ByteOS

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product

Versions

Affected

IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Problem Types

Type	CWE ID	Description
text	N/A	Improper Input Validation in Kernel

Type: text

CWE ID: N/A

Description: Improper Input Validation in Kernel

References

Hyperlink	Resource
https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:25 Jul, 2019 | 17:15

Updated At:05 Aug, 2019 | 17:19

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	4.9	MEDIUM	AV:L/AC:L/Au:N/C:N/I:N/A:C

Type: Primary

Version: 3.0

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 4.9

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:N/I:N/A:C

CPE Matches

cpe:2.3:o:qualcomm:ipq4019_firmware:-:*:*:*:*:*:*:*

>>ipq4019_firmware>>-

cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:*

>>ipq4019>>-

cpe:2.3:o:qualcomm:ipq8064_firmware:-:*:*:*:*:*:*:*

>>ipq8064_firmware>>-

cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:*

>>ipq8064>>-

cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*

>>ipq8074_firmware>>-

cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*

>>ipq8074>>-

cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*

>>mdm9150_firmware>>-

cpe:2.3:h:qualcomm:mdm9150:-:*:*:*:*:*:*:*

>>mdm9150>>-

cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*

>>mdm9640_firmware>>-

cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*

>>mdm9640>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

>>mdm9650_firmware>>-

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

>>mdm9650>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

>>msm8909w_firmware>>-

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

>>msm8909w>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

>>msm8996au_firmware>>-

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

>>msm8996au>>-

cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*

>>qcs405_firmware>>-

cpe:2.3:h:qualcomm:qcs405:-:*:*:*:*:*:*:*

>>qcs405>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

>>qcs605_firmware>>-

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

>>qcs605>>-

cpe:2.3:o:qualcomm:qualcomm_215_firmware:-:*:*:*:*:*:*:*

>>qualcomm_215_firmware>>-

cpe:2.3:h:qualcomm:qualcomm_215:-:*:*:*:*:*:*:*

>>qualcomm_215>>-

cpe:2.3:o:qualcomm:sd_425_firmware:-:*:*:*:*:*:*:*

>>sd_425_firmware>>-

cpe:2.3:h:qualcomm:sd_425:-:*:*:*:*:*:*:*

>>sd_425>>-

cpe:2.3:o:qualcomm:sd_427_firmware:-:*:*:*:*:*:*:*

>>sd_427_firmware>>-

cpe:2.3:h:qualcomm:sd_427:-:*:*:*:*:*:*:*

>>sd_427>>-

cpe:2.3:o:qualcomm:sd_430_firmware:-:*:*:*:*:*:*:*

>>sd_430_firmware>>-

cpe:2.3:h:qualcomm:sd_430:-:*:*:*:*:*:*:*

>>sd_430>>-

cpe:2.3:o:qualcomm:sd_435_firmware:-:*:*:*:*:*:*:*

>>sd_435_firmware>>-

cpe:2.3:h:qualcomm:sd_435:-:*:*:*:*:*:*:*

>>sd_435>>-

cpe:2.3:o:qualcomm:sd_439_firmware:-:*:*:*:*:*:*:*

>>sd_439_firmware>>-

cpe:2.3:h:qualcomm:sd_439:-:*:*:*:*:*:*:*

>>sd_439>>-

cpe:2.3:o:qualcomm:sd_429_firmware:-:*:*:*:*:*:*:*

>>sd_429_firmware>>-

cpe:2.3:h:qualcomm:sd_429:-:*:*:*:*:*:*:*

>>sd_429>>-

cpe:2.3:o:qualcomm:sd_450_firmware:-:*:*:*:*:*:*:*

>>sd_450_firmware>>-

cpe:2.3:h:qualcomm:sd_450:-:*:*:*:*:*:*:*

>>sd_450>>-

cpe:2.3:o:qualcomm:sd_625_firmware:-:*:*:*:*:*:*:*

>>sd_625_firmware>>-

cpe:2.3:h:qualcomm:sd_625:-:*:*:*:*:*:*:*

>>sd_625>>-

cpe:2.3:o:qualcomm:sd_632_firmware:-:*:*:*:*:*:*:*

>>sd_632_firmware>>-

cpe:2.3:h:qualcomm:sd_632:-:*:*:*:*:*:*:*

>>sd_632>>-

cpe:2.3:o:qualcomm:sd_636_firmware:-:*:*:*:*:*:*:*

>>sd_636_firmware>>-

cpe:2.3:h:qualcomm:sd_636:-:*:*:*:*:*:*:*

>>sd_636>>-

cpe:2.3:o:qualcomm:sd_665_firmware:-:*:*:*:*:*:*:*

>>sd_665_firmware>>-

cpe:2.3:h:qualcomm:sd_665:-:*:*:*:*:*:*:*

>>sd_665>>-

cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*

>>sd_675_firmware>>-

cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*

>>sd_675>>-

cpe:2.3:o:qualcomm:sd_712_firmware:-:*:*:*:*:*:*:*

>>sd_712_firmware>>-

cpe:2.3:h:qualcomm:sd_712:-:*:*:*:*:*:*:*

>>sd_712>>-

cpe:2.3:o:qualcomm:sd_710_firmware:-:*:*:*:*:*:*:*

>>sd_710_firmware>>-

cpe:2.3:h:qualcomm:sd_710:-:*:*:*:*:*:*:*

>>sd_710>>-

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin	product-security@qualcomm.com	Patch Third Party Advisory

Hyperlink: https://www.codeaurora.org/security-bulletin/2019/07/01/july-2019-code-aurora-security-bulletin

Source: product-security@qualcomm.com

Resource:

Patch

Third Party Advisory

Similar CVEs

381Records found

CVE-2017-18147

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.16% / 36.95%

7 Day CHG~0.00%

Published-03 Apr, 2018 | 17:00

Updated-17 Sep, 2024 | 04:19

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in MMCP, a downlink message is not being properly validated.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

CVE-2017-18320

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.13%

7 Day CHG~0.00%

Published-03 Jan, 2019 | 15:00

Updated-05 Aug, 2024 | 21:20

QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and snapdragon mobile in versions MSM8996AU, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 810, SD 820, SD 820A, SD 835, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130.

CWE ID-CWE-20

Improper Input Validation

CVE-2023-33104

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.14% / 34.80%

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-11 Aug, 2025 | 15:06

Improper input Validation in Multi-Mode Call Processor

Transient DOS while processing PDU Release command with a parameter PDU ID out of range.

CWE ID-CWE-20

Improper Input Validation

CVE-2019-14010

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.24% / 47.52%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd buffer map which happens to be at same physical address in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, Rennell, SA6155P, SDM660, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

CWE ID-CWE-20

Improper Input Validation

CVE-2017-18155

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 29.30%

7 Day CHG~0.00%

Published-12 Jul, 2018 | 14:00

Updated-16 Sep, 2024 | 23:36

While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninitialized variable can be used leading to a kernel fault.

Product-sd_625 sd_820_firmware sd_835_firmware msm8996au sd_820 sd_625_firmware sd_450 sd_820a msm8996au_firmware sd_835 sd_450_firmware sd_820a_firmware Snapdragon Automobile, Snapdragon Mobile

CWE ID-CWE-20

Improper Input Validation

CVE-2017-14908

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 28.91%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the SafeSwitch test application does not properly validate the number of blocks to verify.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

CVE-2017-11027

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.22%

7 Day CHG~0.00%

Published-16 Nov, 2017 | 22:00

Updated-20 Apr, 2025 | 01:37

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing UBI image, size is not validated for being smaller than minimum header size causing unintialized data access vulnerability.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

CVE-2016-10347

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.00%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated.

Product-android All Qualcomm products

CWE ID-CWE-20

Improper Input Validation

CVE-2019-10577

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.26% / 49.35%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Improper input validation while processing SIP URI received from the network will lead to buffer over-read and then to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware mdm9655_firmware sdm660 sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 sxr2130_firmware mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sdm850 sm8250 mdm9615_firmware apq8017 saipan nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

CVE-2016-10464

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.37% / 58.25%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 19:56

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574AU, QCA9377, SD 210/SD 212/SD 205, SD 425, SD 600, SD 650/52, SD 808, SD 810, SD 820, and SDX20, lack of input validation for HCI H4 UART packet ID cause system denial of service.

CWE ID-CWE-20

Improper Input Validation

CVE-2019-10552

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.24% / 46.66%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI Realloc cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

CVE-2019-10595

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 26.50%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8064, APQ8096AU, IPQ4019, IPQ8064, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909, MSM8909W, MSM8939, MSM8996AU, QCA4531, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SDA660, SDM630, SDM636, SDM660, SDX20, SDX24

Product-qca9377_firmware qca4531_firmware mdm9640_firmware sdm636_firmware apq8064 qca9980_firmware msm8996au_firmware sdx20 sdm660 sdx24 sdm630 mdm9607_firmware mdm9650 qca9558 qca9558_firmware qca6574au mdm9607 msm8996au qca9880_firmware qca9980 qca9880 msm8939_firmware apq8009_firmware ipq4019_firmware mdm9207c_firmware mdm9206 mdm9207c qca6174a_firmware qca6174a qca9379_firmware qca9886_firmware msm8909 sdx24_firmware apq8096au sdm636 sdm660_firmware qca9377 qca4531 sdm630_firmware sda660_firmware mdm9615 mdm9206_firmware msm8939 ipq4019 qca9886 apq8053 apq8096au_firmware mdm9615_firmware mdm9650_firmware sdx20_firmware ipq8064 qca6574au_firmware sda660 apq8064_firmware apq8009 qca9379 msm8909_firmware apq8053_firmware ipq8064_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2019-10626

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 13.07%

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 22:32

Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Rennell, Saipan, SC8180X, SDA660, SDA845, SDM429W, SDM439, SDM670, SDM710, SDX20, SDX24, SDX55, SM8150, SM8250, SXR1130, SXR2130

Product-mdm9640_firmware sdm429w msm8996au_firmware sdx24 sdm439 mdm9650 msm8909w_firmware msm8996au sdm429w_firmware apq8009_firmware sdm670 sxr2130 qcs605_firmware ipq4019_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware ipq8074 sda845_firmware apq8098 ipq6018_firmware mdm9206_firmware qcs605 mdm9650_firmware ipq8064 sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware ipq8064_firmware sda845 apq8098_firmware sdx20 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 ipq8074_firmware sdm710 mdm9607 apq8017_firmware sdm710_firmware mdm9207c_firmware ipq6018 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sda660_firmware rennell_firmware ipq4019 sdx55 apq8053 apq8096au_firmware saipan_firmware sm8250 sm8150 sdx20_firmware apq8017 saipan mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2019-10563

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.88%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 22:24

Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MSM8996AU, MSM8998, QCN7605, QCS405, QCS605, SDA660, SDM636, SDM660, SDX20, SDX24

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

CVE-2023-21627

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 8.49%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-02 Aug, 2024 | 09:44

Incorrect Type Conversion or Cast in Trusted Execution Environment

Memory corruption in Trusted Execution Environment while calling service API with invalid address.

Product-wsa8830 sda429w_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware sw5100p sd865_5g qcc5100 sdx55m_firmware wcn6856_firmware wsa8835 sd_8_gen1_5g wcd9380 sa8150p_firmware sd888_5g qca6420_firmware qca6595au_firmware qca6390_firmware wcn6855_firmware qca6426 qca6430_firmware wcn3980 wcn3998 wcd9385_firmware sdxr2_5g_firmware sd_8_gen1_5g_firmware wcn3660b sd855 wsa8815 wcn6850 qca6426_firmware wcn3660b_firmware wcn7850 qca6574au_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcn3980_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware sdx55m qcc5100_firmware aqt1000_firmware sa6155p_firmware qcs8155 wcn7851 sdxr2_5g wcn6851_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 sd870 qca6436 wcn6851 wcn6855 sa6155p sw5100p_firmware wcn7851_firmware wcn6856 sa6145p wcn3680b wcd9385 wcd9341 qca6696_firmware sa8145p sd870_firmware qca6696 qca6391_firmware qca6390 aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sda429w sd855_firmware sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qcs8155_firmware sw5100_firmware wcn3610 Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CVE-2023-21671

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.06% / 19.18%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Improper Input Validation in Core

Memory Corruption in Core during syscall for Sectools Fuse comparison feature.

Product-snapdragon_780g_5g_mobile_platform sm7315_firmware snapdragon_782g_mobile_platform wcd9380_firmware wcd9370 snapdragon_888\+_5g_mobile_platform_sm7315 snapdragon_778g\+_5g_mobile_platform wsa8830 snapdragon_780g_5g_mobile_platform_firmware snapdragon_888_5g_mobile_platform wcd9385 sd888 qsm8350 sd888_firmware snapdragon_7c\+_gen_3_compute_firmware wcn6740 wcn6740_firmware fastconnect_6700 snapdragon_778g\+_5g_mobile_platform_firmware qsm8350_firmware wcd9375_firmware fastconnect_6900 qca6391 wcd9370_firmware snapdragon_778g_5g_mobile_platform_firmware snapdragon_782g_mobile_platform_firmware wcd9385_firmware fastconnect_6900_firmware wcd9380 qcm6490_firmware sm7325p_firmware snapdragon_888_5g_mobile_platform_firmware wcd9375 sm7325p qcm6490 snapdragon_778g_5g_mobile_platform fastconnect_6700_firmware video_collaboration_vc3_platform_firmware snapdragon_888\+_5g_mobile_platform__firmware qcs6490_firmware wsa8835_firmware qcs6490 snapdragon_7c\+_gen_3_compute wsa8835 qca6391_firmware wsa8830_firmware video_collaboration_vc3_platform Snapdragon

CWE ID-CWE-20

Improper Input Validation

CVE-2019-10535

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 13.30%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 22:24

Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, APQ8098, MDM9640, MSM8996AU, MSM8998, QCA6574AU, QCN7605, QCS405, QCS605, SDA845, SDM845, SDX20

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2019-10501

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 28.05%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CWE ID-CWE-20

Improper Input Validation

CVE-2018-21055

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 41.31%

7 Day CHG~0.00%

Published-08 Apr, 2020 | 17:51

Updated-05 Aug, 2024 | 12:19

An issue was discovered on Samsung mobile devices with N(7.0) (Qualcomm models using MSM8996 chipsets) software. A device can be rooted with a custom image to execute arbitrary scripts in the INIT context. The Samsung ID is SVE-2018-11940 (September 2018).

Vendor-n/a Qualcomm Technologies, Inc.Google LLC

Product-android msm8996 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2018-5869

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.13%

7 Day CHG~0.00%

Published-18 Jan, 2019 | 22:00

Updated-05 Aug, 2024 | 05:47

Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 800, SD 810

CWE ID-CWE-20

Improper Input Validation

CVE-2018-3582

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 17.31%

7 Day CHG~0.00%

Published-12 Jun, 2018 | 20:00

Updated-16 Sep, 2024 | 17:23

Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2018-3597

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.42%

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 18:48

In the ADSP RPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, an arbitrary kernel write can occur.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

CVE-2018-3574

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.05% / 14.54%

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 04:50

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, userspace can request ION cache maintenance on a secure ION buffer for which the ION_FLAG_SECURE ion flag is not set and cause the kernel to attempt to perform cache maintenance on memory which does not belong to HLOS.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

CVE-2016-5872

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.00%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated.

Product-android All Qualcomm products

CWE ID-CWE-20

Improper Input Validation

CVE-2022-40502

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.12% / 31.55%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 12:21

Improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host.

Product-qcn5024_firmware wsa8830 qcn9070 sxr2230p_firmware qcs610 ipq8173_firmware qcn5124 qca4024_firmware qcn9072 wcn3950_firmware ipq8078a ipq5028_firmware qca6595au_firmware ipq6000 wcd9370 ssg2115p qcn5152_firmware qca6584au_firmware qcn9000_firmware ipq5018 qca6554a_firmware wcd9385_firmware qam8295p wcn3950 ipq8076a qcn6024_firmware sd_8_gen1_5g_firmware ipq8074a qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware wcn7850 qca6574au_firmware qcn5122_firmware qcn5164_firmware qca6595au qca8081_firmware qcn6023_firmware wcd9375_firmware qcn9002 ipq5010 qca6564au_firmware qca6584au sa6155p_firmware sd680_firmware ipq8078a_firmware qcn9274 ipq8174 qcn9001 wcn7851 ipq5028 qca6698aq qcn5052 ipq6010 qcn6112_firmware wcn3988_firmware qcn9074 sa8195p qcn6132 wsa8810_firmware sd680 sa6155p sg4150p qca8081 wcn7851_firmware qca6698aq_firmware ipq8071a qcn6023 ipq8071a_firmware wcd9385 qca9888_firmware qcn6122 wcd9341 qca6696_firmware ipq9008_firmware qcn5154_firmware csr8811 wcd9375 qcn9100_firmware wsa8830_firmware ipq5010_firmware ipq8074a_firmware wcn3988 wsa8815_firmware wcn7850_firmware wsa8835_firmware sa8195p_firmware sm8475 qcn5022_firmware sa8295p_firmware sa4150p sg4150p_firmware qca8072 ipq5018_firmware wcd9380_firmware ssg2125p qcn9000 ipq8072a qca6554a ipq8076a_firmware qca6595 ipq8078 qca6564au qcn9001_firmware ipq8173 wcn6856_firmware ipq9008 qcn5164 qcn6122_firmware qca6574 sxr1230p_firmware wsa8835 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5154 qca8075_firmware ssg2125p_firmware qca6574a qcn5024 wcn6855_firmware qca9889 qcn6132_firmware qcn9003_firmware sxr1230p qca9888 qca8072_firmware wcn3980 qcn5052_firmware qcn9274_firmware qcn9003 ipq8070a_firmware ipq6018_firmware ipq8076_firmware qca6574_firmware wsa8815 qcn6112 sxr2230p ipq8076 qca6574a_firmware qcn5152 ipq6028 qcn9024 ipq9574_firmware wcn3980_firmware sa8295p wcn6740_firmware qcn6102 qcn9100 ipq8078_firmware wsa8832_firmware qcn5054 qcn9070_firmware ipq6028_firmware ipq8072a_firmware qca6574au qca9889_firmware sa8155p_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware wcd9341_firmware wsa8810 wsa8832 wcn6855 qcs610_firmware wcn6856 ipq6018 qcn5022 ipq6010_firmware qca6595_firmware wcn6740 qca6696 sa4150p_firmware qca4024 wcd9370_firmware qca8075 qcn9022_firmware sa8155p qcn6024 qcn9022 ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware qcs410_firmware Snapdragon qcn5024_firmware ipq5018_firmware wcd9380_firmware sxr2230p_firmware ipq8076a_firmware ipq8173_firmware qcn9001_firmware wcn6856_firmware qca4024_firmware qcn6122_firmware sxr1230p_firmware wcn3950_firmware csr8811_firmware ipq5028_firmware qca6595au_firmware qcn5054_firmware qca8075_firmware ssg2125p_firmware wcn6855_firmware qcn5152_firmware qcn6132_firmware qcn9003_firmware qca6584au_firmware qca8072_firmware qcn9000_firmware qcn5052_firmware qcn9274_firmware ipq8070a_firmware qca6554a_firmware wcd9385_firmware qcn6024_firmware ipq8076_firmware ipq6018_firmware qca6574_firmware sd_8_gen1_5g_firmware qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware qca6574a_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware qcn6023_firmware ipq9574_firmware wcn3980_firmware wcn6740_firmware qca6564au_firmware sd680_firmware sa6155p_firmware ipq8078a_firmware ipq8078_firmware wsa8832_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn6112_firmware wcn3988_firmware qca9889_firmware sa8155p_firmware qcn9024_firmware ipq8174_firmware wsa8810_firmware wcd9341_firmware qcs610_firmware wcn7851_firmware qca6698aq_firmware ipq8071a_firmware qca9888_firmware ipq6010_firmware qca6696_firmware qca6595_firmware ipq9008_firmware qcn5154_firmware sa4150p_firmware wcd9370_firmware qcn9100_firmware qcn9022_firmware wsa8830_firmware qcn9002_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wsa8835_firmware wcn7850_firmware qcn9072_firmware ipq6000_firmware sa8195p_firmware ssg2115p_firmware qcn9074_firmware qcs410_firmware qcn5022_firmware sa8295p_firmware sg4150p_firmware

CWE ID-CWE-20

Improper Input Validation

CVE-2024-33066

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 47.66%

7 Day CHG~0.00%

Published-07 Oct, 2024 | 12:58

Updated-16 Oct, 2024 | 19:49

Improper Input Validation in WLAN Resource Manager

Memory corruption while redirecting log file to any file location with any file name.

CWE ID-CWE-20

Improper Input Validation

CVE-2024-33065

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.91%

7 Day CHG~0.00%

Published-07 Oct, 2024 | 12:58

Updated-31 Dec, 2025 | 01:04

Improper Input Validation in Camera

Memory corruption while taking snapshot when an offset variable is set by camera driver.

CWE ID-CWE-20

Improper Input Validation

CVE-2024-33031

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.11% / 29.43%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-16 Nov, 2024 | 04:55

Improper Input Validation in RIL

Memory corruption while processing the update SIM PB records request.

Product-fastconnect_7800 qca8337_firmware snapdragon_x72_5g_modem-rf_system qcn6274_firmware sdm429w qca8337 snapdragon_x75_5g_modem-rf_system_firmware qfw7124 qcn6224_firmware sdm429w_firmware wcd9340 qcn6274 qcn6224 fastconnect_7800_firmware snapdragon_x72_5g_modem-rf_system_firmware snapdragon_x75_5g_modem-rf_system qca8081 qcc710 qfw7114_firmware ar8035 wcd9340_firmware wcn3660b qcc710_firmware wcn3620_firmware wcn3660b_firmware wcn3620 snapdragon_429_mobile_platform_firmware qca8081_firmware qfw7124_firmware qfw7114 snapdragon_429_mobile_platform ar8035_firmware Snapdragon qca8337_firmware qcn6274_firmware qfw7114_firmware snapdragon_x75_5g_modem-rf_system_firmware wcd9340_firmware qcc710_firmware qcn6224_firmware wcn3620_firmware sdm429w_firmware wcn3660b_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware qca8081_firmware snapdragon_x72_5g_modem-rf_system_firmware qfw7124_firmware ar8035_firmware

CWE ID-CWE-20

Improper Input Validation

CVE-2020-11178

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.22%

7 Day CHG~0.00%

Published-09 Jun, 2021 | 05:00

Updated-04 Aug, 2024 | 11:28

Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its RoT memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product-qfs2580 qca9377_firmware qpm5679_firmware sm6250p_firmware qca8337 qfs2530 qpm8870_firmware qpa8688 pm6125 qat5522_firmware wcn3950_firmware pm8150a sc8180x\+sdx55 qdm5670 qca6595au_firmware qpm5541_firmware qpa5581_firmware sa6155 pm7150l qpa8821 pm8998_firmware wtr5975_firmware pm456_firmware qpa5580_firmware sa415m wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g qsw8573_firmware qsw8574_firmware sd460_firmware smb2351_firmware qpa4360_firmware wcn3998_firmware pm855p qca6420 pm6150a pm660_firmware pm8150b sa8155_firmware qca4004_firmware qca6430 qat3522 pmr735a wcd9306_firmware wcd9340 sdm830_firmware sd765g sdr660 sdr865 qdm5620_firmware qca6696_firmware qln5020 wcd9371 pmm855au_firmware sm4350_firmware sd_8cx sa8150p pm6350 qdm5621 qtc800s qca4004 sd865_5g_firmware sd712 pm640p_firmware wcn6750_firmware qat5516_firmware pm6150l pm855l_firmware qtc410s wcn3991 qpa8801 pm8150l_firmware qat5533_firmware sdx55m_firmware qpa8673_firmware pm6150 smb1354_firmware sd670_firmware qca6574 qpa8842 sdr052_firmware wcd9380 qcs410 qpm5579_firmware smb1380_firmware smb1381 pm855p_firmware sd690_5g_firmware pm7250 qpa8803 sdx24_firmware qdm2301 wcd9340_firmware wsa8815 wcn6850 qdm5621_firmware qdm2301_firmware qpm6375 sd_8c_firmware wcn3980_firmware sd730 pm660l_firmware pm6250_firmware pm8008 qtm525_firmware pme605_firmware pme605 qpm5621_firmware qln1021aq_firmware qcs603 qpa6560_firmware qpa8802_firmware qln4640_firmware qpm5621 qpm6582 sd670 pm8009_firmware qfs2580_firmware qcm4290_firmware pm8150l pmi8998_firmware qcs610_firmware sa6145p sdr105 ar8031 qpm5577 wtr2965 mdm9205_firmware qca6391_firmware pm8150 wcd9370_firmware qat3516_firmware sdx55 csra6640 qat3555_firmware qpa8803_firmware pm855b smb2351 qln1031 qsm8250_firmware wsa8830 pm660 qet6110_firmware qpm6325 pm6125_firmware qbt1500 qpa5581 csrb31024 pmx24_firmware fsm10055_firmware qbt1500_firmware qcs4290 qet6100 pmm855au qca6420_firmware sd690_5g smb1396 pm7150a sd675_firmware qca6564 qpa4361_firmware qca6426 wcn3990_firmware qca9984_firmware qca9377 wcd9385_firmware qdm5650_firmware sdxr2_5g_firmware wcd9326_firmware whs9410 pm7250_firmware qdm5620 qln1021aq smb1380 pmk8002_firmware qsw6310_firmware sa8155 qln1031_firmware sdx55_firmware pmm6155au_firmware qat5533 sm7250p_firmware qsm7250_firmware pm7150l_firmware wcd9306 qca6584au qat5515_firmware pm855 qpm8830_firmware pm8250 qfs2530_firmware sa415m_firmware pmx55 wcn3988_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware qpm5677 qat5515 wcd9326 wcd9335 pm6350_firmware pm8004_firmware sdr8150_firmware qcs4290_firmware qtc800h_firmware qpm5620 qca6390 wcd9375 sd750g_firmware aqt1000 sc8180x\+sdx55_firmware pmm8195au sm6250_firmware qln4642 qpm5677_firmware wsa8815_firmware wtr3925_firmware smr525_firmware pm8998 qpm8820_firmware pm670a_firmware pmx55_firmware sd865_5g qca6595 pm8150_firmware qpm8830 qat5522 pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qpa4361 qpm5577_firmware qdm5679_firmware smr525 qca6310_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware qca6175a sd765 qca6574a_firmware qat3555 sd850_firmware wtr2965_firmware pm670_firmware csrb31024_firmware qln1036aq qtc801s sd710 pm8008_firmware pmr735a_firmware pmx50 qca6564_firmware sdr8250 sd768g pm8004 pm640l pmk8002 sd845 sdm830 qcs410_firmware qca6175a_firmware qpa5580 qpm5579 fsm10055 sa6150p_firmware qcs610 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware qtc800h sa8150p_firmware qcs2290 sdr8250_firmware qca6335 csra6620_firmware qcs605_firmware sd_675_firmware qdm5671 csra6640_firmware pmc1000h qpm4650_firmware qat3518 sdr425_firmware smr526_firmware qpa5460 pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qdm5652 qca6574au_firmware qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware wcd9360 pmx50_firmware qpa8675_firmware whs9410_firmware sdr735g qpa5460_firmware wcn3999 qdm3301_firmware qsm7250 sd662_firmware qcs405 qdm2308_firmware fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware qpa6560 sdr675_firmware wcd9341 qca6431 qet4100_firmware sd750g wcn3910_firmware qpm5657 wsa8830_firmware sd855_firmware qdm5650 wcn3988 wtr3925 sdr052 sa8195p_firmware smb1390 qet4100 qpa8686_firmware qpm6585 qca8337_firmware wcd9380_firmware smb1355 qln4650 sdr735g_firmware wgr7640 qet5100 qdm5671_firmware qpa8801_firmware qca6564au qtm527_firmware pm8005_firmware qet4101_firmware pm7250b qln4642_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware qet4200aq_firmware sdx50m_firmware sdr735 smb1395 pm660l smr526 wtr5975 qca6430_firmware pmk8003 qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 qca6335_firmware qsw8573 qcs605 sd7c wcn3910 qca6426_firmware qca9984 pm8009 qpa8675 sdr051_firmware sdx55m pm670a qca6421_firmware qat3518_firmware qsw8574 pmi8998 ar8031_firmware pm855l wcn6851_firmware qdm5670_firmware pm7150a_firmware pm8150b_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware sdr105_firmware pm670 qdm5677 pm8005 qsm8250 pm855_firmware qdm2302 pmm6155au sdxr1 pm855b_firmware qca6595_firmware qcs405_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware qln4650_firmware qet5100m sa8155p sd675 qet4101 qat3516 pm670l qpm5658 ar8035_firmware qcm2290 qpm5658_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware sdr051 qln5030 qcs2290_firmware pm4125 fsm10056 pmi632 qpa2625_firmware pm456 sd7c_firmware pmr735b_firmware csra6620 qet5100_firmware qet6100_firmware pm670l_firmware sdr660g sd765g_firmware qpa8686 qca6390_firmware sd730_firmware wcd9370 sdr425 pmr525_firmware qca6584au_firmware pmi632_firmware sd_8cx_firmware qpm5541 qat5516 sd662 qpa8821_firmware sdr660g_firmware pm3003a qca6595au wcn3999_firmware qca6436_firmware smb1354 qca6564au_firmware qdm2305 sa6155p_firmware qca6310 qpm8820 qln5020_firmware sdxr2_5g sa6145p_firmware sdr675 sm6250 sd712_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware ar8035 qpa8673 qdm2310 qln5030_firmware smb1396_firmware wcn6850_firmware wsa8835_firmware qca6564a pmx24 qet6110 qln5040 qcm2290_firmware qpm8895 qpm5670 wcn3990 sd_675 qtm527 sdx24 qdm2307_firmware wsa8835 qpm5657_firmware sm6250p sdr660_firmware qca6574a smb1390_firmware qca6174a wcn6750 qet5100m_firmware qpm4650 mdm9205 qtm525 sd855 sm4125_firmware pm640p sd768g_firmware sdr865_firmware pm8250_firmware pm6250 sd460 qca6391 sdxr1_firmware smb1351 aqt1000_firmware qpm8895_firmware qcm4290 sdx50m pm640a sdr8150 smb1395_firmware pmd9655 qca6574au sa8155p_firmware qsw6310 wcd9341_firmware wsa8810 qtc410s_firmware smb231_firmware qdm2308 qat3550 qdm5679 sd_8c pm3003a_firmware qca6696 qtc800s_firmware sm4350 sd845_firmware smb1381_firmware qpa2625 sa6150p qpa8688_firmware pmm8195au_firmware sm7250p sd720g_firmware sd850 qln4640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-20

Improper Input Validation

CVE-2022-34146

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.21% / 42.46%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:16

Improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation.

Product-qcn5024_firmware wsa8830 qcn9070 sxr2230p_firmware qcs610 ipq8173_firmware qcn5124 qca4024_firmware qcn9072 wcn3950_firmware ipq8078a ipq5028_firmware qca6595au_firmware ipq6000 wcd9370 ssg2115p qcn5152_firmware qca6584au_firmware qcn9000_firmware ipq5018 qca6554a_firmware wcd9385_firmware qam8295p wcn3950 ipq8076a qcn6024_firmware sd_8_gen1_5g_firmware ipq8074a qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware wcn7850 qca6574au_firmware qcn5122_firmware qcn5164_firmware qca6595au qca8081_firmware qcn6023_firmware wcd9375_firmware qcn9002 ipq5010 qca6564au_firmware qca6584au sa6155p_firmware sd680_firmware ipq8078a_firmware qcn9274 ipq8174 qcn9001 wcn7851 ipq5028 qca6698aq qcn5052 ipq6010 qcn6112_firmware wcn3988_firmware qcn9074 sa8195p qcn6132 wsa8810_firmware sd680 sa6155p sg4150p qca8081 wcn7851_firmware qca6698aq_firmware ipq8071a qcn6023 ipq8071a_firmware wcd9385 qca9888_firmware qcn6122 wcd9341 qca6696_firmware ipq9008_firmware qcn5154_firmware csr8811 wcd9375 qcn9100_firmware wsa8830_firmware ipq5010_firmware ipq8074a_firmware wcn3988 wsa8815_firmware wcn7850_firmware wsa8835_firmware sa8195p_firmware sm8475 qcn5022_firmware sa8295p_firmware sa4150p sg4150p_firmware qcm4325 qca8072 ipq5018_firmware wcd9380_firmware ssg2125p qcn9000 ipq8072a qca6554a ipq8076a_firmware qca6595 ipq8078 qca6564au qcn9001_firmware ipq8173 wcn6856_firmware ipq9008 qcn5164 qcn6122_firmware qca6574 sxr1230p_firmware wsa8835 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5154 qca8075_firmware ssg2125p_firmware qca6574a qcn5024 wcn6855_firmware qca9889 qcn6132_firmware qcn9003_firmware sxr1230p qca9888 qca8072_firmware wcn3980 qcn5052_firmware qcn9274_firmware qcn9003 ipq8070a_firmware ipq6018_firmware ipq8076_firmware qcm4325_firmware qca6574_firmware wsa8815 qcn6112 sxr2230p ipq8076 qca6574a_firmware qcn5152 ipq6028 qcn9024 ipq9574_firmware wcn3980_firmware sa8295p wcn6740_firmware qcn6102 qcn9100 ipq8078_firmware wsa8832_firmware qcn5054 qcn9070_firmware ipq6028_firmware ipq8072a_firmware qca6574au qca9889_firmware sa8155p_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware wcd9341_firmware wsa8810 wsa8832 wcn6855 qcs610_firmware wcn6856 ipq6018 qcn5022 ipq6010_firmware qca6595_firmware wcn6740 qca6696 sa4150p_firmware qca4024 wcd9370_firmware qca8075 qcn9022_firmware sa8155p qcn6024 qcn9022 ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware qcs410_firmware Snapdragon qcn5024_firmware ipq5018_firmware wcd9380_firmware sxr2230p_firmware ipq8076a_firmware ipq8173_firmware qcn9001_firmware wcn6856_firmware qca4024_firmware qcn6122_firmware sxr1230p_firmware wcn3950_firmware csr8811_firmware ipq5028_firmware qca6595au_firmware qcn5054_firmware qca8075_firmware ssg2125p_firmware wcn6855_firmware qcn5152_firmware qcn6132_firmware qcn9003_firmware qca6584au_firmware qca8072_firmware qcn9000_firmware qcn5052_firmware qcn9274_firmware ipq8070a_firmware qca6554a_firmware wcd9385_firmware qcn6024_firmware ipq8076_firmware ipq6018_firmware qcm4325_firmware qca6574_firmware sd_8_gen1_5g_firmware qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware qca6574a_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware qcn6023_firmware ipq9574_firmware wcn3980_firmware wcn6740_firmware qca6564au_firmware sd680_firmware sa6155p_firmware ipq8078a_firmware ipq8078_firmware wsa8832_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn6112_firmware wcn3988_firmware qca9889_firmware sa8155p_firmware qcn9024_firmware ipq8174_firmware wsa8810_firmware wcd9341_firmware qcs610_firmware wcn7851_firmware qca6698aq_firmware ipq8071a_firmware qca9888_firmware ipq6010_firmware qca6696_firmware qca6595_firmware ipq9008_firmware qcn5154_firmware sa4150p_firmware wcd9370_firmware qcn9100_firmware qcn9022_firmware wsa8830_firmware qcn9002_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wsa8835_firmware wcn7850_firmware qcn9072_firmware ipq6000_firmware sa8195p_firmware ssg2115p_firmware qcn9074_firmware qcs410_firmware qcn5022_firmware sa8295p_firmware sg4150p_firmware

CWE ID-CWE-20

Improper Input Validation

CVE-2022-33216

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6||MEDIUM

EPSS-0.03% / 6.52%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Improper Input Validation in Automotive

Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.

CWE ID-CWE-20

Improper Input Validation

CVE-2020-11201

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.05%

7 Day CHG~0.00%

Published-12 Nov, 2020 | 10:00

Updated-04 Aug, 2024 | 11:28

Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P

CWE ID-CWE-20

Improper Input Validation

CVE-2022-33211

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.16% / 37.28%

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Improper Input Validation in MODEM

memory corruption in modem due to improper check while calculating size of serialized CoAP message

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-131

Incorrect Calculation of Buffer Size

CVE-2022-33300

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 15.30%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 14:53

Improper input validation in Automotive Android OS

Memory corruption in Automotive Android OS due to improper input validation.

Product-qca9377_firmware wsa8830 wcd9380_firmware sa6150p_firmware wcn3990 sa8145p_firmware sw5100p sd865_5g qcc5100 sdx55m_firmware wcn6856_firmware qcn9012 wsa8835 wcd9380 sa8150p_firmware sd888_5g qca6595au_firmware qca6390_firmware wcn6855_firmware qca6174a qca6426 wcn3990_firmware qrb5165n_firmware qcn9012_firmware qca9377 wcd9335_firmware wcn3980 wcd9385_firmware qam8295p sdxr2_5g_firmware sd_8_gen1_5g_firmware wsa8815 wcn6850 qam8295p_firmware qcn9011_firmware qca6426_firmware wcn7850 qca6574au_firmware qca6595au sdx12_firmware qrb5165m wcn3980_firmware qca6391 sdx55m qca6436_firmware qrb5165n sa8295p qcc5100_firmware sa6155p_firmware wcn7851 qrb5165_firmware qrb5165m_firmware sdxr2_5g qrb5165 wcn6851_firmware qcn9011 wcn3988_firmware qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 sd870 qca6436 wcn6851 wcd9335 sa6155p wcn6855 sw5100p_firmware wcn7851_firmware wcn6856 sa6145p qca6174a_firmware wcd9385 wcd9341 qca6696_firmware sa8145p sd870_firmware qca6696 qca6391_firmware qca6390 sa8150p sa6150p sa8155p wsa8830_firmware sd660 sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware sd660_firmware wcn7850_firmware wsa8815_firmware sa8195p_firmware wsa8835_firmware sdx12 sw5100_firmware sm8475 sa8295p_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-10501

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 47.68%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:48

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9635M, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, and SD 835, improper input validation can occur while parsing an image.

CWE ID-CWE-20

Improper Input Validation

CVE-2016-10482

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.21% / 42.77%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:11

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, while processing downlink information, an assert can be reached.

CWE ID-CWE-20

Improper Input Validation

CVE-2016-10483

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.22% / 43.95%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:13

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 615/16/SD 415, SD 808, and SD 810, improper input validation while processing SCM Command can lead to unauthorized memory access.

Product-sd_615_firmware sd_810 sd_412 sd_410_firmware sd_808_firmware sd_808 sd_412_firmware sd_415_firmware sd_410 sd_616 sd_810_firmware sd_616_firmware sd_615 sd_415 Snapdragon Mobile

CWE ID-CWE-20

Improper Input Validation

CVE-2016-10492

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.26% / 48.94%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 19:46

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SD 850, and SDX20, improper ciphersuite validation leads SecSSL accept an unadvertised ciphersuite.

CWE ID-CWE-20

Improper Input Validation

CVE-2021-35111

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.19% / 40.78%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-04 Aug, 2024 | 00:33

Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile

Product-wcn3991_firmware wcn3991 qca8337_firmware wcd9380_firmware wsa8830 qca8337 sd865_5g sdx55m_firmware wcn6856_firmware sdx65 wsa8835 wcd9380 sd765g_firmware sd888_5g qca6390_firmware wcd9370 wcn6855_firmware wcn6750 wcn3998 wcd9385_firmware sd_8_gen1_5g_firmware wsa8815 wcn6850 sd765 sd768g_firmware sdx55_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sm7250p_firmware qca6391 sdx55m sm8475_firmware sm7450_firmware sd778g sdx65_firmware wcn7851 wsa8832_firmware wcn6851_firmware sd778g_firmware wsa8810_firmware sd765g wcd9341_firmware wsa8810 sd765_firmware sd870 wcn6855 wcn6851 wsa8832 qca8081 wcn7851_firmware wcn6856 wcd9385 wcd9341 sd768g sd870_firmware qca6391_firmware qca6390 ar8035 wcd9370_firmware wcd9375 wcn6750_firmware sdx55 wsa8830_firmware sd865_5g_firmware wsa8815_firmware sd888_5g_firmware sm7250p wcn6850_firmware wsa8835_firmware sm7450 sm8475 sm8475p_firmware ar8035_firmware sm8475p Snapdragon Connectivity, Snapdragon Mobile

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CWE ID-CWE-20

Improper Input Validation

CVE-2017-15845

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.05%

7 Day CHG~0.00%

Published-10 Jan, 2018 | 22:00

Updated-16 Sep, 2024 | 16:43

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an invalid input of firmware size (negative value) from user space can potentially lead to the memory leak or buffer overflow during the WLAN cal data store operation.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-772

Missing Release of Resource after Effective Lifetime

CVE-2021-35122

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.03% / 8.80%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:30

Updated-04 Aug, 2024 | 00:33

Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product-wcn3991_firmware sd_8cx_gen3_firmware wsa8830 sd678 sm6250p_firmware qcs610 qcs2290_firmware qca8337 qca6431_firmware sd7c_firmware wcd9360_firmware sdx65 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 wcn3990_firmware qrb5165n_firmware wcn3998 sd_8cx_firmware wcd9371_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware sm4125 sd720g wcd9385_firmware wcn3950 wcn3660b qsm8350_firmware sd662 qsm8350 sd460_firmware sa9000p_firmware sm7315_firmware wcn7850 qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware qca6420 qca6436_firmware wcd9360 qrb5165n sd680_firmware sd778g sd_8cx_gen2 sa515m_firmware qcs6490 qrb5165_firmware qrb5165m_firmware sd429 sdxr2_5g wcn7851 sd662_firmware wcn3988_firmware qca6430 sd429_firmware qca6421 sd778g_firmware sm6250 wcd9340 wsa8810_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcn6851 qca8081 wcn7851_firmware qcs4290_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware wcd9371 sd750g sd870_firmware sd_8cx_gen3 qca6390 ar8035 sd_8cx aqt1000 sd750g_firmware wcd9375 sm6250_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware qcm6490 sd888_5g_firmware wcn3988 wcn3620 wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware wcn6750_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sdm429w sd780g sw5100p sd865_5g sdx55m_firmware wcn6856_firmware sd888 wsa8835 sdm429w_firmware sa8540p_firmware wcd9380 sd888_5g sm6250p qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p qca6430_firmware wcn3980 wcn6750 sa515m sa9000p wcd9340_firmware sd855 sm4125_firmware sm7325p_firmware sd7c wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 sd768g_firmware qrb5165m wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware qcm4290 qcm6490_firmware sdx50m qrb5165 sd480_firmware wcn6851_firmware qca6574au wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 sa8540p sw5100p_firmware qcs610_firmware wcn6856 sd695_firmware sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sd675 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware ar8035_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-20

Improper Input Validation

CVE-2021-35109

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.07% / 21.99%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:30

Updated-04 Aug, 2024 | 00:33

Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connectivity, Snapdragon Mobile

CWE ID-CWE-20

Improper Input Validation

CVE-2021-35116

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.7||HIGH

EPSS-0.04% / 13.46%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:51

Updated-04 Aug, 2024 | 00:33

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product-qca9377_firmware wcn3991_firmware wsa8830 sd678 mdm9640_firmware qcs2290_firmware csrb31024 mdm9628_firmware sdx65 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware apq8009_firmware sa6155 sd690_5g sd730_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware wcn3990_firmware qca9377 sa415m wcn3998 sdw2500_firmware wcd9385_firmware wcn3950 sm4125 mdm9628 sd720g wcd9326_firmware wcn3615_firmware sd_8_gen1_5g_firmware wcn3660b sd662 sd460_firmware sa8155 qca6320_firmware sm7315_firmware qca6574au_firmware sdx55_firmware wcn7850 qca6595au sa6155_firmware sdx12_firmware wcd9375_firmware msm8909w sm7250p_firmware apq8009w_firmware qca6420 wcn3610_firmware wcn3615 wcn3998_firmware qca6564au_firmware sd680_firmware sa6155p_firmware qca6310 sd778g pm8937 wcn7851 qcs6490 sd429 sa8155_firmware sd662_firmware mdm9607_firmware sa415m_firmware wcn3988_firmware qca6430 sd429_firmware sm6250 sd778g_firmware wcd9340 sa8195p wsa8810_firmware sd765g sd765_firmware sd680 wcd9326 wcd9335 sa6155p wcn6851 qcs603_firmware wcn7851_firmware msm8937 qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 pm8937_firmware qca6696_firmware qcs6490_firmware sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 wcn3910_firmware sm6250_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd820 qcm6490 sd888_5g_firmware wcn3620_firmware sd660_firmware wcn3620 wcn3988 sa8195p_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sm8475 qca6564a wcn6750_firmware wcn3610 mdm9640 qcm2290_firmware wcn3991 wcd9380_firmware wcn3990 sd_675 sdm429w msm8996au_firmware sd780g sd865_5g qca6564au sdx55m_firmware wcn6856_firmware sd888 msm8909w_firmware qca6574 msm8996au sdm429w_firmware wsa8835 sd665_firmware wcd9380 sd888_5g qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6174a sm7325p qca6310_firmware qca6430_firmware wcd9335_firmware wcn3980 wcn6750 qca6574_firmware qcs605 wcd9340_firmware sd855 sm4125_firmware sm7325p_firmware sd665 wcn3910 qca6320 wcn6850 wsa8815 msm8937_firmware sd765 wcn3660b_firmware qca6574a_firmware sd695 sd768g_firmware sd835 wcn3980_firmware sm7315 apq8009 qca6391 sd460 sd730 sdx55m aqt1000_firmware wcn6740_firmware sdx65_firmware mdm9626 sd678_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m sd480_firmware qcs603 wcn6851_firmware mdm9626_firmware qca6574au sa8155p_firmware mdm9607 qca6564a_firmware apq8009w wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 wcn6856 sd835_firmware sd695_firmware sd768g apq8096au wcn6740 qca6696 sd820_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdw2500 sd888_firmware sdx55 apq8096au_firmware sa8155p sd675 sm7250p sd720g_firmware sdx12 qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-20

Improper Input Validation

CVE-2021-35092

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 10.29%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:51

Updated-04 Aug, 2024 | 00:33

Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Product-qca9377_firmware wcn3991_firmware mdm9150_firmware wsa8830 qcs610 qca8337 wcd9360_firmware mdm9650 sdx65 csra6620 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sd690_5g wcd9370 csra6620_firmware qcs605_firmware csra6640_firmware wcn3990_firmware qrb5165n_firmware qca9377 wcn3998 wcd9385_firmware wcn3950 wcd9326_firmware wcn3615_firmware sd_8_gen1_5g_firmware wcn3660b sd662 sd460_firmware wcn7850 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware sm7250p_firmware wcn3615 wcn3998_firmware qca6420 apq8053_firmware wcd9360 qrb5165n sd680_firmware sd778g wcn7851 qrb5165_firmware qrb5165m_firmware sd662_firmware qcs405 qca6430 wcn3988_firmware sd778g_firmware wsa8810_firmware qualcomm215_firmware sd765g sd765_firmware sd680 wcd9326 wcd9335 wcn6851 qca8081 wcn7851_firmware qca6174a_firmware wcd9385 wcd9341 qca6696_firmware sd750g sd870_firmware ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 msm8953_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sm8475 wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd780g sd865_5g sdx55m_firmware wcn6856_firmware wsa8835 wcd9380 sd888_5g qualcomm215 qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6174a sm7325p qca6430_firmware wcd9335_firmware wcn3980 wcn6750 qcs605 sd855 wsa8815 sm7325p_firmware wcn6850 mdm9650_firmware sd765 wcn3660b_firmware wcn3680 qca6574a_firmware sd695 sd768g_firmware qrb5165m wcn3980_firmware sd460 qca6391 sdx55m aqt1000_firmware wcn6740_firmware msm8953 sdx65_firmware ar8031_firmware wcn3680_firmware qrb5165 sd480_firmware wcn6851_firmware qca6574au wcd9341_firmware sd480 sd870 wsa8810 wcn6855 qcs610_firmware mdm9150 wcn6856 wcn3680b sd695_firmware sd768g apq8096au ar8031 qcs405_firmware wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 apq8053 apq8096au_firmware csra6640 sm7250p sdx12 qcs410_firmware ar8035_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-20

Improper Input Validation

CVE-2016-10338

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.09%

7 Day CHG~0.00%

Published-13 Jun, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.

Product-android All Qualcomm products

CWE ID-CWE-20

Improper Input Validation

CVE-2018-11966

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.22%

7 Day CHG~0.00%

Published-04 Apr, 2019 | 15:09

Updated-05 Aug, 2024 | 08:24

Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sm7150_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sm7150 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_652_firmware sxr1130 msm8909w sd_205_firmware sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_855_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-20

Improper Input Validation

CVE-2016-10445

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.21% / 42.77%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 03:07

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, input is not properly validated in a QTEE API function.

CWE ID-CWE-20

Improper Input Validation

CVE-2016-10452

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.30% / 52.51%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:17

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, and SD 835, memory protection assertion happens after invoking TA termination out of order.

CWE ID-CWE-20

Improper Input Validation

CVE-2016-10384

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.17%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctl.

Product-android Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-20

Improper Input Validation

CVE-2018-11847

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.22%

7 Day CHG~0.00%

Published-11 Feb, 2019 | 15:00

Updated-05 Aug, 2024 | 08:17

Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables and Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SD 835, SD 8CX, SDM439 and Snapdragon_High_Med_2016