CVE-2020-11121 | ByteOS Network

Vulnerability Details :

CVE-2020-11121

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-12 Nov, 2020 | 10:00

Updated At-04 Aug, 2024 | 11:21

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:12 Nov, 2020 | 10:00

Updated At:04 Aug, 2024 | 11:21

▼CVE Numbering Authority (CNA)

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

Versions

Affected

QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

Problem Types

Type	CWE ID	Description
text	N/A	Buffer Copy Without Checking Size of Input in WLAN

Type: text

CWE ID: N/A

Description: Buffer Copy Without Checking Size of Input in WLAN

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:12 Nov, 2020 | 10:15

Updated At:19 Nov, 2020 | 21:15

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 4.6

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Qualcomm Technologies, Inc.

>>qcm4290_firmware>>-

cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcm4290:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs4290_firmware>>-

cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs4290:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qm215_firmware>>-

cpe:2.3:o:qualcomm:qm215_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qm215>>-

cpe:2.3:h:qualcomm:qm215:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qsm8350_firmware>>-

cpe:2.3:o:qualcomm:qsm8350_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qsm8350:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sa6145p_firmware>>-

cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sa6155_firmware>>-

cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sa6155:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sa6155p_firmware>>-

cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sa8155_firmware>>-

cpe:2.3:o:qualcomm:sa8155_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sa8155:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sa8155p_firmware>>-

cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sc8180x_firmware>>-

cpe:2.3:o:qualcomm:sc8180x_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sc8180x:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sc8180xp_firmware>>-

cpe:2.3:o:qualcomm:sc8180xp_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sc8180xp:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdx55_firmware>>-

cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdx55>>-

cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sdx55m_firmware>>-

cpe:2.3:o:qualcomm:sdx55m_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sdx55m:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm4250_firmware>>-

cpe:2.3:o:qualcomm:sm4250_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm4250:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm4250p_firmware>>-

cpe:2.3:o:qualcomm:sm4250p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm4250p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm6115_firmware>>-

cpe:2.3:o:qualcomm:sm6115_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm6115:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm6115p_firmware>>-

cpe:2.3:o:qualcomm:sm6115p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm6115p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm6125_firmware>>-

cpe:2.3:o:qualcomm:sm6125_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm6125:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm6250_firmware>>-

cpe:2.3:o:qualcomm:sm6250_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm6250:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm6350_firmware>>-

cpe:2.3:o:qualcomm:sm6350_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm6350:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm7125_firmware>>-

cpe:2.3:o:qualcomm:sm7125_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm7125:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm7225_firmware>>-

cpe:2.3:o:qualcomm:sm7225_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm7225:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm7250_firmware>>-

cpe:2.3:o:qualcomm:sm7250_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm7250:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm7250p_firmware>>-

cpe:2.3:o:qualcomm:sm7250p_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm7250p:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>sm8150_firmware>>-

cpe:2.3:o:qualcomm:sm8150_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:sm8150:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	nvd@nist.gov

CWE ID: CWE-120

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

1413Records found

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 10.29%

||

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, QCS605, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-msm8920 sdx24_firmware msm8937 sdx24 msm8920_firmware qcs605 mdm9607_firmware msm8940 msm8940_firmware msm8909w_firmware mdm9607 msm8917_firmware msm8937_firmware msm8917 msm8909w qcs605_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.60%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 22:24

Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCN7605, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 msm8917 sdm670 qcs605_firmware mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware apq8098 qcn7605 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware sda660 msm8909w msm8909_firmware apq8053_firmware sda845 nicobar msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware qcs405 sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware msm8937 mdm9207c_firmware mdm9207c sm8150_firmware msm8909 apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.51%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8996, MSM8996AU, QCA4531, QCA8081, QCA9531, QCA9558, QCA9886, QCA9980, QCN7605, QCS605, SDA660, SDX20, SDX24, SDX55, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-qca4531_firmware mdm9640_firmware qca9980_firmware msm8996au_firmware sdx24 mdm9650 msm8940_firmware qca9558_firmware qca9558 msm8909w_firmware msm8996au apq8009_firmware msm8917 qcs605_firmware ipq4019_firmware mdm9206 sdx24_firmware ipq8074 qca4531 apq8098 qcn7605 mdm9615 mdm9206_firmware msm8939 qcs605 qca9886 msm8937_firmware mdm9650_firmware msm8905_firmware sda660 sdx55_firmware ipq8064 sxr1130_firmware apq8064_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware ipq8064_firmware msm8920 apq8064 apq8098_firmware sdx20 msm8920_firmware mdm9607_firmware qca9531 ipq8074_firmware mdm9607 qca9980 apq8017_firmware msm8939_firmware qcn7605_firmware qca8081 msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c qca9886_firmware sm8150_firmware msm8909 apq8096au sda660_firmware ipq4019 sdx55 msm8940 apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware sm8150 sdx20_firmware qca9531_firmware apq8017 msm8996 mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 1.17%

||

7 Day CHG~0.00%

Published-01 Jul, 2024 | 14:17

Updated-01 Aug, 2024 | 23:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC

Memory corruption when allocating and accessing an entry in an SMEM partition.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm7325-ae_firmware ipq4028_firmware qca8337 qfw7124 sg8275p_firmware ar9380 ipq8173_firmware qam8775p qcf8001 qamsrv1m qru1052 snapdragon_888_5g_mobile_platform qcn5124 wcn3950_firmware qca6595au_firmware sa6155 video_collaboration_vc3_platform snapdragon_480_5g_mobile_platform qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn3950 qcn6024_firmware sm4125 immersive_home_316_platform_firmware wcn3660b qsm8350_firmware snapdragon_460_mobile_platform qsm8350 snapdragon_660_mobile_platform_firmware sm7315_firmware snapdragon_429_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware qcn6422_firmware qca8081_firmware qca6420 qcn9002 snapdragon_auto_5g_modem-rf_firmware ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware qca0000 sa8155_firmware robotics_rb3_platform_firmware ipq8068 qca6430 sa7775p_firmware sdx65m wcd9340 qca6698aq_firmware snapdragon_690_5g_mobile_platform ipq5312 qualcomm_205_mobile_platform_firmware qca9888_firmware qcn6122 qca6696_firmware qcn5154_firmware qru1052_firmware sa8150p qca9992_firmware sd660 sd865_5g_firmware sd660_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware qcn5022_firmware immersive_home_216_platform_firmware sa8770p snapdragon_750g_5g_mobile_platform_firmware snapdragon_675_mobile_platform_firmware qca9985_firmware ipq4018_firmware snapdragon_778g_5g_mobile_platform_firmware ssg2125p qca9980_firmware sdm429w ipq8078 qca8084 qcm8550 ipq8173 qcn9001_firmware snapdragon_670_mobile_platform_firmware sd670_firmware qca6574 qdu1110_firmware csr8811_firmware snapdragon_7c\+_gen_3_compute wcd9380 snapdragon_x72_5g_modem-rf_system_firmware qcs410 snapdragon_210_processor qcn5024 sxr1230p video_collaboration_vc3_platform_firmware qca9985 qcn9012_firmware qcn9274_firmware wsa8845 ipq6018_firmware qcm4325_firmware wcd9340_firmware wsa8815 sm6150-ac_firmware pmp8074_firmware qcn6112 qcs8250 ipq6028 ipq8064 sd835 pmp8074 snapdragon_x62_5g_modem-rf_system_firmware ipq9574_firmware wcn3980_firmware sd730 immersive_home_3210_platform_firmware sa8295p wcn6740_firmware qcs4490_firmware qca6678aq snapdragon_x65_5g_modem-rf_system apq8064au_firmware ipq8078_firmware sa8650p_firmware fastconnect_6900 qcn5054 snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware snapdragon_660_mobile_platform qca9994 srv1l qca9980 qdx1011_firmware qcn9024_firmware fsm20056 ipq8174_firmware sd670 snapdragon_8\+_gen_2_mobile_platform qcm4290_firmware qcn6412_firmware qdx1010_firmware sw5100p_firmware qcs610_firmware ipq5302_firmware qamsrv1m_firmware qcm5430 qualcomm_215_mobile_platform_firmware sa6145p qca9886_firmware immersive_home_214_platform qcs5430_firmware snapdragon_750g_5g_mobile_platform qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware sm8550p_firmware qdx1010 sdx55 qcn5021_firmware csra6640 snapdragon_695_5g_mobile_platform video_collaboration_vc1_platform srv1m ssg2115p_firmware qam8620p_firmware qfw7124_firmware qam8255p qdu1210_firmware sa4155p talynplus_firmware wsa8830 sxr2230p_firmware snapdragon_x24_lte_modem_firmware qam8650p csrb31024 mdm9628_firmware flight_rb5_5g_platform mdm9650 snapdragon_865_5g_mobile_platform flight_rb5_5g_platform_firmware fsm10055_firmware qcn6224_firmware qca8082 qca9992 qcs4290 srv1l_firmware qca6420_firmware snapdragon_auto_4g_modem_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware snapdragon_8_gen_2_mobile_platform qca9984_firmware qca9377 ipq9554 wcd9385_firmware wcd9326_firmware fastconnect_6200 wcn3615_firmware qamsrv1h_firmware ipq8074a sm7325-af qcn6102_firmware qcn9011_firmware sa8155 snapdragon_x55_5g_modem-rf_system snapdragon_835_mobile_pc_platform_firmware qcn5122_firmware sa7255p sdx55_firmware snapdragon_4_gen_2_mobile_platform qcn6023_firmware snapdragon_8_gen_3_mobile_platform qfw7114 sm7250p_firmware wcn3615 wcn3610_firmware wsa8845h_firmware qrb5165n qca6584au snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware snapdragon_x72_5g_modem-rf_system ipq8174 qcn5052 qca9367 qcn6112_firmware sm8250-ac wcn3988_firmware qcn9074 srv1h qca8085 sm7250-aa fastconnect_6700_firmware sa8195p sxr1120 qcn6224 wcd9326 snapdragon_x75_5g_modem-rf_system wcd9335 wcd9395_firmware snapdragon_auto_5g_modem-rf_gen_2 qcm4490 qcn6023 qcs4290_firmware sa8770p_firmware qca8085_firmware ipq5300 sxr2130_firmware qcs6490_firmware ipq9570 sm7150-ab qca9898_firmware wcd9375 aqt1000 snapdragon_210_processor_firmware sm6250_firmware snapdragon_662_mobile_platform ipq5010_firmware ipq8074a_firmware wsa8815_firmware video_collaboration_vc5_platform_firmware sxr1120_firmware sxr2250p_firmware snapdragon_8_gen_2_mobile_platform_firmware qcm6125_firmware robotics_rb5_platform_firmware sd865_5g qca6595 qdu1010_firmware qualcomm_205_mobile_platform ipq8065_firmware sxr1230p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware qcn6274 qcn6422 qcn5154 qca8075_firmware snapdragon_4_gen_2_mobile_platform_firmware sxr2130 smart_audio_400_platform qcn6132_firmware qcn9003_firmware qca9888 qca6310_firmware ipq8070a_firmware qru1062 sa8650p sa9000p qca6574_firmware qca9886 sm7325p_firmware sxr2230p snapdragon_xr2_5g_platform_firmware qca6574a_firmware sa8775p qrb5165m sm7315 snapdragon_x55_5g_modem-rf_system_firmware qcn6102 snapdragon_x35_5g_modem-rf_system_firmware snapdragon_690_5g_mobile_platform_firmware qcn6274_firmware snapdragon_auto_4g_modem csrb31024_firmware qcm6490_firmware wsa8832_firmware snapdragon_xr1_platform qcn9070_firmware qcm2150 ipq6028_firmware ipq8072a_firmware qcn6432_firmware qca9889_firmware qcn5122 qcs8250_firmware sm7250-aa_firmware sm8550p snapdragon_8_gen_1_mobile_platform_firmware sm8150-ac_firmware qcn5022 sm8350-ac qca6564_firmware wcn6740 qcs8550 sm6150-ac snapdragon_x50_5g_modem-rf_system qca8075 snapdragon_8_gen_3_mobile_platform_firmware qcn6024 qcn9022 qdu1210 qcn9002_firmware ipq6000_firmware qcs410_firmware fsm10055 qam8255p_firmware snapdragon_8_gen_1_mobile_platform sa6150p_firmware qcs610 snapdragon_820_automotive_platform_firmware qca4024_firmware wsa8840 snapdragon_212_mobile_platform immersive_home_318_platform_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6335 csra6620_firmware csra6640_firmware qep8111_firmware qam8295p ipq8076a mdm9628 qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware sm7150-ac qcn6412 sm7325-ae qca6574au_firmware qcn5164_firmware wcd9375_firmware sa6155_firmware sm6225-ad snapdragon_xr2\+_gen_1_platform qca6678aq_firmware smart_audio_400_platform_firmware sm6225-ad_firmware qrb5165m_firmware ipq5028 qca7500 ipq4029_firmware qca6698aq qcs6125 sa4155p_firmware qcf8001_firmware wsa8840_firmware ipq6010 sm7250-ab_firmware qru1062_firmware robotics_rb3_platform snapdragon_8\+_gen_1_mobile_platform snapdragon_720g_mobile_platform qcn6132 snapdragon_780g_5g_mobile_platform sw5100 fsm10056_firmware qca6436 sa6155p fsm20055_firmware qdu1000_firmware qcf8000 sxr2250p snapdragon_auto_5g_modem-rf_gen_2_firmware wcd9341 qam8775p_firmware ipq8068_firmware sa8255p ipq9008_firmware snapdragon_x12_lte_modem qca6797aq wcn3910_firmware snapdragon_855_mobile_platform_firmware qcc710_firmware robotics_rb5_platform sm8250-ac_firmware wsa8830_firmware sd855_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3988 snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware qca9898 sa8295p_firmware ipq4028 wcn3610 qca8337_firmware wcd9380_firmware ipq8072a qca7500_firmware sw5100p msm8996au_firmware ipq8076a_firmware snapdragon_w5\+_gen_1_wearable_platform qca6564au ipq9008 qualcomm_215_mobile_platform qcn5164 qcn6402_firmware fastconnect_6700 ipq9554_firmware qcn5054_firmware ipq4019_firmware sm7150-aa_firmware sg8275p qca8072_firmware qca6430_firmware qcn5052_firmware qfw7114_firmware sm6370_firmware wcd9335_firmware wcn3980 qca6335_firmware wcn3910 qca6320 mdm9650_firmware snapdragon_4_gen_1_mobile_platform qca6426_firmware wcn3660b_firmware wcn3680 qca9984 snapdragon_670_mobile_platform qcn9024 snapdragon_xr2\+_gen_1_platform_firmware ipq5302 ipq8064_firmware sm7150-aa snapdragon_820_automotive_platform snapdragon_x50_5g_modem-rf_system_firmware snapdragon_xr2_5g_platform wcn3680_firmware sm7150-ab_firmware ipq8070 qca6797aq_firmware qdu1010 qca6564a_firmware sa7255p_firmware qca9880 sa8620p snapdragon_x24_lte_modem wsa8832 ipq5332 immersive_home_326_platform ipq6018 qcc710 qcs4490 qca6595_firmware sa8145p wcd9395 snapdragon_710_mobile_platform_firmware immersive_home_214_platform_firmware sm4350-ac_firmware sd888_firmware qcn6402 sa8155p qep8111 snapdragon_720g_mobile_platform_firmware ar8035_firmware qcm2290 snapdragon_855_mobile_platform qcn5024_firmware snapdragon_662_mobile_platform_firmware qcn9070 sa8145p_firmware qcs2290_firmware fsm10056 csra6620 qcn9072 sm7250-ac_firmware qca8386 qca9880_firmware snapdragon_888_5g_mobile_platform_firmware ipq6000 sd730_firmware wcd9370 ssg2115p qcn5152_firmware qca0000_firmware qca6584au_firmware qdu1110 qcn9000_firmware sm8250-ab qamsrv1h immersive_home_216_platform talynplus immersive_home_316_platform immersive_home_318_platform qcn5124_firmware qam8295p_firmware qcn6100_firmware qca8082_firmware qca6320_firmware sa9000p_firmware wcn3680b_firmware snapdragon_778g_5g_mobile_platform snapdragon_212_mobile_platform_firmware qca6595au sm7325-af_firmware snapdragon_429_mobile_platform qca6436_firmware sm4350-ac snapdragon_680_4g_mobile_platform_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware ipq5010 qca6564au_firmware sa8620p_firmware sa6155p_firmware qca6310 qcn9274 sa8775p_firmware qcn9001 qca9990 qcs6490 video_collaboration_vc5_platform qcs8550_firmware vision_intelligence_300_platform_firmware sa6145p_firmware fsm20056_firmware sm6250 wsa8810_firmware vision_intelligence_400_platform wsa8845h snapdragon_x62_5g_modem-rf_system snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware sg4150p qcs7230 qca8081 snapdragon_x35_5g_modem-rf_system ipq8071a sa7775p sdx65m_firmware qam8620p qca6174a_firmware ipq8071a_firmware qcs5430 immersive_home_3210_platform wcd9385 snapdragon_x12_lte_modem_firmware ar8035 csr8811 apq8064au ipq4019 wcd9390 qcn9100_firmware vision_intelligence_400_platform_firmware wcn3620_firmware qcm6490 wsa8835_firmware wcn3620 qca6564a sa4150p sg4150p_firmware qcm4325 qca8072 qcm2290_firmware snapdragon_845_mobile_platform qcm2150_firmware wcn3990 qcn9000 qcf8000_firmware fastconnect_6800 ar9380_firmware qru1032 sm8350-ac_firmware qcs7230_firmware snapdragon_835_mobile_pc_platform qcn9012 sm8150-ac sd888 qdx1011 qdu1000 immersive_home_326_platform_firmware qcn6122_firmware wsa8835 msm8996au sdm429w_firmware snapdragon_auto_5g_modem-rf sd_8_gen1_5g snapdragon_4_gen_1_mobile_platform_firmware ssg2125p_firmware ipq4018 qca6574a qca9889 qca6174a sm7325p qca9994_firmware qcn9003 ipq8076_firmware sm7150-ac_firmware sm7250-ab sd855 sm4125_firmware ipq8076 qru1032_firmware wsa8845_firmware fastconnect_6200_firmware qcn5021 qcn5152 vision_intelligence_300_platform sm8250-ab_firmware qca6391 snapdragon_710_mobile_platform fastconnect_7800 aqt1000_firmware qcn9100 qcm4490_firmware snapdragon_845_mobile_platform_firmware qcm4290 ipq5300_firmware ipq9570_firmware srv1h_firmware qcn9011 video_collaboration_vc1_platform_firmware ipq5312_firmware qca6574au sa8155p_firmware ipq9574 wcd9341_firmware fastconnect_7800_firmware qcm6125 wsa8810 sm7250-ac ipq5332_firmware snapdragon_680_4g_mobile_platform sm6370 srv1m_firmware snapdragon_ar2_gen_1_platform wcn3680b sd835_firmware qam8650p_firmware snapdragon_675_mobile_platform ipq6010_firmware qca6696 fsm20055 sa6150p qcn9022_firmware wcd9390_firmware qca9990_firmware ipq8070a qcn6100 qcn9072_firmware sm7250p snapdragon_8\+_gen_1_mobile_platform_firmware sw5100_firmware qcn9074_firmware ipq4029 qcn6432 snapdragon_xr1_platform_firmware Snapdragon qca9377_firmware qam8255p_firmware sa6150p_firmware ipq4028_firmware sg8275p_firmware ipq8173_firmware snapdragon_820_automotive_platform_firmware qca4024_firmware wcn3950_firmware immersive_home_318_platform_firmware ipq5028_firmware sa8150p_firmware qca6595au_firmware csra6620_firmware csra6640_firmware qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qep8111_firmware qcn6024_firmware qca8386_firmware immersive_home_316_platform_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware snapdragon_660_mobile_platform_firmware sm7315_firmware snapdragon_429_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware qcn5164_firmware qcn6422_firmware wcd9375_firmware qca8081_firmware sa6155_firmware snapdragon_auto_5g_modem-rf_firmware ipq8070_firmware qca9367_firmware ipq8078a_firmware qca6678aq_firmware smart_audio_400_platform_firmware qrb5165m_firmware wsa8840_firmware ipq4029_firmware sa4155p_firmware sa8155_firmware qcf8001_firmware robotics_rb3_platform_firmware qru1062_firmware sa7775p_firmware fsm10056_firmware fsm20055_firmware qdu1000_firmware qca6698aq_firmware qualcomm_205_mobile_platform_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qca9888_firmware qam8775p_firmware ipq8068_firmware qca6696_firmware ipq9008_firmware qcn5154_firmware qru1052_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware qcc710_firmware wsa8830_firmware qca9992_firmware sd865_5g_firmware sd855_firmware sd660_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware qcn5022_firmware sa8295p_firmware immersive_home_216_platform_firmware snapdragon_750g_5g_mobile_platform_firmware snapdragon_675_mobile_platform_firmware qualcomm_video_collaboration_vc1_platform_firmware qca9985_firmware ipq4018_firmware qca8337_firmware snapdragon_778g_5g_mobile_platform_firmware wcd9380_firmware qca7500_firmware qca9980_firmware msm8996au_firmware ipq8076a_firmware qcn9001_firmware snapdragon_670_mobile_platform_firmware sd670_firmware qdu1110_firmware qcn6402_firmware csr8811_firmware snapdragon_x72_5g_modem-rf_system_firmware ipq9554_firmware qcn5054_firmware ipq4019_firmware qca8072_firmware qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware qfw7114_firmware sm6370_firmware wcd9335_firmware qca6335_firmware ipq6018_firmware qcm4325_firmware wcd9340_firmware pmp8074_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware snapdragon_x62_5g_modem-rf_system_firmware ipq9574_firmware wcn3980_firmware immersive_home_3210_platform_firmware ipq8064_firmware snapdragon_x50_5g_modem-rf_system_firmware wcn6740_firmware qcs4490_firmware apq8064au_firmware wcn3680_firmware ipq8078_firmware sa8650p_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware qca6797aq_firmware qdx1011_firmware qcn9024_firmware ipq8174_firmware qca6564a_firmware sa7255p_firmware qcm4290_firmware qcn6412_firmware qdx1010_firmware sw5100p_firmware qcs610_firmware ipq5302_firmware qamsrv1m_firmware qualcomm_215_mobile_platform_firmware qca9886_firmware qca6595_firmware qcs5430_firmware qca6391_firmware snapdragon_710_mobile_platform_firmware sa4150p_firmware immersive_home_214_platform_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware qcn5021_firmware ssg2115p_firmware qam8620p_firmware qfw7124_firmware qdu1210_firmware snapdragon_720g_mobile_platform_firmware ar8035_firmware qcn5024_firmware talynplus_firmware snapdragon_662_mobile_platform_firmware sxr2230p_firmware sa8145p_firmware snapdragon_x24_lte_modem_firmware qcs2290_firmware mdm9628_firmware flight_rb5_5g_platform_firmware fsm10055_firmware qcn6224_firmware qca9880_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware qca6420_firmware snapdragon_auto_4g_modem_firmware sd730_firmware qcn5152_firmware qca0000_firmware qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware wcd9326_firmware wcn3615_firmware qamsrv1h_firmware qcn5124_firmware qam8295p_firmware qcn6102_firmware qcn9011_firmware qcn6100_firmware qca8082_firmware qca6320_firmware sa9000p_firmware snapdragon_835_mobile_pc_platform_firmware qcn5122_firmware sdx55_firmware wcn3680b_firmware wsa8845h_firmware qcn6023_firmware snapdragon_212_mobile_platform_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware sa8620p_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware sa8775p_firmware qcs8550_firmware vision_intelligence_300_platform_firmware qcn6112_firmware wcn3988_firmware sa6145p_firmware fsm20056_firmware fastconnect_6700_firmware wsa8810_firmware wcd9395_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware sdx65m_firmware qca6174a_firmware ipq8071a_firmware qcs4290_firmware sa8770p_firmware qca8085_firmware sxr2130_firmware qcs6490_firmware snapdragon_x12_lte_modem_firmware qca9898_firmware snapdragon_210_processor_firmware sm6250_firmware qcn9100_firmware vision_intelligence_400_platform_firmware wcn3620_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wsa8835_firmware sxr1120_firmware sxr2250p_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qcm6125_firmware qcm2290_firmware robotics_rb5_platform_firmware qcm2150_firmware qcf8000_firmware ar9380_firmware qcs7230_firmware qdu1010_firmware immersive_home_326_platform_firmware qcn6122_firmware ipq8065_firmware sxr1230p_firmware sdm429w_firmware snapdragon_4_gen_1_mobile_platform_firmware qca8075_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qcn6132_firmware qcn9003_firmware qca6310_firmware qca9994_firmware ipq8070a_firmware ipq8076_firmware qca6574_firmware sm4125_firmware sm7325p_firmware qru1032_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware qca6574a_firmware fastconnect_6200_firmware snapdragon_x55_5g_modem-rf_system_firmware aqt1000_firmware snapdragon_x35_5g_modem-rf_system_firmware snapdragon_690_5g_mobile_platform_firmware qcm4490_firmware qcn6274_firmware snapdragon_845_mobile_platform_firmware csrb31024_firmware qcm6490_firmware wsa8832_firmware ipq5300_firmware qcn9070_firmware ipq9570_firmware srv1h_firmware ipq6028_firmware ipq8072a_firmware qcn6432_firmware ipq5312_firmware qca9889_firmware sa8155p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware ipq5332_firmware snapdragon_8_gen_1_mobile_platform_firmware srv1m_firmware sd835_firmware qca6564_firmware qam8650p_firmware ipq6010_firmware snapdragon_8_gen_3_mobile_platform_firmware qcn9022_firmware wcd9390_firmware qca9990_firmware qcn9002_firmware qcn9072_firmware ipq6000_firmware sw5100_firmware qcn9074_firmware qcs410_firmware snapdragon_xr1_platform_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.15% / 4.38%

||

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 16:25

Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 wcn3991_firmware wsa8830 sm7250 sa6150p_firmware sa8145p_firmware qcs610 fsm10056 qca8337 sm7250_firmware csra6620 fsm10055_firmware wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sa6155 sd690_5g wcd9370 csra6620_firmware csra6640_firmware qcs6125_firmware wcn3998 sd_8cx_firmware wcd9385_firmware wcn3950 sa8155 qca6574au_firmware sdx55_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3998_firmware wcn3999_firmware qca6420 sa6155p_firmware wcn3999 qcs6125 sa8155_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware wcd9340 sa8195p wsa8810_firmware sd765g sd765_firmware fsm10056_firmware wcn6851 wcd9335 sa6155p wcd9385 wcd9341 qca6696_firmware sd750g sd870_firmware qca6390 ar8035 sd_8cx aqt1000 sa8150p sd750g_firmware wcd9375 wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qcm6125_firmware wcn3991 qca8337_firmware wcd9380_firmware sd865_5g qca6595 sdx55m_firmware wsa8835 qca6574 sd665_firmware wcd9380 qcs410 qca6574a sd690_5g_firmware qca6430_firmware wcd9335_firmware wcn3980 qca6574_firmware wcd9340_firmware sd855 wsa8815 wcn6850 sd665 sd_8c_firmware sd765 qca6574a_firmware sd768g_firmware wcn3980_firmware qca6391 sdx55m aqt1000_firmware ar8031_firmware wcn6851_firmware qca6574au sa8155p_firmware wcd9341_firmware qcm6125 wsa8810 sd870 qcs610_firmware sd_8c sa6145p sd768g ar8031 qca6595_firmware qcs405_firmware sa8145p qca6696 qca6391_firmware wcd9370_firmware sa6150p sdx55 sa8155p csra6640 qcs410_firmware ar8035_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.91%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sd_625_firmware sd_450 sd_8cx_firmware sd_845 qcs605 sd_632_firmware sd_835_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sxr1130 msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sd_425 sdm660 sd_430_firmware sd_710_firmware sd_435 sdm630 sd_625 sd_210 sd_820_firmware sd_636_firmware sd_439_firmware qualcomm_215_firmware sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_427 sd_430 sd_670 sd_435_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 9.02%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820A, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware sd_632 mdm9640_firmware sd_820a msm8996au_firmware sdx20 sd_415 sd_616 sd_425 sd_430_firmware mdm9607_firmware sd_615 mdm9650 sd_650_firmware sd_625 qca6574au sd_615_firmware msm8909w_firmware mdm9607 msm8996au sd_210 sd_650 sd_820a_firmware mdm9150 mdm9206 sd_652 qca6174a_firmware qca6174a qca9379_firmware sd_212_firmware sd_425_firmware sd_625_firmware qca9377 mdm9206_firmware sd_430 sd_632_firmware mdm9650_firmware sdx20_firmware sd_600_firmware sd_205 qca6574au_firmware sd_210_firmware sd_600 sd_415_firmware sd_652_firmware msm8909w qca9379 sd_616_firmware sd_205_firmware sd_212 mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.72%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 22:24

Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCN7605, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware apq8098 qcn7605 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware sda660 msm8909w msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p msm8937 mdm9207c_firmware mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.60%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.60%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 22:24

Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8996AU, Nicobar, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA845, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware msm8996au_firmware sdm845 sdx20 mdm9607_firmware sm8250_firmware mdm9650 qcs405 qca6574au sdm710 sm6150 mdm9607 msm8996au apq8017_firmware sdm710_firmware qcn7605_firmware sdm670 sxr2130 qcs605_firmware mdm9207c_firmware mdm9206 msm8905 mdm9207c qca6174a_firmware qca6174a qca9379_firmware sdm670_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware qca9377 sda845_firmware qcn7605 mdm9206_firmware qcs605 apq8053 apq8096au_firmware sm6150_firmware sm8250 mdm9650_firmware sm8150 sdx20_firmware msm8905_firmware qca6574au_firmware apq8017 nicobar_firmware qca9379 apq8053_firmware sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 9.02%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd616_firmware sd_615_firmware sd616 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware ipq4019_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware ipq8074 sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 ipq8064 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_205_firmware ipq8064_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 ipq8074_firmware sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 ipq4019 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.72%

||

7 Day CHG-0.00%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 22:31

Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, MSM8996AU, QCN7605, SDM439, SDX24, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-apq8096au_firmware msm8996au sdx24_firmware sm8150 sm8150_firmware apq8096au sdm439_firmware msm8996au_firmware apq8098_firmware apq8098 qcn7605 qcn7605_firmware sdx24 sdm439 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.51%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, IPQ8074, MDM9607, MDM9650, MSM8909, MSM8939, QCN7605, SDA660, SDM630, SDM636, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-msm8909 sdx24_firmware sdm636_firmware ipq8074 sdm636 sdm630_firmware sda660_firmware sdx20 qcn7605 sdm660 sdx24 sdm630 mdm9607_firmware msm8939 mdm9650 apq8053 ipq8074_firmware mdm9607 mdm9650_firmware sdx20_firmware sda660 msm8939_firmware apq8009_firmware qcn7605_firmware apq8009 msm8909_firmware apq8053_firmware sdm660_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.14% / 4.12%

||

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-26 Feb, 2026 | 19:09

Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity

Memory corruption while processing IPA statistics, when there are no active clients registered.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 0.94%

||

7 Day CHG~0.00%

Published-06 Apr, 2026 | 15:33

Updated-08 Apr, 2026 | 21:10

Buffer Copy Without Checking Size of Input in Automotive Platform

Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8845h_firmware milos sm7635p_firmware snapdragon_auto_5g_modem-rf_gen_2 snapdragon_888\+_5g_mobile_platform pandeiro sc8380xp_firmware snapdragon_4_gen_1_mobile_platform_firmware sm8635_firmware csra6620_firmware snapdragon_ar1_gen_1_platform sa6150p_firmware snapdragon_x72_5g_modem-rf_system sa8770p qamsrv1m qln1083bd qpa1083bd_firmware qca6688aq_firmware fastconnect_6200 wcn3988 lemansau_firmware iq-8300 wcd9385_firmware qca8081 x2000092_firmware xg101039_firmware snapdragon_x55_5g_modem-rf_system wcd9335 fastconnect_7800 qam8397p_firmware sa7775p qcm6490_firmware qpa1086bd_firmware qxm1083 sm7325p themisto_firmware snapdragon_865_5g_mobile_platform_firmware fwa_gen_3_ultra wcn3910 fastconnect_7800_firmware x2000090_firmware sa7255p_firmware wsa8845 sw6100p_firmware wcd9380 snapdragon_778g\+_5g_mobile_platform cologne wcn6755_firmware video_collaboration_vc1_platform snapdragon_8_elite_firmware snapdragon_ar1\+_gen_1_platform_firmware wcn3980_firmware orne snapdragon_460_mobile_platform snapdragon_7c\+_gen_3_compute qxm1083_firmware cologne_firmware wcd9370 qca6595au qam8620p_firmware wcn7861 x2000077 wcn7860 x2000077_firmware qam8255p qamsrv1m_firmware ar8035_firmware wcd9378c snapdragon_480_5g_mobile_platform_firmware sa8145p_firmware sd865_5g wsa8835_firmware qam8620p wcn6755 sw6100p sar1165p_firmware wcn3950 qmp1000_firmware snapdragon_865\+_5g_mobile_platform xg101002 qca6698aq wsa8810 qam8255p_firmware wsa8845h qxm1095_firmware sm7435_firmware sa9000p_firmware fastconnect_6800 snapdragon_4_gen_2_mobile_platform_firmware snapdragon_7s_gen_3_mobile_platform wcn6650_firmware sm7675_firmware qcm6490 sw6100_firmware x2000086 sm7435 xg101002_firmware snapdragon_x32_5g_modem-rf_system_firmware sm8635p sa8620p qfw7124_firmware qca8695au_firmware sa8620p_firmware video_collaboration_vc3_platform_firmware qxm1096_firmware fastconnect_6800_firmware sa7255p sa6155p_firmware qca6574 x2000086_firmware snapdragon_x72_5g_modem-rf_system_firmware wsa8830_firmware xrv9209_firmware srv1l_firmware snapdragon_ar1_gen_1_platform_firmware snapdragon_8_elite csra6640_firmware sm7325p_firmware qln1083bd_firmware qxm1093 snapdragon_6_gen_3_mobile_platform_firmware snapdragon_690_5g_mobile_platform snapdragon_6_gen_3_mobile_platform snapdragon_xr2_5g_platform_firmware wcn6450 qep8111_firmware wcn3988_firmware monaco_iot_firmware robotics_rb2_platform qxm1086 iq-9075 sxr2330p qcm5430_firmware sa6155p wsa8840_firmware snapdragon_865\+_5g_mobile_platform_firmware qcn6224 srv1l qca6678aq netrani_firmware snapdragon_x35_5g_modem-rf_system_firmware sm8650q_firmware sa9000p qxm1094_firmware snapdragon_6_gen_4_mobile_platform wcd9335_firmware sa8155p srv1m snapdragon_695_5g_mobile_platform monaco_iot sa7775p_firmware wcd9378c_firmware wsa8835 palawan25 lemans_au_lgit wcn7881 xrv7209_firmware g2_gen_1 sxr2330p_firmware sxr2350p_firmware snapdragon_662_mobile_platform_firmware wcd9340_firmware sa8540p wcn7880_firmware wsa8832 qamsrv1h_firmware qcc710 sm8635 snapdragon_xr2_5g_platform fastconnect_6700_firmware iq-615_firmware qca6595 snapdragon_x53_5g_modem-rf_system_firmware sm7675 snapdragon_888_5g_mobile_platform snapdragon_888\+_5g_mobile_platform_firmware qxm1096 wcd9395 qcm6125 fastconnect_6900 qxm1095 sm7675p qca8337_firmware qcm6125_firmware x2000092 netrani snapdragon_888_5g_mobile_platform_firmware snapdragon_690_5g_mobile_platform_firmware sa6145p snapdragon_480\+_5g_mobile_platform sa8540p_firmware snapdragon_6_gen_1_mobile_platform_firmware qca6391_firmware qfw7114 xrv9209 snapdragon_x53_5g_modem-rf_system snapdragon_ar1\+_gen_1_platform iq-8275 sc8380xp wcn7860_firmware x2000094_firmware qcn6224_firmware sa8145p qca6696 iq-9100 snapdragon_778g_5g_mobile_platform snapdragon_6_gen_4_mobile_platform_firmware qca6574a_firmware qcm5430 sm6650p_firmware sm6650p sa8150p snapdragon_782g_mobile_platform wsa8832_firmware sm8750p_firmware srv1h qca6698aq_firmware wcd9375 sxr2350p wcd9370_firmware wcd9390_firmware g2_gen_1_firmware snapdragon_x32_5g_modem-rf_system wcn3950_firmware wcd9395_firmware qca8081_firmware qcc710_firmware qfw7114_firmware qca6696_firmware qca6174a milos_firmware qcm2290_firmware snapdragon_xr2\+_gen_1_platform_firmware qca8695au qcs2290 sm7635p snapdragon_8_elite_gen_5_firmware qca6574au qca6574au_firmware snapdragon_x75_5g_modem-rf_system qca6797aq fastconnect_6900_firmware iq-615 sa6150p snapdragon_7s_gen_3_mobile_platform_firmware sw6100 snapdragon_4_gen_2_mobile_platform sa6145p_firmware snapdragon_480\+_5g_mobile_platform_firmware qam8295p wcd9390 sm8635p_firmware xrv7209 sa8155p_firmware qam8397p qxm1086_firmware wcd9375_firmware qpa1086bd sa8770p_firmware x2000094 robotics_rb2_platform_firmware sar1165p qca6688aq fastconnect_6200_firmware x2000090 lemansau qca6574a wcd9340 qca6595_firmware qam8295p_firmware wcd9385 snapdragon_xr2\+_gen_1_platform snapdragon_auto_5g_modem-rf_gen_2_firmware qca6574_firmware wsa8815 snapdragon_8_elite_gen_5 orne_firmware qpa1083bd snapdragon_8_gen_3_mobile_platform_firmware wcn3980 sm8750p wcn6450_firmware qca6584au_firmware snapdragon_778g_5g_mobile_platform_firmware qln1086bd wcn7880 snapdragon_x55_5g_modem-rf_system_firmware wsa8840 video_collaboration_vc3_platform csra6640 qca6595au_firmware snapdragon_480_5g_mobile_platform snapdragon_778g\+_5g_mobile_platform_firmware qcm2290 xg101032 iq-9100_firmware snapdragon_662_mobile_platform qca8337 fwa_gen_3_ultra_firmware wsa8815_firmware snapdragon_870_5g_mobile_platform palawan25_firmware qamsrv1h pandeiro_firmware qca6391 qca6584au snapdragon_782g_mobile_platform_firmware ar8035 snapdragon_695_5g_mobile_platform_firmware qcs2290_firmware qln1086bd_firmware qca6678aq_firmware snapdragon_8_gen_3_mobile_platform themisto snapdragon_865_5g_mobile_platform wcd9380_firmware sa8295p snapdragon_7c\+_gen_3_compute_firmware wsa8830 iq-8275_firmware wcn7861_firmware snapdragon_6_gen_1_mobile_platform video_collaboration_vc1_platform_firmware sm7675p_firmware srv1m_firmware qep8111 sa8295p_firmware qfw7124 sa8195p snapdragon_x75_5g_modem-rf_system_firmware csra6620 snapdragon_4_gen_1_mobile_platform iq-8300_firmware qxm1094 qca6797aq_firmware wcn6650 qxm1093_firmware srv1h_firmware wcn7881_firmware qca6174a_firmware wsa8845_firmware xg101032_firmware wcd9378_firmware sa8255p_firmware sd865_5g_firmware snapdragon_460_mobile_platform_firmware snapdragon_870_5g_mobile_platform_firmware xg101039 fastconnect_6700 sa8195p_firmware qmp1000 sm8650q sa8150p_firmware snapdragon_x35_5g_modem-rf_system wcn3910_firmware wcd9378 iq-9075_firmware qcn6274_firmware wsa8810_firmware sa8255p qcn6274 lemans_au_lgit_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 1.09%

||

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to read board data.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8845_firmware qcc2076_firmware wsa8840 wcd9370 sc8180xp-aaab_firmware wcd9340_firmware wcd9385 sc8380xp wcd9341_firmware qca1064 qcn7606 snapdragon_7c_compute_platform_firmware qcn7605_firmware snapdragon_7c\+_gen_3_compute_firmware qcc2073_firmware fastconnect_6700 qca1064_firmware qca6420 sc8180xp-ad sc8280xp-abbb snapdragon_7c_gen_2_compute_platform_firmware qca6430 wsa8815_firmware wcd9370_firmware sc8180xp-ad_firmware qcn7605 qcc2076 qcm6490_firmware sc8180xp-aaab qcn7606_firmware qca6595au wcd9340 wcd9341 qcm6490 wsa8810_firmware wsa8845h_firmware qca2062 qca6420_firmware aqt1000_firmware qcs6490_firmware sc8180xp-acaf qca2064_firmware snapdragon_7c\+_gen_3_compute wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware qca2066_firmware qca6430_firmware fastconnect_6800_firmware qcs5430 wsa8845h wcd9380_firmware qcm5430 sm6250_firmware sc8180x-ad_firmware qcm5430_firmware sc8180x-acaf wsa8815 wsa8830 sc8180x\+sdx55_firmware qca2062_firmware qcc2073 sc8380xp_firmware qca2065 fastconnect_6800 qca1062 fastconnect_7800_firmware fastconnect_6900 wcd9375_firmware qca6391 qcs5430_firmware sc8180x\+sdx55 snapdragon_7c_gen_2_compute_platform wcd9385_firmware sm6250 fastconnect_6900_firmware wcd9380 qca1062_firmware fastconnect_6200 sc8280xp-abbb_firmware fastconnect_7800 sc8180x-acaf_firmware wcd9375 snapdragon_7c_compute_platform wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware qca2064 sc8180x-ad sc8180x-aaab wsa8810 sc8180x-aaab_firmware wsa8835_firmware qca2066 qcs6490 sc8180xp-acaf_firmware fastconnect_6200_firmware qca2065_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 1.87%

||

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN HOST

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

Vendor-Qualcomm Technologies, Inc.

Product-sw5100p immersive_home_214 qcs410_firmware sd865_5g sa6150p_firmware ipq9574 qcn9000_firmware qcn6102_firmware qca6595 qcn9022 qcs610_firmware snapdragon_8\+_gen_1 ipq6028_firmware wcd9335 qca8081_firmware wcd9370 qcn9001 qca8072 qca6696 wcd9341_firmware ipq5028_firmware qcn6024 qcn9003_firmware ipq8076 qca6426 wcn6740_firmware fastconnect_6700 ipq6018_firmware qcn6023 snapdragon_695_5g sa4150p qcn5124_firmware snapdragon_888_5g wsa8832_firmware qca8337 qca6426_firmware snapdragon_870_5 ipq6000 snapdragon_4_gen_2_firmware qca6574au_firmware ipq8078a ipq8078a_firmware qam8295p snapdragon_x12_lte_firmware wcd9341 qca6574au wsa8810_firmware csra6640 snapdragon_690_5g snapdragon_778g\+_5g_firmware snapdragon_865\+_5g qcn9100_firmware snapdragon_765_5g qcn5122 wcn3660b_firmware qca6554a fastconnect_6800_firmware snapdragon_865\+_5g_firmware qcn6024_firmware snapdragon_x65_5g video_collaboration_vc1_platform_firmware sa4155p snapdragon_888\+_5g_firmware qcn9000 ssg2115p qcn6132_firmware snapdragon_xr2_5g_firmware qsm8250_firmware qcn5054 snapdragon_765g_5g_firmware snapdragon_660_firmware snapdragon_4_gen_2 fastconnect_6900 video_collaboration_vc1_platform qcn5052 wcd9385_firmware qca6421 ipq9574_firmware qam8255p_firmware snapdragon_778g_5g ipq8074a_firmware ipq8076a qcn5164 qcs4490 snapdragon_662_firmware sa6155p qcn6100_firmware qca6421_firmware qca6564au_firmware csr8811_firmware wsa8810 qca8075 qam8650p video_collaboration_vc5_platform_firmware qca8085 qsm8250 qcn6100 qca6595au sm7315_firmware snapdragon_865_5g_firmware wcd9326_firmware sa6155p_firmware qca6436_firmware qcn9012 ipq8070a_firmware qcn9070 qcs4490_firmware wcn3910_firmware qca8084 sm4125_firmware snapdragon_680_4g wcn3910 sdx65m wcd9370_firmware snapdragon_480\+_5g_firmware snapdragon_765_5g_firmware wcn3660b qca6574a qca6174a snapdragon_695_5g_firmware sa8195p snapdragon_750g_5g_firmware qcs8250_firmware qcm2290 qcm6490 215 qcn6122_firmware qcn5154_firmware snapdragon_x55_5g_firmware wcn3988 qcn5122_firmware qcn9274 qcn9024 ipq8076a_firmware qca6574 sxr2230p_firmware qcn9011 snapdragon_439_firmware smart_audio_400 qcn9024_firmware qca8082 sa6150p wcd9326 qcs410 qcm2290_firmware sa8155p_firmware sa8155p qca8072_firmware wsa8830 sa6145p snapdragon_x65_5g_firmware qcn9074_firmware ipq8174 immersive_home_318_firmware qcn6122 sa8255p_firmware snapdragon_888\+_5g ipq8174_firmware ar8035 ipq8072a qrb5165m_firmware immersive_home_216_firmware qcm4325 immersive_home_316 ipq8071a qcn6112 snapdragon_782g wcn3950_firmware qca6698aq ssg2125p_firmware qrb5165n fastconnect_6200 wcn3680b sm7325p_firmware sa8145p_firmware sa8150p_firmware fastconnect_6700_firmware snapdragon_768g_5g video_collaboration_vc3_platform_firmware wcn3990 qcn6023_firmware qcn5164_firmware snapdragon_778g_5g_firmware snapdragon_780g_5g qcn9002 ipq8078 qcs6490 qcs8250 fastconnect_6200_firmware snapdragon_778g\+_5g qcn9072 wsa8830_firmware qca6431 qca8386_firmware sd660_firmware snapdragon_7c\+_gen_3 wsa8832 qca8082_firmware immersive_home_216 sxr2130_firmware ar8035_firmware qcn5022_firmware qrb5165m snapdragon_680_4g_firmware sa4150p_firmware qca4024_firmware sd888_firmware ipq9008 snapdragon_439 qca6564au snapdragon_460 ipq9008_firmware qcn9074 wsa8815_firmware snapdragon_865_5g sa8195p_firmware qca8337_firmware qcm4290 qcn5054_firmware qca9888 snapdragon_480_5g_firmware snapdragon_4_gen_1_firmware snapdragon_x12_lte snapdragon_685_4g snapdragon_xr2\+_gen_1 qca9377_firmware ipq8173 qcm6490_firmware ipq8072a_firmware snapdragon_w5\+_gen_1 sm7250p_firmware sm4125 ipq6010_firmware qcm4490_firmware wcn3950 qcn6112_firmware flight_rb5_5g snapdragon_690_5g_firmware qca6797aq_firmware ipq5028 qca8085_firmware qcn9070_firmware sa8295p_firmware smart_audio_400_firmware snapdragon_460_firmware sa4155p_firmware qcn9022_firmware ipq5010_firmware qcn6132 snapdragon_auto_5g_firmware sm7250p snapdragon_768g_5g_firmware ipq6018 qcn6102 qca6584au sd888 qcn9011_firmware sw5100_firmware wcn6740 fastconnect_6800 qca4024 snapdragon_662 qca6595_firmware fastconnect_7800_firmware immersive_home_214_firmware qcn9001_firmware ipq8070a fastconnect_6900_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p snapdragon_xr2_5g sa8150p qcn9003 215_firmware qca8075_firmware snapdragon_888_5g_firmware snapdragon_765g_5g qcn5052_firmware sxr1230p ipq6010 sdx65m_firmware video_collaboration_vc3_platform sw5100 snapdragon_870_5_firmware qam8295p_firmware qca6431_firmware snapdragon_8_gen_1_firmware wcn3990_firmware sm7315 snapdragon_750g_5g qca6698aq_firmware qcs2290 wcd9385 qcs2290_firmware snapdragon_xr2\+_gen_1_firmware wcn3615 qca8084_firmware snapdragon_8_gen_1 sa8255p qcs4290 sxr1230p_firmware qcn5024 snapdragon_782g_firmware sdx55_firmware snapdragon_x55_5g ipq8071a_firmware wcn3615_firmware flight_rb5_5g_firmware ssg2125p qca6554a_firmware sxr2130 ipq6028 qcm4490 snapdragon_4_gen_1 csra6640_firmware qcn9100 robotics_rb5 snapdragon_480\+_5g qca6174a_firmware snapdragon_685_4g_firmware sm7325p qam8650p_firmware video_collaboration_vc5_platform qcs6490_firmware snapdragon_480_5g ipq8076_firmware wcd9335_firmware wcn3980_firmware qrb5165n_firmware qca6436 qca6584au_firmware qcn5152_firmware wsa8835 qca6595au_firmware qca6391_firmware sw5100p_firmware qca6696_firmware qcs4290_firmware wcd9380_firmware qca6574_firmware csra6620 sd660 qca8081 wsa8815 sg4150p sd_8_gen1_5g qam8775p qca9377 snapdragon_ar2_gen_1_firmware snapdragon_auto_5g qcn5124 qca6797aq qcn5152 qcm4325_firmware snapdragon_660 qca6574a_firmware sdx55 qcn9072_firmware qcm4290_firmware qca9888_firmware ipq8074a qca9889 snapdragon_8\+_gen_1_firmware qcn5024_firmware sd_8_gen1_5g_firmware qcn9002_firmware wcd9375_firmware qca8386 qca6391 immersive_home_318 ipq5010 qcn9274_firmware snapdragon_7c\+_gen_3_firmware snapdragon_w5\+_gen_1_firmware ipq8173_firmware qcn9012_firmware sg4150p_firmware snapdragon_780g_5g_firmware csra6620_firmware sa8295p ipq6000_firmware fastconnect_7800 qam8775p_firmware sd865_5g_firmware wcd9375 ipq8078_firmware qca9889_firmware snapdragon_ar2_gen_1 wcn3988_firmware immersive_home_316_firmware qcn5154 sa8145p wsa8835_firmware ssg2115p_firmware csr8811 qcn5022 wcn3980 wcn3680b_firmware qcs610 Snapdragon qcn5024_firmware qam8255p_firmware qca9377_firmware snapdragon_662_mobile_platform_firmware sa6150p_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware ipq8173_firmware qca6431_firmware flight_rb5_5g_platform_firmware qca4024_firmware immersive_home_318_platform_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware ipq5028_firmware sa8150p_firmware qca6595au_firmware csra6620_firmware csra6640_firmware qcn5152_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca6554a_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qcn6024_firmware qca8386_firmware wcd9326_firmware immersive_home_316_platform_firmware wcn3615_firmware sd_8_gen1_5g_firmware qca8084_firmware snapdragon_660_mobile_platform_firmware qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware qcn9011_firmware qca8082_firmware sm7315_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware sdx55_firmware wcd9375_firmware qca8081_firmware qcn6023_firmware wcn3680b_firmware sm7250p_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware snapdragon_auto_5g_modem-rf_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware ipq8078a_firmware smart_audio_400_platform_firmware qrb5165m_firmware sa4155p_firmware qcn6112_firmware wcn3988_firmware sa6145p_firmware fastconnect_6700_firmware wsa8810_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware qca6698aq_firmware sdx65m_firmware qca6174a_firmware ipq8071a_firmware qcs4290_firmware qca8085_firmware qam8775p_firmware qca9888_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware snapdragon_x12_lte_modem_firmware ipq9008_firmware qcn5154_firmware wcn3910_firmware qcn9100_firmware wsa8830_firmware sd865_5g_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wsa8835_firmware sd660_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware qcn5022_firmware sa8295p_firmware immersive_home_216_platform_firmware sg4150p_firmware snapdragon_750g_5g_mobile_platform_firmware qcm2290_firmware qualcomm_video_collaboration_vc1_platform_firmware robotics_rb5_platform_firmware qca8337_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware ipq8076a_firmware qcn9001_firmware qcn6122_firmware sxr1230p_firmware csr8811_firmware qcn5054_firmware snapdragon_4_gen_1_mobile_platform_firmware qca8075_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qcn6132_firmware qcn9003_firmware qca8072_firmware qcn9012_firmware qcn5052_firmware qcn9274_firmware wcd9335_firmware ipq8070a_firmware ipq6018_firmware ipq8076_firmware qcm4325_firmware qca6574_firmware sm4125_firmware sm7325p_firmware snapdragon_xr2_5g_platform_firmware snapdragon_439_mobile_platform_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware fastconnect_6200_firmware ipq9574_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware qca6421_firmware wcn6740_firmware qcm4490_firmware snapdragon_690_5g_mobile_platform_firmware qcs4490_firmware qcm6490_firmware ipq8078_firmware wsa8832_firmware qcn9070_firmware fastconnect_6900_firmware ipq6028_firmware ipq8072a_firmware qca6797aq_firmware qca9889_firmware sa8155p_firmware qcn9024_firmware ipq8174_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware qualcomm_215_mobile_platform_firmware qam8650p_firmware ipq6010_firmware qca6595_firmware qca6391_firmware immersive_home_214_platform_firmware sa4150p_firmware wcd9370_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware qcn9022_firmware qcn9002_firmware qcn9072_firmware ipq6000_firmware ssg2115p_firmware sw5100_firmware qcn9074_firmware qcs410_firmware ar8035_firmware qsm8250_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.11% / 1.59%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Buffer copy without checking size of Input in Core

Memory corruption in Core while processing control functions.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware snapdragon_8_gen_3_mobile_platform_firmware qcm8550_firmware sw5100p sd865_5g vision_intelligence_300_platform ipq9574 qcn9000_firmware qca6595 wcd9335 wcd9370 qca8081_firmware qcc711_firmware snapdragon_x50_5g_modem-rf_system qca4004 wcd9340_firmware qca6696 wcd9341_firmware wcd9395_firmware qcn6024 qcc710_firmware qca6426 wcn6740_firmware fastconnect_6700 qcn6422_firmware qca9984_firmware snapdragon_768g_5g_mobile_platform_firmware wsa8832_firmware snapdragon_x35_5g_modem-rf_system_firmware qca8337 qdu1110 qca6426_firmware wcd9395 snapdragon_460_mobile_platform snapdragon_auto_4g_modem 9205_lte_modem qca6574au_firmware snapdragon_8cx_gen_3_compute_platform_firmware qcn7606_firmware qam8295p wcd9341 ipq5312 qca6574au wcd9390 wsa8810_firmware wsa8845h_firmware qcc7226_firmware csra6640 snapdragon_8cx_gen_2_5g_compute_platform sa9000p_firmware srv1h qcc7225_firmware qcc7228 fastconnect_6800_firmware qcn6024_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_695_5g_mobile_platform snapdragon_4_gen_1_mobile_platform_firmware snapdragon_778g\+_5g_mobile_platform sa8770p qcn9000 ssg2115p qcc710 snapdragon_850_mobile_compute_platform snapdragon_8cx_compute_platform_firmware sa8540p snapdragon_480\+_5g_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware qsm8250_firmware qsm8350_firmware robotics_rb3_platform 315_5g_iot_modem_firmware fastconnect_6900 snapdragon_765g_5g_mobile_platform qcn6402 qcn6432 qru1032_firmware ipq5332_firmware qep8111 qfw7114 wcd9385_firmware qca6421 315_5g_iot_modem ipq9574_firmware qca6310 snapdragon_x55_5g_modem-rf_system qam8255p_firmware sa8155_firmware wcd9360 snapdragon_888_5g_mobile_platform_firmware snapdragon_wear_1300_platform_firmware qca6335 snapdragon_ar2_gen_1_platform_firmware qcs4490 snapdragon_8_gen_1_mobile_platform_firmware immersive_home_3210_platform_firmware snapdragon_685_4g_mobile_platform snapdragon_8\+_gen_2_mobile_platform_firmware sa6155p wsa8845 qca6421_firmware qca6564au_firmware snapdragon_768g_5g_mobile_platform wsa8810 qca8075 qam8650p video_collaboration_vc5_platform_firmware sa9000p qdu1000_firmware qca8085 qsm8250 snapdragon_8\+_gen_2_mobile_platform srv1h_firmware qca6595au sm7315_firmware qdu1010 wcd9326_firmware sa6155p_firmware qcc7228_firmware wsa8840 srv1m_firmware qcs8550_firmware qdu1210_firmware qcc7225 snapdragon_870_5g_mobile_platform_firmware qfw7124_firmware qca6436_firmware qcn9012 snapdragon_8\+_gen_1_mobile_platform qcs4490_firmware snapdragon_8_gen_2_mobile_platform qcf8001 snapdragon_7c\+_gen_3_compute_firmware wcn3910_firmware qca8084 sm4125_firmware snapdragon_855\+\/860_mobile_platform_firmware qca6420 snapdragon_8_gen_3_mobile_platform wcn3910 sdx65m wcd9370_firmware csrb31024 snapdragon_x70_modem-rf_system_firmware snapdragon_845_mobile_platform snapdragon_x55_5g_modem-rf_system_firmware snapdragon_750g_5g_mobile_platform_firmware qdu1110_firmware qdu1000 qca6574a ipq9570 qca6174a wcd9340 qcs8250_firmware qcm2290 qdu1210 snapdragon_auto_5g_modem-rf_gen_2 qca6335_firmware qcm6490 ipq5302 sa8540p_firmware sm8550p_firmware immersive_home_3210_platform qcm8550 wcn3988 qcn9274 qcn9024 snapdragon_460_mobile_platform_firmware qca6574 snapdragon_x75_5g_modem-rf_system sa8775p ipq9570_firmware sxr2230p_firmware sd675_firmware snapdragon_8cx_compute_platform qcc711 qca6430_firmware snapdragon_870_5g_mobile_platform qcn9011 sa8775p_firmware qamsrv1h qcn6412_firmware sdx57m qcn9024_firmware snapdragon_8cx_gen_3_compute_platform wsa8845h qca8082 wcd9326 qcm2290_firmware sa8155p_firmware qca6564a sa8155p wsa8830 snapdragon_675_mobile_platform snapdragon_wear_1300_platform ipq5312_firmware sm8550p qcf8000_firmware sa6145p snapdragon_8\+_gen_1_mobile_platform_firmware snapdragon_662_mobile_platform qcn9074_firmware vision_intelligence_400_platform_firmware snapdragon_765_5g_mobile_platform sa8255p_firmware flight_rb5_5g_platform_firmware snapdragon_665_mobile_platform ar8035 qamsrv1m_firmware sa6155 qrb5165m_firmware sa8650p_firmware snapdragon_678_mobile_platform_firmware qcm4325 robotics_rb5_platform qcn6224 qca6698aq wcn3950_firmware ssg2125p_firmware qrb5165n snapdragon_8c_compute_platform_firmware snapdragon_8_gen_1_mobile_platform fastconnect_6200 sd670 sm7325p_firmware sd460 wcd9360_firmware snapdragon_8cx_gen_2_5g_compute_platform_firmware snapdragon_888\+_5g_mobile_platform qdx1011 smart_audio_400_platform snapdragon_855\+\/860_mobile_platform sa8150p_firmware snapdragon_w5\+_gen_1_wearable_platform fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 sd670_firmware snapdragon_680_4g_mobile_platform_firmware immersive_home_326_platform_firmware qcs6490 qcs8250 ipq9554_firmware snapdragon_750g_5g_mobile_platform fastconnect_6200_firmware ar8031_firmware wsa8830_firmware qcn6224_firmware qca6431 qca8386_firmware snapdragon_850_mobile_compute_platform_firmware wsa8845_firmware wsa8832 qca8082_firmware snapdragon_auto_4g_modem_firmware sdx57m_firmware sxr2130_firmware srv1m qcn6432_firmware snapdragon_675_mobile_platform_firmware ar8035_firmware qrb5165m snapdragon_888_5g_mobile_platform sc8380xp snapdragon_w5\+_gen_1_wearable_platform_firmware qca0000_firmware sd888_firmware ipq9008 snapdragon_662_mobile_platform_firmware ipq9554 wcd9306 qca6564au ipq9008_firmware qcn9074 wsa8815_firmware qca8337_firmware qcm4290 ipq5332 snapdragon_680_4g_mobile_platform qcn9013 ar8031 sg8275p_firmware qca9377_firmware qcm6490_firmware snapdragon_8c_compute_platform sm7250p_firmware wcn3999 sm4125 qcm4490_firmware snapdragon_855_mobile_platform qru1032 robotics_rb3_platform_firmware wcn3950 flight_rb5_5g_platform snapdragon_xr2_5g_platform snapdragon_x65_5g_modem-rf_system_firmware qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_765g_5g_mobile_platform_firmware snapdragon_7c\+_gen_3_compute snapdragon_xr2\+_gen_1_platform_firmware snapdragon_670_mobile_platform_firmware qca8085_firmware qcf8001_firmware snapdragon_780g_5g_mobile_platform qca4004_firmware sa8295p_firmware sd_675_firmware qca9984 sm7250p csrb31024_firmware sa8155 sd_8cx_firmware snapdragon_780g_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qca6584au sd888 qcn6274_firmware qcn9011_firmware qru1062_firmware sd460_firmware snapdragon_4_gen_2_mobile_platform sw5100_firmware snapdragon_765_5g_mobile_platform_firmware wcn6740 sc8380xp_firmware qru1062 qca6310_firmware fastconnect_6800 qfw7114_firmware qcs7230 snapdragon_685_4g_mobile_platform_firmware qca6595_firmware fastconnect_7800_firmware qcn6422 ipq5302_firmware qcc7226 snapdragon_782g_mobile_platform_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware qam8255p sa6155_firmware sxr2230p snapdragon_xr2_5g_platform_firmware snapdragon_4_gen_1_mobile_platform sa8150p qca8075_firmware vision_intelligence_300_platform_firmware snapdragon_778g_5g_mobile_platform snapdragon_665_mobile_platform_firmware qcf8000 snapdragon_x24_lte_modem snapdragon_auto_5g_modem-rf_firmware snapdragon_x35_5g_modem-rf_system sxr1230p snapdragon_865\+_5g_mobile_platform sd662_firmware sw5100 sdx65m_firmware video_collaboration_vc3_platform aqt1000 wcd9306_firmware snapdragon_865_5g_mobile_platform_firmware qam8295p_firmware sd855 qca6431_firmware qcn6402_firmware wcn3990_firmware 9205_lte_modem_firmware sm7315 qca6698aq_firmware qcs2290 qca6564a_firmware qcn7606 wcd9385 qcs2290_firmware qsm8350 wcn3999_firmware qca8084_firmware sd662 snapdragon_678_mobile_platform sa8255p qcs7230_firmware qcs4290 sxr1230p_firmware wcd9390_firmware snapdragon_778g\+_5g_mobile_platform_firmware snapdragon_865\+_5g_mobile_platform_firmware snapdragon_690_5g_mobile_platform qep8111_firmware qca6430 sg8275p sdx55_firmware qdx1011_firmware snapdragon_auto_5g_modem-rf ssg2125p qru1052 sxr2130 qcm4490 csra6640_firmware qamsrv1m snapdragon_xr2\+_gen_1_platform immersive_home_326_platform qca6174a_firmware sm7325p qam8650p_firmware qcn9013_firmware video_collaboration_vc5_platform snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware snapdragon_x65_5g_modem-rf_system sd855_firmware wcd9335_firmware qrb5165n_firmware qca6436 wcn3980_firmware qca6584au_firmware snapdragon_x24_lte_modem_firmware wsa8835 qca6391_firmware wsa8840_firmware qcn6274 snapdragon_480_5g_mobile_platform_firmware qdu1010_firmware qfw7124 qca6595au_firmware qca0000 sw5100p_firmware snapdragon_ar2_gen_1_platform snapdragon_782g_mobile_platform qca6696_firmware qcs4290_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware qca6574_firmware csra6620 qca8081 wsa8815 sg4150p sd_8_gen1_5g qam8775p qca9377 qca6797aq qcm4325_firmware qcn6412 vision_intelligence_400_platform qca6574a_firmware sdx55 qcm4290_firmware snapdragon_480\+_5g_mobile_platform sd675 sd_8_gen1_5g_firmware wcd9375_firmware qca8386 qca6391 snapdragon_x70_modem-rf_system qcn9274_firmware smart_audio_400_platform_firmware snapdragon_778g_5g_mobile_platform_firmware qcn9012_firmware sg4150p_firmware snapdragon_480_5g_mobile_platform qru1052_firmware snapdragon_670_mobile_platform csra6620_firmware sa8770p_firmware sa8295p snapdragon_8_gen_2_mobile_platform_firmware qcs8550 robotics_rb5_platform_firmware snapdragon_x50_5g_modem-rf_system_firmware fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware wcd9375 wcn3988_firmware qamsrv1h_firmware sd_675 snapdragon_888\+_5g_mobile_platform_firmware sd_8cx wsa8835_firmware ssg2115p_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn3980 snapdragon_690_5g_mobile_platform_firmware qdx1010 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 1.53%

||

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Memory corruption in Core Platform while printing the response buffer in log.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_8cx_gen3_firmware sa6150p_firmware qca8337 qca6431_firmware sdx65 wcn3950_firmware ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 qcs605_firmware sd_675_firmware wcn3998 qam8295p sd_8cx_gen2_firmware qcn6024_firmware qca8386_firmware wcn3950 sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware qca6420 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware qca6698aq sa4155p_firmware sa8155_firmware qca6430 sdx65m wcd9340 qcn6132 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qcn6122 wcd9341 qca6431 qca6696_firmware sd870_firmware ipq9008_firmware sd_8cx sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd660_firmware wcn7850_firmware sa8195p_firmware sa8295p_firmware wcn6750_firmware ipq5018_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p qca8084 qca6564au sdx55m_firmware wcn6856_firmware ipq9008 sd670_firmware qca6574 wcd9380 sdx50m_firmware sxr1230p sdx24_firmware qca6430_firmware qcn9012_firmware qcn9274_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 qca6426_firmware qcn9024 ipq9574_firmware wcn3980_firmware sdx55m sa8295p qca6421_firmware wcn6740_firmware sd678_firmware qrb5165 wcn6851_firmware qcs603 sd670 qca6564a_firmware qcn9024_firmware sdx57m sd870 wsa8832 wcn6855 sa8540p sa6145p qca6595_firmware sa8145p qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sdx70m ssg2115p_firmware qcs8155_firmware sa4155p ar8035_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sa8145p_firmware fsm10056 qca8082 qcn9072 qca8386 sd765g_firmware qca6420_firmware qca6390_firmware wcd9370 sd675_firmware ssg2115p qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware ipq5018 qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware qam8295p_firmware qcn9011_firmware qca8082_firmware sa8155 sa9000p_firmware sdx55_firmware qca6595au qcn6023_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware sd778g sa6155p_firmware qca6310 qcn9274 qcs8155 wcn7851 qcs6490 sdxr2_5g qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 sdx65m_firmware qca6174a_firmware wcd9385 qca8085_firmware qcs6490_firmware sd_8cx_gen3 sdx70m_firmware ar8035 qca6390 wcd9375 aqt1000 qcn9100_firmware ipq5010_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qca6564a sa4150p wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 sxr1230p_firmware sa8540p_firmware sd_8_gen1_5g sd888_5g ssg2125p_firmware qca6574a wcn6855_firmware qca6174a sm7325p qcn6132_firmware qca6310_firmware wcn6750 sa9000p qca6574_firmware sd855 sm7325p_firmware sdx57m_firmware sd765 qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware sm7315 qca6391 aqt1000_firmware qcn9100 sdx65_firmware qcm6490_firmware sdx50m wsa8832_firmware qcn9070_firmware qcn9011 qca6574au sa8155p_firmware ipq9574 wcd9341_firmware wsa8810 wcn6856 qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sa6150p qcn9022_firmware qcn6024 qcn9022 sd845 qcn9072_firmware sm7250p qcn9074_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.11% / 1.49%

||

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-02 Aug, 2024 | 09:44

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Memory corruption in WLAN while running doDriverCmd for an unspecific command.

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sa6150p_firmware sa8145p_firmware qcs610 qca8337 qca6431_firmware mdm9628_firmware mdm9650 wcn3950_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware wcd9370 qca6426 qca6584au_firmware sm4375 wcn3998 qca6554a_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 mdm9628 wcn3660b qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3610_firmware qca6420 qca6436_firmware qca6564au_firmware qca6584au sa6155p_firmware sdxr2_5g wcn3988_firmware qca6430 qcn9074 sa6145p_firmware qca6421 sa8195p wsa8810_firmware sm4375_firmware sw5100 qca6436 wcn6851 sa6155p wcd9385 wcd9341 qca6431 qca6696_firmware sd870_firmware qca6390 wcd9375 aqt1000 sa8150p wsa8830_firmware sda429w sd855_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qca6564a wcn3610 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sw5100p qca6554a sd865_5g qca6595 qca6564au qcc5100 sdx55m_firmware wsa8835 qca6574 wcd9380 qcs410 qca6574a qca6430_firmware wcn3980 qca6574_firmware sd855 wsa8815 wcn6850 mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 wcn3980_firmware qca6391 sdx55m qcc5100_firmware qca6421_firmware aqt1000_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware qca6564a_firmware wcd9341_firmware sd480 sd870 wsa8810 sw5100p_firmware qcs610_firmware sa6145p wcn3680b sd695_firmware apq8096au qca6595_firmware sa8145p qca6696 qca6391_firmware wcd9370_firmware sa6150p sdx55 apq8096au_firmware sa8155p sw5100_firmware qcn9074_firmware qcs410_firmware Snapdragon wcn3991_firmware qca8337_firmware sda429w_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware qca6431_firmware sdx55m_firmware mdm9628_firmware wcn3950_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware qca6584au_firmware qca6430_firmware qca6554a_firmware wcd9385_firmware sdxr2_5g_firmware qca6574_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware wcn3998_firmware wcn3980_firmware wcn3610_firmware qca6436_firmware qcc5100_firmware qca6421_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware sd480_firmware wcn6851_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware qca6564a_firmware wsa8810_firmware wcd9341_firmware sm4375_firmware sw5100p_firmware qcs610_firmware sd695_firmware qca6696_firmware qca6595_firmware sd870_firmware qca6391_firmware wcd9370_firmware apq8096au_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware qcn9074_firmware qcs410_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.11% / 1.81%

||

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_865_5g wsa8830 wcd9380_firmware sa6150p_firmware sa8145p_firmware sw5100p sd865_5g fastconnect_6800 snapdragon_855\+\/860_firmware qca6564au csrb31024 snapdragon_855 wsa8835 wcd9380 sa8150p_firmware qca6420_firmware qca6595au_firmware snapdragon_865\+_5g snapdragon_x55_5g snapdragon_wear_4100\+snapdragon_855_firmware sxr2130 qca6574a qca6564 qca6426 snapdragon_855\+\/860 qca6430_firmware wcn3980 fastconnect_6200 wcn3660b sd855 wsa8815 qca6426_firmware wcn3660b_firmware qca6574a_firmware snapdragon_x55_5g_firmware qca6574au_firmware wcn3680b_firmware fastconnect_6200_firmware qca6595au wcn3980_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware snapdragon_w5\+_gen_1_firmware snapdragon_xr2_5g snapdragon_w5\+_gen_1 qca6564au_firmware aqt1000_firmware sa6155p_firmware snapdragon_wear_4100\+_firmware csrb31024_firmware fastconnect_6900 fastconnect_6900_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware snapdragon_870_5g sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 qca6436 sa6155p sw5100p_firmware snapdragon_865\+_5g_firmware sa6145p wcn3680b qca6564_firmware sxr2130_firmware wcd9341 snapdragon_auto_4g qca6696_firmware sa8145p qca6696 qca6391_firmware snapdragon_xr2_5g_firmware aqt1000 sa8150p snapdragon_auto_4g_firmware sa6150p sa8155p wsa8830_firmware snapdragon_870_5g_firmware sd855_firmware sd865_5g_firmware wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware fastconnect_6800_firmware snapdragon_865_5g_firmware wcn3610 Snapdragon aqt1000_firmware qca6564au_firmware sa6155p_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware csrb31024_firmware fastconnect_6900_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware wsa8810_firmware sa8150p_firmware wcd9341_firmware qca6420_firmware qca6595au_firmware snapdragon_auto_4g_modem_firmware sw5100p_firmware qca6564_firmware sxr2130_firmware qca6696_firmware qca6430_firmware qca6391_firmware snapdragon_855_mobile_platform_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware snapdragon_xr2_5g_platform_firmware qca6426_firmware wcn3660b_firmware wsa8815_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware wcn3680b_firmware sw5100_firmware wsa8835_firmware fastconnect_6800_firmware snapdragon_x55_5g_modem-rf_system_firmware wcn3980_firmware wcn3610_firmware qca6436_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.11% / 1.81%

||

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking the size of input in FM Host

Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware sm6375 wcn3991 wsa8830 sa6150p_firmware sa8145p_firmware sw5100p qca6554a snapdragon_w5\+_gen_1_wearable_platform qca6595 qca6564au wsa8835 qca6574 sa8150p_firmware qca6420_firmware qca6595au_firmware snapdragon_wear_4100\+_platform_firmware wcd9370 qca6574a snapdragon_wear_4100\+_platform qca6584au_firmware qca6430_firmware wcn3980 sm4375 wcn3998 qca6554a_firmware wcd9385_firmware qca6574_firmware sm6375_firmware wcn3660b sd855 wsa8815 wcn3660b_firmware qca6574a_firmware qca6574au_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcd9375_firmware wcn3980_firmware wcn3610_firmware qca6420 sm4350-ac snapdragon_w5\+_gen_1_wearable_platform_firmware aqt1000_firmware qca6564au_firmware qca6584au sa6155p_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sm4375_firmware sw5100 wsa8810 sa6155p sw5100p_firmware sa6145p wcn3680b wcd9385 sm8150_firmware wcd9341 qca6696_firmware qca6595_firmware sa8145p qca6696 sm4350 wcd9375 sm4350_firmware aqt1000 sa8150p wcd9370_firmware sm4350-ac_firmware sa6150p sa8155p wsa8830_firmware sd855_firmware sm8150 wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware wcn3610 Snapdragon aqt1000_firmware qca6564au_firmware sa6155p_firmware sa6150p_firmware sa8145p_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware wsa8810_firmware sa8150p_firmware wcd9341_firmware qca6420_firmware qca6595au_firmware sw5100p_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qca6584au_firmware qca6696_firmware qca6430_firmware qca6595_firmware qca6554a_firmware wcd9385_firmware snapdragon_855_mobile_platform_firmware qca6574_firmware wcd9370_firmware wsa8830_firmware sd855_firmware wsa8815_firmware wcn3660b_firmware wsa8835_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware sa8195p_firmware snapdragon_695_5g_mobile_platform_firmware wcn3680b_firmware sw5100_firmware wcd9375_firmware wcn3980_firmware wcn3610_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 1.87%

||

7 Day CHG~0.00%

Published-17 Oct, 2022 | 00:00

Updated-14 May, 2025 | 16:15

Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn6855 wsa8830 wcn6855_firmware sm8475 wcn7851_firmware wcn6856 wsa8830_firmware wcn7850_firmware wcn7850 wcn6856_firmware wsa8835 sd_8_gen1_5g_firmware wcd9380 wcn7851 wsa8835_firmware wcd9380_firmware Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.11% / 1.81%

||

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking the size of input in Core

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware qam8255p_firmware wcn3991 wsa8830 wcd9380_firmware sa6150p_firmware sa8145p_firmware sw5100p snapdragon_w5\+_gen_1_wearable_platform wcn785x-5 sm8350-ac_firmware sm8150-ac wsa8835 wcd9380 sa8150p_firmware qca6420_firmware qca6595au_firmware snapdragon_wear_4100\+_platform_firmware sm8350 snapdragon_wear_4100\+_platform wcn685x-5_firmware wcn685x-1 sm8450 qca6430_firmware wcn3980 wcn3998 wcd9385_firmware wcn3660b sd855 wsa8815 wcn3660b_firmware qca6574au_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcn785x-5_firmware wcn3980_firmware wcn3610_firmware qca6420 snapdragon_w5\+_gen_1_wearable_platform_firmware aqt1000_firmware sa6155p_firmware qcs8155 qca6698aq sm8350_firmware wcn685x-5 wcn3988_firmware qca6430 qca6797aq_firmware wcn785x-1_firmware sa6145p_firmware qca6574au sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sm8450_firmware sw5100 wsa8810 sa8255p_firmware sa6155p sw5100p_firmware sm8150-ac_firmware qca6698aq_firmware sa6145p wcn3680b sm8350-ac wcn685x-1_firmware wcd9385 sm8150_firmware sa8255p wcd9341 qca6696_firmware sa8145p qca6696 qca6797aq aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sd855_firmware sm8150 wcn785x-1 wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware qcs8155_firmware sw5100_firmware qam8255p wcn3610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.11% / 1.81%

||

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking the size of input in Core

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware qam8255p_firmware wcn3991 wcd9380_firmware wsa8830 wcn785x-5 sm8350-ac_firmware sm8150-ac wsa8835 wcd9380 qca6420_firmware qca6595au_firmware snapdragon_wear_4100\+_platform_firmware sm8350 snapdragon_wear_4100\+_platform wcn685x-5_firmware wcn685x-1 qca6430_firmware sm8450 wcn3980 wcn3998 wcd9385_firmware sd855 wcn3660b wsa8815 wcn3660b_firmware qca6574au_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcn785x-5_firmware wcn3980_firmware wcn3610_firmware qca6420 aqt1000_firmware qca6698aq sm8350_firmware wcn685x-5 qca6797aq_firmware qca6430 wcn785x-1_firmware qca6574au wsa8810_firmware wcd9341_firmware sm8450_firmware wsa8810 sa8255p_firmware sm8150-ac_firmware qca6698aq_firmware wcn3680b sm8350-ac wcn685x-1_firmware wcd9385 sm8150_firmware sa8255p wcd9341 qca6797aq aqt1000 wsa8830_firmware sd855_firmware sm8150 wcn785x-1 wsa8815_firmware wsa8835_firmware qam8255p wcn3610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.16% / 5.72%

||

7 Day CHG~0.00%

Published-22 Feb, 2021 | 06:25

Updated-04 Aug, 2024 | 11:28

Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qfs2580 qpm5679_firmware qcs610 qdm5579 qdm2307 qfs2608_firmware qfs2530 qpm8870_firmware qpa8802 qpm6585_firmware qat3519 qbt2000_firmware qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpa5581_firmware pm7150l qpa8821 smr546_firmware qdm5671 qpm4650_firmware qat3518 pm456_firmware qpa5580_firmware wcn3998 smr526_firmware wcn3950 sd720g wcn3660b qdm2305_firmware qpm5670_firmware qdm5652 sd6905g qpa4360_firmware qpm8870 wcd9375_firmware wcn3998_firmware qpm5679 qbt2000 pm855p qca6420 pm6150a qpm6670_firmware pmx50_firmware sdr735g pm660_firmware pm8150b qdm3301_firmware qsm7250 qca6430 qat3522 pmr735a sd765g rsw8577_firmware qdm2308_firmware sdr660 wcn6851 qpa6560 qfs2630_firmware sdr675_firmware sdr865 qdm5620_firmware wcd9341 sm7350_firmware smr545 qdm4643_firmware qca6696_firmware qln5020 qet4100_firmware sd750g qdm3302 pm6350 qdm5621 qtc800s qpm5875_firmware qat3514_firmware wsa8830_firmware sd855_firmware sd660 qdm5650 wcn3988 sd660_firmware sdr052 smb1390 qat5516_firmware pm6150l sd8885g pm855l_firmware qet4100 wcn3610 qpa8686_firmware qpm6585 wcn3991 sda429w_firmware wcd9380_firmware smb1355 qln4650 qpa8801 sdr735g_firmware pm8350bhs_firmware qat5568 qet5100 qdm5671_firmware qpa8801_firmware pm8150l_firmware qat5533_firmware sdx55m_firmware qtm527_firmware wcn6856_firmware qpa8673_firmware pm6150 qet4101_firmware pm7250b qln4642_firmware qfs2630 qpa8842 sdr052_firmware wcd9380 smb1355_firmware pm7250b_firmware smb1351_firmware qcs410 pmk8350_firmware smb1381 pm855p_firmware sdx50m_firmware sdr735 pm7250 smb1395 pm660l qpa8803 smr526 qca6430_firmware pmk8003 qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 pm7350c_firmware qdm2301 wsa8815 wcn6850 qdm5621_firmware qdm2301_firmware smb1394 pm8350_firmware wcn3660b_firmware pm8009 wcn3980_firmware sd730 sdr051_firmware pm660l_firmware sdx55m pm6250_firmware wcn6740_firmware pm8008 pm8350b_firmware qtm525_firmware qat3518_firmware sd6905g_firmware qpm5621_firmware pm855l wcn6851_firmware rsw8577 qdm5670_firmware qpa6560_firmware sd8655g qpa8802_firmware pm7150a_firmware pm8150b_firmware qpm5621 qpm6582 smr545_firmware pm8009_firmware qdm2310_firmware qfs2580_firmware sd8885g_firmware pm8150l qcs610_firmware qdm5677 pm855_firmware pm660a_firmware pm855b_firmware qpm6582_firmware qca6391_firmware wcd9370_firmware qln4650_firmware qat3516_firmware qpm5875 sdx55 qet5100m sd675 pm8350bhs qet4101 qat3555_firmware qat3516 qpa8803_firmware qpm5658 pm855b qpm5658_firmware qpm5870 wcn3991_firmware qdm5652_firmware wsa8830 sdr051 pm660 qet6110_firmware qdm5579_firmware qln5030 qbt1500 qpa5581 pmi632 qpa2625_firmware pm456 pm8350bh_firmware pmr735b_firmware qbt1500_firmware qet5100_firmware qpm5870_firmware qpm4621 qet6100_firmware qet6100 sd765g_firmware qpa8686 qca6420_firmware smb1394_firmware qca6390_firmware smb1396 sd730_firmware pm7150a wcd9370 sd675_firmware pm8350 qpa5461_firmware pm8350c_firmware qca6584au_firmware wcn3990_firmware qpm5641 pmi632_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware qat5516 pm7250_firmware qdm5620 qpa8821_firmware pm8350bh pmk8002_firmware pm3003a qdm4650_firmware sdx55_firmware qat5533 qca6595au sm7250p_firmware wcn3610_firmware sm7350 qsm7250_firmware qpm6670 pm7150l_firmware qca6584au qdm2305 qpm8820 qpm4641 qat5515_firmware qln5020_firmware pm855 qpm8830_firmware pm8250 smb1398 qdm4643 qfs2530_firmware wcn3988_firmware pmx55 qpm4641_firmware sdr675 pm8150c_firmware qpa8842_firmware qdm3301 sdr735_firmware qat3519_firmware sm6250 wsa8810_firmware qpm5677 qat5515 sd765_firmware qat3514 wcd9335 qdm5677_firmware pm6350_firmware pm8004_firmware sdr8150_firmware wcd9385 pmk7350_firmware qat3550_firmware qln5040_firmware qpm4630 qca6390 wcd9375 sd750g_firmware aqt1000 qpa8673 sm6250_firmware qdm2310 qln5030_firmware qln4642 sda429w qpm5677_firmware wcn3620_firmware wsa8815_firmware smb1396_firmware smr525_firmware wcn6850_firmware pmk7350 wcn3620 qpm8820_firmware wsa8835_firmware qpm6621_firmware smr546 qet6110 qln5040 qpm8895 qpm5670 wcn3990 pmx55_firmware qtm527 pmk8350 smb1398_firmware qpm8830 qdm3302_firmware pm8350b qat5522 qdm2307_firmware wsa8835 pm8150c pmr735b qpa4360 pmk8003_firmware sdr660_firmware qca6574a qpm4640_firmware smb1390_firmware qdm5679_firmware pm8350c smr525 qpm4640 pm6150l_firmware pm7350c pm8150a_firmware qet5100m_firmware qpm4650 qtm525 sd855 pm6150a_firmware pm6150_firmware sd765 qca6574a_firmware qpm4630_firmware sd768g_firmware sdr865_firmware qat3555 pm8250_firmware smb1351 qca6391 qpa5461 aqt1000_firmware qpm8895_firmware pm660a qpa4340 sdx50m sdr8150 qfs2608 qtc801s smb1395_firmware qdm4650 qpm5641_firmware pm8008_firmware sd8655g_firmware wcd9341_firmware qpm6621 wsa8810 pmr735a_firmware qat5568_firmware qdm2308 pmx50 qat3550 wcn6856 qdm5679 sd768g pm3003a_firmware wcn6740 qca6696 qtc800s_firmware smb1381_firmware pm8004 pmk8002 qpa2625 sm7250p sd720g_firmware qpm4621_firmware qcs410_firmware pm6250 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-1.47% / 70.90%

||

7 Day CHG~0.00%

Published-12 Nov, 2020 | 10:00

Updated-04 Aug, 2024 | 11:28

Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655, MSM8952, MSM8956, MSM8976, MSM8976SG, MSM8996, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P

Vendor-Qualcomm Technologies, Inc.

Product-sm6115_firmware sm7250 sa6150p_firmware sm6250p_firmware apq8096_firmware qcs610 sm6125 sdm640 sdm845 sm7250_firmware apq8096 sdx55m_firmware sm6115p_firmware sm7150_firmware msm8952_firmware sm6150 msm8976_firmware qcs4290 sa8150p_firmware sm7150 sm6250p sa6155 qcs410 sda640_firmware sxr2130 apq8076 sdx50m_firmware qcs6125_firmware sm6115 sm7150p apq8076_firmware sdm660_firmware sda845_firmware apq8052_firmware apq8098 sm4250 sm7225 sda855 sm6115p msm8956_firmware sa8155 sda660 sdx55_firmware sa6155_firmware sda855_firmware sm7250p_firmware sxr2130p sdx55m sm6150p_firmware sda845 sm6350 sm7125 sdm850_firmware sm4250p_firmware sa6155p_firmware sxr2130p_firmware qsm8250_firmware sda640 qcm4290 apq8098_firmware sdx50m msm8996sg qcs6125 msm8998_firmware apq8056_firmware sa8155_firmware sdm660 sm8250_firmware mdm9655_firmware msm8976sg sm6350_firmware msm8996sg_firmware sa6145p_firmware sc7180_firmware sm4250_firmware sm6250 sa8155p_firmware sa8195p sdm830_firmware msm8976sg_firmware qcm6125 qcm4290_firmware sa6155p qcs610_firmware apq8052 msm8996_firmware qsm8250 sa6145p qcs4290_firmware sm8150_firmware sxr2130_firmware sm7150p_firmware sm4250p mdm9655 sc7180 sda660_firmware msm8976 msm8956 sa8150p sm6250_firmware sm7125_firmware sa6150p sm6150_firmware msm8952 apq8056 sdx55 sa8155p msm8998 sm7225_firmware sm8150 sdm850 sm8250 sm8150p_firmware sm7250p sdm830 sa8195p_firmware sdm640_firmware msm8996 qcs410_firmware sm6125_firmware sm8150p sm6150p qcm6125_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.77%

||

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-05 Aug, 2024 | 09:14

Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve thread data. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX55, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8976_firmware msm8996au apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware qcs404 ipq8074 sdm636 sda845_firmware mdm9635m apq8098 qcn7605 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware mdm9655_firmware sdm660 sc8180x_firmware qcs405 ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware qca8081 mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware mdm9655 apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware msm8976 sdx55 msm8953_firmware msm8940 apq8053 apq8096au_firmware sm8250 msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 0.12%

||

7 Day CHG~0.00%

Published-06 Apr, 2026 | 15:33

Updated-08 Apr, 2026 | 20:59

Buffer Copy Without Checking Size of Input in Power Management IC

Memory Corruption when handling power management requests with improperly sized input/output buffers.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.22% / 12.37%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-05 Aug, 2024 | 08:24

When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen in both cds_is_mmie_valid and qdf_nbuf_trim_tail in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8937, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SDM630, SDM636, SDM660, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware sdm636_firmware apq8064 msm8996au_firmware sdx20 msm8998_firmware sdm660 sdx24 sdm630 mdm9607_firmware mdm9650 sm7150_firmware qca6574au sm6150 mdm9607 msm8996au apq8017_firmware sm7150 apq8009_firmware qcn7605_firmware msm8937 mdm9207c_firmware qcs605_firmware mdm9206 mdm9207c qca6174a_firmware qca6174a qca9379_firmware sm8150_firmware sdx24_firmware apq8096au sdm636 qca9377 sdm630_firmware qcn7605 mdm9206_firmware qcs605 sdx55 apq8053 apq8096au_firmware sm6150_firmware msm8937_firmware mdm9650_firmware msm8998 sdx20_firmware sm8150 qca6574au_firmware sdx55_firmware sxr1130_firmware apq8017 apq8064_firmware sxr1130 apq8009 qca9379 apq8053_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.12% / 2.45%

||

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware wcd9340_firmware qca6310 qualcomm215_firmware wsa8835 mdm9150_firmware sdx55m sd855_firmware wcn3998 wcn6850_firmware wsa8810_firmware wsa8815_firmware wcn3610_firmware qca6436 qca6426_firmware wcn3660b wcn3660b_firmware sd710_firmware qcs410_firmware sd205_firmware wsa8810 sdxr1 sd210 wcd9341_firmware wsa8830 sw5100p_firmware wsa8815 qca6390 sda429w_firmware wcn3680b aqt1000_firmware wsa8835_firmware qca6430 sw5100 sd855 qca6391 wcn3998_firmware wcd9340 wcn6850 wcn6851 wcn3950 wcd9370_firmware sdxr2_5g_firmware qca6420_firmware sda429w qcc5100_firmware sd210_firmware wsa8830_firmware wcn3680b_firmware sdxr2_5g sd865_5g_firmware wcd9341 wcn3980_firmware wcn6851_firmware wcd9326 qcs610 qcs610_firmware qualcomm215 qca6391_firmware sd205 wcd9326_firmware qcc5100 wcd9380 wcn3610 qca6335 sw5100_firmware qca6430_firmware sd865_5g qca6426 sd870 qca6335_firmware sdx55m_firmware aqt1000 wcn3990_firmware wcn3950_firmware wcn3988 mdm9150 qca6390_firmware qca6420 wcn3988_firmware qca6310_firmware sd710 sd870_firmware sw5100p sd845_firmware sdxr1_firmware qca6436_firmware sd845 wcd9370 qcs410 wcn3990 wcn3980 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.12% / 2.45%

||

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 04:42

Buffer copy without checking the size of input in WLAN HAL.

Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 ipq4028_firmware qcn5550 ar9380 ipq8173_firmware wcd9360_firmware qca9561_firmware qcn5124 qca4024_firmware msm8992_firmware wcn3950_firmware sc8180x\+sdx55 ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 qcn5064 mdm8215 sd_455_firmware csra6620_firmware apq8076 qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware qca9987_firmware sa415m wcn3998 qca6554a_firmware wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware sd_8cx_gen2_firmware ipq8076a mdm9628 wcn3660b sd710_firmware sd460_firmware qca4020 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 sdx20m qca6438_firmware qca9986 sd680_firmware ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware wcn3999 sd_8cx_gen2 ipq5028 qca7500 ipq8072_firmware ipq4029_firmware qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 wcd9340 qcn6132 sd765g qca1990_firmware sw5100 sd680 qca4020_firmware sa6155p qcs603_firmware mdm9250_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca6696_firmware wcd9371 sd750g qcn5154_firmware mdm8215_firmware wcn3910_firmware sd_8cx sa8150p qfe1922 wsa8830_firmware mdm9330_firmware qca9992_firmware sd660 sd855_firmware snapdragon_4_gen_1 sd712 wcn3988 qca6438 sd660_firmware sa8195p_firmware qcn5121 qcn5022_firmware qca9898 ipq4028 qca4010_firmware wcn3610 mdm9640 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware sw5100p msm8996au_firmware wcd9330 ipq8076a_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 qcn5164 qca9558 msm8976_firmware qca6574 sd670_firmware csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware ipq4019_firmware sdx50m_firmware qca9379_firmware qca9985 qcn9012_firmware qca6174 qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcm4325_firmware qcs605 wcd9340_firmware wsa8815 sd7c wcn3910 qca6320 qca6584_firmware mdm9650_firmware qca9986_firmware mdm9215_firmware wcn3660b_firmware sd695 ipq6028 ipq8064 sd835 qca9984 qcn9024 qca1990 wcn3980_firmware sd730 qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware qcc5100_firmware qcn5064_firmware sd678_firmware ar8031_firmware ipq8078_firmware qcn5054 qcs603 ipq8070 qca9994 qca6164_firmware qca9887_firmware qca9980 sd670 qcn9024_firmware ipq8174_firmware sd_636_firmware qca6564a_firmware qca9880 qcm4290_firmware sd480 qcn5121_firmware sw5100p_firmware qcs610_firmware apq8084_firmware sa6145p ipq6018 qca9886_firmware sd695_firmware sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware sa8145p qca6164 sdm630_firmware sd820_firmware qca6391_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware sa8155p csra6640 sd675 qca9531_firmware qca9379 qcm2290 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qca9561 qcn9070 sa8145p_firmware qcs2290_firmware sd7c_firmware csrb31024 mdm9628_firmware snapdragon_4_gen_1_firmware mdm9650 sd_636 csra6620 qca9987 qcn9072 qca9880_firmware qca9992 qcs4290 mdm9250 sd765g_firmware qca6420_firmware ipq8069_firmware apq8009_firmware qca6390_firmware sd690_5g ipq6000 qca6174_firmware mdm9310_firmware sd730_firmware sd675_firmware wcd9370 ipq8072 qcn5152_firmware qca6564 qca6584au_firmware wcn3990_firmware apq8076_firmware qcn9000_firmware qca9984_firmware qca9377 ipq5018 sd_8cx_firmware wcd9385_firmware wcd9326_firmware wcn3615_firmware ipq8074a sd662 qcn5124_firmware qca9982 qfe1952_firmware apq8094 sa8155 qca6320_firmware qca6584 wcn3680b_firmware qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware ipq5010 qca6564au_firmware qca6584au sa6155p_firmware qfe1952 qca6310 ipq8174 sa515m_firmware qca9990 qcn5052 qca9367 mdm9235m_firmware apq8092 apq8084 sdm630 mdm9607_firmware sa415m_firmware wcn3988_firmware msm8994_firmware qcn9074 sa6145p_firmware msm8992 sm6250 sd712_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca4010 sg4150p qca8081 qca9982_firmware qcn6023 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qca6390 qca9898_firmware sd750g_firmware aqt1000 msm8976 wcd9375 sc8180x\+sdx55_firmware sm6250_firmware csr8811 ipq4019 qcn9100_firmware msm8994 apq8092_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware sd820 wsa8835_firmware apq8017 qca6564a mdm9235m sg4150p_firmware qcm6125_firmware qcm4325 qca9882 qcm2290_firmware mdm9635m_firmware wcn3990 qcn9000 sd_675 qca6554a qca6595 ar9380_firmware qcc5100 qcn9012 qca9558_firmware qcn6122_firmware ipq8065_firmware wsa8835 msm8996au sd665_firmware sm6250p qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware mdm9206 qca9889 qca6174a qcn6132_firmware qca9888 qca6310_firmware ipq8074 apq8094_firmware qca9994_firmware mdm9635m ipq8070a_firmware mdm9615 ipq8076_firmware sa515m qca6574_firmware qca9886 sd855 sm4125_firmware sd665 ipq8076 qfe1922_firmware qca6175a sd765 qca9887 qca6574a_firmware qcn5021 ipq8069 qcn5152 sd768g_firmware sd850_firmware apq8009 sd460 qca6391 sdxr1_firmware mdm9310 ipq6005 aqt1000_firmware qcn9100 qcm4290 csrb31024_firmware sdx50m qca9882_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware mdm9215 sd_455 qca9531 ipq8074_firmware qca6574au qca9889_firmware sd710 mdm9607 qcn5122 sa8155p_firmware wcd9341_firmware sdx20m_firmware qcm6125 wsa8810 qcn5022 wcn3680b sd835_firmware qca6564_firmware sd768g ipq6010_firmware qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 sd845 mdm9615_firmware qca9990_firmware ipq8070a qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware ipq8071_firmware qcn9074_firmware qcs410_firmware sw5100_firmware mdm9330 ipq4029 qca6175a_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.1||HIGH

EPSS-0.11% / 1.81%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 19:53

Buffer Copy Without Checking Size of Input in Kernel

Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_8cx_gen3_firmware wcn3991_firmware wsa8830 sd678 qca8337 qca6431_firmware sdx65 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sa6155 qca6335 wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qca6426 wcn3990_firmware qrb5165n_firmware qca9377 wcn3998 sd_8cx_firmware wcd9385_firmware qam8295p sd_8cx_gen2_firmware sdxr2_5g_firmware wcd9326_firmware wcn3950 sd_8_gen1_5g_firmware qsm8350_firmware qsm8350 qam8295p_firmware qcn9011_firmware sa8155 sa9000p_firmware sm7315_firmware qca6574au_firmware sdx55_firmware wcn7850 qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware qca6310 sd_8cx_gen2 wcn7851 qcs6490 qrb5165_firmware qrb5165m_firmware sdxr2_5g sa8155_firmware qca6430 sa6145p_firmware qca6421 sd778g_firmware wcd9340 wsa8810_firmware sd765g sd765_firmware qca6436 wcd9326 wcn6851 sa6155p qca8081 qcs603_firmware wcn7851_firmware qca6174a_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware sd870_firmware sd_8cx_gen3 qca6390 ar8035 sd_8cx aqt1000 sa8150p wcd9375 wsa8830_firmware sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sm8475 qca6564a sa8295p_firmware wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd780g sd865_5g qca6595 qca6564au sdx24 sdx55m_firmware wcn6856_firmware qcn9012 sd888 sd670_firmware qca6574 wsa8835 sa8540p_firmware wcd9380 sd888_5g qca6574a sdx50m_firmware wcn6855_firmware qca6174a sm7325p sdx24_firmware qca6310_firmware qca6430_firmware qcn9012_firmware wcn3980 wcn6750 qca6335_firmware sa9000p qca6574_firmware qcs605 wcd9340_firmware sd855 wsa8815 sm7325p_firmware wcn6850 sdx57m_firmware sd765 qca6426_firmware qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware wcn3980_firmware sm7315 qca6391 sdx55m sa8295p qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware qcm6490_firmware sdx50m qrb5165 wcn6851_firmware qcs603 qcn9011 qca6574au sa8155p_firmware sd670 qca6564a_firmware sdx57m wcd9341_firmware wsa8810 sd870 wcn6855 sa8540p wcn6856 sa6145p sd768g qca6595_firmware wcn6740 qca6696 qca6391_firmware sd845_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sd845 sm7250p ar8035_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.16% / 5.56%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-03 Aug, 2024 | 03:00

Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sm6250p_firmware qcs610 sdx65 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sd632 wcn3998 wcd9371_firmware wcn3950 sm4125 mdm9628 sd720g mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware qca4020 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware sa6155_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware qca9367_firmware wcn3999 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 qualcomm215_firmware sd765g sw5100 qca4020_firmware qca6436 sd680 sa6155p wcn6851 qcs603_firmware wcn7851_firmware msm8937 mdm9250_firmware wcn3660_firmware wcd9341 pm8937_firmware qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware sd450 wcn3610 wcn3991 wcd9380_firmware sdm429w msm8996au_firmware sw5100p wcd9330 qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 msm8937_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m sm8475_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sdxr1 apq8096au ar8031 qcs405_firmware sdm630_firmware sd820_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 wcn3660 sm8475p_firmware qca9379 qcm2290 wcn3991_firmware wsa8830 sd678 qcs2290_firmware mdm9628_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware qca6595au wcn3615 wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 pm8937 wcn7851 qcs6490 sd429 sdxr2_5g qca9367 sdm630 mdm9607_firmware wcn3988_firmware sa6145p_firmware sd429_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware msm8953_firmware msm8917_firmware wcn3620_firmware sd820 qcm6490 sd888_5g_firmware wsa8835_firmware sdx20_firmware wcn3620 wcn6850_firmware wsa8815_firmware sm7450 apq8017 qca6564a qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd765 qca6574a_firmware sd768g_firmware sm7315 apq8009 qca6391 sd460 sdxr1_firmware aqt1000_firmware sdx65_firmware mdm9626 qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sdx20 sd480_firmware mdm9626_firmware qca6574au sa8155p_firmware sd710 mdm9607 wcd9341_firmware wsa8810 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 0.45%

||

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:49

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Video

Memory corruption while processing manipulated payload in video firmware.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware sw5100p wcn6650 qcm8550_firmware sd865_5g qcs410_firmware sa6150p_firmware sm8735 qca6595 wcd9335 qcs610_firmware wcd9370 qca8081_firmware qcn5224 qca6696 qam8620p_firmware wcn7880_firmware wcd9340_firmware wcd9341_firmware sxr2330p_firmware wcd9395_firmware wcn7881_firmware qcn6024 wcn7750 wcn6450 qcc710_firmware ipq8076 fastconnect_6700 snapdragon_685_4g_mobile qcn6023 sa4150p qcn5124_firmware wsa8832_firmware qca8337 qdu1110 wcd9395 qca6574au_firmware ipq8078a snapdragon_x72_5g_modem-rf ipq8078a_firmware sm6370 qam8295p wcd9341 qca6574au wcd9390 snapdragon_888\+_5g_mobile_firmware sa8620p_firmware wsa8810_firmware wsa8845h_firmware sa9000p_firmware srv1h sm8650q_firmware qcs9100 qcs5430 wcn7860 qcn6024_firmware qcm5430 qcm5430_firmware video_collaboration_vc1_platform_firmware sa4155p sa8770p qcm6125_firmware qcc710 snapdragon_x32_5g_modem-rf_firmware snapdragon_xr2_5g_firmware qca8101 fastconnect_6900 snapdragon_w5\+_gen_1_wearable_firmware video_collaboration_vc1_platform immersive_home_326_firmware qru1032_firmware qep8111 sm8635 sa7255p qfw7114 wcd9385_firmware qam8255p_firmware ipq8074a_firmware ipq8076a qcn5164 snapdragon_680_4g_mobile wsa8845 sa6155p qcm6125 csr8811_firmware wsa8810 qam8650p video_collaboration_vc5_platform_firmware sa9000p qdu1000_firmware srv1h_firmware qca8085 snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile qdu1010 snapdragon_662_mobile_firmware snapdragon_685_4g_mobile_firmware sa6155p_firmware wsa8840 snapdragon_ar1_gen_1 snapdragon_x35_5g_modem-rf_firmware qcs8550_firmware qca6698au qdu1210_firmware snapdragon_8_gen_2_mobile_firmware qfw7124_firmware sm8750p qcn9012 ipq8070a_firmware snapdragon_695_5g_mobile_firmware qcn9070 qcf8001 wcn3910_firmware qca8384 qca8084 sm8635p snapdragon_460_mobile snapdragon_8_gen_2_mobile qmp1000 wcn3910 wcd9370_firmware qca9367 qdu1110_firmware qdu1000 sa7255p_firmware qca6574a sm7635p_firmware snapdragon_x72_5g_modem-rf_firmware snapdragon_8\+_gen_2_mobile qca6174a sa8195p wcd9340 qcs8250_firmware qcm2290 qdu1210 snapdragon_auto_5g_modem-rf_gen_2 qcm6490 qcn5154_firmware sm8550p_firmware wcn3988 qcm8550 sm6370_firmware snapdragon_662_mobile qcn9274 ipq8076a_firmware qca8384_firmware qca6574 sa8775p qca6698au_firmware qcn9011 sa8775p_firmware qamsrv1h wsa8845h qca8082 sa6150p sm8650q qcm2290_firmware qcs410 sa8155p_firmware sa8155p wsa8830 sm8550p sa6145p qcn9074_firmware ipq8174 sm7675_firmware sa8255p_firmware ipq8174_firmware ar8035 ipq8072a sm7635_firmware qamsrv1m_firmware wcn7750_firmware sa8650p_firmware sm7635p wcn6450_firmware qcm4325 srv1l_firmware qcs9100_firmware qcn6224 ipq8071a qcs615 qca6698aq wcn3950_firmware sa7775p_firmware sm7635 qrb5165n snapdragon_480\+_5g_mobile fastconnect_6200 sa8145p_firmware wcd9378 snapdragon_480_5g_mobile_firmware snapdragon_660_mobile_firmware sm8635p_firmware sm6650p_firmware qdx1011 sa8150p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 qcn6023_firmware qcn5164_firmware snapdragon_x75_5g_modem-rf_firmware ipq8078 snapdragon_8_gen_3_mobile qcs6490 snapdragon_695_5g_mobile qcs8250 fastconnect_6200_firmware qcn9072 wsa8830_firmware snapdragon_460_mobile_firmware qcn6224_firmware qca6678aq_firmware wsa8845_firmware sd660_firmware qca8386_firmware wsa8832 qca8082_firmware wcd9378_firmware snapdragon_480_5g_mobile srv1l sm7675p qca6678aq snapdragon_x35_5g_modem-rf ar8035_firmware wcn7860_firmware sa4150p_firmware qca4024_firmware qcs6125_firmware sm4635 qcn9074 wsa8815_firmware sa8195p_firmware qca8337_firmware qca9888 snapdragon_xr2\+_gen_1 qca9377_firmware ipq8173 qcm6490_firmware ipq8072a_firmware sm4635_firmware qru1032 wcn3950 qcs6125 flight_rb5_5g sm8750 qca8385 snapdragon_auto_5g_modem-rf_gen_2_firmware qca6797aq_firmware qca8085_firmware qcf8001_firmware qcn9070_firmware sa8295p_firmware sa4155p_firmware qca8101_firmware qca6584au qcn6274_firmware wcn6755_firmware qcn9011_firmware qru1062_firmware sw5100_firmware wcn6650_firmware qru1062 ipq5424 snapdragon_8_gen_3_mobile_firmware qcn5224_firmware qfw7114_firmware qca4024 qcs7230 qca6595_firmware fastconnect_7800_firmware sm8635_firmware ipq8070a fastconnect_6900_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p qca8080 qmp1000_firmware snapdragon_xr2_5g wcn7880 sa8150p sxr2330p wcn6755 immersive_home_3210 snapdragon_auto_5g_modem-rf_firmware wcn7881 sm6650 sw5100 video_collaboration_vc3_platform snapdragon_4_gen_1_mobile_firmware qca8385_firmware sm6650p qca6688aq qam8295p_firmware wcn3990_firmware snapdragon_660_mobile qca6698aq_firmware qcs2290 wcd9385 snapdragon_888\+_5g_mobile qcs2290_firmware snapdragon_xr2\+_gen_1_firmware snapdragon_8_gen_1_mobile qca9367_firmware qca8084_firmware ipq5424_firmware snapdragon_680_4g_mobile_firmware sa8255p qcs7230_firmware wcd9390_firmware qcn5024 qep8111_firmware qcs615_firmware immersive_home_326 qdx1011_firmware ipq8071a_firmware sm8750_firmware snapdragon_auto_5g_modem-rf flight_rb5_5g_firmware qca8080_firmware qru1052 snapdragon_480\+_5g_mobile_firmware qamsrv1m robotics_rb5 qca6174a_firmware wcn7861_firmware wcn7861 qam8650p_firmware video_collaboration_vc5_platform qcs6490_firmware sm6650_firmware ipq8076_firmware qam8620p wcd9335_firmware wcn3980_firmware qrb5165n_firmware qca6584au_firmware qcn6274 wsa8835 wsa8840_firmware qca6391_firmware qfw7124 qca6595au_firmware qcs610 qdu1010_firmware qcs8300_firmware sw5100p_firmware qca6696_firmware qcs8300 wcd9380_firmware qca6574_firmware qca8081 sd660 wsa8815 sg4150p qcn5124 qam8775p qca9377 qca6797aq snapdragon_x75_5g_modem-rf qcm4325_firmware sa8620p snapdragon_4_gen_1_mobile qca6574a_firmware qcn9072_firmware qca9888_firmware ipq8074a immersive_home_3210_firmware qca9889 qcn5024_firmware wcd9375_firmware qca8386 qca6391 snapdragon_ar1_gen_1_firmware sa7775p qcn9274_firmware ipq8173_firmware qcs5430_firmware snapdragon_x32_5g_modem-rf sg4150p_firmware qcn9012_firmware qru1052_firmware sa8770p_firmware sa8295p qcs8550 sm8735_firmware fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware sm8750p_firmware wcd9375 snapdragon_8\+_gen_2_mobile_firmware ipq8078_firmware qca6688aq_firmware qca9889_firmware wcn3988_firmware qamsrv1h_firmware sm7675 qcn5154 sa8145p wsa8835_firmware csr8811 wcn3980 sm7675p_firmware qdx1010 snapdragon_w5\+_gen_1_wearable snapdragon_8_gen_1_mobile_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 0.45%

||

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:49

Updated-21 Jul, 2025 | 18:51

Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption while processing packet data with exceedingly large packet.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800 wcd9385_firmware wsa8840_firmware wsa8845h wsa8845_firmware sc8380xp wsa8845 wsa8840 wcd9380_firmware fastconnect_7800_firmware fastconnect_6900 wcd9385 fastconnect_6900_firmware wcd9380 sc8380xp_firmware wsa8845h_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 0.45%

||

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:49

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Core Services

Memory corruption while processing data packets in diag received from Unix clients.

Vendor-Qualcomm Technologies, Inc.

Product-sw5100p qcm8550_firmware wcn6650 sm8735 qca6595 wcd9335 wcd9370 qca8081_firmware qca6696 qam8620p_firmware wcn7880_firmware wcd9340_firmware wcd9341_firmware sxr2330p_firmware wcd9395_firmware wcn7881_firmware wcn7750 wcn6450 qcc710_firmware fastconnect_6700 snapdragon_685_4g_mobile sa4150p wsa8832_firmware qca8337 wcd9395 qca6574au_firmware snapdragon_x72_5g_modem-rf qam8295p wcd9341 qca6574au wcd9390 sa8620p_firmware wsa8810_firmware wsa8845h_firmware sa9000p_firmware srv1h sm8650q_firmware wcn3660b_firmware qcs9100 qcs5430 wcn7860 qcm5430 qcm5430_firmware video_collaboration_vc1_platform_firmware sa4155p sa8770p qcm6125_firmware qcc710 snapdragon_x32_5g_modem-rf_firmware fastconnect_6900 snapdragon_w5\+_gen_1_wearable_firmware video_collaboration_vc1_platform qep8111 sm8635 sa7255p qfw7114 wcd9385_firmware qam8255p_firmware snapdragon_680_4g_mobile wsa8845 sa6155p qcm6125 qca6564au_firmware wsa8810 qam8650p video_collaboration_vc5_platform_firmware sa9000p srv1h_firmware qca6595au sxr2250p_firmware snapdragon_662_mobile_firmware snapdragon_685_4g_mobile_firmware sa6155p_firmware wsa8840 snapdragon_ar1_gen_1 srv1m_firmware snapdragon_x35_5g_modem-rf_firmware qcs8550_firmware qca6698au snapdragon_8_gen_2_mobile_firmware qfw7124_firmware sm8750p qcn9012 snapdragon_695_5g_mobile_firmware wcn3910_firmware sm8635p snapdragon_460_mobile snapdragon_8_gen_2_mobile qmp1000 wcn3910 wcd9370_firmware qca9367 wcn3660b snapdragon_x72_5g_modem-rf_firmware sm7635p_firmware qca6574a sa7255p_firmware snapdragon_8\+_gen_2_mobile qca6174a sa8195p wcd9340 qcs8250_firmware qcm2290 snapdragon_auto_5g_modem-rf_gen_2 qcm6490 sm8550p_firmware sxr2250p qcm8550 wcn3988 snapdragon_662_mobile qcn9274 sa8775p qca6574 sxr2230p_firmware qca6698au_firmware qcn9011 sa8775p_firmware qamsrv1h wsa8845h sm8650q qcm2290_firmware sa8155p_firmware qca6564a sa8155p wsa8830 sm8550p sm7675_firmware sa8255p_firmware ar8035 sm7635_firmware qamsrv1m_firmware wcn7750_firmware sa8650p_firmware sm7635p wcn6450_firmware qcm4325 srv1l_firmware qcs9100_firmware qcn6224 qcs615 qca6698aq wcn3950_firmware sa7775p_firmware sm7635 qrb5165n snapdragon_480\+_5g_mobile fastconnect_6200 wcn3680b wcd9378 snapdragon_480_5g_mobile_firmware sm8635p_firmware sm6650p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 snapdragon_x75_5g_modem-rf_firmware snapdragon_8_gen_3_mobile qcs6490 snapdragon_695_5g_mobile qcs8250 fastconnect_6200_firmware wsa8830_firmware snapdragon_460_mobile_firmware qcn6224_firmware qca6678aq_firmware wsa8845_firmware wsa8832 wcd9378_firmware snapdragon_480_5g_mobile srv1l sm7675p srv1m qca6678aq snapdragon_x35_5g_modem-rf ar8035_firmware wcn7860_firmware sa4150p_firmware qca6564au qcs6125_firmware sm4635 wsa8815_firmware sa8195p_firmware qca8337_firmware sg8275p_firmware qca9377_firmware qcm6490_firmware sm4635_firmware vision_intelligence_400_firmware wcn3950 qcs6125 flight_rb5_5g sm8750 snapdragon_auto_5g_modem-rf_gen_2_firmware qca6797aq_firmware sa8295p_firmware sa4155p_firmware qca6584au qcn6274_firmware wcn6755_firmware qcn9011_firmware sw5100_firmware wcn6650_firmware snapdragon_8_gen_3_mobile_firmware qfw7114_firmware qcs7230 qca6595_firmware fastconnect_7800_firmware sm8635_firmware fastconnect_6900_firmware robotics_rb5_firmware wcd9380 qam8255p sxr2230p qmp1000_firmware wcn7880 sxr2330p wcn6755 wcn7881 sm6650 sw5100 video_collaboration_vc3_platform snapdragon_4_gen_1_mobile_firmware sm6650p qca6688aq qam8295p_firmware wcn3990_firmware qca6698aq_firmware qcs2290 qca6564a_firmware wcd9385 qcs2290_firmware snapdragon_8_gen_1_mobile qca9367_firmware snapdragon_680_4g_mobile_firmware sa8255p qcs7230_firmware wcd9390_firmware qep8111_firmware qcs615_firmware sg8275p sm8750_firmware flight_rb5_5g_firmware snapdragon_480\+_5g_mobile_firmware qamsrv1m robotics_rb5 qca6174a_firmware wcn7861_firmware wcn7861 qam8650p_firmware video_collaboration_vc5_platform qcs6490_firmware sm6650_firmware wcd9335_firmware qam8620p qrb5165n_firmware wcn3980_firmware qca6584au_firmware qcn6274 wsa8835 wsa8840_firmware qca6391_firmware qfw7124 qca6595au_firmware qcs8300_firmware sw5100p_firmware qca6696_firmware qcs8300 wcd9380_firmware qca6574_firmware wsa8815 qca8081 sg4150p mdm9628 qam8775p qca9377 qca6797aq mdm9628_firmware snapdragon_x75_5g_modem-rf qcm4325_firmware sa8620p snapdragon_4_gen_1_mobile qca6574a_firmware wcd9375_firmware sa7775p qca6391 snapdragon_ar1_gen_1_firmware qcn9274_firmware qcn9012_firmware qcs5430_firmware snapdragon_x32_5g_modem-rf sg4150p_firmware sa8770p_firmware sa8295p qcs8550 sm8735_firmware fastconnect_7800 sa8650p qam8775p_firmware sm8750p_firmware wcd9375 snapdragon_8\+_gen_2_mobile_firmware qca6688aq_firmware wcn3988_firmware qamsrv1h_firmware sm7675 vision_intelligence_400 wsa8835_firmware wcn3980 sm7675p_firmware wcn3680b_firmware snapdragon_w5\+_gen_1_wearable snapdragon_8_gen_1_mobile_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 0.28%

||

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:48

Updated-26 Feb, 2026 | 18:27

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Data HLOS - QX

Memory corruption while copying the result to the transmission queue in EMAC.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 1.05%

||

7 Day CHG~0.00%

Published-07 Apr, 2025 | 10:16

Updated-26 Feb, 2026 | 18:28

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Automotive Vehicle Networks

Memory corruption while processing message content in eAVB.

Vendor-Qualcomm Technologies, Inc.

Product-sa7775p sa8620p srv1h_firmware sa7255p qca6595au_firmware sa8540p_firmware qamsrv1m_firmware sa6145p_firmware sa8255p sa6155p_firmware sa8195p qca6698aq sa8295p sa8145p_firmware sa8155_firmware sa8295p_firmware sa8150p sa8775p sa6150p_firmware qam8295p_firmware qam8620p qca6574au_firmware sa8145p qamsrv1m sa6155_firmware sa8540p sa8770p sa6150p srv1m_firmware qca6696 qamsrv1h_firmware qca6574au sa8775p_firmware qca6595_firmware qca6688aq_firmware qam8295p sa6155 srv1l_firmware qca6696_firmware sa8770p_firmware sa6155p sa8155 qca6595au qca6574a_firmware srv1h qca6688aq sa6145p qca6574a qamsrv1h qca6595 qam8775p qam8255p qam8650p_firmware sa8255p_firmware qam8620p_firmware sa9000p sa7255p_firmware sa8620p_firmware srv1l sa8650p sa8155p_firmware sa9000p_firmware sa8155p qam8775p_firmware sa8650p_firmware qam8255p_firmware sa7775p_firmware qca6698aq_firmware sa8150p_firmware srv1m qam8650p sa8195p_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 0.25%

||

7 Day CHG~0.00%

Published-24 Sep, 2025 | 15:33

Updated-26 Feb, 2026 | 17:48

Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware sm8750p_firmware wcn7880_firmware qcs5430 sm7635_firmware wcn7850_firmware sm8650p_firmware wcn6650 sm8550p_firmware wcn7880 sm7675_firmware sm8550p sm8550_firmware qcn9012 sm8635_firmware qcs5430_firmware wcn6755 sg8275_firmware wcn6750_firmware qcm8550 sm8650_firmware qcs9100_firmware qca6391 sm8650q_firmware wcn7860_firmware qca6391_firmware wcn7850 wcn3950 qcm5430_firmware sm8750_firmware qcs615 wcn7851 wcn7851_firmware wcn7881_firmware qcn9012_firmware sm7675p sm7635 sm6650 qcm6490 wcn7860 wcn6855 sm8635p_firmware wcn3910 qca6698aq sm8635p sxr2330p qcs9100 sm7675 wcn6750 qcs8550_firmware wcn6856_firmware sg8275p sm8650 wcn3950_firmware wcn7861 wcn6855_firmware qcn9274_firmware sg8275 wcn7881 sm8650q wcn6755_firmware qcs615_firmware wcn3910_firmware qcm5430 qcm6490_firmware wcn7861_firmware sm8550 qcs8550 qcs6490_firmware sg8275p_firmware wcn6856 sm8635 sm8750p sm8750 qcs6490 wcn6650_firmware sm6650_firmware sm7675p_firmware qcn9011 qcn9274 sxr2330p_firmware sm8650p qca6698aq_firmware qcn9011_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.09% / 0.48%

||

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:48

Updated-21 Jul, 2025 | 19:37

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Memory corruption while processing camera TPG write request.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 0.28%

||

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:48

Updated-21 Jul, 2025 | 19:46

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Data HLOS - QX

Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 0.04%

||

7 Day CHG~0.00%

Published-24 Sep, 2025 | 15:33

Updated-26 Feb, 2026 | 17:48

Buffer Copy Without Checking Size of Input in HLOS

Memory corruption while performing private key encryption in trusted application.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware qfw7124 srv1h_firmware sm8735_firmware sdx55 wcn7880_firmware snapdragon_x75_5g_modem-rf_system_firmware qcs6125_firmware snapdragon_855\+\/860_mobile_platform_\(sm8150-ac\)snapdragon_xr2_5g_platform qrb5165m_firmware snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\)qfw7114 snapdragon_778g_5g_mobile_platform_firmware sg4150p snapdragon_765_5g_mobile_platform_\(sm7250-aa\)_firmware snapdragon_675_mobile_platform qcm6125_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware snapdragon_750g_5g_mobile_platform_firmware sa8145p snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-ab\)snapdragon_x72_5g_modem-rf_system snapdragon_w5\+_gen_1_wearable_platform qru1032 snapdragon_680_4g_mobile_platform_firmware qca8081_firmware wcd9335 sa8650p sd865_5g_firmware qca6797aq wsa8840_firmware qca6696 srv1l_firmware sa8195p snapdragon_710_mobile_platform snapdragon_7c_compute_platform_\(sc7180-ac\)_firmware qca6574au_firmware qcn9024_firmware qca8337 wcd9370 snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-af\)_firmware sa8145p_firmware srv1l wsa8845h_firmware snapdragon_780g_5g_mobile_platform wcn7881_firmware snapdragon_768g_5g_mobile_platform_\(sm7250-ac\)_firmware sa4155p snapdragon_480_5g_mobile_platform_firmware qcs6125 sd670_firmware sa8620p snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)sm6650 wcn7860 snapdragon_8cx_compute_platform_\(sc8180x-aa\)_firmware sd_8_gen1_5g snapdragon_768g_5g_mobile_platform_\(sm7250-ac\)wcd9380 qcs8300_firmware sa8540p_firmware snapdragon_x72_5g_modem-rf_system_firmware snapdragon_765_5g_mobile_platform_\(sm7250-aa\)qep8111 sxr2330p snapdragon_662_mobile_platform_firmware sm7675 qmp1000 qcs8550_firmware qca6574au snapdragon_7c\+_gen_3_compute_firmware sa8770p_firmware sd670 sa8155_firmware snapdragon_8cx_compute_platform_\(sc8180xp-ac\)qca6797aq_firmware snapdragon_xr1_platform_firmware wcd9341_firmware sxr1120 snapdragon_8_gen_3_mobile_platform_firmware snapdragon_8_gen_1_mobile_platform_firmware qcn6024_firmware qam8775p qcn9274_firmware wsa8835 snapdragon_auto_5g_modem-rf_firmware snapdragon_765g_5g_mobile_platform_\(sm7250-ab\)snapdragon_690_5g_mobile_platform_firmware sa6155p sa6145p video_collaboration_vc1_platform qsm8350_firmware qam8295p qcs8300 snapdragon_7c_compute_platform_\(sc7180-ac\)qca6678aq_firmware snapdragon_x50_5g_modem-rf_system_firmware flight_rb5_5g_platform_firmware wcn3999 wsa8835_firmware qamsrv1m sdx61 qdu1010_firmware qam8620p snapdragon_732g_mobile_platform_\(sm7150-ac\)qdu1000 wcn3988 sm8635 snapdragon_x65_5g_modem-rf_system_firmware robotics_rb2 wcd9395_firmware sm8750 snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmware sm6650_firmware wcn7750 snapdragon_865_5g_mobile_platform_firmware qca6595 sd855 sa6155_firmware qca6436_firmware snapdragon_782g_mobile_platform_\(sm7325-af\)snapdragon_8_gen_1_mobile_platform sw5100_firmware wcn3999_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\)sa2150p_firmware fastconnect_7800_firmware sm7675p_firmware qca6698aq_firmware sc8380xp snapdragon_8_gen_3_mobile_platform wsa8815 snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)_firmware ar8035 snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"_firmware qru1062_firmware sm7325p qcn6224 snapdragon_855\+\/860_mobile_platform_\(sm8150-ac\)_firmware snapdragon_720g_mobile_platform wcd9340_firmware wcn6740_firmware qamsrv1h_firmware qca6584au_firmware qcn6274 sxr1120_firmware qca6430_firmware qdu1210_firmware sdx61_firmware qcs2290_firmware wcd9370_firmware wsa8832_firmware sd888 sm7675_firmware qca6436 wcd9326_firmware sm8635_firmware snapdragon_870_5g_mobile_platform_\(sm8250-ac\)snapdragon_670_mobile_platform_firmware snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"qca6421 srv1m sa8540p wsa8830 qcm8550 qru1062 snapdragon_x65_5g_modem-rf_system c-v2x_9150_firmware qca8081 fastconnect_6700 qca6391 snapdragon_4_gen_1_mobile_platform_firmware qcs9100_firmware qca6391_firmware snapdragon_730g_mobile_platform_\(sm7150-ab\)_firmware qca6688aq qrb5165n wcn3950 sa9000p_firmware wcn3990_firmware qam8650p qcs410 sm7675p snapdragon_665_mobile_platform_firmware wcn6450 aqt1000_firmware c-v2x_9150 sm4635 qdu1110 qcs610 sa8775p sm8635p_firmware qrb5165m qamsrv1h qca6698aq snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)snapdragon_678_mobile_platform_\(sm6150-ac\)315_5g_iot_modem snapdragon_680_4g_mobile_platform flight_rb5_5g_platform qfw7114_firmware wcn6740 sm6250_firmware snapdragon_695_5g_mobile_platform snapdragon_x50_5g_modem-rf_system sd_8_gen1_5g_firmware sd855_firmware qca6574 robotics_rb2_firmware wcd9335_firmware snapdragon_662_mobile_platform snapdragon_8cx_compute_platform_\(sc8180xp-af\)sa8255p_firmware snapdragon_865_5g_mobile_platform 315_5g_iot_modem_firmware sw5100p_firmware sg4150p_firmware qam8295p_firmware qca6426_firmware ar8031_firmware sd730_firmware snapdragon_778g_5g_mobile_platform qru1052_firmware sm8650q sa6145p_firmware wcd9375 wcd9378 video_collaboration_vc1_platform_firmware wcn6755_firmware snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware wsa8845_firmware qdx1011 qcn7606 sa8620p_firmware snapdragon_8cx_compute_platform_\(sc8180x-aa\)snapdragon_665_mobile_platform robotics_rb5 qca6421_firmware sdx55_firmware sm8735 wcn7861_firmware qcs610_firmware snapdragon_8c_compute_platform_\(sc8180xp-ad\)_firmware sd865_5g srv1h qcs6490_firmware qcs8550 fastconnect_6900_firmware fastconnect_6800_firmware sa8155p_firmware qam8650p_firmware ar8035_firmware sm8750p snapdragon_8c_compute_platform_\(sc8180x-ad\)_firmware qcs6490 qcn9274 snapdragon_x75_5g_modem-rf_system qca6431 smart_audio_400_platform wsa8845 qca6420_firmware snapdragon_780g_5g_mobile_platform_firmware qcc710_firmware wcn3988_firmware sm4125_firmware sw5100 smart_audio_400_platform_firmware sm8750p_firmware snapdragon_678_mobile_platform_\(sm6150-ac\)_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\)_firmware wcd9390 sa8255p sa8775p_firmware snapdragon_765g_5g_mobile_platform_\(sm7250-ab\)_firmware qru1052 sd_675_firmware snapdragon_690_5g_mobile_platform wcn6650 fastconnect_6900 sm4635_firmware sa2150p snapdragon_8c_compute_platform_\(sc8180x-ad\)wcn7880 snapdragon_x55_5g_modem-rf_system sa4155p_firmware qdu1010 video_collaboration_vc3_platform qep8111_firmware qam8255p sd_675 qcm2290_firmware snapdragon_670_mobile_platform qcn9074_firmware qcn6224_firmware fastconnect_7800 sa7775p sm6370_firmware sa7255p_firmware wcd9371_firmware wcn6755 sa8770p sa8155p wsa8845h wcd9390_firmware snapdragon_750g_5g_mobile_platform sa8195p_firmware qsm8250 sm8650q_firmware wcd9340 sa8295p_firmware sd675_firmware wsa8840 wcd9378_firmware sd675 snapdragon_4_gen_1_mobile_platform snapdragon_730g_mobile_platform_\(sm7150-ab\)sa6155 sa6150p_firmware sa8530p qcm4290_firmware qdu1210 qca6174a_firmware fastconnect_6200 snapdragon_x35_5g_modem-rf_system_firmware csra6620_firmware qca6426 wsa8810_firmware qcm6490 qca6420 snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-ab\)_firmware snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware fastconnect_6700_firmware qca6174a sm8635p sa4150p_firmware sa8650p_firmware qcs9100 robotics_rb5_firmware wcd9371 snapdragon_8cx_compute_platform_\(sc8180x-ab\)snapdragon_720g_mobile_platform_firmware qcs4290_firmware snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware qcn9074 csra6640 snapdragon_x62_5g_modem-rf_system wcn3980_firmware qcm4290 wcd9326 sm6250 qdx1010_firmware wcd9385_firmware wcd9360_firmware qmp1000_firmware wcn7750_firmware qca6678aq wcd9385 snapdragon_xr1_platform wcn7881 qca6595au sa9000p snapdragon_732g_mobile_platform_\(sm7150-ac\)_firmware wcn3910_firmware qcm6490_firmware wsa8815_firmware snapdragon_x62_5g_modem-rf_system_firmware snapdragon_685_4g_mobile_platform_\(sm6225-ad\)snapdragon_888_5g_mobile_platform_firmware sxr2130_firmware qcn6274_firmware wsa8832 sm7315 sc8180x\+sdx55 wsa8810 qdu1110_firmware qsm8350 wcn3980 sa7255p sxr2130 snapdragon_auto_5g_modem-rf_gen_2_firmware sxr2330p_firmware qca6431_firmware qca6574a_firmware snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\)_firmware sm7250p sc8180x\+sdx55_firmware qca6574_firmware qrb5165n_firmware qcs5430 snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)qamsrv1m_firmware snapdragon_730_mobile_platform_\(sm7150-aa\)srv1m_firmware sm7635_firmware qam8620p_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\)_firmware qca6696_firmware sm7315_firmware snapdragon_7c\+_gen_3_compute snapdragon_auto_4g_modem_firmware snapdragon_695_5g_mobile_platform_firmware qdx1010 wsa8830_firmware snapdragon_855_mobile_platform qcs5430_firmware qcm2290 qcs4290 snapdragon_782g_mobile_platform_\(sm7325-af\)_firmware sm7325p_firmware snapdragon_auto_4g_modem wcd9380_firmware qca6688aq_firmware qca6595_firmware sm6250p_firmware sd888_firmware aqt1000 qfw7124_firmware qcn6024 wcd9375_firmware snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)wcn7860_firmware sa8530p_firmware qca6574a wcn3990 snapdragon_8c_compute_platform_\(sc8180xp-ad\)qcn7606_firmware qca6595au_firmware snapdragon_xr2_5g_platform_firmware snapdragon_auto_5g_modem-rf_gen_2 qcm5430_firmware sm8750_firmware snapdragon_8cx_compute_platform_\(sc8180xp-af\)_firmware sa7775p_firmware snapdragon_8cx_compute_platform_\(sc8180xp-ac\)_firmware csra6640_firmware sw5100p sa6155p_firmware qca8337_firmware snapdragon_460_mobile_platform wcd9395 fastconnect_6800 qca6430 sm7635 snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-af\)snapdragon_675_mobile_platform_firmware sm6250p qdu1000_firmware qam8255p_firmware qcc710 wcn3910 wcd9341 snapdragon_x55_5g_modem-rf_system_firmware qsm8250_firmware qcs2290 sc8380xp_firmware qca6584au snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmware snapdragon_888_5g_mobile_platform sa8295p wcn3950_firmware wcn7861 video_collaboration_vc3_platform_firmware snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware sa8150p_firmware wcd9360 qam8775p_firmware sa4150p snapdragon_8cx_compute_platform_\(sc8180x-ab\)_firmware sa8150p qcn9024 wcn6450_firmware sm4125 sm6370 snapdragon_x35_5g_modem-rf_system sa8155 sm7250p_firmware snapdragon_xr2\+_gen_1_platform ar8031 snapdragon_730_mobile_platform_\(sm7150-aa\)_firmware qdx1011_firmware qcm5430 snapdragon_460_mobile_platform_firmware fastconnect_6200_firmware qcm6125 snapdragon_855_mobile_platform_firmware wcn6650_firmware qru1032_firmware snapdragon_710_mobile_platform_firmware csra6620 snapdragon_xr2\+_gen_1_platform_firmware snapdragon_480_5g_mobile_platform snapdragon_auto_5g_modem-rf sa6150p qcs410_firmware sd730 snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\)Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.11% / 1.52%

||

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:05

Updated-13 Jan, 2025 | 21:53

Buffer copy without checking size of input (Classic buffer overflow) in HLOS

Memory corruption in HLOS while running kernel address sanitizers (syzkaller) on tmecom with DEBUG_FS enabled.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8830_firmware wcd9380 fastconnect_6900 wsa8835 fastconnect_7800 snapdragon_8_gen_1_mobile wsa8830 fastconnect_7800_firmware wcd9380_firmware fastconnect_6900_firmware wsa8835_firmware snapdragon_8_gen_1_mobile_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.11% / 1.48%

||

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-15 Jan, 2025 | 16:51

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption when the bandpass filter order received from AHAL is not within the expected range.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.11% / 1.47%

||

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-16 Dec, 2025 | 18:23

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while copying the sound model data from user to kernel buffer during sound model register.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 1.58%

||

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-10 Jan, 2025 | 17:50

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Memory corruption while processing the IOCTL FM HCI WRITE request.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_8c_compute_firmware snapdragon_7c\+_gen_3_compute snapdragon_7c_gen_2_compute qca6391_firmware wcd9380_firmware wcd9385_firmware fastconnect_6800_firmware snapdragon_8c_compute sm6250_firmware wsa8830 fastconnect_7800 wsa8845h snapdragon_8cx_gen_3_firmware snapdragon_7c_gen_2_compute_firmware snapdragon_8cx_compute wsa8840 fastconnect_6700 qca6420 snapdragon_8cx_gen_2_5g_firmware wcd9385 fastconnect_6200 wcd9380 wsa8815 sc8380xp wsa8845 snapdragon_7c\+_gen_3_compute_firmware wsa8810 fastconnect_6900_firmware fastconnect_6800 snapdragon_8cx_compute_firmware wcd9340 snapdragon_7c_compute wcd9341 wsa8845_firmware fastconnect_6900 sc8380xp_firmware qca6430_firmware wsa8815_firmware wsa8830_firmware qca6391 snapdragon_8cx_gen_3 wsa8845h_firmware aqt1000_firmware fastconnect_7800_firmware fastconnect_6200_firmware sm6250 snapdragon_7c_compute_firmware wsa8835_firmware wsa8835 wsa8840_firmware qca6430 aqt1000 qca6420_firmware fastconnect_6700_firmware snapdragon_8cx_gen_2_5g wcd9340_firmware wcd9341_firmware wsa8810_firmware Snapdragon fastconnect_7800_firmware wcd9341_firmware wsa8845h_firmware wsa8830_firmware fastconnect_6200_firmware sm6250_firmware qca6420_firmware qca6430_firmware wcd9340_firmware wsa8845_firmware fastconnect_6800_firmware qca6391_firmware wsa8835_firmware sc8380xp_firmware fastconnect_6900_firmware wcd9385_firmware fastconnect_6700_firmware wsa8840_firmware wsa8815_firmware wcd9380_firmware wsa8810_firmware aqt1000_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.10% / 1.21%

||

7 Day CHG~0.00%

Published-03 Jun, 2024 | 10:05

Updated-27 Jan, 2025 | 19:34

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS

Memory corruption in TZ Secure OS while Tunnel Invoke Manager initialization.

Vendor-Qualcomm Technologies, Inc.

Product-qsm8350 sg8275p_firmware snapdragon_888_5g_mobile sc8280xp-abbb_firmware sc8180xp-ad_firmware qdx1010_firmware qca6421_firmware snapdragon_ar2_gen_1 sxr2130 qca6595au_firmware sd_8cx qca6564au snapdragon_865_5g_mobile_firmware sa9000p_firmware sa8540p snapdragon_845_mobile qca6564a_firmware qru1032 qca6310_firmware qcm8550 wcn3980_firmware sc8180xp-aaab_firmware snapdragon_xr2_5g_firmware sd855 sa8150p_firmware qca6595 qca9377_firmware qca6574a_firmware snapdragon_765g_5g_mobile snapdragon_765g_5g_mobile_firmware wsa8830_firmware qdu1000_firmware qam8775p_firmware sm8550p_firmware wsa8832_firmware sc8180x-aaab_firmware snapdragon_860_mobile_firmware snapdragon_xr2_5g qca6420 sa8155 qdx1011_firmware sc8380xp_firmware sxr2130_firmware qcn6224 qdu1210 snapdragon_675_mobile_firmware sdx55 snapdragon_8_gen_1_mobile_firmware sm7250p wsa8810_firmware snapdragon_auto_5g_modem-rf_gen_2 wsa8840 snapdragon_x24_lte_modem sxr2230p_firmware snapdragon_678_mobile_firmware wsa8810 snapdragon_670_mobile_firmware snapdragon_850_mobile_compute_firmware wsa8845h_firmware qfw7124 qam8650p sa8150p sa8255p qca6574_firmware snapdragon_865_5g_mobile sa6155 qam8775p qca6564a qca6797aq_firmware sa6155p ssg2125p_firmware snapdragon_768g_5g_mobile wcd9395_firmware sm7250p_firmware sxr1230p_firmware qdu1000 sa8770p_firmware sd_675 qca9377 qca6335 snapdragon_8_gen_2_mobile fastconnect_6200_firmware snapdragon_8_gen_1_mobile snapdragon_865\+_5g_mobile_firmware vision_intelligence_300_firmware qcn6274_firmware robotics_rb3 snapdragon_888\+_5g_mobile wcd9341_firmware snapdragon_x55_5g_modem-rf_firmware wcd9340 wcd9380_firmware sc8180xp-acaf sdx57m snapdragon_x50_5g_modem-rf_firmware sa8540p_firmware qca6430_firmware snapdragon_675_mobile sa8770p qca6436_firmware qru1052_firmware fastconnect_6800_firmware qcm8550_firmware sd_675_firmware sa9000p robotics_rb3_firmware wcd9390_firmware qca6584au sa6155p_firmware qru1052 sa8295p_firmware snapdragon_845_mobile_firmware snapdragon_x75_5g_modem-rf snapdragon_870_5g_mobile_firmware sd675 snapdragon_870_5g_mobile wcn3990_firmware wcd9385 sd670_firmware qdx1011 snapdragon_8_gen_2_mobile_firmware qca6421 sa8155p snapdragon_x65_5g_modem-rf_firmware wcd9375 wcn3950_firmware qdu1010_firmware qca8337 qca6335_firmware qca6574a wcn3980 sc8180x-aaab sd865_5g snapdragon_678_mobile sd670 qca6574au_firmware wcd9380 qca6426_firmware qca6584au_firmware sm8550p sxr2230p wcd9385_firmware qca6174a_firmware aqt1000 ssg2125p qcn6224_firmware vision_intelligence_400_firmware sc8180x-ad fastconnect_7800 fastconnect_6900_firmware ar8035 wcd9370 sa8155p_firmware snapdragon_855\+_mobile qcs8550_firmware snapdragon_765_5g_mobile sdx57m_firmware qdu1110_firmware fastconnect_6800 sd675_firmware snapdragon_768g_5g_mobile_firmware vision_intelligence_300 wsa8840_firmware ar8035_firmware qcs8550 qdu1210_firmware qcn6274 snapdragon_8\+_gen_2_mobile qdu1110 wcd9390 snapdragon_765_5g_mobile_firmware qru1062_firmware qfw7124_firmware qca8081_firmware wsa8815_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qfw7114_firmware wsa8815 sa8295p qam8650p_firmware snapdragon_855_mobile_firmware qca6174a sg8275p snapdragon_860_mobile sa8255p_firmware qam8295p_firmware sa8775p qca6595_firmware qca6420_firmware sc8280xp-abbb wsa8832 vision_intelligence_400 sa6155_firmware qca6310 sdx55_firmware sc8180x-acaf qca6574 wcd9340_firmware sc8180xp-ad qca6696 snapdragon_855\+_mobile_firmware qca6391 snapdragon_855_mobile fastconnect_6200 qca8337_firmware wsa8830 qcc710 wsa8845h qca6698aq qdu1010 wcd9370_firmware sxr1230p sc8180x-acaf_firmware sa8155_firmware qca6797aq qfw7114 qca6426 sd_8_gen1_5g_firmware qca6431_firmware ssg2115p qru1032_firmware sc8180xp-acaf_firmware sd_8_gen1_5g sd855_firmware qam8255p_firmware snapdragon_x50_5g_modem-rf snapdragon_x55_5g_modem-rf qca6431 qdx1010 sa8775p_firmware snapdragon_670_mobile qca6391_firmware wsa8835 snapdragon_x24_lte_modem_firmware wsa8835_firmware snapdragon_865\+_5g_mobile qca6436 qca6696_firmware snapdragon_888_5g_mobile_firmware wcd9326_firmware wcd9375_firmware fastconnect_6900 qca8081 sd_8cx_firmware wcn3990 wcn3950 qam8295p sc8180xp-aaab qca6698aq_firmware snapdragon_850_mobile_compute qam8255p fastconnect_7800_firmware sc8180x-ad_firmware snapdragon_8\+_gen_2_mobile_firmware snapdragon_x75_5g_modem-rf_firmware qca6564au_firmware sc8380xp qca6430 snapdragon_x65_5g_modem-rf wsa8845 aqt1000_firmware wsa8845_firmware qcc710_firmware wcd9326 wcd9395 wcd9341 qru1062 qsm8350_firmware qca6574au snapdragon_ar2_gen_1_firmware qca6595au sd865_5g_firmware snapdragon_888\+_5g_mobile_firmware ssg2115p_firmware Snapdragon qam8255p_firmware qca9377_firmware snapdragon_850_mobile_compute_platform_firmware qca8337_firmware wcd9380_firmware sxr2230p_firmware snapdragon_x24_lte_modem_firmware sg8275p_firmware qca6431_firmware qdu1010_firmware snapdragon_670_mobile_platform_firmware ar8035_firmware qcn6224_firmware sd670_firmware sxr1230p_firmware qdu1110_firmware wcn3950_firmware sa8540p_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware ssg2125p_firmware sd_675_firmware sd675_firmware qca6584au_firmware wcn3990_firmware qca6310_firmware qca6430_firmware qfw7114_firmware sd_8cx_firmware wcd9385_firmware qca6335_firmware wcd9326_firmware qca6574_firmware sd_8_gen1_5g_firmware wcd9340_firmware qsm8350_firmware sdx57m_firmware qru1032_firmware qam8295p_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware qca6426_firmware sa9000p_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware sdx55_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wsa8845h_firmware sm7250p_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware qca6436_firmware snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware snapdragon_845_mobile_platform_firmware qcn6274_firmware sa8775p_firmware wsa8840_firmware wsa8832_firmware snapdragon_x75_5g_modem-rf_system_firmware sa8155_firmware fastconnect_6900_firmware robotics_rb3_platform_firmware qcs8550_firmware sc8380xp_firmware vision_intelligence_300_platform_firmware qca6797aq_firmware qru1062_firmware sa6145p_firmware sa8155p_firmware qdx1011_firmware qca6564a_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware qdx1010_firmware qdu1000_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qca6174a_firmware qam8650p_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware sxr2130_firmware qca6696_firmware qca6595_firmware qca6391_firmware qru1052_firmware snapdragon_855_mobile_platform_firmware wcd9370_firmware sm8550p_firmware qcc710_firmware vision_intelligence_400_platform_firmware wcd9390_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware snapdragon_865_5g_mobile_platform_firmware ssg2115p_firmware fastconnect_6800_firmware qfw7124_firmware sa8295p_firmware qdu1210_firmware snapdragon_8_gen_2_mobile_platform_firmware snapdragon_675_mobile_platform_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 1.17%

||

7 Day CHG~0.00%

Published-03 Jun, 2024 | 10:05

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Trusted Execution Environment

Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware qcm8550_firmware robotics_rb3 sa6150p_firmware sd865_5g qcs8155_firmware qca6595 wcd9335 wcd9370 qca8081_firmware snapdragon_670_mobile qca4004 qca6696 snapdragon_x70_modem-rf_firmware wcd9340_firmware wcd9341_firmware wcd9395_firmware qcn6024 qcc710_firmware qca6426 snapdragon_8\+_gen_1_mobile wcn6740_firmware fastconnect_6700 snapdragon_780g_5g_mobile qca9984_firmware snapdragon_685_4g_mobile sa4150p snapdragon_782g_mobile_firmware snapdragon_x50_5g_modem-rf_firmware wsa8832_firmware qca8337 qdu1110 qca6426_firmware wcd9395 snapdragon_665_mobile_firmware sc8180xp-aaab 9205_lte_modem qca6574au_firmware qcn7606_firmware qca6564_firmware qam8295p wcd9341 snapdragon_wear_1300 qca6574au wcd9390 snapdragon_888\+_5g_mobile_firmware wsa8810_firmware wsa8845h_firmware csra6640 snapdragon_778g_5g_mobile_firmware sa9000p_firmware sc8180xp-acaf snapdragon_850_mobile_compute fastconnect_6800_firmware qcs5430 qcn6024_firmware qcm5430 qcm5430_firmware sa4155p sa8770p snapdragon_678_mobile_firmware ssg2115p qcc710 snapdragon_xr2_5g_firmware sa8540p qsm8350_firmware fastconnect_6900 qru1032_firmware fsm10056_firmware qfw7114 wcd9385_firmware qca6421 qca6310 qam8255p_firmware sa8155_firmware qca6335 snapdragon_x65_5g_modem-rf qcs4490 snapdragon_680_4g_mobile wsa8845 sa6155p qca6421_firmware sc8180x-ad qca6564au_firmware wsa8810 qam8650p video_collaboration_vc5_platform_firmware sa9000p qdu1000_firmware snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile sm7315_firmware qdu1010 snapdragon_662_mobile_firmware sa6155p_firmware snapdragon_685_4g_mobile_firmware wcd9326_firmware snapdragon_845_mobile_firmware wsa8840 qcs8550_firmware snapdragon_782g_mobile qdu1210_firmware snapdragon_8_gen_2_mobile_firmware snapdragon_x55_5g_modem-rf qfw7124_firmware snapdragon_4_gen_2_mobile_firmware qca6436_firmware qcn9012 snapdragon_695_5g_mobile_firmware qcs4490_firmware snapdragon_x55_5g_modem-rf_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3910_firmware sm4125_firmware snapdragon_460_mobile snapdragon_8_gen_2_mobile qca6420 wcn3910 wcd9370_firmware qdu1110_firmware qdu1000 qca6574a snapdragon_8\+_gen_2_mobile qca6174a sa8195p wcd9340 qcs8250_firmware qcm2290 qdu1210 snapdragon_auto_5g_modem-rf_gen_2 qca6335_firmware qcm6490 sa8540p_firmware sm8550p_firmware qcm8550 wcn3988 snapdragon_765_5g_mobile_firmware snapdragon_662_mobile qcn9024 vision_intelligence_300_firmware sa8775p qca6574 sxr2230p_firmware sd675_firmware snapdragon_855_mobile_firmware qca6430_firmware qcn9011 sa8775p_firmware sdx57m smart_audio_400 qcn9024_firmware wsa8845h sa6150p wcd9326 qcm2290_firmware sa8155p_firmware qca6564a sa8155p snapdragon_765g_5g_mobile_firmware wsa8830 sm8550p sa6145p snapdragon_768g_5g_mobile_firmware sa8255p_firmware ar8035 snapdragon_4_gen_2_mobile qca6564 sa6155 qrb5165m_firmware qcm4325 qcn6224 snapdragon_865\+_5g_mobile_firmware qca6698aq wcn3950_firmware ssg2125p_firmware qrb5165n snapdragon_480\+_5g_mobile fastconnect_6200 sd670 sm7325p_firmware sa8145p_firmware sd460 sc8180x-acaf_firmware snapdragon_480_5g_mobile_firmware qcs8155 qdx1011 sa8150p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 robotics_rb3_firmware snapdragon_x75_5g_modem-rf_firmware sd670_firmware snapdragon_855_mobile qcs6490 qcs8250 snapdragon_695_5g_mobile sc8180xp-acaf_firmware snapdragon_778g_5g_mobile fastconnect_6200_firmware ar8031_firmware wsa8830_firmware snapdragon_460_mobile_firmware qcn6224_firmware qca6431 wsa8845_firmware wsa8832 snapdragon_480_5g_mobile sdx57m_firmware sxr2130_firmware snapdragon_860_mobile_firmware ar8035_firmware sc8180xp-aaab_firmware snapdragon_778g\+_5g_mobile qrb5165m sc8380xp sa4150p_firmware sd888_firmware wcd9306 qca6564au sc8180xp-ad snapdragon_wear_1300_firmware sc8280xp-abbb wsa8815_firmware sa8195p_firmware qca8337_firmware qcm4290 ar8031 sg8275p_firmware qca9377_firmware qcm6490_firmware snapdragon_665_mobile sm7250p_firmware wcn3999 sm4125 qcm4490_firmware qru1032 vision_intelligence_400_firmware wcn3950 flight_rb5_5g snapdragon_870_5g_mobile_firmware qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_7c\+_gen_3_compute qca4004_firmware snapdragon_778g\+_5g_mobile_firmware sa8295p_firmware smart_audio_400_firmware sd_675_firmware snapdragon_870_5g_mobile snapdragon_678_mobile sa4155p_firmware qca9984 sm7250p sc8180x-acaf sa8155 sd_8cx_firmware sc8180x-ad_firmware qca6584au sd888 qcn6274_firmware qcn9011_firmware qru1062_firmware fsm10056 sd460_firmware snapdragon_675_mobile_firmware snapdragon_850_mobile_compute_firmware wcn6740 snapdragon_768g_5g_mobile sc8380xp_firmware snapdragon_780g_5g_mobile_firmware qru1062 qca6310_firmware snapdragon_845_mobile fastconnect_6800 qfw7114_firmware qcs7230 qca6595_firmware fastconnect_7800_firmware snapdragon_675_mobile snapdragon_865_5g_mobile_firmware fastconnect_6900_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p sa6155_firmware sxr2230p snapdragon_xr2_5g sa8150p snapdragon_x24_lte_modem sc8180x-aaab sxr1230p sc8180x-aaab_firmware sd662_firmware video_collaboration_vc3_platform aqt1000 wcd9306_firmware snapdragon_4_gen_1_mobile_firmware qam8295p_firmware sd855 qca6431_firmware wcn3990_firmware 9205_lte_modem_firmware sm7315 qca6698aq_firmware qcs2290 qca6564a_firmware qcn7606 wcd9385 qcs2290_firmware snapdragon_888\+_5g_mobile qsm8350 snapdragon_8_gen_1_mobile wcn3999_firmware sd662 snapdragon_680_4g_mobile_firmware sa8255p qcs7230_firmware qcs4290 sxr1230p_firmware wcd9390_firmware snapdragon_865\+_5g_mobile qca6430 snapdragon_855\+_mobile sg8275p snapdragon_765_5g_mobile qdx1011_firmware snapdragon_860_mobile sc8180xp-ad_firmware sdx55_firmware flight_rb5_5g_firmware ssg2125p qru1052 sxr2130 qcm4490 snapdragon_x65_5g_modem-rf_firmware csra6640_firmware snapdragon_480\+_5g_mobile_firmware robotics_rb5 qca6174a_firmware sm7325p snapdragon_x50_5g_modem-rf qam8650p_firmware video_collaboration_vc5_platform snapdragon_670_mobile_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sd855_firmware wcd9335_firmware qrb5165n_firmware qca6436 snapdragon_x70_modem-rf wcn3980_firmware snapdragon_x24_lte_modem_firmware wsa8835 qca6391_firmware wsa8840_firmware qcn6274 qfw7124 qdu1010_firmware qca6595au_firmware qca6696_firmware qcs4290_firmware wcd9380_firmware qca6574_firmware csra6620 qca8081 wsa8815 sg4150p sd_8_gen1_5g qam8775p qca9377 snapdragon_ar2_gen_1_firmware qca6797aq snapdragon_x75_5g_modem-rf qcm4325_firmware qca6574a_firmware sdx55 snapdragon_4_gen_1_mobile qcm4290_firmware snapdragon_865_5g_mobile snapdragon_855\+_mobile_firmware sd675 sd_8_gen1_5g_firmware wcd9375_firmware qca6391 qcn9012_firmware qcs5430_firmware sg4150p_firmware qru1052_firmware sa8770p_firmware csra6620_firmware sa8295p qcs8550 sc8280xp-abbb_firmware fastconnect_7800 qam8775p_firmware sd865_5g_firmware snapdragon_8\+_gen_2_mobile_firmware wcd9375 vision_intelligence_300 snapdragon_ar2_gen_1 snapdragon_765g_5g_mobile wcn3988_firmware sa8145p sd_675 snapdragon_8\+_gen_1_mobile_firmware sd_8cx vision_intelligence_400 ssg2115p_firmware wsa8835_firmware wcn3980 qca6584au_firmware qdx1010 snapdragon_8_gen_1_mobile_firmware Snapdragon qam8255p_firmware qca9377_firmware snapdragon_850_mobile_compute_platform_firmware snapdragon_662_mobile_platform_firmware sa6150p_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware snapdragon_x24_lte_modem_firmware sg8275p_firmware qca6431_firmware flight_rb5_5g_platform_firmware qcn6224_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware qcm5430_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qca6584au_firmware wcn3990_firmware qrb5165n_firmware qca9984_firmware qualcomm_video_collaboration_vc3_platform_firmware sd_8cx_firmware wcd9385_firmware qcn6024_firmware wcd9326_firmware sd_8_gen1_5g_firmware qsm8350_firmware sd460_firmware qam8295p_firmware qcn9011_firmware sa9000p_firmware sm7315_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware sdx55_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3999_firmware sm7250p_firmware wsa8845h_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware smart_audio_400_platform_firmware sa8775p_firmware snapdragon_x70_modem-rf_system_firmware qrb5165m_firmware wsa8840_firmware sa4155p_firmware sa8155_firmware robotics_rb3_platform_firmware qca4004_firmware qcs8550_firmware sc8380xp_firmware sd662_firmware vision_intelligence_300_platform_firmware wcn3988_firmware qru1062_firmware sa6145p_firmware wcd9306_firmware fastconnect_6700_firmware wsa8810_firmware fsm10056_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware qdu1000_firmware qca6698aq_firmware qca6174a_firmware qcs4290_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware snapdragon_wear_1300_platform_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware snapdragon_665_mobile_platform_firmware qru1052_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware qcc710_firmware vision_intelligence_400_platform_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware qcn7606_firmware sa8295p_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware snapdragon_675_mobile_platform_firmware qcm2290_firmware robotics_rb5_platform_firmware qca8337_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware qcs7230_firmware qdu1010_firmware snapdragon_670_mobile_platform_firmware sd670_firmware sxr1230p_firmware qdu1110_firmware sa8540p_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qca6310_firmware qca6430_firmware qcn9012_firmware qfw7114_firmware wcd9335_firmware qca6335_firmware qcm4325_firmware qca6574_firmware wcd9340_firmware sm4125_firmware sm7325p_firmware sdx57m_firmware qru1032_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware qca6426_firmware qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware 9205_lte_modem_firmware aqt1000_firmware wcn6740_firmware qcm4490_firmware snapdragon_845_mobile_platform_firmware qcn6274_firmware qcs4490_firmware ar8031_firmware qcm6490_firmware wsa8832_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware qca6797aq_firmware sa8155p_firmware qdx1011_firmware qca6564a_firmware qcn9024_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware qdx1010_firmware snapdragon_8_gen_1_mobile_platform_firmware qam8650p_firmware qca6564_firmware qca6595_firmware qcs5430_firmware qca6391_firmware sa4150p_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware wcd9390_firmware ssg2115p_firmware qcs8155_firmware qfw7124_firmware qdu1210_firmware ar8035_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.11% / 1.47%

||

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-15 Jan, 2025 | 16:52

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')