_x72_5g_modem-rf_firmware snapdragon_8\+_gen_2_mobile qca6174a sa8195p wcd9340 qcs8250_firmware qdu1210 talynplus snapdragon_auto_5g_modem-rf_gen_2 qcm6490 sm8550p_firmware sxr2250p qcm8550 wcn3988 sm6370_firmware snapdragon_662_mobile qcn9024 sa8775p qca6574 sxr2230p_firmware qcn9011 sa8775p_firmware qamsrv1h smart_audio_400 qcn9024_firmware wsa8845h sa6150p qcs410 sa8155p_firmware qca6564a sa8155p wsa8830 sm8550p sa6145p sa8255p_firmware ar8035 qamsrv1m_firmware snapdragon_4_gen_2_mobile qrb5165m_firmware sa8650p_firmware qcm4325 srv1l_firmware qcn6224 qca6698aq wcn3950_firmware sa7775p_firmware ssg2125p_firmware qrb5165n snapdragon_480\+_5g_mobile fastconnect_6200 sm7325p_firmware sa8145p_firmware snapdragon_480_5g_mobile_firmware qdx1011 sa8150p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware snapdragon_x75_5g_modem-rf_firmware snapdragon_8_gen_3_mobile qcs6490 qcs8250 snapdragon_695_5g_mobile snapdragon_778g_5g_mobile fastconnect_6200_firmware wsa8830_firmware snapdragon_460_mobile_firmware qcn6224_firmware qca6678aq_firmware wsa8845_firmware wsa8832 sdx61_firmware snapdragon_480_5g_mobile srv1l srv1m qca6678aq snapdragon_x35_5g_modem-rf ar8035_firmware snapdragon_778g\+_5g_mobile qrb5165m sa4150p_firmware sd888_firmware snapdragon_x62_5g_modem-rf qca6564au qcs6125_firmware wsa8815_firmware sa8195p_firmware qca8337_firmware snapdragon_x12_lte sg8275p_firmware qca9377_firmware qcm6490_firmware qcm4490_firmware qru1032 wcn3950 qcs6125 flight_rb5_5g qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_7c\+_gen_3_compute talynplus_firmware snapdragon_778g\+_5g_mobile_firmware sa8295p_firmware smart_audio_400_firmware sa4155p_firmware qca6584au sd888 qcn6274_firmware wcn6755_firmware qcn9011_firmware qru1062_firmware sw5100_firmware wcn6740 snapdragon_780g_5g_mobile_firmware qru1062 snapdragon_8_gen_3_mobile_firmware qfw7114_firmware qcs7230 qca6595_firmware fastconnect_7800_firmware sm8635_firmware fastconnect_6900_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p sa8150p wcn6755 snapdragon_auto_5g_modem-rf_firmware sxr1230p sw5100 video_collaboration_vc3_platform snapdragon_4_gen_1_mobile_firmware qca6688aq qam8295p_firmware sm7315 qca6698aq_firmware qca6564a_firmware wcd9385 snapdragon_888\+_5g_mobile qsm8350 snapdragon_8_gen_1_mobile snapdragon_680_4g_mobile_firmware sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware qep8111_firmware sg8275p qdx1011_firmware snapdragon_auto_5g_modem-rf flight_rb5_5g_firmware ssg2125p qru1052 qcm4490 snapdragon_x65_5g_modem-rf_firmware csra6640_firmware snapdragon_480\+_5g_mobile_firmware qamsrv1m robotics_rb5 qca6174a_firmware sm7325p qam8650p_firmware video_collaboration_vc5_platform qcs6490_firmware wcd9335_firmware qam8620p qrb5165n_firmware wcn3980_firmware qca6584au_firmware qcn6274 wsa8835 wsa8840_firmware qca6391_firmware qfw7124 qca6595au_firmware qcs610 qdu1010_firmware sw5100p_firmware qca6696_firmware wcd9380_firmware qca6574_firmware csra6620 qca8081 wsa8815 mdm9628 sg4150p sd_8_gen1_5g qam8775p qca9377 snapdragon_ar2_gen_1_firmware qca6797aq mdm9628_firmware snapdragon_x75_5g_modem-rf qcm4325_firmware sa8620p qca6574a_firmware snapdragon_4_gen_1_mobile sd_8_gen1_5g_firmware wcd9375_firmware sa7775p qca6391 qcn9012_firmware qcs5430_firmware sg4150p_firmware qru1052_firmware sa8770p_firmware csra6620_firmware sa8295p qcs8550 fastconnect_7800 sa8650p qam8775p_firmware snapdragon_8\+_gen_2_mobile_firmware wcd9375 qca6688aq_firmware snapdragon_ar2_gen_1 wcn3988_firmware qamsrv1h_firmware sa8145p snapdragon_8\+_gen_1_mobile_firmware wsa8835_firmware ssg2115p_firmware wcn3980 qdx1010 snapdragon_w5\+_gen_1_wearable snapdragon_8_gen_1_mobile_firmware Snapdragon qam8255p_firmware qca9377_firmware talynplus_firmware snapdragon_662_mobile_platform_firmware sa6150p_firmware sa8145p_firmware sxr2230p_firmware sg8275p_firmware mdm9628_firmware flight_rb5_5g_platform_firmware qcn6224_firmware wcn3950_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware wcn6755_firmware qca6595au_firmware csra6620_firmware csra6640_firmware qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qca6584au_firmware qep8111_firmware qrb5165n_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qcn6024_firmware qamsrv1h_firmware sd_8_gen1_5g_firmware qsm8350_firmware qam8295p_firmware qcn9011_firmware sa9000p_firmware sm7315_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware wcd9375_firmware qca8081_firmware wsa8845h_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware sa8620p_firmware sa6155p_firmware snapdragon_auto_5g_modem-rf_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qca6678aq_firmware smart_audio_400_platform_firmware sa8775p_firmware qrb5165m_firmware wsa8840_firmware sa4155p_firmware qcs8550_firmware wcn3988_firmware qru1062_firmware sa6145p_firmware sa7775p_firmware fastconnect_6700_firmware wsa8810_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware qdu1000_firmware qca6698aq_firmware qca6174a_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware qca6696_firmware qcs6490_firmware snapdragon_x12_lte_modem_firmware qru1052_firmware qcc710_firmware wsa8830_firmware wsa8815_firmware wsa8835_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware sa8295p_firmware sxr2250p_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qca6688aq_firmware qcm6125_firmware qualcomm_video_collaboration_vc1_platform_firmware robotics_rb5_platform_firmware qca8337_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware qcs7230_firmware qdu1010_firmware sxr1230p_firmware qdu1110_firmware snapdragon_x72_5g_modem-rf_system_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware sm8635_firmware qcn9012_firmware sm6370_firmware qfw7114_firmware wcd9335_firmware qcm4325_firmware qca6574_firmware wcd9340_firmware sm7325p_firmware qru1032_firmware wsa8845_firmware qca6574a_firmware fastconnect_6200_firmware snapdragon_x62_5g_modem-rf_system_firmware wcn3980_firmware wcn6740_firmware qcm4490_firmware snapdragon_x35_5g_modem-rf_system_firmware qcn6274_firmware qcs4490_firmware qcm6490_firmware sa8650p_firmware wsa8832_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware srv1h_firmware qca6797aq_firmware sa8155p_firmware qdx1011_firmware qca6564a_firmware qcn9024_firmware sa7255p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qdx1010_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qamsrv1m_firmware srv1m_firmware qam8650p_firmware qca6595_firmware qcs5430_firmware qca6391_firmware sa4150p_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware sdx61_firmware ssg2115p_firmware sw5100_firmware qam8620p_firmware qcs410_firmware qfw7124_firmware qdu1210_firmware ar8035_firmware

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.07% / 20.93%

||

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-05 Mar, 2025 | 16:45

Use of Out-of-range Pointer Offset in MODEM

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sc8180x\+sdx55 qcs2290 qca6595au_firmware qca6335 msm8917 mdm8215 sd_455_firmware csra6620_firmware apq8076 qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware mdm8615m_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 qcn6024_firmware sd720g sd_8cx_gen2_firmware mdm9206_firmware qsw8573_firmware mdm9628 sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware mdm9230_firmware sm7315_firmware mdm8215m wcn7850 qca6574au_firmware mdm9630 wcd9375_firmware qca8081_firmware wcn3998_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 wcd9360 sd680_firmware qca9367_firmware mdm8207 sd_8cx_gen2 qcs6125 apq8056_firmware qca4004_firmware sd662_firmware mdm9615m qca6430 qcs405 qts110 wcd9306_firmware wcd9340 sd626_firmware sd765g qualcomm215_firmware sw5100 sd680 qca6436 wcn6851 qcs603_firmware wcn7851_firmware msm8937 apq8052 msm8209_firmware mdm9250_firmware wcn3660_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g mdm8215_firmware wcn3910_firmware mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd855_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 sd712 wcn3988 sd660_firmware wcn7850_firmware sm8475 msm8208_firmware wcn6750_firmware sd450 wcn3610 msm8608 mdm9640 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 sd625_firmware qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware qet4101_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware sd626 qca6174 qca6430_firmware sd439_firmware wcd9335_firmware wcn3980 qca6335_firmware qsw8573 qcm4325_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 msm8956_firmware qca6584_firmware qca6320 msm8937_firmware mdm9650_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 qcn9024 wcn3980_firmware sd730 wcd9330_firmware sdx55m qcc5100_firmware qca6421_firmware wcn6740_firmware ar6003_firmware sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qcn9024_firmware qca6564a_firmware apq8009w msm8976sg_firmware sdx57m qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware sd695_firmware sdxr1 apq8096au qcs405_firmware mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sd780g_firmware sdx55 sd888_firmware sd675 csra6640 sdx70m sd439 qet4101 wcn3660 qca9379 ar8035_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcs2290_firmware sd7c_firmware csrb31024 mdm9628_firmware snapdragon_4_gen_1_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware mdm9310_firmware wcd9370 sd675_firmware sd625 qca6426 qca6584au_firmware wcn3990_firmware apq8076_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware mdm9615m_firmware wcn3615_firmware sd662 apq8037 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au sm7250p_firmware wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 qca6310 wcn7851 sd429 sa515m_firmware qcs6490 sdxr2_5g qca9367 sdm630 mdm9607_firmware sd821 msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 sg4150p qca8081 qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m qcs6490_firmware sdx70m_firmware qca6390 wcd9375 sd750g_firmware aqt1000 msm8956 msm8976 sc8180x\+sdx55_firmware sm6250_firmware ar8035 msm8952 apq8056 msm8917_firmware sda429w sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 ar6003 qca6564a mdm9630_firmware sg4150p_firmware qcm6125_firmware qcm4325 qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qcc5100 sdx24 sd888 msm8952_firmware msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 apq8052_firmware mdm9615 mdm9205 sa515m qca6574_firmware sd855 sm7325p_firmware sd665 sdx57m_firmware sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware sm7315 apq8009 sd460 qca6391 sdxr1_firmware mdm9310 aqt1000_firmware msm8920 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m sdx20 sd480_firmware msm8920_firmware mdm9215 sd_455 qca6574au sd710 mdm8215m_firmware mdm9607 sd205_firmware wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 wcn3680b sd835_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sdw2500 msm8940 apq8096au_firmware qcn6024 sd845 mdm9615_firmware apq8037_firmware sm7250p sd720g_firmware sdx12 sw5100_firmware qcs410_firmware mdm9330 sd850 qts110_firmware Snapdragon

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 19.69%

||

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 04:42

Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware wsa8830 qca8337 sdx65 wcn3950_firmware qca6595au_firmware qca6390_firmware wcd9370 qca6426 qca9377 wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware sd_8_gen1_5g_firmware sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware wcn3998_firmware qca6436_firmware sm7450_firmware sd778g sa6155p_firmware wcn7851 qcs6490 sdxr2_5g wcn3988_firmware sd778g_firmware sa8195p wsa8810_firmware sw5100 qca6436 wcd9326 wcd9335 sa6155p wcn6851 qca8081 wcn7851_firmware qca6174a_firmware wcd9385 wcd9341 qca6696_firmware qcs6490_firmware sd870_firmware qca6390 ar8035 wcd9375 wsa8830_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware sa8195p_firmware sm7450 wsa8835_firmware sm8475 wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware sw5100p sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 wsa8835 qca6574 wcd9380 sd888_5g qca6574a wcn6855_firmware qca6174a sm7325p wcd9335_firmware wcn3980 wcn6750 qca6574_firmware wsa8815 sm7325p_firmware wcn6850 qca6426_firmware qca6574a_firmware sd695 wcn3980_firmware sm7315 sd460 qca6391 sdx55m sm8475_firmware wcn6740_firmware sdx65_firmware qcm6490_firmware wsa8832_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware wcd9341_firmware sd480 sd870 wsa8810 wcn6855 wsa8832 sw5100p_firmware wcn6856 sd695_firmware wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sd888_firmware sa8155p sw5100_firmware sdx12 sm8475p_firmware ar8035_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.1||HIGH

EPSS-0.04% / 11.70%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 19:53

Buffer Copy Without Checking Size of Input in Kernel

Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_8cx_gen3_firmware wcn3991_firmware wsa8830 sd678 qca8337 qca6431_firmware sdx65 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sa6155 qca6335 wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qca6426 wcn3990_firmware qrb5165n_firmware qca9377 wcn3998 sd_8cx_firmware wcd9385_firmware qam8295p sd_8cx_gen2_firmware sdxr2_5g_firmware wcd9326_firmware wcn3950 sd_8_gen1_5g_firmware qsm8350_firmware qsm8350 qam8295p_firmware qcn9011_firmware sa8155 sa9000p_firmware sm7315_firmware qca6574au_firmware sdx55_firmware wcn7850 qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware qca6310 sd_8cx_gen2 wcn7851 qcs6490 qrb5165_firmware qrb5165m_firmware sdxr2_5g sa8155_firmware qca6430 sa6145p_firmware qca6421 sd778g_firmware wcd9340 wsa8810_firmware sd765g sd765_firmware qca6436 wcd9326 wcn6851 sa6155p qca8081 qcs603_firmware wcn7851_firmware qca6174a_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware sd870_firmware sd_8cx_gen3 qca6390 ar8035 sd_8cx aqt1000 sa8150p wcd9375 wsa8830_firmware sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sm8475 qca6564a sa8295p_firmware wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd780g sd865_5g qca6595 qca6564au sdx24 sdx55m_firmware wcn6856_firmware qcn9012 sd888 sd670_firmware qca6574 wsa8835 sa8540p_firmware wcd9380 sd888_5g qca6574a sdx50m_firmware wcn6855_firmware qca6174a sm7325p sdx24_firmware qca6310_firmware qca6430_firmware qcn9012_firmware wcn3980 wcn6750 qca6335_firmware sa9000p qca6574_firmware qcs605 wcd9340_firmware sd855 wsa8815 sm7325p_firmware wcn6850 sdx57m_firmware sd765 qca6426_firmware qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware wcn3980_firmware sm7315 qca6391 sdx55m sa8295p qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware qcm6490_firmware sdx50m qrb5165 wcn6851_firmware qcs603 qcn9011 qca6574au sa8155p_firmware sd670 qca6564a_firmware sdx57m wcd9341_firmware wsa8810 sd870 wcn6855 sa8540p wcn6856 sa6145p sd768g qca6595_firmware wcn6740 qca6696 qca6391_firmware sd845_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sd845 sm7250p ar8035_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.07% / 20.93%

||

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 04:42

Buffer copy without checking the size of input in WLAN HAL.

Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 ipq4028_firmware qcn5550 ar9380 ipq8173_firmware wcd9360_firmware qca9561_firmware qcn5124 qca4024_firmware msm8992_firmware wcn3950_firmware sc8180x\+sdx55 ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 qcn5064 mdm8215 sd_455_firmware csra6620_firmware apq8076 qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware qca9987_firmware sa415m wcn3998 qca6554a_firmware wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware sd_8cx_gen2_firmware ipq8076a mdm9628 wcn3660b sd710_firmware sd460_firmware qca4020 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 sdx20m qca6438_firmware qca9986 sd680_firmware ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware wcn3999 sd_8cx_gen2 ipq5028 qca7500 ipq8072_firmware ipq4029_firmware qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 wcd9340 qcn6132 sd765g qca1990_firmware sw5100 sd680 qca4020_firmware sa6155p qcs603_firmware mdm9250_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca6696_firmware wcd9371 sd750g qcn5154_firmware mdm8215_firmware wcn3910_firmware sd_8cx sa8150p qfe1922 wsa8830_firmware mdm9330_firmware qca9992_firmware sd660 sd855_firmware snapdragon_4_gen_1 sd712 wcn3988 qca6438 sd660_firmware sa8195p_firmware qcn5121 qcn5022_firmware qca9898 ipq4028 qca4010_firmware wcn3610 mdm9640 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware sw5100p msm8996au_firmware wcd9330 ipq8076a_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 qcn5164 qca9558 msm8976_firmware qca6574 sd670_firmware csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware ipq4019_firmware sdx50m_firmware qca9379_firmware qca9985 qcn9012_firmware qca6174 qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcm4325_firmware qcs605 wcd9340_firmware wsa8815 sd7c wcn3910 qca6320 qca6584_firmware mdm9650_firmware qca9986_firmware mdm9215_firmware wcn3660b_firmware sd695 ipq6028 ipq8064 sd835 qca9984 qcn9024 qca1990 wcn3980_firmware sd730 qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware qcc5100_firmware qcn5064_firmware sd678_firmware ar8031_firmware ipq8078_firmware qcn5054 qcs603 ipq8070 qca9994 qca6164_firmware qca9887_firmware qca9980 sd670 qcn9024_firmware ipq8174_firmware sd_636_firmware qca6564a_firmware qca9880 qcm4290_firmware sd480 qcn5121_firmware sw5100p_firmware qcs610_firmware apq8084_firmware sa6145p ipq6018 qca9886_firmware sd695_firmware sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware sa8145p qca6164 sdm630_firmware sd820_firmware qca6391_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware sa8155p csra6640 sd675 qca9531_firmware qca9379 qcm2290 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qca9561 qcn9070 sa8145p_firmware qcs2290_firmware sd7c_firmware csrb31024 mdm9628_firmware snapdragon_4_gen_1_firmware mdm9650 sd_636 csra6620 qca9987 qcn9072 qca9880_firmware qca9992 qcs4290 mdm9250 sd765g_firmware qca6420_firmware ipq8069_firmware apq8009_firmware qca6390_firmware sd690_5g ipq6000 qca6174_firmware mdm9310_firmware sd730_firmware sd675_firmware wcd9370 ipq8072 qcn5152_firmware qca6564 qca6584au_firmware wcn3990_firmware apq8076_firmware qcn9000_firmware qca9984_firmware qca9377 ipq5018 sd_8cx_firmware wcd9385_firmware wcd9326_firmware wcn3615_firmware ipq8074a sd662 qcn5124_firmware qca9982 qfe1952_firmware apq8094 sa8155 qca6320_firmware qca6584 wcn3680b_firmware qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware ipq5010 qca6564au_firmware qca6584au sa6155p_firmware qfe1952 qca6310 ipq8174 sa515m_firmware qca9990 qcn5052 qca9367 mdm9235m_firmware apq8092 apq8084 sdm630 mdm9607_firmware sa415m_firmware wcn3988_firmware msm8994_firmware qcn9074 sa6145p_firmware msm8992 sm6250 sd712_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca4010 sg4150p qca8081 qca9982_firmware qcn6023 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qca6390 qca9898_firmware sd750g_firmware aqt1000 msm8976 wcd9375 sc8180x\+sdx55_firmware sm6250_firmware csr8811 ipq4019 qcn9100_firmware msm8994 apq8092_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware sd820 wsa8835_firmware apq8017 qca6564a mdm9235m sg4150p_firmware qcm6125_firmware qcm4325 qca9882 qcm2290_firmware mdm9635m_firmware wcn3990 qcn9000 sd_675 qca6554a qca6595 ar9380_firmware qcc5100 qcn9012 qca9558_firmware qcn6122_firmware ipq8065_firmware wsa8835 msm8996au sd665_firmware sm6250p qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware mdm9206 qca9889 qca6174a qcn6132_firmware qca9888 qca6310_firmware ipq8074 apq8094_firmware qca9994_firmware mdm9635m ipq8070a_firmware mdm9615 ipq8076_firmware sa515m qca6574_firmware qca9886 sd855 sm4125_firmware sd665 ipq8076 qfe1922_firmware qca6175a sd765 qca9887 qca6574a_firmware qcn5021 ipq8069 qcn5152 sd768g_firmware sd850_firmware apq8009 sd460 qca6391 sdxr1_firmware mdm9310 ipq6005 aqt1000_firmware qcn9100 qcm4290 csrb31024_firmware sdx50m qca9882_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware mdm9215 sd_455 qca9531 ipq8074_firmware qca6574au qca9889_firmware sd710 mdm9607 qcn5122 sa8155p_firmware wcd9341_firmware sdx20m_firmware qcm6125 wsa8810 qcn5022 wcn3680b sd835_firmware qca6564_firmware sd768g ipq6010_firmware qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 sd845 mdm9615_firmware qca9990_firmware ipq8070a qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware ipq8071_firmware qcn9074_firmware qcs410_firmware sw5100_firmware mdm9330 ipq4029 qca6175a_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 7.28%

||

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware qcn9072_firmware msm8996au qca6310 qca6595au_firmware qcn9000 qualcomm215_firmware sd429_firmware sd730 ipq6028 qcn9070 qcn5122 qsm8250_firmware qca6564au qca6426_firmware wcn3660b sd720g ipq8078a sd205_firmware msm8996au_firmware qca9889_firmware qcn5124 wsa8815 ipq9008 wcn3680b qca6430 wcn3620_firmware sd855 ipq9008_firmware wcd9340 sdx55_firmware sdxr2_5g_firmware qcn5022_firmware mdm9650 qca8072 qca6574a sd865_5g_firmware sdm429w_firmware sd835_firmware qcn5024 ipq4019_firmware qca9994 qca6335 sd_675 qcn5024_firmware qca6595 qca6430_firmware qca8081 sd870 ipq6018 mdm9150 ipq5018_firmware ipq9574 qca6390_firmware qcn9024_firmware ipq4028_firmware ipq8072a ipq8070a ipq8070a_firmware qca9880_firmware sd870_firmware sm6250 qcs8155 ipq8078_firmware ipq4019 qca6595au wcd9370 wcn3980 qcn5152 qca9992 qcn9022 sd720g_firmware ipq8065_firmware qca9985_firmware mdm9150_firmware qca9888_firmware sdx55m wcn6850_firmware qcn9274 wsa8810_firmware wsa8815_firmware wcn3991_firmware ipq8078 ipq8076a qca6436 ipq8071a qca4024 sa8155p wsa8810 aqt1000_firmware qcn9012 ipq8076 wcd9335_firmware qcn5154_firmware ar9380_firmware qca6391 qcn9024 qcn5052_firmware wcn3998_firmware wcn6851 wcd9370_firmware sd675 qca6420_firmware ipq8074a qcn6023_firmware sd210_firmware ipq4028 qca9886_firmware qca7500_firmware ipq8174 ipq8064_firmware qcn6122 sdm429w ipq8070 qcs610 qualcomm215 qca6391_firmware sd205 qcn9012_firmware sa8155p_firmware sa6145p wcn3610 wcd9375 ipq8076_firmware qca9980_firmware sd865_5g wcn3990_firmware wcn3950_firmware wcn3988 ipq8071a_firmware qca9980 qca6310_firmware qcs8155_firmware qca6436_firmware qcn5021_firmware wcd9341_firmware ipq8074a_firmware qca9886 ipq6000_firmware qcn6102 ipq4018 wcd9340_firmware sd_675_firmware qca6564a_firmware qcn5021 sd855_firmware qcn5054_firmware mdm9650_firmware qca9889 sdx50m qcn6024_firmware sdx55 ipq5018 wcn3610_firmware qca9990 wcn3660b_firmware qca7500 sa6145p_firmware ipq5028_firmware qca6390 sda429w_firmware sdx50m_firmware ipq5010_firmware sa6155p qca4024_firmware wcn6850 csr8811 wcn3950 ipq6018_firmware qca6320_firmware qcn9100_firmware qcn5122_firmware qcn6024 wcd9335 ipq8078a_firmware sd835 wcn3680b_firmware qca6595_firmware ipq6010 qca6574au_firmware ipq4029_firmware qca6564_firmware qcs610_firmware qcn9074 qcn9274_firmware qcn5054 wcd9380 qcn6102_firmware qcn5052 sd730_firmware ipq8064 wcd9375_firmware ipq8070_firmware qca9880 qcn6132_firmware aqt1000 qcn5152_firmware qcn6100_firmware qca9985 qcn6112 qca8072_firmware qsm8250 qca6420 qca9898_firmware qcn5124_firmware sa515m sd845_firmware sa515m_firmware qcn5164_firmware qca9994_firmware wcn3990 sd429 ipq6028_firmware qcn6023 qca8081_firmware qca9984 ipq8068 wcn3998 csr8811_firmware qca8337_firmware qca9898 qca8075_firmware qcn5164 qcn6122_firmware qca9990_firmware ipq8068_firmware ipq8072a_firmware sd678 qca6574au qcn6112_firmware ipq4029 ipq9574_firmware apq8096au qcs410_firmware qcn9000_firmware sd210 ipq8173_firmware ipq8065 qcn9070_firmware pmp8074 qca8075 pmp8074_firmware sd678_firmware ipq6010_firmware qca9984_firmware wcn3991 ipq8076a_firmware ar9380 qca6564a sd675_firmware qca6574a_firmware qca9888 sda429w qca6320 ipq8174_firmware qca8337 sm6250_firmware qcn6100 sdxr2_5g qcn6132 wcd9341 wcn3980_firmware wcn6851_firmware ipq4018_firmware sa6155p_firmware qcn9074_firmware qca9992_firmware qcn5154 apq8096au_firmware ipq8173 qcn9072 qca6564au_firmware qca6426 qca6335_firmware sdx55m_firmware qcn9100 qcn5022 ipq6000 wcn3620 qca6564 ipq5010 wcn3988_firmware qcn9022_firmware ipq5028 sd845 qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.35%

||

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-16 Nov, 2024 | 04:55

Buffer Copy Without Checking Size of Input in WLAN Windows Host

Memory corruption while station LL statistic handling.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800 wsa8830 wcd9380_firmware sdm429w qcs6490 qcm6490_firmware wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware qcc2073 wsa8840 wsa8835 sdm429w_firmware fastconnect_6700_firmware wcd9380 fastconnect_7800_firmware wsa8845h fastconnect_6700 video_collaboration_vc3_platform snapdragon_8cx_gen_3_compute_platform wcd9370 qcm5430 qcs5430 qcm5430_firmware wcd9385 video_collaboration_vc3_platform_firmware qcs6490_firmware qcc2076_firmware qcs5430_firmware wcd9385_firmware wsa8845 qcc2073_firmware wcd9375 wcd9370_firmware wcn3660b wsa8830_firmware qcc2076 wsa8845_firmware wcn3620_firmware qcm6490 wcn3660b_firmware wsa8835_firmware wcn3620 snapdragon_429_mobile_platform_firmware sc8380xp wsa8845h_firmware wcd9375_firmware snapdragon_429_mobile_platform snapdragon_8cx_gen_3_compute_platform_firmware Snapdragon qcm5430_firmware wcd9380_firmware qcs6490_firmware qcm6490_firmware qcc2076_firmware wsa8840_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware fastconnect_6900_firmware qcc2073_firmware wcd9370_firmware sc8380xp_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wcd9375_firmware wsa8845h_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 9.67%

||

7 Day CHG~0.00%

Published-07 Apr, 2021 | 07:55

Updated-04 Aug, 2024 | 11:28

When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qfe3100 qfe2080fc_firmware qca9377_firmware qfs2580 qpm5679_firmware mdm9640_firmware pmd9607_firmware qfe4455fc_firmware qca8337 qfs2530 qln1030 pm6125 qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpm5541_firmware sa6155 pm7150l qcc1110_firmware pm8998_firmware qpa8821 wtr5975_firmware qpa5580_firmware msm8108 wcn3998 wcd9371_firmware msm8108_firmware wcn3950 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qfe4320 qsw8574_firmware smb2351_firmware pm8953_firmware qpa4360_firmware wcn3998_firmware qfe2520_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 wtr4605_firmware qca9367_firmware pm660_firmware pm8150b sa8155_firmware qfe2101 qca6430 qat3522 qfe4455fc wcd9340 sdm830_firmware sd765g sdr660 msm8209_firmware sdr865 mdm9250_firmware qdm5620_firmware smb1358 qca6696_firmware qln5020 wcd9371 sd870_firmware smb1350 pmm855au_firmware wtr3950 qfe3340 qdm5621 qtc800s qat3514_firmware sd660 sd712 pm640p_firmware sd660_firmware qcn7606_firmware qat5516_firmware sd450 pm855l_firmware qtc410s wcn3991 qpa8801 sdm429w pm8150l_firmware qat5533_firmware sdx55m_firmware sdxr25g qpa8673_firmware pm6150 sd670_firmware qca6574 sd632_firmware qpa8842 sdr052_firmware pmm8996au wcd9380 qualcomm215 qpm5579_firmware smb1380_firmware qfe4309_firmware smb1381 pm855p_firmware qfe3100_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sdx24_firmware sd439_firmware sdxr25g_firmware pmd9645 qdm2301 wcd9340_firmware wsa8815 qfe2101_firmware qca6584_firmware qdm2301_firmware qdm5621_firmware qpm6375 sd835 wcn3980_firmware sd730 qfe3320_firmware pm660l_firmware pm8008 qtm525_firmware pme605_firmware pme605 sd678_firmware apq8064au_firmware qpm5621_firmware qln1021aq_firmware qcs603 rsw8577 qpa6560_firmware qpa8802_firmware qfe4308_firmware qpm5621 qpm6582 sd670 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcn7605_firmware pm8150l pmi8998_firmware pm660a_firmware pm215 ar8031 qpm5577 wtr2965 sdm630_firmware sa2150p qca6391_firmware sd820_firmware pmx20_firmware pm8150 pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 csra6640 qat3555_firmware pmi8994 qpa8803_firmware wcn3660 qca9379 pm855b smb2351 qln1031 qcn7606 pm8909 pm660 qet6110_firmware qpm6325 pm6125_firmware qbt1500 mdm9628_firmware mdm9650 pmx24_firmware qbt1500_firmware pmk8001 pmm855au mdm9250 qca6420_firmware apq8009_firmware pm7150a sd675_firmware qpa4361_firmware qca6426 wcn3990_firmware qca9377 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware wcd9326_firmware whs9410 wcn3615_firmware wtr2955 rgr7640au_firmware pm7250_firmware sdr845_firmware qdm5620 qln1021aq smb1380 pmk8002_firmware qsw6310_firmware sa8155 qca6584 qln1031_firmware sdx55_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware qsm7250_firmware pm7150l_firmware qca6584au msm8208 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 qca9367 qfe2082fc_firmware sdm630 mdm9607_firmware mdm9655_firmware qfs2530_firmware pmx55 sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware pm8953 qat5515 qpm5677 qat3514 wcd9326 wcd9335 pm8004_firmware sdr8150_firmware pm439 qtc800h_firmware qca6390 wcd9375 aqt1000 qln4642 msm8917_firmware qpm5677_firmware sdx20_firmware wsa8815_firmware wtr3925_firmware pmi8937 pm8998 sdw3100 smr525_firmware qfe4301_firmware apq8017 qln1020_firmware pm670a_firmware pmx55_firmware wtr2955_firmware qbt1000_firmware qfe4373fc_firmware qca6595 pm8150_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c sd665_firmware qpa4360 qpa4361 mdm9206 qpm5577_firmware qdm5679_firmware smr525 qca6310_firmware qfe4305_firmware pmr525 pm8150a_firmware qca6574_firmware wtr3950_firmware qln1036aq_firmware sd665 pm6150_firmware qca6175a sd765 pmx20 pmd9607 qca6574a_firmware qat3555 apq8009 qfe2082fc sd8c_firmware wtr2965_firmware pm670_firmware qln1036aq qtc801s qfe3320 sd710 mdm9607 pm8008_firmware qln1035bd_firmware sdx20m_firmware pmw3100 pmx50 sdr8250 sd768g qln1030_firmware smb1350_firmware pmw3100_firmware pm8004 pm640l pmk8002 sdw2500 apq8096au_firmware sd845 sdm830 smb1357 qca6175a_firmware qpa5580 qpm5579 qfe2550 pmi8996 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware pm855a_firmware qtc800h sdr8250_firmware qca6335 msm8917 csra6620_firmware qcs605_firmware qln1020 wtr3905 qdm5671 csra6640_firmware pmc1000h qpm4650_firmware qat3518 sd8c sd632 smr526_firmware mdm9628 pm640a_firmware qpa5460 wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware wcd9375_firmware qpm5679 qbt2000 sa6155_firmware msm8909w wcd9360 sdx20m pmx50_firmware whs9410_firmware qpa5460_firmware wcn3999 qdm3301_firmware pm8996 qsm7250 qcc1110 qcs405 smb1360 qualcomm215_firmware qfe3440fc rsw8577_firmware pm439_firmware qca4020_firmware qca6436 sa6155p qcs603_firmware qpa6560 wcn3660_firmware wcd9341 pmi8952 mdm9655 pm8937_firmware qca6431 qet4100_firmware qfe4320_firmware sd855_firmware qdm5650 wtr3925 qfe2080fc sdr052 smb1390 sdw3100_firmware msm8208_firmware qet4100 wcn3610 msm8608 mdm9640 qpa8686_firmware qpm6585 qca8337_firmware wcd9380_firmware smb1355 qln4650 qtc800t_firmware wcd9330 msm8996au_firmware wgr7640 csr6030 qet5100 qdm5671_firmware qpa8801_firmware qca6564au sd636 pm8005_firmware qet4101_firmware pm7250b qln4642_firmware pmk8001_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware pm8996_firmware qet4200aq_firmware sdx50m_firmware smb1395 smb358s pm660l smb358s_firmware ar8151 smr526 wtr5975 qca6174 qca6430_firmware qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 qca6335_firmware qsw8573 qcs605 qbt1000 qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 sdr051_firmware wcd9330_firmware sdx55m pm670a qca6421_firmware wtr3905_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 qsw8574 sd821_firmware ar8031_firmware wcn3680_firmware pm855l qdm5670_firmware sd8655g pm7150a_firmware pm8150b_firmware qfe4302 pmc1000h_firmware qca6564a_firmware pmd9645_firmware sd870 pm670 sd210_firmware qdm5677 pm8005 pm855_firmware qdm2302 sdxr1 pm855b_firmware apq8096au qca6595_firmware qcs405_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware pmi8996_firmware qln4650_firmware qet5100m sa8155p sd675 wtr4605 sd439 qet4101 qat3516 pm670l qpm5658 ar8035_firmware qpm5658_firmware wcn3991_firmware qdm5652_firmware qfe4465fc sd678 sdr051 qln5030 pmi632 qpa2625_firmware qfe2081fc_firmware smb1360_firmware csra6620 qet5100_firmware qpa5373 pm670l_firmware sdr660g sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware qca6174_firmware sd730_firmware wcd9370 pmr525_firmware qca6584au_firmware qfe3340_firmware ar8151_firmware pmi632_firmware qcn7605 qpm5541 qat5516 qpa8821_firmware qfe4308 sdr660g_firmware pm3003a qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware qtc800t qca6564au_firmware qdm2305 sa6155p_firmware qca6310 pm8937 qfe2081fc qln5020_firmware sa515m_firmware sd821 sd712_firmware apq8017_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware qln5040_firmware ar8035 apq8064au qpa8673 qfe2550_firmware qln5030_firmware msm8953_firmware sd210 wcn3620_firmware qfe4302_firmware sd820 wcn3620 csr6030_firmware qca6564a pmx24 qet6110 pmi8952_firmware qln5040 qpm8895 sdr845 qpm5670 wcn3990 qfe3440fc_firmware sdx24 pmi8994_firmware msm8909w_firmware msm8996au sdm429w_firmware rgr7640au qln1035bd pm855a sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware qet5100m_firmware qpm4650 qtm525 sa515m sa2150p_firmware sd855 sd8cx qfe4305 pm640p sd768g_firmware sdr865_firmware msm8209 qfe4465fc_firmware pm8250_firmware smb1351 qca6391 sd8cx_firmware sdxr1_firmware smb1357_firmware aqt1000_firmware pm215_firmware qpm8895_firmware pm660a qpa4340 sdx50m pm640a sdr8150 sdx20 pm8916 smb1395_firmware pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 sd8655g_firmware wcd9341_firmware wsa8810 qtc410s_firmware smb231_firmware wtr4905_firmware qat3550 qdm5679 wcn3680b sd835_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware msm8608_firmware qpa2625 sm7250p sd636_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 26.20%

||

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 04:42

Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-416

Use After Free