CVE-2019-2271 | ByteOS Network

Vulnerability Details :

CVE-2019-2271

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-21 Nov, 2019 | 14:38

Updated At-04 Aug, 2024 | 18:42

Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:21 Nov, 2019 | 14:38

Updated At:04 Aug, 2024 | 18:42

▼CVE Numbering Authority (CNA)

Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Versions

Affected

APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Problem Types

Type	CWE ID	Description
text	N/A	Improper Validation of Array Index in NAS

Type: text

CWE ID: N/A

Description: Improper Validation of Array Index in NAS

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:21 Nov, 2019 | 15:15

Updated At:26 Nov, 2019 | 15:36

Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Qualcomm Technologies, Inc.

>>apq8009_firmware>>-

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8017_firmware>>-

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8053_firmware>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8096au_firmware>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8098_firmware>>-

cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm915_firmware>>-

cpe:2.3:o:qualcomm:mdm915_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm915:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9205_firmware>>-

cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9615_firmware>>-

cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9625_firmware>>-

cpe:2.3:o:qualcomm:mdm9625_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9625:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9635m_firmware>>-

cpe:2.3:o:qualcomm:mdm9635m_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9635m:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9640_firmware>>-

cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9655_firmware>>-

cpe:2.3:o:qualcomm:mdm9655_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9655:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8905_firmware>>-

cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8905:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909_firmware>>-

cpe:2.3:o:qualcomm:msm8909_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909w_firmware>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8917_firmware>>-

cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8920_firmware>>-

cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8920:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8937_firmware>>-

cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8937:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8940_firmware>>-

cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8940:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8953_firmware>>-

cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8976_firmware>>-

cpe:2.3:o:qualcomm:msm8976_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8976:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996au_firmware>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-125	Primary	nvd@nist.gov

CWE ID: CWE-125

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

1060Records found

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.64% / 69.51%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9150_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdx24 mdm9650 sd_636 msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware qca9379_firmware qca6174a sd_665 sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 mdm9206_firmware qcs605 sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sd_210_firmware sd_600 sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware mdm9150 qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware qcs405_firmware sd_712_firmware sdm630_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.34% / 55.81%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:42

Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sdm636_firmware msm8996au_firmware apq8098_firmware sdm845 sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware mdm9650 qcs405 qca6574au sdm710 sm6150 mdm9607 msm8996au apq8017_firmware sdm710_firmware apq8009_firmware sdm670 qcs605_firmware mdm9207c_firmware mdm9206 mdm9207c qca6174a_firmware qca6174a qca9379_firmware sdm670_firmware apq8096au sdm636 qcs405_firmware qca9377 sdm630_firmware apq8098 sda660_firmware mdm9206_firmware qcs605 apq8053 apq8096au_firmware sm6150_firmware mdm9650_firmware msm8998 sdx20_firmware qca6574au_firmware sda660 apq8017 apq8009 qca9379 apq8053_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.29% / 52.31%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:49

SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware qcm2150_firmware mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8976_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware mdm9655_firmware sdm660 sc8180x_firmware sdm710 qm215 mdm9607 apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 qm215_firmware msm8976 sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 mdm9615_firmware apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 53.80%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 53.80%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sdm670_firmware sm8150_firmware ipq8074 sda845_firmware sdm845 qcs605 sm7150_firmware ipq8074_firmware sm6150_firmware sdm710 sm6150 sm8150 sdm850 sdm710_firmware sxr1130_firmware sm7150 qca8081_firmware sxr1130 sdm670 qca8081 qcs605_firmware sda845 sdm845_firmware Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.1||HIGH

EPSS-0.08% / 24.17%

||

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:29

Updated-27 Feb, 2025 | 21:01

Out of Bounds read in SNPE Library

A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source).

Vendor-Qualcomm Technologies, Inc.

Product-qcs405 sd845 sd855_firmware qcs405_firmware sd845_firmware qcs605 qcs605_firmware sd855 Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.78%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user controlled space in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 qca9377_firmware sd_850 sd_855 sd_730_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdm660 sdx24 sdm630 mdm9607_firmware sd_710_firmware sd_636 qcs405 qca6574au mdm9607 msm8996au sd_636_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware qca6174a_firmware qca6174a qca9379_firmware sd_665 sd_730 sd_850_firmware sdx24_firmware qcs405_firmware qca9377 sd_712_firmware sdm630_firmware sd_845 qcs605 sd_670 sd_710 qca6574au_firmware qca9379 sd_665_firmware sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.48% / 64.22%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9205, MDM9650, QCA8081, QCS605, SD 427, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 sd_855 sd_730_firmware sd_675 sdx20 sd_670_firmware sdm660 sdm630 sd_710_firmware sd_435 mdm9650 sd_636 sd_625 ipq8074_firmware snapdragon_high_med_2016_firmware sd_636_firmware sd_450_firmware sd_845_firmware qca8081 qcs605_firmware sd_675_firmware sd_730 snapdragon_high_med_2016 sd_665 sd_850_firmware sd_625_firmware ipq8074 sd_450 sd_712_firmware sdm630_firmware mdm9205_firmware sd_8cx_firmware sda660_firmware mdm9205 sd_845 sd_427 qcs605 sd_8cx sd_670 sd_435_firmware sd_835_firmware mdm9650_firmware sd_710 sdx20_firmware sd_835 sda660 sxr1130_firmware qca8081_firmware sxr1130 sd_665_firmware sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.78%

||

7 Day CHG~0.00%

Published-23 Feb, 2018 | 23:00

Updated-17 Sep, 2024 | 00:06

In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 835, and SD 845, a buffer overread is possible if there are no newlines in an input file.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, Nicobar, QCS605, QM215, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm6150 msm8909w_firmware sdm429w_firmware apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.34% / 55.81%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 qca9377_firmware sd_850 mdm9150_firmware mdm9640_firmware sd_820a msm8996au_firmware sdx20 sd_670_firmware sd_425 sd_430_firmware mdm9607_firmware sd_435 mdm9650 sd_710_firmware sd_625 qca6574au sd_210 mdm9607 msm8996au sd_820_firmware sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware mdm9150 mdm9206 qca6174a_firmware qca6174a qca9379_firmware sd_212_firmware sd_425_firmware sd_850_firmware sd_625_firmware sd_450 qca9377 sd_712_firmware mdm9615 sd_845 mdm9206_firmware sd_427 sd_430 sd_670 sd_435_firmware mdm9615_firmware mdm9650_firmware sd_710 sdx20_firmware sd_600_firmware sd_205 qca6574au_firmware sd_210_firmware sd_600 qca9379 sd_205_firmware sd_212 mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.40% / 59.56%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDX20, SDX55, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sdm636_firmware msm8996au_firmware sdx20 sdm660 sdm630 mdm9607_firmware mdm9650 qca6574au mdm9607 msm8996au apq8017_firmware apq8009_firmware qcn7605_firmware qcs605_firmware mdm9207c_firmware mdm9206 mdm9207c qca6174a_firmware qca6174a qca9379_firmware apq8096au sdm636 sda845_firmware qca9377 sdm630_firmware sda660_firmware qcn7605 mdm9206_firmware qcs605 sdx55 apq8053 apq8096au_firmware mdm9650_firmware sdx20_firmware qca6574au_firmware sda660 sdx55_firmware sxr1130_firmware apq8017 sxr1130 apq8009 qca9379 apq8053_firmware sdm660_firmware sda845 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.17%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 22:24

Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8939, MSM8953, MSM8996, MSM8996AU, Nicobar, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-msm891_firmware sdm632_firmware msm8996au_firmware sdm450_firmware sdm632 sdm439 sdm429 sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware sxr2130 qcs605_firmware mdm9206 sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar msm8953 sdm450 apq8064 sdm636_firmware apq8098_firmware sdx20 sdm660 sdm630 mdm9607_firmware sm8250_firmware qcs405 qm215 mdm9607 apq8017_firmware msm8939_firmware mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware msm8953_firmware apq8053 apq8096au_firmware sm6150_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware msm891 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.62%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware qca9379_firmware qca6174a sd_665 sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 mdm9206_firmware sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sda660 sd_210_firmware sd_415_firmware sd_652_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_616 sd_425 sdm660 sdm630 mdm9607_firmware sd_615 sd_710_firmware qcs405 sd_625 qca6574au sd_210 mdm9607 sd_636_firmware sd_439_firmware mdm9150 sd_429_firmware qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_670 sdx20_firmware sd_710 sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-8.24% / 91.87%

||

7 Day CHG~0.00%

Published-29 Sep, 1999 | 04:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.

Vendor-n/a Qualcomm Technologies, Inc.

Product-qpopper n/a qpopper

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.29% / 51.70%

||

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

Buffer over read can happen in video driver when playing clip with atomsize having value UINT32_MAX in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qfs2580 fsm10055 qfe2550 qcs610 pmi8996 qdm5579 qdm2307 qfs2530 qpa8802 qln1030 pm6125 qat3519 pm8150a qtc800h qdm5670 sa6155 qca6335 msm8917 pm7150l qpa8821 qln1020 wtr3905 qdm5671 qat3518 sd632 wcn3998 wcn3950 sd720g qpa5460 wcn3660b qfe4320 qca4020 qdm5652 sd6905g qpm8870 qpm5679 qbt2000 msm8909w pm855p qca6420 pm6150a sdx20m sdr735g pm8150b qsm7250 pm8996 qfe2101 smb1360 qca6430 qcs405 qat3522 pmr735a wcd9340 sd765g sdr660 qca6436 wcn6851 sa6155p qpa6560 msm8937 sdr865 smb1358 wcd9341 pmi8952 smr545 qca6431 qln5020 wcd9371 smb1350 sd750g qdm3302 wtr3950 sa8150p pm6350 qdm5621 qfe3340 qtc800s sd660 qdm5650 wcn3988 wtr3925 sdr052 smb1390 pm6150l sd450 sd8885g qet4100 wcn3610 qpm6585 qtc410s wcn3991 smb1355 qln4650 qpa8801 sdm429w wcd9330 wgr7640 qat5568 qet5100 sd636 qca6564au sdxr25g pm6150 qca6574 pm7250b qfs2630 qpa8842 pmm8996au wcd9380 qualcomm215 qln4640 qcs410 smb1381 sdr735 pm7250 wtr4905 smb1395 pm660l qpa8803 ar8151 smr526 wtr5975 wcn3980 pmk8003 qdm2301 qsw8573 qcs605 wsa8815 wcn6850 smb1394 wcn3680 qfe4309 sd835 pm8009 qpa8675 sd730 sdx55m pm670a qfe4373fc pm8008 msm8953 qsw8574 pmi8998 qfe2520 pme605 pm855l qcs603 rsw8577 sd8655g qfe4302 qpm5621 qpm6582 apq8009w qfe4303 pm670 pm8150l qdm5677 pm8005 sa6145p pm215 qdm2302 pmm6155au sdxr1 ar8031 apq8096au wtr2965 qpm5875 sdx55 qet5100m apq8053 sa8155p csra6640 pm8350bhs sd675 sd439 qet4101 pmi8994 qat3516 pm670l qpm5658 qca9379 pm855b qln1031 qpm5870 pm8909 wsa8830 sdr051 pm660 qln5030 qbt1500 fsm10056 qpa5581 pmi632 pm456 mdm9650 csra6620 qpa5373 qpm4621 pmk8001 qcs4290 qet6100 pmm855au sdr660g sd455 qpa8686 smb1396 pm7150a wcd9370 pm8350 qca6564 sdr425 qca6426 qca9377 qpm5641 qat5516 wtr2955 qdm5620 qln1021aq sd662 smb1380 qfe4308 pm8350bh apq8037 pm3003a sa8155 qat5533 wcn3615 qca6595au sm7350 pm8940 qpm6670 smb1354 qdm2305 qca6310 qpm8820 qpm4641 pm8937 pm855 sd429 pm8250 qca9367 smb1398 sdm630 sd821 qdm4643 pmx55 sd205 sdr675 qca6421 sm6250 qdm3301 sa8195p pm8953 qat5515 qpm5677 smb231 qat3514 wcd9326 wcd9335 qet4200aq wcd9385 pm439 pmm8155au qpm4630 qca6390 wcd9375 aqt1000 apq8064au qpa8673 qdm2310 pmm8195au qln4642 sda429w sd210 sd820 pmi8937 pm8998 pmk7350 wcn3620 apq8017 qca6564a smr546 qet6110 qln5040 qpm8895 sdr845 qpm5670 wcn3990 qca6595 pmk8350 qpm8830 pm8350b qat5522 wsa8835 msm8996au pm8150c pmr735b sm6250p rgr7640au qpa4360 qpa4361 qca6574a mdm9206 qca6174a pm8350c smr525 qpm4640 wcn6750 pmr525 pm7350c qpm4650 qtm525 sd855 sd665 qfe4305 qca6175a sd765 pm640p pmx20 pmd9607 qat3555 apq8009 sd460 qca6391 smb1351 qpa5461 msm8920 pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 qfs2608 sdx20 pm8916 qln1036aq qtc801s qdm4650 pmd9655 qca6574au qsw6310 qpm6621 wsa8810 qdm2308 pmw3100 pmx50 qat3550 wcn6856 qdm5679 wcn3680b sdr8250 sd768g wcn6740 qca6696 qfe4301 sm4350 sdw2500 pm8004 pm640l msm8940 pmk8002 qpa2625 sd845 sm7250p sdm830 smb1357 pm6250 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.29% / 51.70%

||

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qfe3100 qfs2580 qca1023 qca8337 ar9380 qfs2530 qln1030 qpa8688 pm6125 qcn5124 mdm9645 pm8150a qdm5670 sa6155 pm7150l qpa8821 mdm8215 apq8076 qfe2320 msm8108 sa415m wcn3998 wcn3950 sm4125 sd720g wtr1605 wcn3660b qfe4320 qcc112 sd6905g pm855p qca6420 pm6150a pm8150b qca0000 qfe2101 qca6430 qat3522 qfe4455fc pmr735a wcd9340 sd765g sdr660 qfe3345 apq8052 sdr865 smb1358 smr545 qln5020 wcd9371 smb1350 pmm8920au sa8150p wtr3950 pm6350 qdm5621 qfe3340 qtc800s sd660 sd712 qcn5121 pm6150l sd450 sd8885g qtc410s wcn3991 qpa8801 sdm429w ipq8078 ipq8173 sdxr25g pm6150 qca6574 qfs2630 qpa8842 pmm8996au wcd9380 qualcomm215 qln4640 qcs410 smb1381 qcn5024 pm7250 wtr4905 qpa8803 pmd9645 qdm2301 wsa8815 wcn6850 qpm6375 ipq6028 ipq8064 sd835 pmp8074 qca1990 sd730 pm8008 pme605 qca6234 qcn5054 qcs603 rsw8577 qca9994 qca9980 qpm5621 qpm6582 sd670 apq8009w qfe4303 wcn6855 pm8150l sa6145p pm215 ar8031 qpm5577 wtr2965 pm8150 qca4024 sdx55 apq8053 csra6640 pmi8994 wcn3660 qca9379 pm855b smb2351 qln1031 qcn7606 qpm5870 pm8909 qfe1040 wsa8830 pm660 qpm6325 qbt1500 qpa5581 csrb31024 mdm9650 qca9378a pmk8001 qca9992 qcs4290 pmm855au qet6100 smb1396 pm7150a ipq8072 pm8350 qca6426 qca9377 qca4531 qpm5641 whs9410 wtr2955 qdm5620 qln1021aq ipq8074a smb1380 apq8094 sa8155 qca6584 qat5533 wcn3615 pm8940 qpm6670 wcd9306 qca6584au msm8208 qpm4641 ipq8174 pm855 sd429 pm8250 qcn5052 qca9367 apq8092 sdm630 qdm4643 msm8976sg pmx55 qcn9074 sd205 qca6421 qdm3301 sa8195p pm8953 qat5515 qca6694 qpm5677 qat3514 wcd9326 wcd9335 qcn6023 pm439 qpm5620 qpm4630 qca6390 wcd9375 aqt1000 msm8956 msm8976 pmm8195au qln4642 msm8994 apq8056 qfe2310 pmi8937 pm8998 sdw3100 msm8916 apq8017 qfe1550 qca6595 qpm8830 apq8039 qat5522 pm8150c pmr735b qpa4360 qcn5154 qpa4361 mdm9206 pm8350c smr525 qca9888 pmr525 mdm9615 msm8929 qca9886 sd665 qca6175a sd765 pmx20 pmd9607 qat3555 apq8009 qpa5461 mdm9310 qfe2082fc qfe1520 qfs2608 qln1036aq qtc801s qfe3320 sd710 mdm9607 qcn5122 qpm6621 pmw3100 pmx50 pm8018 qcn5022 sdr8250 sd768g pm8004 pm640l msm8940 pmk8002 qca8075 qcn6024 qcn9022 sd845 sdw2500 sdm830 smb1357 qpa5580 qpm5579 qfe2550 qcs610 qcn5550 pmi8996 qfe1045 qdm2307 qpa8802 qat3519 ipq8078a qtc800h qcs2290 qca6335 msm8917 qcn5064 qln1020 wtr3905 qca1990a qdm5671 pmc1000h qfe2330 qat3518 sd632 sd8c ipq8076a mdm9628 qpa5460 qca4020 qca6428 qdm5652 ipq8071 qpm8870 qpm5679 qbt2000 msm8909w wcd9360 sdx20m wtr1625l sdr735g wcn3999 qsm7250 pm8996 qcs6125 ipq6010 qcc1110 qcs405 smb1360 qfe3440fc qca6436 wcn6851 sa6155p qpa6560 msm8937 wcd9341 pmi8952 mdm9655 qca6431 qfe1101 sd750g qpm5657 qdm5650 wcn3988 qca6438 wtr3925 qfe2080fc sdr052 smb1390 qca9898 ipq4028 qet4100 wcn3610 msm8608 mdm9640 qpm6585 smb1355 ipq8072a qln4650 wcd9330 wgr7640 csr6030 qat5568 qet5100 sd636 qca6564au qcn5164 pm8994 pm7250b sdr735 smb1395 smb358s pm660l mdm9609 ar8151 smr526 wtr5975 qca6174 pmk8003 wcn3980 qsw8573 msm8939 qcs605 qbt1000 sd7c qca6320 wcn3910 wcn3680 qca9984 qfe4309 qcn9024 pm8009 qpa8675 sdx55m pm670a qfe4373fc msm8953 qsw8574 pmi8998 qfe2520 pm855l ipq8070 sd8655g qfe4302 pm670 wtr1605l qdm5677 pm8005 ipq6018 qdm2302 pmm6155au sdxr1 apq8096au qpm5875 qet5100m sa8155p sd675 wtr4605 sd439 qet4101 pm8952 qat3516 pm670l qpm5658 qcm2290 qfe4465fc sdr051 qcn9070 qln5030 pm4125 pmi632 pm456 qca9378 csra6620 qpa5373 qpm4621 qcn9072 sdr660g qfe2340 sd455 qpa8686 ipq6000 wcd9370 sdr425 ipq5018 qca9369 qcn7605 qpm5541 qat5516 sd662 qfe4308 pm8350bh apq8037 pm3003a qca6595au qtc800t smb1354 ipq5010 qdm2305 qca6310 qpm8820 pm8937 qpm2630 qfe2081fc qca9990 smb1398 sd821 sdr675 msm8992 sm6250 smb231 qfe1100 qca4010 qet4200aq qca8081 ipq8071a wcd9385 pmm8155au ar8035 csr8811 apq8064au qpa8673 qdm2310 msm8952 sda429w sd210 sd820 wcn3620 qca6564a smr546 pmx24 qet6110 qln5040 qca8072 qpm8895 sdr845 qpm5670 wcn3990 qcn9000 qtm527 pmk8350 sdx24 qcn9012 pm8350b wsa8835 msm8996au qfe1035 pmi8940 sm6250p rgr7640au qln1035bd pm855a ipq4018 qca6574a qca9889 qca6174a ipq8074 qpm4640 wcn6750 qpm4650 qtm525 sa515m wtr6955 qfe3335 sd855 sd8cx qfe4305 ipq8076 pm640p qcn5021 ipq8069 qcn5152 msm8209 sd460 qca6391 smb1351 ipq6005 msm8920 qcn9100 pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 sdx20 pm8916 qdm4650 mdm9215 pmd9655 qca6574au qsw6310 qcm6125 wsa8810 qdm2308 qat3550 wcn6856 qdm5679 wcn3680b qca6696 qfe4301 sm4350 apq8016 qpa2625 sa6150p ipq8070a sm7250p ipq4029 pm8956 sd850 pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:21

Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qfe3100 qfs2580 qfe2550 msm8960 qcs610 pmi8996 qdm5579 qfe1045 qdm2307 qfs2530 qpa8802 qln1030 pm6125 qat3519 mdm9645 pm8917 pm8150a sc8180x\+sdx55 qtc800h qdm5670 qcs2290 sa6155 qca6335 msm8917 pm7150l qpa8821 mdm8215 qln1020 apq8076 wtr3905 qdm5671 pmc1000h qfe2330 msm8630 qat3518 sd632 msm8108 sa415m wcn3998 wcn3950 sm4125 sd720g wtr1605 wtr2605 mdm9628 qpa5460 wcn3660b wtr2655 qfe4320 qcc112 qca4020 mdm8215m qdm5652 mdm9630 qpm8870 qpm5679 qbt2000 msm8909w pm855p qca6420 wcd9360 pm6150a wtr1625l msm8627 sdr735g wcn3999 pm8150b qsm7250 pm8996 qcs6125 pm8922 qfe2101 mdm9615m qca6430 qcc1110 qat3522 qfe4455fc pmr735a wtr1625 qcs405 smb1360 wcd9340 wfr2600 sd765g qfe3440fc wcd9320 sdr660 qca6436 wcn6851 sa6155p qpa6560 qfe3345 apq8052 msm8937 sdr865 smb1358 wcd9341 pmi8952 smr545 mdm9655 qca6431 qln5020 wcd9371 smb1350 sd750g qdm3302 sd_8cx wtr3950 sa8150p qpm5657 pm6350 qdm5621 qfe3340 qtc800s msm8226 sd660 qdm5650 sd712 wcn3988 wtr3925 qfe2080fc sdr052 smb1390 pm6150l sd450 qet4100 wcn3610 msm8608 mdm9640 qpm6585 qtc410s wcn3991 smb1355 qln4650 qpa8801 sdm429w wcd9330 wgr7640 qat5568 qet5100 qca6564au msm8230 pm6150 qca6574 pm7250b qfs2630 qpa8842 pmm8996au wcd9380 qualcomm215 mdm9230 qln4640 qcs410 smb1381 sdr735 pm7250 wtr4905 smb1395 pm660l qpa8803 ar8151 smr526 wtr5975 qca6174 pmk8003 wcn3980 pmd9645 qdm2301 qsw8573 qcs605 wsa8815 wcn6850 qbt1000 wcn3910 qca6320 smb1394 wcn3680 qca9984 pm8921 sd835 qfe4309 qca1990 pm8009 qpa8675 sd730 sdx55m pm670a qfe4373fc pm8008 msm8953 qsw8574 pmi8998 mdm9225 qfe2520 apq8064 pme605 mdm9225m pm855l qcs603 rsw8577 pmd9635 qfe4302 qpm5621 qpm6582 sd670 apq8009w qfe4303 pm670 pm8150l wtr1605l qdm5677 pm8005 qsm8250 sa6145p pm215 qdm2302 msm8626 pmm6155au sdxr1 ar8031 apq8096au wtr2965 wfr1620 pm8150 qpm5875 sdx55 qet5100m apq8053 sa8155p csra6640 pm8350bhs sd675 wtr4605 sd439 qet4101 pm8952 pmi8994 qat3516 pm670l wcd9310 pm8226 wcn3660 qpm5658 qca9379 pm855b smb2351 qln1031 qcm2290 qpm5870 pm8909 qfe1040 wsa8830 qfe4465fc pm660 rtr8600 sdr051 msm8960sg qln5030 msm8930 wcn2243 pm4125 qbt1500 qpa5581 pmi632 pm456 csrb31024 mdm9650 sd_636 csra6620 qpa5373 qpm4621 pmk8001 qcs4290 qet6100 pmm855au sdr660g qfe2340 qpa8686 pm8110 sd690_5g smb1396 pm7150a wcd9370 pm8350 qca6564 sdr425 qca6426 qpm5641 whs9410 qat5516 wtr2955 qdm5620 qln1021aq sd662 smb1380 qfe4308 pm8350bh mdm8635m apq8037 pm3003a sa8155 qca6584 qat5533 wcn3615 qca6595au msm8227 wtr2100 sm7350 qtc800t pm8940 qpm6670 smb1354 wcd9306 qca6584au qdm2305 qca6310 msm8208 qpm8820 qpm4641 pm8937 qpm2630 qfe2081fc pm855 sd429 sdxr2_5g pm8250 msm8962 mpq8064 smb1398 apq8084 sdm630 sd821 apq8062 qdm4643 msm8976sg pmx55 sd205 sdr675 qca6421 sm6250 qdm3301 sa8195p pm8953 qat5515 qca6694 qpm5677 smb231 qfe1100 qat3514 wcd9326 wcd9335 wcn3660a qet4200aq wcd9385 mdm8615m pm439 qpm5620 pmm8155au mdm9625 qpm4630 qca6390 wcd9375 ar8035 aqt1000 msm8956 msm8976 apq8064au pmm8195au qpa8673 qdm2310 qln4642 qca6694au apq8056 msm8952 ar9374 sda429w sd210 sd820 mdm9625m pmi8937 pm8998 pmk7350 sdw3100 wcn3620 apq8017 ar6003 mdm9235m qca6564a smr546 pmx24 qet6110 qfe1055 qln5040 qpm8895 sdr845 qpm5670 wcn3990 sd_675 apq8030 sd865_5g pm8019 qca6595 pmk8350 rtr8601 qpm8830 pm8350b qat5522 wsa8835 msm8996au apq8060a pm8150c pmr735b pmi8940 sd888_5g sm6250p rgr7640au qpa4360 qln1035bd pm855a qpa4361 qca6574a mdm9206 qca6174a pm8350c smr525 qpm4640 wcn6750 mdm9635m pmr525 mdm9615 pm7350c qpm4650 qtm525 wtr6955 qfe3335 pm8821 sd855 sd665 qfe4305 qca6175a sd765 pm640p pmd9607 msm8209 qat3555 apq8009 sd460 qca6391 smb1351 qpa5461 mdm9310 qfe2082fc msm8920 qsc1215 msm8610 pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 qfs2608 pm8916 qln1036aq qtc801s qdm4650 mdm9215 sd_455 pmd9655 qca6574au qfe3320 sd710 mdm9607 qsw6310 qcm6125 qpm6621 wsa8810 qdm2308 pmw3100 pmx50 pm8018 qat3550 wcn6856 qdm5679 sd_8c wcn3680b sdr8250 sd768g wcn6740 qca6696 qfe4301 pm8004 pm640l msm8940 pmk8002 qpa2625 sa6150p sd845 sm7250p sdm830 smb1357 mdm9330 pm8956 sd850 pm6250 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.40% / 59.56%

||

7 Day CHG~0.00%

Published-12 Nov, 2020 | 10:00

Updated-04 Aug, 2024 | 11:28

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8064AU, APQ8096, APQ8096AU, APQ8096SG, APQ8098, MDM9206, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QCS6125, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA429W, SDA640, SDA660, SDA670, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM455, SDM630, SDM632, SDM636, SDM640, SDM660, SDM670, SDM710, SDM830, SDM845, SDW2500, SDX20, SDX20M, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330

Vendor-Qualcomm Technologies, Inc.

Product-sm7250 sm6250p_firmware qcs610 sm6125 sdm640 sdm450_firmware sdm632 sm7250_firmware mdm9650 qcs4290 sa6155 apq8009_firmware msm8917 sdm670 sm8350 qcs605_firmware qcs6125_firmware apq8096sg sm6115 sm7150p sda845_firmware sdw2500_firmware apq8098 sm4250 sm4125 mdm9206_firmware qsm8350_firmware qsm8350 apq8037 sa8155 msm8905_firmware sda660 sdx55_firmware sa6155_firmware sxr1130 msm8909w sm7250p_firmware apq8009w_firmware sxr2130p apq8053_firmware sda845 sdx20m sa6155p_firmware sxr2130p_firmware sda640 sdm450 sdm636_firmware apq8098_firmware qcs6125 msm8998_firmware sa8155_firmware sdm630 sm8250_firmware qcs405 msm8996sg_firmware sa6145p_firmware qm215 sm4250_firmware sm6250 sdm830_firmware apq8017_firmware sdm710_firmware sxr1120 sa6155p qcs603_firmware msm8937 msm8905 sm8350p_firmware qcs4290_firmware sm8150_firmware msm8909 sm7150p_firmware sxr2130_firmware apq8064au sm6250_firmware msm8953_firmware sm6150_firmware sda429w msm8917_firmware msm8998 sm7225_firmware sdx20_firmware sm8150 sdm640_firmware apq8017 msm8996 sxr1120_firmware sm6125_firmware sm8150p qcm6125_firmware sm6115_firmware sda429w_firmware apq8096_firmware sdm429w msm8996au_firmware sdm632_firmware wcd9330 sdm845 apq8096 sdx55m_firmware sdm439 sm6150p sm6115p_firmware sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware apq8096sg_firmware sm7150 sm6250p qcs410 sda640_firmware sxr2130 sdx50m_firmware mdm9206 sm8350p sdm670_firmware sdm636 sda670 sm7225 qcs605 sm6115p sm4125_firmware sdm455_firmware msm8937_firmware mdm9650_firmware sdm429_firmware sxr1130_firmware apq8009 wcd9330_firmware msm8909_firmware sdx55m sm6150p_firmware sdm455 sm6350 sm7125 sm4250p_firmware msm8920 msm8953 apq8064au_firmware qcm4290 msm8996sg sdx50m sdx20 sm8350_firmware qcs603 sdm660 msm8920_firmware sm6350_firmware sa8155p_firmware sdm710 apq8009w sda670_firmware qcm6125 qcm4290_firmware sdx20m_firmware qcs610_firmware msm8996_firmware sa6145p sm4250p apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware sm7125_firmware sdw2500 sdx55 msm8940 apq8053 apq8096au_firmware sa8155p sm8250 sm8150p_firmware apq8037_firmware sm7250p sdm830 qcs410_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.42% / 61.08%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 19:00

Updated-17 Sep, 2024 | 04:04

While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read can potentially occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.26% / 49.20%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 20:03

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while parsing a private frame in an ID3 tag, a buffer over-read can occur when comparing frame data with predefined owner identifier strings.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 09:14

Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 mdm9635m sd_8cx_firmware mdm9615 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_652_firmware sxr1130 msm8909w sd_205_firmware sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 sd_625 qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware mdm9150 sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_855_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 qm215_firmware sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.78%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:35

Updated-05 Aug, 2024 | 08:24

Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.78%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 08:24

While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware sd_632 mdm9640_firmware sd_820a msm8996au_firmware sd_439 sdx20 sd_415 sd_616 sd_425 sd_429 sdm439 mdm9607_firmware sd_615 mdm9650 sd_650_firmware sd_625 qca6574au sd_615_firmware msm8909w_firmware mdm9607 msm8996au qm215 sd_210 sd_650 sd_820_firmware sd_820 sd_450_firmware sd_439_firmware sd_820a_firmware mdm9150 sd_429_firmware mdm9206 sd_652 qca6174a_firmware qca6174a qca9379_firmware sd_212_firmware sd_425_firmware sd_625_firmware sd_450 sdm439_firmware qca9377 mdm9206_firmware qm215_firmware sd_632_firmware mdm9650_firmware sdx20_firmware sd_205 qca6574au_firmware sd_210_firmware sd_415_firmware sd_652_firmware msm8909w qca9379 sd_616_firmware sd_205_firmware sd_212 mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 50.35%

||

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qfe3100 qfs2580 qca1023 qca8337 ar9380 qfs2530 qln1030 qpa8688 pm6125 qcn5124 mdm9645 pm8150a qdm5670 sa6155 pm7150l qpa8821 mdm8215 apq8076 qfe2320 msm8108 sa415m wcn3998 wcn3950 sm4125 sd720g wtr1605 wcn3660b qfe4320 qcc112 sd6905g pm855p qca6420 pm6150a pm8150b qca0000 qfe2101 qca6430 qat3522 qfe4455fc pmr735a wcd9340 sd765g sdr660 qfe3345 sdr865 smb1358 smr545 qln5020 wcd9371 smb1350 pmm8920au sa8150p wtr3950 pm6350 qdm5621 qfe3340 qtc800s sd660 sd712 qcn5121 pm6150l sd450 sd8885g qtc410s wcn3991 qpa8801 ipq8078 ipq8173 sdxr25g pm6150 qca6574 qfs2630 qpa8842 pmm8996au wcd9380 qualcomm215 qln4640 qcs410 smb1381 qcn5024 pm7250 wtr4905 qpa8803 pmd9645 qdm2301 wsa8815 wcn6850 qpm6375 ipq6028 ipq8064 sd835 pmp8074 qca1990 sd730 pm8008 pme605 qca6234 qcn5054 qcs603 rsw8577 qca9994 qca9980 qpm5621 qpm6582 sd670 qfe4303 wcn6855 pm8150l sa6145p pm215 ar8031 qpm5577 wtr2965 pm8150 qca4024 sdx55 apq8053 csra6640 pmi8994 wcn3660 qca9379 pm855b smb2351 qln1031 qcn7606 qpm5870 pm8909 qfe1040 wsa8830 pm660 qpm6325 qbt1500 qpa5581 csrb31024 mdm9650 qca9378a pmk8001 qca9992 qcs4290 pmm855au qet6100 mdm9250 smb1396 pm7150a ipq8072 pm8350 qca6564 qca6426 qca9377 qca4531 qpm5641 whs9410 wtr2955 qdm5620 qln1021aq ipq8074a smb1380 apq8094 sa8155 qca6584 qat5533 wcn3615 pm8940 qpm6670 wcd9306 qca6584au msm8208 qpm4641 ipq8174 pm855 sd429 pm8250 qcn5052 qca9367 apq8092 sdm630 qdm4643 pmx55 qcn9074 sd205 qca6421 qdm3301 sa8195p pm8953 qat5515 qca6694 qpm5677 qat3514 wcd9326 wcd9335 qcn6023 pm439 qpm5620 qpm4630 qca6390 wcd9375 aqt1000 msm8976 pmm8195au qln4642 msm8994 qfe2310 pmi8937 pm8998 msm8916 apq8017 pm8019 qca6595 qpm8830 apq8039 qat5522 pm8150c pmr735b qpa4360 qcn5154 qpa4361 mdm9206 pm8350c smr525 qca9888 pmr525 mdm9615 msm8929 qca9886 sd665 qca6175a sd765 pmx20 pmd9607 qat3555 apq8009 qpa5461 mdm9310 qfe2082fc qfs2608 qln1036aq qtc801s qfe3320 sd710 mdm9607 qcn5122 qpm6621 pmx50 pm8018 qcn5022 sdr8250 sd768g pm8004 pm640l msm8940 pmk8002 qca8075 qcn6024 qcn9022 sd845 sdm830 smb1357 qpa5580 qpm5579 qfe2550 qcs610 qcn5550 pmi8996 qfe1045 qdm2307 qpa8802 qat3519 ipq8078a qtc800h qcs2290 qca6335 msm8917 qcn5064 qln1020 wtr3905 qca1990a qdm5671 pmc1000h qfe2330 qat3518 sd632 sd8c ipq8076a mdm9628 qpa5460 qca4020 qca6428 qdm5652 ipq8071 qpm8870 qpm5679 qbt2000 wcd9360 sdx20m wtr1625l sdr735g wcn3999 qsm7250 pm8996 qcs6125 ipq6010 smb1360 qcs405 qfe3440fc qca6436 wcn6851 sa6155p qpa6560 msm8937 wcd9341 pmi8952 mdm9655 qca6431 sd750g qpm5657 qdm5650 wcn3988 qca6438 wtr3925 qfe2080fc sdr052 smb1390 qca9898 ipq4028 qet4100 wcn3610 msm8608 mdm9640 qpm6585 smb1355 ipq8072a qln4650 wcd9330 wgr7640 csr6030 qat5568 qet5100 sd636 qca6564au qcn5164 pm8994 pm7250b sdr735 smb1395 smb358s pm660l ar8151 smr526 wtr5975 qca6174 pmk8003 wcn3980 qsw8573 msm8939 qcs605 qbt1000 sd7c qca6320 wcn3910 wcn3680 qca9984 qfe4309 qcn9024 pm8009 qpa8675 sdx55m pm670a qfe4373fc msm8953 qsw8574 pmi8998 qfe2520 pm855l ipq8070 sd8655g qfe4302 pm670 qdm5677 pm8005 ipq6018 qdm2302 pmm6155au sdxr1 apq8096au qpm5875 qet5100m sa8155p sd675 wtr4605 sd439 qet4101 pm8952 qat3516 pm670l qpm5658 qcm2290 qfe4465fc sdr051 qcn9070 qln5030 pm4125 pmi632 pm456 qca9378 csra6620 qpa5373 qpm4621 qcn9072 sdr660g qfe2340 sd455 qpa8686 ipq6000 wcd9370 sdr425 ipq5018 qca9369 qcn7605 qpm5541 qat5516 sd662 qfe4308 pm8350bh apq8037 pm3003a qca6595au qtc800t smb1354 ipq5010 qdm2305 qca6310 qpm8820 pm8937 qpm2630 qfe2081fc qca9990 smb1398 sd821 sdr675 msm8992 sm6250 smb231 qfe1100 qca4010 qet4200aq qca8081 ipq8071a wcd9385 pmm8155au ar8035 csr8811 apq8064au qpa8673 qdm2310 sd210 sd820 wcn3620 qca6564a smr546 pmx24 qet6110 qln5040 qca8072 qpm8895 sdr845 qpm5670 wcn3990 qcn9000 qtm527 pmk8350 sdx24 qcn9012 pm8350b wsa8835 msm8996au qfe1035 pmi8940 sm6250p rgr7640au qln1035bd pm855a ipq4018 qca6574a qca9889 qca6174a ipq8074 qpm4640 wcn6750 qpm4650 qtm525 sa515m wtr6955 qfe3335 sd855 sd8cx qfe4305 ipq8076 pm640p qcn5021 ipq8069 qcn5152 msm8209 sd460 qca6391 smb1351 ipq6005 msm8920 qcn9100 mdm9626 pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 sdx20 pm8916 qdm4650 mdm9215 pmd9655 qca6574au qsw6310 qcm6125 wsa8810 qdm2308 qat3550 wcn6856 qdm5679 wcn3680b qca6696 qfe4301 sm4350 apq8016 qpa2625 sa6150p ipq8070a sm7250p ipq4029 pm8956 sd850 pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.33%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 15:00

Updated-16 Sep, 2024 | 18:09

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 820, SD 820A, SD 835, SD 845, while playing an ASF file, a buffer over-read can potentially occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.07% / 22.39%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN Host Cmn

Memory corruption during management frame processing due to mismatch in T2LM info element.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware immersive_home_214 wcn6650 ipq9574 qcn9000_firmware qca6595 qcn9022 ipq6028_firmware wcd9370 qca8081_firmware qca6696 qam8620p_firmware wcn7880_firmware wcd9340_firmware sa8530p ipq5028_firmware wcd9395_firmware sxr2330p_firmware qcn6024 wcn7881_firmware wcn6450 qcc2073_firmware qcc710_firmware ipq8076 fastconnect_6700 qcn6422_firmware ipq6018_firmware qcn6023 qcn5124_firmware wsa8832_firmware qca8337 wcd9395 ipq9048 ipq6000 qca6574au_firmware ipq8078a snapdragon_x72_5g_modem-rf ipq8078a_firmware qam8295p ipq5312 qca6574au wcd9390 sa8620p_firmware wsa8845h_firmware sa9000p_firmware srv1h qcn9100_firmware qcn5122 qcs9100 qca6554a qcs5430 wcn7860 qcn6024_firmware qcm5430 qcm5430_firmware sa8770p qcn9000 ssg2115p qcc710 qcn6132_firmware sa8540p qca6777aq fastconnect_6900 qcn6402 qcn6432 immersive_home_326_firmware ipq5332_firmware sa7255p sm8635 qcn5052 qfw7114 wcd9385_firmware ipq9574_firmware qam8255p_firmware ipq8074a_firmware ipq8076a qcn5164 snapdragon_x65_5g_modem-rf qca6787aq wsa8845 sa6155p qcn9160 qca6564au_firmware csr8811_firmware qca8075 qam8650p video_collaboration_vc5_platform_firmware sa9000p qca8085 srv1h_firmware qca6595au sxr2250p_firmware sa6155p_firmware wsa8840 snapdragon_ar1_gen_1 srv1m_firmware qcs8550_firmware snapdragon_8_gen_2_mobile_firmware qfw7124_firmware sm8750p qcn9012 ipq8070a_firmware qcn9070 qcf8001 qca8084 sm8635p snapdragon_8_gen_2_mobile sdx65m wcd9370_firmware qcc2076 sa7255p_firmware qca6574a snapdragon_x72_5g_modem-rf_firmware ipq9570 snapdragon_8\+_gen_2_mobile sa8195p wcd9340 qcs8250_firmware snapdragon_auto_5g_modem-rf_gen_2 qcm6490 ipq5302 sa8540p_firmware qcn6122_firmware qcn5154_firmware ipq9048_firmware sm8550p_firmware sxr2250p qcm8550 qcn5122_firmware qcn9274 qcn9024 ipq8076a_firmware sa8775p qca6574 ipq9570_firmware sxr2230p_firmware qca6777aq_firmware sa8775p_firmware qamsrv1h qcn6412_firmware qcn9024_firmware wsa8845h qca8082 sa8155p_firmware sa8155p wsa8830 ipq5312_firmware sm8550p qcf8000_firmware qcn9074_firmware ipq8174 immersive_home_318_firmware qcn6122 sa8255p_firmware sm7675_firmware qcc2073 ipq8174_firmware ar8035 sm7635_firmware ipq8072a qamsrv1m_firmware sa8650p_firmware immersive_home_216_firmware wcn6450_firmware immersive_home_316 qcf8000sfp_firmware srv1l_firmware qcs9100_firmware qcn6224 ipq8071a qcs615 qcn6112 qca6698aq qxm8083 sa7775p_firmware sm7635 ssg2125p_firmware sa8530p_firmware wcd9378 sm8635p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware qcn6023_firmware qcn5164_firmware snapdragon_x75_5g_modem-rf_firmware ipq8078 snapdragon_8_gen_3_mobile qcs6490 qcs8250 ipq9554_firmware qcn9072 wsa8830_firmware qcn6224_firmware qca6678aq_firmware qca8386_firmware wsa8845_firmware wsa8832 qca8082_firmware wcd9378_firmware qcc2076_firmware srv1l immersive_home_216 sm7675p srv1m qca6678aq qcn6432_firmware ar8035_firmware qcn5022_firmware wcn7860_firmware qca4024_firmware qca0000_firmware ipq9008 ipq9554 qca6564au ipq9008_firmware qcn9074 ipq5300_firmware sa8195p_firmware qca8337_firmware qca9888 ipq5332 sg8275p_firmware ipq8173 qcm6490_firmware ipq8072a_firmware ipq6010_firmware qcn6112_firmware sm8750 qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware ipq5028 qca8085_firmware qcf8001_firmware qcn9070_firmware sa8295p_firmware qcn9022_firmware ipq5010_firmware qcn6132 ipq6018 qcn9160_firmware qca6584au qcn6274_firmware wcn6755_firmware wcn6650_firmware snapdragon_8_gen_3_mobile_firmware qfw7114_firmware qca4024 qcs7230 qca6595_firmware fastconnect_7800_firmware qcn6422 immersive_home_214_firmware ipq5302_firmware qxm8083_firmware ipq5300 ipq8070a sm8635_firmware fastconnect_6900_firmware wcd9380 qam8255p sxr2230p wcn7880 sxr2330p qca8075_firmware wcn6755 immersive_home_3210 qcf8000 qcn5052_firmware sxr1230p wcn7881 sm6650 ipq6010 sdx65m_firmware video_collaboration_vc3_platform qca6688aq qam8295p_firmware qcn6402_firmware qca6698aq_firmware wcd9385 qca8084_firmware sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware qcn5024 qcs615_firmware sg8275p sdx55_firmware immersive_home_326 ipq8071a_firmware sm8750_firmware ssg2125p qca6554a_firmware ipq6028 snapdragon_x65_5g_modem-rf_firmware qcn9100 qamsrv1m wcn7861_firmware wcn7861 qam8650p_firmware video_collaboration_vc5_platform qcs6490_firmware sm6650_firmware ipq8076_firmware qam8620p qca6584au_firmware qcn5152_firmware qcn6274 qfw7124 wsa8835 wsa8840_firmware qca6391_firmware qca6595au_firmware qca0000 qcs8300_firmware qca6696_firmware qcs8300 wcd9380_firmware qca6574_firmware qca8081 qcn5124 qam8775p snapdragon_ar2_gen_1_firmware qca6797aq qcn5152 snapdragon_x75_5g_modem-rf qcn6412 sa8620p qca6574a_firmware sdx55 qcn9072_firmware qca9888_firmware ipq8074a immersive_home_3210_firmware qca9889 qcn5024_firmware qca6787aq_firmware wcd9375_firmware qca8386 snapdragon_ar1_gen_1_firmware qca6391 immersive_home_318 ipq5010 qcn9274_firmware sa7775p ipq8173_firmware qcs5430_firmware qcn9012_firmware sa8770p_firmware sa8295p qcs8550 ipq6000_firmware fastconnect_7800 sa8650p qam8775p_firmware sm8750p_firmware wcd9375 snapdragon_8\+_gen_2_mobile_firmware ipq8078_firmware qca6688aq_firmware qca9889_firmware snapdragon_ar2_gen_1 immersive_home_316_firmware qamsrv1h_firmware sm7675 qcn5154 wsa8835_firmware ssg2115p_firmware csr8811 qcn5022 sm7675p_firmware qcf8000sfp Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.50%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access can occur during a CA call.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.29% / 52.31%

||

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 07:44

u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE is equivalent to Link Layer Length Overfow issue (CVE-2019-16336,CVE-2019-17519) and Silent Length Overflow issue(CVE-2019-17518) mentioned in sweyntooth paper)' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8076, AR9344, Bitra, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8917, MSM8937, MSM8940, MSM8953, Nicobar, QCA6174A, QCA9377, QCM2150, QCM6125, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SC8180X, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware kamorta_firmware qcm2150_firmware qcs610 sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 qcs404_firmware sdm429 msm8940_firmware sm7150_firmware sm6150 ar9344 sm7150 msm8917 sdm670 qcs605_firmware apq8076 sc8180x mdm9206 qca6174a sdm670_firmware qcs404 sdx24_firmware apq8076_firmware sdm636 qca9377 bitra mdm9206_firmware qcs605 bitra_firmware msm8937_firmware sdm429_firmware msm8905_firmware sxr1130_firmware sxr1130 apq8053_firmware nicobar msm8953 sdm450 sdm636_firmware sdx20 qcm2150 sdm660 sdm630 mdm9607_firmware sc8180x_firmware qcs405 sdm710 qm215 mdm9607 sdm710_firmware qcm6125 qcs610_firmware msm8937 mdm9207c_firmware msm8905 mdm9207c qca6174a_firmware sm8150_firmware sdm439_firmware qcs405_firmware rennell sdm630_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 msm8917_firmware sm8150 ar9344_firmware sdx20_firmware kamorta nicobar_firmware sdm660_firmware qcm6125_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.8||HIGH

EPSS-0.13% / 33.10%

||

7 Day CHG+0.01%

Published-26 Nov, 2024 | 08:55

Updated-09 Jan, 2025 | 21:01

Multiple buffer overread vulnerabilities in WLAN

In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.

Vendor-Qualcomm Technologies, Inc.

Product-sd_820a sd_845 sd_625_firmware sd_820 sd_625 sd_850 sd_820a_firmware sd_835_firmware sd_450_firmware sd_820_firmware sd_835 sd_450 sd_850_firmware sd_845_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 18:42

Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_632 mdm9635m_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sd_665 sd_625_firmware sd_450 mdm9635m sd_8cx_firmware mdm9615 mdm9205 mdm9206_firmware sd_845 qcs605 sd_632_firmware sd_835_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_652_firmware sxr1130 msm8909w sd_665_firmware sd_205_firmware sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware sd_412 qualcomm_215 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware mdm9625_firmware sd_439_firmware qualcomm_215_firmware sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_412_firmware sd_712_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 sd_8cx sd_430 sd_427 sd_670 sd_435_firmware mdm9615_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-330

Use of Insufficiently Random Values

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:49

Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 mdm9615 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_600 sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.05% / 16.50%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:42

Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9635m_firmware qcm2150_firmware mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8976_firmware msm8996au mdm915_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware msm8939 qcs605 mdm915 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware mdm9655_firmware sdm660 sc8180x_firmware sdm710 qm215 mdm9607 apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware msm8937 msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 qm215_firmware msm8976 sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 mdm9615_firmware apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-345

Insufficient Verification of Data Authenticity

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:49

Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 mdm9615 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_600 sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:49

Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-1187

DEPRECATED: Use of Uninitialized Resource

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 47.69%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 18:49

The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, Nicobar, QCM2150, QM215, SC8180X, SDM429, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-msm8920 qcm2150_firmware msm8953 sdm450 sdm632_firmware sdm450_firmware sdm632 qcm2150 msm8920_firmware sdm439 sdx24 sc8180x_firmware sdm429 msm8940_firmware sm7150_firmware sm6150 qm215 sm7150 msm8917 msm8937 sc8180x msm8905 sm8150_firmware msm8909 sdx24_firmware sdm439_firmware qm215_firmware sdx55 msm8940 msm8953_firmware sm6150_firmware msm8917_firmware msm8937_firmware sdm429_firmware sm8150 msm8905_firmware sdx55_firmware nicobar_firmware msm8909_firmware nicobar Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-330

Use of Insufficiently Random Values

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-04 Aug, 2024 | 18:42

Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_625_firmware sd_450 sd_8cx_firmware sd_845 qcs605 sd_632_firmware sd_835_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sxr1130 msm8909w sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware sd_425 sdm660 sd_430_firmware sd_710_firmware sd_435 sdm630 sd_625 qm215 sd_210 sd_636_firmware sd_820_firmware sd_439_firmware sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_427 sd_430 sd_8cx sd_670 sd_435_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-400

Uncontrolled Resource Consumption

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_600 sd_415_firmware msm8909_firmware sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware msm8909 sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.32%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:49

When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 845 / SD 850, SD 855, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware mdm9640_firmware sd_820a sd_675 sd_670_firmware sdx24 mdm9650 sd_615_firmware msm8909w_firmware sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 mdm9615 sd_845 mdm9206_firmware mdm9640 mdm9650_firmware sd_210_firmware sd_600 sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_616 sd_425 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sd_625 sd_210 mdm9607 sd_820_firmware mdm9150 sd_730 sd_212_firmware sd_850_firmware sd_712_firmware sd_427 sd_430 sd_670 sd_435_firmware mdm9615_firmware sd_710 sdx20_firmware sd_600_firmware sd_205 sd_855_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware qcm2150_firmware mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8976_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware mdm9655_firmware sdm660 sdm710 qm215 mdm9607 apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 qm215_firmware msm8976 sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 mdm9615_firmware apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.20% / 78.09%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 18:42

Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sd_625_firmware sd_450 sd_8cx_firmware sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sxr1130 msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 qualcomm_215 sd_425 sdm660 sd_430_firmware sd_710_firmware sd_435 sdm630 sd_625 sd_210 sd_820_firmware sd_636_firmware sd_439_firmware qualcomm_215_firmware sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_427 sd_430 sd_670 sd_435_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 18:49

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8098, IPQ8074, MDM9206, MDM9207C, MDM9607, MSM8996, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCA9886, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware apq8096_firmware msm8996au_firmware sdm845 apq8096 sm7150_firmware sm6150 msm8996au sm7150 apq8009_firmware sdm670 qcs605_firmware mdm9206 qca9379_firmware qca6174a sdm670_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 mdm9206_firmware qcs605 qca9886 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 sdm850_firmware sdm636_firmware apq8098_firmware msm8998_firmware sdm660 sdm630 mdm9607_firmware ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qca8081 mdm9207c_firmware msm8996_firmware mdm9207c qca6174a_firmware qca9886_firmware sm8150_firmware sdm630_firmware sda660_firmware apq8053 sm6150_firmware msm8998 sm8150 sdm850 apq8017 msm8996 qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-04 Aug, 2024 | 18:42

Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearable in MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_632 sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_600 sd_652_firmware sd_415_firmware msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 sd_625 qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Wearable

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 18:49

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996, MSM8996AU, MSM8998, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCS605, SA6155P, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware apq8096_firmware mdm9640_firmware msm8996au_firmware sdm845 apq8096 sdx24 mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 qcs605_firmware mdm9206 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 mdm9206_firmware qca6574_firmware qca9886 qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware sa6155p qca8081 mdm9207c_firmware msm8996_firmware mdm9207c qca6174a_firmware qca9886_firmware sm8150_firmware apq8096au sdm630_firmware sda660_firmware apq8053 sm6150_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.32%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_652 sd_425_firmware sd_665 sd_625_firmware sd_450 mdm9635m sd_8cx_firmware mdm9615 sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sd_652_firmware sxr1130 msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware mdm9625_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_855_firmware sd_712_firmware sdm630_firmware sda660_firmware mdm9625 sd_8cx sd_430 sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.40% / 60.00%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:49

While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8976, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA845, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware sdm636_firmware sdm845_firmware msm8996au_firmware sdm845 sdx20 sdm660 sdx24 mdm9607_firmware mdm9650 qcs405 qca6574au sdm710 msm8909w_firmware mdm9607 msm8976_firmware msm8996au sm6150 apq8017_firmware sdm710_firmware qcn7605_firmware sdm670 qcs605_firmware mdm9207c_firmware mdm9206 msm8905 mdm9207c qca6174a_firmware qca6174a qca9379_firmware sdm670_firmware sm8150_firmware msm8909 sdx24_firmware apq8096au sdm636 qcs405_firmware qca9377 sda845_firmware qcn7605 mdm9206_firmware qcs605 msm8976 apq8053 apq8096au_firmware sm6150_firmware mdm9650_firmware sm8150 sdx20_firmware msm8905_firmware qca6574au_firmware apq8017 msm8909w qca9379 msm8909_firmware apq8053_firmware sdm660_firmware sda845 mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.66% / 70.07%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-04 Aug, 2024 | 18:42

An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_625_firmware sd_450 sd_8cx_firmware sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sxr1130 msm8909w sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_425 sdm660 sd_430_firmware sd_710_firmware sd_435 sdm630 sd_625 qm215 sd_210 sd_636_firmware sd_820_firmware sd_439_firmware sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware qm215_firmware sd_427 sd_430 sd_8cx sd_670 sd_435_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.31%

||

7 Day CHG~0.00%

Published-09 Jun, 2021 | 05:00

Updated-04 Aug, 2024 | 11:21

Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame are not Properly validated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qfs2580 qpm5679_firmware sm6250p_firmware qca8337 ipq8173_firmware qfs2608_firmware qfs2530 qpm8870_firmware qpa8688 pm6125 qcn5124 qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpm5541_firmware qpa5581_firmware sa6155 pm7150l qpa8821 qcs6125_firmware pm456_firmware qpa5580_firmware wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 qsw8573_firmware qsw8574_firmware sd460_firmware smb2351_firmware qpa4360_firmware qca8081_firmware wcn3998_firmware pm855p qca6420 pm6150a qpm6670_firmware ipq8070_firmware ipq8078a_firmware pm8150b ipq8072_firmware sa8155_firmware qca6430 qat3522 pmr735a wcd9340 sd765g sdr660 qfs2630_firmware sdr865 qdm5620_firmware qca9888_firmware qca6696_firmware qln5020 wcd9371 qcn5154_firmware pmm855au_firmware sd_8cx sa8150p pm6350 qdm5621 sd865_5g_firmware pm640p_firmware qcn5121 qcn5022_firmware qcn7606_firmware qat5516_firmware pm6150l wcn6750_firmware pm855l_firmware qca6428_firmware qtc410s wcn3991 qpa8801 ipq8078 pm8150l_firmware ipq8173 qat5533_firmware sdx55m_firmware qpa8673_firmware pm6150 smb1354_firmware qca6574 qfs2630 qpa8842 csr8811_firmware sdr052_firmware wcd9380 qln4640 qcs410 qpm5579_firmware pmk8350_firmware qcn5024 pm855p_firmware sd690_5g_firmware smb1381 pm7250 qpa8803 qcn9012_firmware qdm2301 ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qdm5621_firmware qdm2301_firmware qpm6375 sd_8c_firmware ipq6028 pmp8074 wcn3980_firmware sd730 pm6250_firmware pm8008 pm8350b_firmware qtm525_firmware qcn5064_firmware ipq8078_firmware qpm5621_firmware qcn5054 qln1021aq_firmware qpa6560_firmware qpa8802_firmware qln4640_firmware qpm5621 qpm6582 qcn9024_firmware ipq8174_firmware pm8009_firmware qfs2580_firmware wcn6855 qcn7605_firmware pm8150l qcs610_firmware sa6145p ar8031 qpm5577 wtr2965 qca6391_firmware pm8150 qca4024 wcd9370_firmware qat3516_firmware sdx55 qcn5021_firmware csra6640 qat3555_firmware qpa8803_firmware pm855b smb2351 qln1031 qcn7606 qpm5870 wsa8830 qet6110_firmware qpm6325 pm6125_firmware qbt1500 qpa5581 qbt1500_firmware qpm5870_firmware qet6100 pmm855au qca6420_firmware sd690_5g smb1396 pm7150a sd675_firmware ipq8072 pm8350 qpa5461_firmware qpa4361_firmware pm8350c_firmware qca6426 wcn3990_firmware qca9984_firmware qpm5641 wcd9385_firmware qdm5650_firmware sdxr2_5g_firmware whs9410 pm7250_firmware qdm5620 qln1021aq ipq8074a pmk8002_firmware qsw6310_firmware sa8155 qln1031_firmware qdm4650_firmware qcn5122_firmware sdx55_firmware qat5533 qcn6023_firmware sm7250p_firmware qsm7250_firmware qpm6670 pm7150l_firmware qca6584au qpm4641 qat5515_firmware ipq8174 pm855 qpm8830_firmware pm8250 qcn5052 qdm4643 qfs2530_firmware wcn3988_firmware pmx55 qpm4641_firmware qcn9074 pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware qpm5677 qat5515 qca6694 wcd9335 pm6350_firmware qcn6023 pm8004_firmware sdr8150_firmware qtc800h_firmware qpm5620 qpm4630 qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware qln4642 qpm5677_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware smr525_firmware wsa8815_firmware wtr3925_firmware qpm8820_firmware qpm6621_firmware qcm6125_firmware pmx55_firmware sd865_5g qca6595 pm8150_firmware smb1398_firmware qpm8830 qat5522 pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qcn5154 qca8075_firmware qpa4361 ipq6005_firmware qpm4640_firmware qpm5577_firmware wcn6855_firmware qdm5679_firmware pm8350c smr525 qca9888 ipq8070a_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware qca6175a sd765 qca6574a_firmware qpm4630_firmware qat3555 qpa5461 wtr2965_firmware qfs2608 qcn9070_firmware qln1036aq qtc801s ipq6028_firmware ipq8072a_firmware qpm5641_firmware qca9889_firmware qcn5122 pm8008_firmware qpm6621 pmr735a_firmware pmx50 qcn5022 sdr8250 sd768g pm8004 pm640l pmk8002 qca8075 qcn6024 qcn9022 ipq6000_firmware qcs410_firmware qca6175a_firmware qpa5580 qpm5579 sa6150p_firmware qcs610 qcn5550 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware qca4024_firmware pm855a_firmware ipq8078a qtc800h sa8150p_firmware sdr8250_firmware qcn5064 csra6620_firmware sd_675_firmware qdm5671 csra6640_firmware pmc1000h qpm4650_firmware qat3518 sdr425_firmware smr526_firmware ipq8076a pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware qca6428 qdm5652 qca6574au_firmware qcn5164_firmware ipq8071 qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware wcd9360 qca6438_firmware pmx50_firmware qpa8675_firmware whs9410_firmware sdr735g wcn3999 qdm3301_firmware qsm7250 qcs6125 ipq6010 sd662_firmware qcs405 qdm2308_firmware qca6436 wcn6851 sa6155p qpa6560 sdr675_firmware pmc7180 wcd9341 qdm4643_firmware qca6431 qet4100_firmware sd750g wcn3910_firmware qpm5657 qpm5875_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 qca6438 wtr3925 sdr052 sa8195p_firmware smb1390 qet4100 qpa8686_firmware ipq5018_firmware qpm6585 qca8337_firmware wcd9380_firmware smb1355 ipq8072a qln4650 sdr735g_firmware wgr7640 ipq8076a_firmware qat5568 qdm5671_firmware qet5100 qca6564au qpa8801_firmware qtm527_firmware wcn6856_firmware qcn5164 qet4101_firmware pm7250b qln4642_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware qcn5054_firmware qet4200aq_firmware sdx50m_firmware sdr735 smb1395 smr526 qca8072_firmware qca6430_firmware pmk8003 qcn5052_firmware qtc801s_firmware qat3522_firmware wcd9335_firmware wcn3980 qsw8573 sd7c wcn3910 qca6426_firmware pm8350_firmware qca9984 qcn9024 pm8009 qpa8675 qcn5550_firmware sdr051_firmware sdx55m qca6421_firmware qat3518_firmware qsw8574 ar8031_firmware pm855l wcn6851_firmware qdm5670_firmware ipq8070 pm7150a_firmware pm8150b_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware qcn5121_firmware qdm5677 ipq6018 pm855_firmware qdm2302 pm855b_firmware qca6595_firmware qcs405_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware qln4650_firmware qpm5875 qet5100m sa8155p sd675 qet4101 qat3516 qpm5658 ar8035_firmware qpm5658_firmware qcn5024_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware sdr051 qcn9070 qln5030 pm4125 pmi632 qpa2625_firmware pm456 sd7c_firmware pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qpm4621 qcn9072 qet6100_firmware sdr660g sd765g_firmware qpa8686 qca6390_firmware ipq6000 sd730_firmware wcd9370 qcn5152_firmware sdr425 pmr525_firmware qca6584au_firmware qcn9000_firmware ipq5018 pmi632_firmware sd_8cx_firmware qcn7605 qpm5541 qat5516 sd662 qpa8821_firmware qcn5124_firmware sdr660g_firmware pm8350bh pm3003a qca6595au wcn3999_firmware qca6436_firmware smb1354 ipq5010 qca6564au_firmware qdm2305 sa6155p_firmware qpm8820 qln5020_firmware sa515m_firmware sdxr2_5g smb1398 sa6145p_firmware sdr675 sm6250 wsa8810_firmware sd765_firmware qdm5677_firmware qca8081 qet4200aq ipq8071a ipq8071a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware ar8035 csr8811 qpa8673 qca6694_firmware qdm2310 qln5030_firmware qcn9100_firmware smb1396_firmware wcn6850_firmware wsa8835_firmware qca6564a qet6110 qln5040 qca8072 qpm8895 qpm5670 wcn3990 qcn9000 sd_675 qtm527 pmk8350 qcn9012 pmc7180_firmware pm8350b qdm2307_firmware wsa8835 qpm5657_firmware sd888_5g sm6250p pm855a sdr660_firmware qca6574a smb1390_firmware qca9889 ipq8074 qpm4640 wcn6750 qet5100m_firmware ipq8076_firmware qpm4650 qtm525 sa515m sd855 sm4125_firmware ipq8076 pm640p qcn5021 qcn5152 sd768g_firmware sdr865_firmware pm8250_firmware sd460 qca6391 smb1351 ipq6005 aqt1000_firmware qcn9100 qpm8895_firmware sdx50m pm640a sdr8150 smb1395_firmware qdm4650 pmd9655 ipq8074_firmware qca6574au sa8155p_firmware qsw6310 wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qat5568_firmware qdm2308 qat3550 wcn6856 qdm5679 sd_8c ipq6010_firmware pm3003a_firmware qca6696 smb1381_firmware qpa2625 sa6150p qcn9022_firmware qpa8688_firmware ipq8070a qcn9072_firmware sm7250p sd720g_firmware ipq8071_firmware qcn9074_firmware qpm4621_firmware pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write