CVE-2019-2236 | ByteOS Network

Vulnerability Details :

CVE-2019-2236

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-25 Jul, 2019 | 16:33

Updated At-04 Aug, 2024 | 18:42

Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:25 Jul, 2019 | 16:33

Updated At:04 Aug, 2024 | 18:42

▼CVE Numbering Authority (CNA)

Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Versions

Affected

IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Problem Types

Type	CWE ID	Description
text	N/A	Null pointer dereference while terminating secure application

Type: text

CWE ID: N/A

Description: Null pointer dereference while terminating secure application

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:25 Jul, 2019 | 17:15

Updated At:26 Jul, 2019 | 17:44

Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P

Type: Primary

Version: 3.0

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 2.1

Base severity: LOW

Vector:

AV:L/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

Qualcomm Technologies, Inc.

>>ipq8074_firmware>>-

cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9655_firmware>>-

cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996au_firmware>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca8081_firmware>>-

cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs605_firmware>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qualcomm_215_firmware>>-

cpe:2.3:o:qualcomm:qualcomm_215_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qualcomm_215>>-

cpe:2.3:h:qualcomm:qualcomm_215:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_410_firmware>>-

cpe:2.3:o:qualcomm:sd_410_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_410:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_412_firmware>>-

cpe:2.3:o:qualcomm:sd_412_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_412:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_425_firmware>>-

cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_427_firmware>>-

cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_430_firmware>>-

cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_435_firmware>>-

cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_439_firmware>>-

cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_429_firmware>>-

cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_450_firmware>>-

cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_625_firmware>>-

cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_632_firmware>>-

cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_636_firmware>>-

cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_650_firmware>>-

cpe:2.3:o:qualcomm:sd_650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_652_firmware>>-

cpe:2.3:o:qualcomm:sd_652_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_652:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_675_firmware>>-

cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_712_firmware>>-

cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_712:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-476	Primary	nvd@nist.gov

CWE ID: CWE-476

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

323Records found

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.25% / 47.74%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, Rennell, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-msm8920 qcm2150_firmware msm8953 sdm450 sdm429w sdm632_firmware sdm450_firmware sdm632 qcm2150 msm8920_firmware sdm439 sdx24 sc8180x_firmware sdm429 msm8940_firmware sm7150_firmware sm6150 qm215 sdm429w_firmware sm7150 msm8917 msm8937 sc8180x msm8905 sm8150_firmware msm8909 sdx24_firmware sdm439_firmware rennell rennell_firmware qm215_firmware sdx55 msm8940 msm8953_firmware sm6150_firmware msm8917_firmware msm8937_firmware sdm429_firmware sm8150 msm8905_firmware sdx55_firmware nicobar_firmware msm8909_firmware nicobar Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.37% / 57.97%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCS605, QM215, Rennell, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qca6574au sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware msm8937 mdm9207c_firmware msm8996_firmware mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.17%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 22:24

Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8939, MSM8953, MSM8996, MSM8996AU, Nicobar, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-msm891_firmware sdm632_firmware msm8996au_firmware sdm450_firmware sdm632 sdm439 sdm429 sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware sxr2130 qcs605_firmware mdm9206 sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar msm8953 sdm450 apq8064 sdm636_firmware apq8098_firmware sdx20 sdm660 sdm630 mdm9607_firmware sm8250_firmware qcs405 qm215 mdm9607 apq8017_firmware msm8939_firmware mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware msm8953_firmware apq8053 apq8096au_firmware sm6150_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware msm891 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.11% / 30.03%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCS404, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qca8081 mdm9150 msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdm850 apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.25% / 47.74%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:05

Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP messages in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, Rennell, SC7180, SC8180X, SDA845, SDM429, SDM439, SDM450, SDM632, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware msm8920 qcm2150_firmware msm8953 sdm450 sdm632_firmware sdm845 sdm450_firmware sdm632 qcm2150 msm8920_firmware sdm439 sdx24 sc8180x_firmware sdm429 msm8940_firmware sm7150_firmware sm6150 qm215 sc7180_firmware sm7150 msm8917 msm8937 sc8180x msm8905 sm8150_firmware msm8909 sdx24_firmware sdm439_firmware sda845_firmware rennell sc7180 rennell_firmware qm215_firmware msm8940 msm8953_firmware sm6150_firmware msm8917_firmware msm8937_firmware sdm429_firmware sm8150 sdm850 msm8905_firmware nicobar_firmware msm8909_firmware sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.25% / 47.74%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:50

Updated-04 Aug, 2024 | 00:33

Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wcn3991 wsa8830 qca8337_firmware wcd9380_firmware sd780g qca8337 sd865_5g qca6431_firmware sdx55m_firmware wcn6856_firmware wcd9360_firmware sd888 sdx65 wsa8835 wcd9380 sd765g_firmware sd888_5g qca6595au_firmware qca6390_firmware sd690_5g wcd9370 qca6574a sd690_5g_firmware wcn6855_firmware sm7325p qca6426 wcn6750 wcn3998 wcd9385_firmware sdxr2_5g_firmware sa515m sd_8_gen1_5g_firmware sd855 wsa8815 sm7325p_firmware wcn6850 sd765 qca6426_firmware sm7315_firmware qca6574a_firmware sd695 qca6574au_firmware sdx55_firmware sd768g_firmware qca6595au qca8081_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware sm7315 qca6391 wcd9360 qca6436_firmware sdx55m qca6421_firmware wcn6740_firmware sd778g sdx65_firmware sa515m_firmware qcs6490 qcm6490_firmware sdxr2_5g sd480_firmware wcn6851_firmware wcn3988_firmware qca6574au qca6421 sd778g_firmware wsa8810_firmware sd765g wcd9341_firmware sd480 sd765_firmware sd870 qca6436 wcn6851 wsa8810 wcn6855 qca8081 wcn6856 wcd9385 wcd9341 sd695_firmware sd768g qca6431 qca6696_firmware qcs6490_firmware sd750g sd870_firmware wcn6740 qca6696 qca6391_firmware qca6390 ar8035 sd750g_firmware wcd9375 sd780g_firmware wcd9370_firmware sdx55 sd888_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7250p sm8475 wcn6750_firmware ar8035_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.29% / 51.64%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Null-pointer dereference can occur while accessing the segment element info when it is not allocated and assigned in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, Nicobar, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 nicobar msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 saipan nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.18% / 39.67%

||

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

NULL pointer Dereference in Modem

Transient DOS in Modem while allocating DSM items.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware snapdragon_x20_lte_modem sd865_5g snapdragon_xr1_platform ipq6028_firmware immersive_home_214_platform qca8081_firmware sm7250-ab snapdragon_x50_5g_modem-rf_system wcd9340_firmware wcd9395_firmware qcn6024 qcc710_firmware qca6426 sc8180x-ab fastconnect_6700 qcn5124_firmware sm7325-ae_firmware wsa8832_firmware qca8337 qca6426_firmware wcd9395 qcn7605 snapdragon_460_mobile_platform qca6574au_firmware qcn7606_firmware ipq8078a_firmware wcd9341 snapdragon_x12_lte_modem wsa8810_firmware sd730_firmware wsa8845h_firmware snapdragon_835_mobile_pc_platform_firmware fastconnect_6800_firmware sm8150-ac fsm10055 sd835_firmware snapdragon_4_gen_2_mobile_platform_firmware sm7150-ac snapdragon_4_gen_1_mobile_platform_firmware video_collaboration_vc1_platform_firmware qcn9000 sm7250-aa_firmware snapdragon_695_5g_mobile_platform_firmware sc8180xp-ac video_collaboration_vc1_platform wcd9385_firmware qca6421 qca6310 snapdragon_630_mobile_platform ipq8074a_firmware ipq8076a wcd9360 snapdragon_8_gen_1_mobile_platform_firmware sa6155p sm7150-ac_firmware qca6564au_firmware qca8075 sa6155p_firmware sd835 qca6436_firmware snapdragon_8\+_gen_1_mobile_platform ipq8070a_firmware qcn5021_firmware qcn9070 sc8180x-af snapdragon_8_gen_2_mobile_platform snapdragon_7c\+_gen_3_compute_firmware sm4125_firmware sm8250-ac_firmware qca6420 wcn3910 csrb31024 snapdragon_x70_modem-rf_system_firmware snapdragon_845_mobile_platform mdm9250_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_660_mobile_platform qca6574a sm7325-ae qca6174a wcd9340 snapdragon_630_mobile_platform_firmware qcm2290 qdu1210 sm6150-ac sc8180xp-aa_firmware qcn5154_firmware sm8150-ac_firmware sm8550p_firmware qcm8550 snapdragon_x20_lte_modem_firmware wcn3988 qcn5122_firmware pmp8074 qcn9024 snapdragon_460_mobile_platform_firmware qca6574 sm7325-af snapdragon_x75_5g_modem-rf_system sdx57m sc8180xp-ac_firmware qcs410 qcm2290_firmware sa8155p qca8072_firmware wsa8830 sm8550p sa6145p snapdragon_8\+_gen_1_mobile_platform_firmware ipq8071a wcn3950_firmware snapdragon_8_gen_1_mobile_platform sc7180-ac fastconnect_6200 snapdragon_710_mobile_platform sm7325p_firmware sd460 wcd9360_firmware qdx1011 smart_audio_400_platform video_collaboration_vc3_platform_firmware qcn6023_firmware qcn5164_firmware sd670_firmware snapdragon_750g_5g_mobile_platform qcn9072 sm7150-aa qcn6224_firmware qca6431 sd660_firmware sdx57m_firmware sxr2130_firmware ar8035_firmware snapdragon_888_5g_mobile_platform snapdragon_w5\+_gen_1_wearable_platform_firmware qca6320 qca4024_firmware sd888_firmware snapdragon_712_mobile_platform snapdragon_662_mobile_platform_firmware qcs6125_firmware ipq8070 qcn9074 wsa8815_firmware sm8250-ab qca8337_firmware snapdragon_x12_lte_modem_firmware ipq8173 sm8350-ac_firmware sm7250p_firmware wcn3999 ipq6010_firmware wcn3950 snapdragon_x65_5g_modem-rf_system_firmware qcn9070_firmware snapdragon_780g_5g_mobile_platform snapdragon_710_mobile_platform_firmware sd_675_firmware snapdragon_720g_mobile_platform qca9984 ipq5010_firmware qcn9022_firmware sm7250p csrb31024_firmware ipq6018 sa8155 sd_8cx_firmware sm7150-aa_firmware snapdragon_845_mobile_platform_firmware sd888 fsm10055_firmware qru1062_firmware sd460_firmware snapdragon_4_gen_2_mobile_platform qru1062 qca6310_firmware fastconnect_6800 sm8250-ac wcd9371 fastconnect_6900_firmware sc8180xp-aa snapdragon_xr2_5g_platform_firmware qca8075_firmware vision_intelligence_300_platform_firmware snapdragon_835_mobile_pc_platform video_collaboration_vc3_platform snapdragon_865_5g_mobile_platform_firmware qca6431_firmware qca6698aq_firmware qcs2290 qcn7606 qcs2290_firmware wcn3999_firmware qcn7605_firmware snapdragon_720g_mobile_platform_firmware wcd9390_firmware immersive_home_318_platform_firmware sc8180xp-ab qcn5024 snapdragon_690_5g_mobile_platform qca6430 qdx1011_firmware sc8180xp-ad_firmware snapdragon_auto_5g_modem-rf sm7250-ab_firmware qru1052 csra6640_firmware qca6420_firmware qcs6490_firmware snapdragon_x65_5g_modem-rf_system ipq8076_firmware sd855_firmware wcd9335_firmware wcn3980_firmware qca6436 snapdragon_x24_lte_modem_firmware wsa8835 qca6391_firmware wsa8840_firmware qdu1010_firmware qcs4290_firmware snapdragon_865_5g_mobile_platform csra6620 qca8081 sd660 wsa8815 qca9377 qcm4325_firmware qcm4290_firmware qca9888_firmware qca9889 qcn5024_firmware ipq5010 smart_audio_400_platform_firmware snapdragon_778g_5g_mobile_platform_firmware sg4150p_firmware snapdragon_480_5g_mobile_platform qru1052_firmware snapdragon_670_mobile_platform csra6620_firmware sc8180xp-af_firmware qcs8550 sd865_5g_firmware pmp8074_firmware sc7180-ad_firmware wcd9375 qca9889_firmware sa8145p sd_675 immersive_home_316_platform sm4350-ac_firmware csr8811 sc7180-ac_firmware sm7250-ac_firmware qdx1010 qcm8550_firmware qcs410_firmware sa6150p_firmware sw5100p sxr1120 qcn9000_firmware vision_intelligence_300_platform qcn9022 qcs610_firmware wcd9335 wcd9370 qca8072 qca6696 wcd9341_firmware ipq8076 wcn6740_firmware ipq6018_firmware qca9984_firmware qcn6023 immersive_home_216_platform qdu1110 snapdragon_auto_4g_modem ipq8078a qca6574au wcd9390 csra6640 sc8180x-af_firmware qcn9100_firmware qcn5122 sd730 qcn6024_firmware snapdragon_695_5g_mobile_platform qcm6125_firmware c-v2x_9150 qcc710 snapdragon_850_mobile_compute_platform sxr1120_firmware qcn5054 robotics_rb3_platform 315_5g_iot_modem_firmware fastconnect_6900 qru1032_firmware qcn5052 qfw7114 315_5g_iot_modem snapdragon_x55_5g_modem-rf_system sa8155_firmware sm7150-ab qcn5164 snapdragon_888_5g_mobile_platform_firmware qca6335 qcs4490 sc7180-ad sc8180xp-af mdm9250 snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 qca6421_firmware qcm6125 sc8180x-ad csr8811_firmware wsa8810 qcn5021 qdu1000_firmware snapdragon_8\+_gen_2_mobile_platform sm8350-ac qca6595au sm7315_firmware qdu1010 wcd9326_firmware wsa8840 qcs8550_firmware qdu1210_firmware qfw7124_firmware qcn9012 wcd9371_firmware qcs4490_firmware wcn3910_firmware wcd9370_firmware snapdragon_750g_5g_mobile_platform_firmware qdu1110_firmware qdu1000 sa8195p qca6335_firmware qcm6490 immersive_home_316_platform_firmware ipq8076a_firmware sd675_firmware qca6430_firmware sc8180x-aa qcn9024_firmware wsa8845h sa6150p sm7250-aa wcd9326 sa8155p_firmware qca6564a snapdragon_675_mobile_platform snapdragon_662_mobile_platform qcn9074_firmware vision_intelligence_400_platform_firmware ipq8174 sc8180x\+sdx55_firmware ipq8174_firmware snapdragon_665_mobile_platform ar8035 ipq8072a sa6155 qcm4325 qcn6224 sc8180x\+sdx55 qca6698aq sm6250 sm7250-ac sc8180x-aa_firmware sd670 sa8145p_firmware sa8150p_firmware snapdragon_w5\+_gen_1_wearable_platform fastconnect_6700_firmware snapdragon_636_mobile_platform_firmware wcn3990 snapdragon_680_4g_mobile_platform_firmware ipq8078 qcs6490 snapdragon_712_mobile_platform_firmware fastconnect_6200_firmware ar8031_firmware wsa8830_firmware snapdragon_850_mobile_compute_platform_firmware wsa8845_firmware wsa8832 snapdragon_auto_4g_modem_firmware snapdragon_675_mobile_platform_firmware qcn5022_firmware sm8250-ab_firmware qca6564au sc8180xp-ad sm6250p_firmware immersive_home_214_platform_firmware sm7325-af_firmware sa8195p_firmware qcm4290 qcn5054_firmware qca9888 snapdragon_680_4g_mobile_platform sd_455_firmware ar8031 sg8275p_firmware qca9377_firmware qcm6490_firmware ipq8072a_firmware sm4125 qcm4490_firmware snapdragon_855_mobile_platform qru1032 robotics_rb3_platform_firmware snapdragon_xr2_5g_platform qcs6125 snapdragon_7c\+_gen_3_compute snapdragon_670_mobile_platform_firmware sd_455 sm6250_firmware sc8180x-ad_firmware snapdragon_780g_5g_mobile_platform_firmware qcn6274_firmware qca6320_firmware sw5100_firmware wcn6740 sm6225-ad_firmware qfw7114_firmware qca4024 fastconnect_7800_firmware immersive_home_216_platform_firmware ipq8070a wcd9380 sa6145p_firmware sa6155_firmware snapdragon_4_gen_1_mobile_platform sa8150p snapdragon_778g_5g_mobile_platform snapdragon_665_mobile_platform_firmware snapdragon_x24_lte_modem qcn5052_firmware snapdragon_auto_5g_modem-rf_firmware sm6225-ad sd662_firmware sm4350-ac ipq6010 sw5100 aqt1000 c-v2x_9150_firmware sd855 sc8180x-ab_firmware wcn3990_firmware sm7315 qca6564a_firmware wcd9385 sc8180xp-ab_firmware sd662 qcs4290 sg8275p sm6250p sdx55_firmware ipq8071a_firmware sxr2130 ipq6028 qcm4490 snapdragon_636_mobile_platform qcn9100 sm7150-ab_firmware qca6174a_firmware sm7325p snapdragon_855_mobile_platform_firmware aqt1000_firmware sm6150-ac_firmware qcn5152_firmware sc8180x-ac qcn6274 snapdragon_480_5g_mobile_platform_firmware qfw7124 qca6595au_firmware sc8180x-ac_firmware sw5100p_firmware qca6696_firmware wcd9380_firmware qca6574_firmware sg4150p qcn5124 qcn5152 vision_intelligence_400_platform qca6574a_firmware sdx55 qcn9072_firmware ipq8074a immersive_home_318_platform sd675 wcd9375_firmware qca6391 snapdragon_x70_modem-rf_system ipq8173_firmware qcn9012_firmware snapdragon_8_gen_2_mobile_platform_firmware snapdragon_xr1_platform_firmware snapdragon_x50_5g_modem-rf_system_firmware fastconnect_7800 ipq8078_firmware wcn3988_firmware ipq8070_firmware qcn5154 sd_8cx wsa8835_firmware qcn5022 snapdragon_660_mobile_platform_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn3980 snapdragon_690_5g_mobile_platform_firmware qcs610 Snapdragon qcn5024_firmware qca9377_firmware snapdragon_850_mobile_compute_platform_firmware snapdragon_662_mobile_platform_firmware sa6150p_firmware sm6250p_firmware sa8145p_firmware 315_5g_iot_modem_firmware qcs2290_firmware snapdragon_x24_lte_modem_firmware sg8275p_firmware ipq8173_firmware qca6431_firmware wcd9360_firmware fsm10055_firmware qcn6224_firmware qca4024_firmware snapdragon_x20_lte_modem_firmware immersive_home_318_platform_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware sd730_firmware snapdragon_auto_4g_modem_firmware sd_455_firmware csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware qcn5152_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn3990_firmware qcn9000_firmware qca9984_firmware qualcomm_video_collaboration_vc3_platform_firmware sd_8cx_firmware wcd9371_firmware wcd9385_firmware qcn6024_firmware wcd9326_firmware immersive_home_316_platform_firmware snapdragon_660_mobile_platform_firmware qcn5124_firmware sd460_firmware sm7315_firmware qca6320_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware sdx55_firmware snapdragon_835_mobile_pc_platform_firmware qca8081_firmware qcn6023_firmware sa6155_firmware sm7250p_firmware wcd9375_firmware wcn3999_firmware wsa8845h_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware snapdragon_auto_5g_modem-rf_firmware ipq8070_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware ipq8078a_firmware smart_audio_400_platform_firmware snapdragon_x70_modem-rf_system_firmware wsa8840_firmware sa8155_firmware robotics_rb3_platform_firmware qcs8550_firmware sd662_firmware vision_intelligence_300_platform_firmware wcn3988_firmware qru1062_firmware sa6145p_firmware fastconnect_6700_firmware wsa8810_firmware wcd9395_firmware qdu1000_firmware qca6698aq_firmware qca6174a_firmware ipq8071a_firmware mdm9250_firmware qcs4290_firmware qca9888_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware snapdragon_x12_lte_modem_firmware qcn5154_firmware snapdragon_665_mobile_platform_firmware qru1052_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware sm6250_firmware qcc710_firmware qcn9100_firmware snapdragon_712_mobile_platform_firmware vision_intelligence_400_platform_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wsa8835_firmware sd660_firmware snapdragon_636_mobile_platform_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware qcn5022_firmware qcn7606_firmware sxr1120_firmware immersive_home_216_platform_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware snapdragon_750g_5g_mobile_platform_firmware qcm6125_firmware snapdragon_675_mobile_platform_firmware qcm2290_firmware qualcomm_video_collaboration_vc1_platform_firmware qca8337_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware ipq8076a_firmware qdu1010_firmware snapdragon_670_mobile_platform_firmware sd670_firmware qdu1110_firmware csr8811_firmware qcn5054_firmware snapdragon_4_gen_1_mobile_platform_firmware qca8075_firmware snapdragon_4_gen_2_mobile_platform_firmware c-v2x_9150_firmware qca6310_firmware qca8072_firmware qca6430_firmware qcn5052_firmware qcn9012_firmware qfw7114_firmware ipq8070a_firmware wcd9335_firmware qca6335_firmware ipq6018_firmware ipq8076_firmware qcm4325_firmware qca6574_firmware wcd9340_firmware sm4125_firmware sm7325p_firmware pmp8074_firmware sdx57m_firmware qru1032_firmware snapdragon_630_mobile_platform_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware qca6426_firmware qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware qcm4490_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcn6274_firmware qcs4490_firmware ar8031_firmware csrb31024_firmware qcm6490_firmware ipq8078_firmware wsa8832_firmware qcn9070_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware ipq6028_firmware ipq8072a_firmware qca9889_firmware sa8155p_firmware qdx1011_firmware qca6564a_firmware ipq8174_firmware qcn9024_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware qcn7605_firmware qdx1010_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware sd835_firmware ipq6010_firmware snapdragon_720g_mobile_platform_firmware qca6391_firmware snapdragon_710_mobile_platform_firmware immersive_home_214_platform_firmware wcd9370_firmware sm8550p_firmware sd888_firmware qcn9022_firmware qcn5021_firmware wcd9390_firmware qcn9072_firmware sw5100_firmware qcn9074_firmware qcs410_firmware qfw7124_firmware qdu1210_firmware ar8035_firmware snapdragon_xr1_platform_firmware

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.25% / 47.74%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

Possible null pointer dereference issue in location assistance data processing due to missing null check on resources before using it in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9607, MDM9650, SDM660, SDM845, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware sm8150_firmware sxr2130_firmware sdm845 sdm660 sm8250_firmware mdm9607_firmware mdm9650 sm8250 mdm9150 mdm9607 mdm9650_firmware sm8150 sxr2130 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 25.94%

||

7 Day CHG~0.00%

Published-03 Apr, 2018 | 17:00

Updated-16 Sep, 2024 | 22:15

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, untrusted pointer dereference in apr_cb_func can lead to an arbitrary code execution.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.38%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 19:00

Updated-16 Sep, 2024 | 16:27

In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list_for_each macro was not used correctly which could lead to an untrusted pointer dereference.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.37% / 57.97%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS605, QM215, Rennell, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.17%

||

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:44

Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sxr2130 qcs605_firmware mdm9206 sdm636 apq8098 mdm9206_firmware qcs605 sdm429_firmware msm8905_firmware qca6574au_firmware sda660 msm8909w apq8009 apq8053_firmware msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware qcs405 qca6574au qm215 mdm9607 apq8017_firmware mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware apq8053 apq8096au_firmware saipan_firmware sm6150_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 msm8996 saipan sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.32% / 54.17%

||

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:44

Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-kamorta_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 apq8098 mdm9206_firmware qcs605 msm8937_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 qca6574au sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sm8250 kamorta apq8017 msm8996 saipan sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.2||MEDIUM

EPSS-0.03% / 7.60%

||

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-25 Nov, 2024 | 13:28

NULL Pointer Dereference in HLOS

Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware snapdragon_8_gen_1_mobile_platform sa6150p_firmware qca8337 qfw7124 sg8275p_firmware qca6431_firmware qam8775p snapdragon_778g\+_5g_mobile_platform qamsrv1m qru1052 snapdragon_888_5g_mobile_platform snapdragon_870_5g_mobile_platform_firmware vision_intelligence_100_platform_firmware wsa8840 wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 video_collaboration_vc3_platform snapdragon_427_mobile_platform snapdragon_480_5g_mobile_platform home_hub_100_platform csra6620_firmware csra6640_firmware qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qep8111_firmware qam8295p wcn3950 qcn6024_firmware sm4125 sd_8_gen1_5g_firmware wcn3660b qsm8350_firmware snapdragon_460_mobile_platform qsm8350 qca6688aq sm7315_firmware snapdragon_429_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware snapdragon_778g\+_5g_mobile_platform_firmware qca8081_firmware sa6155_firmware wcd9375_firmware qca6420 snapdragon_xr2\+_gen_1_platform snapdragon_782g_mobile_platform_firmware snapdragon_427_mobile_platform_firmware qca6678aq_firmware smart_audio_400_platform_firmware qrb5165m_firmware wsa8840_firmware qca6698aq qcs6125 sa4155p_firmware sa8155_firmware sc8380xp_firmware snapdragon_765g_5g_mobile_platform qca6430 qru1062_firmware snapdragon_678_mobile_platform_firmware sa7775p_firmware snapdragon_8\+_gen_1_mobile_platform wcd9340 snapdragon_720g_mobile_platform sd626_firmware vision_intelligence_200_platform_firmware snapdragon_780g_5g_mobile_platform home_hub_100_platform_firmware sw5100 qca6436 sa6155p qdu1000_firmware snapdragon_765_5g_mobile_platform_firmware qca6698aq_firmware snapdragon_690_5g_mobile_platform sxr2250p wcn3660_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware wcd9341 qam8775p_firmware sa8255p pm8937_firmware qca6696_firmware qca6431 qca6797aq qru1052_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware sa8150p snapdragon_430_mobile_platform qcc710_firmware robotics_rb5_platform wsa8830_firmware sd855_firmware sd865_5g_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3988 snapdragon_780g_5g_mobile_platform_firmware snapdragon_685_4g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware qcn7606_firmware sa8295p_firmware sa8770p snapdragon_730_mobile_platform_firmware snapdragon_750g_5g_mobile_platform_firmware snapdragon_675_mobile_platform_firmware wcn3610 qca8337_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware ssg2125p sdm429w sw5100p snapdragon_w5\+_gen_1_wearable_platform qcm8550 snapdragon_670_mobile_platform_firmware sd670_firmware qca6574 qdu1110_firmware snapdragon_7c\+_gen_3_compute wcd9380 snapdragon_782g_mobile_platform snapdragon_x72_5g_modem-rf_system_firmware fastconnect_6700 snapdragon_430_mobile_platform_firmware qca9379_firmware sxr1230p video_collaboration_vc3_platform_firmware sg8275p qcn9012_firmware sd626 qca6430_firmware sm6370_firmware qfw7114_firmware wcd9335_firmware wcn3980 snapdragon_732g_mobile_platform_firmware wsa8845 qcm4325_firmware wcd9340_firmware wsa8815 wcn3910 snapdragon_865\+_5g_mobile_platform snapdragon_4_gen_1_mobile_platform qcs8250 qca6426_firmware snapdragon_435_mobile_platform sc8380xp wcn3660b_firmware wcn3680 snapdragon_670_mobile_platform snapdragon_x62_5g_modem-rf_system_firmware qcn9024 wcn3980_firmware sd730 snapdragon_xr2\+_gen_1_platform_firmware snapdragon_x50_5g_modem-rf_system_firmware sa8295p qca6421_firmware wcn6740_firmware vision_intelligence_100_platform qcs4490_firmware 215_mobile_platform qca6678aq snapdragon_x65_5g_modem-rf_system snapdragon_xr2_5g_platform wcn3680_firmware sa8650p_firmware fastconnect_6900 snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware qca6797aq_firmware qdu1010 srv1l sd670 qdx1011_firmware qcn9024_firmware sa7255p_firmware snapdragon_8\+_gen_2_mobile_platform qcm4290_firmware sa8620p wsa8832 qdx1010_firmware sw5100p_firmware sa8540p snapdragon_8cx_gen_3_compute_platform smart_display_200_platform_firmware qamsrv1m_firmware qcm5430 sa6145p snapdragon_730_mobile_platform qcc710 qcs4490 qca6595_firmware sa8145p wcd9395 qcs5430_firmware snapdragon_750g_5g_mobile_platform snapdragon_888\+_5g_mobile_platform_firmware qca6391_firmware snapdragon_710_mobile_platform_firmware sa4150p_firmware wcd9370_firmware sm8550p_firmware snapdragon_855_mobile_platform qdx1010 sd888_firmware sa8155p csra6640 snapdragon_695_5g_mobile_platform video_collaboration_vc1_platform srv1m snapdragon_860_mobile_platform ssg2115p_firmware qam8620p_firmware qfw7124_firmware wcn3660 qca9379 sa4155p qam8255p qdu1210_firmware qep8111 snapdragon_720g_mobile_platform_firmware snapdragon_480\+_5g_mobile_platform qcn7606 ar8035_firmware qcm2290 snapdragon_632_mobile_platform snapdragon_625_mobile_platform_firmware talynplus_firmware wsa8830 snapdragon_662_mobile_platform_firmware sxr2230p_firmware sa8145p_firmware qcs2290_firmware qam8650p flight_rb5_5g_platform snapdragon_865_5g_mobile_platform csra6620 flight_rb5_5g_platform_firmware qcn6224_firmware smart_display_200_platform qcs4290 snapdragon_860_mobile_platform_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware qca6420_firmware snapdragon_450_mobile_platform_firmware snapdragon_450_mobile_platform sd730_firmware wcd9370 ssg2115p snapdragon_480\+_5g_mobile_platform_firmware qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware snapdragon_8_gen_2_mobile_platform qdu1110 qamsrv1h sa8530p wcd9385_firmware wcd9326_firmware fastconnect_6200 wcn3615_firmware qamsrv1h_firmware talynplus qam8295p_firmware apq8037 qcn9011_firmware snapdragon_435_mobile_platform_firmware sa8155 snapdragon_x55_5g_modem-rf_system vision_intelligence_200_platform sa9000p_firmware wcn3680b_firmware sa7255p snapdragon_4_gen_2_mobile_platform wcn3615 snapdragon_8_gen_3_mobile_platform wsa8845h_firmware qfw7114 sm7250p_firmware snapdragon_778g_5g_mobile_platform wcn3610_firmware qca6595au snapdragon_425_mobile_platform snapdragon_429_mobile_platform qrb5165n qca6436_firmware snapdragon_680_4g_mobile_platform_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware qca6584au sa8620p_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware snapdragon_870_5g_mobile_platform pm8937 snapdragon_x72_5g_modem-rf_system sa8775p_firmware qcs6490 snapdragon_439_mobile_platform video_collaboration_vc5_platform snapdragon_625_mobile_platform qcs8550_firmware wcn3988_firmware srv1h sa6145p_firmware qca6421 sm6250 fastconnect_6700_firmware sa8195p sxr1120 apq8017_firmware snapdragon_626_mobile_platform_firmware qcn6224 wsa8810_firmware wsa8845h snapdragon_x62_5g_modem-rf_system wcd9326 snapdragon_x75_5g_modem-rf_system wcd9335 wcd9395_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware sg4150p qcs7230 qca8081 snapdragon_auto_5g_modem-rf_gen_2 qcm4490 snapdragon_888\+_5g_mobile_platform snapdragon_x35_5g_modem-rf_system sa7775p qam8620p qca6174a_firmware qcs4290_firmware sa8770p_firmware sxr2130_firmware qcs5430 wcd9385 qcs6490_firmware snapdragon_665_mobile_platform_firmware ar8035 wcd9375 aqt1000 sm6250_firmware wcd9390 snapdragon_662_mobile_platform snapdragon_685_4g_mobile_platform snapdragon_768g_5g_mobile_platform_firmware wcn3620_firmware wsa8815_firmware qcm6490 wsa8835_firmware wcn3620 video_collaboration_vc5_platform_firmware apq8017 sxr1120_firmware sxr2250p_firmware sa4150p snapdragon_8_gen_2_mobile_platform_firmware sg4150p_firmware qcm6125_firmware qca6688aq_firmware qcm4325 qcm2290_firmware snapdragon_626_mobile_platform robotics_rb5_platform_firmware qcm2150_firmware wcn3990 sd865_5g fastconnect_6800 qca6595 qru1032 qcs7230_firmware qdu1010_firmware qcn9012 sd888 sa8530p_firmware qdx1011 qdu1000 snapdragon_855 wsa8835 sxr1230p_firmware sdm429w_firmware sa8540p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware sd_8_gen1_5g qcn6274 snapdragon_678_mobile_platform snapdragon_4_gen_1_mobile_platform_firmware snapdragon_855_firmware snapdragon_4_gen_2_mobile_platform_firmware sxr2130 ssg2125p_firmware smart_audio_400_platform snapdragon_425_mobile_platform_firmware qca6574a qca6174a sm7325p qru1062 sa8650p sa9000p qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sxr2230p qru1032_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware snapdragon_439_mobile_platform_firmware qca6574a_firmware sa8775p snapdragon_665_mobile_platform snapdragon_730g_mobile_platform fastconnect_6200_firmware qrb5165m sm7315 snapdragon_x55_5g_modem-rf_system_firmware qca6391 snapdragon_8cx_gen_3_compute_platform_firmware snapdragon_710_mobile_platform fastconnect_7800 aqt1000_firmware snapdragon_865\+_5g_mobile_platform_firmware snapdragon_x35_5g_modem-rf_system_firmware snapdragon_690_5g_mobile_platform_firmware qcm4490_firmware qcn6274_firmware snapdragon_632_mobile_platform_firmware qcm4290 qcm6490_firmware wsa8832_firmware snapdragon_xr1_platform srv1h_firmware qcm2150 qcn9011 video_collaboration_vc1_platform_firmware qca6574au sa8155p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm6125 wsa8810 snapdragon_765g_5g_mobile_platform_firmware snapdragon_730g_mobile_platform_firmware sm8550p snapdragon_8_gen_1_mobile_platform_firmware snapdragon_680_4g_mobile_platform sm6370 srv1m_firmware snapdragon_ar2_gen_1_platform wcn3680b qam8650p_firmware snapdragon_675_mobile_platform wcn6740 qca6696 snapdragon_732g_mobile_platform 215_mobile_platform_firmware qcs8550 snapdragon_x50_5g_modem-rf_system sa6150p snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware snapdragon_768g_5g_mobile_platform qcn6024 qdu1210 apq8037_firmware snapdragon_765_5g_mobile_platform sm7250p snapdragon_8\+_gen_1_mobile_platform_firmware sw5100_firmware snapdragon_xr1_platform_firmware Snapdragon

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.2||MEDIUM

EPSS-0.07% / 22.91%

||

7 Day CHG~0.00%

Published-03 Jun, 2024 | 10:05

Updated-27 Jan, 2025 | 18:53

NULL Pointer Dereference in Graphics

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.12% / 32.44%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 14:54

Null pointer dereference in Bluetooth HOST

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware mdm9640_firmware msm8996au_firmware qca6595 qca6564au csrb31024 mdm9628_firmware wcd9360_firmware mdm9650 csra6620 qca6574 msm8996au mdm9250 qca6595au_firmware csra6620_firmware qca6574a mdm9206 csra6640_firmware qca6174a qca6584au_firmware sd626 qca9377 sa415m wcn3998 wcd9335_firmware wcn3980 wcd9326_firmware mdm9628 sa515m mdm9206_firmware qca6574_firmware wcn3660b wsa8815 qca6584_firmware mdm9650_firmware qca6175a wcn3660b_firmware qca6574a_firmware qca6584 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcn3980_firmware wcd9360 sdx20m qca6564au_firmware qca6584au qca9367_firmware sa515m_firmware ar8031_firmware csrb31024_firmware qca9367 sdx20 mdm9607_firmware sa415m_firmware qcs405 qca6574au qcn9074 mdm9607 qca6564a_firmware apq8017_firmware sd626_firmware sdx20m_firmware wcd9326 wcd9335 mdm9150 wcn3680b qca6174a_firmware mdm9250_firmware apq8096au qca6696_firmware ar8031 qca6595_firmware qcs405_firmware qca6696 sdx55 apq8096au_firmware csra6640 sdx20_firmware wsa8815_firmware apq8017 qcn9074_firmware qca6564a qca6175a_firmware mdm9640 Snapdragon

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.11% / 29.26%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Null pointer dereference in Modem

Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.11% / 29.26%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

NULL pointer dereference in Modem

Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-11 Aug, 2025 | 15:06

NULL Pointer Dereference in Display

Memory corruption in display driver while detaching a device.

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w_firmware qcm8550_firmware qcs410_firmware sw5100p wcn6650 qca6595 sm8735 qcs610_firmware snapdragon_8\+_gen_1 wcd9335 wcd9370 qca8081_firmware snapdragon_429_firmware qca6696 qam8620p_firmware wcn7880_firmware sa8530p wcd9341_firmware sxr2330p_firmware wcd9395_firmware wcn7881_firmware qcn6024 wcn7750 wcn6450 wcn6740_firmware fastconnect_6700 snapdragon_695_5g snapdragon_888_5g wsa8832_firmware qca8337 wcd9395 snapdragon_4_gen_2_firmware qca6574au_firmware sm6370 qam8295p wcd9341 qca6574au wcd9390 sa8620p_firmware wsa8810_firmware wsa8845h_firmware snapdragon_429 csra6640 sa9000p_firmware srv1h snapdragon_778g\+_5g_firmware sm8650q_firmware wcn3660b_firmware qcs9100 snapdragon_8\+_gen_2 qcs5430 wcn7860 qcn6024_firmware snapdragon_x65_5g qcm5430 qcm5430_firmware video_collaboration_vc1_platform_firmware snapdragon_888\+_5g_firmware sa8770p qcm6125_firmware ssg2115p sa8540p qsm8350_firmware snapdragon_4_gen_2 robotics_rb2 fastconnect_6900 snapdragon_w5\+_gen_1_wearable_firmware snapdragon_8_gen_2_firmware video_collaboration_vc1_platform sa7255p sm8635 wcd9385_firmware qam8255p_firmware snapdragon_778g_5g sdx61 qcs4490 snapdragon_662_firmware wsa8845 sa6155p qcm6125 wsa8810 video_collaboration_vc5_platform_firmware qam8650p sa9000p srv1h_firmware qca6595au sxr2250p_firmware sm7315_firmware sa6155p_firmware wsa8840 snapdragon_ar1_gen_1 srv1m_firmware qcs8550_firmware sm8750p qcn9012 qcs4490_firmware snapdragon_7c\+_gen_3_compute_firmware sm8635p qmp1000 snapdragon_680_4g wcd9370_firmware robotics_rb2_firmware snapdragon_8_gen_2 snapdragon_480\+_5g_firmware wcn3660b qca6574a sa7255p_firmware wcn3620_firmware sa8195p snapdragon_695_5g_firmware qcs8250_firmware talynplus sa8540p_firmware qcm6490 sm8550p_firmware sxr2250p qcm8550 wcn3988 sm6370_firmware qcn9274 qcn9024 sa8775p qca6574 sxr2230p_firmware qcn9011 sa8775p_firmware qamsrv1h smart_audio_400 qcn9024_firmware wsa8845h qcs410 sm8650q sa8155p_firmware sa8155p wsa8830 sm8550p snapdragon_x65_5g_firmware sm7675_firmware sa8255p_firmware snapdragon_888\+_5g ar8035 sm7635_firmware qamsrv1m_firmware wcn7750_firmware qrb5165m_firmware sa8650p_firmware wcn3620 wcn6450_firmware qcm4325 srv1l_firmware qcs9100_firmware qcs615 snapdragon_782g ssg2125p_firmware wcn3950_firmware sa7775p_firmware qca6698aq qrb5165n sm7635 sa8530p_firmware fastconnect_6200 sm7325p_firmware wcd9378 sm8635p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware snapdragon_778g_5g_firmware snapdragon_780g_5g qcs6490 qcs8250 snapdragon_778g\+_5g fastconnect_6200_firmware wsa8830_firmware qca6678aq_firmware wsa8845_firmware wsa8832 sdx61_firmware wcd9378_firmware srv1l sm7675p srv1m qca6678aq ar8035_firmware wcn7860_firmware qrb5165m snapdragon_680_4g_firmware sd888_firmware qcs6125_firmware sm4635 snapdragon_460 wsa8815_firmware sa8195p_firmware qca8337_firmware snapdragon_480_5g_firmware snapdragon_4_gen_1_firmware snapdragon_685_4g sg8275p_firmware snapdragon_x62_5g qcm6490_firmware sm4635_firmware qcm4490_firmware wcn3950 qcs6125 flight_rb5_5g sm8750 qca6797aq_firmware snapdragon_7c\+_gen_3_compute talynplus_firmware sa8295p_firmware smart_audio_400_firmware snapdragon_460_firmware sd888 wcn6755_firmware qcn9011_firmware sw5100_firmware wcn6740 wcn6650_firmware snapdragon_662 qcs7230 qca6595_firmware fastconnect_7800_firmware sm8635_firmware fastconnect_6900_firmware robotics_rb5_firmware wcd9380 qam8255p sxr2230p qmp1000_firmware wcn7880 sxr2330p wcn6755 snapdragon_888_5g_firmware snapdragon_8\+_gen_2_firmware sxr1230p wcn7881 sm6650 sw5100 video_collaboration_vc3_platform qca6688aq qam8295p_firmware snapdragon_8_gen_1_firmware sm7315 qca6698aq_firmware wcd9385 qsm8350 snapdragon_8_gen_1 sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware snapdragon_x62_5g_firmware snapdragon_8_gen_3 qcs615_firmware sg8275p snapdragon_782g_firmware sm8750_firmware flight_rb5_5g_firmware ssg2125p qcm4490 snapdragon_4_gen_1 csra6640_firmware qamsrv1m robotics_rb5 snapdragon_480\+_5g sm7325p snapdragon_685_4g_firmware wcn7861 wcn7861_firmware qam8650p_firmware video_collaboration_vc5_platform qcs6490_firmware sm6650_firmware snapdragon_480_5g qam8620p wcd9335_firmware qrb5165n_firmware wcn3980_firmware sdm429w wsa8835 wsa8840_firmware qca6391_firmware qca6595au_firmware qcs8300_firmware sw5100p_firmware qca6696_firmware qcs8300 wcd9380_firmware qca6574_firmware csra6620 qca8081 wsa8815 sg4150p sd_8_gen1_5g qam8775p snapdragon_ar2_gen_1_firmware qca6797aq qcm4325_firmware sa8620p qca6574a_firmware snapdragon_8\+_gen_1_firmware sd_8_gen1_5g_firmware snapdragon_8_gen_3_firmware sa7775p qca6391 snapdragon_ar1_gen_1_firmware wcd9375_firmware qcn9274_firmware qcn9012_firmware qcs5430_firmware sg4150p_firmware snapdragon_780g_5g_firmware sa8770p_firmware csra6620_firmware sa8295p qcs8550 sm8735_firmware fastconnect_7800 sa8650p qam8775p_firmware sm8750p_firmware wcd9375 qca6688aq_firmware snapdragon_ar2_gen_1 wcn3988_firmware qamsrv1h_firmware sm7675 wsa8835_firmware ssg2115p_firmware wcn3980 sm7675p_firmware snapdragon_w5\+_gen_1_wearable qcs610 Snapdragon

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.12% / 32.44%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 14:56

Null pointer dereference in Bluetooth HOST

Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware mdm9640_firmware msm8996au_firmware qca6595 qca6564au csrb31024 mdm9628_firmware wcd9360_firmware mdm9650 csra6620 qca6574 msm8996au mdm9250 qca6595au_firmware csra6620_firmware qca6574a mdm9206 csra6640_firmware qca6174a qca6584au_firmware qca6564a sd626 qca9377 sa415m wcn3998 wcd9335_firmware wcn3980 qam8295p wcd9326_firmware mdm9628 sa515m mdm9206_firmware qca6574_firmware wcn3660b wsa8815 qca6584_firmware qam8295p_firmware mdm9650_firmware qca6175a wcn3660b_firmware qca6574a_firmware qca6584 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcn3980_firmware wcd9360 sdx20m sa8295p qca6564au_firmware qca6584au qca9367_firmware sa515m_firmware ar8031_firmware csrb31024_firmware qca9367 sdx20 mdm9607_firmware sa415m_firmware qcs405 qca6574au qcn9074 mdm9607 qca6564a_firmware apq8017_firmware sd626_firmware sdx20m_firmware wcd9326 wcd9335 mdm9150 wcn3680b qca6174a_firmware mdm9250_firmware apq8096au qca6696_firmware ar8031 qca6595_firmware qcs405_firmware qca6696 sdx55 apq8096au_firmware csra6640 sdx20_firmware wsa8815_firmware apq8017 qcn9074_firmware sa8295p_firmware qca6175a_firmware mdm9640 Snapdragon

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 14.84%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, asynchronous callbacks received a pointer to a callers local variable. Should the caller return early (e.g., timeout), the callback will dereference an invalid pointer.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.55%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:14

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 210/SD 212/SD 205, SD 410/12, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, and SD 810, A NULL pointer dereference can occur during an SSL handshake.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.1||HIGH

EPSS-0.14% / 35.29%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:46

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, there is a TOCTOU vulnerability in the input validation for bulletin_board_read syscall. A pointer dereference is being validated without promising the pointer hasn't been changed by the HLOS program.

Vendor-Qualcomm Technologies, Inc.

Product-sd_652 sd_425_firmware sd_820a sd_625_firmware sd_450 sd_425 sd_430_firmware sd_430 sd_625 sd_820_firmware sd_820 sd_650 sd_450_firmware sd_652_firmware sd_820a_firmware sd_650_firmware Snapdragon Automobile, Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.63%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:11

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, lack of address argument validation in qsee_get_tz_app_name() may lead to an untrusted pointer dereference.

Vendor-Qualcomm Technologies, Inc.

Product-sd_400_firmware sd_400 Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.63%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 00:15

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, in a QuRT API function, an untrusted pointer dereference can occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.35% / 56.78%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 17:54

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, dereference of an invalid input parameter could cause a denial of service.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.55%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 01:26

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, and SD 835, in a GNSS API function, a NULL pointer dereference can occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.13% / 33.33%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.98%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:51

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, lack of address argument validation inqsee_fuse_write could lead to untrusted pointer dereference.

Vendor-Qualcomm Technologies, Inc.

Product-sd_652 sd_425_firmware sd_820a sd_625_firmware sd_450 mdm9625 sd_425 sd_430_firmware sd_430 sd_625 sd_820_firmware sd_820 sd_650 mdm9625_firmware sd_450_firmware sd_652_firmware sd_820a_firmware sd_650_firmware Snapdragon Automobile, Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.98%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 00:42

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, and SD 810, possible null pointer dereference occurs due to failure of memory allocation when a large value is passed for buffer allocation in the Playready App.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.63%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 22:34

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9625, MDM9635M, MDM9640, MDM9645, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in a QTEE syscall handler, an untrusted pointer dereference can occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.27% / 50.50%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:11

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9640, MDM9645, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, the device may crash while accessing an invalid pointer or expose otherwise inaccessible memory contents.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.63%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 01:42

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, and SD 835, in some TrustZone API functions, untrusted pointers can be dereferenced.

Vendor-Qualcomm Technologies, Inc.

Product-mdm9206 sd_652 sd_425_firmware sd_212_firmware sd_625_firmware sd_450 sd_425 sd_430_firmware mdm9206_firmware sd_430 mdm9650 sd_625 sd_210 sd_835_firmware mdm9650_firmware sd_212 sd_650 sd_835 sd_205 sd_450_firmware sd_210_firmware sd_652_firmware sd_205_firmware sd_650_firmware Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.63%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 00:20

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 800, and SD 810, lack of validation of pointers passed by secure apps could lead to an untrusted pointer dereference.

Vendor-Qualcomm Technologies, Inc.

Product-sd_400_firmware sd_810 sd_800_firmware sd_800 sd_400 sd_810_firmware Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.10% / 28.33%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 01:30

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in the function "Certificate_CreateWithBuffer" in the QSEE app TQS, in case of memory allocation failure, we free the memory and return the pointer without setting it to NULL.

Vendor-Qualcomm Technologies, Inc.

Product-sd_652 sd_800_firmware sd_412 sd_808_firmware sd_412_firmware sd_810 sd_650 sd_410_firmware sd_808 sd_800 sd_652_firmware sd_410 sd_617 sd_810_firmware sd_650_firmware sd_617_firmware Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.98%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:34

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, and SD 820A, untrusted pointer dereference in QSEE Syscall without proper validation can lead to access of blacklisted memory.

Vendor-Qualcomm Technologies, Inc.

Product-sd_652 sd_425_firmware sd_820a sd_625_firmware sd_450 mdm9625 sd_425 sd_430_firmware sd_430 sd_625 sd_810 sd_820_firmware sd_810_firmware sd_820 sd_650 mdm9625_firmware sd_450_firmware sd_652_firmware sd_820a_firmware sd_650_firmware Snapdragon Automobile, Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.17% / 39.17%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 20:27

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, and SD 810, while processing QSEE Syscall 'qsee_macc_gen_ecc_privkey', untrusted pointer dereference occurs, which could result in arbitrary write.

Vendor-Qualcomm Technologies, Inc.

Product-sd_615_firmware sd_810 sd_412 sd_410_firmware sd_412_firmware sd_415_firmware sd_410 sd_616 sd_810_firmware sd_616_firmware sd_615 sd_415 Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.55%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 01:05

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, and SD 810, improper input validation can cause a null pointer dereference in USB bootloader find_ep() function.

Vendor-Qualcomm Technologies, Inc.

Product-sd_810 mdm9635m_firmware mdm9615_firmware mdm9625_firmware mdm9635m mdm9615 mdm9625 sd_810_firmware Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.63%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 20:47

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in a DIAG ioctl handler, an untrusted pointer dereference can occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.55%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 04:10

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, lack of input validation in NPA driver functions leads to null pointer dereference.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.98%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 21:03

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, in a QTEE syscall handler, an untrusted pointer dereference can occur.

Vendor-Qualcomm Technologies, Inc.

Product-sd_652 sd_425_firmware sd_820a sd_625_firmware sd_450 mdm9625 sd_425 sd_430_firmware sd_430 sd_625 sd_820_firmware sd_820 sd_650 mdm9625_firmware sd_450_firmware sd_652_firmware sd_820a_firmware sd_650_firmware Snapdragon Automobile, Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.98%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:31

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 808, and SD 810, in a PlayReady function, a NULL pointer dereference can occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.63%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 01:40

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 617, SD 650/52, SD 808, SD 810, and SDX20, in a QTEE syscall handler, an untrusted pointer dereference can occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.98%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 01:15

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, lack of address argument validation in qsee_query_counter syscall could lead to untrusted pointer dereference.

Vendor-Qualcomm Technologies, Inc.

Product-sd_652 sd_425_firmware sd_820a sd_625_firmware sd_450 sd_425 sd_430_firmware sd_430 sd_625 sd_820_firmware sd_820 sd_650 sd_450_firmware sd_652_firmware sd_820a_firmware sd_650_firmware Snapdragon Automobile, Snapdragon Mobile

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.63%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:24

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, lack of input validation could lead to an untrusted pointer dereference in wv_dash_core_generic_verify().

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.19%

||

7 Day CHG~0.00%

Published-13 Jun, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.19%

||

7 Day CHG~0.00%

Published-13 Jun, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.13% / 33.33%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a timer.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.13% / 33.33%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-476

NULL Pointer Dereference