ByteOS

Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product

Versions

Affected

APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QM215, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20

Problem Types

Type	CWE ID	Description
text	N/A	Cryptographic Issue in HLOS

Type: text

CWE ID: N/A

Description: Cryptographic Issue in HLOS

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:16 Apr, 2020 | 11:15

Updated At:22 Apr, 2020 | 14:44

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 4.6

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

>>apq8009>>-

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

>>apq8009_firmware>>-

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

>>apq8017>>-

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

>>apq8017_firmware>>-

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

>>apq8053>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

>>apq8053_firmware>>-

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

>>apq8096au>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

>>apq8096au_firmware>>-

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

>>mdm9206>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

>>mdm9206_firmware>>-

cpe:2.3:h:qualcomm:mdm9207c:-:*:*:*:*:*:*:*

>>mdm9207c>>-

cpe:2.3:o:qualcomm:mdm9207c_firmware:-:*:*:*:*:*:*:*

>>mdm9207c_firmware>>-

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

>>mdm9607>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

>>mdm9607_firmware>>-

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

>>mdm9650>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*

>>msm8905_firmware>>-

cpe:2.3:h:qualcomm:msm8905:-:*:*:*:*:*:*:*

>>msm8905>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

>>msm8909w_firmware>>-

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

>>msm8909w>>-

cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*

>>msm8917_firmware>>-

cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*

>>msm8917>>-

cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*

>>msm8953_firmware>>-

cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*

>>msm8953>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

>>msm8996au_firmware>>-

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

>>msm8996au>>-

cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*

>>qm215_firmware>>-

cpe:2.3:h:qualcomm:qm215:-:*:*:*:*:*:*:*

>>qm215>>-

cpe:2.3:o:qualcomm:sdm429_firmware:-:*:*:*:*:*:*:*

>>sdm429_firmware>>-

cpe:2.3:h:qualcomm:sdm429:-:*:*:*:*:*:*:*

>>sdm429>>-

cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*

>>sdm429w_firmware>>-

cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*

>>sdm429w>>-

cpe:2.3:o:qualcomm:sdm439_firmware:-:*:*:*:*:*:*:*

>>sdm439_firmware>>-

cpe:2.3:h:qualcomm:sdm439:-:*:*:*:*:*:*:*

>>sdm439>>-

cpe:2.3:o:qualcomm:sdm450_firmware:-:*:*:*:*:*:*:*

>>sdm450_firmware>>-

cpe:2.3:h:qualcomm:sdm450:-:*:*:*:*:*:*:*

>>sdm450>>-

cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*

>>sdm630_firmware>>-

cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*

>>sdm630>>-

cpe:2.3:o:qualcomm:sdm632_firmware:-:*:*:*:*:*:*:*

>>sdm632_firmware>>-

cpe:2.3:h:qualcomm:sdm632:-:*:*:*:*:*:*:*

>>sdm632>>-

cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*

>>sdm636_firmware>>-

cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*

>>sdm636>>-

cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*

>>sdm660_firmware>>-

cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*

>>sdm660>>-

cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*

>>sdx20_firmware>>-

cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*

>>sdx20>>-

Weaknesses

CWE ID	Type	Source
CWE-327	Primary	nvd@nist.gov

CWE ID: CWE-327

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin	product-security@qualcomm.com	Patch Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin

Source: product-security@qualcomm.com

Resource:

Patch

Vendor Advisory

Similar CVEs

1065Records found

CVE-2019-14089

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.16% / 5.56%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-05 Aug, 2024 | 00:12

u'Keymaster attestation key and device IDs provisioning which is a one time process is incorrectly allowed to be re-provisioned after a user data erase or a factory reset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, Nicobar, QCS404, QCS610, Rennell, SA515M, SA6155P, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

CWE ID-CWE-327

Use of a Broken or Risky Cryptographic Algorithm

CVE-2024-43062

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 1.53%

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-03 Mar, 2025 | 12:27

Use After Free in Camera Linux

Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.

Product-Snapdragon

CWE ID-CWE-416

Use After Free

CVE-2016-10408

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 1.26%

7 Day CHG~0.00%

Published-26 Nov, 2024 | 13:56

Updated-09 Jan, 2025 | 20:17

Improper Access Control in Core.

QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.

Product-9206_lte_modem sd820_firmware apq8037_firmware sd626_firmware 9206_lte_modem_firmware sd626 apq8037 sd820 sd821 sd821_firmware Snapdragon sd626_firmware 9206_lte_modem_firmware sd820_firmware apq8037_firmware sd821_firmware

CWE ID-CWE-284

Improper Access Control

CVE-2016-10394

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.10% / 0.92%

7 Day CHG~0.00%

Published-26 Nov, 2024 | 08:55

Updated-09 Jan, 2025 | 21:03

Improper Authentication in Core

Initial xbl_sec revision does not have all the debug policy features and critical checks.

Product-sd_845 sd_850_firmware mdm9607 sd_850 mdm9607_firmware sd_835_firmware mdm9206 sd_835 mdm9206_firmware sd_845_firmware Snapdragon

CWE ID-CWE-287

Improper Authentication

CVE-2023-24851

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 1.86%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN HOST

Memory Corruption in WLAN HOST while parsing QMI response message from firmware.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-30269

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.15% / 4.69%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:25

Updated-03 Aug, 2024 | 22:24

Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product-fsm10055 qca9377_firmware mdm9150_firmware qca2066 sd678 sa6150p_firmware sm6250p_firmware sa8145p_firmware qcs610 wcn3991_firmware wsa8830 qcs2290_firmware fsm10056 qca8337 sd7c_firmware csrb31024 wcd9360_firmware sdx65 csra6620 fsm10055_firmware qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qcs2290 qca6595au_firmware qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware csra6640_firmware qca6564 qca6426 qrb5165n_firmware qca9984_firmware qca9377 sa415m sm8450 sd_8cx_firmware qcn7605 sdxr2_5g_firmware wcd9385_firmware wcn3950 sd720g sm6375_firmware sd662 sd460_firmware sa8155 sa9000p_firmware sm7315_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3999_firmware wcd9360 qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware wcd9306 qsm8250_firmware qcs8155 sm6225 wcn3999 sa515m_firmware qcs6490 qrb5165_firmware sdxr2_5g sa8155_firmware qca4004_firmware sd662_firmware sa415m_firmware qcs405 sc8280xp_firmware wcn3988_firmware sa6145p_firmware sm6250 sd778g_firmware wcd9306_firmware sa8195p sd765g sm8450_firmware sd765_firmware fsm10056_firmware qca6436 wcn6851 sa6155p qca8081 qcs603_firmware qca6174a_firmware qcs4290_firmware wcd9385 qca2066_firmware qca6696_firmware qcs6490_firmware sd750g sd870_firmware ar8035 qca6390 sd_8cx sd750g_firmware sa8150p wcd9375 sm6250_firmware wcn3910_firmware qca4004 wsa8830_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8835_firmware sa8195p_firmware qcx315 qcn7606_firmware qca6564a wcn6750_firmware qcm2290_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware sd_675 sd780g sd865_5g qca6564au sdx24 sdx55m_firmware sm8450p_firmware wcn6856_firmware sd888 wsa8835 qca6574 qcx315_firmware sd665_firmware sa8540p_firmware wcd9380 sd888_5g sd850 sm6250p qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6174a sm7325p sdx24_firmware wcn6750 mdm9205 sa515m qca6574_firmware qcs605 sa9000p sm7325p_firmware sd665 sd7c wcn3910 wcn6850 sd765 qca6426_firmware qca6574a_firmware qca9984 sd768g_firmware sd850_firmware sm7315 sd460 qca6391 sd730 sdx55m sdxr1_firmware wcn6740_firmware sdx65_firmware sd678_firmware ar8031_firmware csrb31024_firmware qcm4290 qcm6490_firmware qrb5165 sd480_firmware qcs603 wcn6851_firmware sm6225_firmware qca6574au sa8155p_firmware qca6564a_firmware qcm4290_firmware sd480 sd870 sm8450p qcn7605_firmware wcn6855 sa8540p qcs610_firmware mdm9150 wcn6856 qsm8250 sa6145p qca6564_firmware sdxr1 sd768g ar8031 qcs405_firmware sa8145p wcn6740 qca6696 mdm9205_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sc8280xp sdx55 sa8155p csra6640 sd675 sm7250p sd720g_firmware qcs8155_firmware qcs410_firmware ar8035_firmware qcm2290 qcn7606 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2021-30279

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.14% / 3.32%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:25

Updated-03 Aug, 2024 | 22:32

Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Product-qcm2290_firmware wcn3991_firmware sm6375 wcn3991 wsa8830 qca8337_firmware wcd9380_firmware wcn3990 qcs2290_firmware qca8337 sd865_5g sdx55m_firmware wcn6856_firmware wsa8835 qcx315_firmware qcs4290 wcn3950_firmware wcd9380 sd765g_firmware sd888_5g qcs2290 qca6390_firmware sd690_5g wcd9370 sd690_5g_firmware wcn6855_firmware sm7325p qca6426 wcn3990_firmware qrb5165n_firmware qca9984_firmware wcd9335_firmware wcn3980 wcn3998 wcn6750 wcd9385_firmware sdxr2_5g_firmware wcn3950 sm6375_firmware wsa8815 sm7325p_firmware wcn6850 sd662 wcn3910 sdx57m_firmware sd460_firmware sd765 qca6426_firmware qca9984 sd768g_firmware sdx55_firmware wcd9375_firmware wcn3998_firmware wcn3999_firmware wcn3980_firmware sm7250p_firmware sd460 qca6391 sdx55m qca6436_firmware qrb5165n sd778g sm6225 wcn3999 qcs6490 qrb5165_firmware sdxr2_5g qcm4290 qcm6490_firmware qrb5165 sd480_firmware wcn6851_firmware sd662_firmware sm6225_firmware qcs405 wcn3988_firmware sd778g_firmware wsa8810_firmware sd765g sdx57m wcd9341_firmware qcm4290_firmware sd765_firmware sd480 qca6436 wcn6851 wcd9335 sd870 wcn6855 wsa8810 wcn6856 qsm8250 qcs4290_firmware wcd9385 wcd9341 sd768g qcs6490_firmware qcs405_firmware sd750g sd870_firmware qca6391_firmware qca6390 ar8035 sd750g_firmware wcd9375 wcn3910_firmware wcd9370_firmware sdx55 wsa8830_firmware sd660 sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 sd660_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7250p qcx315 wcn6750_firmware ar8035_firmware qcm2290 qsm8250_firmware Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-281

Improper Preservation of Permissions

CVE-2021-30334

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.16% / 5.51%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:10

Updated-03 Aug, 2024 | 22:32

Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

Product-fsm10055 qca9377_firmware sa6150p_firmware sm6250p_firmware qcs610 qca8337 wcd9360_firmware sdx65 wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 qam8295p wcn3950 sd720g qsw8573_firmware sd_8_gen1_5g_firmware sm6375_firmware sd460_firmware sm7315_firmware qca6574au_firmware wcd9375_firmware wcn3998_firmware qca8081_firmware sa6155_firmware msm8909w apq8009w_firmware wcd9360 wcn3999 qrb5165_firmware qrb5165m_firmware sa4155p_firmware qcs6125 sa8155_firmware sd662_firmware qcs405 sd765g sw5100 fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware qca6696_firmware sd750g sd870_firmware wcn3910_firmware sxr2150p_firmware sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware sa8195p_firmware sm8475 sa8295p_firmware wcn6750_firmware wcn3610 sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w sw5100p qca6564au sdx55m_firmware wcn6856_firmware qet4101_firmware qca6574 wcd9380 qcs410 sd690_5g_firmware sdx24_firmware qcn9012_firmware wcd9335_firmware sd439_firmware qsw8573 qcs605 wcn6850 wcn3910 qca6426_firmware sd730 sdx55m sa8295p wcn6740_firmware sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware qsm8250 sa6145p sdxr1 ar8031 qcs405_firmware sa8145p qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sd439 qet4101 qcs8155_firmware sa4155p sxr2150p ar8035_firmware qcm2290 qsm8250_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware fsm10056 csrb31024 csra6620 fsm10055_firmware qcs4290 sd765g_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 qrb5165n_firmware qca9377 wcd9385_firmware sdxr2_5g_firmware sd662 qam8295p_firmware qcn9011_firmware sa8155 sdx55_firmware qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware qcs8155 sa515m_firmware qcs6490 sd429 sdxr2_5g sa415m_firmware wcn3988_firmware sa6145p_firmware sd205 sd429_firmware sd778g_firmware sm6250 sa8195p sd765_firmware wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 sm6250_firmware sda429w sd210 wcn3620_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wcn3620 wsa8835_firmware qcx315 qca6564a sa4150p qcm6125_firmware qcm2290_firmware sd_675 sd780g sd865_5g sdx24 qcn9012 sd888 msm8909w_firmware qcx315_firmware wsa8835 sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a wcn6855_firmware qca6174a sm7325p wcn6750 sa515m qca6574_firmware sd855 sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware qrb5165m sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sd480_firmware qcn9011 qca6574au sa8155p_firmware sd205_firmware qcm6125 mdm9150 wcn6856 qca6564_firmware sd768g wcn6740 qca6696 sa6150p sm7250p sd720g_firmware sw5100_firmware qcs410_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2019-2267

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.62%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 18:42

Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130, SXR2130

CVE-2019-2299

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.78%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM660, SDX20, SDX24

Product-qca9377_firmware sd_850 mdm9150_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdx24 mdm9650 sd_636 msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware ipq4019_firmware mdm9206 sd_425_firmware qca9379_firmware qca6174a sdx24_firmware sd_625_firmware ipq8074 sd_450 qca9377 sd_845 mdm9206_firmware qcs605 sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware ipq8064 sd_210_firmware sd_600 qca8081_firmware sd_205_firmware ipq8064_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sd_625 ipq8074_firmware qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware qca8081 mdm9150 qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sd_712_firmware sd_430 ipq4019 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2281

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.23% / 14.43%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX24, SXR1130

CVE-2019-2272

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.63%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

Buffer overflow can occur in display function due to lack of validation of header block size set by user. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SDM660, SDX20

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2002-0889

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4.6||MEDIUM

EPSS-0.29% / 20.56%

7 Day CHG~0.00%

Published-02 Apr, 2003 | 05:00

Updated-16 Apr, 2026 | 00:27

Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file.

Vendor-n/a Qualcomm Technologies, Inc.

Product-qpopper n/a

CVE-2019-2288

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.38%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:42

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, Snapdragon_High_Med_2016, SXR1130

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 mdm9650 sdm429 msm8940_firmware snapdragon_high_med_2016_firmware msm8976_firmware msm8996au apq8009_firmware msm8917 sdm670 qcs605_firmware mdm9206 sdm670_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qca8081 mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 msm8909 apq8096au sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware msm8976 msm8953_firmware msm8940 apq8053 apq8096au_firmware msm8917_firmware msm8998 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-2312

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.63%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, MDM9640, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX24

Product-qca9377_firmware sd_850 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdx24 sd_636 msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware qca9379_firmware qca6174a sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 qcs605 mdm9640 sd_835_firmware sd_835 qca6574au_firmware sd_210_firmware sd_600 sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 qca6574au sd_210 mdm9607 sd_636_firmware sd_820_firmware qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware qcs405_firmware sd_712_firmware sdm630_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sd_600_firmware sd_205 qca9379 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-2298

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 9.46%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDM660, SDX20, SDX24

CWE ID-CWE-416

Use After Free

CVE-2019-2264

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.21% / 11.98%

7 Day CHG~0.00%

Published-22 Jul, 2019 | 13:47

Updated-04 Aug, 2024 | 18:42

Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9607, MDM9640, MSM8909W, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SDM439, SDM630, SDM660, SDX24

CWE ID-CWE-416

Use After Free

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2019-2266

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.80%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:42

Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8053, IPQ4019, IPQ8064, MDM9206, MDM9207C, MDM9607, MSM8909, MSM8909W, Nicobar, QCA9980, QCS405, QCS605, SDM845, SDX24, SM7150, SM8150

CWE ID-CWE-415

Double Free

CVE-2019-2251

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.72%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:42

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8016, APQ8096AU, APQ8098, MDM9205, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-22668

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.14% / 3.72%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-25 Feb, 2026 | 16:51

Use After Free in Audio

Memory Corruption in Audio while invoking IOCTLs calls from the user-space.

CWE ID-CWE-416

Use After Free

CVE-2019-2301

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.78%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9980, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24

CWE ID-CWE-125

Out-of-bounds Read

CVE-2019-2319

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.80%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2274

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.62%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 18:42

Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8098, IPQ8074, MDM9150, MDM9650, MDM9655, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCA8081, QCN7605, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 sm7150 msm8917 sdm670 qcs605_firmware sdm670_firmware ipq8074 sdm636 sda845_firmware apq8098 qcn7605 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware sda660 sdx55_firmware sxr1130_firmware qca8081_firmware sxr1130 apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9655_firmware ipq8074_firmware sdm710 qm215 apq8017_firmware sdm710_firmware qcn7605_firmware qca8081 mdm9150 msm8937 sm8150_firmware mdm9655 sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware sdx55 msm8940 apq8053 msm8953_firmware sm6150_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CVE-2019-2333

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.99%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 18:49

Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_210 mdm9607 sd_636_firmware sd_820_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-2339

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.38%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:49

Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2025-47386

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 0.07%

7 Day CHG~0.00%

Published-02 Mar, 2026 | 16:53

Updated-05 Mar, 2026 | 20:36

Use After Free in Automotive Audio

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

CWE ID-CWE-416

Use After Free

CVE-2023-43532

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.58%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-17 Jun, 2025 | 21:29

Untrusted Pointer Dereference in Display

Memory corruption while reading ACPI config through the user mode app.

CWE ID-CWE-822

Untrusted Pointer Dereference

CWE ID-CWE-763

Release of Invalid Pointer or Reference

CVE-2023-43515

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.11% / 1.52%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:05

Updated-13 Jan, 2025 | 21:53

Buffer copy without checking size of input (Classic buffer overflow) in HLOS

Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled.

Product-wsa8830_firmware wcd9380 fastconnect_6900 wsa8835 fastconnect_7800 snapdragon_8_gen_1_mobile wsa8830 fastconnect_7800_firmware wcd9380_firmware fastconnect_6900_firmware wsa8835_firmware snapdragon_8_gen_1_mobile_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-21664

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 1.53%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Memory Corruption in Core Platform while printing the response buffer in log.

Product-qca9377_firmware sd_8cx_gen3_firmware sa6150p_firmware qca8337 qca6431_firmware sdx65 wcn3950_firmware ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 qcs605_firmware sd_675_firmware wcn3998 qam8295p sd_8cx_gen2_firmware qcn6024_firmware qca8386_firmware wcn3950 sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware qca6420 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware qca6698aq sa4155p_firmware sa8155_firmware qca6430 sdx65m wcd9340 qcn6132 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qcn6122 wcd9341 qca6431 qca6696_firmware sd870_firmware ipq9008_firmware sd_8cx sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd660_firmware wcn7850_firmware sa8195p_firmware sa8295p_firmware wcn6750_firmware ipq5018_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p qca8084 qca6564au sdx55m_firmware wcn6856_firmware ipq9008 sd670_firmware qca6574 wcd9380 sdx50m_firmware sxr1230p sdx24_firmware qca6430_firmware qcn9012_firmware qcn9274_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 qca6426_firmware qcn9024 ipq9574_firmware wcn3980_firmware sdx55m sa8295p qca6421_firmware wcn6740_firmware sd678_firmware qrb5165 wcn6851_firmware qcs603 sd670 qca6564a_firmware qcn9024_firmware sdx57m sd870 wsa8832 wcn6855 sa8540p sa6145p qca6595_firmware sa8145p qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sdx70m ssg2115p_firmware qcs8155_firmware sa4155p ar8035_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sa8145p_firmware sxr2230p_firmware fsm10056 qca8082 qcn9072 qca8386 sd765g_firmware qca6420_firmware qca6390_firmware wcd9370 sd675_firmware ssg2115p qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware ipq5018 qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware qam8295p_firmware qcn9011_firmware qca8082_firmware sa8155 sa9000p_firmware sdx55_firmware qca6595au qcn6023_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware sd778g sa6155p_firmware qca6310 qcn9274 qcs8155 wcn7851 qcs6490 sdxr2_5g qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 sdx65m_firmware qca6174a_firmware wcd9385 qca8085_firmware qcs6490_firmware sd_8cx_gen3 sdx70m_firmware ar8035 qca6390 wcd9375 aqt1000 qcn9100_firmware ipq5010_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qca6564a sa4150p wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 sxr1230p_firmware sa8540p_firmware sd_8_gen1_5g sd888_5g ssg2125p_firmware qca6574a wcn6855_firmware qca6174a sm7325p qcn6132_firmware qca6310_firmware wcn6750 sa9000p qca6574_firmware sd855 sm7325p_firmware sxr2230p sdx57m_firmware sd765 qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware sm7315 qca6391 aqt1000_firmware qcn9100 sdx65_firmware qcm6490_firmware sdx50m wsa8832_firmware qcn9070_firmware qcn9011 qca6574au sa8155p_firmware ipq9574 wcd9341_firmware wsa8810 wcn6856 qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sa6150p qcn9022_firmware qcn6024 qcn9022 sd845 qcn9072_firmware sm7250p qcn9074_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2025-47390

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 0.94%

7 Day CHG~0.00%

Published-06 Apr, 2026 | 15:33

Updated-08 Apr, 2026 | 21:10

Buffer Over-read in Camera

Memory corruption while preprocessing IOCTL request in JPEG driver.

Product-wsa8845h_firmware snapdragon_8cx_gen_3_compute_platform qcm6490 x2000086 x2000092 xg101002_firmware fastconnect_6900_firmware qca0000 snapdragon_7c\+_gen_3_compute wcd9378c_firmware sc8380xp_firmware wsa8840 wsa8845h video_collaboration_vc3_platform wsa8835 cologne_firmware video_collaboration_vc3_platform_firmware wcd9370 xg101032 sc8380xp x2000077 wcd9375_firmware x2000086_firmware x2000077_firmware x2000094_firmware x2000094 wsa8830_firmware wsa8845_firmware wcd9385_firmware xg101032_firmware wcd9378c x2000092_firmware xg101039_firmware wsa8835_firmware qcm5430 xg101039 x2000090 fastconnect_6700 fastconnect_7800 snapdragon_8cx_gen_3_compute_platform_firmware wcd9375 fastconnect_6700_firmware qcm6490_firmware qca0000_firmware wcd9370_firmware wcd9385 wcd9380_firmware qcm5430_firmware snapdragon_7c\+_gen_3_compute_firmware wsa8840_firmware fastconnect_7800_firmware x2000090_firmware wsa8830 xg101002 wsa8845 wcd9380 fastconnect_6900 cologne Snapdragon

CWE ID-CWE-126

Buffer Over-read

CVE-2023-43513

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 1.53%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in PCIe

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CVE-2023-43542

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 1.17%

7 Day CHG~0.00%

Published-03 Jun, 2024 | 10:05

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-2321

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.38%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ4019, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS404, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, Snapdragon_High_Med_2016, SXR1130, SXR2130

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware ipq4019_firmware mdm9206 sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware qca8081 mdm9150 msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware qm215_firmware ipq4019 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2025-47320

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 0.08%

7 Day CHG~0.00%

Published-18 Dec, 2025 | 05:28

Updated-10 Feb, 2026 | 20:16

Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-43514

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.58%

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-11 Aug, 2025 | 15:06

Use After Free in DSP Services

Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.

CWE ID-CWE-416

Use After Free

CVE-2023-43535

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.58%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-13 Jun, 2025 | 18:57

Improper Validation of Array Index in Display

Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2023-43524

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.11% / 1.47%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-15 Jan, 2025 | 16:51

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption when the bandpass filter order received from AHAL is not within the expected range.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-43521

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.11% / 1.47%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Use After Free in HLOS

Memory corruption when multiple listeners are being registered with the same file descriptor.

CWE ID-CWE-416

Use After Free

CVE-2019-2246

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.38%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9205, MDM9640, MSM8996AU, QCA6574, QCS605, Qualcomm 215, SD 425, SD 427, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 mdm9640_firmware sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 sd_636 snapdragon_high_med_2016_firmware qca6574 msm8996au sd_820 sd_450_firmware sd_845_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_8cx_firmware mdm9205 sd_845 qcs605 qca6574_firmware mdm9640 sd_835_firmware sd_835 sda660 sxr1130_firmware sxr1130 sd_665_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sd_425 sdm660 sdm630 sd_710_firmware sd_435 sd_625 sd_820_firmware sd_636_firmware sd_439_firmware qualcomm_215_firmware sd_429_firmware sd_730 snapdragon_high_med_2016 sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware mdm9205_firmware sda660_firmware sd_8cx sd_427 sd_670 sd_435_firmware sd_710 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-43541

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.57%

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-10 Jan, 2025 | 20:14

NULL Pointer Dereference in Windows Graphics

Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2023-43531

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.58%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Access of Uninitialized Pointer in SPS Applications

Memory corruption while verifying the serialized header when the key pairs are generated.

CWE ID-CWE-824

Access of Uninitialized Pointer

CVE-2023-43545

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.10% / 1.12%

7 Day CHG~0.00%

Published-03 Jun, 2024 | 10:05

Updated-27 Jan, 2025 | 19:08

Integer Overflow or Wraparound in WLAN HOST

Memory corruption when more scan frequency list or channels are sent from the user space.

Product-qca6584au_firmware qca6554a qcc2076_firmware qca8337_firmware wcd9335_firmware qfw7124_firmware qca6696_firmware qcc710 qca8081_firmware qcc2073_firmware qca6595au_firmware qca6584au qcn6224_firmware qfw7114_firmware qca8081 snapdragon_660_mobile qca6554a_firmware wcn3990 qca6564au sd660 qcn6224 snapdragon_x75_5g_modem-rf qcn6274_firmware qfw7114 fastconnect_7800 wcn3990_firmware ar8035 fastconnect_7800_firmware qca6564au_firmware qcc2073 sd660_firmware wcd9341_firmware wcd9340 qca6595_firmware qca8337 wcn3980_firmware qcc710_firmware ar8035_firmware qcn6274 qfw7124 qca6574a qca6595 qca6574a_firmware qcc2076 wcd9341 wcn3980 qca6574au qca6574 wcd9340_firmware wcd9335 qca6574_firmware qca6696 qca6595au snapdragon_660_mobile_firmware qca6574au_firmware snapdragon_x75_5g_modem-rf_firmware Snapdragon qca6564au_firmware qca8337_firmware qca6584au_firmware qcn6274_firmware wcn3990_firmware qca6696_firmware qca6595_firmware wcd9335_firmware qfw7114_firmware qcc2076_firmware qca6554a_firmware snapdragon_x75_5g_modem-rf_system_firmware qcc2073_firmware qca6574_firmware wcd9340_firmware qcc710_firmware qcn6224_firmware snapdragon_660_mobile_platform_firmware qca6574a_firmware sd660_firmware wcd9341_firmware fastconnect_7800_firmware qca6574au_firmware qca6595au_firmware qca8081_firmware wcn3980_firmware qfw7124_firmware ar8035_firmware

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2025-47385

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 0.05%

7 Day CHG~0.00%

Published-02 Mar, 2026 | 16:53

Updated-05 Mar, 2026 | 20:37

Improper Access Control for Register Interface in SCE-Mink

Memory Corruption when accessing trusted execution environment without proper privilege check.

CWE ID-CWE-1262

Improper Access Control for Register Interface

CVE-2019-2277

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.78%

7 Day CHG~0.00%

Published-22 Jul, 2019 | 13:47

Updated-04 Aug, 2024 | 18:42

Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX24

CWE ID-CWE-125

Out-of-bounds Read

CVE-2019-2315

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.38%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:49

While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCS404, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, Snapdragon_High_Med_2016, SXR1130, SXR2130

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware qcs404 sdm636 sda845_firmware apq8098 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware sxr1130 apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CVE-2023-43549

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.57%

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-10 Jan, 2025 | 20:07

Stack-based Buffer Overflow in WLAN HAL

Memory corruption while processing TPC target power table in FTM TPC.

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-43546

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.58%

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-11 Aug, 2025 | 15:06

Use After Free in Automotive Multimedia

Memory corruption while invoking HGSL IOCTL context create.

CWE ID-CWE-416

Use After Free

CVE-2025-47329

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 0.25%

7 Day CHG~0.00%

Published-24 Sep, 2025 | 15:33

Updated-26 Feb, 2026 | 17:48

Release of Invalid Pointer or Reference in Android Core

Memory corruption while handling invalid inputs in application info setup.

Product-qca6574_firmware qcs6690 sw5100 wcd9390 sa8255p sa8775p_firmware qca6696_firmware wsa8832_firmware qcs6690_firmware snapdragon_ar1_gen_1_platform_\"luna1\"_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware qam8255p wsa8830_firmware fastconnect_7800 wcn6755 wcd9380_firmware snapdragon_w5\+_gen_1_wearable_platform sa8770p sa8155p qca6595_firmware wsa8845h wsa8830 wcd9390_firmware sa8195p_firmware snapdragon_ar1_gen_1_platform wsa8840_firmware qca6696 qca6574a sa8195p wsa8840 qca6595au_firmware qca6574au_firmware sa9000p_firmware sa6155p_firmware qcm6690 sw5100p wsa8845h_firmware wcn7881_firmware wcd9395 wcn6450 sa8775p qam8255p_firmware wcd9380 qca6574au sa8770p_firmware qca6574 wcn7861 qam8775p_firmware snapdragon_8_gen_3_mobile_platform_firmware sa8255p_firmware wcd9385_firmware qam8775p wsa8835 sw5100p_firmware wcn6450_firmware sa6155p wcd9385 qcm6690_firmware wcn7881 qca6595au sa9000p wcn6755_firmware wsa8845_firmware wsa8835_firmware wcn7861_firmware wsa8832 wcd9395_firmware qca6595 snapdragon_ar1_gen_1_platform_firmware snapdragon_ar1_gen_1_platform_\"luna1\"sw5100_firmware fastconnect_7800_firmware snapdragon_8_gen_3_mobile_platform sa8155p_firmware qca6574a_firmware wsa8845 Snapdragon

CWE ID-CWE-763

Release of Invalid Pointer or Reference

CVE-2023-43516

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 1.53%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-15 May, 2025 | 19:45

Use of out-of-range pointer offset in Video

Memory corruption when malformed message payload is received from firmware.

Product-fastconnect_7800 snapdragon_8_gen_1_mobile_platform wcd9380_firmware wsa8830 qcm8550_firmware fastconnect_6900 qcs8550 fastconnect_6900_firmware qcm8550 qcs8550_firmware wsa8830_firmware wsa8835 wsa8835_firmware wcd9380 fastconnect_7800_firmware snapdragon_8_gen_1_mobile_platform_firmware Snapdragon

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2248

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 9.63%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-04 Aug, 2024 | 18:42

Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 820, SD 820A, SD 845 / SD 850, SDM439, SDM660, SDX20