CVE-2019-2249 | ByteOS Network

Vulnerability Details :

CVE-2019-2249

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-06 Nov, 2019 | 17:11

Updated At-04 Aug, 2024 | 18:42

Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9205, MDM9650, QCA8081, QCS605, SD 427, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:06 Nov, 2019 | 17:11

Updated At:04 Aug, 2024 | 18:42

▼CVE Numbering Authority (CNA)

Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9205, MDM9650, QCA8081, QCS605, SD 427, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Versions

Affected

IPQ8074, MDM9205, MDM9650, QCA8081, QCS605, SD 427, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Problem Types

Type	CWE ID	Description
text	N/A	Improper Input Validation in Kernel

Type: text

CWE ID: N/A

Description: Improper Input Validation in Kernel

References

Hyperlink	Resource
https://source.android.com/security/bulletin/	x_refsource_CONFIRM

Hyperlink: https://source.android.com/security/bulletin/

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://source.android.com/security/bulletin/	x_refsource_CONFIRM x_transferred

Hyperlink: https://source.android.com/security/bulletin/

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:06 Nov, 2019 | 17:15

Updated At:08 Nov, 2019 | 16:05

Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9205, MDM9650, QCA8081, QCS605, SD 427, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Qualcomm Technologies, Inc.

>>ipq8074_firmware>>-

cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9205_firmware>>-

cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca8081_firmware>>-

cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs605_firmware>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_427_firmware>>-

cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_435_firmware>>-

cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_450_firmware>>-

cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_625_firmware>>-

cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_636_firmware>>-

cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_665_firmware>>-

cpe:2.3:o:qualcomm:sd_665_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_665:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_675_firmware>>-

cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_712_firmware>>-

cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_712:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_710_firmware>>-

cpe:2.3:o:qualcomm:sd_710_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_710:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_670_firmware>>-

cpe:2.3:o:qualcomm:sd_670_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_670:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_730_firmware>>-

cpe:2.3:o:qualcomm:sd_730_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_730:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_835_firmware>>-

cpe:2.3:o:qualcomm:sd_835_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_835:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_845_firmware>>-

cpe:2.3:o:qualcomm:sd_845_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_845:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_850_firmware>>-

cpe:2.3:o:qualcomm:sd_850_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_850:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_855_firmware>>-

cpe:2.3:o:qualcomm:sd_855_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_855:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sd_8cx_firmware>>-

cpe:2.3:o:qualcomm:sd_8cx_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sd_8cx:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sda660_firmware>>-

cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm630_firmware>>-

cpe:2.3:o:qualcomm:sdm630_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm630:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm660_firmware>>-

cpe:2.3:o:qualcomm:sdm660_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm660:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdx20_firmware>>-

cpe:2.3:o:qualcomm:sdx20_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdx20>>-

cpe:2.3:h:qualcomm:sdx20:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-125	Primary	nvd@nist.gov

CWE ID: CWE-125

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://source.android.com/security/bulletin/	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://source.android.com/security/bulletin/

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

1060Records found

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:26

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, while setting the offsets, time-services allows the user to set bases greater than valid base value which will lead to array index out-of-bound.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.39%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 22:20

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, SD 210/SD 212/SD 205, SD 400, and SD 800, improper access control on ATCMD service allows third party services to access without user knowledge.

Vendor-Qualcomm Technologies, Inc.

Product-sd_210 mdm9615_firmware sd_212_firmware sd_800_firmware mdm9625_firmware sd_205 sd_800 sd_210_firmware sd_400 mdm9615 mdm9625 sd_400_firmware sd_205_firmware sd_212 Snapdragon Mobile

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.16% / 37.91%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 04:23

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 435, SD 617, SD 625, and Snapdragon_High_Med_2016, binary Calibration files under data/misc/audio have 777 permissions.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-264

Not Available

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-17 Sep, 2024 | 00:52

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 835, SD 845, while processing a SetParam command packet in the VR service, the extracted name_len and value_len values are not checked and could potentially cause a buffer overflow in subsequent calls to memcpy().

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-17 Sep, 2024 | 03:07

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, a buffer overflow vulnerability may potentially exist while making an IMS call.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 16:53

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, while the DPM native process is processing framework events, the iterator pointer is deleted after processing an event. When processing subsequent events, a Use After Condition will occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.39%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 22:20

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 450, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, data access is not properly validated in the Widevine secure application.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.26% / 48.69%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 18:03

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 835, SD 845, while processing the retransmission of WPA supplicant command send failures, there is a make after break of the connection to WPA supplicant where the local pointer is not properly updated. If the WPA supplicant command transmission fails, a Use After Free condition will occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-17 Sep, 2024 | 01:50

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, a buffer overflow may potentially occur while processing a response from the SIM card.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850_firmware sd_845 sd_850 sd_845_firmware Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

||

7 Day CHG~0.00%

Published-28 Nov, 2018 | 15:00

Updated-05 Aug, 2024 | 21:20

Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 19:56

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 835, SD 845, SD 850, while processing the IMS SIP username, a buffer overflow can occur.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_835_firmware mdm9655_firmware mdm9650_firmware sd_850_firmware mdm9655 sd_835 sd_845_firmware sd_845 mdm9650 Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.4||CRITICAL

EPSS-0.10% / 28.37%

||

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 03:00

Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware mdm9640_firmware qca6595 qca6564au csrb31024 mdm9628_firmware wcd9360_firmware mdm9650 csra6620 qca6574 mdm9250 qca6595au_firmware sa6155 apq8009_firmware csra6620_firmware qca6574a csra6640_firmware qca9379_firmware qca6174a wcd9335_firmware qca9377 sa415m wcn3998 wcn3980 wcd9326_firmware mdm9628 wcn3615_firmware sa515m qca6574_firmware wcn3660b wsa8815 qca6584_firmware mdm9650_firmware qca4020 wcn3660b_firmware sa8155 qca6574a_firmware qca6584 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcn3615 wcn3998_firmware wcn3999_firmware wcn3980_firmware wcn3610_firmware wcd9360 apq8053_firmware apq8009 qca6564au_firmware sa6155p_firmware qca9367_firmware mdm9626 wcn3999 sa515m_firmware ar8031_firmware csrb31024_firmware qca9367 sdx20 sa8155_firmware mdm9607_firmware sa415m_firmware qcs405 mdm9626_firmware qca6574au sa8155p_firmware mdm9607 qca6564a_firmware sa8195p apq8017_firmware wsa8810_firmware wsa8810 qca4020_firmware wcd9326 wcd9335 sa6155p mdm9150 wcn3680b qca6174a_firmware mdm9250_firmware apq8096au qca6696_firmware ar8031 qca6595_firmware qcs405_firmware qca6696 sdx55 apq8053 apq8096au_firmware csra6640 sa8155p sdx20_firmware wsa8815_firmware sa8195p_firmware apq8017 qca6564a qca9379 wcn3610 mdm9640 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 22:14

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 800, SD 808, SD 810, SD 820, SD 835, while playing a .wma file with modified media header with non-standard bytes per second parameter value, a reachable assert occurs.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.29% / 51.79%

||

7 Day CHG~0.00%

Published-20 Sep, 2018 | 13:00

Updated-05 Aug, 2024 | 21:20

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, Snapdragon_High_Med_2016, on TZ cold boot the CNOC_QDSS RG0 locked by xBL_SEC is cleared by TZ.

Vendor-Qualcomm Technologies, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.10% / 28.57%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 16:23

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, in some corner cases, ECDSA signature verification can fail.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-347

Improper Verification of Cryptographic Signature

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 50.23%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 23:35

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, debug policy can potentially be bypassed.

Vendor-Qualcomm Technologies, Inc.

Product-mdm9206 sd_652 sd_425_firmware sd_212_firmware sd_625_firmware sd_450 sd_425 sd_430_firmware mdm9607_firmware mdm9206_firmware sd_430 sd_625 msm8909w_firmware mdm9607 sd_210 sd_212 sd_650 sd_205 sd_450_firmware sd_210_firmware sd_652_firmware msm8909w sd_205_firmware sd_650_firmware Snapdragon Mobile, Snapdragon Wear

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 16:28

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, in GERAN, a buffer overflow may potentially occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.26% / 48.69%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 17:17

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, in the omx aac component, a Use After Free condition may potentially occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 19:35

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9640, MDM9645, MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 835, while processing the IPv6 pdp address of the pdp context, a buffer overflow can occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 35.77%

||

7 Day CHG~0.00%

Published-07 Apr, 2020 | 13:52

Updated-05 Aug, 2024 | 21:28

An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos7420, Exynos8890, or MSM8996 chipsets) software. RKP allows memory corruption. The Samsung ID is SVE-2016-7897 (January 2017).

Vendor-n/a Google LLC Qualcomm Technologies, Inc.Samsung

Product-exynos_7420 android msm8996 exynos_8890 n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

||

7 Day CHG~0.00%

Published-18 Jan, 2019 | 22:00

Updated-05 Aug, 2024 | 21:13

AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9635m_firmware sd_850_firmware mdm9655 mdm9635m sd_845 mdm9655_firmware mdm9650 msm8909w_firmware sd_835_firmware mdm9650_firmware mdm9645 mdm9645_firmware sd_835 sd_845_firmware msm8909w Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-310

Not Available

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.26% / 48.69%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 19:52

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, when processing a call disconnection, there is an attempt to print the RIL token-id to the debug log. If eMBMS service is enabled while processing the call disconnect, a Use After Free condition may potentially occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 20:11

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile MDM9650, MDM9655, SD 450, SD 625, SD 650/52, SD 835, SD 845, SD 850, in the Wireless Data Service (WDS) module, a buffer overflow can occur.

Vendor-Qualcomm Technologies, Inc.

Product-sd_652 sd_850 sd_850_firmware sd_625_firmware sd_450 mdm9655 sd_845 mdm9655_firmware mdm9650 sd_625 sd_835_firmware mdm9650_firmware sd_650 sd_835 sd_450_firmware sd_845_firmware sd_652_firmware sd_650_firmware Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 18:23

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, an out of bound access for ebi channel array can potentially occur.

Vendor-Qualcomm Technologies, Inc.

Product-mdm9206 sd_210 mdm9607 mdm9650_firmware sd_212_firmware sd_212 sd_835_firmware sd_835 sd_205 sd_210_firmware sd_205_firmware mdm9206_firmware mdm9607_firmware mdm9650 Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 17:58

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, MDM8996, an out-of-bounds access can potentially occur in tz_assign().

Vendor-Qualcomm Technologies, Inc.

Product-mdm9206 mdm9607 msm8996 mdm9206_firmware mdm9607_firmware msm8996_firmware Snapdragon Automobile, Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.58% / 68.06%

||

7 Day CHG~0.00%

Published-15 Mar, 2018 | 21:00

Updated-05 Aug, 2024 | 20:59

In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808,SD 810,SD 820,SD 820Am,SD 835,SD 845,MSM8909W, improper input validation in video_fmt_mp4r_process_atom_avc1() causes a potential buffer overflow.

Vendor-n/a Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.20%

||

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 16:48

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, while verifying provisioning, a buffer overflow can occur.

Vendor-Qualcomm Technologies, Inc.

Product-sd_400_firmware sd_400 sd_800_firmware sd_800 Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.32% / 54.62%

||

7 Day CHG~0.00%

Published-07 May, 2021 | 09:10

Updated-04 Aug, 2024 | 11:28

Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qfe3100 qfe2080fc_firmware qca9377_firmware qfs2580 qpm5679_firmware mdm9640_firmware sm6250p_firmware pmd9607_firmware qfe4455fc_firmware qca8337 qfs2530 qpm8870_firmware qln1030 pm6125 qat5522_firmware mdm9645 wcn3950_firmware pm8150a sc8180x\+sdx55 qdm5670 qca6595au_firmware pm7150l qcc1110_firmware mdm8215 pm8998_firmware qpa8821 wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 wtr1605 sd720g mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qfe4320 qsw8574_firmware mdm9230_firmware smb2351_firmware mdm8215m pm8953_firmware qpa4360_firmware wcn3998_firmware qfe2520_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 pm6150a wtr4605_firmware qca9367_firmware mdm8207 pm660_firmware pm8150b sa8155_firmware qca4004_firmware qfe2101 mdm9615m qca6430 qat3522 qfe4455fc pmr735a wcd9306_firmware wtr1625 wcd9340 mdm9625_firmware sd765g sdr660 qfe1045_firmware qfe3345 msm8209_firmware sdr865 mdm9250_firmware qdm5620_firmware smb1358 smr545 qca6696_firmware qln5020 wcd9371 sd870_firmware smb1350 mdm8215_firmware pmm855au_firmware wtr3950 qfe3340 qdm5621 qtc800s qca4004 qat3514_firmware mdm9330_firmware sd660 sd712 pm640p_firmware sd660_firmware qat5516_firmware pm6150l sd450 sd8885g pm855l_firmware qtc410s wcn3991 qfe3335_firmware qpa8801 pm8150l_firmware qat5533_firmware sdx55m_firmware sdxr25g qpa8673_firmware pm6150 msm8976_firmware qca6574 sd632_firmware sd670_firmware qpa8842 sdr052_firmware pmm8996au wcd9380 sd850 qualcomm215 qln4640 qcs410 smb1380_firmware qfe4309_firmware smb1381 pm855p_firmware qfe3100_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sdx24_firmware sd439_firmware sdxr25g_firmware pmd9645 qdm2301 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware qca6584_firmware qdm2301_firmware msm8937_firmware qdm5621_firmware mdm9215_firmware sd835 wcn3980_firmware sd730 qfe3320_firmware pm660l_firmware pm6250_firmware ar6003_firmware pm8008 qtm525_firmware pme605_firmware wtr1605l_firmware pme605 sd678_firmware qpm5621_firmware qca6234 qln1021aq_firmware qcs603 rsw8577 qpa6560_firmware qpa8802_firmware qln4640_firmware qfe4308_firmware qpm5621 qpm6582 sd670 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcm4290_firmware wcn6855 pm8150l pmi8998_firmware qcs610_firmware apq8084_firmware sdr105 pm660a_firmware pm215 mdm8207_firmware sdm630_firmware wtr2965 mdm9205_firmware qca6391_firmware sd820_firmware pmx20_firmware pm8150 pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 qat3555_firmware pmi8994 qpa8803_firmware wcn3660 qca9379 pm855b qca6234_firmware qln1031 smb2351 pm8909 mdm9150_firmware qfe1040 pm660 qet6110_firmware pm6125_firmware qbt1500 qfe1040_firmware csrb31024 mdm9628_firmware qfe2340_firmware mdm9650 pmx24_firmware qbt1500_firmware pmk8001 qcs4290 pmm855au mdm9250 qca6420_firmware pmd9635_firmware apq8009_firmware pm7150a mdm9310_firmware sd675_firmware pm8350 qpa4361_firmware qca6426 wcn3990_firmware qca9377 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware wcd9326_firmware mdm9615m_firmware wcn3615_firmware whs9410 rgr7640au_firmware wtr2955 pm7250_firmware sdr845_firmware qdm5620 qln1021aq smb1380 pmk8002_firmware qsw6310_firmware sa8155 qca6584 qln1031_firmware sdx55_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware pm8940 mdm9207 qsm7250_firmware pm7150l_firmware wcd9306 qca6584au msm8208 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 qca9367 qfe2082fc_firmware sdm630 mdm9607_firmware mdm9655_firmware msm8976sg qfs2530_firmware pmx55 sa415m_firmware wcn3988_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sdr735_firmware pm8953 qat5515 qca6694 qpm5677 qat3514 wcd9326 wcd9335 pm8004_firmware sdr8150_firmware qcs4290_firmware pm439 qtc800h_firmware qpm5620 mdm9625 qca6390 wcd9375 aqt1000 msm8976 sc8180x\+sdx55_firmware sm6250_firmware qln4642 msm8917_firmware qpm5677_firmware sdx20_firmware wsa8815_firmware wtr3925_firmware pmi8937 pm8998 sdw3100 smr525_firmware qpm8820_firmware qfe4301_firmware apq8017 ar6003 qln1020_firmware mdm9630_firmware qcm6125_firmware pmx55_firmware wtr2955_firmware qbt1000_firmware qfe4373fc_firmware pm8019 qca6595 pm8150_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c sd665_firmware qpa4360 qpa4361 mdm9206 wcn6855_firmware qdm5679_firmware smr525 wfr1620_firmware qca6310_firmware qfe4305_firmware pm6150l_firmware pmr525 mdm9615 pm8150a_firmware qca6574_firmware wtr3950_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware sd765 pmx20 pmd9607 qca6574a_firmware qat3555 sd850_firmware apq8009 mdm9310 qfe2082fc sd8c_firmware wtr2965_firmware pm670_firmware csrb31024_firmware qln1036aq qtc801s pmi8940_firmware qfe3320 mdm8215m_firmware mdm9607 sd710 mdm9645_firmware pm8008_firmware qln1035bd_firmware pmr735a_firmware pmw3100 pmx50 pm8018 qfe3345_firmware sdr8250 sd768g qln1030_firmware smb1350_firmware pmw3100_firmware pm8004 pm640l msm8940 pmk8002 apq8096au_firmware sdw2500 sd845 mdm9615_firmware sd455_firmware smb1357 pmd9655au_firmware qcs410_firmware mdm9330 qpa5580 pm8018_firmware qfe2550 qcs610 pmi8996 qpm5620_firmware qfe1045 qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware pm855a_firmware qtc800h sdr8250_firmware qca6335 msm8917 qln1020 qcs605_firmware smr546_firmware wtr3905 qdm5671 pmc1000h qpm4650_firmware mdm8615m_firmware qat3518 sd8c sd632 smr526_firmware mdm9628 pm640a_firmware qpa5460 wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware mdm9630 qpm8870 wcd9375_firmware qpm5679 qbt2000 msm8909w wcd9360 pmx50_firmware qpa8675_firmware whs9410_firmware qpa5460_firmware pm8940_firmware qdm3301_firmware pm8996 qsm7250 qcs6125 qcc1110 smb1360 qualcomm215_firmware qfe3440fc qdm2308_firmware rsw8577_firmware pm439_firmware qca4020_firmware qca6436 wcn6851 qcs603_firmware qpa6560 msm8937 sdr675_firmware wcn3660_firmware wcd9341 pmi8952 mdm9655 pm8937_firmware qca6431 qet4100_firmware qfe4320_firmware wcn3910_firmware qpm5657 wtr1605_firmware mdm9207_firmware sd855_firmware qdm5650 wcn3988 wtr3925 qfe2080fc sdr052 smb1390 sdw3100_firmware msm8208_firmware qet4100 wcn3610 mdm9640 msm8608 qpa8686_firmware qpm6585 qca8337_firmware wcd9380_firmware smb1355 qln4650 qtc800t_firmware wcd9330 msm8996au_firmware wgr7640 csr6030 qet5100 qdm5671_firmware qpa8801_firmware qca6564au qtm527_firmware sd636 wcn6856_firmware pm8005_firmware msm8940_firmware qet4101_firmware pm7250b qln4642_firmware pmk8001_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware mdm9230 pm8996_firmware qet4200aq_firmware sdx50m_firmware sdr735 smb358s pm660l smb358s_firmware ar8151 smr526 wtr5975 qca6174 qca6430_firmware qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 qca6335_firmware qsw8573 qcs605 qbt1000 wcn3910 qca6320 mdm9650_firmware qca6426_firmware pm8350_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 qpa8675 sdr051_firmware wcd9330_firmware sdx55m qca6421_firmware wtr3905_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 qsw8574 sd821_firmware wcn3680_firmware pm855l wcn6851_firmware qdm5670_firmware pmd9635 sd8655g pm7150a_firmware pm8150b_firmware qfe4302 smr545_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware qca6694au_firmware msm8976sg_firmware sdr105_firmware pmd9645_firmware sd870 sd8885g_firmware pm670 sd210_firmware wtr1605l qdm5677 pm8005 pm855_firmware qdm2302 sdxr1 pm855b_firmware apq8096au qca6595_firmware qpm6582_firmware pm640l_firmware pmi8996_firmware wfr1620 qln4650_firmware qet5100m sa8155p sd675 wtr4605 sd439 qet4101 pm8952 qat3516 pm670l qpm5658 qpm5658_firmware wcn3991_firmware qdm5652_firmware qfe4465fc sd678 sdr051 qln5030 pmi632 qpa2625_firmware pm456 qfe2081fc_firmware smb1360_firmware qet5100_firmware qfe1100_firmware qpa5373 pm670l_firmware sdr660g qfe2340 sd455 sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware qca6174_firmware sd730_firmware wcd9370 pmr525_firmware qca6584au_firmware qfe3340_firmware ar8151_firmware pmi632_firmware qat5516 smb358_firmware qpa8821_firmware qfe4308 sdr660g_firmware apq8037 pm3003a qca6320_firmware wcn3680b_firmware qca6595au qca6436_firmware qtc800t qca6564au_firmware qdm2305 qca6310 qpm8820 pm8937 qpm2630 qfe2081fc qln5020_firmware sa515m_firmware apq8084 sd821 sdr675 sm6250 sd712_firmware apq8017_firmware wsa8810_firmware smb231 qfe1100 sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 mdm8615m qdm2302_firmware qat3550_firmware qln5040_firmware pm8019_firmware qpa8673 qca6694_firmware qdm2310 qfe2550_firmware msm8953_firmware qln5030_firmware qca6694au pm8952_firmware sd210 wcn3620_firmware qfe4302_firmware sd820 wcn6850_firmware wcn3620 wtr1625_firmware smb358 csr6030_firmware qca6564a pmx24 smr546 qet6110 pmi8952_firmware qln5040 qpm8895 sdr845 mdm9635m_firmware qpm5670 wcn3990 qtm527 qfe3440fc_firmware sdx24 pmi8994_firmware qdm2307_firmware msm8909w_firmware msm8996au qfe1035 qpm5657_firmware pmi8940 sm6250p rgr7640au qln1035bd pm855a sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware mdm9635m pm8956_firmware qet5100m_firmware qpm4650 mdm9205 qtm525 sa515m wtr6955 qfe3335 sd855 sd8cx qfe4305 wtr6955_firmware pm640p sd768g_firmware sdr865_firmware msm8209 qfe4465fc_firmware pm8250_firmware smb1351 qca6391 sd8cx_firmware sdxr1_firmware smb1357_firmware aqt1000_firmware pm215_firmware msm8920 qpm8895_firmware pm660a qpa4340 qfe1035_firmware qcm4290 sdx50m pm640a sdr8150 sdx20 pm8916 pmd9655au msm8920_firmware mdm9215 pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 sd8655g_firmware wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware smb231_firmware qdm2308 wtr4905_firmware qat3550 mdm9150 wcn6856 qdm5679 wcn3680b sd835_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware msm8608_firmware qpa2625 apq8037_firmware sm7250p sd720g_firmware pm8956 sd636_firmware pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

||

7 Day CHG~0.00%

Published-18 Jan, 2019 | 22:00

Updated-05 Aug, 2024 | 05:47

Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660, SDX20, SXR1130

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-19

Not Available

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.06%

||

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:44

Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MSM8909W, MSM8917, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sxr2130 qcs605_firmware sdm636 apq8098 qcs605 sdm429_firmware qca6574au_firmware sda660 apq8009 msm8909w apq8053_firmware msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 sm8250_firmware qcs405 qca6574au qm215 apq8017_firmware msm8996_firmware sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware apq8053 apq8096au_firmware saipan_firmware sm6150_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 msm8996 saipan sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-2.38% / 84.36%

||

7 Day CHG~0.00%

Published-16 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation.

Vendor-Apple Inc.Qualcomm Technologies, Inc.

Product-iphone_os Telephony

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.14% / 35.37%

||

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Video

Memory corruption while parsing qcp clip with invalid chunk data size.

Vendor-Qualcomm Technologies, Inc.

Product-sw5100p qcs410_firmware sa6150p_firmware sd865_5g sxr1120 qca6595 qcs610_firmware wcd9335 wcd9370 snapdragon_670_mobile qca6696 wcd9340_firmware wcd9341_firmware snapdragon_8\+_gen_1_mobile wcn6740_firmware fastconnect_6700 wcn3610 snapdragon_780g_5g_mobile snapdragon_685_4g_mobile sa4150p snapdragon_782g_mobile_firmware snapdragon_wear_4100\+_firmware wsa8832_firmware snapdragon_665_mobile_firmware qca6574au_firmware snapdragon_690_5g_mobile_firmware qcn7606_firmware qam8295p wcd9341 qca6574au snapdragon_888\+_5g_mobile_firmware wsa8810_firmware sd730_firmware snapdragon_778g_5g_mobile_firmware sa9000p_firmware srv1h wcn3660b_firmware sd730 snapdragon_690_5g_mobile fastconnect_6800_firmware sd835_firmware video_collaboration_vc1_platform_firmware sa4155p sa8770p snapdragon_678_mobile_firmware ssg2115p snapdragon_xr2_5g_firmware snapdragon_xr1_firmware sxr1120_firmware snapdragon_wear_4100\+fastconnect_6900 snapdragon_w5\+_gen_1_wearable_firmware video_collaboration_vc1_platform snapdragon_730_mobile_firmware wcd9385_firmware qca6310 qam8255p_firmware qcs4490 snapdragon_730_mobile snapdragon_680_4g_mobile sa6155p wsa8810 qam8650p snapdragon_835_mobile sa9000p srv1h_firmware snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile sm7315_firmware snapdragon_662_mobile_firmware sa6155p_firmware snapdragon_685_4g_mobile_firmware snapdragon_845_mobile_firmware wcd9326_firmware srv1m_firmware snapdragon_730g_mobile snapdragon_782g_mobile sd835 snapdragon_x55_5g_modem-rf snapdragon_4_gen_2_mobile_firmware snapdragon_695_5g_mobile_firmware qcs4490_firmware snapdragon_x55_5g_modem-rf_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3910_firmware snapdragon_460_mobile qca6420 wcn3910 wcd9370_firmware snapdragon_835_mobile_firmware wcn3660b qca6574a sa8195p wcd9340 qcm2290 qcm6490 wcn3988 snapdragon_765_5g_mobile_firmware snapdragon_662_mobile sa8775p qca6574 sxr2230p_firmware snapdragon_855_mobile_firmware qca6430_firmware sa8775p_firmware qamsrv1h sa6150p wcd9326 qcs410 qcm2290_firmware sa8155p_firmware sa8155p snapdragon_765g_5g_mobile_firmware wsa8830 sa6145p snapdragon_768g_5g_mobile_firmware sa8255p_firmware qamsrv1m_firmware snapdragon_4_gen_2_mobile sa8650p_firmware snapdragon_865\+_5g_mobile_firmware qca6698aq ssg2125p_firmware sm6250 wcn3950_firmware snapdragon_480\+_5g_mobile fastconnect_6200 sd670 wcn3680b sa8145p_firmware sm7325p_firmware snapdragon_480_5g_mobile_firmware snapdragon_660_mobile_firmware sa8150p_firmware fastconnect_6700_firmware snapdragon_710_mobile_firmware video_collaboration_vc3_platform_firmware wcn3990 sd670_firmware qcs6490 snapdragon_695_5g_mobile snapdragon_855_mobile snapdragon_778g_5g_mobile fastconnect_6200_firmware wsa8830_firmware snapdragon_460_mobile_firmware qca6678aq_firmware sd660_firmware wsa8832 snapdragon_480_5g_mobile srv1m qca6678aq snapdragon_860_mobile_firmware snapdragon_778g\+_5g_mobile qca6320 sa4150p_firmware sd888_firmware wsa8815_firmware sa8195p_firmware qcm4290 snapdragon_xr2\+_gen_1 qcm6490_firmware snapdragon_665_mobile sm7250p_firmware qcm4490_firmware wcn3950 snapdragon_870_5g_mobile_firmware snapdragon_730g_mobile_firmware snapdragon_7c\+_gen_3_compute snapdragon_732g_mobile snapdragon_778g\+_5g_mobile_firmware sa8295p_firmware snapdragon_870_5g_mobile snapdragon_678_mobile sa4155p_firmware snapdragon_720g_mobile sm6250_firmware sm7250p qca6320_firmware sd888 snapdragon_675_mobile_firmware sw5100_firmware wcn6740 snapdragon_768g_5g_mobile snapdragon_780g_5g_mobile_firmware qca6310_firmware snapdragon_845_mobile fastconnect_6800 qca6595_firmware fastconnect_7800_firmware snapdragon_675_mobile snapdragon_865_5g_mobile_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p snapdragon_xr2_5g sa8150p sxr1230p sw5100 video_collaboration_vc3_platform aqt1000 snapdragon_4_gen_1_mobile_firmware qam8295p_firmware sd855 wcn3990_firmware sm7315 snapdragon_660_mobile qca6698aq_firmware qcs2290 snapdragon_888\+_5g_mobile qcn7606 wcd9385 qcs2290_firmware snapdragon_8_gen_1_mobile snapdragon_xr2\+_gen_1_firmware snapdragon_680_4g_mobile_firmware wcn3610_firmware sa8255p qcs4290 sxr1230p_firmware snapdragon_865\+_5g_mobile qca6430 snapdragon_855\+_mobile snapdragon_765_5g_mobile snapdragon_860_mobile ssg2125p qcm4490 snapdragon_480\+_5g_mobile_firmware qamsrv1m sm7325p snapdragon_732g_mobile_firmware qam8650p_firmware snapdragon_670_mobile_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sd855_firmware wcd9335_firmware wcn3980_firmware wsa8835 qca6595au_firmware qca6391_firmware qcs610 sw5100p_firmware qca6696_firmware qcs4290_firmware wcd9380_firmware qca6574_firmware wsa8815 sd660 sd_8_gen1_5g qam8775p qca6574a_firmware snapdragon_4_gen_1_mobile qcm4290_firmware snapdragon_720g_mobile_firmware snapdragon_865_5g_mobile snapdragon_855\+_mobile_firmware sd_8_gen1_5g_firmware wcd9375_firmware qca6391 snapdragon_710_mobile sa8770p_firmware sa8295p fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware snapdragon_xr1 wcd9375 snapdragon_765g_5g_mobile wcn3988_firmware qamsrv1h_firmware sa8145p snapdragon_8\+_gen_1_mobile_firmware wsa8835_firmware ssg2115p_firmware wcn3980 wcn3680b_firmware snapdragon_w5\+_gen_1_wearable snapdragon_8_gen_1_mobile_firmware Snapdragon qca6574a_firmware snapdragon_4_gen_1_mobile_platform_firmware wcn3980_firmware snapdragon_720g_mobile_platform_firmware qualcomm_video_collaboration_vc1_platform_firmware snapdragon_xr2_5g_platform_firmware wsa8832_firmware qcs4490_firmware wcn3660b_firmware qca6696_firmware sa8150p_firmware sa8775p_firmware sd888_firmware srv1h_firmware sd855_firmware sd670_firmware snapdragon_780g_5g_mobile_platform_firmware wsa8835_firmware snapdragon_xr1_platform_firmware sa8255p_firmware sm7325p_firmware wcn3988_firmware fastconnect_6700_firmware qca6595au_firmware snapdragon_660_mobile_platform_firmware snapdragon_855_mobile_platform_firmware qcm6490_firmware aqt1000_firmware qamsrv1h_firmware qcs6490_firmware sa8155p_firmware fastconnect_6200_firmware sa4155p_firmware sa6145p_firmware snapdragon_835_mobile_pc_platform_firmware sa8295p_firmware sm6250_firmware qca6420_firmware snapdragon_845_mobile_platform_firmware sa4150p_firmware snapdragon_888_5g_mobile_platform_firmware sa6150p_firmware sxr1230p_firmware sm7250p_firmware qca6391_firmware snapdragon_675_mobile_platform_firmware sm7315_firmware qca6698aq_firmware snapdragon_680_4g_mobile_platform_firmware fastconnect_6900_firmware sa8770p_firmware sd835_firmware wcd9385_firmware wcd9370_firmware wcd9380_firmware qam8775p_firmware snapdragon_8_gen_1_mobile_platform_firmware wsa8810_firmware snapdragon_710_mobile_platform_firmware wcn3610_firmware fastconnect_7800_firmware sxr1120_firmware sw5100p_firmware wcd9341_firmware sd730_firmware snapdragon_865_5g_mobile_platform_firmware wsa8830_firmware sxr2230p_firmware ssg2125p_firmware qam8295p_firmware ssg2115p_firmware qca6320_firmware qca6574_firmware wcd9335_firmware qamsrv1m_firmware qca6595_firmware sa8145p_firmware wcd9326_firmware qam8650p_firmware qcm4490_firmware qcm2290_firmware qualcomm_video_collaboration_vc3_platform_firmware wcn3950_firmware snapdragon_480_5g_mobile_platform_firmware snapdragon_670_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_778g_5g_mobile_platform_firmware snapdragon_662_mobile_platform_firmware qcs4290_firmware snapdragon_x55_5g_modem-rf_system_firmware srv1m_firmware qcs610_firmware wsa8815_firmware qcs2290_firmware snapdragon_460_mobile_platform_firmware wcn3990_firmware sa8195p_firmware wcn3680b_firmware wcn3910_firmware qcn7606_firmware snapdragon_690_5g_mobile_platform_firmware sw5100_firmware sa9000p_firmware wcd9340_firmware snapdragon_695_5g_mobile_platform_firmware qca6430_firmware sd865_5g_firmware fastconnect_6800_firmware snapdragon_665_mobile_platform_firmware sd660_firmware qca6574au_firmware qcs410_firmware qam8255p_firmware sa6155p_firmware qca6310_firmware qcm4290_firmware sa8650p_firmware qca6678aq_firmware wcn6740_firmware sd_8_gen1_5g_firmware wcd9375_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.33%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a count value that is read from a file is not properly validated.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 32.38%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the GPS location wireless interface, a Use After Free condition can occur.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.33%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly validated.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.74% / 72.06%

||

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-16 Sep, 2024 | 17:27

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated.

Vendor-Qualcomm Technologies, Inc.

Product-mdm9206 sd_625 sd_652 sd_835_firmware sd_625_firmware sd_650 sd_835 sd_845_firmware sd_652_firmware sd_845 mdm9206_firmware sd_650_firmware Snapdragon IoT, Snapdragon Mobile

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.33%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, handles in the global client structure can become stale.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.96% / 82.75%

||

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-17 Sep, 2024 | 02:48

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820, SD 835, it is possible for the XBL loader to skip the authentication of device config.

Vendor-Qualcomm Technologies, Inc.

Product-mdm9206 sd_652 sd_425_firmware sd_212_firmware sd_625_firmware apq8096au msm8996au_firmware sd_425 sd_430_firmware mdm9206_firmware sd_430 mdm9650 sd_625 apq8096au_firmware sd_210 sd_820_firmware msm8996au sd_820 sd_650 sd_835_firmware mdm9650_firmware sd_212 sd_835 sd_205 sd_210_firmware sd_652_firmware sd_205_firmware sd_650_firmware Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile

CWE ID-CWE-287

Improper Authentication

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.33%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the SafeSwitch test application does not properly validate the number of blocks to verify.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.34%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 16:43

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, an access control vulnerability exists in Core.

Vendor-Qualcomm Technologies, Inc.

Product-mdm9206 sd_652 sd_425_firmware sd_212_firmware sd_625_firmware sd_450 sd_425 sd_430_firmware mdm9607_firmware mdm9206_firmware sd_430 sd_625 msm8909w_firmware mdm9607 sd_210 sd_212 sd_650 sd_205 sd_450_firmware sd_210_firmware sd_652_firmware msm8909w sd_205_firmware sd_650_firmware Snapdragon Mobile, Snapdragon Wear

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.11% / 29.60%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Video

Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.

Vendor-Qualcomm Technologies, Inc.

Product-sw5100p qcs410_firmware sa6150p_firmware sd865_5g qca6595 qcs610_firmware wcd9335 wcd9370 qca6696 wcd9340_firmware wcd9341_firmware snapdragon_730_mobile_platform wcn6740_firmware fastconnect_6700 wcn3610 snapdragon_768g_5g_mobile_platform_firmware sa4150p wsa8832_firmware snapdragon_460_mobile_platform qca6574au_firmware qcn7606_firmware qam8295p wcd9341 qca6574au wsa8810_firmware sd730_firmware sa9000p_firmware srv1h snapdragon_835_mobile_pc_platform_firmware wcn3660b_firmware sd730 snapdragon_730g_mobile_platform_firmware fastconnect_6800_firmware sd835_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_695_5g_mobile_platform snapdragon_4_gen_1_mobile_platform_firmware video_collaboration_vc1_platform_firmware sa4155p snapdragon_778g\+_5g_mobile_platform sa8770p ssg2115p snapdragon_480\+_5g_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware fastconnect_6900 snapdragon_765g_5g_mobile_platform video_collaboration_vc1_platform wcd9385_firmware snapdragon_x55_5g_modem-rf_system qca6310 qam8255p_firmware snapdragon_888_5g_mobile_platform_firmware qcs4490 snapdragon_8_gen_1_mobile_platform_firmware snapdragon_685_4g_mobile_platform sa6155p snapdragon_768g_5g_mobile_platform wsa8810 qam8650p sa9000p srv1h_firmware qca6595au sm7315_firmware sa6155p_firmware srv1m_firmware sd835 snapdragon_870_5g_mobile_platform_firmware snapdragon_wear_4100\+_platform_firmware snapdragon_8\+_gen_1_mobile_platform qcs4490_firmware wcn3910_firmware snapdragon_7c\+_gen_3_compute_firmware snapdragon_855\+\/860_mobile_platform_firmware qca6420 wcn3910 wcd9370_firmware snapdragon_845_mobile_platform snapdragon_x55_5g_modem-rf_system_firmware snapdragon_660_mobile_platform wcn3660b qca6574a sa8195p wcd9340 qcm2290 qcm6490 wcn3988 sa8775p qca6574 snapdragon_460_mobile_platform_firmware sxr2230p_firmware qca6430_firmware snapdragon_870_5g_mobile_platform sa8775p_firmware qamsrv1h sa6150p qcs410 qcm2290_firmware sa8155p_firmware sa8155p snapdragon_675_mobile_platform wsa8830 snapdragon_662_mobile_platform sa6145p snapdragon_8\+_gen_1_mobile_platform_firmware snapdragon_765_5g_mobile_platform sa8255p_firmware snapdragon_665_mobile_platform qamsrv1m_firmware sa8650p_firmware snapdragon_678_mobile_platform_firmware qca6698aq ssg2125p_firmware sm6250 wcn3950_firmware snapdragon_8_gen_1_mobile_platform fastconnect_6200 wcn3680b sa8145p_firmware sm7325p_firmware snapdragon_730g_mobile_platform snapdragon_888\+_5g_mobile_platform sa8150p_firmware snapdragon_855\+\/860_mobile_platform snapdragon_w5\+_gen_1_wearable_platform fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 snapdragon_680_4g_mobile_platform_firmware qcs6490 fastconnect_6200_firmware wsa8830_firmware sd660_firmware wsa8832 srv1m snapdragon_675_mobile_platform_firmware snapdragon_730_mobile_platform_firmware snapdragon_888_5g_mobile_platform snapdragon_w5\+_gen_1_wearable_platform_firmware qca6320 sa4150p_firmware sd888_firmware snapdragon_662_mobile_platform_firmware wsa8815_firmware sa8195p_firmware qcm4290 snapdragon_680_4g_mobile_platform qcm6490_firmware sm7250p_firmware qcm4490_firmware snapdragon_855_mobile_platform wcn3950 snapdragon_xr2_5g_platform snapdragon_7c\+_gen_3_compute snapdragon_765g_5g_mobile_platform_firmware snapdragon_xr2\+_gen_1_platform_firmware snapdragon_780g_5g_mobile_platform sa8295p_firmware sa4155p_firmware snapdragon_720g_mobile_platform sm6250_firmware sm7250p snapdragon_780g_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qca6320_firmware sd888 snapdragon_4_gen_2_mobile_platform sw5100_firmware snapdragon_765_5g_mobile_platform_firmware wcn6740 qca6310_firmware fastconnect_6800 qca6595_firmware snapdragon_685_4g_mobile_platform_firmware fastconnect_7800_firmware snapdragon_782g_mobile_platform_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p snapdragon_732g_mobile_platform_firmware snapdragon_xr2_5g_platform_firmware snapdragon_4_gen_1_mobile_platform sa8150p snapdragon_778g_5g_mobile_platform snapdragon_665_mobile_platform_firmware snapdragon_835_mobile_pc_platform sxr1230p snapdragon_865\+_5g_mobile_platform sw5100 video_collaboration_vc3_platform aqt1000 snapdragon_865_5g_mobile_platform_firmware qam8295p_firmware sd855 wcn3990_firmware sm7315 qca6698aq_firmware qcs2290 wcd9385 qcn7606 qcs2290_firmware wcn3610_firmware snapdragon_678_mobile_platform sa8255p snapdragon_720g_mobile_platform_firmware qcs4290 sxr1230p_firmware snapdragon_778g\+_5g_mobile_platform_firmware snapdragon_865\+_5g_mobile_platform_firmware snapdragon_690_5g_mobile_platform qca6430 ssg2125p qcm4490 qamsrv1m snapdragon_xr2\+_gen_1_platform sm7325p qam8650p_firmware snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sd855_firmware wcd9335_firmware wcn3980_firmware snapdragon_480_5g_mobile_platform_firmware wsa8835 qca6595au_firmware qca6391_firmware sw5100p_firmware snapdragon_732g_mobile_platform snapdragon_782g_mobile_platform qca6696_firmware qcs4290_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware qca6574_firmware wsa8815 sd660 sd_8_gen1_5g qam8775p qca6574a_firmware qcm4290_firmware snapdragon_480\+_5g_mobile_platform sd_8_gen1_5g_firmware wcd9375_firmware qca6391 snapdragon_778g_5g_mobile_platform_firmware snapdragon_480_5g_mobile_platform sa8770p_firmware sa8295p fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware wcd9375 wcn3988_firmware qamsrv1h_firmware sa8145p snapdragon_wear_4100\+_platform snapdragon_888\+_5g_mobile_platform_firmware wsa8835_firmware ssg2115p_firmware snapdragon_660_mobile_platform_firmware wcn3980 snapdragon_690_5g_mobile_platform_firmware wcn3680b_firmware qcs610 Snapdragon qcm2290_firmware qam8255p_firmware qualcomm_video_collaboration_vc1_platform_firmware snapdragon_662_mobile_platform_firmware wcd9380_firmware sa6150p_firmware snapdragon_778g_5g_mobile_platform_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware sxr1230p_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware sd730_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn3990_firmware qca6310_firmware qca6430_firmware wcd9335_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qamsrv1h_firmware qca6574_firmware sd_8_gen1_5g_firmware wcd9340_firmware sm7325p_firmware snapdragon_660_mobile_platform_firmware qam8295p_firmware snapdragon_xr2_5g_platform_firmware wcn3660b_firmware sa9000p_firmware qca6320_firmware sm7315_firmware qca6574au_firmware snapdragon_695_5g_mobile_platform_firmware snapdragon_835_mobile_pc_platform_firmware wcn3680b_firmware wcd9375_firmware qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware sm7250p_firmware snapdragon_x55_5g_modem-rf_system_firmware wcn3610_firmware snapdragon_680_4g_mobile_platform_firmware aqt1000_firmware wcn6740_firmware sa6155p_firmware qcm4490_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcs4490_firmware sa8775p_firmware qcm6490_firmware sa8650p_firmware sa4155p_firmware wsa8832_firmware fastconnect_6900_firmware srv1h_firmware qcn7606_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware fastconnect_6700_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware sa8255p_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware sd835_firmware qcs4290_firmware sa8770p_firmware qam8650p_firmware qam8775p_firmware qca6696_firmware qcs6490_firmware qca6595_firmware qca6391_firmware snapdragon_665_mobile_platform_firmware sa4150p_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware wcd9370_firmware sm6250_firmware sd888_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware snapdragon_780g_5g_mobile_platform_firmware sd660_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware ssg2115p_firmware sw5100_firmware fastconnect_6800_firmware qcs410_firmware sa8295p_firmware snapdragon_720g_mobile_platform_firmware snapdragon_675_mobile_platform_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.38% / 58.68%

||

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-09 Jan, 2025 | 16:13

Use of Out-of-range Pointer Offset in WLAN HOST

Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8830 qcn6422 wcd9395 ipq8078 sm8550p_firmware qcn9022 wsa8832_firmware qca8084_firmware qcn9013 qca6678aq_firmware wcd9390_firmware qcc710 qcn6224 qamsrv1m_firmware qca4024 ipq6028 srv1m_firmware ipq8074a_firmware qca6698aq ipq5312 qam8650p qfw7124 wcd9340_firmware qcn6132 qcn9274_firmware immersive_home_316 qcn5164_firmware qcn5052 qca6564au_firmware qcn9012 ar8035_firmware immersive_home_326 sa8155p qcn9072 sa8255p_firmware qca6595 qcs8550_firmware qcn9100 sa8195p sa9000p_firmware ssg2125p_firmware ipq8076a sa8255p qcc2073 ipq8070a_firmware snapdragon_x65_5g_modem-rf_firmware wcd9380 qcn9072_firmware qcn6432_firmware csr8811_firmware ipq6018_firmware ar8035 qam8775p_firmware qca6797aq qcn6422_firmware qca8085_firmware immersive_home_326_firmware snapdragon_ar2_gen_1_firmware sa8650p qca6584au srv1m qcs8550 qca9889_firmware qca8337 srv1h_firmware qca9889 qca8386 qcn5024 qcn6402_firmware sa6155p qcn5024_firmware csr8811 ipq8078a qca6574a qca6574 qcn9100_firmware qcn5052_firmware fastconnect_7800 immersive_home_214_firmware wcd9340 sxr1230p ipq6018 qca6574au_firmware qcn9012_firmware ipq8078a_firmware sa9000p qca8075 sxr2230p_firmware wsa8832 fastconnect_6900 ipq5028_firmware ipq8072a_firmware qcn9024 fastconnect_6900_firmware qcc710_firmware ipq8174_firmware qcn9274 qca6584au_firmware qcn9074_firmware fastconnect_7800_firmware ipq5312_firmware wcd9390 qcn5122 qcn6023_firmware qfw7124_firmware qcc2076 wcd9385_firmware qca8337_firmware sa7255p_firmware qcn9074 qamsrv1h_firmware ipq8076a_firmware wsa8845h_firmware sdx65m_firmware qcn6024_firmware sxr1230p_firmware qcn6122_firmware immersive_home_216 ipq9570 snapdragon_ar2_gen_1 ipq8072a qam8255p qcn6122 sm8550p ipq5302_firmware snapdragon_8\+_gen_2_mobile_firmware snapdragon_8\+_gen_2_mobile immersive_home_214 ipq6010_firmware qcn9022_firmware wsa8830_firmware ipq8173 ipq9574 qcn5152 ipq5332_firmware sdx55 snapdragon_x75_5g_modem-rf snapdragon_x65_5g_modem-rf qcn5124_firmware ipq8074a qcf8000_firmware qam8775p ipq6000_firmware ipq5302 qcn5154 qca4024_firmware qca8084 qcn5122_firmware sa8155p_firmware sa8195p_firmware qca6696 ipq5332 sxr2230p wsa8835 ipq8078_firmware qcc2073_firmware ipq9574_firmware snapdragon_8_gen_2_mobile_firmware sa6155p_firmware ipq6028_firmware qca6595au_firmware qcn5164 ipq9008_firmware ipq6000 ipq8076 qcn9024_firmware qcn6224_firmware qfw7114 sa7255p qca9888_firmware qcf8001 sa8775p_firmware qcn6112_firmware ipq5010_firmware qcn6274 qcn5152_firmware qca9888 qcn5154_firmware qcn6274_firmware qca0000_firmware srv1h sa8775p ipq8071a_firmware qca0000 ssg2115p_firmware qcn9000 immersive_home_3210_firmware ssg2125p wcd9385 immersive_home_316_firmware ipq8174 qca6554a_firmware qfw7114_firmware ipq6010 immersive_home_216_firmware qca6574au qcn5022_firmware qcn6432 qca6574_firmware qca6698aq_firmware wsa8840 sdx65m ipq8071a qcf8001_firmware qcn5124 wsa8840_firmware qcc2076_firmware sdx55_firmware ssg2115p ipq5010 qcn6132_firmware qam8650p_firmware qca6554a snapdragon_x75_5g_modem-rf_firmware qcf8000 qca8075_firmware qca6595au ipq5028 wcd9380_firmware sa8770p_firmware wsa8835_firmware ipq8070a snapdragon_8_gen_2_mobile qca8082_firmware sa8770p qcn6402 qcn9070 wcd9395_firmware ipq9570_firmware qcn6023 qca8081 qcn6412 ipq8173_firmware qam8255p_firmware qca8386_firmware qcn5022 qcn6112 sa8650p_firmware qca6595_firmware immersive_home_3210 qca6564au qca6696_firmware qca8081_firmware wsa8845_firmware immersive_home_318 wsa8845h qcn9000_firmware wsa8845 qca6574a_firmware qca6678aq qamsrv1m qcn9013_firmware ipq9008 qcn6024 qca8082 qca8085 qcn6412_firmware qca6797aq_firmware qcn9070_firmware qamsrv1h immersive_home_318_firmware ipq8076_firmware Snapdragon qcn6412_firmware qca6574a_firmware wsa8832_firmware qcn5124_firmware qcn9024_firmware qcn9070_firmware srv1h_firmware qcn6422_firmware wsa8835_firmware csr8811_firmware sa8255p_firmware ipq8076a_firmware qcn9022_firmware ipq8076_firmware ipq8074a_firmware sa8155p_firmware qcn6224_firmware qca8386_firmware qcn5164_firmware qcn5052_firmware immersive_home_3210_platform_firmware qca6698aq_firmware qca8081_firmware qcn6402_firmware sa8770p_firmware wcd9385_firmware fastconnect_7800_firmware wsa8845h_firmware ipq8078_firmware ssg2125p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcn6024_firmware qamsrv1m_firmware ipq8070a_firmware qca6595_firmware ipq5302_firmware qca0000_firmware qcn5152_firmware qam8650p_firmware qcn6274_firmware sa7255p_firmware qcn6432_firmware srv1m_firmware immersive_home_316_platform_firmware snapdragon_8_gen_2_mobile_platform_firmware qcn5024_firmware sa8195p_firmware qcc2073_firmware qca9889_firmware ipq8173_firmware qcn9012_firmware ipq6018_firmware qcn9100_firmware sa9000p_firmware wcd9340_firmware ar8035_firmware qca8084_firmware qcn5022_firmware snapdragon_x75_5g_modem-rf_system_firmware wsa8845_firmware qcf8001_firmware qcc710_firmware qca8075_firmware qca6574au_firmware qcf8000_firmware sa6155p_firmware qcn9274_firmware ipq8071a_firmware qcn9074_firmware qca6678aq_firmware qcn5122_firmware qcs8550_firmware ipq5312_firmware sdx65m_firmware qca6564au_firmware qca4024_firmware qcn9000_firmware qca6696_firmware immersive_home_326_platform_firmware qcn6122_firmware sa8775p_firmware immersive_home_318_platform_firmware qcn9013_firmware qca8337_firmware ipq6000_firmware qcn5154_firmware qca6595au_firmware wcd9390_firmware qamsrv1h_firmware sm8550p_firmware qca6554a_firmware snapdragon_ar2_gen_1_platform_firmware ipq9570_firmware ipq8078a_firmware wcd9395_firmware sxr1230p_firmware qcn9072_firmware qfw7124_firmware qcc2076_firmware ipq8174_firmware ipq6010_firmware fastconnect_6900_firmware wsa8840_firmware qca9888_firmware wcd9380_firmware qca6584au_firmware qam8775p_firmware immersive_home_216_platform_firmware ipq9008_firmware qfw7114_firmware wsa8830_firmware qca8085_firmware sxr2230p_firmware ssg2115p_firmware qca6574_firmware qcn6112_firmware qcn6023_firmware ipq5028_firmware ipq6028_firmware ipq8072a_firmware ipq9574_firmware qca6797aq_firmware ipq5010_firmware sdx55_firmware qca8082_firmware ipq5332_firmware immersive_home_214_platform_firmware qam8255p_firmware sa8650p_firmware qcn6132_firmware

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.33%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly validated.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.30% / 52.50%

||

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-11 Aug, 2025 | 15:06

Use After Free in WLAN Host Communication

Memory corruption while processing MBSSID beacon containing several subelement IE.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware immersive_home_214 sa6150p_firmware sw5100p ipq9574 qcn9000_firmware qca6595 qcn9022 ipq6028_firmware qca8081_firmware qca6696 wcd9340_firmware ipq5028_firmware wcd9395_firmware qcn6024 qcc2073_firmware qcc710_firmware ipq8076 ipq6018_firmware qcn6422_firmware qcn6023 qcn5124_firmware wsa8832_firmware qca8337 wcd9395 ipq6000 ipq8078a qca6574au_firmware ipq8078a_firmware qam8295p ipq5312 qca6574au wcd9390 wsa8845h_firmware sa9000p_firmware srv1h qcn9100_firmware qcn5122 qca6554a qcn6024_firmware sa8770p qcn9000 ssg2115p qcc710 qcn6132_firmware fastconnect_6900 qcn6402 qcn6432 immersive_home_326_firmware ipq5332_firmware qcn5052 qfw7114 wcd9385_firmware ipq9574_firmware qam8255p_firmware ipq8074a_firmware ipq8076a qcn5164 snapdragon_x65_5g_modem-rf wsa8845 sa6155p qca6564au_firmware csr8811_firmware qca8075 qam8650p video_collaboration_vc5_platform_firmware qca8085 sa9000p srv1h_firmware qca6595au sa6155p_firmware wsa8840 srv1m_firmware snapdragon_8_gen_2_mobile_firmware qfw7124_firmware qcn9012 ipq8070a_firmware qcn9070 qcf8001 qca8084 snapdragon_8_gen_2_mobile sdx65m qcc2076 ipq9570 qca6574a snapdragon_8\+_gen_2_mobile sa8195p wcd9340 qcs8250_firmware snapdragon_auto_5g_modem-rf_gen_2 ipq5302 qcn6122_firmware qcn5154_firmware sm8550p_firmware qcm8550 wcn3988 qcn5122_firmware qcn9274 qcn9024 ipq8076a_firmware sa8775p qca6574 ipq9570_firmware sxr2230p_firmware sa8775p_firmware qamsrv1h qcn6412_firmware qcn9024_firmware wsa8845h qca8082 sa6150p sa8155p_firmware sa8155p wsa8830 ipq5312_firmware sm8550p qcf8000_firmware sa6145p qcn9074_firmware ipq8174 immersive_home_318_firmware qcn6122 ipq8174_firmware sa8255p_firmware qcc2073 ar8035 ipq8072a qamsrv1m_firmware sa8650p_firmware immersive_home_216_firmware immersive_home_316 qcn6224 ipq8071a qcn6112 qca6698aq ssg2125p_firmware qrb5165n sa8145p_firmware sa8150p_firmware qcn6023_firmware qcn5164_firmware snapdragon_x75_5g_modem-rf_firmware ipq8078 qcs8250 wsa8830_firmware qcn9072 qcn6224_firmware qca6678aq_firmware qca8386_firmware wsa8845_firmware wsa8832 qca8082_firmware qcc2076_firmware immersive_home_216 srv1m qca6678aq qcn6432_firmware ar8035_firmware qcn5022_firmware qca4024_firmware qca0000_firmware ipq9008 qca6564au ipq9008_firmware qcn9074 sa8195p_firmware qca8337_firmware qca9888 ipq5332 qcn9013 sg8275p_firmware ipq8173 ipq8072a_firmware ipq6010_firmware qcn6112_firmware flight_rb5_5g qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware ipq5028 qca8085_firmware qcf8001_firmware qcn9070_firmware sa8295p_firmware qcn9022_firmware ipq5010_firmware qcn6132 ipq6018 qca6584au qcn6274_firmware sw5100_firmware qfw7114_firmware qca4024 qca6595_firmware qcs7230 fastconnect_7800_firmware qcn6422 immersive_home_214_firmware ipq5302_firmware ipq8070a fastconnect_6900_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p sa8150p immersive_home_3210 qca8075_firmware qcf8000 qcn5052_firmware sxr1230p ipq6010 sdx65m_firmware sw5100 qam8295p_firmware qcn6402_firmware qca6698aq_firmware wcd9385 qca8084_firmware sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware qcn5024 sg8275p sdx55_firmware immersive_home_326 ipq8071a_firmware flight_rb5_5g_firmware ssg2125p qca6554a_firmware ipq6028 snapdragon_x65_5g_modem-rf_firmware qcn9100 qamsrv1m robotics_rb5 qam8650p_firmware qcn9013_firmware video_collaboration_vc5_platform ipq8076_firmware qca6584au_firmware qcn5152_firmware qcn6274 qrb5165n_firmware qfw7124 wcn3980_firmware wsa8835 qca6595au_firmware qca6391_firmware qca0000 wsa8840_firmware sw5100p_firmware qca6696_firmware wcd9380_firmware qca6574_firmware qca8081 qcn5124 qam8775p qca6797aq snapdragon_ar2_gen_1_firmware qcn5152 snapdragon_x75_5g_modem-rf qcn6412 qca6574a_firmware sdx55 qcn9072_firmware qca9888_firmware ipq8074a immersive_home_3210_firmware qca9889 qcn5024_firmware qca8386 qca6391 immersive_home_318 ipq5010 qcn9274_firmware ipq8173_firmware qcn9012_firmware sa8770p_firmware sa8295p ipq6000_firmware fastconnect_7800 sa8650p qam8775p_firmware snapdragon_8\+_gen_2_mobile_firmware ipq8078_firmware qca9889_firmware snapdragon_ar2_gen_1 wcn3988_firmware immersive_home_316_firmware qamsrv1h_firmware qcn5154 sa8145p wsa8835_firmware ssg2115p_firmware csr8811 qcn5022 wcn3980 Snapdragon qcn6412_firmware qca6574a_firmware wsa8832_firmware qcn5124_firmware flight_rb5_5g_platform_firmware sa8150p_firmware qcn9024_firmware qcs7230_firmware qcn9070_firmware srv1h_firmware qcn6422_firmware wsa8835_firmware csr8811_firmware sa8255p_firmware wcn3988_firmware qualcomm_video_collaboration_vc5_platform_firmware ipq8076a_firmware qcn9022_firmware ipq8076_firmware ipq8074a_firmware sa8155p_firmware qcn6224_firmware qca8386_firmware qcn5164_firmware qcn5052_firmware immersive_home_3210_platform_firmware qca6698aq_firmware qca8081_firmware qcn6402_firmware sa8770p_firmware wcd9385_firmware fastconnect_7800_firmware wsa8845h_firmware qcm8550_firmware ipq8078_firmware ssg2125p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcn6024_firmware qamsrv1m_firmware ipq8070a_firmware qca6595_firmware ipq5302_firmware qca0000_firmware qcn5152_firmware qam8650p_firmware qcn6274_firmware qcn6432_firmware srv1m_firmware immersive_home_316_platform_firmware qrb5165n_firmware snapdragon_8_gen_2_mobile_platform_firmware qcn5024_firmware sa8195p_firmware qcc2073_firmware qca9889_firmware ipq8173_firmware qcn9012_firmware ipq6018_firmware qcn9100_firmware sw5100_firmware sa9000p_firmware wcd9340_firmware ar8035_firmware qca8084_firmware qcn5022_firmware snapdragon_x75_5g_modem-rf_system_firmware wsa8845_firmware qcf8001_firmware qcc710_firmware qca8075_firmware qca6574au_firmware qcf8000_firmware sa6155p_firmware qcn9274_firmware ipq8071a_firmware qcn9074_firmware qca6678aq_firmware qcn5122_firmware sdx65m_firmware ipq5312_firmware qca6564au_firmware wcn3980_firmware qca4024_firmware qcn9000_firmware qca6696_firmware immersive_home_326_platform_firmware qcn6122_firmware sa8775p_firmware immersive_home_318_platform_firmware qcn9013_firmware qca8337_firmware ipq6000_firmware qcn5154_firmware qca6595au_firmware wcd9390_firmware qamsrv1h_firmware sm8550p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qca6554a_firmware snapdragon_ar2_gen_1_platform_firmware ipq9570_firmware ipq8078a_firmware wcd9395_firmware sa6145p_firmware sa8295p_firmware sa6150p_firmware sxr1230p_firmware qcn9072_firmware qfw7124_firmware qca6391_firmware qcc2076_firmware ipq8174_firmware ipq6010_firmware fastconnect_6900_firmware wsa8840_firmware qca9888_firmware wcd9380_firmware qca6584au_firmware qam8775p_firmware immersive_home_216_platform_firmware ipq9008_firmware sw5100p_firmware qfw7114_firmware wsa8830_firmware qca8085_firmware sxr2230p_firmware qam8295p_firmware ssg2115p_firmware qca6574_firmware sg8275p_firmware sa8145p_firmware qcn6112_firmware qcn6023_firmware ipq5028_firmware robotics_rb5_platform_firmware ipq6028_firmware ipq8072a_firmware ipq9574_firmware qca6797aq_firmware ipq5010_firmware sdx55_firmware qca8082_firmware ipq5332_firmware immersive_home_214_platform_firmware qam8255p_firmware sa8650p_firmware qcs8250_firmware qcn6132_firmware

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.6||HIGH

EPSS-0.20% / 42.66%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Stack-based Buffer Overflow in WLAN HOST

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware sa6150p_firmware wsa8845_firmware wsa8832 qcc2076_firmware qca6595 srv1m qca8081_firmware ar8035_firmware qca6696 wcd9340_firmware wcd9395_firmware qcc2073_firmware qcc710_firmware qca6564au wsa8832_firmware sa8195p_firmware qca8337_firmware qca8337 wcd9395 qca6574au_firmware qca6574au wcd9390 flight_rb5_5g_platform wsa8845h_firmware sa9000p_firmware srv1h qca6554a sa8770p qca6584au qcn6274_firmware ssg2115p qcc710 qfw7114_firmware qca6595_firmware qcs7230 fastconnect_6900 fastconnect_7800_firmware qfw7114 wcd9385_firmware fastconnect_6900_firmware qam8255p_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p sa8150p snapdragon_ar2_gen_1_platform_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p qca6564au_firmware sxr1230p qam8650p video_collaboration_vc5_platform_firmware sa9000p snapdragon_8\+_gen_2_mobile_platform srv1h_firmware qca6595au sa6155p_firmware wsa8840 qca6688aq srv1m_firmware qcs8550_firmware qfw7124_firmware wcd9385 snapdragon_8_gen_2_mobile_platform sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware qcc2076 ssg2125p qca6554a_firmware qca6574a sa8195p wcd9340 qcs8250_firmware qamsrv1m qam8650p_firmware video_collaboration_vc5_platform sm8550p_firmware qcm8550 qca6584au_firmware qcn6274 qca6574 qfw7124 qrb5165n_firmware sa8775p qca6595au_firmware qca6391_firmware snapdragon_x75_5g_modem-rf_system sxr2230p_firmware wsa8835 wsa8840_firmware sa8775p_firmware snapdragon_ar2_gen_1_platform qamsrv1h qca6696_firmware wsa8845h wcd9380_firmware sa6150p qca6574_firmware sa8155p_firmware qca8081 sa8155p wsa8830 qam8775p sm8550p sa6145p sa8255p_firmware flight_rb5_5g_platform_firmware qcc2073 ar8035 qca6574a_firmware qamsrv1m_firmware sa8650p_firmware robotics_rb5_platform qca6391 qcn6224 ssg2125p_firmware qrb5165n sa8770p_firmware snapdragon_8_gen_2_mobile_platform_firmware robotics_rb5_platform_firmware qcs8550 fastconnect_7800 sa8145p_firmware sa8650p qam8775p_firmware qca6688aq_firmware sa8150p_firmware qamsrv1h_firmware sa8145p wsa8835_firmware ssg2115p_firmware snapdragon_x75_5g_modem-rf_system_firmware qcs8250 wsa8830_firmware qcn6224_firmware Snapdragon

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.6||HIGH

EPSS-0.21% / 43.48%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in WLAN HOST

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware wsa8845_firmware wsa8832 qcc2076_firmware qca6595 srv1m qca8081_firmware ar8035_firmware qca6696 wcd9340_firmware wcd9395_firmware qcc2073_firmware qcc710_firmware qca6564au wsa8832_firmware sa8195p_firmware qca8337_firmware qca8337 wcd9395 qca6574au_firmware qca6574au wcd9390 flight_rb5_5g_platform wsa8845h_firmware sa9000p_firmware srv1h qca6554a sa8770p qca6584au qcn6274_firmware ssg2115p qcc710 qfw7114_firmware qca6595_firmware qcs7230 fastconnect_6900 fastconnect_7800_firmware qfw7114 wcd9385_firmware fastconnect_6900_firmware qam8255p_firmware wcd9380 qam8255p sxr2230p snapdragon_ar2_gen_1_platform_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p qca6564au_firmware sxr1230p qam8650p video_collaboration_vc5_platform_firmware sa9000p snapdragon_8\+_gen_2_mobile_platform srv1h_firmware qca6595au sa6155p_firmware wsa8840 qca6688aq srv1m_firmware qcs8550_firmware qfw7124_firmware wcd9385 snapdragon_8_gen_2_mobile_platform sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware qcc2076 ssg2125p qca6554a_firmware qca6574a sa8195p wcd9340 qcs8250_firmware qamsrv1m qam8650p_firmware video_collaboration_vc5_platform sm8550p_firmware qcm8550 qca6584au_firmware qcn6274 qca6574 qfw7124 qrb5165n_firmware sa8775p qca6595au_firmware qca6391_firmware snapdragon_x75_5g_modem-rf_system sxr2230p_firmware wsa8835 wsa8840_firmware sa8775p_firmware snapdragon_ar2_gen_1_platform qamsrv1h qca6696_firmware wsa8845h wcd9380_firmware qca6574_firmware sa8155p_firmware qca8081 sa8155p wsa8830 qam8775p sm8550p sa8255p_firmware flight_rb5_5g_platform_firmware qcc2073 ar8035 qca6574a_firmware qamsrv1m_firmware sa8650p_firmware robotics_rb5_platform qca6391 qcn6224 ssg2125p_firmware qrb5165n sa8770p_firmware snapdragon_8_gen_2_mobile_platform_firmware robotics_rb5_platform_firmware qcs8550 fastconnect_7800 sa8650p qam8775p_firmware qca6688aq_firmware qamsrv1h_firmware wsa8835_firmware ssg2115p_firmware snapdragon_x75_5g_modem-rf_system_firmware qcs8250 wsa8830_firmware qcn6224_firmware Snapdragon snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.14%

||

7 Day CHG~0.00%

Published-17 Mar, 2021 | 06:01

Updated-04 Aug, 2024 | 11:28

Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qfs2580 qca9377_firmware qpm5679_firmware sm6250p_firmware pmd9607_firmware qdm5579 qfs2608_firmware qfs2530 qpm8870_firmware qln1030 pm6125 qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpa5581_firmware sa6155 pm7150l qpa8821 pm8998_firmware wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qsm8350_firmware qfe4320 qsw8574_firmware qsm8350 sd460_firmware pm8953_firmware qpa4360_firmware wcn3998_firmware qfe2520_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 pm6150a qpm6670_firmware qca9367_firmware pm660_firmware pm8150b sa8155_firmware qfe2101 qca6430 qat3522 pmr735a wcd9340 sdm830_firmware sd765g sdr660 qfs2630_firmware sdr865 qdm5620_firmware smb1358 smr545 qca6696_firmware qln5020 wcd9371 sd870_firmware smb1350 pmm855au_firmware wtr3950 sa8150p pm6350 qdm5621 qfe3340 qtc800s qat3514_firmware sd660 sd865_5g_firmware pm640p_firmware sd660_firmware wcn6750_firmware qat5516_firmware pm6150l sd450 pm855l_firmware qtc410s wcn3991 qpa8801 sdm429w pm8150l_firmware qat5533_firmware sdx55m_firmware qpa8673_firmware pm6150 smb1354_firmware sd670_firmware qca6574 sd632_firmware qfs2630 qpa8842 sdr052_firmware pmm8996au wcd9380 qualcomm215 qln4640 qcs410 smb1380_firmware qfe4309_firmware pmk8350_firmware smb1381 pm855p_firmware sd690_5g_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sd439_firmware qdm2301 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware qdm5621_firmware qdm2301_firmware msm8937_firmware sd835 wcn3980_firmware sd730 pm660l_firmware pm6250_firmware wcn6740_firmware pm8008 pm8350b_firmware qtm525_firmware pme605_firmware pme605 sd678_firmware apq8064au_firmware qpm5621_firmware qcs603 rsw8577 qpa6560_firmware qpa8802_firmware qln4640_firmware qfe4308_firmware qpm5621 qpm6582 sd670 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcm4290_firmware pm8150l pmi8998_firmware qcs610_firmware sa6145p pm660a_firmware pm215 ar8031 wtr2965 sdm630_firmware sd820_firmware qca6391_firmware pmx20_firmware pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 csra6640 pm8350bhs qat3555_firmware pmi8994 qpa8803_firmware wcn3660 qca9379 pm855b qpm5870 pm8909 wsa8830 pm660 qet6110_firmware qdm5579_firmware pm6125_firmware qbt1500 qpa5581 mdm9650 sd_636 fsm10055_firmware qbt1500_firmware qpm5870_firmware pmk8001 qcs4290 qet6100 pmm855au qca6420_firmware smb1394_firmware apq8009_firmware sd690_5g smb1396 pm7150a sd675_firmware pm8350 qca6564 qpa4361_firmware pm8350c_firmware qpa5461_firmware qca6426 wcn3990_firmware qca9377 qpm5641 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware wtr2955 rgr7640au_firmware pm7250_firmware sdr845_firmware qdm5620 smb1380 pmk8002_firmware qsw6310_firmware sa8155 qdm4650_firmware sdx55_firmware pmm6155au_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware qsm7250_firmware qpm6670 pm7150l_firmware qpm4641 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 qca9367 sdm630 qdm4643 qfs2530_firmware wcn3988_firmware pmx55 qpm4641_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware pm8953 qat5515 qpm5677 qat3514 wcd9326 wcd9335 pm6350_firmware pm8004_firmware sdr8150_firmware qcs4290_firmware pm439 qtc800h_firmware pmk7350_firmware qpm5620 qpm4630 qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware pmm8195au qln4642 msm8917_firmware qpm5677_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware pmi8937 pm8998 pmk7350 smr525_firmware qpm8820_firmware wtr3925_firmware qfe4301_firmware apq8017 qln1020_firmware qpm6621_firmware pm670a_firmware qcm6125_firmware pmx55_firmware wtr2955_firmware qbt1000_firmware qfe4373fc_firmware sd865_5g qca6595 smb1398_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qpa4361 qpm4640_firmware mdm9206 qdm5679_firmware pm8350c smr525 qca6310_firmware qfe4305_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware wtr3950_firmware sd665 pm6150a_firmware pm6150_firmware sd765 pmx20 pmd9607 qca6574a_firmware qpm4630_firmware qat3555 apq8009 qpa5461 wtr2965_firmware pm670_firmware qfs2608 sd480_firmware qtc801s qpm5641_firmware sd710 pm8008_firmware sdx20m_firmware qpm6621 pmr735a_firmware pmw3100 pmx50 qca6564_firmware sdr8250 sd768g qln1030_firmware smb1350_firmware wcn6740 pmw3100_firmware pm8004 pm640l pmk8002 sdw2500 apq8096au_firmware sd845 sdm830 smb1357 qcs410_firmware qpa5580 fsm10055 qfe2550 sa6150p_firmware qcs610 pmi8996 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 qpm6585_firmware qat3519 qbt2000_firmware qtc800h sa8150p_firmware qcs2290 sdr8250_firmware qca6335 msm8917 csra6620_firmware qcs605_firmware qln1020 sd_675_firmware smr546_firmware qdm5671 csra6640_firmware qpm4650_firmware wtr3905 qat3518 sd632 sdr425_firmware smr526_firmware qpa5460 pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware msm8909w sdx20m pmx50_firmware qpa8675_firmware sdr735g qpa5460_firmware qdm3301_firmware pm8996 qsm7250 qcs6125 sd662_firmware smb1360 qcs405 qualcomm215_firmware rsw8577_firmware qdm2308_firmware fsm10056_firmware pm439_firmware qca4020_firmware qca6436 sa6155p wcn6851 qcs603_firmware qpa6560 msm8937 sdr675_firmware wcn3660_firmware wcd9341 pmi8952 qdm4643_firmware pm8937_firmware qca6431 sm7350_firmware qet4100_firmware sd750g qfe4320_firmware qdm3302 wcn3910_firmware qpm5657 qpm5875_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 wtr3925 sdr052 sa8195p_firmware smb1390 qet4100 wcn3610 qpa8686_firmware qpm6585 sda429w_firmware wcd9380_firmware smb1355 qln4650 qtc800t_firmware wcd9330 msm8996au_firmware sdr735g_firmware pm8350bhs_firmware wgr7640 qat5568 qet5100 qdm5671_firmware qpa8801_firmware qca6564au wcn6856_firmware pm8005_firmware qet4101_firmware pm7250b qln4642_firmware pmk8001_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware pm8996_firmware sdx50m_firmware sdr735 smb1395 pm660l ar8151 smr526 wtr5975 qca6430_firmware pmk8003 qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 pm7350c_firmware qca6335_firmware qsw8573 qcs605 qbt1000 wcn3910 qca6320 mdm9650_firmware smb1394 qca6426_firmware pm8350_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 qpa8675 sdr051_firmware wcd9330_firmware sdx55m pm670a qca6421_firmware wtr3905_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 qsw8574 sd821_firmware ar8031_firmware wcn3680_firmware pm855l wcn6851_firmware qdm5670_firmware pm7150a_firmware pm8150b_firmware qfe4302 sd_636_firmware smr545_firmware qca6564a_firmware qdm2310_firmware sd480 sd870 pm670 sd210_firmware qdm5677 pm8005 pm855_firmware qdm2302 pmm6155au sdxr1 pm855b_firmware apq8096au qca6595_firmware qcs405_firmware qpm6582_firmware pm640l_firmware pmi8996_firmware qln4650_firmware qpm5875 qet5100m sa8155p sd675 sd439 qet4101 qat3516 pm670l qpm5658 qcm2290 qpm5658_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware sd678 sdr051 qln5030 qcs2290_firmware pm4125 fsm10056 pmi632 qpa2625_firmware pm456 pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qpa5373 qpm4621 smb1360_firmware qet6100_firmware pm670l_firmware sdr660g sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware sd730_firmware wcd9370 sdr425 pmr525_firmware qfe3340_firmware ar8151_firmware pmi632_firmware qat5516 sd662 qpa8821_firmware qfe4308 sdr660g_firmware pm8350bh pm3003a qca6320_firmware wcn3680b_firmware qca6595au qca6436_firmware qtc800t sm7350 smb1354 qca6564au_firmware qdm2305 sa6155p_firmware qca6310 qpm8820 pm8937 qpm2630 qln5020_firmware sdxr2_5g smb1398 sd821 sa6145p_firmware sdr675 sm6250 apq8017_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qca6174a_firmware wcd9385 qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware apq8064au qpa8673 qdm2310 qfe2550_firmware msm8953_firmware qln5030_firmware sda429w sd210 wcn3620_firmware qfe4302_firmware sd820 smb1396_firmware wcn6850_firmware wcn3620 wsa8835_firmware qca6564a smr546 qet6110 pmi8952_firmware qcm2290_firmware qln5040 qpm8895 sdr845 qpm5670 wcn3990 sd_675 pmk8350 qdm3302_firmware pmi8994_firmware pm8350b qdm2307_firmware msm8909w_firmware wsa8835 msm8996au sdm429w_firmware qpm5657_firmware sd888_5g sm6250p rgr7640au sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware qpm4640 wcn6750 pm7350c qet5100m_firmware qpm4650 qtm525 wtr6955 sd855 sm4125_firmware qfe4305 wtr6955_firmware pm640p sd768g_firmware sdr865_firmware pm8250_firmware sd460 qca6391 sdxr1_firmware smb1351 smb1357_firmware aqt1000_firmware pm215_firmware qpm8895_firmware pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 sdx20 pm8916 smb1395_firmware qdm4650 pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware smb231_firmware qat5568_firmware qdm2308 qat3550 wtr4905_firmware wcn6856 qdm5679 wcn3680b sd835_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware qpa2625 sa6150p pmm8195au_firmware sm7250p sd720g_firmware qpm4621_firmware pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.11% / 29.60%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Untrusted Pointer Dereference in Video

Memory corruption in video while parsing invalid mp2 clip.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware qcs410_firmware sa6150p_firmware sd865_5g sw5100p sxr1120 qca6595 snapdragon_xr1_platform qcs610_firmware wcd9335 wcd9370 qca6696 wcd9340_firmware wcd9341_firmware wcd9395_firmware snapdragon_730_mobile_platform wcn6740_firmware fastconnect_6700 wcn3610 snapdragon_768g_5g_mobile_platform_firmware sa4150p wsa8832_firmware wcd9395 snapdragon_460_mobile_platform qca6574au_firmware qcn7606_firmware qam8295p wcd9341 qca6574au wcd9390 wsa8810_firmware sd730_firmware wsa8845h_firmware sa9000p_firmware snapdragon_835_mobile_pc_platform_firmware wcn3660b_firmware sd730 snapdragon_730g_mobile_platform_firmware fastconnect_6800_firmware sd835_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_695_5g_mobile_platform snapdragon_4_gen_1_mobile_platform_firmware video_collaboration_vc1_platform_firmware sa4155p snapdragon_778g\+_5g_mobile_platform sa8770p qcm6125_firmware ssg2115p snapdragon_480\+_5g_mobile_platform_firmware sxr1120_firmware snapdragon_695_5g_mobile_platform_firmware fastconnect_6900 snapdragon_765g_5g_mobile_platform video_collaboration_vc1_platform wcd9385_firmware snapdragon_x55_5g_modem-rf_system qca6310 qam8255p_firmware snapdragon_888_5g_mobile_platform_firmware qcs4490 snapdragon_8_gen_1_mobile_platform_firmware snapdragon_685_4g_mobile_platform snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p qcm6125 snapdragon_768g_5g_mobile_platform wsa8810 video_collaboration_vc5_platform_firmware sa9000p snapdragon_8\+_gen_2_mobile_platform qca6595au sm7315_firmware wcd9326_firmware sa6155p_firmware wsa8840 qcs8550_firmware sd835 snapdragon_870_5g_mobile_platform_firmware snapdragon_wear_4100\+_platform_firmware snapdragon_8\+_gen_1_mobile_platform qcs4490_firmware snapdragon_8_gen_2_mobile_platform wcn3910_firmware snapdragon_7c\+_gen_3_compute_firmware snapdragon_855\+\/860_mobile_platform_firmware qca6420 wcn3910 wcd9370_firmware snapdragon_845_mobile_platform snapdragon_x55_5g_modem-rf_system_firmware snapdragon_660_mobile_platform wcn3660b qca6574a sa8195p wcd9340 qcs8250_firmware qcm2290 qcm6490 sm8550p_firmware qcm8550 wcn3988 sa8775p qca6574 snapdragon_460_mobile_platform_firmware sxr2230p_firmware qca6430_firmware snapdragon_870_5g_mobile_platform sa8775p_firmware wsa8845h sa6150p wcd9326 qcs410 qcm2290_firmware sa8155p_firmware sa8155p snapdragon_675_mobile_platform wsa8830 snapdragon_662_mobile_platform sm8550p sa6145p snapdragon_8\+_gen_1_mobile_platform_firmware snapdragon_765_5g_mobile_platform sa8255p_firmware snapdragon_665_mobile_platform snapdragon_678_mobile_platform_firmware qcm4325 ssg2125p_firmware wcn3950_firmware qca6698aq sm6250 snapdragon_8_gen_1_mobile_platform fastconnect_6200 sd670 snapdragon_710_mobile_platform sa8145p_firmware sm7325p_firmware wcn3680b snapdragon_730g_mobile_platform snapdragon_888\+_5g_mobile_platform sa8150p_firmware snapdragon_855\+\/860_mobile_platform snapdragon_w5\+_gen_1_wearable_platform fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 sd670_firmware snapdragon_680_4g_mobile_platform_firmware qcs6490 qcs8250 fastconnect_6200_firmware wsa8830_firmware wsa8845_firmware sd660_firmware wsa8832 snapdragon_675_mobile_platform_firmware snapdragon_730_mobile_platform_firmware snapdragon_888_5g_mobile_platform snapdragon_w5\+_gen_1_wearable_platform_firmware qca6320 sa4150p_firmware sd888_firmware snapdragon_662_mobile_platform_firmware qcs6125_firmware wsa8815_firmware sa8195p_firmware qcm4290 snapdragon_680_4g_mobile_platform qcm6490_firmware sm7250p_firmware qcm4490_firmware snapdragon_855_mobile_platform wcn3950 snapdragon_xr2_5g_platform qcs6125 snapdragon_7c\+_gen_3_compute snapdragon_765g_5g_mobile_platform_firmware snapdragon_xr2\+_gen_1_platform_firmware snapdragon_670_mobile_platform_firmware snapdragon_780g_5g_mobile_platform snapdragon_710_mobile_platform_firmware sa8295p_firmware sa4155p_firmware snapdragon_720g_mobile_platform sm6250_firmware sm7250p snapdragon_780g_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qca6320_firmware sd888 snapdragon_4_gen_2_mobile_platform sw5100_firmware snapdragon_765_5g_mobile_platform_firmware wcn6740 qca6310_firmware fastconnect_6800 qca6595_firmware qcs7230 fastconnect_7800_firmware snapdragon_685_4g_mobile_platform_firmware snapdragon_782g_mobile_platform_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p snapdragon_732g_mobile_platform_firmware snapdragon_xr2_5g_platform_firmware snapdragon_4_gen_1_mobile_platform sa8150p snapdragon_778g_5g_mobile_platform snapdragon_665_mobile_platform_firmware snapdragon_835_mobile_pc_platform sxr1230p snapdragon_865\+_5g_mobile_platform sw5100 video_collaboration_vc3_platform aqt1000 snapdragon_865_5g_mobile_platform_firmware qam8295p_firmware sd855 wcn3990_firmware sm7315 qca6698aq_firmware qcs2290 wcd9385 qcn7606 qcs2290_firmware wcn3615 wcn3610_firmware snapdragon_678_mobile_platform sa8255p qcs7230_firmware qcs4290 snapdragon_720g_mobile_platform_firmware sxr1230p_firmware wcd9390_firmware snapdragon_778g\+_5g_mobile_platform_firmware snapdragon_865\+_5g_mobile_platform_firmware snapdragon_690_5g_mobile_platform qca6430 wcn3615_firmware ssg2125p qcm4490 snapdragon_xr2\+_gen_1_platform sm7325p video_collaboration_vc5_platform snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sd855_firmware wcd9335_firmware wcn3980_firmware snapdragon_480_5g_mobile_platform_firmware wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware sw5100p_firmware snapdragon_732g_mobile_platform snapdragon_782g_mobile_platform qca6696_firmware qcs4290_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware qca6574_firmware wsa8815 sd660 sg4150p sd_8_gen1_5g qam8775p qcm4325_firmware qca6574a_firmware qcm4290_firmware snapdragon_480\+_5g_mobile_platform sd_8_gen1_5g_firmware wcd9375_firmware qca6391 qualcomm_215_mobile_platform snapdragon_778g_5g_mobile_platform_firmware sg4150p_firmware snapdragon_480_5g_mobile_platform sa8770p_firmware sa8295p snapdragon_670_mobile_platform snapdragon_8_gen_2_mobile_platform_firmware snapdragon_xr1_platform_firmware qcs8550 fastconnect_7800 qam8775p_firmware sd865_5g_firmware qualcomm_215_mobile_platform_firmware wcd9375 wcn3988_firmware sa8145p snapdragon_wear_4100\+_platform snapdragon_888\+_5g_mobile_platform_firmware wsa8835_firmware ssg2115p_firmware snapdragon_660_mobile_platform_firmware wcn3980 snapdragon_690_5g_mobile_platform_firmware wcn3680b_firmware qcs610 Snapdragon qam8255p_firmware snapdragon_662_mobile_platform_firmware sa6150p_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware sd730_firmware snapdragon_460_mobile_platform_firmware qcs6125_firmware snapdragon_480_5g_mobile_platform_firmware wcn3990_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware wcd9326_firmware wcn3615_firmware sd_8_gen1_5g_firmware snapdragon_660_mobile_platform_firmware qam8295p_firmware sa9000p_firmware qca6320_firmware sm7315_firmware qca6574au_firmware snapdragon_695_5g_mobile_platform_firmware snapdragon_835_mobile_pc_platform_firmware wcn3680b_firmware wcd9375_firmware wsa8845h_firmware sm7250p_firmware wcn3610_firmware snapdragon_680_4g_mobile_platform_firmware sa6155p_firmware qcm8550_firmware sa8775p_firmware wsa8840_firmware sa4155p_firmware qcs8550_firmware wcn3988_firmware sa6145p_firmware fastconnect_6700_firmware wsa8810_firmware wcd9395_firmware sa8255p_firmware qca6698aq_firmware qcs4290_firmware sa8770p_firmware qam8775p_firmware qca6696_firmware qcs6490_firmware snapdragon_665_mobile_platform_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware sm6250_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware sd660_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sxr1120_firmware sa8295p_firmware qcn7606_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qcm6125_firmware snapdragon_675_mobile_platform_firmware qcm2290_firmware qualcomm_video_collaboration_vc1_platform_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware qcs7230_firmware snapdragon_670_mobile_platform_firmware sd670_firmware sxr1230p_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qca6310_firmware qca6430_firmware wcd9335_firmware qcm4325_firmware qca6574_firmware wcd9340_firmware sm7325p_firmware wsa8845_firmware snapdragon_xr2_5g_platform_firmware wcn3660b_firmware qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware aqt1000_firmware wcn6740_firmware qcm4490_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcs4490_firmware qcm6490_firmware wsa8832_firmware fastconnect_6900_firmware sa8155p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qualcomm_215_mobile_platform_firmware sd835_firmware qca6595_firmware qca6391_firmware snapdragon_710_mobile_platform_firmware sa4150p_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware wcd9390_firmware ssg2115p_firmware sw5100_firmware qcs410_firmware snapdragon_720g_mobile_platform_firmware snapdragon_xr1_platform_firmware

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-822

Untrusted Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.34%

||

7 Day CHG~0.00%

Published-22 Feb, 2021 | 06:25

Updated-04 Aug, 2024 | 11:28

Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qfe3100 qfe2080fc_firmware qca9377_firmware qfs2580 qpm5679_firmware mdm9640_firmware sm6250p_firmware msm8960 pmd9607_firmware qfe4455fc_firmware qca8337 qdm5579 qfs2608_firmware qfs2530 qpm8870_firmware msm8226_firmware qln1030 pm6125 qat5522_firmware mdm9645 pm8922_firmware pm8917 wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpa5581_firmware sa6155 pm7150l qcc1110_firmware mdm8215 pm8998_firmware qpa8821 apq8076 wtr5975_firmware pm456_firmware qpa5580_firmware msm8108 wcn3998 msm8108_firmware wcn3950 sm4125 sd720g wtr1605 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware pmm8920au_firmware qcc112 qfe4320 sd460_firmware wfr2600_firmware mdm9230_firmware smb2351_firmware mdm8215m pm8953_firmware qpa4360_firmware apq8064_firmware qfe2520_firmware wcn3998_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 pm6150a wtr4605_firmware qpm6670_firmware qca9367_firmware mdm8207 pm660_firmware pm8150b msm8960_firmware sa8155_firmware qca4004_firmware qfe2101 mdm9615m qca6430 qat3522 qfe4455fc pmr735a wcd9306_firmware wtr1625 wcd9340 sdm830_firmware mdm9625_firmware sd765g sdr660 qfe1045_firmware qfe3345 apq8052 msm8209_firmware qfs2630_firmware sdr865 qdm5620_firmware smb1358 smr545 qca6696_firmware qln5020 smb1350 qfe1055_firmware mdm8215_firmware pmm855au_firmware pmm8920au sa8150p wtr3950 pm6350 qdm5621 qfe3340 qtc800s qca4004 qat3514_firmware mdm9330_firmware sd660 sd865_5g_firmware sd712 sd660_firmware apq8060a_firmware wcn6750_firmware qat5516_firmware pm6150l sd450 pm855l_firmware wcn3991 qfe3335_firmware qpa8801 sdm429w pm8150l_firmware qat5533_firmware sdx55m_firmware qpa8673_firmware msm8230 pm6150 smb1354_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware qfs2630 qpa8842 sdr052_firmware pmm8996au wcd9380 sd850 qualcomm215 qln4640 qcs410 smb1380_firmware qfe4309_firmware pmk8350_firmware smb1381 pm855p_firmware sd690_5g_firmware qfe3100_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sdx24_firmware sd439_firmware pmd9645 qdm2301 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware msm8956_firmware qca6584_firmware qdm2301_firmware msm8937_firmware qdm5621_firmware mdm9215_firmware pm8921 sd835 qca1990 wcn3980_firmware sd730 qfe3320_firmware pm660l_firmware pm6250_firmware wcn6740_firmware ar6003_firmware pm8008 pm8350b_firmware qtm525_firmware mdm9225 pme605_firmware wtr1605l_firmware pme605 apq8064au_firmware mdm9225m qpm5621_firmware qln1021aq_firmware qcs603 rsw8577 qpa6560_firmware qpa8802_firmware qln4640_firmware qfe4308_firmware qpm5621 qpm6582 sd670 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcm4290_firmware pm8150l pmi8998_firmware qcs610_firmware apq8084_firmware sa6145p pm660a_firmware pm215 pm4250 sdr105 msm8626 ar8031 pm8226_firmware mdm8207_firmware sdm630_firmware wtr2965 mdm9205_firmware qca6391_firmware sd820_firmware pmx20_firmware pm8150 pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 csra6640 pm8350bhs mpq8064_firmware qat3555_firmware pmi8994 qpa8803_firmware pm8226 wcn3660 qca9379 pm855b smb2351 qln1031 qsm8250_firmware qpm5870 pm8909 qfe1040 wsa8830 pm660 msm8610_firmware qet6110_firmware rtr8600 qdm5579_firmware pm6125_firmware qbt1500 qpa5581 qfe1040_firmware mdm9628_firmware qfe2340_firmware mdm9650 pmx24_firmware qbt1500_firmware qpm5870_firmware pmk8001 qcs4290 qet6100 pmm855au msm8960sg_firmware pm8110 qca6420_firmware pmd9635_firmware smb1394_firmware apq8009_firmware sd690_5g smb1396 pm7150a mdm9310_firmware sd675_firmware pm8350 qca6564 qpa5461_firmware pm8350c_firmware qca6426 wcn3990_firmware qca9984_firmware qca9377 qpm5641 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware sdxr2_5g_firmware mdm9615m_firmware wcd9326_firmware wcn3615_firmware rgr7640au_firmware wtr2955 pm7250_firmware sdr845_firmware qdm5620 qln1021aq smb1380 mdm8635m pmk8002_firmware sa8155 wtr2100_firmware qca6584 qdm4650_firmware qln1031_firmware pmm6155au_firmware qat5533 sdx55_firmware wcn3615 sm7250p_firmware msm8227 wcn3610_firmware pm8940 mdm9207 pm8110_firmware pm7150l_firmware qpm6670 qsm7250_firmware qca6584au wcd9306 msm8208 qpm4641 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 msm8962 qca9367 mpq8064 mdm9235m_firmware qfe2082fc_firmware sdm630 mdm9607_firmware mdm9655_firmware qdm4643 msm8976sg qfs2530_firmware pmx55 qpm4641_firmware wcn3988_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware pm8953 qat5515 qca6694 qpm5677 qat3514 wcd9326 wcd9335 wcn3660a pm6350_firmware pm8004_firmware sdr8150_firmware qcs4290_firmware pm439 qtc800h_firmware pmk7350_firmware msm8627_firmware qpm5620 mdm8635m_firmware mdm9625 qca6390 qpm4630 sd750g_firmware aqt1000 msm8956 msm8976 sm6250_firmware pmm8195au wcd9375 qln4642 apq8056 msm8917_firmware ar9374 qpm5677_firmware sdx20_firmware wsa8815_firmware mdm9625m pmi8937 pm8998 pmk7350 sd888_5g_firmware qpm8820_firmware sdw3100 smr525_firmware qfe4301_firmware apq8017 qcc112_firmware ar6003 mdm9235m qln1020_firmware qpm6621_firmware mdm9630_firmware pm670a_firmware rtr8601_firmware wtr1625l_firmware pmx55_firmware wtr2955_firmware qbt1000_firmware apq8030 qfe4373fc_firmware pm8019 qca6595 sd865_5g pm8150_firmware smb1398_firmware qpm8830 pmm8996au_firmware qat5522 apq8060a pm8150c pmr735b qpa4360 pmk8003_firmware sc8180x qpm4640_firmware mdm9206 qdm5679_firmware pm8350c smr525 wfr1620_firmware qca6310_firmware qfe4305_firmware pm6150l_firmware pmr525 mdm9615 pm8150a_firmware qca6574_firmware wtr3950_firmware qln1036aq_firmware pm8821 pm6150a_firmware pm6150_firmware sd765 apq8030_firmware pmx20 pmd9607 qca6574a_firmware qpm4630_firmware qat3555 sd850_firmware wcn3660a_firmware apq8009 qpa5461 mdm9310 qfe2082fc sd8c_firmware msm8610 wtr2965_firmware pm670_firmware qfs2608 qln1036aq qtc801s pmi8940_firmware sc8180x_firmware qpm5641_firmware qfe3320 mdm8215m_firmware mdm9607 sd710 mdm9645_firmware pm8008_firmware qln1035bd_firmware qpm6621 pmr735a_firmware pmw3100 pmx50 pm8018 qfe3345_firmware qca6564_firmware sdr8250 sd768g qln1030_firmware smb1350_firmware wcn6740 qsc1215_firmware pmw3100_firmware pm8004 pmk8002 msm8940 sdw2500 apq8096au_firmware sd845 mdm9615_firmware msm8962_firmware sd455_firmware sdm830 smb1357 qcs410_firmware mdm9330 qpa5580 pm8018_firmware qfe2550 sa6150p_firmware qcs610 pmi8996 qpm5620_firmware qfe1045 qdm2307 qca6431_firmware qpa8802 qpm6585_firmware qat3519 qbt2000_firmware pm855a_firmware qtc800h sa8150p_firmware qcs2290 sdr8250_firmware qca6335 msm8917 csra6620_firmware qcs605_firmware qln1020 smr546_firmware wtr3905 qdm5671 csra6640_firmware pmc1000h qfe2330 qpm4650_firmware mdm8615m_firmware msm8630 qat3518 sd8c sd632 sdr425_firmware smr526_firmware wcd9310_firmware wtr2605 mdm9628 qpa5460 wgr7640_firmware qdm2305_firmware wtr2655 qpm5670_firmware pm8917_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware mdm9630 qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware msm8909w pm8821_firmware pmx50_firmware qpa8675_firmware wtr1625l msm8627 qpa5460_firmware sdr735g wcn3999 pm8940_firmware qdm3301_firmware pm8996 qsm7250 apq8056_firmware sd662_firmware apq8062_firmware pm8922 qcc1110 qcs405 smb1360 wfr2600 qca1990_firmware qualcomm215_firmware qfe3440fc qdm2308_firmware rsw8577_firmware wcd9320 pm439_firmware qca4020_firmware qca6436 sa6155p wcn6851 qcs603_firmware qpa6560 msm8937 sdr675_firmware wcn3660_firmware wcd9341 pmi8952 qdm4643_firmware mdm9655 pm8937_firmware qca6431 sm7350_firmware qet4100_firmware sd750g qfe4320_firmware qdm3302 wcn3910_firmware qpm5657 wtr1605_firmware mdm9207_firmware qpm5875_firmware wsa8830_firmware msm8226 sd855_firmware qdm5650 wcn3988 wtr3925 qfe2080fc sdr052 sa8195p_firmware smb1390 sdw3100_firmware msm8208_firmware qet4100 wcn3610 mdm9640 msm8608 qpa8686_firmware qpm6585 qca8337_firmware sda429w_firmware wcd9380_firmware smb1355 qln4650 qtc800t_firmware wcd9330 msm8996au_firmware sdr735g_firmware wcn2243_firmware pm8350bhs_firmware wgr7640 qat5568 qet5100 qdm5671_firmware mdm9225m_firmware msm8230_firmware qca6564au qpa8801_firmware qtm527_firmware sd636 pm8005_firmware wcn6856_firmware msm8940_firmware qet4101_firmware msm8626_firmware pm7250b qln4642_firmware pmk8001_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware mdm9230 pm8996_firmware qet4200aq_firmware sdx50m_firmware sdr735 smb1395 smb358s pm660l smb358s_firmware ar8151 smr526 wtr5975 qca6174 pmk8003 qca6430_firmware qtc801s_firmware qat3522_firmware wcd9335_firmware wcn3980 pm7350c_firmware qca6335_firmware qsw8573 qcs605 qbt1000 mdm9225_firmware qca6320 wcn3910 mdm9650_firmware smb1394 qca6426_firmware pm8350_firmware wcn3660b_firmware wcn3680 qca9984 qfe4309 pm8009 qpa8675 sdr051_firmware wcd9330_firmware sdx55m pm670a qca6421_firmware wtr3905_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 apq8064 sd821_firmware ar8031_firmware wcn3680_firmware pm855l wcn6851_firmware qdm5670_firmware pmd9635 msm8930_firmware pm7150a_firmware pm8150b_firmware qfe4302 smr545_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware qca6694au_firmware pm4250_firmware msm8976sg_firmware sdr105_firmware pmd9645_firmware pm670 sd210_firmware wtr1605l qdm5677 pm8005 qsm8250 pm855_firmware wcd9320_firmware pmm6155au sdxr1 pm855b_firmware apq8096au qca6595_firmware qcs405_firmware qpm6582_firmware pmi8996_firmware wfr1620 qln4650_firmware qpm5875 qet5100m sa8155p sd675 wtr4605 sd439 qet4101 pm8952 qat3516 pm670l wcd9310 qpm5658 ar8035_firmware qcm2290 qpm5658_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware qfe2330_firmware qfe4465fc sdr051 msm8960sg qln5030 msm8930 qcs2290_firmware pm4125 wcn2243 pmi632 qpa2625_firmware pm456 qfe2081fc_firmware pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qfe1100_firmware qpa5373 qpm4621 smb1360_firmware qet6100_firmware pm670l_firmware sdr660g qfe2340 sd455 sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware qca6174_firmware sd730_firmware wcd9370 msm8227_firmware wtr2605_firmware sdr425 pmr525_firmware qca6584au_firmware apq8076_firmware qfe3340_firmware ar8151_firmware pmi632_firmware qat5516 smb358_firmware sd662 qpa8821_firmware qfe4308 sdr660g_firmware pm8350bh apq8037 pm3003a qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware wtr2100 qca6436_firmware qtc800t sm7350 smb1354 qca6564au_firmware qdm2305 sa6155p_firmware qca6310 qpm8820 pm8937 qpm2630 qfe2081fc qln5020_firmware sdxr2_5g smb1398 apq8084 sd821 apq8062 sa6145p_firmware sdr675 sm6250 sd712_firmware apq8017_firmware wsa8810_firmware smb231 qfe1100 sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 mdm8615m rtr8600_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware ar8035 pm8019_firmware apq8064au qca6694_firmware qpa8673 qdm2310 qfe2550_firmware msm8953_firmware qln5030_firmware qca6694au msm8952 pm8952_firmware sd210 sda429w wcn3620_firmware qfe4302_firmware sd820 smb1396_firmware wcn6850_firmware wcn3620 wsa8835_firmware wtr1625_firmware wtr3925_firmware smb358 msm8630_firmware qca6564a smr546 pmx24 qet6110 pmi8952_firmware qcm2290_firmware qfe1055 qln5040 qpm8895 sdr845 mdm9635m_firmware qpm5670 wcn3990 qtm527 qfe3440fc_firmware mdm9625m_firmware pmk8350 rtr8601 sdx24 qdm3302_firmware pmi8994_firmware msm8952_firmware pm8350b qdm2307_firmware msm8909w_firmware wsa8835 msm8996au sdm429w_firmware qpm5657_firmware pmi8940 sd888_5g sm6250p rgr7640au qln1035bd pm855a sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware qpm4640 wcn6750 mdm9635m apq8052_firmware pm8956_firmware pm7350c qet5100m_firmware qpm4650 mdm9205 qtm525 wtr6955 qfe3335 sd855 sd8cx sm4125_firmware qfe4305 wtr6955_firmware sd768g_firmware sdr865_firmware msm8209 qfe4465fc_firmware pm8250_firmware sd460 qca6391 sd8cx_firmware sdxr1_firmware smb1351 smb1357_firmware aqt1000_firmware pm215_firmware msm8920 qpm8895_firmware qsc1215 pm660a qpa4340 qcm4290 sdx50m sdr8150 sdx20 pm8916 msm8920_firmware qdm4650 smb1395_firmware mdm9215 pmd9655 qca6574au sa8155p_firmware sd205_firmware wcd9341_firmware wsa8810 qpm2630_firmware smb231_firmware qat5568_firmware qdm2308 qat3550 wtr4905_firmware wcn6856 qdm5679 ar9374_firmware wcn3680b sd835_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware msm8608_firmware qpa2625 sa6150p apq8037_firmware pmm8195au_firmware sm7250p sd720g_firmware pm8921_firmware wtr2655_firmware qpm4621_firmware pm8956 sd636_firmware pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 32.38%

||

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during positioning.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free