CVE-2019-14112 | ByteOS Network

Vulnerability Details :

CVE-2019-14112

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-16 Apr, 2020 | 10:46

Updated At-05 Aug, 2024 | 00:12

Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ6018, IPQ8074, MSM8998, Nicobar, QCA8081, QCN7605, QCS404, QCS605, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:16 Apr, 2020 | 10:46

Updated At:05 Aug, 2024 | 00:12

▼CVE Numbering Authority (CNA)

Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ6018, IPQ8074, MSM8998, Nicobar, QCA8081, QCN7605, QCS404, QCS605, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Versions

Affected

APQ8098, IPQ6018, IPQ8074, MSM8998, Nicobar, QCA8081, QCN7605, QCS404, QCS605, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

Problem Types

Type	CWE ID	Description
text	N/A	Buffer Copy Without Checking Size of Input in WLAN

Type: text

CWE ID: N/A

Description: Buffer Copy Without Checking Size of Input in WLAN

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:16 Apr, 2020 | 11:15

Updated At:22 Apr, 2020 | 13:19

Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ6018, IPQ8074, MSM8998, Nicobar, QCA8081, QCN7605, QCS404, QCS605, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Qualcomm Technologies, Inc.

>>apq8098_firmware>>-

cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq6018_firmware>>-

cpe:2.3:o:qualcomm:ipq6018_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq6018:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq8074_firmware>>-

cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8998_firmware>>-

cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8998:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>nicobar_firmware>>-

cpe:2.3:o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:nicobar:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca8081_firmware>>-

cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcn7605_firmware>>-

cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcn7605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs404_firmware>>-

cpe:2.3:o:qualcomm:qcs404_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs404:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs605_firmware>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>rennell_firmware>>-

cpe:2.3:o:qualcomm:rennell_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:rennell:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sc7180_firmware>>-

cpe:2.3:o:qualcomm:sc7180_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sc7180:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sc8180x_firmware>>-

cpe:2.3:o:qualcomm:sc8180x_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sc8180x:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sda660_firmware>>-

cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sda845_firmware>>-

cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sda845:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm630_firmware>>-

cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm636_firmware>>-

cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm660_firmware>>-

cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm670_firmware>>-

cpe:2.3:o:qualcomm:sdm670_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm670:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm710_firmware>>-

cpe:2.3:o:qualcomm:sdm710_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm710:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm845_firmware>>-

cpe:2.3:o:qualcomm:sdm845_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm845:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm850_firmware>>-

cpe:2.3:o:qualcomm:sdm850_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm850:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm6150_firmware>>-

cpe:2.3:o:qualcomm:sm6150_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm6150:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm7150_firmware>>-

cpe:2.3:o:qualcomm:sm7150_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm7150:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm8150_firmware>>-

cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sxr1130_firmware>>-

cpe:2.3:o:qualcomm:sxr1130_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sxr1130:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	nvd@nist.gov

CWE ID: CWE-120

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/april-2020-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

1594Records found

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, Rennell, SC7180, SC8180X, SM6150, SM7150, SM8150, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-ipq6018 qcs404 sm8150_firmware sxr2130_firmware ipq8074 qcs405_firmware rennell sc7180 qcn7605 rennell_firmware qca6390 ipq6018_firmware qcs404_firmware sc8180x_firmware qcs405 sm7150_firmware ipq8074_firmware sm6150_firmware sm6150 sc7180_firmware sm8150 sm7150 qca6390_firmware qcn7605_firmware qca8081_firmware nicobar_firmware qca8081 sxr2130 sc8180x nicobar Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:12

Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9607, MDM9640, MDM9650, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCN7605, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware apq8096_firmware mdm9640_firmware msm8996au_firmware sdm845 apq8096 mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 sdm670 sxr2130 qcs605_firmware sc8180x qca9379_firmware qca6174a sdm670_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 qcn7605 ipq6018_firmware qca6574_firmware qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware sdm845_firmware apq8098_firmware msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 sdm710_firmware qcn7605_firmware sa6155p qca8081 ipq6018 qca6174a_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware sm6150_firmware apq8096au_firmware sm8250 msm8998 sm8150 sdm850 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.38% / 58.58%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:12

Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8016, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6390, QCA6574AU, QCA9377, QCA9379, QCA9886, QCM2150, QCN7605, QCS404, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware sdm450_firmware sdm632 qcs404_firmware mdm9650 qca6390_firmware apq8009_firmware msm8917 sdm670 qcs605_firmware apq8076 apq8076_firmware sda845_firmware qca9377 apq8098 qcn7605 mdm9206_firmware msm8905_firmware qca6574au_firmware sda660 sdx55_firmware sxr1130 msm8909w apq8053_firmware sda845 sa6155p_firmware sdm450 sdm636_firmware apq8098_firmware msm8998_firmware apq8016_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 qm215 apq8017_firmware sdm710_firmware sa6155p msm8937 msm8905 qca6174a_firmware sm8150_firmware msm8909 sxr2130_firmware rennell qca6390 msm8953_firmware saipan_firmware sm6150_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 saipan mdm9640 apq8096_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 apq8096 sdx24 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 sxr2130 sc8180x mdm9206 qca9379_firmware qca6174a sdm670_firmware qcs404 sdx24_firmware sdm636 msm8939 qcs605 qca9886 msm8937_firmware mdm9650_firmware sdm429_firmware sxr1130_firmware apq8009 msm8909_firmware nicobar sdm850_firmware msm8920 msm8953 sdx20 qcm2150 msm8920_firmware sdm660 sc8180x_firmware qca6574au sdm710 mdm9607 msm8939_firmware qcn7605_firmware mdm9207c_firmware msm8996_firmware mdm9207c qca9886_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware rennell_firmware apq8016 qm215_firmware sdx55 msm8940 apq8053 apq8096au_firmware sm8250 nicobar_firmware qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Possible buffer overflow while processing clientlog and serverlog due to lack of validation of data received in logs in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8096AU, QCS605, SDM439, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-apq8096au_firmware sm8150_firmware sm8150 apq8096au sdm439_firmware sxr1130_firmware sxr1130 sdm439 qcs605 qcs605_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-05 Aug, 2024 | 00:05

Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SA415M, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware kamorta_firmware mdm9635m_firmware mdm9640_firmware apq8096_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware apq8076 sc8180x mdm9206 sdm670_firmware sdx24_firmware apq8076_firmware sdm636 sda845_firmware sa415m mdm9635m apq8098 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sa415m_firmware sdm710 qm215 sc7180_firmware mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware mdm9150 msm8937 mdm9207c_firmware msm8905 mdm9207c sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sc7180 sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 kamorta apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, Nicobar, QCS605, QM215, Rennell, SA6155P, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware apq8064_firmware msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.43% / 61.54%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Buffer overflow can occur in WLAN firmware while parsing beacon/probe_response frames during roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8096, APQ8096AU, IPQ6018, IPQ8074, MDM9607, MDM9640, MDM9650, MSM8996AU, Nicobar, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCS404, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware apq8096_firmware mdm9640_firmware msm8996au_firmware sdm845 apq8096 qcs404_firmware mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 sdm670 sxr2130 qcs605_firmware sc8180x qca9379_firmware qca6174a sdm670_firmware qcs404 qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 ipq6018_firmware qca6574_firmware qcs605 mdm9640 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware ipq8074_firmware qca6574au sdm710 mdm9607 sdm710_firmware sa6155p qca8081 ipq6018 qca6174a_firmware sm8150_firmware sxr2130_firmware apq8096au rennell sdm630_firmware sda660_firmware rennell_firmware apq8096au_firmware sm6150_firmware sm8250 sm8150 sdm850 nicobar_firmware qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Buffer overflow can occur when processing non standard SDP video Image attribute parameter in a VILTE\VOLTE call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware apq8076 sc8180x mdm9206 sdm670_firmware sdx24_firmware apq8076_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.94% / 75.30%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MSM8996AU, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCS404, QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 qca9377_firmware sd_850 sd_855 sd_730_firmware sd_675 msm8996au_firmware sd_670_firmware sdm660 sdm630 qcs404_firmware sd_710_firmware sd_636 qcs405 ipq8074_firmware qca6574au sd_820_firmware msm8996au sd_636_firmware sd_820 sd_845_firmware qca8081 qcs605_firmware sd_675_firmware qca6174a_firmware qca6174a qca9379_firmware sd_665 qcs404 sd_730 sd_850_firmware ipq8074 qcs405_firmware qca9377 sd_712_firmware sdm630_firmware sd_8cx_firmware sda660_firmware sd_845 sd_8cx qcs605 sd_670 sd_835_firmware sd_710 sd_835 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 qca9379 sd_665_firmware sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.43% / 61.54%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA8081, QCA9379, QCS404, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 qcs404_firmware mdm9650 sd_636 qca6574 msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware qca9379_firmware qca6174a sd_665 qcs404 sdx24_firmware sd_625_firmware ipq8074 sd_450 sd_8cx_firmware sd_845 mdm9206_firmware qca6574_firmware qcs605 qca6584_firmware sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 qca6584 qca6574au_firmware sda660 sd_210_firmware sxr1130_firmware qca8081_firmware sxr1130 sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 ipq8074_firmware qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qca8081 qualcomm_215_firmware sd_429_firmware qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.32%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 22:24

Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8098, MDM9206, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QM215, SDA660, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660

Vendor-Qualcomm Technologies, Inc.

Product-msm8920 msm8953 sdm450 sdm636_firmware sdm632_firmware apq8098_firmware sdm450_firmware msm8998_firmware sdm632 sdm660 msm8920_firmware sdm439 mdm9607_firmware sdm630 sdm429 msm8940_firmware qm215 mdm9607 apq8017_firmware msm8917 msm8937 mdm9206 sdm439_firmware sdm636 sdm630_firmware apq8098 sda660_firmware mdm9206_firmware qm215_firmware msm8940 apq8053 msm8953_firmware msm8917_firmware msm8937_firmware msm8998 sdm429_firmware sda660 apq8017 apq8053_firmware sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.14% / 35.28%

||

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 12:21

Buffer copy without checking size of input in WLAN Firmware

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

Vendor-Qualcomm Technologies, Inc.

Product-sd_8cx_gen3_firmware qca2066 sa6150p_firmware sm6250p_firmware qcs610 qca8337 ar9380 ipq8173_firmware qca6431_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 qca2062 sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 qca6554a_firmware wcd9371_firmware qam8295p wcn3950 qcn6024_firmware sd720g sm4125 sd_8cx_gen2_firmware ipq8076a qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 qca9986 sd680_firmware ipq8065 ipq8078a_firmware qca6678aq_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware qca6698aq qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 wcd9340 qcn6132 sd765g sw5100 sd680 qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca2066_firmware qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g qca1062 qcn5154_firmware wcn3910_firmware sxr2150p_firmware sd_8cx sa8150p wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 sd712 sd855_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 qcn5022_firmware wcn6750_firmware sa8295p_firmware ipq5018_firmware qca9985_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p ipq8072a qca9980_firmware sw5100p ipq8076a_firmware ipq8078 qca8084 sdx55m_firmware ipq8173 qca6564au wcn6856_firmware qcn5164 sd670_firmware qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware sdx50m_firmware sxr1230p qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcm4325_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c qcn6112 wcn3910 qca6320 qca9986_firmware qca6426_firmware sd695 ipq6028 ipq8064 sd835 qca9984 qcn9024 ipq9574_firmware wcn3980_firmware sd730 sdx55m ipq8064_firmware qcc5100_firmware sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware qca6678aq sd678_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware sd_636_firmware qca6564a_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware qsm8250 sa6145p ipq6018 qca9886_firmware sd695_firmware sdxr1 ar8031 qca6595_firmware qcs405_firmware sa8145p sdm630_firmware qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 ssg2115p_firmware sxr2150p ar8035_firmware qsm8250_firmware qcm2290 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sxr2230p_firmware sa8145p_firmware qca1062_firmware qcs2290_firmware sd7c_firmware csrb31024 snapdragon_4_gen_1_firmware sd_636 csra6620 qca8082 qcn9072 qca8386 qca9992 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware qca2064_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ssg2115p qcn5152_firmware qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware ipq8074a qca2065 sd662 qcn5124_firmware qam8295p_firmware qcn6102_firmware qcn9011_firmware qca1064 sa8155 qcn6100_firmware qca8082_firmware qca6320_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qca6310 qcn9274 ipq8174 wcn7851 sa515m_firmware qca9990 qcs6490 qcn5052 sdxr2_5g sdm630 qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sm6250 sa8195p sd712_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 sg4150p qca8081 qcn6023 ipq8071a ipq8071a_firmware qcs4290_firmware wcd9385 qca8085_firmware qcs6490_firmware qca2065_firmware sd_8cx_gen3 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 csr8811 sm6250_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware qcm6490 wcn6850_firmware wsa8835_firmware qca6564a sa4150p sg4150p_firmware qcm6125_firmware qcm4325 qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g qca6554a sd865_5g qca6595 ar9380_firmware qcc5100 qcn9012 sd888 qcn6122_firmware ipq8065_firmware sxr1230p_firmware wsa8835 sd665_firmware sd888_5g sm6250p qcn5154 qca8075_firmware sc8180x ssg2125p_firmware qca6574a wcn6855_firmware qca9889 sm7325p qcn6132_firmware qca9888 qca6310_firmware qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 sd855 sm4125_firmware sm7325p_firmware sd665 sxr2230p ipq8076 sd765 qca6574a_firmware qcn5152 sd768g_firmware qrb5165m sd850_firmware sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware qcn6102 qcn9100 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware wsa8832_firmware sdx50m qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware qcn9011 sc8180x_firmware sd_455 qca6574au qca9889_firmware sd710 sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware qcm6125 wsa8810 wcn6856 qcn5022 sd835_firmware sd768g ipq6010_firmware qca1064_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn6100 qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 31.97%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 04:49

Buffer Copy Without Checking Size of Input in MODEM

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.70% / 71.09%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:11

Updated-04 Aug, 2024 | 00:33

Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware fsm10055 sa6150p_firmware sm6250p_firmware qcs610 qcn5550 qca8337 ipq8173_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware ipq8078a sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qcn5064 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 qam8295p wcn3950 ipq8076a sd720g mdm9628 mdm9206_firmware qsw8573_firmware sd_8_gen1_5g_firmware sm6375_firmware sd460_firmware sm7315_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware wcd9360 qca6438_firmware ipq8070_firmware qca9367_firmware ipq8078a_firmware wcn3999 qrb5165_firmware qrb5165m_firmware ipq8072_firmware sa4155p_firmware qcs6125 sa8155_firmware ipq6010 sd662_firmware qcs405 sd765g sw5100 fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware mdm9250_firmware qca6696_firmware sd870_firmware sd750g wcn3910_firmware sxr2150p_firmware sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 qca6438 sd660_firmware sa8195p_firmware sm8475 qcn5022_firmware wcn6750_firmware sa8295p_firmware wcn3610 qca6428_firmware sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware ipq8072a sdm429w sw5100p msm8996au_firmware wcd9330 ipq8076a_firmware qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qca6574 csr8811_firmware wcd9380 qcs410 qcn5024 sd690_5g_firmware sdx24_firmware qcn9012_firmware qcn5052_firmware sd439_firmware ipq6018_firmware qsw8573 qcs605 wcn6850 wcn3910 qca6426_firmware ipq6028 sd730 qcn5550_firmware wcd9330_firmware sdx55m sa8295p wcn6740_firmware qcn5064_firmware sd678_firmware apq8064au_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 ipq8070 qca6564a_firmware ipq8174_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware qsm8250 sa6145p ipq6018 sdxr1 ar8031 apq8096au qcs405_firmware sa8145p qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware sd780g_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sd439 sa4155p sxr2150p ar8035_firmware qsm8250_firmware qcm2290 qcn5024_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware fsm10056 csrb31024 mdm9628_firmware csra6620 fsm10055_firmware qcs4290 mdm9250 sd765g_firmware qca6390_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6564 qca6426 qca6584au_firmware qrb5165n_firmware qcn9000_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware ipq8074a sd662 qcn5124_firmware qam8295p_firmware qcn9011_firmware sa8155 qcn5122_firmware sdx55_firmware qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware qca6584au sd778g sa6155p_firmware ipq8174 sd429 sa515m_firmware qcs6490 sdxr2_5g qcn5052 qca9367 mdm9607_firmware sa415m_firmware wcn3988_firmware qcn9074 sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware sd765_firmware qca8081 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 csr8811 sm6250_firmware apq8064au sda429w sd210 wcn3620_firmware sdx20_firmware ipq8074a_firmware sd888_5g_firmware qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a sa4150p qcm6125_firmware qcm2290_firmware qcn9000 sd_675 sd780g sd865_5g sdx24 qcn9012 sd888 msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca8075_firmware qca6574a mdm9206 wcn6855_firmware qca9889 qca6174a sm7325p ipq8074 wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware sd855 sm7325p_firmware sd665 ipq8076 sd765 qca6574a_firmware qcn5152 sd768g_firmware qrb5165m sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx20 sd480_firmware ipq6028_firmware ipq8072a_firmware qcn9011 ipq8074_firmware qca6574au qca9889_firmware sa8155p_firmware mdm9607 qcn5122 sd205_firmware qcm6125 mdm9150 wcn6856 qcn5022 qca6564_firmware sd768g ipq6010_firmware wcn6740 qca6696 sdw2500 sa6150p qca8075 apq8096au_firmware ipq8070a sm7250p ipq6000_firmware sd720g_firmware sdx12 ipq8071_firmware qcs410_firmware qcn9074_firmware sw5100_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.39% / 59.47%

||

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:26

Updated-03 Aug, 2024 | 22:32

An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware fsm10055 sa6150p_firmware sm6250p_firmware qcs610 ipq4028_firmware qcn5550 qca8337 ar9380 ipq8173_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware ipq8078a sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qcn5064 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sa415m wcn3998 wcn3950 ipq8076a sd720g mdm9628 mdm9206_firmware qsw8573_firmware sm6375_firmware wcn3660b sd460_firmware sm7315_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware wcd9360 qca6438_firmware ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware wcn3999 qrb5165_firmware qca7500 ipq8072_firmware ipq4029_firmware sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 wcd9340 sd765g qualcomm215_firmware fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware mdm9250_firmware qca9888_firmware wcd9341 ipq8068_firmware qca6696_firmware sd870_firmware sd750g wcn3910_firmware sa8150p wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware sd855_firmware wcn3988 qca6438 sd660_firmware sa8195p_firmware qcn5022_firmware wcn6750_firmware qca9898 ipq4028 wcn3610 qca6428_firmware sm6375 qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware sda429w_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware sdm429w wcd9330 msm8996au_firmware ipq8076a_firmware qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qet4101_firmware qca6574 csr8811_firmware wcd9380 qualcomm215 qcs410 qcn5024 sd690_5g_firmware sdx24_firmware qca9985 wcd9335_firmware qcn5052_firmware wcn3980 ipq6018_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6426_firmware wcn3660b_firmware qca9984 ipq6028 ipq8064 wcn3980_firmware sd730 qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware wcn6740_firmware qcn5064_firmware sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 ipq8070 qca9994 qca9980 qca6564a_firmware ipq8174_firmware apq8009w qca9880 qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware qsm8250 sa6145p ipq6018 qca9886_firmware sdxr1 ar8031 qcs405_firmware sa8145p qca6391_firmware qca4024 wcd9370_firmware sd780g_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 qet4101 ar8035_firmware qcm2290 qsm8250_firmware qcn5024_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware fsm10056 csrb31024 mdm9628_firmware csra6620 fsm10055_firmware qca9880_firmware qca9992 qcs4290 mdm9250 sd765g_firmware qca6390_firmware apq8009_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6564 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 sm8450 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware ipq8074a sd662 qcn5124_firmware sa8155 wcn3680b_firmware qcn5122_firmware sdx55_firmware wcn3615 qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware qca6584au sd778g sa6155p_firmware sm6225 ipq8174 sd429 sa515m_firmware qca9990 qcs6490 qcn5052 qca9367 sdxr2_5g mdm9607_firmware sa415m_firmware wcn3988_firmware qcn9074 sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware wsa8810_firmware sm8450_firmware sd765_firmware wcd9326 wcd9335 qca8081 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 ar8035 sm6250_firmware csr8811 sda429w sd210 wcn3620_firmware sdx20_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g sd865_5g ar9380_firmware sdx24 sm8450p_firmware sd888 msm8909w_firmware ipq8065_firmware qcx315_firmware wsa8835 msm8996au sd665_firmware sdm429w_firmware sd888_5g sm6250p qca8075_firmware ipq4018 qca6574a mdm9206 wcn6855_firmware qca9889 qca6174a sm7325p qca9888 ipq8074 qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 sd855 sm7325p_firmware sd665 ipq8076 sd765 qca6574a_firmware qcn5152 sd768g_firmware sm7315 apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx20 sd480_firmware ipq6028_firmware ipq8072a_firmware sm6225_firmware ipq8074_firmware qca6574au qca9889_firmware sa8155p_firmware mdm9607 qcn5122 sd205_firmware wcd9341_firmware wsa8810 sm8450p mdm9150 wcn6856 qcn5022 wcn3680b qca6564_firmware sd768g ipq6010_firmware wcn6740 qca6696 sd845_firmware sdw2500 sa6150p qca8075 sd845 qca9990_firmware ipq8070a sm7250p ipq6000_firmware sd720g_firmware sdx12 ipq8071_firmware qcs410_firmware qcn9074_firmware ipq4029 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 31.97%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking the size of input in Modem

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.14% / 35.35%

||

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 07:44

Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the length of array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qfe3100 qfs2580 qfe2550 msm8960 qcs610 pmi8996 qdm5579 qfe1045 qdm2307 qfs2530 qpa8802 qln1030 pm6125 qat3519 mdm9645 pm8917 pm8150a sc8180x\+sdx55 qtc800h qdm5670 qcs2290 sa6155 qca6335 msm8917 pm7150l qpa8821 mdm8215 qln1020 apq8076 wtr3905 qdm5671 pmc1000h qfe2330 msm8630 qat3518 sd632 sd8c msm8108 sa415m wcn3998 wcn3950 sm4125 sd720g wtr1605 wtr2605 mdm9628 qpa5460 wcn3660b wtr2655 qfe4320 qcc112 qca4020 mdm8215m qdm5652 mdm9630 qpm8870 qpm5679 qbt2000 msm8909w pm855p qca6420 wcd9360 pm6150a wtr1625l msm8627 sdr735g wcn3999 pm8150b qsm7250 pm8996 qcs6125 qfe2101 mdm9615m qca6430 qcc1110 qat3522 qfe4455fc pmr735a wtr1625 qcs405 smb1360 wcd9340 wfr2600 sd765g qfe3440fc wcd9320 sdr660 qca6436 wcn6851 sa6155p qpa6560 qfe3345 apq8052 sdr865 smb1358 wcd9341 pmi8952 smr545 mdm9655 qca6431 qln5020 wcd9371 smb1350 sd750g qdm3302 wtr3950 sa8150p qpm5657 pm6350 qdm5621 qfe3340 qtc800s msm8226 sd660 qdm5650 sd712 wcn3988 wtr3925 qfe2080fc sdr052 smb1390 pm6150l sd450 qet4100 wcn3610 msm8608 mdm9640 qpm6585 qtc410s wcn3991 smb1355 qln4650 qpa8801 sdm429w wcd9330 wgr7640 qat5568 qet5100 sd636 qca6564au msm8230 pm6150 qca6574 pm7250b qfs2630 qpa8842 pmm8996au wcd9380 qualcomm215 mdm9230 qln4640 qcs410 smb1381 sdr735 pm7250 wtr4905 smb1395 pm660l qpa8803 ar8151 smr526 wtr5975 qca6174 pmk8003 wcn3980 pmd9645 qdm2301 qsw8573 qcs605 wsa8815 wcn6850 wcn3910 qca6320 smb1394 wcn3680 qca9984 pm8921 sd835 qfe4309 qca1990 pm8009 qpa8675 sd730 sdx55m pm670a qfe4373fc pm8008 msm8953 qsw8574 pmi8998 mdm9225 qfe2520 apq8064 pme605 mdm9225m pm855l qcs603 rsw8577 pmd9635 qfe4302 qpm5621 qpm6582 sd670 apq8009w qfe4303 pm670 pm8150l wtr1605l qdm5677 pm8005 qsm8250 sa6145p pm215 qdm2302 pmm6155au sdxr1 ar8031 apq8096au wtr2965 wfr1620 pm8150 qpm5875 sdx55 qet5100m apq8053 sa8155p csra6640 pm8350bhs sd675 wtr4605 sd439 qet4101 pm8952 pmi8994 qat3516 pm670l wcd9310 pm8226 wcn3660 qpm5658 qca9379 pm855b smb2351 qln1031 qcm2290 qpm5870 pm8909 qfe1040 wsa8830 qfe4465fc pm660 sdr051 msm8960sg qln5030 msm8930 pm4125 qbt1500 qpa5581 pmi632 pm456 csrb31024 mdm9650 csra6620 qpa5373 qpm4621 pmk8001 qcs4290 qet6100 pmm855au sdr660g qfe2340 sd455 qpa8686 pm8110 sd690_5g smb1396 wcd9370 pm8350 qca6564 sdr425 qca6426 qpm5641 whs9410 qat5516 wtr2955 qdm5620 qln1021aq sd662 smb1380 qfe4308 pm8350bh mdm8635m apq8037 pm3003a sa8155 qat5533 wcn3615 qca6595au msm8227 wtr2100 sm7350 qtc800t pm8940 qpm6670 smb1354 wcd9306 qca6584au qdm2305 qca6310 msm8208 qpm8820 qpm4641 pm8937 qpm2630 qfe2081fc pm855 sd429 sdxr2_5g pm8250 msm8962 mpq8064 smb1398 apq8084 sdm630 sd821 apq8062 qdm4643 msm8976sg pmx55 sd205 sdr675 sm6250 qdm3301 sa8195p pm8953 qat5515 qca6694 qpm5677 smb231 qfe1100 qat3514 wcd9326 wcd9335 wcn3660a qet4200aq wcd9385 mdm8615m pm439 qpm5620 pmm8155au mdm9625 qpm4630 qca6390 wcd9375 ar8035 aqt1000 msm8956 msm8976 apq8064au pmm8195au qpa8673 qdm2310 qln4642 qca6694au apq8056 msm8952 sda429w sd210 sd820 mdm9625m pmi8937 pm8998 pmk7350 sdw3100 wcn3620 apq8017 ar6003 mdm9235m qca6564a smr546 pmx24 qet6110 qfe1055 qln5040 qpm8895 sdr845 qpm5670 wcn3990 apq8030 sd865_5g pm8019 qca6595 pmk8350 qpm8830 pm8350b qat5522 wsa8835 msm8996au apq8060a pm8150c pmr735b pmi8940 sd888_5g sm6250p rgr7640au qpa4360 qln1035bd pm855a qpa4361 qca6574a qca6174a pm8350c smr525 qpm4640 wcn6750 mdm9635m pmr525 mdm9615 pm7350c qpm4650 qtm525 wtr6955 qfe3335 pm8821 sd855 sd665 sd8cx qfe4305 qca6175a sd765 pm640p pmd9607 msm8209 qat3555 apq8009 sd460 qca6391 smb1351 qpa5461 mdm9310 qfe2082fc msm8920 msm8610 pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 qfs2608 pm8916 qln1036aq qtc801s qdm4650 mdm9215 pmd9655 qca6574au qfe3320 sd710 mdm9607 qsw6310 qcm6125 qpm6621 wsa8810 qdm2308 pmw3100 pmx50 pm8018 qat3550 wcn6856 qdm5679 wcn3680b sdr8250 sd768g wcn6740 qca6696 qfe4301 pm8004 pm640l msm8940 pmk8002 qpa2625 sa6150p pm7150a_sd845 sm7250p sdm830 smb1357 mdm9330 sd850 pm6250 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.95%

||

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 07:44

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ5018, IPQ6018, IPQ8074, Kamorta, MSM8998, Nicobar, QCA6390, QCA8081, QCS404, QCS405, QCS605, Rennell, SA415M, Saipan, SC7180, SC8180X, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SM8250, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-ipq5018_firmware sdm850_firmware kamorta_firmware sdm636_firmware apq8098_firmware sdm845 msm8998_firmware sdm660 sdm630 qcs404_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 sm7150_firmware ipq8074_firmware sdm710 sc7180_firmware sm6150 sdm710_firmware sm7150 qca6390_firmware sdm670 qca8081 qcs605_firmware sc8180x ipq6018 sdm670_firmware qcs404 sm8150_firmware ipq8074 sdm636 qcs405_firmware ipq5018 rennell sa415m sc7180 sda845_firmware apq8098 sdm630_firmware rennell_firmware qca6390 ipq6018_firmware qcs605 saipan_firmware sm6150_firmware sm8250 msm8998 sm8150 sdm850 sxr1130_firmware kamorta qca8081_firmware nicobar_firmware saipan sxr1130 sdm660_firmware sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.37% / 58.07%

||

7 Day CHG~0.00%

Published-30 Jul, 2020 | 11:40

Updated-04 Aug, 2024 | 07:44

Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-kamorta_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm660 qcs405 qca6574au sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sm8250 kamorta apq8017 msm8996 saipan nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.16% / 37.70%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-03 Aug, 2024 | 03:00

Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm6250p_firmware qcs610 sdx65 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sd632 wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd710_firmware sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware sa6155_firmware wcn3998_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware qca9367_firmware wcn3999 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 qualcomm215_firmware sd765g qca6436 sd680 wcn6851 sa6155p qcs603_firmware wcn7851_firmware wcd9341 qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware wcn3991 wcd9380_firmware sdm429w msm8996au_firmware wcd9330 qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m sm8475_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 qcs610_firmware sa6145p sd695_firmware sdxr1 apq8096au ar8031 qcs405_firmware sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 sm8475p_firmware qcm2290 wcn3991_firmware wsa8830 sd678 qcs2290_firmware mdm9650 sd_636 csra6620 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware qca6595au wcn3615 wcn3999_firmware sm7250p_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 wcn7851 qcs6490 sd429 sdxr2_5g qca9367 sdm630 wcn3988_firmware sa6145p_firmware sd429_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware msm8953_firmware msm8917_firmware wcn3620_firmware sdx20_firmware qcm6490 sd888_5g_firmware wsa8835_firmware wcn3620 wcn6850_firmware wsa8815_firmware sm7450 apq8017 qca6564a qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sdx20 sd480_firmware qca6574au sa8155p_firmware sd710 wcd9341_firmware wsa8810 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware qcs410_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-415

Double Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.16% / 37.91%

||

7 Day CHG~0.00%

Published-07 Oct, 2024 | 12:58

Updated-16 Oct, 2024 | 19:49

Improper Input Validation in WLAN Resource Manager

Memory corruption while redirecting log file to any file location with any file name.

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware qcn9070 ipq8173_firmware qcf8001 qcn5124 qca4024_firmware qcn9072 qca8082 qca8386 immersive_home_318_platform_firmware qxm8083 ipq8078a ipq5028_firmware ipq6000 qcn5152_firmware qcn9000_firmware qcn9160 ipq9554 qcn6024_firmware qca8386_firmware ipq8076a immersive_home_316_platform_firmware immersive_home_316_platform immersive_home_216_platform qca8084_firmware ipq8074a immersive_home_318_platform qcn6412 qcn5124_firmware qca8082_firmware qcn5164_firmware sdx55_firmware qcn5122_firmware qcn6422_firmware qcn6023_firmware qca8081_firmware ipq5010 snapdragon_x65_5g_modem-rf_system_firmware qcn9274 ipq8078a_firmware ipq8174 ipq5028 qcn5052 qcf8001_firmware ipq6010 qcn6112_firmware qcn9074 qca8085 sdx65m qcn6132 qcf8000 qca8081 qcn6023 sdx65m_firmware ipq8071a ipq5312 ipq8071a_firmware immersive_home_3210_platform qcn6122 qca9888_firmware qca8085_firmware ipq5300 ipq9008_firmware qcn5154_firmware csr8811 qcn9100_firmware ipq5010_firmware ipq8074a_firmware qcn5022_firmware immersive_home_216_platform_firmware qcn9000 ipq8072a qcf8000_firmware ipq8076a_firmware qca8084 ipq8078 ipq8173 ipq9008 qcn5164 immersive_home_326_platform_firmware qcn6122_firmware qcn6402_firmware csr8811_firmware qcn6422 ipq9554_firmware qcn5154 qca8075_firmware qcn5024 qca9889 qcn6132_firmware qca9888 qcn5052_firmware qcn9274_firmware ipq8070a_firmware ipq8076_firmware ipq6018_firmware qcn6112 ipq8076 qcn9160_firmware qxm8083_firmware qcn5152 ipq6028 qcn9024 ipq9574_firmware immersive_home_3210_platform_firmware ipq5302 qcn9100 snapdragon_x65_5g_modem-rf_system ipq5300_firmware ipq8078_firmware qcn9070_firmware ipq8072a_firmware ipq6028_firmware qcn6432_firmware ipq5312_firmware qca9889_firmware qcn5122 ipq9574 qcn9024_firmware ipq8174_firmware qcn6412_firmware ipq5332_firmware ipq5332 ipq5302_firmware immersive_home_326_platform qcn5022 ipq6018 ipq6010_firmware immersive_home_214_platform immersive_home_214_platform_firmware qca4024 sdx55 qcn9022_firmware qcn6402 qca8075 qcn9022 qcn6024 ipq8070a qcn9072_firmware ipq6000_firmware qcn9074_firmware qcn6432 Snapdragon qcn5024_firmware qcf8000_firmware ipq8076a_firmware ipq8173_firmware immersive_home_326_platform_firmware qca4024_firmware qcn6122_firmware qcn6402_firmware immersive_home_318_platform_firmware csr8811_firmware ipq5028_firmware ipq9554_firmware qca8075_firmware qcn5152_firmware qcn6132_firmware qcn9000_firmware qcn5052_firmware qcn9274_firmware ipq8070a_firmware qcn6024_firmware ipq6018_firmware ipq8076_firmware immersive_home_316_platform_firmware qca8386_firmware qca8084_firmware qcn5124_firmware qcn9160_firmware qxm8083_firmware qca8082_firmware qcn5164_firmware qcn5122_firmware sdx55_firmware qcn6422_firmware ipq9574_firmware qca8081_firmware qcn6023_firmware immersive_home_3210_platform_firmware snapdragon_x65_5g_modem-rf_system_firmware ipq8078a_firmware ipq5300_firmware ipq8078_firmware qcn9070_firmware qcf8001_firmware ipq6028_firmware ipq8072a_firmware qcn6112_firmware qcn6432_firmware ipq5312_firmware qca9889_firmware qcn9024_firmware ipq8174_firmware qcn6412_firmware ipq5332_firmware ipq5302_firmware sdx65m_firmware ipq8071a_firmware qca8085_firmware qca9888_firmware ipq6010_firmware ipq9008_firmware qcn5154_firmware immersive_home_214_platform_firmware qcn9022_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware qcn9072_firmware ipq6000_firmware qcn9074_firmware qcn5022_firmware immersive_home_216_platform_firmware

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.18%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 01:32

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, and SDX20, if a RPMB listener is registered with a very small buffer size, the calculation of the maximum transfer size for read and write operations may underflow, resulting in buffer overflow.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.50%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.21% / 43.89%

||

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in Modem

Memory corruption in Modem while processing security related configuration before AS Security Exchange.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware wsa8845_firmware wsa8832 wsa8840 sdx57m_firmware qcs8550_firmware wcd9370 qca8081_firmware ar8035_firmware wsa8830_firmware wcd9340_firmware snapdragon_888_5g_mobile_platform qfw7124_firmware wcd9385 wcd9395_firmware snapdragon_8\+_gen_1_mobile_platform qcn6024 qcs4490_firmware snapdragon_8_gen_2_mobile_platform snapdragon_7c\+_gen_3_compute_firmware qcc710_firmware wcn6740_firmware wcd9390_firmware fastconnect_6700 sm7325-af_firmware wsa8815_firmware sm7325-ae_firmware wsa8832_firmware sg8275p qca8337_firmware wcd9370_firmware qca8337 snapdragon_x70_modem-rf_system_firmware wcd9395 sg8275p_firmware qcm6490_firmware sm7325-ae qcm4490 sm8350-ac_firmware wcd9340 qcm4490_firmware wcd9390 sm7325p qcm6490 wcn3950 wsa8810_firmware wsa8845h_firmware sm8550p_firmware qcm8550 wcn3988 qcs6490_firmware snapdragon_x65_5g_modem-rf_system qcn9024 snapdragon_x65_5g_modem-rf_system_firmware qcn6274 snapdragon_7c\+_gen_3_compute snapdragon_480_5g_mobile_platform_firmware qfw7124 sm7325-af snapdragon_x75_5g_modem-rf_system wsa8835 qca6391_firmware wsa8840_firmware snapdragon_780g_5g_mobile_platform sdx57m qcn9024_firmware wsa8845h qcn6024_firmware wcd9380_firmware fastconnect_6200_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_695_5g_mobile_platform qca8081 snapdragon_4_gen_1_mobile_platform_firmware wsa8815 wsa8830 snapdragon_780g_5g_mobile_platform_firmware sm8550p qcn6274_firmware snapdragon_8\+_gen_1_mobile_platform_firmware qcc710 snapdragon_4_gen_2_mobile_platform ar8035 wcn6740 snapdragon_695_5g_mobile_platform_firmware qfw7114_firmware wcd9375_firmware fastconnect_7800_firmware fastconnect_6900 qca6391 snapdragon_x70_modem-rf_system qcn6224 snapdragon_778g_5g_mobile_platform_firmware qfw7114 wcn3950_firmware wcd9385_firmware snapdragon_480_5g_mobile_platform snapdragon_8_gen_2_mobile_platform_firmware fastconnect_6900_firmware snapdragon_8_gen_1_mobile_platform wcd9380 qcs8550 fastconnect_6200 fastconnect_7800 sm7325p_firmware snapdragon_888_5g_mobile_platform_firmware snapdragon_4_gen_1_mobile_platform qcs4490 snapdragon_8_gen_1_mobile_platform_firmware wcd9375 snapdragon_778g_5g_mobile_platform snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 wcn3988_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware sm4350-ac_firmware wsa8835_firmware wsa8810 snapdragon_x75_5g_modem-rf_system_firmware qcs6490 snapdragon_8\+_gen_2_mobile_platform sm4350-ac sm8350-ac video_collaboration_vc3_platform qcn6224_firmware Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.50%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.54%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:14

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 210/SD 212/SD 205, SD 410/12, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, and SD 810, A NULL pointer dereference can occur during an SSL handshake.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 20:11

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, and SD 850, TZ applications are not properly validated.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_820a sd_425 sd_430_firmware sd_650_firmware mdm9650 sd_625 sd_210 sd_820_firmware sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware mdm9206 sd_652 sd_425_firmware sd_212_firmware sd_850_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware sd_430 sd_835_firmware mdm9650_firmware sd_835 sd_205 sd_210_firmware sd_652_firmware sd_205_firmware sd_212 Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.18%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:40

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, improper offset validation leads to buffer overflow in video parser.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.33%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.13% / 32.60%

||

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in Data Modem

Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w_firmware snapdragon_x20_lte_modem qcm8550_firmware sd865_5g apq8017 qcs410_firmware sw5100p snapdragon_429_mobile_platform_firmware sxr1120 vision_intelligence_300_platform snapdragon_xr1_platform qcs610_firmware wcd9335 wcd9370 qca8081_firmware sm7250-ab snapdragon_x50_5g_modem-rf_system qca4004 wcd9340_firmware qca6696 wcd9341_firmware wcd9395_firmware qcn6024 qcc710_firmware qca6426 sc8180x-ab wcn6740_firmware fastconnect_6700 wcn3610 sm7325-ae_firmware wsa8832_firmware qca8337 qca6426_firmware wcd9395 snapdragon_460_mobile_platform snapdragon_auto_4g_modem 9205_lte_modem qca6574au_firmware 9207_lte_modem_firmware wcd9341 sd626_firmware qca6574au wcd9390 snapdragon_x12_lte_modem snapdragon_1100_wearable_platform wsa8810_firmware sd730_firmware wsa8845h_firmware csra6640 sc8180x-af_firmware msm8209_firmware snapdragon_835_mobile_pc_platform_firmware wcn3660b_firmware sd730 fastconnect_6800_firmware sm8150-ac 9207_lte_modem sd835_firmware qcn6024_firmware snapdragon_4_gen_2_mobile_platform_firmware sm7150-ac snapdragon_695_5g_mobile_platform snapdragon_4_gen_1_mobile_platform_firmware video_collaboration_vc1_platform_firmware snapdragon_210_processor_firmware qcm6125_firmware c-v2x_9150 snapdragon_wear_3100_platform qcc710 msm8108 sm7250-aa_firmware sxr1120_firmware snapdragon_695_5g_mobile_platform_firmware sc8180xp-ac snapdragon_x5_lte_modem_firmware robotics_rb3_platform 315_5g_iot_modem_firmware fastconnect_6900 video_collaboration_vc1_platform snapdragon_wear_2100_platform_firmware qfw7114 wcd9385_firmware qca6421 315_5g_iot_modem snapdragon_x55_5g_modem-rf_system qca6310 snapdragon_630_mobile_platform sm7150-ab wcd9360 snapdragon_888_5g_mobile_platform_firmware snapdragon_wear_1300_platform_firmware qca6335 apq8053-aa_firmware qcs4490 snapdragon_8_gen_1_mobile_platform_firmware sc7180-ad sc8180xp-af mdm9250 snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 qca6421_firmware qcm6125 sm7150-ac_firmware mdm9230 sc8180x-ad qca6564au_firmware sd820 wsa8810 mdm8207 snapdragon_8\+_gen_2_mobile_platform sm8350-ac qca6595au sm7315_firmware wcd9326_firmware wsa8840 mdm9640_firmware mdm9230_firmware qcs8550_firmware sd835 qfw7124_firmware qca6436_firmware snapdragon_wear_4100\+_platform_firmware snapdragon_8\+_gen_1_mobile_platform sc8180x-af qualcomm_205_mobile_platform wcd9371_firmware qcs4490_firmware snapdragon_8_gen_2_mobile_platform wcn3910_firmware snapdragon_7c\+_gen_3_compute_firmware qts110 sm8250-ac_firmware qca6420 snapdragon_212_mobile_platform_firmware qca6174_firmware wcn3910 wcd9370_firmware csrb31024 snapdragon_x70_modem-rf_system_firmware qca9367 snapdragon_wear_3100_platform_firmware snapdragon_845_mobile_platform mdm9250_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_750g_5g_mobile_platform_firmware snapdragon_660_mobile_platform wcn3660b qca6574a sm7325-ae wcn3620_firmware qca6174a qca6584_firmware wcd9340 snapdragon_630_mobile_platform_firmware qcm2290 sm6150-ac snapdragon_820_automotive_platform_firmware qca6335_firmware sc8180xp-aa_firmware qcm6490 snapdragon_wear_2500_platform sm8150-ac_firmware sm8550p_firmware qcm8550 snapdragon_x20_lte_modem_firmware wcn3988 qcn9024 snapdragon_460_mobile_platform_firmware sm7325-af qca6574 snapdragon_x75_5g_modem-rf_system sc8180x-ac sd675_firmware qca6430_firmware sc8180x-aa sdx57m qcn9024_firmware wsa8845h sc8180xp-ac_firmware sm7250-aa wcd9326 qcs410 qcm2290_firmware qca6564a wsa8830 snapdragon_675_mobile_platform snapdragon_wear_1300_platform snapdragon_662_mobile_platform sm8550p snapdragon_8\+_gen_1_mobile_platform_firmware vision_intelligence_400_platform_firmware sc8180x\+sdx55_firmware smart_audio_200_platform_firmware snapdragon_665_mobile_platform ar8035 msm8996au wcn3620 qcm4325 snapdragon_208_processor_firmware qcn6224 snapdragon_x5_lte_modem sc8180x\+sdx55 qca6698aq wcn3950_firmware sm6250 snapdragon_8_gen_1_mobile_platform sc7180-ac sm7250-ac fastconnect_6200 snapdragon_710_mobile_platform smart_audio_200_platform sm7325p_firmware sc8180x-aa_firmware sd460 wcd9360_firmware sd670 wcn3680b smart_audio_400_platform snapdragon_w5\+_gen_1_wearable_platform fastconnect_6700_firmware snapdragon_636_mobile_platform_firmware video_collaboration_vc3_platform_firmware wcn3990 sd670_firmware snapdragon_680_4g_mobile_platform_firmware qcs6490 snapdragon_712_mobile_platform_firmware snapdragon_750g_5g_mobile_platform fastconnect_6200_firmware wsa8830_firmware sm7150-aa qcn6224_firmware qca6431 wsa8845_firmware sd660_firmware wsa8832 mdm9330_firmware snapdragon_auto_4g_modem_firmware sdx57m_firmware sxr2130_firmware snapdragon_675_mobile_platform_firmware ar8035_firmware mdm9630 snapdragon_888_5g_mobile_platform snapdragon_w5\+_gen_1_wearable_platform_firmware qca6320 sm8250-ab_firmware msm8608_firmware sd888_firmware snapdragon_712_mobile_platform msm8209 snapdragon_662_mobile_platform_firmware wcd9306 qca6564au qcs6125_firmware sc8180xp-ad sm6250p_firmware sm7325-af_firmware wsa8815_firmware sm8250-ab apq8053-ac_firmware qca8337_firmware snapdragon_x12_lte_modem_firmware qcm4290 snapdragon_680_4g_mobile_platform sd_455_firmware msm8608 snapdragon_1200_wearable_platform_firmware sg8275p_firmware qca9377_firmware qcm6490_firmware sm8350-ac_firmware sm7250p_firmware wcn3680_firmware qcm4490_firmware snapdragon_855_mobile_platform robotics_rb3_platform_firmware wcn3950 snapdragon_xr2_5g_platform snapdragon_429_mobile_platform qcs6125 apq5053-aa_firmware snapdragon_x65_5g_modem-rf_system_firmware snapdragon_7c\+_gen_3_compute snapdragon_670_mobile_platform_firmware snapdragon_439_mobile_platform snapdragon_780g_5g_mobile_platform qca4004_firmware apq8037 snapdragon_710_mobile_platform_firmware sd_675_firmware apq5053-aa snapdragon_720g_mobile_platform sd_455 sm7250p csrb31024_firmware sm6250_firmware sc8180x-ad_firmware snapdragon_690_5g_mobile_platform_firmware sm7150-aa_firmware snapdragon_780g_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qca6584au sd888 qca6320_firmware qcn6274_firmware sd460_firmware snapdragon_4_gen_2_mobile_platform sw5100_firmware snapdragon_439_mobile_platform_firmware snapdragon_425_mobile_platform wcn6740 qca6310_firmware sm6225-ad_firmware sd626 fastconnect_6800 qfw7114_firmware sm8250-ac fastconnect_7800_firmware wcd9371 mdm9630_firmware fastconnect_6900_firmware sc8180xp-aa apq8017_firmware wcd9380 snapdragon_xr2_5g_platform_firmware snapdragon_4_gen_1_mobile_platform vision_intelligence_300_platform_firmware snapdragon_778g_5g_mobile_platform snapdragon_665_mobile_platform_firmware snapdragon_x24_lte_modem msm8996au_firmware snapdragon_835_mobile_pc_platform snapdragon_auto_5g_modem-rf_firmware sm6225-ad sd662_firmware sm4350-ac sw5100 video_collaboration_vc3_platform snapdragon_430_mobile_platform_firmware aqt1000 wcd9306_firmware snapdragon_865_5g_mobile_platform_firmware c-v2x_9150_firmware sd855 snapdragon_212_mobile_platform qca6431_firmware sc8180x-ab_firmware qca6174 wcd9330_firmware wcn3990_firmware 9205_lte_modem_firmware sm7315 qca6698aq_firmware qcs2290 qca6564a_firmware wcd9385 msm8909w_firmware qcs2290_firmware sc8180xp-ab_firmware wcn3615 qca9367_firmware wcd9330 mdm8207_firmware sd662 wcn3610_firmware wcn3680 snapdragon_720g_mobile_platform_firmware qcs4290 wcd9390_firmware sc8180xp-ab snapdragon_690_5g_mobile_platform sd820_firmware qca6430 sg8275p sm6250p sdx55_firmware sc8180xp-ad_firmware snapdragon_auto_5g_modem-rf snapdragon_208_processor wcn3615_firmware sm7250-ab_firmware snapdragon_210_processor snapdragon_1100_wearable_platform_firmware sxr2130 9206_lte_modem_firmware msm8108_firmware qcm4490 snapdragon_wear_2500_platform_firmware snapdragon_636_mobile_platform csra6640_firmware sm7150-ab_firmware qca6174a_firmware sm7325p apq8037_firmware snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sm6150-ac_firmware snapdragon_x65_5g_modem-rf_system sdm429w sd855_firmware wcd9335_firmware mdm9640 qca6436 wcn3980_firmware snapdragon_1200_wearable_platform snapdragon_x24_lte_modem_firmware wsa8835 qca6391_firmware wsa8840_firmware qcn6274 snapdragon_480_5g_mobile_platform_firmware qfw7124 qca6595au_firmware sc8180x-ac_firmware sw5100p_firmware qca6696_firmware qcs4290_firmware snapdragon_865_5g_mobile_platform apq8053-ac wcd9380_firmware qualcomm_205_mobile_platform_firmware qca6574_firmware csra6620 qca8081 sd660 mdm9628 wsa8815 sg4150p qca9377 mdm9628_firmware qcm4325_firmware vision_intelligence_400_platform msm8909w snapdragon_430_mobile_platform 9206_lte_modem qca6574a_firmware sdx55 qcm4290_firmware sd675 wcd9375_firmware snapdragon_425_mobile_platform_firmware qca6391 snapdragon_x70_modem-rf_system qts110_firmware snapdragon_778g_5g_mobile_platform_firmware smart_audio_400_platform_firmware qualcomm_215_mobile_platform sg4150p_firmware snapdragon_480_5g_mobile_platform qca6584 snapdragon_670_mobile_platform csra6620_firmware sc8180xp-af_firmware snapdragon_8_gen_2_mobile_platform_firmware snapdragon_xr1_platform_firmware qcs8550 snapdragon_x50_5g_modem-rf_system_firmware fastconnect_7800 sd865_5g_firmware qualcomm_215_mobile_platform_firmware sc7180-ad_firmware wcd9375 snapdragon_wear_2100_platform wcn3988_firmware sd_675 sm4350-ac_firmware snapdragon_wear_4100\+_platform wsa8835_firmware apq8053-aa snapdragon_660_mobile_platform_firmware sc7180-ac_firmware sm7250-ac_firmware qca6584au_firmware snapdragon_x75_5g_modem-rf_system_firmware mdm9330 snapdragon_820_automotive_platform wcn3980 wcn3680b_firmware qcs610 Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.16% / 37.87%

||

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in Multi-mode Call Processor

Memory Corruption in Multi-mode Call Processor while processing bit mask API.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_x20_lte_modem qcm8550_firmware apq8017 sd865_5g qcs410_firmware sw5100p snapdragon_429_mobile_platform_firmware sxr1120 vision_intelligence_300_platform snapdragon_xr1_platform qcs610_firmware wcd9335 wcd9370 qca8081_firmware snapdragon_x50_5g_modem-rf_system qca4004 qca6696 wcd9340_firmware wcd9341_firmware wcd9395_firmware snapdragon_730_mobile_platform qcn6024 qcc710_firmware qca6426 wcn6740_firmware fastconnect_6700 wcn3610 snapdragon_768g_5g_mobile_platform_firmware wsa8832_firmware qca8337 qca6426_firmware wcd9395 snapdragon_460_mobile_platform snapdragon_auto_4g_modem smart_display_200_platform 9205_lte_modem qca6574au_firmware 9207_lte_modem_firmware wcd9341 sd626_firmware qca6574au wcd9390 snapdragon_x12_lte_modem snapdragon_1100_wearable_platform wsa8810_firmware sd730_firmware wsa8845h_firmware csra6640 snapdragon_8cx_gen_2_5g_compute_platform msm8209_firmware snapdragon_835_mobile_pc_platform_firmware wcn3660b_firmware sd730 snapdragon_730g_mobile_platform_firmware fastconnect_6800_firmware 9207_lte_modem sd835_firmware qcn6024_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_695_5g_mobile_platform snapdragon_4_gen_1_mobile_platform_firmware video_collaboration_vc1_platform_firmware snapdragon_778g\+_5g_mobile_platform snapdragon_210_processor_firmware qcm6125_firmware c-v2x_9150 snapdragon_wear_3100_platform qcc710 snapdragon_8cx_compute_platform_firmware msm8108 snapdragon_480\+_5g_mobile_platform_firmware sxr1120_firmware snapdragon_695_5g_mobile_platform_firmware snapdragon_x5_lte_modem_firmware robotics_rb3_platform 315_5g_iot_modem_firmware fastconnect_6900 snapdragon_765g_5g_mobile_platform video_collaboration_vc1_platform snapdragon_wear_2100_platform_firmware qfw7114 wcd9385_firmware qca6421 315_5g_iot_modem snapdragon_x55_5g_modem-rf_system qca6310 snapdragon_630_mobile_platform wcd9360 snapdragon_888_5g_mobile_platform_firmware snapdragon_wear_1300_platform_firmware qca6335 qcs4490 snapdragon_8_gen_1_mobile_platform_firmware snapdragon_7c_compute_platform mdm9250 snapdragon_685_4g_mobile_platform snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 qca6421_firmware qcm6125 qca6564au_firmware sd820 snapdragon_768g_5g_mobile_platform wsa8810 mdm8207 snapdragon_8\+_gen_2_mobile_platform qca6595au sm7315_firmware wcd9326_firmware wsa8840 mdm9640_firmware qcs8550_firmware sd835 snapdragon_870_5g_mobile_platform_firmware qfw7124_firmware qca6436_firmware snapdragon_8\+_gen_1_mobile_platform wcd9371_firmware qualcomm_205_mobile_platform snapdragon_7c_compute_platform_firmware snapdragon_8_gen_2_mobile_platform qcs4490_firmware snapdragon_7c\+_gen_3_compute_firmware qts110 wcn3910_firmware sm4125_firmware snapdragon_855\+\/860_mobile_platform_firmware snapdragon_212_mobile_platform_firmware qca6420 snapdragon_7c_gen_2_compute_platform_firmware wcn3910 mdm9205s_firmware wcd9370_firmware csrb31024 snapdragon_x70_modem-rf_system_firmware qca9367 snapdragon_wear_3100_platform_firmware snapdragon_845_mobile_platform mdm9250_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_750g_5g_mobile_platform_firmware snapdragon_660_mobile_platform wcn3660b qca6574a wcn3620_firmware qca6174a wcd9340 snapdragon_630_mobile_platform_firmware qcm2290 snapdragon_820_automotive_platform_firmware qca6335_firmware qcm6490 snapdragon_wear_2500_platform sm8550p_firmware qcm8550 snapdragon_x20_lte_modem_firmware wcn3988 qcn9024 snapdragon_460_mobile_platform_firmware qca6574 snapdragon_x75_5g_modem-rf_system sd675_firmware snapdragon_8cx_compute_platform qca6430_firmware snapdragon_870_5g_mobile_platform sdx57m qcn9024_firmware wsa8845h wcd9326 qcs410 qcm2290_firmware qca6564a wsa8830 snapdragon_675_mobile_platform snapdragon_wear_1300_platform snapdragon_662_mobile_platform sm8550p snapdragon_8\+_gen_1_mobile_platform_firmware vision_intelligence_400_platform_firmware snapdragon_765_5g_mobile_platform sc8180x\+sdx55_firmware smart_audio_200_platform_firmware snapdragon_665_mobile_platform ar8035 msm8996au wcn3620 snapdragon_678_mobile_platform_firmware qcm4325 snapdragon_208_processor_firmware qcn6224 snapdragon_x5_lte_modem sc8180x\+sdx55 snapdragon_7c_gen_2_compute_platform wcn3950_firmware qca6698aq sm6250 smart_display_200_platform_firmware mdm9205s snapdragon_8c_compute_platform_firmware snapdragon_8_gen_1_mobile_platform smart_audio_200_platform fastconnect_6200 snapdragon_710_mobile_platform sd670 sm7325p_firmware wcn3680b sd460 snapdragon_730g_mobile_platform snapdragon_8cx_gen_2_5g_compute_platform_firmware wcd9360_firmware snapdragon_888\+_5g_mobile_platform smart_audio_400_platform snapdragon_855\+\/860_mobile_platform snapdragon_w5\+_gen_1_wearable_platform fastconnect_6700_firmware snapdragon_636_mobile_platform_firmware video_collaboration_vc3_platform_firmware wcn3990 sd670_firmware snapdragon_680_4g_mobile_platform_firmware qcs6490 snapdragon_712_mobile_platform_firmware snapdragon_750g_5g_mobile_platform fastconnect_6200_firmware wsa8830_firmware qcn6224_firmware qca6431 wsa8845_firmware sd660_firmware wsa8832 snapdragon_auto_4g_modem_firmware vision_intelligence_200_platform sdx57m_firmware sxr2130_firmware snapdragon_675_mobile_platform_firmware ar8035_firmware snapdragon_730_mobile_platform_firmware snapdragon_888_5g_mobile_platform snapdragon_w5\+_gen_1_wearable_platform_firmware qca6320 msm8608_firmware sd888_firmware snapdragon_712_mobile_platform msm8209 snapdragon_662_mobile_platform_firmware wcd9306 qca6564au qcs6125_firmware sm6250p_firmware wsa8815_firmware qca8337_firmware snapdragon_x12_lte_modem_firmware qcm4290 vision_intelligence_100_platform snapdragon_680_4g_mobile_platform sd_455_firmware msm8608 snapdragon_1200_wearable_platform_firmware sg8275p_firmware qca9377_firmware qcm6490_firmware snapdragon_8c_compute_platform sm7250p_firmware wcn3680_firmware sm4125 qcm4490_firmware snapdragon_855_mobile_platform robotics_rb3_platform_firmware wcn3950 snapdragon_xr2_5g_platform snapdragon_429_mobile_platform qcs6125 snapdragon_x65_5g_modem-rf_system_firmware snapdragon_7c\+_gen_3_compute snapdragon_765g_5g_mobile_platform_firmware snapdragon_670_mobile_platform_firmware snapdragon_439_mobile_platform snapdragon_780g_5g_mobile_platform qca4004_firmware apq8037 snapdragon_710_mobile_platform_firmware sd_675_firmware snapdragon_720g_mobile_platform sd_455 vision_intelligence_200_platform_firmware sm7250p csrb31024_firmware sm6250_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_780g_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qca6584au sd888 qca6320_firmware qcn6274_firmware sd460_firmware snapdragon_4_gen_2_mobile_platform sw5100_firmware snapdragon_439_mobile_platform_firmware snapdragon_425_mobile_platform snapdragon_765_5g_mobile_platform_firmware wcn6740 qca6310_firmware sd626 fastconnect_6800 qfw7114_firmware snapdragon_685_4g_mobile_platform_firmware fastconnect_7800_firmware wcd9371 snapdragon_782g_mobile_platform_firmware fastconnect_6900_firmware apq8017_firmware wcd9380 snapdragon_732g_mobile_platform_firmware snapdragon_xr2_5g_platform_firmware snapdragon_4_gen_1_mobile_platform vision_intelligence_300_platform_firmware snapdragon_778g_5g_mobile_platform snapdragon_665_mobile_platform_firmware snapdragon_x24_lte_modem msm8996au_firmware snapdragon_835_mobile_pc_platform snapdragon_auto_5g_modem-rf_firmware snapdragon_865\+_5g_mobile_platform sd662_firmware sw5100 video_collaboration_vc3_platform snapdragon_430_mobile_platform_firmware aqt1000 wcd9306_firmware snapdragon_865_5g_mobile_platform_firmware c-v2x_9150_firmware sd855 snapdragon_212_mobile_platform qca6431_firmware wcd9330_firmware wcn3990_firmware 9205_lte_modem_firmware sm7315 qca6698aq_firmware qcs2290 qca6564a_firmware wcd9385 msm8909w_firmware qcs2290_firmware wcn3615 qca9367_firmware wcd9330 mdm8207_firmware sd662 wcn3610_firmware wcn3680 snapdragon_678_mobile_platform snapdragon_720g_mobile_platform_firmware qcs4290 wcd9390_firmware snapdragon_778g\+_5g_mobile_platform_firmware snapdragon_865\+_5g_mobile_platform_firmware snapdragon_690_5g_mobile_platform sd820_firmware qca6430 sg8275p sm6250p sdx55_firmware snapdragon_auto_5g_modem-rf snapdragon_208_processor wcn3615_firmware snapdragon_210_processor snapdragon_1100_wearable_platform_firmware sxr2130 9206_lte_modem_firmware msm8108_firmware qcm4490 snapdragon_wear_2500_platform_firmware snapdragon_636_mobile_platform csra6640_firmware vision_intelligence_100_platform_firmware qca6174a_firmware sm7325p apq8037_firmware snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware snapdragon_x65_5g_modem-rf_system sd855_firmware wcd9335_firmware mdm9640 qca6436 wcn3980_firmware snapdragon_1200_wearable_platform snapdragon_x24_lte_modem_firmware wsa8835 qca6391_firmware wsa8840_firmware qcn6274 snapdragon_480_5g_mobile_platform_firmware qfw7124 qca6595au_firmware sw5100p_firmware snapdragon_732g_mobile_platform snapdragon_782g_mobile_platform qca6696_firmware qcs4290_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware qualcomm_205_mobile_platform_firmware qca6574_firmware csra6620 qca8081 sd660 mdm9628 wsa8815 sg4150p qca9377 mdm9628_firmware qcm4325_firmware vision_intelligence_400_platform snapdragon_430_mobile_platform 9206_lte_modem qca6574a_firmware sdx55 qcm4290_firmware snapdragon_480\+_5g_mobile_platform sd675 wcd9375_firmware snapdragon_425_mobile_platform_firmware qca6391 snapdragon_x70_modem-rf_system qts110_firmware snapdragon_778g_5g_mobile_platform_firmware smart_audio_400_platform_firmware qualcomm_215_mobile_platform sg4150p_firmware snapdragon_480_5g_mobile_platform snapdragon_670_mobile_platform csra6620_firmware snapdragon_8_gen_2_mobile_platform_firmware snapdragon_xr1_platform_firmware snapdragon_x50_5g_modem-rf_system_firmware qcs8550 fastconnect_7800 sd865_5g_firmware qualcomm_215_mobile_platform_firmware wcd9375 snapdragon_wear_2100_platform wcn3988_firmware sd_675 snapdragon_888\+_5g_mobile_platform_firmware wsa8835_firmware snapdragon_660_mobile_platform_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn3980 qca6584au_firmware snapdragon_820_automotive_platform msm8909w wcn3680b_firmware qcs610 Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 17:14

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9640, MDM9645, SD 210/SD 212/SD 205, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, and SD 820A, PD failure reason string from user PD is used directly in root PD, so if the buffer parameter is non-NULL terminated in Diag F3 APIs, a buffer overread occurs.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.37%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 03:43

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, and SD 835, SMMU Access Control Policy was updated to block HLOS from accessing BLSP and BAM resources.

Vendor-Qualcomm Technologies, Inc.

Product-mdm9206 sd_425_firmware sd_212_firmware sd_820a sd_625_firmware sd_450 sd_425 sd_430_firmware mdm9206_firmware sd_430 sd_625 sd_210 sd_820_firmware sd_820 sd_835_firmware sd_835 sd_205 sd_450_firmware sd_210_firmware sd_820a_firmware sd_205_firmware sd_212 Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.94%

||

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Improper Input Validation in Modem

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_wear_3100_firmware sw5100p apq8017 sd865_5g wcd9335 snapdragon_8\+_gen_1 wcd9370 qca8081_firmware snapdragon_429_firmware qca4004 qca6696 wcd9340_firmware snapdragon_430_firmware wcd9341_firmware qcn6024 qca6426 sc8180x-ab snapdragon_auto_4g wcn6740_firmware fastconnect_6700 wcn3610 snapdragon_208_firmware snapdragon_695_5g snapdragon_888_5g wsa8832_firmware qca8337 qca6426_firmware snapdragon_4_gen_2_firmware qca6574au_firmware wcd9341 snapdragon_wear_1300 qca6574au wsa8810_firmware snapdragon_429 csra6640 sc8180x-af_firmware msm8209_firmware snapdragon_690_5g snapdragon_778g\+_5g_firmware snapdragon_865\+_5g snapdragon_765_5g wcn3660b_firmware fastconnect_6800_firmware snapdragon_x24_firmware snapdragon_865\+_5g_firmware snapdragon_855\+\/860 qcn6024_firmware snapdragon_x65_5g snapdragon_636_firmware snapdragon_888\+_5g_firmware c-v2x_9150 snapdragon_x50_5g snapdragon_xr2_5g_firmware msm8108 9205 sc8180xp-ac snapdragon_765g_5g_firmware snapdragon_660_firmware snapdragon_4_gen_2 fastconnect_6900 wcd9385_firmware qca6421 snapdragon_778g_5g wcd9360 snapdragon_x70_firmware qcs4490 snapdragon_662_firmware sc8180xp-af snapdragon_x50_5g_firmware snapdragon_x24 snapdragon_wear_3100 qca6421_firmware sc8180x-ad qca6564au_firmware wsa8810 205 snapdragon_855_firmware 315_5g_firmware qca6595au sm7315_firmware snapdragon_865_5g_firmware snapdragon_wear_2500 wcd9326_firmware qcs8550_firmware qca6436_firmware sc8180x-af qcs4490_firmware wcn3910_firmware qts110 snapdragon_680_4g qca6420 wcn3910 snapdragon_212_firmware wcd9370_firmware csrb31024 snapdragon_480\+_5g_firmware snapdragon_765_5g_firmware wcn3660b qca6574a wcn3620_firmware qca6174a snapdragon_695_5g_firmware snapdragon_750g_5g_firmware wcd9340 qcm2290 sc8180xp-aa_firmware qcm6490 215 snapdragon_x55_5g_firmware wcn3988 qcn9024 qca6430_firmware sc8180x-aa snapdragon_439_firmware sdx57m smart_audio_400 qcn9024_firmware sc8180xp-ac_firmware wcd9326 qcm2290_firmware qca6564a snapdragon_wear_2100_firmware wsa8830 snapdragon_870_5g_firmware snapdragon_x65_5g_firmware snapdragon_wear_2100 sc8180x\+sdx55_firmware snapdragon_888\+_5g ar8035 snapdragon_208 wcn3620 qcm4325 snapdragon_782g sc8180x\+sdx55 wcn3950_firmware qca6698aq fastconnect_6200 sc8180x-aa_firmware wcn3680b sm7325p_firmware wcd9360_firmware snapdragon_210_firmware snapdragon_630 snapdragon_430 fastconnect_6700_firmware snapdragon_768g_5g video_collaboration_vc3_platform_firmware wcn3990 snapdragon_778g_5g_firmware snapdragon_780g_5g qcs6490 snapdragon_210 snapdragon_778g\+_5g fastconnect_6200_firmware wsa8830_firmware qca6431 sd660_firmware snapdragon_7c\+_gen_3 wsa8832 sdx57m_firmware sxr2130_firmware ar8035_firmware snapdragon_680_4g_firmware msm8608_firmware sd888_firmware snapdragon_630_firmware msm8209 snapdragon_439 wcd9306 qca6564au snapdragon_460 snapdragon_636 snapdragon_wear_1300_firmware sc8180xp-ad wsa8815_firmware snapdragon_865_5g qca8337_firmware snapdragon_665_firmware snapdragon_auto_4g_firmware qcm4290 snapdragon_480_5g_firmware snapdragon_4_gen_1_firmware sd_455_firmware msm8608 snapdragon_685_4g qca9377_firmware qcm6490_firmware snapdragon_w5\+_gen_1 snapdragon_665 sm7250p_firmware 205_firmware qcm4490_firmware wcn3950 snapdragon_690_5g_firmware qca4004_firmware apq8037 smart_audio_400_firmware snapdragon_460_firmware smart_audio_200_firmware sd_455 snapdragon_auto_5g_firmware sm7250p csrb31024_firmware snapdragon_768g_5g_firmware sc8180x-ad_firmware sd888 snapdragon_wear_2500_firmware sw5100_firmware wcn6740 fastconnect_6800 snapdragon_662 fastconnect_7800_firmware snapdragon_855\+\/860_firmware fastconnect_6900_firmware sc8180xp-aa apq8017_firmware wcd9380 9205_firmware smart_audio_200 snapdragon_xr2_5g 215_firmware snapdragon_888_5g_firmware snapdragon_765g_5g sw5100 video_collaboration_vc3_platform aqt1000 wcd9306_firmware c-v2x_9150_firmware snapdragon_x70 sd855 qca6431_firmware snapdragon_8_gen_1_firmware sc8180x-ab_firmware wcn3990_firmware sm7315 snapdragon_750g_5g qca6698aq_firmware qcs2290 qca6564a_firmware wcd9385 msm8909w_firmware qcs2290_firmware sc8180xp-ab_firmware wcn3615 wcn3610_firmware snapdragon_8_gen_1 qcs4290 sc8180xp-ab qca6430 snapdragon_782g_firmware snapdragon_855 sdx55_firmware snapdragon_x55_5g sc8180xp-ad_firmware wcn3615_firmware sxr2130 msm8108_firmware qcm4490 snapdragon_4_gen_1 snapdragon_870_5g csra6640_firmware snapdragon_480\+_5g qca6174a_firmware snapdragon_685_4g_firmware sm7325p apq8037_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware snapdragon_480_5g sd855_firmware wcd9335_firmware wcn3980_firmware qca6436 sc8180x-ac wsa8835 qca6595au_firmware qca6391_firmware sc8180x-ac_firmware sw5100p_firmware qca6696_firmware qcs4290_firmware wcd9380_firmware csra6620 qca8081 sd660 mdm9628 wsa8815 sg4150p qca9377 snapdragon_auto_5g mdm9628_firmware qcm4325_firmware snapdragon_660 qca6574a_firmware sdx55 qcm4290_firmware snapdragon_8\+_gen_1_firmware wcd9375_firmware snapdragon_7c\+_gen_3_firmware 315_5g qca6391 snapdragon_w5\+_gen_1_firmware qts110_firmware sg4150p_firmware snapdragon_780g_5g_firmware sc8180xp-af_firmware csra6620_firmware qcs8550 fastconnect_7800 sd865_5g_firmware snapdragon_425_firmware wcd9375 wcn3988_firmware snapdragon_212 wsa8835_firmware wcn3980 msm8909w snapdragon_425 wcn3680b_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.30%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly validated.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.77%

||

7 Day CHG~0.00%

Published-23 Feb, 2018 | 23:00

Updated-17 Sep, 2024 | 00:06

In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 835, and SD 845, a buffer overread is possible if there are no newlines in an input file.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.13% / 33.80%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 20:02

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, and Snapdragon_High_Med_2016, the 'proper' solution for this will be to ensure that any users of qsee_log in the bootchain (before Linux boots) unallocate their buffers and clear the qsee_log pointer. Until support for that is implemented in TZ and the bootloader, enable tz_log to avoid potential scribbling. This solution will prevent the linux kernel memory corruption.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.50%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.13% / 33.32%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.18%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 20:41

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SD 835, an integer overflow leading to buffer overflow can occur during a VT call.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 47.77%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT procedure.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:21

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, if OEMCrypto_Dash_InstallEncapKeybox() is called with keyBoxLength set to a value higher than TZ_WV_MAX_DATA_LEN (20k), a buffer over-read occurs.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:32

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in Secure DEMUX command handler, when parameter validation fails, an error code is written into a response buffer without checking that response buffer length, passed from HLOS, which may result in memory corruption.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.74% / 72.05%

||

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-16 Sep, 2024 | 17:27

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated.

Vendor-Qualcomm Technologies, Inc.

Product-mdm9206 sd_625 sd_652 sd_835_firmware sd_625_firmware sd_650 sd_835 sd_845_firmware sd_652_firmware sd_845 mdm9206_firmware sd_650_firmware Snapdragon IoT, Snapdragon Mobile

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.87% / 74.29%

||

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-17 Sep, 2024 | 02:47

In Android before 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835, accessing SPCOM functions with a compromised client structure can result in a Use After Free condition.

Vendor-Qualcomm Technologies, Inc.

Product-sd_652 sd_625 sd_835_firmware sd_625_firmware sd_650 sd_835 sd_652_firmware sd_650_firmware Snapdragon Mobile

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.30%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, handles in the global client structure can become stale.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.96% / 82.75%

||

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-17 Sep, 2024 | 02:48

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820, SD 835, it is possible for the XBL loader to skip the authentication of device config.

Vendor-Qualcomm Technologies, Inc.

Product-mdm9206 sd_652 sd_425_firmware sd_212_firmware sd_625_firmware apq8096au msm8996au_firmware sd_425 sd_430_firmware mdm9206_firmware sd_430 mdm9650 sd_625 apq8096au_firmware sd_210 sd_820_firmware msm8996au sd_820 sd_650 sd_835_firmware mdm9650_firmware sd_212 sd_835 sd_205 sd_210_firmware sd_652_firmware sd_205_firmware sd_650_firmware Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile

CWE ID-CWE-287

Improper Authentication

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.30%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a count value that is read from a file is not properly validated.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.58% / 68.10%

||

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-16 Sep, 2024 | 16:42

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, PKCS7 padding is not supported by the crypto storage APIs.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Snapdragon IoT, Snapdragon Mobile