CVE-2019-2297 | ByteOS Network

Vulnerability Details :

CVE-2019-2297

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-21 Nov, 2019 | 14:38

Updated At-04 Aug, 2024 | 18:42

Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA660, SDA845, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:21 Nov, 2019 | 14:38

Updated At:04 Aug, 2024 | 18:42

▼CVE Numbering Authority (CNA)

Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA660, SDA845, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Versions

Affected

APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA660, SDA845, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150

Problem Types

Type	CWE ID	Description
text	N/A	Integer Overflow to Buffer Overflow in WLAN

Type: text

CWE ID: N/A

Description: Integer Overflow to Buffer Overflow in WLAN

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:21 Nov, 2019 | 15:15

Updated At:21 Jul, 2021 | 11:39

Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA660, SDA845, SDM636, SDM660, SDM845, SDX20, SDX24, SM8150

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 4.6

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Qualcomm Technologies, Inc.

>>apq8009_firmware>>-

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8017_firmware>>-

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8053_firmware>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8064_firmware>>-

cpe:2.3:o:qualcomm:apq8064_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8064:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8096au_firmware>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq4019_firmware>>-

cpe:2.3:o:qualcomm:ipq4019_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq8064_firmware>>-

cpe:2.3:o:qualcomm:ipq8064_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq8074_firmware>>-

cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9207c_firmware>>-

cpe:2.3:o:qualcomm:mdm9207c_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9207c:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9640_firmware>>-

cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8905_firmware>>-

cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8905:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996au_firmware>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6174a_firmware>>-

cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6574au_firmware>>-

cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca9377_firmware>>-

cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca9379_firmware>>-

cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcn7605_firmware>>-

cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcn7605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs405_firmware>>-

cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs405:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs605_firmware>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sda660_firmware>>-

cpe:2.3:o:qualcomm:sda660_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sda660:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sda845_firmware>>-

cpe:2.3:o:qualcomm:sda845_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sda845:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdm636_firmware>>-

cpe:2.3:o:qualcomm:sdm636_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdm636:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov
CWE-190	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-190

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin	product-security@qualcomm.com	Patch Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2019-bulletin

Source: product-security@qualcomm.com

Resource:

Patch

Vendor Advisory

Similar CVEs

2050Records found

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 22.66%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 17:22

In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.00%

||

7 Day CHG~0.00%

Published-12 Jun, 2018 | 20:00

Updated-16 Sep, 2024 | 17:48

Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.72%

||

7 Day CHG~0.00%

Published-28 Nov, 2018 | 15:00

Updated-05 Aug, 2024 | 05:47

Possible buffer overflow in DRM Trusted application due to lack of check function return values in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 800, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX24, SXR1130.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.13% / 33.32%

||

7 Day CHG~0.00%

Published-12 Jun, 2018 | 20:00

Updated-17 Sep, 2024 | 00:31

In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ie_len' argument can cause a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC Debian GNU/Linux Red Hat, Inc.

Product-enterprise_linux_server debian_linux android enterprise_linux_workstation virtualization_host enterprise_linux_desktop Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.69%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 19:00

Updated-16 Sep, 2024 | 22:26

Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.68%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 22:14

While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer overwrite can occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.69%

||

7 Day CHG~0.00%

Published-03 Apr, 2018 | 17:00

Updated-16 Sep, 2024 | 16:58

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, improper buffer length validation in extscan hotlist event can lead to potential buffer overflow.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.00%

||

7 Day CHG~0.00%

Published-12 Jun, 2018 | 20:00

Updated-17 Sep, 2024 | 03:12

In the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, there is no upper bound check on the value event->num_chains_valid received from firmware which can lead to a buffer overwrite of the fixed size chain_rssi_result structure.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.34%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-17 Sep, 2024 | 01:06

Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyond certain limit in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.69%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 16:58

While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.34%

||

7 Day CHG~0.00%

Published-15 Jun, 2018 | 20:00

Updated-16 Sep, 2024 | 20:32

If userspace provides a too-large WPA RSN IE length in wlan_hdd_cfg80211_set_ie(), a buffer overflow occurs in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.34%

||

7 Day CHG~0.00%

Published-17 May, 2018 | 22:00

Updated-17 Sep, 2024 | 02:10

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a buffer overflow vulnerability exists in WLAN while processing an extscan hotlist event.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.00%

||

7 Day CHG~0.00%

Published-12 Jun, 2018 | 20:00

Updated-17 Sep, 2024 | 03:02

An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.34%

||

7 Day CHG~0.00%

Published-03 Apr, 2018 | 17:00

Updated-16 Sep, 2024 | 22:30

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in function wma_extscan_start_stop_event_handler(), vdev_id comes from the variable event from firmware and is not properly validated potentially leading to a buffer overwrite.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.78%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 05:47

Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 855, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 mdm9150_firmware sd_855 sd_730_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sdx20 sd_670_firmware sdm660 sdx24 sdm630 mdm9607_firmware sd_710_firmware sd_636 mdm9650 sd_625 mdm9607 msm8996au sd_636_firmware sd_820a_firmware mdm9150 qcs605_firmware sd_675_firmware mdm9206 sd_730 sdx24_firmware sd_625_firmware sd_855_firmware sd_712_firmware sdm630_firmware mdm9206_firmware qcs605 sd_670 mdm9650_firmware sd_710 sdx20_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.00%

||

7 Day CHG~0.00%

Published-17 May, 2018 | 22:00

Updated-17 Sep, 2024 | 01:36

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.69%

||

7 Day CHG~0.00%

Published-03 Apr, 2018 | 17:00

Updated-16 Sep, 2024 | 17:08

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, while processing HTT_T2H_MSG_TYPE_RX_FLUSH or HTT_T2H_MSG_TYPE_RX_PN_IND messages, a buffer overflow can occur if the tid value obtained from the firmware is out of range.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.00%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 04:50

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while relocating kernel images with a specially crafted boot image, an out of bounds access can occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.00%

||

7 Day CHG~0.00%

Published-12 Jun, 2018 | 20:00

Updated-16 Sep, 2024 | 20:12

While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.34%

||

7 Day CHG~0.00%

Published-12 Jun, 2018 | 20:00

Updated-16 Sep, 2024 | 17:23

Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 30.26%

||

7 Day CHG~0.00%

Published-01 Jul, 2024 | 14:17

Updated-01 Aug, 2024 | 23:06

Integer Overflow or Wraparound in Graphics

Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware snapdragon_8_gen_1_mobile_platform talynplus_firmware snapdragon_662_mobile_platform_firmware sm7325-ae_firmware wsa8830 sxr2230p_firmware qam8650p sg8275p_firmware qam8775p qamsrv1m flight_rb5_5g_platform snapdragon_888_5g_mobile_platform flight_rb5_5g_platform_firmware wsa8840 wcn3950_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware qca6595au_firmware video_collaboration_vc3_platform snapdragon_480_5g_mobile_platform wcd9370 ssg2115p qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qrb5165n_firmware snapdragon_8_gen_2_mobile_platform qamsrv1h wcd9385_firmware qam8295p wcn3950 talynplus fastconnect_6200 qamsrv1h_firmware sd_8_gen1_5g_firmware snapdragon_460_mobile_platform qam8295p_firmware sm7325-af sa9000p_firmware sm7315_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware snapdragon_778g_5g_mobile_platform sa7255p snapdragon_4_gen_2_mobile_platform qca6595au sm6225-ad sm7325-ae sm7325-af_firmware snapdragon_8_gen_3_mobile_platform wcd9375_firmware wsa8845h_firmware sm4350-ac qrb5165n snapdragon_680_4g_mobile_platform_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware sa8620p_firmware sa6155p_firmware qcm8550_firmware qca6678aq_firmware sa8775p_firmware sm6225-ad_firmware qcs6490 wsa8840_firmware qca6698aq qcs6125 video_collaboration_vc5_platform qcs8550_firmware wcn3988_firmware srv1h sa7775p_firmware snapdragon_8\+_gen_1_mobile_platform fastconnect_6700_firmware sa8195p wsa8810_firmware snapdragon_780g_5g_mobile_platform sw5100 wsa8845h snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware sa6155p qcs7230 sg4150p wcd9395_firmware qca6698aq_firmware qcm4490 sa7775p qam8620p qcs5430 sxr2250p sa8770p_firmware wcd9385 qam8775p_firmware sa8255p qca6696_firmware qcs6490_firmware qca6797aq wcd9375 wcd9390 robotics_rb5_platform snapdragon_662_mobile_platform wsa8830_firmware snapdragon_7c\+_gen_3_compute_firmware qcm6490 wcn3988 wsa8815_firmware snapdragon_780g_5g_mobile_platform_firmware wsa8835_firmware sa8195p_firmware video_collaboration_vc5_platform_firmware sa8295p_firmware sxr2250p_firmware sg4150p_firmware sa8770p snapdragon_8_gen_2_mobile_platform_firmware qcm6125_firmware qcm4325 robotics_rb5_platform_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware ssg2125p sw5100p snapdragon_w5\+_gen_1_wearable_platform qca6595 qcm8550 sm8350-ac_firmware qcs7230_firmware sd888 wsa8835 qca6574 sxr1230p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware snapdragon_7c\+_gen_3_compute sd_8_gen1_5g wcd9380 fastconnect_6700 snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qca6574a sm7325p sxr1230p video_collaboration_vc3_platform_firmware sg8275p wcn3980 wsa8845 qcm4325_firmware sa8650p qca6574_firmware sa9000p wsa8815 sm7325p_firmware sxr2230p wsa8845_firmware snapdragon_4_gen_1_mobile_platform qcs8250 qca6574a_firmware fastconnect_6200_firmware sa8775p wcn3980_firmware sm7315 qca6391 sa8295p fastconnect_7800 wcn6740_firmware qcm4490_firmware qcs4490_firmware qca6678aq qcm6490_firmware sa8650p_firmware wsa8832_firmware fastconnect_6900 fastconnect_6900_firmware srv1h_firmware video_collaboration_vc1_platform_firmware qca6797aq_firmware qca6574au sa8155p_firmware srv1l sa7255p_firmware qcs8250_firmware fastconnect_7800_firmware qcm6125 sa8620p snapdragon_8\+_gen_2_mobile_platform wsa8810 wsa8832 sw5100p_firmware sm8550p snapdragon_680_4g_mobile_platform snapdragon_8_gen_1_mobile_platform_firmware qamsrv1m_firmware snapdragon_ar2_gen_1_platform qcm5430 srv1m_firmware sm8350-ac qam8650p_firmware qcs4490 qca6595_firmware wcd9395 wcn6740 qca6696 qcs5430_firmware qca6391_firmware qcs8550 wcd9370_firmware sm8550p_firmware sm4350-ac_firmware sd888_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware sa8155p snapdragon_695_5g_mobile_platform video_collaboration_vc1_platform srv1m snapdragon_8\+_gen_1_mobile_platform_firmware ssg2115p_firmware sw5100_firmware qam8620p_firmware qam8255p Snapdragon qam8255p_firmware qualcomm_video_collaboration_vc1_platform_firmware talynplus_firmware snapdragon_662_mobile_platform_firmware robotics_rb5_platform_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware sxr2230p_firmware sg8275p_firmware qcs7230_firmware flight_rb5_5g_platform_firmware sxr1230p_firmware wcn3950_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware qca6595au_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qrb5165n_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qcm4325_firmware qamsrv1h_firmware qca6574_firmware sd_8_gen1_5g_firmware sm7325p_firmware wsa8845_firmware qam8295p_firmware sa9000p_firmware sm7315_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware qca6574a_firmware fastconnect_6200_firmware wcd9375_firmware wsa8845h_firmware wcn3980_firmware snapdragon_680_4g_mobile_platform_firmware wcn6740_firmware sa8620p_firmware sa6155p_firmware qcm8550_firmware qcm4490_firmware qca6678aq_firmware qcs4490_firmware sa8775p_firmware qcm6490_firmware wsa8840_firmware sa8650p_firmware wsa8832_firmware fastconnect_6900_firmware srv1h_firmware qcs8550_firmware wcn3988_firmware qca6797aq_firmware sa8155p_firmware sa7775p_firmware fastconnect_6700_firmware sa7255p_firmware wsa8810_firmware qcs8250_firmware fastconnect_7800_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware sw5100p_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware qam8650p_firmware sa8770p_firmware qam8775p_firmware qca6696_firmware qcs6490_firmware qca6595_firmware qcs5430_firmware qca6391_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8815_firmware sxr2250p_firmware wsa8835_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware ssg2115p_firmware sw5100_firmware qam8620p_firmware sa8295p_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qcm6125_firmware

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.68%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 19:00

Updated-17 Sep, 2024 | 01:21

In __wlan_hdd_cfg80211_vendor_scan() in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, when SCAN_SSIDS and QCA_WLAN_VENDOR_ATTR_SCAN_FREQUENCIES are parsed, a buffer overwrite can potentially occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.22%

||

7 Day CHG~0.00%

Published-07 Oct, 2024 | 12:58

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_8_gen_3_mobile_platform_firmware qdx1010_firmware wsa8845_firmware sa6150p_firmware sd865_5g wsa8832 qca6678aq_firmware wcd9378_firmware qca6431 srv1l qca6595 sxr2130_firmware wcd9370 srv1m qca8081_firmware qca6678aq snapdragon_765_5g_mobile_platform_\(sm7250-aa\)qca6696 qam8620p_firmware ar8035_firmware wcd9340_firmware snapdragon_888_5g_mobile_platform sc8380xp sa8530p wcd9395_firmware qcc710_firmware qca6426 fastconnect_6700 sm4635 wsa8815_firmware wsa8832_firmware snapdragon_x35_5g_modem-rf_system_firmware snapdragon_870_5g_mobile_platform_\(sm8250-ac\)sa8195p_firmware qca8337_firmware qca8337 qdu1110 wcd9395 qca6426_firmware qcm6490_firmware qca6574au_firmware sm7250p_firmware snapdragon_768g_5g_mobile_platform_\(sm7250-ac\)_firmware sm4635_firmware qam8295p snapdragon_x72_5g_modem-rf_system_firmware wcd9390 qru1032 qca6574au wcn3950 sa8620p_firmware wsa8810_firmware wsa8845h_firmware snapdragon_xr2_5g_platform srv1h sa9000p_firmware snapdragon_x65_5g_modem-rf_system_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qca6797aq_firmware qcs5430 fastconnect_6800_firmware sa8295p_firmware sm7250p qcm5430 qcm5430_firmware sa8770p qcn6274_firmware qca6584au wcn6755_firmware qcc710 qru1062_firmware snapdragon_765g_5g_mobile_platform_\(sm7250-ab\)_firmware snapdragon_x72_5g_modem-rf_system sa8540p sc8380xp_firmware qru1062 qfw7114_firmware qsm8350_firmware fastconnect_6800 qca6595_firmware fastconnect_7800_firmware snapdragon_768g_5g_mobile_platform_\(sm7250-ac\)fastconnect_6900 qru1032_firmware sa7255p sm8635 qep8111 qfw7114 sm8635_firmware wcd9385_firmware snapdragon_x55_5g_modem-rf_system qca6421 fastconnect_6900_firmware qam8255p_firmware wcd9380 sa6145p_firmware qam8255p snapdragon_x62_5g_modem-rf_system snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)snapdragon_xr2_5g_platform_firmware snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)snapdragon_888_5g_mobile_platform_firmware sa8150p wcn6755 snapdragon_8_gen_1_mobile_platform_firmware wsa8845 snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)sa6155p qca6421_firmware snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)_firmware snapdragon_x35_5g_modem-rf_system wsa8810 snapdragon_765g_5g_mobile_platform_\(sm7250-ab\)qam8650p qdu1000_firmware srv1h_firmware sa9000p video_collaboration_vc3_platform qca6595au qdu1010 snapdragon_865_5g_mobile_platform_firmware sa6155p_firmware qdx1010 wsa8840 qam8295p_firmware srv1m_firmware qca6431_firmware qdu1210_firmware snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmware qfw7124_firmware wcd9385 qca6698aq_firmware qca6436_firmware qsm8350 sa8255p wcd9390_firmware snapdragon_8_gen_3_mobile_platform qep8111_firmware snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)_firmware wcd9370_firmware qdx1011_firmware snapdragon_x55_5g_modem-rf_system_firmware qdu1110_firmware qdu1000 sa7255p_firmware qca6574a sxr2130 qru1052 sa8195p qca6174a wcd9340 qdu1210 qamsrv1m snapdragon_auto_5g_modem-rf_gen_2 qca6174a_firmware sa8540p_firmware qcm6490 qam8650p_firmware wcn3988 qcs6490_firmware snapdragon_x65_5g_modem-rf_system qca6584au_firmware qam8620p sa8775p qcn6274 snapdragon_x75_5g_modem-rf_system qfw7124 wsa8835 wsa8840_firmware qca6595au_firmware qca6574 qca6436 qca6391_firmware qdu1010_firmware sa8775p_firmware qamsrv1h qca6696_firmware wsa8845h snapdragon_865_5g_mobile_platform wcd9380_firmware snapdragon_765_5g_mobile_platform_\(sm7250-aa\)_firmware sa6150p qca6574_firmware sa8155p_firmware wsa8815 qca8081 sd_8_gen1_5g sa8155p wsa8830 qam8775p qca6797aq snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmware sa6145p sa8620p sa8255p_firmware qca6574a_firmware ar8035 qamsrv1m_firmware sa8650p_firmware wcd9375_firmware sd_8_gen1_5g_firmware snapdragon_x62_5g_modem-rf_system_firmware srv1l_firmware sa7775p qca6391 qcn6224 qcs5430_firmware sa7775p_firmware wcn3950_firmware qca6698aq qru1052_firmware sa8770p_firmware sa8530p_firmware sa8295p snapdragon_8_gen_1_mobile_platform fastconnect_6200 fastconnect_7800 sa8650p sa8145p_firmware qam8775p_firmware sd865_5g_firmware wcd9378 wcd9375 qdx1011 sa8150p_firmware wcn3988_firmware fastconnect_6700_firmware qamsrv1h_firmware video_collaboration_vc3_platform_firmware sa8145p wsa8835_firmware snapdragon_x75_5g_modem-rf_system_firmware qcs6490 fastconnect_6200_firmware wsa8830_firmware qcn6224_firmware Snapdragon qam8255p_firmware qca8337_firmware wcd9380_firmware sa6150p_firmware sm4635_firmware sa8145p_firmware wcd9378_firmware qca6431_firmware qdu1010_firmware sa8530p_firmware qcn6224_firmware qdu1110_firmware wcn3950_firmware sa8540p_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware wcn6755_firmware qca6595au_firmware snapdragon_x72_5g_modem-rf_system_firmware sm8635_firmware qcm5430_firmware qca6584au_firmware qep8111_firmware qfw7114_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qamsrv1h_firmware qca6574_firmware sd_8_gen1_5g_firmware wcd9340_firmware qsm8350_firmware qru1032_firmware qam8295p_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware qca6426_firmware sa9000p_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware snapdragon_x62_5g_modem-rf_system_firmware wcd9375_firmware qca8081_firmware wsa8845h_firmware snapdragon_x55_5g_modem-rf_system_firmware sm7250p_firmware qca6436_firmware qca6421_firmware sa8620p_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware snapdragon_x35_5g_modem-rf_system_firmware qca6678aq_firmware qcn6274_firmware sa8775p_firmware qcm6490_firmware wsa8840_firmware sa8650p_firmware wsa8832_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware srv1h_firmware sc8380xp_firmware wcn3988_firmware qru1062_firmware qca6797aq_firmware sa6145p_firmware sa8155p_firmware sa7775p_firmware qdx1011_firmware fastconnect_6700_firmware sa7255p_firmware wsa8810_firmware fastconnect_7800_firmware wcd9395_firmware sa8255p_firmware qdx1010_firmware qdu1000_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware qca6174a_firmware qam8650p_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware qca6595_firmware qcs5430_firmware qca6391_firmware qru1052_firmware wcd9370_firmware qcc710_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware qam8620p_firmware sa8295p_firmware qfw7124_firmware qdu1210_firmware ar8035_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.74%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 19:00

Updated-17 Sep, 2024 | 02:22

In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, out of bounds access can occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.34%

||

7 Day CHG~0.00%

Published-17 May, 2018 | 22:00

Updated-17 Sep, 2024 | 04:09

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, a buffer overflow vulnerability exists in WLAN while processing the HTT_T2H_MSG_TYPE_PEER_MAP or HTT_T2H_MSG_TYPE_PEER_UNMAP messages.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.22%

||

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-26 Nov, 2024 | 15:32

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Memory corruption when keymaster operation imports a shared key.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware snapdragon_8_gen_1_mobile_platform sa6150p_firmware qca8337 qfw7124 sg8275p_firmware qca6431_firmware qam8775p qamsrv1m qru1052 snapdragon_888_5g_mobile_platform wsa8840 wcn3950_firmware sa8150p_firmware qca6595au_firmware snapdragon_480_5g_mobile_platform video_collaboration_vc3_platform snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmware snapdragon_460_mobile_platform_firmware qcm5430_firmware snapdragon_480_5g_mobile_platform_firmware qep8111_firmware qam8295p wcn3950 sd_8_gen1_5g_firmware qsm8350_firmware snapdragon_460_mobile_platform qsm8350 qca6688aq snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware wcd9375_firmware qca8081_firmware qca6678aq_firmware qrb5165m_firmware wsa8840_firmware sa4155p_firmware qca6698aq sc8380xp_firmware qru1062_firmware sa7775p_firmware wcd9340 snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware snapdragon_870_5g_mobile_platform_\(sm8250-ac\)qca6436 sa6155p qdu1000_firmware qca6698aq_firmware snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)snapdragon_auto_5g_modem-rf_gen_2_firmware sa8255p qam8775p_firmware qca6431 qca6696_firmware qca6797aq qru1052_firmware sa8150p robotics_rb5_platform qcc710_firmware wsa8830_firmware sd865_5g_firmware wcn3988 sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sa8295p_firmware sa8770p wcd9380_firmware qca8337_firmware snapdragon_765_5g_mobile_platform_\(sm7250-aa\)qcm8550 snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmware qca6574 snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware qdu1110_firmware wcd9380 snapdragon_x72_5g_modem-rf_system_firmware fastconnect_6700 snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware video_collaboration_vc3_platform_firmware sg8275p qcn9012_firmware snapdragon_765g_5g_mobile_platform_\(sm7250-ab\)_firmware qfw7114_firmware wsa8845 qcm4325_firmware wcd9340_firmware wsa8815 snapdragon_4_gen_1_mobile_platform qcs8250 qca6426_firmware sc8380xp snapdragon_x62_5g_modem-rf_system_firmware sa8295p qca6421_firmware snapdragon_xr2_5g_platform snapdragon_x65_5g_modem-rf_system qca6678aq sa8650p_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900 snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)fastconnect_6900_firmware qdu1010 qca6797aq_firmware srv1l qdx1011_firmware sa7255p_firmware snapdragon_8\+_gen_2_mobile_platform sa8620p qdx1010_firmware sa8540p qamsrv1m_firmware sa6145p qcm5430 qcc710 qca6595_firmware wcd9395 sa8145p qcs5430_firmware qca6391_firmware sa4150p_firmware wcd9370_firmware sm8550p_firmware qdx1010 sa8155p snapdragon_695_5g_mobile_platform srv1m qam8620p_firmware qfw7124_firmware qam8255p qdu1210_firmware qep8111 sa4155p snapdragon_685_4g_mobile_platform_\(sm6225-ad\)ar8035_firmware wsa8830 snapdragon_662_mobile_platform_firmware sa8145p_firmware qam8650p snapdragon_865_5g_mobile_platform flight_rb5_5g_platform flight_rb5_5g_platform_firmware qcn6224_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware wcd9370 qca6426 qdu1110 qca6584au_firmware qrb5165n_firmware snapdragon_8_gen_2_mobile_platform qamsrv1h sa8530p wcd9385_firmware fastconnect_6200 qamsrv1h_firmware qam8295p_firmware qcn9011_firmware sa9000p_firmware snapdragon_x55_5g_modem-rf_system sa7255p wsa8845h_firmware snapdragon_8_gen_3_mobile_platform qca6595au qfw7114 sm7250p_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware qrb5165n sa8620p_firmware sa6155p_firmware qca6584au snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware snapdragon_x72_5g_modem-rf_system sa8775p_firmware qcs6490 video_collaboration_vc5_platform qcs8550_firmware wcn3988_firmware srv1h sa6145p_firmware qca6421 fastconnect_6700_firmware sa8195p wsa8810_firmware qcn6224 wsa8845h snapdragon_x62_5g_modem-rf_system wcd9395_firmware snapdragon_x75_5g_modem-rf_system snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)sg4150p sa8255p_firmware qcs7230 qca8081 snapdragon_x35_5g_modem-rf_system snapdragon_auto_5g_modem-rf_gen_2 sa7775p qcs5430 qca6174a_firmware qam8620p wcd9385 sxr2130_firmware sa8770p_firmware qcs6490_firmware ar8035 wcd9375 snapdragon_768g_5g_mobile_platform_\(sm7250-ac\)wcd9390 snapdragon_662_mobile_platform wsa8815_firmware qcm6490 wsa8835_firmware video_collaboration_vc5_platform_firmware snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware sa4150p qca6688aq_firmware qcm4325 robotics_rb5_platform_firmware sd865_5g fastconnect_6800 qca6595 qru1032 qcs7230_firmware qdu1010_firmware qcn9012 sa8530p_firmware qdx1011 qdu1000 wsa8835 snapdragon_8\+_gen_2_mobile_platform_firmware sa8540p_firmware sd_8_gen1_5g qcn6274 snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware snapdragon_4_gen_1_mobile_platform_firmware sxr2130 qca6574a qca6174a qru1062 sa8650p sa9000p qca6574_firmware wsa8845_firmware snapdragon_xr2_5g_platform_firmware qru1032_firmware sa8775p snapdragon_768g_5g_mobile_platform_\(sm7250-ac\)_firmware qca6574a_firmware fastconnect_6200_firmware qrb5165m snapdragon_765g_5g_mobile_platform_\(sm7250-ab\)snapdragon_x55_5g_modem-rf_system_firmware qca6391 snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)fastconnect_7800 snapdragon_x35_5g_modem-rf_system_firmware qcn6274_firmware qcm6490_firmware srv1h_firmware qcn9011 snapdragon_765_5g_mobile_platform_\(sm7250-aa\)_firmware qca6574au snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)_firmware sa8155p_firmware qcs8250_firmware fastconnect_7800_firmware wsa8810 snapdragon_8_gen_1_mobile_platform_firmware snapdragon_680_4g_mobile_platform sm8550p srv1m_firmware qam8650p_firmware qca6696 qcs8550 sa6150p wcd9390_firmware snapdragon_8_gen_3_mobile_platform_firmware qdu1210 sm7250p Snapdragon qam8255p_firmware snapdragon_662_mobile_platform_firmware sa6150p_firmware sa8145p_firmware sg8275p_firmware qca6431_firmware flight_rb5_5g_platform_firmware qcn6224_firmware wcn3950_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6595au_firmware qcm5430_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qca6584au_firmware qep8111_firmware qrb5165n_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qamsrv1h_firmware sd_8_gen1_5g_firmware qsm8350_firmware qam8295p_firmware qcn9011_firmware sa9000p_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware wcd9375_firmware qca8081_firmware wsa8845h_firmware sm7250p_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware sa8620p_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qca6678aq_firmware sa8775p_firmware qrb5165m_firmware wsa8840_firmware sa4155p_firmware qcs8550_firmware sc8380xp_firmware wcn3988_firmware qru1062_firmware sa6145p_firmware sa7775p_firmware fastconnect_6700_firmware wsa8810_firmware wcd9395_firmware sa8255p_firmware qdu1000_firmware qca6698aq_firmware qca6174a_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware qru1052_firmware qcc710_firmware wsa8830_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sa8295p_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qca6688aq_firmware robotics_rb5_platform_firmware qca8337_firmware wcd9380_firmware qcs7230_firmware qdu1010_firmware sa8530p_firmware qdu1110_firmware sa8540p_firmware snapdragon_x72_5g_modem-rf_system_firmware snapdragon_4_gen_1_mobile_platform_firmware qcn9012_firmware qfw7114_firmware qcm4325_firmware qca6574_firmware wcd9340_firmware qru1032_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware qca6426_firmware qca6574a_firmware fastconnect_6200_firmware snapdragon_x62_5g_modem-rf_system_firmware snapdragon_x55_5g_modem-rf_system_firmware qca6421_firmware snapdragon_x35_5g_modem-rf_system_firmware qcn6274_firmware qcm6490_firmware sa8650p_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware srv1h_firmware qca6797aq_firmware sa8155p_firmware qdx1011_firmware sa7255p_firmware qcs8250_firmware fastconnect_7800_firmware qdx1010_firmware snapdragon_8_gen_1_mobile_platform_firmware qamsrv1m_firmware srv1m_firmware qam8650p_firmware qca6595_firmware qcs5430_firmware qca6391_firmware sa4150p_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware qam8620p_firmware qfw7124_firmware qdu1210_firmware ar8035_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.94%

||

7 Day CHG~0.00%

Published-07 Oct, 2024 | 12:58

Updated-11 Aug, 2025 | 15:06

Untrusted Pointer Dereference in DSP Service

Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.

Vendor-Qualcomm Technologies, Inc.

Product-sa8295p_firmware qca6696_firmware qca6688aq qam8295p_firmware qca6595 wcd9370 wsa8815 video_collaboration_vc1_platform_firmware sg4150p qca6696 qcm6125_firmware qca6698aq_firmware qca6584au qcs6125_firmware qca6595_firmware wcd9375_firmware wsa8815_firmware wcd9370_firmware video_collaboration_vc1_platform qca6698aq wcn3950_firmware snapdragon_680_4g_mobile_platform sg4150p_firmware sa8295p snapdragon_685_4g_mobile_platform_\(sm6225-ad\)snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware qam8295p snapdragon_auto_5g_modem-rf_gen_2 wcd9375 qca6688aq_firmware wcn3950 wsa8810_firmware qcs6125 qcm6125 wsa8810 snapdragon_680_4g_mobile_platform_firmware wcn3980_firmware qca6584au_firmware wcn3980 snapdragon_auto_5g_modem-rf_gen_2_firmware Snapdragon qualcomm_video_collaboration_vc1_platform_firmware qcs6125_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qca6584au_firmware qca6696_firmware qca6595_firmware qcm6125_firmware wcd9370_firmware qam8295p_firmware wcn3950_firmware wsa8815_firmware wsa8810_firmware wcd9375_firmware wcn3980_firmware sa8295p_firmware sg4150p_firmware snapdragon_680_4g_mobile_platform_firmware qca6688aq_firmware qca6698aq_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-822

Untrusted Pointer Dereference

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 21.32%

||

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller

Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware qcs410_firmware sa6150p_firmware sd865_5g qca6595 qcs610_firmware wcd9335 wcd9370 qca8081_firmware qcc711_firmware qca6696 wcd9340_firmware wcd9341_firmware wcd9395_firmware qcn6024 snapdragon_sc8180xp-aa_firmware qcc710_firmware qcc2073_firmware qca6426 wcn6740_firmware fastconnect_6700 snapdragon_768g_5g_mobile_platform_firmware sa4150p wsa8832_firmware qca8337 qca6426_firmware wcd9395 qcn7605 snapdragon_460_mobile_platform snapdragon_auto_4g_modem qca6574au_firmware qcn7606_firmware qam8295p wcd9341 qca6574au wcd9390 wsa8810_firmware wsa8845h_firmware csra6640 sa9000p_firmware qca2064_firmware qca6554a fastconnect_6800_firmware qcs5430 qcn6024_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_695_5g_mobile_platform qcm5430 qcm5430_firmware video_collaboration_vc1_platform_firmware sa4155p snapdragon_4_gen_1_mobile_platform_firmware snapdragon_778g\+_5g_mobile_platform sa8770p qcm6125_firmware ssg2115p qcc710 qca2062_firmware snapdragon_480\+_5g_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware qsm8350_firmware 315_5g_iot_modem_firmware fastconnect_6900 snapdragon_765g_5g_mobile_platform video_collaboration_vc1_platform qfw7114 wcd9385_firmware qca6421 315_5g_iot_modem snapdragon_x55_5g_modem-rf_system qam8255p_firmware sa8155_firmware wcd9360 snapdragon_888_5g_mobile_platform_firmware snapdragon_ar2_gen_1_platform_firmware qcs4490 snapdragon_8_gen_1_mobile_platform_firmware snapdragon_7c_compute_platform snapdragon_685_4g_mobile_platform snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p snapdragon_sc8180x-aa qca6421_firmware qcm6125 qca6564au_firmware snapdragon_768g_5g_mobile_platform snapdragon_sc8180xp-aa wsa8810 qam8650p sa9000p snapdragon_8\+_gen_2_mobile_platform qca6595au sm7315_firmware wcd9326_firmware sa6155p_firmware wsa8840 qcs8550_firmware snapdragon_870_5g_mobile_platform_firmware qfw7124_firmware qca6436_firmware snapdragon_sc8180x-ad snapdragon_8\+_gen_1_mobile_platform snapdragon_7c_compute_platform_firmware snapdragon_8_gen_2_mobile_platform qcs4490_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3910_firmware sm4125_firmware snapdragon_855\+\/860_mobile_platform_firmware qca6420 snapdragon_7c_gen_2_compute_platform_firmware wcn3910 wcd9370_firmware csrb31024 snapdragon_845_mobile_platform snapdragon_x55_5g_modem-rf_system_firmware qcc2076 snapdragon_750g_5g_mobile_platform_firmware snapdragon_660_mobile_platform qca6574a sa8195p wcd9340 qcm2290 snapdragon_auto_5g_modem-rf_gen_2 qcm6490 sm8550p_firmware qcm8550 wcn3988 qcn9024 snapdragon_460_mobile_platform_firmware qca6574 snapdragon_x75_5g_modem-rf_system sa8775p sxr2230p_firmware qca2066_firmware qcc711 qca6430_firmware snapdragon_870_5g_mobile_platform sa8775p_firmware qcn9024_firmware wsa8845h sa6150p wcd9326 qcs410 qcm2290_firmware sa8155p_firmware sa8155p wsa8830 snapdragon_sc8180x-ac snapdragon_662_mobile_platform sm8550p sa6145p snapdragon_8\+_gen_1_mobile_platform_firmware qcn9074_firmware vision_intelligence_400_platform_firmware snapdragon_765_5g_mobile_platform sc8180x\+sdx55_firmware sa8255p_firmware qcc2073 ar8035 sa6155 qca2065 qcm4325 qcn6224 sc8180x\+sdx55 qca6698aq wcn3950_firmware snapdragon_7c_gen_2_compute_platform sm6250 ssg2125p_firmware snapdragon_8_gen_1_mobile_platform fastconnect_6200 sm7325p_firmware sa8145p_firmware wcd9360_firmware snapdragon_sc8280xp-ab_firmware snapdragon_888\+_5g_mobile_platform smart_audio_400_platform snapdragon_855\+\/860_mobile_platform sa8150p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 snapdragon_680_4g_mobile_platform_firmware qcs6490 snapdragon_750g_5g_mobile_platform snapdragon_sc8180xp-ac fastconnect_6200_firmware ar8031_firmware wsa8830_firmware qcn6224_firmware qca6431 qca6678aq_firmware wsa8845_firmware sd660_firmware wsa8832 snapdragon_auto_4g_modem_firmware qcc2076_firmware sxr2130_firmware qca6678aq ar8035_firmware snapdragon_888_5g_mobile_platform sc8380xp sa4150p_firmware sd888_firmware snapdragon_662_mobile_platform_firmware qca6564au qcs6125_firmware sm6250p_firmware qcn9074 wsa8815_firmware sa8195p_firmware qca8337_firmware qcm4290 snapdragon_680_4g_mobile_platform ar8031 sg8275p_firmware qcm6490_firmware sm7250p_firmware sm4125 qcm4490_firmware snapdragon_855_mobile_platform wcn3950 snapdragon_xr2_5g_platform qcs6125 snapdragon_x65_5g_modem-rf_system_firmware qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_765g_5g_mobile_platform_firmware snapdragon_7c\+_gen_3_compute snapdragon_xr2\+_gen_1_platform_firmware snapdragon_780g_5g_mobile_platform sa8295p_firmware sa4155p_firmware snapdragon_720g_mobile_platform sm7250p csrb31024_firmware sa8155 sm6250_firmware snapdragon_780g_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qca6584au sd888 qcn6274_firmware snapdragon_4_gen_2_mobile_platform snapdragon_765_5g_mobile_platform_firmware wcn6740 sc8380xp_firmware fastconnect_6800 qfw7114_firmware qca6595_firmware snapdragon_685_4g_mobile_platform_firmware fastconnect_7800_firmware snapdragon_782g_mobile_platform_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware qam8255p sa6155_firmware sxr2230p snapdragon_xr2_5g_platform_firmware snapdragon_sc8280xp-ab snapdragon_4_gen_1_mobile_platform sa8150p snapdragon_778g_5g_mobile_platform snapdragon_auto_5g_modem-rf_firmware qca2064 sxr1230p snapdragon_865\+_5g_mobile_platform qca2065_firmware snapdragon_sc8180x-ad_firmware video_collaboration_vc3_platform aqt1000 snapdragon_sc8180xp-ad_firmware snapdragon_865_5g_mobile_platform_firmware qam8295p_firmware sd855 qca6431_firmware wcn3990_firmware sm7315 qca6698aq_firmware qcs2290 wcd9385 qcn7606 qsm8350 qcs2290_firmware qcn7605_firmware sa8255p snapdragon_720g_mobile_platform_firmware qcs4290 sxr1230p_firmware wcd9390_firmware snapdragon_778g\+_5g_mobile_platform_firmware snapdragon_865\+_5g_mobile_platform_firmware snapdragon_690_5g_mobile_platform qca6430 sg8275p sm6250p sdx55_firmware snapdragon_auto_5g_modem-rf ssg2125p qca6554a_firmware snapdragon_sc8180x-ac_firmware sxr2130 qcm4490 csra6640_firmware snapdragon_xr2\+_gen_1_platform sm7325p qam8650p_firmware snapdragon_855_mobile_platform_firmware qca2062 qca6420_firmware aqt1000_firmware qcs6490_firmware snapdragon_x65_5g_modem-rf_system sd855_firmware wcd9335_firmware wcn3980_firmware snapdragon_sc8180x-aa_firmware qca6436 qca6584au_firmware wsa8835 wsa8840_firmware qca6391_firmware qcn6274 snapdragon_480_5g_mobile_platform_firmware qfw7124 qca6595au_firmware snapdragon_sc8180xp-ac_firmware snapdragon_ar2_gen_1_platform snapdragon_782g_mobile_platform qca6696_firmware qcs4290_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware qca6574_firmware csra6620 qca8081 sd660 wsa8815 sg4150p sd_8_gen1_5g qam8775p qca6797aq qcm4325_firmware vision_intelligence_400_platform qca6574a_firmware sdx55 qcm4290_firmware snapdragon_480\+_5g_mobile_platform sd_8_gen1_5g_firmware wcd9375_firmware snapdragon_sc8180xp-ad qca6391 snapdragon_778g_5g_mobile_platform_firmware smart_audio_400_platform_firmware qcs5430_firmware sg4150p_firmware snapdragon_480_5g_mobile_platform sa8770p_firmware csra6620_firmware sa8295p snapdragon_8_gen_2_mobile_platform_firmware qcs8550 fastconnect_7800 qam8775p_firmware sd865_5g_firmware wcd9375 wcn3988_firmware sa8145p snapdragon_888\+_5g_mobile_platform_firmware qca2066 wsa8835_firmware ssg2115p_firmware snapdragon_660_mobile_platform_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn3980 snapdragon_690_5g_mobile_platform_firmware qcs610 Snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 24.80%

||

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in Video

Memory corruption when the payload received from firmware is not as per the expected protocol size.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware qcm8550_firmware qcs410_firmware sa6150p_firmware sd865_5g sw5100p qcs8155_firmware qca6595 qcs610_firmware wcd9335 wcd9370 qca8081_firmware snapdragon_7c_gen_2_compute_firmware qca6696 wcd9340_firmware sa8530p wcd9341_firmware wcd9395_firmware qcn6024 qcc710_firmware qca6426 snapdragon_8\+_gen_1_mobile wcn6740_firmware fastconnect_6700 wcn3610 snapdragon_780g_5g_mobile snapdragon_750g_5g_mobile snapdragon_685_4g_mobile sa4150p snapdragon_782g_mobile_firmware snapdragon_x50_5g_modem-rf_firmware snapdragon_wear_4100\+_firmware wsa8832_firmware qca8337 qdu1110 qca6426_firmware wcd9395 snapdragon_auto_4g_modem qca6574au_firmware snapdragon_690_5g_mobile_firmware snapdragon_x72_5g_modem-rf qca6564_firmware sm6370 qam8295p wcd9341 qca6574au wcd9390 snapdragon_x12_lte_modem snapdragon_888\+_5g_mobile_firmware sa8620p_firmware wsa8810_firmware sd730_firmware wsa8845h_firmware csra6640 snapdragon_778g_5g_mobile_firmware sa9000p_firmware srv1h wcn3660b_firmware sd730 fsm20055 snapdragon_690_5g_mobile fastconnect_6800_firmware qcs5430 fsm10055 qcn6024_firmware qcm5430 qcm5430_firmware video_collaboration_vc1_platform_firmware sa4155p sa8770p qcm6125_firmware c-v2x_9150 snapdragon_678_mobile_firmware ssg2115p qcc710 snapdragon_xr2_5g_firmware sa8540p qsm8250_firmware qsm8350_firmware snapdragon_wear_4100\+315_5g_iot_modem_firmware fastconnect_6900 snapdragon_w5\+_gen_1_wearable_firmware video_collaboration_vc1_platform qru1032_firmware qep8111 sa7255p fsm10056_firmware qfw7114 snapdragon_730_mobile_firmware wcd9385_firmware qca6421 315_5g_iot_modem qam8255p_firmware sa8155_firmware wcd9360 snapdragon_x65_5g_modem-rf qcs4490 snapdragon_730_mobile snapdragon_680_4g_mobile wsa8845 sa6155p qca6421_firmware qcm6125 qca6564au_firmware wsa8810 qam8650p video_collaboration_vc5_platform_firmware sa9000p qdu1000_firmware qsm8250 srv1h_firmware snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile sxr2250p_firmware sm7315_firmware qdu1010 snapdragon_662_mobile_firmware sa6155p_firmware snapdragon_685_4g_mobile_firmware wcd9326_firmware wsa8840 srv1m_firmware qcs8550_firmware snapdragon_730g_mobile snapdragon_782g_mobile snapdragon_x35_5g_modem-rf_firmware qdu1210_firmware snapdragon_8_gen_2_mobile_firmware snapdragon_x55_5g_modem-rf qfw7124_firmware snapdragon_4_gen_2_mobile_firmware qca6436_firmware qcn9012 wcd9371_firmware snapdragon_695_5g_mobile_firmware qcs4490_firmware snapdragon_x55_5g_modem-rf_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3910_firmware sm4125_firmware snapdragon_460_mobile snapdragon_8_gen_2_mobile qca6420 wcn3910 wcd9370_firmware qca9367 qdu1110_firmware qdu1000 wcn3660b qca6574a snapdragon_x72_5g_modem-rf_firmware sa7255p_firmware snapdragon_8\+_gen_2_mobile qca6174a sa8195p wcd9340 qcs8250_firmware qcm2290 qdu1210 talynplus snapdragon_auto_5g_modem-rf_gen_2 qcm6490 sa8540p_firmware sm8550p_firmware sxr2250p qcm8550 wcn3988 snapdragon_765_5g_mobile_firmware sm6370_firmware fsm20055_firmware snapdragon_662_mobile qcn9024 sa8775p qca6574 215_mobile sxr2230p_firmware sd675_firmware snapdragon_855_mobile_firmware qca6430_firmware qcn9011 sa8775p_firmware qamsrv1h smart_audio_400 qcn9024_firmware wsa8845h sa6150p wcd9326 qcs410 qcm2290_firmware sa8155p_firmware qca6564a sa8155p snapdragon_765g_5g_mobile_firmware wsa8830 sm8550p sa6145p qcn9074_firmware snapdragon_768g_5g_mobile_firmware snapdragon_7c_gen_2_compute sa8255p_firmware ar8035 qamsrv1m_firmware snapdragon_4_gen_2_mobile snapdragon_7c_compute_firmware qca6564 qrb5165m_firmware sa8650p_firmware sa6155 qcm4325 qcn6224 snapdragon_865\+_5g_mobile_firmware qca6698aq wcn3950_firmware ssg2125p_firmware sm6250 qrb5165n sa8530p_firmware snapdragon_480\+_5g_mobile fastconnect_6200 wcn3680b sm7325p_firmware sa8145p_firmware wcd9360_firmware snapdragon_480_5g_mobile_firmware snapdragon_660_mobile_firmware qcs8155 qdx1011 sa8150p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 snapdragon_x75_5g_modem-rf_firmware snapdragon_8_gen_3_mobile snapdragon_855_mobile qcs6490 qcs8250 snapdragon_695_5g_mobile snapdragon_778g_5g_mobile fastconnect_6200_firmware ar8031_firmware wsa8830_firmware snapdragon_460_mobile_firmware qcn6224_firmware qca6431 qca6678aq_firmware wsa8845_firmware sd660_firmware wsa8832 snapdragon_auto_4g_modem_firmware snapdragon_480_5g_mobile snapdragon_750g_5g_mobile_firmware sxr2130_firmware srv1m qca6678aq snapdragon_860_mobile_firmware snapdragon_x35_5g_modem-rf ar8035_firmware snapdragon_778g\+_5g_mobile qrb5165m sa4150p_firmware fsm20056 sd888_firmware qca6564au qcs6125_firmware qcn9074 wsa8815_firmware sa8195p_firmware qca8337_firmware snapdragon_x12_lte_modem_firmware qcm4290 ar8031 sg8275p_firmware qca9377_firmware qcm6490_firmware snapdragon_xr2\+_gen_1 sm7250p_firmware sm4125 qcm4490_firmware qru1032 wcn3950 qcs6125 flight_rb5_5g snapdragon_870_5g_mobile_firmware snapdragon_730g_mobile_firmware qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_7c\+_gen_3_compute talynplus_firmware snapdragon_732g_mobile snapdragon_778g\+_5g_mobile_firmware sa8295p_firmware smart_audio_400_firmware sd_675_firmware snapdragon_870_5g_mobile snapdragon_678_mobile sa4155p_firmware snapdragon_720g_mobile sm7250p sm6250_firmware sa8155 snapdragon_7c_compute qca6584au sd888 qcn6274_firmware qcn9011_firmware fsm10055_firmware qru1062_firmware fsm10056 snapdragon_675_mobile_firmware sw5100_firmware wcn6740 snapdragon_768g_5g_mobile snapdragon_780g_5g_mobile_firmware fsm20056_firmware qru1062 snapdragon_8_gen_3_mobile_firmware fastconnect_6800 qfw7114_firmware qcs7230 qca6595_firmware fastconnect_7800_firmware snapdragon_675_mobile snapdragon_865_5g_mobile_firmware wcd9371 fastconnect_6900_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p sa6155_firmware sxr2230p snapdragon_xr2_5g sa8150p snapdragon_auto_5g_modem-rf_firmware sxr1230p sw5100 video_collaboration_vc3_platform aqt1000 snapdragon_4_gen_1_mobile_firmware 215_mobile_firmware c-v2x_9150_firmware qam8295p_firmware sd855 qca6431_firmware wcn3990_firmware sm7315 snapdragon_660_mobile qca6698aq_firmware qcs2290 qca6564a_firmware wcd9385 snapdragon_888\+_5g_mobile qcs2290_firmware qsm8350 snapdragon_xr2\+_gen_1_firmware wcn3615 qca9367_firmware snapdragon_8_gen_1_mobile snapdragon_680_4g_mobile_firmware wcn3610_firmware sa8255p qcs7230_firmware qcs4290 sxr1230p_firmware wcd9390_firmware snapdragon_865\+_5g_mobile qep8111_firmware qca6430 snapdragon_855\+_mobile sg8275p snapdragon_765_5g_mobile qdx1011_firmware snapdragon_860_mobile sdx55_firmware snapdragon_auto_5g_modem-rf wcn3615_firmware flight_rb5_5g_firmware ssg2125p qru1052 sxr2130 qcm4490 snapdragon_x65_5g_modem-rf_firmware csra6640_firmware snapdragon_480\+_5g_mobile_firmware qamsrv1m robotics_rb5 qca6174a_firmware sm7325p snapdragon_732g_mobile_firmware qam8650p_firmware video_collaboration_vc5_platform snapdragon_x50_5g_modem-rf qca6420_firmware aqt1000_firmware qcs6490_firmware sd855_firmware wcd9335_firmware qrb5165n_firmware qca6436 wcn3980_firmware qca6584au_firmware wsa8835 wsa8840_firmware qca6391_firmware qcn6274 qfw7124 qca6595au_firmware qdu1010_firmware qcs610 sw5100p_firmware qca6696_firmware qcs4290_firmware wcd9380_firmware qca6574_firmware csra6620 sd660 qca8081 mdm9628 wsa8815 sg4150p qam8775p qca9377 snapdragon_ar2_gen_1_firmware sd_8_gen1_5g qca6797aq mdm9628_firmware snapdragon_x75_5g_modem-rf qcm4325_firmware snapdragon_439_mobile_firmware sa8620p qca6574a_firmware sdx55 snapdragon_4_gen_1_mobile qcm4290_firmware snapdragon_720g_mobile_firmware snapdragon_865_5g_mobile snapdragon_855\+_mobile_firmware sd675 sd_8_gen1_5g_firmware wcd9375_firmware qca6391 qcn9012_firmware qcs5430_firmware snapdragon_439_mobile sg4150p_firmware qru1052_firmware sa8770p_firmware csra6620_firmware sa8295p qcs8550 fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware snapdragon_8\+_gen_2_mobile_firmware wcd9375 snapdragon_ar2_gen_1 snapdragon_765g_5g_mobile wcn3988_firmware qamsrv1h_firmware sa8145p sd_675 snapdragon_8\+_gen_1_mobile_firmware wsa8835_firmware ssg2115p_firmware wcn3980 qdx1010 wcn3680b_firmware snapdragon_w5\+_gen_1_wearable snapdragon_8_gen_1_mobile_firmware Snapdragon snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 24.01%

||

7 Day CHG+0.02%

Published-01 Apr, 2024 | 15:06

Updated-13 Jan, 2025 | 21:54

Integer Overflow to Buffer Overflow in Graphics Windows

Memory corruption while allocating memory for graphics.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_7c_gen_2_compute_platform fastconnect_6700_firmware sc8180x-aaab wsa8840_firmware sc8180x-acaf_firmware snapdragon_7c_compute_platform sc8180x\+sdx55_firmware fastconnect_7800_firmware sc8180xp-aaab sc8180x\+sdx55 aqt1000 sc8380xp_firmware snapdragon_7c_compute_platform_firmware sc8180x-ad_firmware wcd9341_firmware wsa8810_firmware wsa8845_firmware aqt1000_firmware sc8280xp-abbb_firmware sc8180x-acaf snapdragon_7c\+_gen_3_compute sm6250_firmware qca6430_firmware wcd9340 wsa8835 fastconnect_7800 wsa8845h_firmware wsa8830 sc8180xp-acaf fastconnect_6800 fastconnect_6900 sm6250 sc8180xp-ad wsa8845 fastconnect_6200_firmware wsa8835_firmware qca6420 sc8180xp-acaf_firmware fastconnect_6700 qca6420_firmware wsa8815_firmware sc8280xp-abbb wsa8845h wsa8815 qca6391 fastconnect_6900_firmware wcd9385_firmware wcd9380 sc8180x-ad wcd9385 wcd9340_firmware qca6430 snapdragon_7c\+_gen_3_compute_firmware sc8180xp-ad_firmware qca6391_firmware wsa8830_firmware sc8180xp-aaab_firmware wcd9380_firmware fastconnect_6200 fastconnect_6800_firmware sc8380xp wsa8840 sc8180x-aaab_firmware snapdragon_7c_gen_2_compute_platform_firmware wcd9341 wsa8810 Snapdragon aqt1000_firmware wcd9380_firmware qca6430_firmware wsa8840_firmware qca6391_firmware wcd9385_firmware fastconnect_6900_firmware sc8380xp_firmware wcd9340_firmware sm6250_firmware wsa8830_firmware wsa8845_firmware fastconnect_6700_firmware wsa8815_firmware wsa8835_firmware wsa8810_firmware fastconnect_6200_firmware wcd9341_firmware fastconnect_7800_firmware qca6420_firmware wsa8845h_firmware fastconnect_6800_firmware

CWE ID-CWE-680

Integer Overflow to Buffer Overflow

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.01% / 1.42%

||

7 Day CHG~0.00%

Published-01 Jul, 2024 | 14:17

Updated-01 Aug, 2024 | 22:20

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader

Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware qcn9070 ipq8173_firmware qcf8001 qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 immersive_home_318_platform_firmware ipq8078a ipq5028_firmware ipq6000 qcn5152_firmware qcn9000_firmware ipq9554 immersive_home_216_platform ipq8076a immersive_home_316_platform immersive_home_316_platform_firmware qca8386_firmware qcn6024_firmware qca8084_firmware immersive_home_318_platform ipq8074a qcn6412 qcn5124_firmware qca8082_firmware qcn5164_firmware qcn5122_firmware sdx55_firmware qcn6422_firmware qca8081_firmware qcn6023_firmware ipq5010 snapdragon_x65_5g_modem-rf_system_firmware ipq8078a_firmware qcn9274 ipq8174 ipq5028 qcn5052 qcf8001_firmware ipq6010 qcn6112_firmware qcn9074 qca8085 sdx65m qcn6132 qca8081 qcf8000 ipq8071a qcn6023 sdx65m_firmware ipq5312 ipq8071a_firmware immersive_home_3210_platform qca8085_firmware qca9888_firmware qcn6122 ipq9008_firmware ipq9570 qcn5154_firmware csr8811 qcn9100_firmware ipq5010_firmware ipq8074a_firmware qcn5022_firmware immersive_home_216_platform_firmware qcn9000 ipq8072a qcf8000_firmware ipq8076a_firmware ipq8078 qca8084 ipq8173 ipq9008 qcn5164 immersive_home_326_platform_firmware qcn6122_firmware qcn6402_firmware csr8811_firmware qcn6422 ipq9554_firmware qcn5154 qca8075_firmware qcn5024 qca9889 qcn6132_firmware qca9888 qcn5052_firmware qcn9274_firmware ipq8070a_firmware ipq6018_firmware ipq8076_firmware qcn6112 ipq8076 qcn5152 ipq6028 qcn9024 ipq9574_firmware immersive_home_3210_platform_firmware ipq5302 qcn9100 snapdragon_x65_5g_modem-rf_system ipq8078_firmware ipq9570_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn6432_firmware ipq5312_firmware qca9889_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware qcn6412_firmware ipq5332_firmware ipq5332 ipq5302_firmware immersive_home_326_platform ipq6018 qcn5022 ipq6010_firmware immersive_home_214_platform immersive_home_214_platform_firmware qca4024 sdx55 qca8075 qcn6402 qcn9022_firmware qcn6024 qcn9022 ipq8070a qcn9072_firmware ipq6000_firmware qcn9074_firmware qcn6432 Snapdragon qcn5024_firmware qcf8000_firmware ipq8076a_firmware ipq8173_firmware immersive_home_326_platform_firmware qca4024_firmware qcn6122_firmware qcn6402_firmware immersive_home_318_platform_firmware csr8811_firmware ipq5028_firmware ipq9554_firmware qca8075_firmware qcn5152_firmware qcn6132_firmware qcn9000_firmware qcn5052_firmware qcn9274_firmware ipq8070a_firmware qcn6024_firmware ipq6018_firmware ipq8076_firmware immersive_home_316_platform_firmware qca8386_firmware qca8084_firmware qcn5124_firmware qca8082_firmware qcn5164_firmware qcn5122_firmware sdx55_firmware qcn6422_firmware ipq9574_firmware qca8081_firmware qcn6023_firmware immersive_home_3210_platform_firmware snapdragon_x65_5g_modem-rf_system_firmware ipq8078a_firmware ipq8078_firmware ipq9570_firmware qcn9070_firmware qcf8001_firmware ipq8072a_firmware ipq6028_firmware qcn6112_firmware qcn6432_firmware ipq5312_firmware qca9889_firmware qcn9024_firmware ipq8174_firmware qcn6412_firmware ipq5332_firmware ipq5302_firmware sdx65m_firmware ipq8071a_firmware qca8085_firmware qca9888_firmware ipq6010_firmware ipq9008_firmware qcn5154_firmware immersive_home_214_platform_firmware qcn9022_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware qcn9072_firmware ipq6000_firmware qcn9074_firmware qcn5022_firmware immersive_home_216_platform_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.68%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:51

Updated-04 Aug, 2024 | 00:33

Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware mdm9150_firmware wsa8830 mdm9640_firmware qcs610 mdm9650 csra6620 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g wcd9370 csra6620_firmware qcs605_firmware csra6640_firmware qcs6125_firmware qca6426 wcn3990_firmware qrb5165n_firmware qca9377 wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware wcn3615_firmware wcn3660b sd662 sd460_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware sdx12_firmware wcn3615 wcn3998_firmware sm7250p_firmware qca6420 qca6436_firmware apq8053_firmware qrb5165n sd680_firmware sd778g sa515m_firmware sd429 qrb5165_firmware qrb5165m_firmware sdxr2_5g qcs6125 sd662_firmware qcs405 qca6430 wcn3988_firmware sd429_firmware sd778g_firmware wsa8810_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 sd680 wcd9326 wcd9335 wcn6851 qcs603_firmware qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 msm8953_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wcn3620 wsa8815_firmware wsa8835_firmware wcn6750_firmware qcm6125_firmware mdm9640 wcn3991 wcd9380_firmware wcn3990 sdm429w sd780g sd865_5g sdx55m_firmware wcn6856_firmware wsa8835 sdm429w_firmware wcd9380 sd888_5g qualcomm215 qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6174a sm7325p qca6430_firmware wcd9335_firmware wcn3980 wcn6750 sa515m qcs605 sd855 wsa8815 sm7325p_firmware wcn6850 mdm9650_firmware sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd695 sd768g_firmware qrb5165m wcn3980_firmware sd460 qca6391 sdx55m aqt1000_firmware wcn6740_firmware msm8953 ar8031_firmware qcm4290 wcn3680_firmware qrb5165 sd480_firmware qcs603 wcn6851_firmware qca6574au wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 qcs610_firmware mdm9150 wcn6856 wcn3680b sd695_firmware sd768g apq8096au ar8031 qcs405_firmware wcn6740 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 apq8053 apq8096au_firmware csra6640 sm7250p sdx12 qcs410_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 27.24%

||

7 Day CHG~0.00%

Published-11 Feb, 2022 | 10:40

Updated-04 Aug, 2024 | 00:33

Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware sm6375 wsa8830 wcn3991 sa6150p_firmware qca8337_firmware sa8145p_firmware wcd9380_firmware qca8337 wcn6856_firmware sdx65 wsa8835 wcd9380 sa8150p_firmware sd888_5g qca6595au_firmware wcd9370 wcn6855_firmware qca6174a wcd9335_firmware qca9377 wcn6750 wcn3998 wcd9385_firmware sd_8_gen1_5g_firmware sm6375_firmware wsa8815 wcn6850 qca6574au_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware wcn3998_firmware qca6391 sa6155p_firmware sdx65_firmware qcs6490 qcm6490_firmware sd480_firmware wcn6851_firmware wcn3988_firmware qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware sd480 wsa8810 wcn6855 wcn6851 wcd9335 sa6155p qca8081 wcn6856 sa6145p qca6174a_firmware wcd9385 qca6696_firmware qcs6490_firmware sa8145p qca6696 qca6391_firmware ar8035 wcd9375 wcd9370_firmware sa8150p sa6150p sa8155p wsa8830_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sdx12 sm8475 wcn6750_firmware ar8035_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.00%

||

7 Day CHG~0.00%

Published-12 Jun, 2018 | 20:00

Updated-16 Sep, 2024 | 16:49

In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a buffer overwrite can occur if the vdev_id received from firmware is larger than max_bssid.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 28.65%

||

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 09:14

Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 636, SD 820A, SD 835, SDM630, SDM660, SDX20.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 7.65%

||

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 22:32

Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 qca9377_firmware mdm9150_firmware wcn3991_firmware sd678 sa6150p_firmware wsa8830 sa8145p_firmware qcs610 fsm10056 wcd9360_firmware csra6620 fsm10055_firmware wcn3950_firmware sa8150p_firmware qca6595au_firmware sa6155 wcd9370 csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware qca6584au_firmware wcn3990_firmware qca9377 sa415m wcn3998 wcd9385_firmware wcn3950 sd720g wcn3660b sa8155 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware sdx12_firmware wcd9375_firmware wcn3998_firmware wcn3610_firmware wcd9360 qca6564au_firmware qca6584au sa6155p_firmware sd778g sa515m_firmware qcs6490 sa8155_firmware sa415m_firmware qcs405 wcn3988_firmware sa6145p_firmware sm6250 sd778g_firmware sa8195p wsa8810_firmware fsm10056_firmware wcn6851 wcd9335 sa6155p qca6174a_firmware wcd9385 wcd9341 qca6696_firmware qcs6490_firmware wcd9375 sa8150p sm6250_firmware wsa8830_firmware sda429w sd660 wcn3620_firmware qcm6490 sd888_5g_firmware wcn3988 sd660_firmware wcn3620 wcn6850_firmware sa8195p_firmware wsa8815_firmware wsa8835_firmware qcx315 qca6564a wcn6750_firmware wcn3610 wcn3991 sda429w_firmware wcd9380_firmware wcn3990 sd_675 sd780g qca6595 qca6564au wcn6856_firmware sd888 wsa8835 qca6574 qcx315_firmware wcd9380 sd888_5g qcs410 qca6574a wcn6855_firmware qca6174a sm7325 wcd9335_firmware wcn3980 wcn6750 sa515m qca6574_firmware wsa8815 wcn6850 wcn3660b_firmware qca6574a_firmware wcn3980_firmware qca6391 wcn6740_firmware sd678_firmware ar8031_firmware qcm6490_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware qca6564a_firmware wcd9341_firmware sd480 wsa8810 wcn6855 qcs610_firmware mdm9150 wcn6856 sa6145p wcn3680b ar8031 qca6595_firmware qcs405_firmware sa8145p wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sdx55 sa8155p csra6640 sd675 sd720g_firmware sdx12 qcs410_firmware sm7325_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.72%

||

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:25

Updated-03 Aug, 2024 | 22:24

Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 qca9377_firmware mdm9150_firmware wcn3991_firmware sd678 wsa8830 sm6250p_firmware qcs610 fsm10056 qca8337 sd7c_firmware csrb31024 wcd9360_firmware mdm9650 sdx65 fsm10055_firmware wcn3950_firmware mdm9250 sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qca6426 wcn3990_firmware sm8450 qca9377 sa415m wcn3998 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware sd720g sm6375_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware wcd9360 qca6564au_firmware sa515m_firmware sdxr2_5g sa415m_firmware wcn3988_firmware qca6430 sm6250 wcd9340 wsa8810_firmware sd765g sm8450_firmware sd765_firmware fsm10056_firmware qca6436 wcd9326 wcd9335 wcn6851 qca8081 qcs603_firmware qca6174a_firmware mdm9250_firmware wcd9385 wcd9341 qca6696_firmware sd750g sd870_firmware ar8035 qca6390 sd_8cx aqt1000 sd750g_firmware wcd9375 sm6250_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sdx20_firmware wcn3988 wcn6850_firmware wsa8815_firmware sd660_firmware wsa8835_firmware qcx315 qca6564a sm6375 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd865_5g qca6564au sdx24 sdx55m_firmware sm8450p_firmware wcn6856_firmware wsa8835 qcx315_firmware sd665_firmware wcd9380 sm6250p qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6174a sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 sa515m qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 sd7c mdm9650_firmware sd765 qca6426_firmware qca6574a_firmware sd768g_firmware sd850_firmware wcn3980_firmware sd730 qca6391 sdx55m sdxr1_firmware aqt1000_firmware sdx65_firmware sd678_firmware csrb31024_firmware sdx20 sd480_firmware qcs603 wcn6851_firmware qca6574au qca6564a_firmware wcd9341_firmware sd480 sd870 sm8450p wcn6855 wsa8810 qcs610_firmware mdm9150 wcn6856 sdxr1 sd768g qca6696 qca6391_firmware sd845_firmware wcd9370_firmware sdx55 sd675 sd845 sm7250p sd720g_firmware sdx12 qcs410_firmware ar8035_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.36%

||

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:26

Updated-03 Aug, 2024 | 22:32

Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 qca9377_firmware mdm9150_firmware wcn3991_firmware sd678 mdm9640_firmware sa6150p_firmware sa8145p_firmware qcs610 sm6250p_firmware qcs2290_firmware fsm10056 sd7c_firmware csrb31024 mdm9628_firmware mdm9650 fsm10055_firmware qcs4290 wcn3950_firmware mdm9250 sa8150p_firmware qca6420_firmware qca6595au_firmware qcs2290 sd730_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qca6584au_firmware wcn3990_firmware qca9377 sa415m wcn3998 sdw2500_firmware sd_8cx_firmware wcn3950 wcd9326_firmware mdm9628 sd720g mdm9206_firmware qsw8573_firmware wcn3615_firmware wcn3660b sd662 sd460_firmware qca6584 qca6574au_firmware wcn3680b_firmware qca6595au sdx12_firmware wcd9375_firmware wcn3615 msm8909w wcn3998_firmware apq8009w_firmware qca6420 wcn3610_firmware mdm9207 qca6564au_firmware qca6584au sa6155p_firmware qca9367_firmware wcd9306 mdm8207 sm6225 sd429 qca9367 qca4004_firmware mdm9607_firmware sd662_firmware sa415m_firmware wcn3988_firmware qca6430 sa6145p_firmware sd205 sd429_firmware sm6250 wcd9306_firmware wcd9340 sa8195p apq8017_firmware wsa8810_firmware qualcomm215_firmware fsm10056_firmware wcd9326 wcd9335 sa6155p qcs603_firmware qca6174a_firmware mdm9250_firmware qcs4290_firmware wcd9341 qca6696_firmware wcn3910_firmware wcd9375 sd_8cx aqt1000 sa8150p sm6250_firmware mdm9207_firmware qca4004 sda429w sd210 sd855_firmware sd660 wcn3620_firmware sdx20_firmware wcn3988 wsa8815_firmware sd660_firmware wcn3620 sa8195p_firmware apq8017 qca6564a wcn3610 mdm9640 qcm2290_firmware wcn3991 sda429w_firmware wcd9380_firmware wcn3990 sd_675 sdm429w msm8996au_firmware wcd9330 qca6564au sdx24 qet4101_firmware msm8909w_firmware qca6574 msm8996au sdm429w_firmware sd665_firmware wcd9380 sd850 sm6250p qualcomm215 qcs410 qca6574a mdm9206 qca6174a sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 qsw8573 mdm9205 qca6574_firmware qcs605 wcd9340_firmware sd855 wsa8815 sd665 sd7c wcn3910 qca6584_firmware mdm9650_firmware wcn3660b_firmware qca6574a_firmware sd850_firmware wcn3980_firmware sd460 sd730 sdxr1_firmware wcd9330_firmware aqt1000_firmware sd678_firmware qcm4290 csrb31024_firmware sdx20 qcs603 sm6225_firmware qca6574au sa8155p_firmware mdm9607 sd205_firmware qca6564a_firmware apq8009w wcd9341_firmware qcm4290_firmware wsa8810 sd210_firmware qcs610_firmware mdm9150 sa6145p wcn3680b sdxr1 apq8096au sa8145p mdm8207_firmware qca6696 mdm9205_firmware sd845_firmware wcd9370_firmware sa6150p sdw2500 apq8096au_firmware sa8155p sd675 sd845 qet4101 sd720g_firmware sdx12 qcs410_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.72%

||

7 Day CHG~0.00%

Published-17 Sep, 2021 | 07:05

Updated-03 Aug, 2024 | 22:24

Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm7250 mdm9640_firmware sm6250p_firmware ipq4028_firmware qca1023 qca8337 ar9380 ipq8173_firmware qcn5124 mdm9645 msm8992_firmware wcn3950_firmware sc8180x\+sdx55 qca6595au_firmware sa6155 mdm8215 sd_455_firmware apq8076 qcs6125_firmware sa415m wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware wcn3660b qsm8350_firmware qsm8350 sd460_firmware qca8081_firmware wcn3998_firmware qca6420 apq8053_firmware ipq8070_firmware qca9367_firmware ipq8078a_firmware ipq8072_firmware qca0000 sa8155_firmware qca6430 wcd9340 sdm830_firmware sd765g mdm9250_firmware qca9888_firmware qcn6122 qca6696_firmware wcd9371 sd870_firmware qca1062 qcn5154_firmware mdm8215_firmware sd_8cx sa8150p qca9992_firmware sd660 sd865_5g_firmware sd712 sd660_firmware qcn5121 qcn5022_firmware qcn7606_firmware wcn6750_firmware qca6428_firmware wcn3991 ipq4018_firmware qca4531_firmware qca9980_firmware ipq8078 sdx55m_firmware ipq8173 msm8976_firmware qca6574 sd670_firmware csr8811_firmware wcd9380 qcs410 qcn5024 sd690_5g_firmware qca9379_firmware sdx24_firmware qcn9012_firmware ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qca6584_firmware sd_8c_firmware mdm9215_firmware ipq6028 ipq8064 sd835 pmp8074 qca1990 wcn3980_firmware wcn6745_firmware sd730 qca2062_firmware wcn6740_firmware qcn5064_firmware sd678_firmware apq8064au_firmware ipq8078_firmware qca6234 qcn5054 qcs603 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware qcm4290_firmware wcn6855 qcn7605_firmware qcs610_firmware sa6145p qca9886_firmware ar8031 qca1023_firmware sdm630_firmware sd820_firmware qca6391_firmware qca4024 wcd9370_firmware sdx55 apq8053 qcn5021_firmware csra6640 qca9379 qca6234_firmware qcn7606 wsa8830 qca1062_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qca9378a qca9992 qcs4290 mdm9250 qca6420_firmware apq8009_firmware qca2064_firmware sd690_5g mdm9310_firmware sd675_firmware ipq8072 qca6564 qca6426 wcn3990_firmware qca9984_firmware qca9377 qca4531 wcd9385_firmware sdxr2_5g_firmware whs9410 wcd9326_firmware wcn3615_firmware ipq8074a apq8094 sa8155 qca6584 qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware wcn3610_firmware qca6584au sd778g ipq8174 qcn5052 qca9367 apq8092 sdm630 mdm9607_firmware sa415m_firmware wcn3988_firmware qcn9074 qca6421 sd778g_firmware sa8195p qca6694 wcd9326 wcd9335 qcn6023 qcs4290_firmware qca6390 qca9898_firmware sd750g_firmware aqt1000 msm8976 wcd9375 sc8180x\+sdx55_firmware sm6250_firmware msm8994 apq8092_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware apq8017 qcm6125_firmware sd780g sd865_5g qca6595 sd665_firmware qcn5154 qca8075_firmware ipq6005_firmware mdm9206 wcn6855_firmware qca9888 qca6310_firmware sm7325 apq8094_firmware ipq8070a_firmware mdm9615 qca6574_firmware qca9886 sd665 qca6175a sd765 qca6574a_firmware sd850_firmware apq8009 mdm9310 csrb31024_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware mdm9626_firmware qca9889_firmware sd710 mdm9607 qcn5122 mdm9645_firmware sdx20m_firmware qcn5022 qca6564_firmware sd768g qca1064_firmware wcn6740 qca8075 apq8096au_firmware qcn6024 qcn9022 sd845 mdm9615_firmware sdm830 ipq6000_firmware sdx12 qcs410_firmware qca6175a_firmware sm7325_firmware qca2066 sa6150p_firmware qcs610 qcn5550 qca6431_firmware wcd9360_firmware qca4024_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6335 qca2062 qcn5064 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware ipq8076a mdm9628 sd710_firmware qca4020 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware sa6155_firmware sdx12_firmware wcd9360 sdx20m qca6438_firmware whs9410_firmware wcn3999 qrb5165_firmware ipq5028 ipq4029_firmware qcs6125 ipq6010 sd662_firmware qcs405 sc8280xp_firmware qca1990_firmware qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcd9341 qca2066_firmware qca6431 sd750g wcn3910_firmware wsa8830_firmware sd855_firmware wcn3988 qca6438 sa8195p_firmware qca9898 ipq4028 wcn3610 mdm9640 ipq5018_firmware qca8337_firmware wcd9380_firmware ipq8072a wcd9330 msm8996au_firmware csr6030 ipq8076a_firmware qca6564au wcn6856_firmware qcn5164 qcn5054_firmware sdx50m_firmware qca8072_firmware qca6174 qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 sd7c wcn3910 qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware qca9984 qcn9024 qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware qca6421_firmware sd821_firmware ar8031_firmware qrb5165 wcn6851_firmware ipq8070 sd_636_firmware qca6564a_firmware sd480 sd870 qcn5121_firmware sd210_firmware ipq6018 sdxr1 apq8096au qca6595_firmware qcs405_firmware sa8145p qca2064 sd780g_firmware sd888_firmware sc8280xp sa8155p sd675 qca9378a_firmware ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware sd678 qcn9070 sa8145p_firmware qcs2290_firmware sm7250_firmware sd7c_firmware csra6620 qcn9072 sd765g_firmware ipq8069_firmware qca6390_firmware ipq6000 qca6174_firmware sd730_firmware wcd9370 qcn5152_firmware qca0000_firmware qca6584au_firmware apq8076_firmware qcn9000_firmware ipq5018 sd_8cx_firmware qcn7605 wcn6745 qca2065 sd662 qcn5124_firmware qca1064 qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware ipq5010 qca6564au_firmware sa6155p_firmware qca6310 sa515m_firmware qca9990 sdxr2_5g sd821 msm8994_firmware sa6145p_firmware msm8992 sm6250 sd712_firmware apq8017_firmware wsa8810_firmware sd765_firmware qca8081 ipq8071a qca6174a_firmware ipq8071a_firmware wcd9385 qca2065_firmware ar8035 csr8811 apq8064au qca6694_firmware qcn9100_firmware sd210 sd820 wcn6850_firmware wsa8835_firmware csr6030_firmware qca6564a qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 ar9380_firmware sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 msm8996au sd888_5g sm6250p ipq4018 qca6574a qca9889 qca6174a ipq8074 qca9994_firmware wcn6750 ipq8076_firmware sa515m sd855 sm4125_firmware ipq8076 qcn5021 ipq8069 qcn5152 sd768g_firmware sd460 qca6391 sdxr1_firmware ipq6005 aqt1000_firmware qcn9100 mdm9626 qcm4290 sdx50m sdx20 mdm9215 sd_455 ipq8074_firmware qca6574au sa8155p_firmware wcd9341_firmware qcm6125 wsa8810 wcn6856 sd_8c wcn3680b sd835_firmware ipq6010_firmware qca6696 sd845_firmware sa6150p qcn9022_firmware qca9990_firmware ipq8070a qcn9072_firmware sd720g_firmware ipq8071_firmware qcn9074_firmware ipq4029 sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 7.65%

||

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:25

Updated-03 Aug, 2024 | 22:24

Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 qca9377_firmware mdm9150_firmware wcn3991_firmware sd678 qcn9070 sa6150p_firmware sa8145p_firmware qcs610 sm6250p_firmware wsa8830 qcs2290_firmware fsm10056 qca8337 sd7c_firmware csrb31024 csra6620 fsm10055_firmware qcn9072 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qcs2290 qca6595au_firmware qca6390_firmware sa6155 ipq6000 sd690_5g sd730_firmware csra6620_firmware wcd9370 sd_675_firmware sd675_firmware csra6640_firmware qcn5152_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 sa415m sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 qcn6024_firmware sd720g sm6375_firmware sd662 sd460_firmware sa8155 qca6574au_firmware qcn5122_firmware sdx55_firmware qca6595au qca8081_firmware qcn6023_firmware sa6155_firmware sm7250p_firmware wcd9375_firmware wcn3999_firmware qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware wcd9306 sm6225 wcn3999 sa515m_firmware qcs6490 qrb5165_firmware sdxr2_5g qcn5052 sa8155_firmware ipq6010 qca4004_firmware sd662_firmware sa415m_firmware qcs405 wcn3988_firmware qcn9074 sa6145p_firmware sm6250 sd778g_firmware wcd9306_firmware wcd9340 sa8195p sd765g sd765_firmware fsm10056_firmware qca6436 wcn6851 wcd9335 sa6155p qca8081 qcn6023 qca6174a_firmware qcs4290_firmware wcd9385 qca6696_firmware qcs6490_firmware sd750g sd870_firmware ar8035 csr8811 qca6390 sd_8cx sa8150p sd750g_firmware sm6250_firmware wcd9375 wcn3910_firmware qca4004 wsa8830_firmware sd660 sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 sd660_firmware wcn6850_firmware wsa8835_firmware sa8195p_firmware qcn5121 qcx315 qcn5022_firmware qca6564a wcn6750_firmware qca8072 qcm2290_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 qcn9000 sd_675 sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware wsa8835 qca6574 qcx315_firmware sd665_firmware csr8811_firmware wcd9380 sd888_5g sm6250p qcs410 qca8075_firmware qca6574a sd690_5g_firmware ipq6005_firmware wcn6855_firmware qca6174a sm7325p sdx24_firmware qca8072_firmware wcd9335_firmware qcn5052_firmware wcn3980 wcn6750 ipq6018_firmware mdm9205 sa515m qca6574_firmware wcd9340_firmware sm7325p_firmware sd665 sd7c wcn3910 wcn6850 sdx57m_firmware sd765 qca6426_firmware qca6574a_firmware qca9984 ipq6028 qcn5021 qcn5152 qcn9024 sd768g_firmware wcn3980_firmware sd460 qca6391 sd730 sdx55m ipq6005 sd678_firmware ar8031_firmware csrb31024_firmware qcm4290 qcm6490_firmware qcn9070_firmware qrb5165 sd480_firmware wcn6851_firmware ipq6028_firmware sm6225_firmware qca6574au sa8155p_firmware qcn5122 qca6564a_firmware qcn9024_firmware sdx57m qcm4290_firmware sd480 sd870 qcn5121_firmware wcn6855 qcs610_firmware mdm9150 wcn6856 qsm8250 ipq6018 qcn5022 sa6145p qca6564_firmware ipq6010_firmware ar8031 sd768g qcs405_firmware sa8145p qca6696 mdm9205_firmware qca6391_firmware wcd9370_firmware sa6150p sdx55 qca8075 qcn5021_firmware qcn9022_firmware csra6640 qcn6024 qcn9022 sa8155p sd675 qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware qcn9074_firmware qcs410_firmware ar8035_firmware qcm2290 qsm8250_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.34%

||

7 Day CHG~0.00%

Published-20 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.34%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:17

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of input size validation before copying to buffer in PMIC function can lead to heap overflow.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.78%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:31

Updated-05 Aug, 2024 | 08:24

Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 mdm9150_firmware sd_855 mdm9640_firmware sd_820a msm8996au_firmware sdx20 sd_670_firmware sd_425 sdm660 sdx24 sd_430_firmware mdm9607_firmware sd_435 mdm9650 sd_636 sd_710_firmware sdm630 sd_625 qca6574au mdm9607 msm8996au sd_636_firmware sd_450_firmware sd_845_firmware sd_820a_firmware mdm9150 qcs605_firmware mdm9206 sd_425_firmware sd_850_firmware sdx24_firmware sd_625_firmware sd_450 sd_855_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_845 mdm9206_firmware qcs605 sd_427 sd_430 sd_670 sd_435_firmware sd_835_firmware mdm9650_firmware sd_710 sdx20_firmware sd_835 qca6574au_firmware sda660 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.69%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 19:00

Updated-16 Sep, 2024 | 23:05

Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.41%

||

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 08:24

Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_12 sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_625_firmware ipq8074 sd_450 sd_16_firmware sd_8cx_firmware sd_845 mdm9206_firmware qcs605 sd_52_firmware sd_632_firmware sd_835_firmware mdm9650_firmware sd_12_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware qca8081_firmware sxr1130 msm8909w sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_16 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 sd_625 ipq8074_firmware sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qca8081 mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sd_52 sdm630_firmware sda660_firmware sd_8cx sd_430 sd_427 sd_670 sd_435_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.34%

||

7 Day CHG~0.00%

Published-20 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, When allocating heap using user supplied size, Possible heap overflow vulnerability due to integer overflow in roundup to native pointer.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.25%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing SET_PASSPOINT_LIST vendor command HDD does not make sure that the realm string that gets passed by upper-layer is NULL terminated. This may lead to buffer overflow as strlen is used to get realm string length to construct the PASSPOINT WMA command.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 11.10%

||

7 Day CHG~0.00%

Published-01 Jul, 2024 | 14:17

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services

Memory corruption while processing IOCTL handler in FastRPC.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8845_firmware snapdragon_7c\+_gen_3 wsa8840 wcd9370 sc8180x-ab_firmware wcd9340_firmware wcd9385 sc8380xp wcd9341_firmware sc8180xp-ab_firmware sc8280xp-bb sc8180x-af sc8180x-ab fastconnect_6700 qca6420 sc8180xp-ab sc8180xp-ad qca6430 wsa8815_firmware wcd9370_firmware sc8180xp-ad_firmware qcm6490_firmware wcd9340 wcd9341 qcm6490 sc8180xp-aa_firmware wsa8810_firmware wsa8845h_firmware sc8180x-af_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sc8180x-ac wsa8835 wsa8840_firmware qca6391_firmware sc8180x-ac_firmware qca6430_firmware sc8180x-aa fastconnect_6800_firmware qcs5430 wsa8845h sc8180xp-ac_firmware wcd9380_firmware qcm5430 sc8180x-ad_firmware qcm5430_firmware wsa8815 wsa8830 sc8180x\+sdx55_firmware sc8380xp_firmware sc8180xp-ac fastconnect_6800 sc8280xp-ab_firmware wcd9375_firmware fastconnect_7800_firmware fastconnect_6900 snapdragon_7c\+_gen_3_firmware qca6391 sc8280xp-ab qcs5430_firmware sc8180x\+sdx55 wcd9385_firmware sc8180xp-af_firmware fastconnect_6900_firmware sc8180xp-aa wcd9380 fastconnect_6200 sc8180x-aa_firmware fastconnect_7800 wcd9375 sc8180xp-af wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware sc8180x-ad wsa8835_firmware wsa8810 qcs6490 fastconnect_6200_firmware sc8280xp-bb_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon aqt1000_firmware qcm5430_firmware wcd9380_firmware qca6430_firmware qcs6490_firmware qcm6490_firmware qcs5430_firmware wsa8840_firmware qualcomm_video_collaboration_vc3_platform_firmware qca6391_firmware wcd9385_firmware fastconnect_6900_firmware wcd9370_firmware sc8380xp_firmware wcd9340_firmware wsa8830_firmware wsa8845_firmware fastconnect_6700_firmware wsa8815_firmware wsa8835_firmware wsa8810_firmware fastconnect_6200_firmware wcd9341_firmware fastconnect_7800_firmware qca6420_firmware wcd9375_firmware wsa8845h_firmware fastconnect_6800_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 5.88%

||

7 Day CHG~0.00%

Published-03 Jun, 2024 | 10:05

Updated-27 Jan, 2025 | 19:08

Integer Overflow or Wraparound in WLAN HOST

Memory corruption when more scan frequency list or channels are sent from the user space.

Vendor-Qualcomm Technologies, Inc.

Product-qca6584au_firmware qca6554a qcc2076_firmware qca8337_firmware wcd9335_firmware qfw7124_firmware qca6696_firmware qcc710 qca8081_firmware qcc2073_firmware qca6595au_firmware qca6584au qcn6224_firmware qfw7114_firmware qca8081 snapdragon_660_mobile qca6554a_firmware wcn3990 qca6564au sd660 qcn6224 snapdragon_x75_5g_modem-rf qcn6274_firmware qfw7114 fastconnect_7800 wcn3990_firmware ar8035 fastconnect_7800_firmware qca6564au_firmware qcc2073 sd660_firmware wcd9341_firmware wcd9340 qca6595_firmware qca8337 wcn3980_firmware qcc710_firmware ar8035_firmware qcn6274 qfw7124 qca6574a qca6595 qca6574a_firmware qcc2076 wcd9341 wcn3980 qca6574au qca6574 wcd9340_firmware wcd9335 qca6574_firmware qca6696 qca6595au snapdragon_660_mobile_firmware qca6574au_firmware snapdragon_x75_5g_modem-rf_firmware Snapdragon qca6564au_firmware qca8337_firmware qca6584au_firmware qcn6274_firmware wcn3990_firmware qca6696_firmware qca6595_firmware wcd9335_firmware qfw7114_firmware qcc2076_firmware qca6554a_firmware snapdragon_x75_5g_modem-rf_system_firmware qcc2073_firmware qca6574_firmware wcd9340_firmware qcc710_firmware qcn6224_firmware snapdragon_660_mobile_platform_firmware qca6574a_firmware sd660_firmware wcd9341_firmware fastconnect_7800_firmware qca6574au_firmware qca6595au_firmware qca8081_firmware wcn3980_firmware qfw7124_firmware ar8035_firmware

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-5.9||MEDIUM

EPSS-0.04% / 11.55%

||

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Integer Overflow or Wraparound in HLOS

Memory corruption in HLOS while checking for the storage type.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware robotics_rb3 sd865_5g qca6595 wcd9370 qca8081_firmware snapdragon_670_mobile qca6696 wcd9340_firmware wcd9341_firmware wcd9395_firmware qcc710_firmware qca6426 wcn6740_firmware fastconnect_6700 snapdragon_780g_5g_mobile snapdragon_x50_5g_modem-rf_firmware snapdragon_782g_mobile_firmware wsa8832_firmware qca8337 qdu1110 qca6426_firmware wcd9395 sc8180xp-aaab qca6574au_firmware snapdragon_x72_5g_modem-rf qam8295p wcd9341 qca6574au wcd9390 snapdragon_888\+_5g_mobile_firmware sa8620p_firmware wsa8810_firmware wsa8845h_firmware snapdragon_778g_5g_mobile_firmware sa9000p_firmware sc8180xp-acaf srv1h snapdragon_850_mobile_compute fastconnect_6800_firmware qcs5430 qcm5430 qcm5430_firmware sa8770p snapdragon_678_mobile_firmware ssg2115p qcc710 snapdragon_xr2_5g_firmware sa8540p qsm8350_firmware fastconnect_6900 qru1032_firmware qep8111 sa7255p qfw7114 wcd9385_firmware qca6421 qca6310 qam8255p_firmware sa8155_firmware qca6335 snapdragon_x65_5g_modem-rf wsa8845 sa6155p qca6421_firmware sc8180x-ad qca6564au_firmware wsa8810 qam8650p qdu1000_firmware sa9000p srv1h_firmware snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile sm7315_firmware qdu1010 wcd9326_firmware sa6155p_firmware snapdragon_845_mobile_firmware wsa8840 srv1m_firmware snapdragon_x35_5g_modem-rf_firmware snapdragon_782g_mobile qdu1210_firmware snapdragon_x55_5g_modem-rf qfw7124_firmware qca6436_firmware snapdragon_x55_5g_modem-rf_firmware snapdragon_7c\+_gen_3_compute_firmware qca6420 wcd9370_firmware qdu1110_firmware qdu1000 sa7255p_firmware qca6574a snapdragon_x72_5g_modem-rf_firmware qca6174a wcd9340 qdu1210 snapdragon_auto_5g_modem-rf_gen_2 qca6335_firmware qcm6490 sa8540p_firmware snapdragon_765_5g_mobile_firmware vision_intelligence_300_firmware sa8775p qca6574 sd675_firmware snapdragon_855_mobile_firmware qca6430_firmware sa8775p_firmware qamsrv1h sdx57m wsa8845h wcd9326 sa8155p_firmware qca6564a sa8155p snapdragon_765g_5g_mobile_firmware wsa8830 sa6145p snapdragon_768g_5g_mobile_firmware sa8255p_firmware ar8035 qamsrv1m_firmware sa6155 sa8650p_firmware qcn6224 snapdragon_865\+_5g_mobile_firmware qca6698aq wcn3950_firmware ssg2125p_firmware fastconnect_6200 sd670 sm7325p_firmware sc8180x-acaf_firmware qdx1011 sa8150p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 robotics_rb3_firmware snapdragon_x75_5g_modem-rf_firmware sd670_firmware snapdragon_8_gen_3_mobile snapdragon_855_mobile qcs6490 sc8180xp-acaf_firmware snapdragon_778g_5g_mobile fastconnect_6200_firmware wsa8830_firmware qcn6224_firmware qca6431 qca6678aq_firmware wsa8845_firmware wsa8832 sdx57m_firmware sxr2130_firmware srv1m qca6678aq snapdragon_860_mobile_firmware snapdragon_x35_5g_modem-rf ar8035_firmware sc8180xp-aaab_firmware snapdragon_778g\+_5g_mobile sc8380xp sd888_firmware qca6564au sc8180xp-ad sc8280xp-abbb wsa8815_firmware qca8337_firmware qca9377_firmware qcm6490_firmware sm7250p_firmware qru1032 vision_intelligence_400_firmware wcn3950 snapdragon_870_5g_mobile_firmware qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_7c\+_gen_3_compute snapdragon_778g\+_5g_mobile_firmware sa8295p_firmware snapdragon_870_5g_mobile sd_675_firmware snapdragon_678_mobile sm7250p sc8180x-acaf sa8155 sd_8cx_firmware sc8180x-ad_firmware qca6584au sd888 qcn6274_firmware qru1062_firmware snapdragon_850_mobile_compute_firmware snapdragon_675_mobile_firmware wcn6740 snapdragon_768g_5g_mobile sc8380xp_firmware snapdragon_780g_5g_mobile_firmware qru1062 qca6310_firmware snapdragon_845_mobile snapdragon_8_gen_3_mobile_firmware fastconnect_6800 qfw7114_firmware qca6595_firmware fastconnect_7800_firmware snapdragon_675_mobile snapdragon_865_5g_mobile_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware qam8255p sa6155_firmware snapdragon_xr2_5g sa8150p snapdragon_x24_lte_modem sc8180x-aaab sxr1230p sc8180x-aaab_firmware video_collaboration_vc3_platform aqt1000 qam8295p_firmware sd855 qca6431_firmware wcn3990_firmware sm7315 qca6698aq_firmware qca6564a_firmware wcd9385 snapdragon_888\+_5g_mobile qsm8350 snapdragon_8_gen_1_mobile sa8255p sxr1230p_firmware wcd9390_firmware snapdragon_865\+_5g_mobile qep8111_firmware qca6430 snapdragon_855\+_mobile snapdragon_765_5g_mobile qdx1011_firmware snapdragon_860_mobile sc8180xp-ad_firmware sdx55_firmware ssg2125p qru1052 sxr2130 snapdragon_x65_5g_modem-rf_firmware qamsrv1m qca6174a_firmware sm7325p snapdragon_x50_5g_modem-rf qam8650p_firmware snapdragon_670_mobile_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sd855_firmware wcn3980_firmware qca6584au_firmware qca6436 qcn6274 qfw7124 snapdragon_x24_lte_modem_firmware wsa8835 qca6391_firmware wsa8840_firmware qca6595au_firmware qdu1010_firmware qca6696_firmware wcd9380_firmware qca6574_firmware qca8081 wsa8815 sd_8_gen1_5g qam8775p qca9377 snapdragon_ar2_gen_1_firmware qca6797aq snapdragon_x75_5g_modem-rf sa8620p qca6574a_firmware sdx55 snapdragon_865_5g_mobile snapdragon_855\+_mobile_firmware sd675 sd_8_gen1_5g_firmware wcd9375_firmware qca6391 qcs5430_firmware qru1052_firmware sa8770p_firmware sa8295p sc8280xp-abbb_firmware fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware wcd9375 vision_intelligence_300 snapdragon_ar2_gen_1 snapdragon_765g_5g_mobile qamsrv1h_firmware sd_675 sd_8cx vision_intelligence_400 ssg2115p_firmware wsa8835_firmware wcn3980 qdx1010 snapdragon_8_gen_1_mobile_firmware Snapdragon snapdragon

CWE ID-CWE-190

Integer Overflow or Wraparound