CVE-2020-11126 | ByteOS Network

Vulnerability Details :

CVE-2020-11126

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-09 Jun, 2021 | 05:00

Updated At-04 Aug, 2024 | 11:21

Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:09 Jun, 2021 | 05:00

Updated At:04 Aug, 2024 | 11:21

▼CVE Numbering Authority (CNA)

Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Versions

Affected

APQ8096AU, AQT1000, AR8031, AR8035, AR9380, CSR8811, CSRA6620, CSRA6640, IPQ4018, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, MDM9640, PM3003A, PM4125, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8005, PM8008, PM8009, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, PM8996, PM8998, PMC1000H, PMC7180, PMD9645, PMD9655, PME605, PMI632, PMI8996, PMI8998, PMK8002, PMK8003, PMK8350, PMM8155AU, PMM855AU, PMM8996AU, PMP8074, PMR525, PMR735A, PMR735B, PMX50, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA4024, QCA6174A, QCA6175A ...[truncated*]

Problem Types

Type	CWE ID	Description
text	N/A	Buffer Over Read Issue in WLAN

Type: text

CWE ID: N/A

Description: Buffer Over Read Issue in WLAN

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:09 Jun, 2021 | 05:15

Updated At:14 Jun, 2021 | 21:00

Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Primary	2.0	9.4	HIGH	AV:N/AC:L/Au:N/C:C/I:N/A:C

Type: Primary

Version: 3.1

Base score: 9.1

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Type: Primary

Version: 2.0

Base score: 9.4

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:N/A:C

CPE Matches

Qualcomm Technologies, Inc.

>>apq8096au_firmware>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>aqt1000_firmware>>-

cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ar8031_firmware>>-

cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ar8035_firmware>>-

cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ar9380_firmware>>-

cpe:2.3:o:qualcomm:ar9380_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ar9380:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>csr8811_firmware>>-

cpe:2.3:o:qualcomm:csr8811_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:csr8811:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>csra6620_firmware>>-

cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>csra6640_firmware>>-

cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq4018_firmware>>-

cpe:2.3:o:qualcomm:ipq4018_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq4018:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq4028_firmware>>-

cpe:2.3:o:qualcomm:ipq4028_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq4028:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq4029_firmware>>-

cpe:2.3:o:qualcomm:ipq4029_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq4029:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq5010_firmware>>-

cpe:2.3:o:qualcomm:ipq5010_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq5010:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq5018_firmware>>-

cpe:2.3:o:qualcomm:ipq5018_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq5018:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq6000_firmware>>-

cpe:2.3:o:qualcomm:ipq6000_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq6000:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq6005_firmware>>-

cpe:2.3:o:qualcomm:ipq6005_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq6005:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq6010_firmware>>-

cpe:2.3:o:qualcomm:ipq6010_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq6010:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq6018_firmware>>-

cpe:2.3:o:qualcomm:ipq6018_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq6018:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq6028_firmware>>-

cpe:2.3:o:qualcomm:ipq6028_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq6028:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq8064_firmware>>-

cpe:2.3:o:qualcomm:ipq8064_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq8069_firmware>>-

cpe:2.3:o:qualcomm:ipq8069_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8069:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq8070_firmware>>-

cpe:2.3:o:qualcomm:ipq8070_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8070:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq8070a_firmware>>-

cpe:2.3:o:qualcomm:ipq8070a_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8070a:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq8071_firmware>>-

cpe:2.3:o:qualcomm:ipq8071_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8071:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq8071a_firmware>>-

cpe:2.3:o:qualcomm:ipq8071a_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8071a:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq8072_firmware>>-

cpe:2.3:o:qualcomm:ipq8072_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq8072:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-125	Primary	nvd@nist.gov

CWE ID: CWE-125

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

543Records found

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.24% / 47.69%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 845 / SD 850, SD 855, SD 8CX, SDM439, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 sd_855 sd_730_firmware qualcomm_215 sd_675 sd_439 sd_670_firmware sd_425 sd_429 sd_430_firmware sd_710_firmware sd_435 sd_650_firmware sdm439 sd_625 snapdragon_high_med_2016_firmware msm8909w_firmware sd_210 sd_820_firmware sd_820 sd_650 sd_450_firmware sd_845_firmware sd_439_firmware qualcomm_215_firmware qcs605_firmware sd_429_firmware sd_675_firmware sd_652 sd_425_firmware sd_730 sd_212_firmware sd_665 sd_850_firmware snapdragon_high_med_2016 sd_625_firmware sd_450 sdm439_firmware sd_712_firmware sd_8cx_firmware sd_845 sd_8cx sd_427 qcs605 sd_430 sd_670 sd_435_firmware sd_710 sd_205 sxr1130_firmware sd_210_firmware sd_652_firmware sxr1130 msm8909w sd_665_firmware sd_205_firmware sd_212 sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.31%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_670_firmware sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware qualcomm_215_firmware mdm9150 sd_730 sd_212_firmware sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 53.81%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.30% / 52.59%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SDA660, SDA845, SDM450, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware msm8996au_firmware sdm845 sdm450_firmware mdm9650 msm8940_firmware msm8996au apq8009_firmware msm8917 sdm670 qcs605_firmware mdm9206 qca9379_firmware qca6174a sdm670_firmware sdm636 sda845_firmware qca9377 apq8098 qcn7605 mdm9206_firmware qcs605 mdm9640 msm8937_firmware mdm9650_firmware qca6574au_firmware sda660 apq8009 msm8909_firmware apq8053_firmware sda845 msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware msm8937 mdm9207c_firmware mdm9207c qca6174a_firmware sm8150_firmware msm8909 apq8096au sdm630_firmware sda660_firmware msm8940 apq8053 apq8096au_firmware msm8953_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware apq8017 qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.12% / 32.22%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 14:57

Buffer over-read in WLAN

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware ipq4028_firmware qca1023 qca8337 ar9380 ipq8173_firmware qcn5124 mdm9645 wcn3950_firmware qca6595au_firmware sa6155 mdm8215 sd_455_firmware apq8076 qcs6125_firmware sa415m sm4375 wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware wcn3660b qsm8350_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca8081_firmware wcn3998_firmware qca6420 qcn9002 qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware sd_8cx_gen2 ipq8072_firmware qca0000 sa8155_firmware ipq8068 qca6430 wcd9340 sd765g sd680 wcn7851_firmware mdm9250_firmware qca9888_firmware qcn6122 qca6696_firmware wcd9371 sd870_firmware qca1062 qcn5154_firmware mdm8215_firmware sd_8cx sa8150p qca9992_firmware sd660 sd865_5g_firmware sd712 sd660_firmware sm8475 qcn5022_firmware qcn7606_firmware wcn6750_firmware qca6428_firmware qca9985_firmware wcn3991 ipq4018_firmware qca9980_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 sdx55m_firmware msm8976_firmware qca6574 sd670_firmware csr8811_firmware wcd9380 qcs410 qcn5024 sd690_5g_firmware qca9379_firmware sdx24_firmware qca9985 qcn9012_firmware qcn9274_firmware ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qcn6112 qca6584_firmware mdm9215_firmware sd695 ipq6028 ipq8064 sd835 pmp8074 ipq9574_firmware wcn3980_firmware sd730 qcc5100_firmware sa8295p qca2062_firmware wcn6740_firmware sd678_firmware apq8064au_firmware ipq8078_firmware qcn5054 qcs603 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware qcm4290_firmware wcn6855 qcn7605_firmware sw5100p_firmware qcs610_firmware sa6145p qca9886_firmware ar8031 qca1023_firmware sdm630_firmware sd820_firmware qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware csra6640 qca9379 sa4155p sxr2150p qcn7606 qsm8250_firmware wsa8830 qca1062_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qca8082 qca9992 qcs4290 mdm9250 qca6420_firmware apq8009_firmware qca2064_firmware sd690_5g mdm9310_firmware sd675_firmware ipq8072 qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9984_firmware qca9377 wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware ipq8074a qcn6102_firmware qcn9011_firmware sa8155 qca6584 qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware sm7250p_firmware wcn3610_firmware qrb5165n qca6584au sd778g ipq8174 wcn7851 qcn5052 qca9367 sdm630 mdm9607_firmware qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 qca6421 qca8085 sd778g_firmware sa8195p qca6694 sm4375_firmware wcd9326 wcd9335 qcn6023 qcs4290_firmware qca8085_firmware qcs6490_firmware qca6390 qca9898_firmware sd750g_firmware aqt1000 msm8976 wcd9375 sm6250_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware apq8017 qcx315 qcm6125_firmware sd780g sd865_5g qca6595 qcc5100 ipq8065_firmware qcx315_firmware sd665_firmware qcn5154 qca8075_firmware sc8180x mdm9206 wcn6855_firmware qcn6132_firmware qcn9003_firmware qca9888 qca6310_firmware ipq8070a_firmware mdm9615 qca6574_firmware qca9886 sm7325p_firmware sd665 qca6175a sd765 qca6574a_firmware qrb5165m sd850_firmware sm7315 apq8009 mdm9310 qcn6102 csrb31024_firmware qcm6490_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware sc8180x_firmware qca9889_firmware sd710 mdm9607 qcn5122 mdm9645_firmware sdx20m_firmware qcn5022 qca6564_firmware sd768g qca1064_firmware wcn6740 qca8075 apq8096au_firmware qcn6024 qcn9022 sd845 mdm9615_firmware qcn9002_firmware ipq6000_firmware sdx12 qcs410_firmware qca6175a_firmware sd_8cx_gen3_firmware qca2066 sa6150p_firmware qcs610 qca6431_firmware wcd9360_firmware sdx65 qca4024_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6335 qca2062 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qca6554a_firmware qam8295p sd_8cx_gen2_firmware ipq8076a mdm9628 qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware sd710_firmware qca4020 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware sa6155_firmware sdx12_firmware wcd9360 sdx20m qca6438_firmware sd680_firmware wcn3999 qrb5165_firmware ipq5028 qrb5165m_firmware ipq4029_firmware qcs6125 sa4155p_firmware ipq6010 sd662_firmware qcs405 qcn6132 sw5100 qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcd9341 ipq8068_firmware qca2066_firmware qca6431 sd750g ipq9008_firmware wcn3910_firmware sxr2150p_firmware wsa8830_firmware sd855_firmware wcn3988 qca6438 wcn7850_firmware sa8195p_firmware qca9898 sa8295p_firmware ipq4028 wcn3610 mdm9640 ipq5018_firmware qca8337_firmware wcd9380_firmware ipq8072a sw5100p msm8996au_firmware wcd9330 ipq8076a_firmware qca6564au wcn6856_firmware ipq9008 qcn5164 qcn5054_firmware sdx50m_firmware qca8072_firmware qca6174 qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 sd7c wcn3910 qca6320 mdm9650_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware qca9984 qcn9024 wcd9330_firmware sdx55m ipq8064_firmware qca6421_firmware sd821_firmware ar8031_firmware qrb5165 wcn6851_firmware ipq8070 sd_636_firmware qca6564a_firmware sd480 sd870 qsm8250 ipq6018 sd695_firmware sdxr1 apq8096au qca6595_firmware qcs405_firmware sa8145p qca2064 sd780g_firmware sd888_firmware sa8155p sd675 ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware sd678 qcn9070 sa8145p_firmware qcs2290_firmware sd7c_firmware csra6620 qcn9072 qca8386 sd765g_firmware ipq8069_firmware qca6390_firmware ipq6000 qca6174_firmware sd730_firmware wcd9370 qcn5152_firmware qca0000_firmware qca6584au_firmware apq8076_firmware qcn9000_firmware ipq5018 sd_8cx_firmware qcn7605 qca2065 sd662 qcn5124_firmware qam8295p_firmware qca1064 qcn6100_firmware qca8082_firmware qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware ipq5010 qca6564au_firmware sa6155p_firmware qca6310 qcn9274 qcn9001 qca9990 qcs6490 sa515m_firmware sdxr2_5g sd821 sa6145p_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware sd765_firmware qca8081 ipq8071a qca6174a_firmware ipq8071a_firmware wcd9385 qca2065_firmware sd_8cx_gen3 ar8035 csr8811 apq8064au qca6694_firmware qcn9100_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware qca6564a sa4150p qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 qca6554a ar9380_firmware sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 msm8996au sd888_5g sm6250p ipq4018 qca6574a qca9889 qca6174a sm7325p ipq8074 qca9994_firmware wcn6750 qcn9003 ipq8076_firmware sa515m sd855 sm4125_firmware ipq8076 qcn5021 ipq8069 qcn5152 sd768g_firmware sd460 qca6391 sdxr1_firmware aqt1000_firmware qcn9100 sdx65_firmware qcm4290 sdx50m sdx20 mdm9215 qcn9011 sd_455 ipq8074_firmware qca6574au sa8155p_firmware ipq9574 wcd9341_firmware qcm6125 wsa8810 wcn6856 wcn3680b sd835_firmware ipq6010_firmware qca6696 sd845_firmware sa6150p qcn9022_firmware qca9990_firmware ipq8070a qcn6100 qcn9072_firmware sm7250p sd720g_firmware ipq8071_firmware qcn9074_firmware sw5100_firmware ipq4029 sd850 Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-4.6||MEDIUM

EPSS-0.05% / 13.58%

||

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:30

Updated-03 Aug, 2024 | 16:25

Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware wcn3991 sda429w_firmware sd678 wcd9380_firmware sd_675 wcd9330 sdx55m_firmware wcn3950_firmware wcd9380 qca6420_firmware qualcomm215 apq8009_firmware sd730_firmware wcd9370 sd_675_firmware sd675_firmware sdx50m_firmware mdm9206 qca6430_firmware qca9377 wcn3980 wcn3998 wcn3950 wcd9326_firmware sd720g wcn3615_firmware mdm9206_firmware wcd9340_firmware wcn3660b sd855 wsa8815 wcn3660b_firmware wcn3680 wcn3680b_firmware sdx55_firmware wcd9375_firmware wcn3615 wcn3998_firmware wcn3980_firmware sd730 apq8009 wcn3610_firmware qca6420 apq8053_firmware wcd9330_firmware sdx55m aqt1000_firmware qca9367_firmware sd678_firmware wcn3680_firmware sdx50m qca9367 wcn3988_firmware qca6430 sd205 sm6250 sd205_firmware wcd9340 wsa8810_firmware qualcomm215_firmware wcd9341_firmware wsa8810 wcd9326 sd210_firmware wcn3680b wcd9341 wcd9375 wcd9370_firmware aqt1000 sm6250_firmware sdx55 apq8053 sd675 sda429w sd210 sd855_firmware wcn3620_firmware wcn3988 wsa8815_firmware wcn3620 sd720g_firmware wcn3610 Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.09% / 26.74%

||

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware qcn9072_firmware msm8996au wcn3615_firmware qca6595au_firmware sd730 qca1062 qca6310 qcn9000 apq8009 qcn7606_firmware ipq8074 ipq6028 qca6696 qca6421 qcn9070 wcn7850 qcn5122 qsm8250_firmware qca6564au sdx24 wcn3660b qca6426_firmware sd720g ipq8078a sa6150p sd460 sd710_firmware msm8996au_firmware qca9889_firmware sdx24_firmware qcn5124 wsa8830 ipq8072 wsa8815 qcn9003 ipq9008 qca6430 sd855 ipq9008_firmware qcs6490_firmware sd_8cx_gen3_firmware wcd9340 sdx55_firmware sd_8cx_firmware sxr2150p_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware qca8386_firmware sc8180x\+sdx55_firmware qcn5022_firmware sd712 qca8386 qca8072 sd765g_firmware qca6574a qca8084_firmware sd865_5g_firmware qcm6125_firmware wcn6750 sa8295p_firmware sm7325p qcn5024 sd695_firmware qcc5100 qca9994 qca6335 sd_675 qcs405 qcn5024_firmware qca6595 qca6431_firmware csra6640 sd480_firmware qca6430_firmware qca8081 sm7315_firmware sm7325p_firmware qca6584au sd870 ipq6018 qca9367 ipq5018_firmware ipq9574 qca6390_firmware qcn9024_firmware sc8180x\+sdx55 ipq4028_firmware qcn9011_firmware sa6155_firmware wcn6855 qcx315_firmware ipq8072a ipq8070a wcn3910 ipq8070a_firmware sd870_firmware qcm6490_firmware sm6250 ipq8078_firmware qca6431 qca6595au wcd9370 sd888_firmware qcs4290_firmware wcn3980 qcn5152 qca2066 sm4125_firmware qca9992 sm7315 qcn9022 sd765_firmware sd720g_firmware sd765g sd670 qca9888_firmware sdx55m qam8295p wcn6850_firmware qcn9002_firmware qcn9274 sm6250p wsa8810_firmware wsa8815_firmware wcn3991_firmware sa8150p sd850_firmware wcn6740 ipq8078 qca6436 ipq8076a ipq8069 ipq8071a qca4024 qcn7605_firmware sa8155p sdxr1 wsa8810 qca2062_firmware qca2066_firmware sw5100p_firmware aqt1000_firmware qcn9012 wsa8835_firmware ipq8076 wcd9335_firmware sm7250p_firmware qcn5154_firmware apq8009_firmware qca6391 qcn9024 qcn5052_firmware csra6620 wcn3998_firmware ar9380_firmware wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware ipq8074a qcn6023_firmware qcx315 qcc5100_firmware qca6554a_firmware qca8082_firmware ipq4028 qcm6125 ipq8174 ipq8071 ipq8064_firmware qcn6122 qca4020_firmware sd660 csrb31024_firmware sa4150p_firmware sdx20 ipq8070 qcs610 qca6391_firmware wcd9326_firmware qcn9012_firmware sm7250p sa8155p_firmware csra6620_firmware wcn3610 sdx20_firmware sa6145p wcn3910_firmware qrb5165_firmware qca8085_firmware wcd9375 sd750g_firmware qca6696_firmware ipq8076_firmware qca2064 sxr2150p sd865_5g qca2062 ipq8071_firmware qca9377 sm6250p_firmware qca9980_firmware qcn9003_firmware wcn3990_firmware wcn3950_firmware wcn3988 sd778g wcd9371_firmware wcn3615 qca8085 ipq8071a_firmware sd750g qca9980 sd768g_firmware qcs605 sd712_firmware wcn7851 qcn9002 qca6310_firmware sd710 mdm9640_firmware qca6436_firmware sa8195p_firmware qca4020 qca9367_firmware ipq8074a_firmware qcn5021_firmware wcd9341_firmware ipq6000_firmware qcn6102 ipq4018 wcd9340_firmware sd850 qca8082 sd_675_firmware qca6174a_firmware qca6564a_firmware qcn5021 sd855_firmware sd662_firmware qcn5054_firmware qca9889 sdx50m wcd9371 qcs405_firmware qcn6024_firmware qcs6490 ipq5018 sdx55 sd460_firmware wcn3610_firmware sa6155 qca9990 qcm4290_firmware qca1064 wcn3660b_firmware sm4375 sd820 sd665_firmware sdx20m_firmware wcd9360_firmware qrb5165m_firmware sa6145p_firmware qsm8350_firmware ipq5028_firmware sd768g wcn6740_firmware wcn6856 sm4125 qca6390 sdx50m_firmware ipq5010_firmware sa6155p ipq8074_firmware sa8150p_firmware sd480 wcd9330 wcn7851_firmware sa8145p_firmware sw5100 qca4024_firmware wcn6850 csr8811 sa8145p sa415m wcn3950 qcs603_firmware ipq6018_firmware qca6584au_firmware qcn9100_firmware qcn5122_firmware qcn7605 qcm6490 qcn6024 qca6174a wcd9335 wcn3999 ipq8078a_firmware sd7c_firmware sd670_firmware qca6595_firmware qrb5165n ipq6010 qca6421_firmware qca6438_firmware qrb5165 qca6574au_firmware sd662 qrb5165n_firmware qca2065_firmware ipq4029_firmware qam8295p_firmware sa8295p qcs610_firmware qcn9074 qcm2290_firmware qcn9274_firmware qcn5054 wcd9380 ar8031 qca6438 qcm4290 qcn6102_firmware qcn5052 sd660_firmware sd730_firmware qca2064_firmware sd695 ipq8064 sd_8cx_gen3 ipq8069_firmware wcd9375_firmware sa6150p_firmware sd888 ar8035_firmware ipq8070_firmware wcn6856_firmware qcn6132_firmware aqt1000 qcn5152_firmware qcs603 qcn6100_firmware ar8035 qcn6112 wcn6855_firmware qca8072_firmware qsm8250 qca6420 wcd9360 sd780g_firmware qca9898_firmware sdx65_firmware qcm2290 qcn9011 qcn5124_firmware sa515m sd845_firmware qca6428_firmware sdxr1_firmware sa515m_firmware qcn5164_firmware qca9994_firmware wcn3990 ipq6028_firmware qcn6023 sd690_5g qca8081_firmware qca9984 qca1062_firmware wsa8835 wcn3998 ar8031_firmware csr8811_firmware qca8337_firmware qca9898 qca8075_firmware qcn5164 qcs2290 qrb5165m qcn6122_firmware sd820_firmware qca9990_firmware qca1064_firmware sd7c ipq8072a_firmware sd678 wcd9385 qca6574au wcn7850_firmware qcn6112_firmware sdx65 wcd9385_firmware ipq4029 mdm9640 ipq9574_firmware apq8096au wcn6750_firmware qcs410_firmware qcn9000_firmware ipq8173_firmware sd680 qcn9001_firmware sd888_5g qcn9070_firmware pmp8074 qca8075 pmp8074_firmware sd678_firmware qca9379 wcn3999_firmware qcs6125 sm4375_firmware ipq6010_firmware qca9984_firmware qca6574 qsm8350 wcn3991 sd_8cx csra6640_firmware qca6574_firmware sa415m_firmware ipq8076a_firmware ar9380 qca6564a sdx20m sa8195p sd675_firmware qca6574a_firmware qca9888 sd665 sa8155_firmware wsa8830_firmware sd888_5g_firmware ipq8174_firmware qca8337 sd_8_gen1_5g_firmware sm6250_firmware qcn6100 sdxr2_5g qcn6132 wcd9341 wcn3980_firmware qcs2290_firmware wcn6851_firmware ipq4018_firmware wcd9326 sd680_firmware qca8084 qca9379_firmware sa6155p_firmware qcn9074_firmware qca9992_firmware sa4150p qcn5154 qca2065 qca9377_firmware apq8096au_firmware sw5100_firmware ipq8173 qcn9001 qcn9072 sd780g qca6564au_firmware csrb31024 qca6426 qca6335_firmware sdx55m_firmware qcs6125_firmware qcn9100 sd690_5g_firmware qcn5022 sm8475 ipq8072_firmware sa8155 ipq6000 sd765 qcs605_firmware wcd9330_firmware ipq5010 wcn3988_firmware qcn9022_firmware qcs4290 qca6554a ipq5028 qcn7606 sw5100p sd_8cx_gen2 sd845 qcs410 qca6428 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.36% / 57.48%

||

7 Day CHG~0.00%

Published-09 Sep, 2021 | 07:36

Updated-03 Aug, 2024 | 16:25

Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 sm7250 sa6150p_firmware qcs610 ipq4028_firmware qcn5550 qca8337 ar9380 ipq8173_firmware qca9561_firmware qcn5124 qca4024_firmware wcn3950_firmware ipq8078a sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qcn5064 qcs605_firmware sd_675_firmware qcs6125_firmware sa415m wcn3998 wcn3950 qcn6024_firmware sd720g sm4125 ipq8076a wcn3660b sd710_firmware sd460_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 qca6438_firmware ipq8070_firmware ipq8065 ipq8078a_firmware qrb5165_firmware qca7500 ipq8072_firmware ipq4029_firmware qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qca6430 wcd9340 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qca9888_firmware wcd9341 ipq8068_firmware qca6696_firmware sd870_firmware sd750g qcn5154_firmware wcn3910_firmware sd_8cx sa8150p wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware sd855_firmware wcn3988 qca6438 sd660_firmware sa8195p_firmware qcn5022_firmware wcn6750_firmware qca9898 ipq4028 wcn3610 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware sda429w_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware sdm429w ipq8076a_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qca9558 sd670_firmware qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware ipq4019_firmware sdx50m_firmware qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 ipq6018_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware wcn3910 sd_8c_firmware qca6426_firmware wcn3660b_firmware qca9984 ipq6028 ipq8064 sd835 pmp8074 qcn9024 wcn3980_firmware sd730 qcn5550_firmware sdx55m ipq8064_firmware wcn6740_firmware qcn5064_firmware sd678_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware ipq8070 qca9896 qca9994 qca9887_firmware qca9980 sd670 qcn9024_firmware ipq8174_firmware sd_636_firmware qca6564a_firmware qca9880 qcm4290_firmware sd480 sd870 sd210_firmware qcs610_firmware qsm8250 sa6145p ipq6018 qca9886_firmware qca6595_firmware sa8145p sdm630_firmware qca6391_firmware qca4024 wcd9370_firmware sd780g_firmware sdx55 qcn5021_firmware sa8155p sd675 qca9531_firmware ar8035_firmware qcm2290 qsm8250_firmware qcn5024_firmware wcn3991_firmware wsa8830 sd678 qca9561 qcn9070 sa8145p_firmware qcs2290_firmware fsm10056 sm7250_firmware csrb31024 qca9563_firmware sd_636 fsm10055_firmware qcn9072 qca9880_firmware qca9992 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6564 qca6426 qca6584au_firmware wcn3990_firmware qcn9000_firmware qca9984_firmware ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware qca9563 ipq8074a sd662 qcn5124_firmware sa8155 qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3610_firmware qca6436_firmware ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware ipq8174 sd429 sa515m_firmware qca9990 sdxr2_5g qcn5052 sdm630 sa415m_firmware wcn3988_firmware qcn9074 sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 ipq8071a ipq8071a_firmware qcs4290_firmware wcd9385 qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 ar8035 sm6250_firmware csr8811 ipq4019 qcn9100_firmware sda429w sd210 wcn3620_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware wcn3620 qca6564a qcm6125_firmware qca9882 qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 ar9380_firmware qcn9012 qca9558_firmware qca9896_firmware wsa8835 ipq8065_firmware sdm429w_firmware sd665_firmware sd888_5g qcn5154 qca8075_firmware ipq4018 qca6574a qca9889 qca9888 ipq8074 sm7325 qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 sd855 sm4125_firmware sd665 ipq8076 qca6175a sd765 qca9887 qca6574a_firmware qcn5021 qcn5152 sd768g_firmware sd460 qca6391 aqt1000_firmware qcn9100 qcm4290 csrb31024_firmware sdx50m qca9882_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware qca9531 ipq8074_firmware qca6574au qca9889_firmware sd710 sa8155p_firmware qcn5122 sd205_firmware wcd9341_firmware qcm6125 wsa8810 wcn6856 sd_8c qcn5022 sd835_firmware qca6564_firmware sd768g ipq6010_firmware wcn6740 qca6696 sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9072_firmware ipq6000_firmware sd720g_firmware ipq8071_firmware qcn9074_firmware qcs410_firmware ipq4029 qca6175a_firmware sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.39% / 59.51%

||

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:31

Updated-03 Aug, 2024 | 16:25

Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-sa6150p_firmware ipq4028_firmware qcn5550 qca8337 ar9380 ipq8173_firmware qca9561_firmware qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qcn5064 sd_675_firmware sa415m wcn3998 wcn3950 qcn6024_firmware sd720g sm4125 ipq8076a sd710_firmware sd460_firmware sm7315_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 apq8053_firmware qca6438_firmware ipq8070_firmware ipq8065 ipq8078a_firmware ipq5028 qca7500 ipq8072_firmware ipq4029_firmware sa8155_firmware ipq6010 sd662_firmware ipq8068 qca6430 wcd9340 sd765g qca6436 wcn6851 sa6155p qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca6696_firmware sd870_firmware sd750g qcn5154_firmware wcn3910_firmware sd_8cx sa8150p wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware sd855_firmware wcn3988 qca6438 sd660_firmware sa8195p_firmware qcn5121 qcn5022_firmware wcn6750_firmware qca9898 ipq4028 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware ipq8076a_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qca9558 sd670_firmware qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcn5024 sd690_5g_firmware ipq4019_firmware sdx50m_firmware qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware wcn3910 sd_8c_firmware qca6426_firmware qca9984 ipq6028 ipq8064 sd835 pmp8074 qcn9024 wcn3980_firmware sd730 qcn5550_firmware sdx55m ipq8064_firmware wcn6740_firmware msm8953 qcn5064_firmware sd678_firmware ipq8078_firmware qcn5054 wcn6851_firmware ipq8070 qca9896 qcn5502 qca9994 qca9887_firmware qca9980 sd670 qcn9024_firmware ipq8174_firmware sd_636_firmware qca6564a_firmware qca9880 qcm4290_firmware sd480 sd870 qcn5121_firmware sa6145p ipq6018 qca9886_firmware qca6595_firmware sa8145p sdm630_firmware qca6391_firmware qca4024 wcd9370_firmware sd780g_firmware sdx55 sd888_firmware apq8053 qcn5021_firmware sa8155p sd675 qca9531_firmware ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware qcn5500 wsa8830 sd678 qca9561 qcn9070 sa8145p_firmware qcs2290_firmware csrb31024 qca9563_firmware sd_636 qcn9072 qca9880_firmware qca9992 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6564 qca6426 qca6584au_firmware wcn3990_firmware qcn9000_firmware qca9984_firmware ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware qca9563 ipq8074a sd662 qcn5124_firmware qca9982 sa8155 wcn3680b_firmware qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware qca6595au sm7250p_firmware qca6436_firmware ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware ipq8174 sa515m_firmware qca9990 sdxr2_5g qcn5052 sdm630 sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware sm6250 sd778g_firmware sa8195p wsa8810_firmware qca6694 sd765_firmware wcd9326 wcd9335 qca8081 qca9982_firmware qcn6023 ipq8071a ipq8071a_firmware qcs4290_firmware wcd9385 qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 ar8035 sm6250_firmware csr8811 ipq4019 qca6694_firmware msm8953_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware qca6564a qca9882 qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 ar9380_firmware qcn9012 sd888 qca9558_firmware qca9896_firmware qcn6122_firmware ipq8065_firmware wsa8835 sd665_firmware sd888_5g qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware qca9889 sm7325p qca9888 ipq8074 qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 qcn5502_firmware sd855 sm4125_firmware sm7325p_firmware sd665 ipq8076 qca6175a sd765 qca9887 qca6574a_firmware qcn5021 qcn5152 sd768g_firmware sm7315 sd460 qca6391 ipq6005 aqt1000_firmware qcn9100 qcm4290 csrb31024_firmware sdx50m qca9882_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware qca9531 ipq8074_firmware qca6574au qca9889_firmware sd710 sa8155p_firmware qcn5122 wcd9341_firmware wsa8810 qcn5500_firmware wcn6856 sd_8c qcn5022 wcn3680b sd835_firmware qca6564_firmware sd768g ipq6010_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware ipq8071_firmware qcn9074_firmware ipq4029 qca6175a_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-4.6||MEDIUM

EPSS-0.04% / 13.13%

||

7 Day CHG~0.00%

Published-08 Sep, 2021 | 11:25

Updated-03 Aug, 2024 | 16:25

Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware qca9377_firmware qcn5500 qca9561 qcn9070 ipq4028_firmware qcn5550 ar9380 ipq8173_firmware qca9563_firmware qca9561_firmware qcn5124 qca4024_firmware qcn9072 qca9880_firmware qca9992 ipq8078a ipq8069_firmware apq8009_firmware qca6335 ipq6000 qcn5064 ipq8072 qcn5152_firmware qcn9000_firmware qca9984_firmware ipq5018 qca9377 ipq8076a qcn6024_firmware wcd9326_firmware mdm9206_firmware qca9563 wcn3660b ipq8074a qcn5124_firmware qca9982 qfe1952_firmware qca6428 qca6320_firmware qcn5164_firmware qcn5122_firmware ipq8071 wcn3680b_firmware qca8081_firmware qcn6023_firmware wcn3610_firmware apq8053_firmware qca6438_firmware ipq5010 ipq8070_firmware qca6310 qca9367_firmware ipq8065 ipq8078a_firmware qfe1952 ipq8174 qca9990 qca7500 ipq4029_firmware ipq8072_firmware qca9367 qcn5052 ipq6010 ipq8068 qcn9074 sd205 wcd9340 wsa8810_firmware qualcomm215_firmware qca6694 wcd9326 qca8081 qca9982_firmware ipq8071a qcn6023 ipq8071a_firmware qca9888_firmware ipq8068_firmware qcn5154_firmware qca9898_firmware csr8811 ipq4019 qca6694_firmware qcn9100_firmware qfe1922 sda429w sd210 qca9992_firmware wcn3620_firmware ipq5010_firmware ipq8074a_firmware qca6438 wsa8815_firmware wcn3620 qcn5121 qca9898 qcn5022_firmware ipq4028 wcn3610 qca6428_firmware ipq5018_firmware qca8072 qca9882 qca9985_firmware ipq4018_firmware sda429w_firmware qcn9000 ipq8072a qca7500_firmware qca9980_firmware wcd9330 ipq8076a_firmware ar9380_firmware ipq8078 ipq8173 qcn9012 qcn5164 qca9558 qca9558_firmware qca9896_firmware ipq8065_firmware csr8811_firmware qcn5054_firmware qualcomm215 qcn5154 qca8075_firmware ipq4019_firmware ipq4018 ipq6005_firmware mdm9206 qcn5024 qca9889 ipq8074 qca6310_firmware qca8072_firmware qca9888 qca9985 qca9994_firmware qcn5052_firmware ipq8070a_firmware qcn9012_firmware wcn3980 qca6335_firmware ipq6018_firmware ipq8076_firmware qca9886 qcn5502_firmware wcd9340_firmware wsa8815 pmp8074_firmware qca6320 ipq8076 qfe1922_firmware qca9887 wcn3660b_firmware qca9984 ipq6028 ipq8064 ipq8069 pmp8074 qcn5021 qcn5152 qcn9024 wcn3980_firmware apq8009 qcn5550_firmware wcd9330_firmware ipq8064_firmware ipq6005 qcn9100 qcn5064_firmware qca9882_firmware ipq8078_firmware qcn5054 qcn9070_firmware ipq8070 qca9896 ipq6028_firmware ipq8072a_firmware qcn5502 qca9994 qca9531 qca9887_firmware ipq8074_firmware qca9889_firmware qca9980 qcn5122 qcn9024_firmware ipq8174_firmware sd205_firmware qca9880 wsa8810 qcn5121_firmware qcn5500_firmware sd210_firmware ipq6018 qcn5022 wcn3680b qca9886_firmware ipq6010_firmware qca4024 qca8075 apq8053 qcn5021_firmware qcn6024 qcn9022_firmware qcn9022 qca9990_firmware ipq8070a qcn9072_firmware qca9531_firmware ipq6000_firmware ipq8071_firmware qcn9074_firmware ipq4029 Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.22% / 44.17%

||

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:31

Updated-03 Aug, 2024 | 16:25

Possible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sd678 sa6150p_firmware sm6250p_firmware sa8145p_firmware qcs610 qcs2290_firmware qca8337 csrb31024 sd_636 csra6620 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 qca6335 sd690_5g sd730_firmware wcd9370 csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware qca6564 qcs6125_firmware qca6426 qca6584au_firmware wcn3990_firmware sa415m wcn3998 sd_8cx_firmware wcd9371_firmware sdxr2_5g_firmware wcd9385_firmware sm4125 sd720g wcd9326_firmware wcn3615_firmware wcn3950 sd662 sd710_firmware sd460_firmware sa8155 qca6320_firmware sm7315_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3615 sm7250p_firmware wcn3998_firmware wcn3999_firmware qca6420 apq8053_firmware qca6436_firmware qca6564au_firmware qca6584au sa6155p_firmware qca6310 sd778g wcn3999 sa515m_firmware sdxr2_5g qcs6125 sa8155_firmware sd662_firmware sdm630 sa415m_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware sm6250 sd778g_firmware wcd9340 sa8195p wsa8810_firmware sd765g sd765_firmware qca6436 wcd9326 wcd9335 sa6155p wcn6851 qcs4290_firmware wcd9385 wcd9341 qca6696_firmware wcd9371 sd750g sd870_firmware ar8035 qca6390 sd_8cx aqt1000 sa8150p sd750g_firmware sm6250_firmware wcd9375 msm8953_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware sd660_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qca6564a wcn6750_firmware qcm6125_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd780g sd865_5g qca6595 qca6564au sdx55m_firmware wcn6856_firmware sd888 sd670_firmware qca6574 wsa8835 sd665_firmware wcd9380 sd888_5g sm6250p qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p qca6310_firmware qca6430_firmware wcd9335_firmware wcn3980 wcn6750 qca6335_firmware sa515m qca6574_firmware wcd9340_firmware sd855 sm4125_firmware sm7325p_firmware sd665 wcn3910 qca6320 wcn6850 wsa8815 qca6175a sd_8c_firmware qca6426_firmware sd765 qca6574a_firmware sd768g_firmware sd835 wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m sdxr1_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware csrb31024_firmware qcm4290 sdx50m sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd710 sd_636_firmware sd670 qca6564a_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 qcs610_firmware wcn6856 sd_8c sa6145p wcn3680b sd835_firmware qca6564_firmware sdxr1 sd768g ar8031 qca6595_firmware qcs405_firmware sa8145p wcn6740 qca6696 sdm630_firmware qca6391_firmware sd845_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sdx55 apq8053 sa8155p csra6640 sd675 sd845 sm7250p sd720g_firmware qca6175a_firmware ar8035_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.12% / 32.22%

||

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Buffer over-read in WLAN

Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.

Vendor-Qualcomm Technologies, Inc.

Product-sd_8cx_gen3_firmware qca2066 qca8337 ar9380 ipq8173_firmware sdx65 qcn5124 qca4024_firmware ipq8078a ipq5028_firmware qca6595au_firmware qca2062 qca6554a_firmware qam8295p ipq8076a qca8386_firmware qcn6024_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 wcn7850 qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware qcn9002 qca9986 ipq8065 ipq8078a_firmware qca6678aq_firmware ipq5028 qca6698aq ipq6010 ipq8068 qcn6132 qca6436 wcn6851 wcn7851_firmware qca6698aq_firmware qca9888_firmware qcn6122 ipq8068_firmware qca2066_firmware wcd9341 qca6696_firmware sd870_firmware ipq9008_firmware qcn5154_firmware wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware sd660_firmware wcn7850_firmware sm8475 qcn5022_firmware sa8295p_firmware wcn6750_firmware ipq5018_firmware qca9985_firmware qca8337_firmware wcd9380_firmware ssg2125p ipq8072a qca9980_firmware ipq8076a_firmware ipq8078 qca6564au qca8084 ipq8173 qcn9001_firmware sdx55m_firmware ipq9008 wcn6856_firmware qcn5164 qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcn5024 sxr1230p qca8072_firmware qca9985 wcd9335_firmware qcn5052_firmware qcn9274_firmware wcn3980 ipq6018_firmware wsa8815 wcn6850 qcn6112 qca9986_firmware qca6426_firmware qca9984 ipq6028 ipq8064 qcn9024 ipq9574_firmware wcn3980_firmware sdx55m ipq8064_firmware sa8295p qca2062_firmware wcn6740_firmware qca6678aq ipq8078_firmware qcn5054 wcn6851_firmware qca9994 qca9980 qcn9024_firmware ipq8174_firmware sd870 wsa8832 wcn6855 ipq6018 qca9886_firmware qca6595_firmware qca6391_firmware qca2064 qca4024 sd780g_firmware wcd9370_firmware sd888_firmware ssg2115p_firmware ar8035_firmware qcn5024_firmware wsa8830 qcn9070 sxr2230p_firmware qca8082 qcn9072 qca8386 qca9992 qca6390_firmware qca2064_firmware ipq6000 wcd9370 ssg2115p qcn5152_firmware qca6426 qca6584au_firmware wcn3990_firmware qcn9000_firmware qca9984_firmware ipq5018 wcd9385_firmware sdxr2_5g_firmware ipq8074a qca2065 qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware qca8082_firmware qcn5122_firmware qca6595au qcn6023_firmware qca6436_firmware ipq5010 qca6564au_firmware qca6584au qcn9274 ipq8174 qca9990 qcn9001 qcs6490 sdxr2_5g qcn5052 wcn7851 qcn6112_firmware qcn9074 qca8085 wsa8810_firmware wcd9335 qca8081 ipq8071a qcn6023 ipq8071a_firmware wcd9385 qca8085_firmware qca2065_firmware qcs6490_firmware sd_8cx_gen3 ar8035 csr8811 qca6390 wcd9375 qcn9100_firmware ipq5010_firmware ipq8074a_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qca8072 wcn3990 qcn9000 sd780g qca6554a sd865_5g qca6595 ar9380_firmware sd888 qcn6122_firmware ipq8065_firmware sxr1230p_firmware wsa8835 sd888_5g qcn5154 qca8075_firmware ssg2125p_firmware qca6574a wcn6855_firmware qca9889 qcn6132_firmware qcn9003_firmware qca9888 qca9994_firmware wcn6750 qcn9003 ipq8070a_firmware ipq8076_firmware qca6574_firmware qca9886 sxr2230p ipq8076 qca6574a_firmware qcn5152 qca6391 qcn6102 qcn9100 sdx65_firmware qcm6490_firmware wsa8832_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qca6574au qca9889_firmware ipq9574 qcn5122 wcd9341_firmware wsa8810 wcn6856 qcn5022 ipq6010_firmware wcn6740 qca6696 qca8075 qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware ipq6000_firmware qcn9074_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.06% / 19.67%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 19:48

Buffer over-read in WLAN

Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.

Vendor-Qualcomm Technologies, Inc.

Product-sd_8cx_gen3_firmware qca2066 sa6150p_firmware qca8337 ar9380 ipq8173_firmware qca6431_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware sc8180x\+sdx55 ipq8078a ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca2062 sa415m wcn3998 qca6554a_firmware qam8295p sd_8cx_gen2_firmware qcn6024_firmware ipq8076a qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 qcn9002 qca9986 ipq8070_firmware ipq8065 ipq8078a_firmware sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware sa8155_firmware ipq6010 ipq8068 qca6430 wcd9340 qcn6132 qca6436 wcn6851 sa6155p wcn7851_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca2066_firmware qca6696_firmware qca6431 sd870_firmware qca1062 ipq9008_firmware qcn5154_firmware sxr2150p_firmware sa8150p wsa8830_firmware qca9992_firmware sd865_5g_firmware wcn7850_firmware sa8195p_firmware sm8475 qcn5022_firmware wcn6750_firmware sa8295p_firmware ipq5018_firmware qca9985_firmware qca8337_firmware wcd9380_firmware ipq8072a qca9980_firmware ipq8076a_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 sdx55m_firmware qca6564au wcn6856_firmware ipq9008 qcn5164 qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcn5024 qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcn3980 ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qcn6112 qca9986_firmware qca6426_firmware qca9984 ipq6028 ipq8064 qcn9024 pmp8074 ipq9574_firmware wcn3980_firmware sdx55m ipq8064_firmware sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware ipq8070 qca9994 qca9980 qcn9024_firmware ipq8174_firmware sd870 wcn6855 qsm8250 sa6145p ipq6018 qca9886_firmware qca6595_firmware sa8145p qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware qcn5021_firmware sa8155p sxr2150p ar8035_firmware qsm8250_firmware qcn5024_firmware wsa8830 qcn9070 sa8145p_firmware qca1062_firmware csrb31024 qca8082 qcn9072 qca8386 qca9992 qca6420_firmware qca6390_firmware qca2064_firmware ipq6000 wcd9370 qcn5152_firmware qca6426 qca6584au_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq5018 wcd9385_firmware sdxr2_5g_firmware ipq8074a qca2065 qcn5124_firmware qam8295p_firmware qcn6102_firmware qcn9011_firmware qca1064 sa8155 qcn6100_firmware qca8082_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qcn9274 ipq8174 wcn7851 qcn9001 qca9990 qcs6490 qcn5052 sa515m_firmware sdxr2_5g qcn6112_firmware sa415m_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sa8195p wsa8810_firmware qca8081 qcn6023 ipq8071a ipq8071a_firmware wcd9385 qca8085_firmware qcs6490_firmware qca2065_firmware sd_8cx_gen3 qca6390 wcd9375 ar8035 aqt1000 csr8811 sc8180x\+sdx55_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware qcm6490 wcn6850_firmware wsa8835_firmware qcx315 sa4150p qca8072 qcn9000 sd780g qca6554a sd865_5g qca6595 ar9380_firmware qcn9012 sd888 qcn6122_firmware ipq8065_firmware qcx315_firmware wsa8835 sd888_5g qcn5154 qca8075_firmware qca6574a wcn6855_firmware qca9889 sm7325p qcn6132_firmware qcn9003_firmware qca9888 qca9994_firmware wcn6750 qcn9003 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 sm7325p_firmware ipq8076 qca6574a_firmware qcn5021 qcn5152 qrb5165m sm7315 qca6391 aqt1000_firmware qcn6102 qcn9100 sdx65_firmware csrb31024_firmware qcm6490_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn9011 qca6574au qca9889_firmware sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware wsa8810 wcn6856 qcn5022 ipq6010_firmware qca1064_firmware wcn6740 qca6696 sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware ipq6000_firmware qcn9074_firmware Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.07% / 21.25%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Buffer over-read in Modem

Information disclosure due to buffer over-read in modem while reading configuration parameters.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 09:14

Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, Snapdragon_High_Med_2016

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_632 sd_820a sd_412 msm8996au_firmware sd_439 sd_425 sd_429 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware mdm9650 sdm439 sd_625 ipq8074_firmware snapdragon_high_med_2016_firmware qm215 mdm9607 msm8996au sd_820_firmware sd_650 sd_820 sd_450_firmware sd_410 sd_439_firmware sd_820a_firmware qca8081 sd_429_firmware mdm9206 sd_652 sd_425_firmware snapdragon_high_med_2016 sd_625_firmware ipq8074 mdm9655 sd_450 sd_412_firmware sdm439_firmware qm215_firmware mdm9206_firmware sd_427 sd_430 sd_435_firmware sd_632_firmware mdm9650_firmware sd_410_firmware sd_652_firmware qca8081_firmware sd_650_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.16% / 37.20%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 15:00

Buffer over-read in WLAN

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware ipq4028_firmware qca8337 ar9380 ipq8173_firmware qcn5124 mdm9645 wcn3950_firmware qca6595au_firmware sa6155 mdm8215 sd_455_firmware apq8076 qcs6125_firmware sa415m sm4375 wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware wcn3660b qsm8350_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca8081_firmware wcn3998_firmware qca6420 qcn9002 qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware sd_8cx_gen2 ipq8072_firmware sa8155_firmware ipq8068 qca6430 wcd9340 sd765g sd680 wcn7851_firmware mdm9250_firmware qca9888_firmware qcn6122 qca6696_firmware wcd9371 sd870_firmware qca1062 qcn5154_firmware mdm8215_firmware sd_8cx sa8150p qca9992_firmware sd660 sd865_5g_firmware sd712 sd660_firmware sm8475 qcn5022_firmware qcn7606_firmware wcn6750_firmware qca6428_firmware qca9985_firmware wcn3991 ipq4018_firmware qca4531_firmware qca9980_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 sdx55m_firmware msm8976_firmware qca6574 sd670_firmware csr8811_firmware wcd9380 qcs410 qcn5024 sd690_5g_firmware qca9379_firmware sdx24_firmware qca9985 qcn9012_firmware qcn9274_firmware ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qcn6112 qca6584_firmware mdm9215_firmware sd695 ipq6028 ipq8064 sd835 pmp8074 ipq9574_firmware wcn3980_firmware sd730 qcc5100_firmware sa8295p qca2062_firmware wcn6740_firmware sd678_firmware apq8064au_firmware ipq8078_firmware qcn5054 qcs603 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware qcm4290_firmware wcn6855 qcn7605_firmware sw5100p_firmware qcs610_firmware sa6145p qca9886_firmware ar8031 sdm630_firmware sd820_firmware qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware csra6640 qca9379 sxr2150p qcn7606 qsm8250_firmware wsa8830 qca1062_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qca8082 qca9992 qcs4290 mdm9250 qca6420_firmware apq8009_firmware qca2064_firmware sd690_5g mdm9310_firmware sd675_firmware ipq8072 qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9984_firmware qca9377 qca4531 wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware ipq8074a qcn6102_firmware qcn9011_firmware sa8155 qca6584 qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware sm7250p_firmware wcn3610_firmware qrb5165n qca6584au sd778g ipq8174 wcn7851 qcn5052 qca9367 sdm630 mdm9607_firmware qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 qca6421 qca8085 sd778g_firmware sa8195p sm4375_firmware wcd9326 wcd9335 qcn6023 qcs4290_firmware qca8085_firmware qcs6490_firmware qca6390 qca9898_firmware sd750g_firmware aqt1000 msm8976 wcd9375 sm6250_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware apq8017 qcx315 qcm6125_firmware sd780g sd865_5g qca6595 qcc5100 ipq8065_firmware qcx315_firmware sd665_firmware qcn5154 qca8075_firmware sc8180x mdm9206 wcn6855_firmware qcn6132_firmware qcn9003_firmware qca9888 qca6310_firmware ipq8070a_firmware mdm9615 qca6574_firmware qca9886 sm7325p_firmware sd665 qca6175a sd765 qca6574a_firmware qrb5165m sd850_firmware sm7315 apq8009 mdm9310 qcn6102 csrb31024_firmware qcm6490_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware sc8180x_firmware qca9889_firmware sd710 mdm9607 qcn5122 mdm9645_firmware sdx20m_firmware qcn5022 qca6564_firmware sd768g qca1064_firmware wcn6740 qca8075 apq8096au_firmware qcn6024 qcn9022 sd845 mdm9615_firmware qcn9002_firmware ipq6000_firmware sdx12 qcs410_firmware qca6175a_firmware sd_8cx_gen3_firmware qca2066 sa6150p_firmware qcs610 qca6431_firmware wcd9360_firmware sdx65 qca4024_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6335 qca2062 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qca6554a_firmware qam8295p sd_8cx_gen2_firmware ipq8076a mdm9628 qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware sd710_firmware qca4020 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware sa6155_firmware sdx12_firmware wcd9360 sdx20m qca6438_firmware sd680_firmware wcn3999 qrb5165_firmware ipq5028 qrb5165m_firmware ipq4029_firmware qcs6125 ipq6010 sd662_firmware qcs405 qcn6132 sw5100 qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcd9341 ipq8068_firmware qca2066_firmware qca6431 sd750g ipq9008_firmware wcn3910_firmware sxr2150p_firmware wsa8830_firmware sd855_firmware wcn3988 qca6438 wcn7850_firmware sa8195p_firmware qca9898 sa8295p_firmware ipq4028 wcn3610 mdm9640 ipq5018_firmware qca8337_firmware wcd9380_firmware ipq8072a sw5100p msm8996au_firmware wcd9330 ipq8076a_firmware qca6564au wcn6856_firmware ipq9008 qcn5164 qcn5054_firmware sdx50m_firmware qca8072_firmware qca6174 qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 sd7c wcn3910 qca6320 mdm9650_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware qca9984 qcn9024 wcd9330_firmware sdx55m ipq8064_firmware qca6421_firmware sd821_firmware ar8031_firmware qrb5165 wcn6851_firmware ipq8070 sd_636_firmware qca6564a_firmware sd480 sd870 qsm8250 ipq6018 sd695_firmware sdxr1 apq8096au qca6595_firmware qcs405_firmware sa8145p qca2064 sd780g_firmware sd888_firmware sa8155p sd675 ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware sd678 qcn9070 sa8145p_firmware qcs2290_firmware sd7c_firmware csra6620 qcn9072 qca8386 sd765g_firmware ipq8069_firmware qca6390_firmware ipq6000 qca6174_firmware sd730_firmware wcd9370 qcn5152_firmware qca6584au_firmware apq8076_firmware qcn9000_firmware ipq5018 sd_8cx_firmware qcn7605 qca2065 sd662 qcn5124_firmware qam8295p_firmware qca1064 qcn6100_firmware qca8082_firmware qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware ipq5010 qca6564au_firmware sa6155p_firmware qca6310 qcn9274 qcn9001 qca9990 qcs6490 sa515m_firmware sdxr2_5g sd821 sa6145p_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware sd765_firmware qca8081 ipq8071a qca6174a_firmware ipq8071a_firmware wcd9385 qca2065_firmware sd_8cx_gen3 ar8035 csr8811 apq8064au qcn9100_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware qca6564a sa4150p qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 qca6554a ar9380_firmware sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 msm8996au sd888_5g sm6250p ipq4018 qca6574a qca9889 qca6174a sm7325p ipq8074 qca9994_firmware wcn6750 qcn9003 ipq8076_firmware sa515m sd855 sm4125_firmware ipq8076 qcn5021 ipq8069 qcn5152 sd768g_firmware sd460 qca6391 sdxr1_firmware aqt1000_firmware qcn9100 sdx65_firmware qcm4290 sdx50m sdx20 mdm9215 qcn9011 sd_455 ipq8074_firmware qca6574au sa8155p_firmware ipq9574 wcd9341_firmware qcm6125 wsa8810 wcn6856 wcn3680b sd835_firmware ipq6010_firmware qca6696 sd845_firmware sa6150p qcn9022_firmware qca9990_firmware ipq8070a qcn6100 qcn9072_firmware sm7250p sd720g_firmware ipq8071_firmware qcn9074_firmware sw5100_firmware ipq4029 sd850 Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.08% / 23.76%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Buffer over-read in Modem

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.07% / 21.25%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Buffer over-read in Modem

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_1100_wearable_platform wsa8830 wcd9380_firmware ssg2125p sxr2230p_firmware 9207_lte_modem wcd9330 wcn785x-5 9205_lte_modem csra6620 qca4024_firmware wsa8835 sxr1230p_firmware wcd9380 snapdragon_wear_1300_platform csra6620_firmware home_hub_100_platform ssg2125p_firmware ssg2115p csra6640_firmware wcn685x-5_firmware sxr1230p wcn685x-1 qcs400_firmware wcd9335_firmware wcn3980 wcn3998 wcd9385_firmware snapdragon_1200_wearable_platform_firmware wsa8815 sxr2230p wcn3999_firmware wcn3998_firmware wcn785x-5_firmware wcn3980_firmware wcd9330_firmware 9205_lte_modem_firmware wcd9306 mdm8207 wcn3999 snapdragon_x5_lte_modem_firmware ar8031_firmware wsa8832_firmware 9206_lte_modem wcn685x-5 qca4004_firmware 9206_lte_modem_firmware wcn785x-1_firmware qts110 wcd9306_firmware wsa8810_firmware wsa8810 home_hub_100_platform_firmware wsa8832 snapdragon_ar2_gen_1_platform_firmware wcd9335 qca4010 snapdragon_ar2_gen_1_platform wcn685x-1_firmware snapdragon_wear_1300_platform_firmware wcd9385 9207_lte_modem_firmware ar8031 mdm8207_firmware qca4024 snapdragon_1100_wearable_platform_firmware qca4004 wsa8830_firmware csra6640 wsa8815_firmware wsa8835_firmware ssg2115p_firmware snapdragon_1200_wearable_platform qcs400 qca4010_firmware wcn785x-1 snapdragon_x5_lte_modem qts110_firmware Snapdragon 9205_lte_modem_firmware wcd9380_firmware sxr2230p_firmware smart_audio_400_platform_firmware ar8031_firmware snapdragon_x5_lte_modem_firmware wsa8832_firmware fastconnect_6900_firmware qca4004_firmware 9206_lte_modem_firmware qca4024_firmware wcd9306_firmware sxr1230p_firmware wsa8810_firmware fastconnect_7800_firmware home_hub_100_platform_firmware snapdragon_ar2_gen_1_platform_firmware csra6620_firmware ssg2125p_firmware csra6640_firmware snapdragon_wear_1300_platform_firmware 9207_lte_modem_firmware wcd9335_firmware mdm8207_firmware wcd9385_firmware snapdragon_1200_wearable_platform_firmware snapdragon_1100_wearable_platform_firmware wsa8830_firmware wsa8815_firmware wsa8835_firmware fastconnect_6200_firmware ssg2115p_firmware wcn3999_firmware wcn3980_firmware wcd9330_firmware qca4010_firmware qts110_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.20% / 42.03%

||

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware qcn9072_firmware qcn9000 qca8082 qcn5054_firmware qca9889 qcn6024_firmware ipq5018 ipq6028 qcn9070 wcn7850 qcn5122 qca6426_firmware ipq8078a qca9889_firmware ipq5028_firmware qcn5124 wsa8830 wcn6740_firmware wcn6856 wsa8815 qcn9003 qca6390 ipq9008 ipq5010_firmware wcn7851_firmware ipq9008_firmware qca4024_firmware wcn6850 csr8811 ipq6018_firmware qcn9100_firmware qca8386_firmware qcn5122_firmware qcn5022_firmware qcn6024 ipq8078a_firmware qca8386 qca8072 qca8084_firmware ipq6010 sd865_5g_firmware qcn5024 qcn9074 qcn9274_firmware qcn5054 wcd9380 qcn6102_firmware qcn5024_firmware qcn5052 qca8081 ar8035_firmware wcn6856_firmware qcn6132_firmware sd870 ipq6018 qcn5152_firmware ipq5018_firmware qcn6100_firmware qca6390_firmware ar8035 qcn6112 qcn9024_firmware wcn6855_firmware qca8072_firmware wcn6855 ipq8072a ipq8070a sdx65_firmware ipq8070a_firmware sd870_firmware qcn5124_firmware ipq8078_firmware qcn5164_firmware qcn5152 ipq6028_firmware qcn6023 qca8081_firmware qcn9022 wsa8835 qca9888_firmware wcn6850_firmware csr8811_firmware qcn9002_firmware qcn9274 wsa8810_firmware qca8337_firmware wsa8815_firmware qcn5164 qca8075_firmware qcn6122_firmware wcn6740 ipq8072a_firmware ipq8078 ipq8076a qca6436 wcn7850_firmware qcn6112_firmware sdx65 ipq8071a qca4024 wsa8810 qcn9000_firmware ipq8173_firmware qcn9001_firmware qcn9070_firmware qca8075 wsa8835_firmware ipq8076 qcn5154_firmware ipq6010_firmware qca6391 qcn9024 qcn5052_firmware wcn6851 ipq8076a_firmware qca9888 ipq8074a qcn6023_firmware wsa8830_firmware qca8082_firmware ipq8174_firmware qca8337 sd_8_gen1_5g_firmware qcn6100 ipq8174 qcn6122 qcn6132 wcn6851_firmware qca8084 qca6391_firmware qcn9074_firmware qcn5154 qca8085_firmware ipq8173 qcn9001 qcn9072 ipq8076_firmware sd865_5g qca6426 qcn9003_firmware qcn9100 qcn5022 sm8475 ipq8071a_firmware qca8085 ipq6000 ipq5010 wcn7851 qcn9002 qcn9022_firmware ipq5028 qca6436_firmware ipq8074a_firmware ipq6000_firmware qcn6102 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.34%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 09:14

Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 mdm9635m sd_8cx_firmware mdm9615 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_652_firmware sxr1130 msm8909w sd_205_firmware sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 sd_625 qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware mdm9150 sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_855_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 qm215_firmware sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.11% / 30.31%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 19:48

Buffer over-read in WLAN

Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.

Vendor-Qualcomm Technologies, Inc.

Product-sd_8cx_gen3_firmware qca2066 sa6150p_firmware qca8337 ar9380 ipq8173_firmware qca6431_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware sc8180x\+sdx55 ipq8078a ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca2062 sa415m wcn3998 qca6554a_firmware qam8295p sd_8cx_gen2_firmware qcn6024_firmware ipq8076a qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 qcn9002 qca9986 ipq8070_firmware ipq8065 ipq8078a_firmware sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware sa8155_firmware ipq6010 ipq8068 qca6430 wcd9340 qcn6132 qca6436 wcn6851 sa6155p wcn7851_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca2066_firmware qca6696_firmware qca6431 sd870_firmware qca1062 ipq9008_firmware qcn5154_firmware sxr2150p_firmware sa8150p wsa8830_firmware qca9992_firmware sd865_5g_firmware wcn7850_firmware sa8195p_firmware sm8475 qcn5022_firmware wcn6750_firmware sa8295p_firmware ipq5018_firmware qca9985_firmware qca8337_firmware wcd9380_firmware ipq8072a qca9980_firmware ipq8076a_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 sdx55m_firmware qca6564au wcn6856_firmware ipq9008 qcn5164 qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcn5024 qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcn3980 ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qcn6112 qca9986_firmware qca6426_firmware qca9984 ipq6028 ipq8064 qcn9024 pmp8074 ipq9574_firmware wcn3980_firmware sdx55m ipq8064_firmware sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware ipq8070 qca9994 qca9980 qcn9024_firmware ipq8174_firmware sd870 wcn6855 qsm8250 sa6145p ipq6018 qca9886_firmware qca6595_firmware sa8145p qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware qcn5021_firmware sa8155p sxr2150p ar8035_firmware qsm8250_firmware qcn5024_firmware wsa8830 qcn9070 sa8145p_firmware qca1062_firmware csrb31024 qca8082 qcn9072 qca8386 qca9992 qca6420_firmware qca6390_firmware qca2064_firmware ipq6000 wcd9370 qcn5152_firmware qca6426 qca6584au_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq5018 wcd9385_firmware sdxr2_5g_firmware ipq8074a qca2065 qcn5124_firmware qam8295p_firmware qcn6102_firmware qcn9011_firmware qca1064 sa8155 qcn6100_firmware qca8082_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qcn9274 ipq8174 wcn7851 qcn9001 qca9990 qcs6490 qcn5052 sa515m_firmware sdxr2_5g qcn6112_firmware sa415m_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sa8195p wsa8810_firmware qca8081 qcn6023 ipq8071a ipq8071a_firmware wcd9385 qca8085_firmware qcs6490_firmware qca2065_firmware sd_8cx_gen3 qca6390 wcd9375 ar8035 aqt1000 csr8811 sc8180x\+sdx55_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware qcm6490 wcn6850_firmware wsa8835_firmware qcx315 sa4150p qca8072 qcn9000 sd780g qca6554a sd865_5g qca6595 ar9380_firmware qcn9012 sd888 qcn6122_firmware ipq8065_firmware qcx315_firmware wsa8835 sd888_5g qcn5154 qca8075_firmware qca6574a wcn6855_firmware qca9889 sm7325p qcn6132_firmware qcn9003_firmware qca9888 qca9994_firmware wcn6750 qcn9003 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 sm7325p_firmware ipq8076 qca6574a_firmware qcn5021 qcn5152 qrb5165m sm7315 qca6391 aqt1000_firmware qcn6102 qcn9100 sdx65_firmware csrb31024_firmware qcm6490_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn9011 qca6574au qca9889_firmware sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware wsa8810 wcn6856 qcn5022 ipq6010_firmware qca1064_firmware wcn6740 qca6696 sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware ipq6000_firmware qcn9074_firmware Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-4.6||MEDIUM

EPSS-0.11% / 30.52%

||

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:30

Updated-03 Aug, 2024 | 16:25

Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware wcn3991 sda429w_firmware sd678 wcd9380_firmware sd_675 wcd9330 sdx55m_firmware msm8909w_firmware wcn3950_firmware wcd9380 qca6420_firmware qualcomm215 apq8009_firmware sd730_firmware wcd9370 sd_675_firmware sd675_firmware sdx50m_firmware mdm9206 qca6430_firmware qca9377 wcn3980 wcn3998 wcn3950 wcd9326_firmware sd720g wcn3615_firmware mdm9206_firmware wcd9340_firmware wcn3660b sd855 wsa8815 wcn3660b_firmware wcn3680 wcn3680b_firmware sdx55_firmware wcd9375_firmware wcn3615 wcn3998_firmware wcn3980_firmware msm8909w apq8009 wcn3610_firmware apq8009w_firmware qca6420 apq8053_firmware sd730 sdx55m wcd9330_firmware aqt1000_firmware qca9367_firmware sd678_firmware wcn3680_firmware sdx50m qca9367 wcn3988_firmware qca6430 sd205 sm6250 sd205_firmware wcd9340 apq8009w wsa8810_firmware qualcomm215_firmware wcd9341_firmware wsa8810 wcd9326 sd210_firmware wcn3680b wcd9341 wcd9375 wcd9370_firmware aqt1000 sm6250_firmware sdx55 apq8053 sd675 sda429w sd210 sd855_firmware wcn3620_firmware wcn3988 wsa8815_firmware wcn3620 sd720g_firmware wcn3610 Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.1||MEDIUM

EPSS-0.02% / 3.10%

||

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:23

Updated-03 Aug, 2024 | 08:01

Buffer over-read in Automotive multimedia

Information disclosure in Automotive multimedia due to buffer over-read.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8830 wcd9380_firmware sa6150p_firmware sa8145p_firmware sw5100p sd865_5g qcc5100 sdx55m_firmware wcn6856_firmware wsa8835 sd_8_gen1_5g wcd9380 sa8150p_firmware sd888_5g qca6420_firmware qca6595au_firmware qca6390_firmware wcn6855_firmware qca6426 qca6430_firmware wcn3980 wcn3998 wcd9385_firmware qam8295p sdxr2_5g_firmware sd_8_gen1_5g_firmware sd855 wsa8815 wcn6850 qam8295p_firmware qca6426_firmware wcn7850 qca6574au_firmware qca6595au wcn3998_firmware wcn3980_firmware qca6391 sdx55m qca6420 qca6436_firmware sa8295p qcc5100_firmware aqt1000_firmware sa6155p_firmware wcn7851 sdxr2_5g wcn6851_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 sd870 qca6436 wcn6851 wcn6855 sa6155p sw5100p_firmware wcn7851_firmware wcn6856 sa6145p wcd9385 wcd9341 qca6696_firmware sa8145p sd870_firmware qca6696 qca6391_firmware qca6390 aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware sa8295p_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-4.6||MEDIUM

EPSS-0.05% / 13.58%

||

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:30

Updated-03 Aug, 2024 | 16:25

Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wcn3991 sda429w_firmware sd678 wcd9380_firmware sd_675 sdm429w sdx55m_firmware msm8909w_firmware sdm429w_firmware wcn3950_firmware wcd9380 qca6420_firmware qualcomm215 sd730_firmware wcd9370 sd_675_firmware sd675_firmware sdx50m_firmware qca9379_firmware qca6174a qca6430_firmware wcn3980 wcn3998 wcn3950 wcd9326_firmware sd720g wcn3615_firmware wcn3660b sd855 wsa8815 qca4020 wcn3660b_firmware wcn3680 wcn3680b_firmware sdx55_firmware wcd9375_firmware wcn3615 wcn3998_firmware wcn3980_firmware msm8909w sd730 wcn3610_firmware apq8009w_firmware qca6420 sdx55m aqt1000_firmware sd678_firmware wcn3680_firmware sdx50m wcn3988_firmware qca6430 sd205 sm6250 sd205_firmware apq8009w wsa8810_firmware qualcomm215_firmware wcd9341_firmware wsa8810 qca4020_firmware wcd9326 sd210_firmware wcn3680b qca6174a_firmware wcd9341 wcd9375 wcd9370_firmware aqt1000 sm6250_firmware sdx55 sd675 sda429w sd210 sd855_firmware wcn3620_firmware wcn3988 wsa8815_firmware wcn3620 sd720g_firmware qca9379 wcn3610 Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.08% / 24.38%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 15:15

Buffer over-read in Bluetooth HOST

Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.

Vendor-Qualcomm Technologies, Inc.

Product-qca6595au sa6155_firmware sd660_firmware wcd9335 wcn3990_firmware sdm429w_firmware wsa8815_firmware wcn7851_firmware wsa8835_firmware qcs605_firmware wsa8810 sa6145p sd845 sa6155 sa8145p sd205_firmware qcc5100_firmware sd439_firmware qcn9074_firmware sd210_firmware sd626 sd870 wcn6856 qca6335_firmware wcn3680 sd439 wcn6855_firmware wsa8830 sd429 wcn7850_firmware qcn9012 qca6431_firmware sdx55m qcc5100 qcs605 wcd9385 qca6426_firmware wsa8830_firmware sa8155_firmware sdx55m_firmware wcn3660b qcm6125 sd865_5g_firmware wcn3988 wcn3615_firmware wcn6855 msm8608 qcn9012_firmware qca6310 qcn9011 sa8155p qca6431 sd845_firmware wcd9340_firmware qcs410_firmware sw5100p wsa8810_firmware qca6421 sw5100_firmware qcs610 qca6320 wcn6851_firmware qualcomm215 sw5100p_firmware qca6574a_firmware qrb5165n qrb5165m wcn3615 qcs405 sd210 wcn3950 qcn9011_firmware wcd9340 qca6595 wcn3988_firmware qca6595au_firmware wcn6850_firmware sdm429w sa6150p wcd9370 sd870_firmware wcn6850 msm8208_firmware qrb5165_firmware sa8195p qca6320_firmware qcs410 csra6620 qca6391_firmware msm8108_firmware qca6391 sd660 qca6390_firmware wcn7850 ar8031 msm8208 sd625 wcd9341_firmware wcn3680b_firmware wsa8815 qualcomm215_firmware sdxr1 wcn3980_firmware sd625_firmware qca6310_firmware sd205 qca6421_firmware msm8209 sa8150p_firmware sa6150p_firmware wcn3610 qcm6125_firmware wcn3680b sa6145p_firmware qca6574au_firmware ar8031_firmware wcn6851 qca6696_firmware msm8108 wcd9380_firmware csra6640 sd_8_gen1_5g_firmware qca6696 apq8009 qcs610_firmware qcs6125_firmware sd835 wcn3660b_firmware wcd9385_firmware sdxr1_firmware wcn3680_firmware wcn6856_firmware qca6574au wcn3610_firmware wcn3998 sd835_firmware sa6155p_firmware qcs6125 wsa8835 qca6574 qca6574a qcn9074 msm8608_firmware qca6426 wcd9370_firmware sa8155p_firmware apq8009_firmware qca6390 wcd9326_firmware sd865_5g wcd9380 msm8209_firmware sa8145p_firmware qrb5165n_firmware csra6620_firmware sd626_firmware wcd9335_firmware qca6436_firmware qrb5165 sdxr2_5g qrb5165m_firmware wcn3998_firmware wcn7851 sw5100 wcn3620_firmware sa8155 csra6640_firmware sdxr2_5g_firmware wcn3990 sa8195p_firmware sa8150p wcd9326 qca6436 wcn3620 sd429_firmware qca6595_firmware sm8475 qca6335 qca6574_firmware qcs405_firmware sa6155p wcd9341 wcn3950_firmware wcn3980 Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.08% / 24.38%

||

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Buffer over-read in Modem

Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.52%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing diag event after associating to a network out of bounds read occurs if ssid of the network joined is greater than max limit.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.13% / 33.80%

||

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 08:01

Buiffer over-read in WLAN Firmware.

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware wsa8830 qcn9070 sxr2230p_firmware ipq8173_firmware sdx65 qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 ipq8078a ipq5028_firmware ipq6000 ssg2115p qcn5152_firmware qcn9000_firmware ipq5018 wcd9385_firmware ipq8076a qca8386_firmware qcn6024_firmware sd_8_gen1_5g_firmware qca8084_firmware ipq8074a qcn5124_firmware qca8082_firmware wcn7850 qcn5164_firmware qcn5122_firmware qca8081_firmware qcn6023_firmware ipq5010 ipq8078a_firmware qcn9274 ipq8174 wcn7851 ipq5028 qcn5052 ipq6010 qcn9074 qca8085 sdx65m qcn6132 qca8081 wcn7851_firmware ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware wcd9385 qca8085_firmware qca9888_firmware qcn6122 ipq9008_firmware qcn5154_firmware csr8811 qcn9100_firmware wsa8830_firmware ipq5010_firmware ipq8074a_firmware wsa8835_firmware wcn7850_firmware sm8475 qcn5022_firmware ipq5018_firmware wcd9380_firmware ssg2125p qcn9000 ipq8072a ipq8076a_firmware ipq8078 qca8084 ipq8173 wcn6856_firmware ipq9008 qcn5164 qcn6122_firmware wsa8835 sxr1230p_firmware csr8811_firmware wcd9380 qcn5154 qca8075_firmware ssg2125p_firmware qcn5024 wcn6855_firmware qca9889 qcn6132_firmware sxr1230p qca9888 qcn5052_firmware qcn9274_firmware ipq8070a_firmware ipq6018_firmware ipq8076_firmware sxr2230p ipq8076 qcn5152 ipq6028 qcn9024 ipq9574_firmware qcn9100 sdx65_firmware ipq8078_firmware wsa8832_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qca9889_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware wsa8832 wcn6855 wcn6856 ipq6018 qcn5022 ipq6010_firmware qca4024 qca8075 qcn9022_firmware qcn6024 qcn9022 ipq8070a qcn9072_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.03% / 6.39%

||

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Buffer over-read in Trusted Execution Environment

Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.07% / 21.25%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Buffer over-read in Modem

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_1100_wearable_platform wsa8830 wcd9380_firmware ssg2125p sxr2230p_firmware 9207_lte_modem wcd9330 wcn785x-5 9205_lte_modem csra6620 qca4024_firmware wsa8835 sxr1230p_firmware wcd9380 snapdragon_wear_1300_platform csra6620_firmware home_hub_100_platform ssg2125p_firmware ssg2115p csra6640_firmware wcn685x-5_firmware sxr1230p wcn685x-1 qcs400_firmware wcd9335_firmware wcn3980 wcn3998 wcd9385_firmware snapdragon_1200_wearable_platform_firmware wsa8815 sxr2230p wcn3999_firmware wcn3998_firmware wcn785x-5_firmware wcn3980_firmware wcd9330_firmware 9205_lte_modem_firmware wcd9306 mdm8207 wcn3999 snapdragon_x5_lte_modem_firmware ar8031_firmware wsa8832_firmware 9206_lte_modem wcn685x-5 qca4004_firmware 9206_lte_modem_firmware wcn785x-1_firmware qts110 wcd9306_firmware wsa8810_firmware wsa8810 home_hub_100_platform_firmware wsa8832 snapdragon_ar2_gen_1_platform_firmware wcd9335 qca4010 snapdragon_ar2_gen_1_platform wcn685x-1_firmware snapdragon_wear_1300_platform_firmware wcd9385 9207_lte_modem_firmware ar8031 mdm8207_firmware qca4024 snapdragon_1100_wearable_platform_firmware qca4004 wsa8830_firmware csra6640 wsa8815_firmware wsa8835_firmware ssg2115p_firmware snapdragon_1200_wearable_platform qcs400 qca4010_firmware wcn785x-1 snapdragon_x5_lte_modem qts110_firmware Snapdragon 9205_lte_modem_firmware wcd9380_firmware sxr2230p_firmware smart_audio_400_platform_firmware ar8031_firmware snapdragon_x5_lte_modem_firmware wsa8832_firmware fastconnect_6900_firmware qca4004_firmware 9206_lte_modem_firmware qca4024_firmware wcd9306_firmware sxr1230p_firmware wsa8810_firmware fastconnect_7800_firmware home_hub_100_platform_firmware snapdragon_ar2_gen_1_platform_firmware csra6620_firmware ssg2125p_firmware csra6640_firmware snapdragon_wear_1300_platform_firmware 9207_lte_modem_firmware wcd9335_firmware mdm8207_firmware wcd9385_firmware snapdragon_1200_wearable_platform_firmware snapdragon_1100_wearable_platform_firmware wsa8830_firmware wsa8815_firmware wsa8835_firmware fastconnect_6200_firmware ssg2115p_firmware wcn3999_firmware wcn3980_firmware wcd9330_firmware qca4010_firmware qts110_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.15% / 36.74%

||

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware qcn9072_firmware qca6595au_firmware qca1062 qca6310 sd730 qcn9000 qcn7606_firmware ipq8074 ipq6028 qca6696 qca6421 mdm9607 qcn9070 wcn7850 qcn5122 qsm8250_firmware qca6564au qca6426_firmware sd720g ipq8078a sa6150p sd460 sd710_firmware qca9889_firmware qcn5124 wsa8830 ipq8072 wsa8815 qcn9003 ipq9008 qca6430 sd855 ipq9008_firmware qcs6490_firmware sd_8cx_gen3_firmware wcd9340 qca0000_firmware sdx55_firmware sd_8cx_firmware sxr2150p_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware qca8386_firmware sc8180x\+sdx55_firmware qcn5022_firmware sa4155p_firmware sd712 qca8386 qca8072 sd765g_firmware qca6574a qca8084_firmware sd865_5g_firmware qcm6125_firmware wcn6750 sa8295p_firmware sm7325p qcn5024 sd695_firmware qcc5100 qca9994 qca6335 sd_675 qcs405 qcn5024_firmware qca6595 qca6431_firmware csra6640 sd480_firmware qca6430_firmware qca8081 sm7315_firmware sm7325p_firmware qca6584au sd870 ipq6018 qca9367 ipq5018_firmware qca6390_firmware qcn9024_firmware sc8180x\+sdx55 ipq4028_firmware qcn9011_firmware sa6155_firmware wcn6855 qcx315_firmware ipq8072a ipq8070a wcn3910 ipq8070a_firmware sd870_firmware qcm6490_firmware sm6250 ipq8078_firmware qca6431 qca6595au wcd9370 sd888_firmware qcs4290_firmware wcn3980 qcn5152 qca2066 sm4125_firmware qca9992 sm7315 qcn9022 sd765_firmware sd720g_firmware sd765g sd670 qca9888_firmware sdx55m qam8295p wcn6850_firmware qcn9002_firmware qcn9274 sm6250p wsa8810_firmware wsa8815_firmware wcn3991_firmware sa8150p sd850_firmware wcn6740 ipq8078 qca6436 ipq8076a ipq8069 ipq8071a qca4024 qcn7605_firmware sa8155p sdxr1 wsa8810 qca6694_firmware qca2062_firmware qca2066_firmware sw5100p_firmware aqt1000_firmware qcn9012 wsa8835_firmware ipq8076 wcd9335_firmware sm7250p_firmware qcn5154_firmware qca6391 ar9380_firmware qcn9024 qcn5052_firmware csra6620 wcn3998_firmware wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware ipq8074a qcn6023_firmware qcx315 qcc5100_firmware qca6554a_firmware qca8082_firmware ipq4028 qcm6125 ipq8174 ipq8071 ipq8064_firmware qcn6122 sd660 csrb31024_firmware sa4150p_firmware ipq8070 qcs610 qca6391_firmware wcd9326_firmware qcn9012_firmware sm7250p sa8155p_firmware csra6620_firmware sa6145p wcn3910_firmware qrb5165_firmware qca8085_firmware wcd9375 sd750g_firmware qca6696_firmware ipq8076_firmware qca2064 sxr2150p sd865_5g qca2062 ipq8071_firmware qca9377 sm6250p_firmware qca9980_firmware qcn9003_firmware wcn3990_firmware wcn3950_firmware wcn3988 sd778g wcd9371_firmware ipq8071a_firmware qca8085 sd750g qca9980 sd768g_firmware qcs605 sd712_firmware wcn7851 qcn9002 qca6310_firmware sd710 qca6436_firmware sa8195p_firmware qcn5021_firmware qca9367_firmware ipq8074a_firmware wcd9341_firmware ipq6000_firmware qcn6102 ipq4018 wcd9340_firmware sd850 qca8082 sd_675_firmware qca6174a_firmware qcn5021 sd855_firmware sd662_firmware qcn5054_firmware qca9889 sdx50m wcd9371 qcs405_firmware qcn6024_firmware qcs6490 ipq5018 sdx55 sd460_firmware mdm9628 sa6155 qca9990 qcm4290_firmware qca1064 sm4375 sd665_firmware sdx20m_firmware wcd9360_firmware qrb5165m_firmware sa6145p_firmware qsm8350_firmware ipq5028_firmware sd768g wcn6740_firmware wcn6856 sm4125 qca6390 sdx50m_firmware ipq5010_firmware sa6155p ipq8074_firmware sa8150p_firmware sd480 wcd9330 wcn7851_firmware sa8145p_firmware sw5100 qca4024_firmware wcn6850 csr8811 sa8145p sa415m wcn3950 qcs603_firmware ipq6018_firmware qca6584au_firmware qcn9100_firmware qcn5122_firmware qcn7605 qcm6490 qcn6024 qca6174a wcd9335 wcn3999 ipq8078a_firmware sd7c_firmware sd670_firmware qca6595_firmware qrb5165n ipq6010 qca6421_firmware qca6438_firmware qrb5165 qca6574au_firmware sd662 qrb5165n_firmware qca2065_firmware ipq4029_firmware qam8295p_firmware sa8295p qcs610_firmware qcn9074 qcm2290_firmware qcn9274_firmware qcn5054 wcd9380 ar8031 qca6438 qcm4290 qcn6102_firmware qcn5052 sd660_firmware sd730_firmware mdm9628_firmware qca2064_firmware sd695 ipq8064 sd_8cx_gen3 ipq8069_firmware wcd9375_firmware sa6150p_firmware sd888 ar8035_firmware ipq8070_firmware qca0000 wcn6856_firmware qcn6132_firmware aqt1000 qcn5152_firmware qcs603 qcn6100_firmware ar8035 qcn6112 wcn6855_firmware qca8072_firmware qsm8250 qca6420 wcd9360 sd780g_firmware qca9898_firmware sdx65_firmware qcm2290 qcn9011 qcn5124_firmware sa515m sd845_firmware qca6428_firmware mdm9206 sa515m_firmware sdxr1_firmware qcn5164_firmware qca9994_firmware mdm9607_firmware wcn3990 ipq6028_firmware qcn6023 sd690_5g qca8081_firmware qca9984 qca1062_firmware wsa8835 wcn3998 ar8031_firmware csr8811_firmware qca8337_firmware qca9898 qca8075_firmware qcn5164 qcs2290 qrb5165m mdm9206_firmware qcn6122_firmware qca9990_firmware qca1064_firmware sd7c ipq8072a_firmware sd678 wcd9385 qca6574au wcn7850_firmware qcn6112_firmware sdx65 wcd9385_firmware ipq4029 wcn6750_firmware qcs410_firmware qcn9000_firmware ipq8173_firmware sd680 qcn9001_firmware sd888_5g qcn9070_firmware pmp8074 qca8075 pmp8074_firmware sd678_firmware wcn3999_firmware qcs6125 sm4375_firmware ipq6010_firmware qca9984_firmware qca6574 qsm8350 wcn3991 sd_8cx csra6640_firmware qca6574_firmware sa415m_firmware ipq8076a_firmware ar9380 sdx20m sa8195p sd675_firmware qca6574a_firmware qca9888 qca6694 sd665 sa8155_firmware wsa8830_firmware sd888_5g_firmware ipq8174_firmware qca8337 sd_8_gen1_5g_firmware sm6250_firmware qcn6100 sdxr2_5g qcn6132 wcd9341 wcn3980_firmware qcs2290_firmware wcn6851_firmware ipq4018_firmware wcd9326 sd680_firmware qca8084 sa6155p_firmware qcn9074_firmware qca9992_firmware sa4150p qcn5154 qca2065 qca9377_firmware sw5100_firmware ipq8173 qcn9001 qcn9072 sd780g qca6564au_firmware csrb31024 qca6426 qca6335_firmware sdx55m_firmware qcs6125_firmware qcn9100 sd690_5g_firmware qcn5022 sm8475 ipq8072_firmware sa8155 ipq6000 sd765 qcs605_firmware wcd9330_firmware ipq5010 wcn3988_firmware qcn9022_firmware qcs4290 qca6554a ipq5028 sa4155p qcn7606 sw5100p sd_8cx_gen2 sd845 qcs410 qca6428 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.26%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing start bss request from upper layer, out of bounds read occurs if ssid length is greater than maximum.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.64%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 08:24

Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware mdm9206 sd_652 sd_425_firmware qca9379_firmware qca6174a sd_665 sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sd_210_firmware sd_600 sd_652_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware qcs405 sd_625 qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.19%

||

7 Day CHG~0.00%

Published-20 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Buffer overread may occur due to non-null terminated strings while processing vsprintf in camera jpeg driver.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.09% / 26.74%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 15:07

Buffer over-read in WLAN

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.

Vendor-Qualcomm Technologies, Inc.

Product-sd_8cx_gen3_firmware qca2066 qca8337 ar9380 qca6431_firmware ipq8173_firmware sdx65 qcn5124 qca4024_firmware ipq8078a ipq5028_firmware qca6595au_firmware qca2062 qca6554a_firmware qam8295p ipq8076a qca8386_firmware qcn6024_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware qcn9002 qca9986 ipq8070_firmware ipq8065 ipq8078a_firmware qrb5165_firmware ipq5028 qrb5165m_firmware ipq6010 ipq8068 qcn6132 qca6436 wcn6851 wcn7851_firmware qca9888_firmware qcn6122 ipq8068_firmware qca2066_firmware qca6431 qca6696_firmware sd870_firmware ipq9008_firmware qcn5154_firmware sxr2150p_firmware wsa8830_firmware qca9992_firmware sd865_5g_firmware wcn7850_firmware sm8475 qcn5022_firmware sa8295p_firmware wcn6750_firmware ipq5018_firmware qca9985_firmware qca8337_firmware wcd9380_firmware ipq8072a qca9980_firmware ipq8076a_firmware ipq8078 qca6564au qca8084 ipq8173 qcn9001_firmware sdx55m_firmware ipq9008 wcn6856_firmware qcn5164 qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcn5024 qca8072_firmware qca9985 qcn9012_firmware qcn5052_firmware qcn9274_firmware wcn3980 ipq6018_firmware wsa8815 wcn6850 pmp8074_firmware qcn6112 qca9986_firmware qca6426_firmware qca9984 ipq6028 ipq8064 qcn9024 pmp8074 ipq9574_firmware wcn3980_firmware sdx55m ipq8064_firmware sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware ipq8070 qca9994 qca9980 qcn9024_firmware ipq8174_firmware sd870 wcn6855 ipq6018 qca9886_firmware qca6595_firmware qca6391_firmware qca2064 qca4024 sd780g_firmware wcd9370_firmware sd888_firmware qcn5021_firmware sxr2150p ar8035_firmware qcn5024_firmware wsa8830 qcn9070 qca8082 qcn9072 qca8386 qca9992 qca6390_firmware qca2064_firmware ipq6000 wcd9370 qcn5152_firmware qca6426 qca6584au_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq5018 wcd9385_firmware sdxr2_5g_firmware ipq8074a qca2065 qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware qcn9011_firmware qca8082_firmware qcn5122_firmware qca6595au qcn6023_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sd778g qcn9274 ipq8174 qca9990 qcn9001 qcs6490 sdxr2_5g qcn5052 wcn7851 qcn6112_firmware qcn9074 qca6421 qca8085 sd778g_firmware wsa8810_firmware qca8081 ipq8071a qcn6023 ipq8071a_firmware wcd9385 qca8085_firmware qca2065_firmware qcs6490_firmware sd_8cx_gen3 ar8035 csr8811 qca6390 wcd9375 qcn9100_firmware ipq5010_firmware ipq8074a_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qca8072 qcn9000 sd780g qca6554a sd865_5g qca6595 ar9380_firmware qcn9012 sd888 qcn6122_firmware ipq8065_firmware wsa8835 sd888_5g qcn5154 qca8075_firmware qca6574a wcn6855_firmware qca9889 sm7325p qcn6132_firmware qcn9003_firmware qca9888 qca9994_firmware wcn6750 qcn9003 ipq8070a_firmware ipq8076_firmware qca6574_firmware qca9886 sm7325p_firmware ipq8076 qca6574a_firmware qcn5021 qcn5152 qrb5165m sm7315 qca6391 qcn6102 qcn9100 sdx65_firmware qcm6490_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn9011 qca6574au qca9889_firmware ipq9574 qcn5122 wsa8810 wcn6856 qcn5022 ipq6010_firmware wcn6740 qca6696 qca8075 qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware ipq6000_firmware qcn9074_firmware Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.78%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:35

Updated-05 Aug, 2024 | 08:24

Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.78%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 08:24

While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware sd_632 mdm9640_firmware sd_820a msm8996au_firmware sd_439 sdx20 sd_415 sd_616 sd_425 sd_429 sdm439 mdm9607_firmware sd_615 mdm9650 sd_650_firmware sd_625 qca6574au sd_615_firmware msm8909w_firmware mdm9607 msm8996au qm215 sd_210 sd_650 sd_820_firmware sd_820 sd_450_firmware sd_439_firmware sd_820a_firmware mdm9150 sd_429_firmware mdm9206 sd_652 qca6174a_firmware qca6174a qca9379_firmware sd_212_firmware sd_425_firmware sd_625_firmware sd_450 sdm439_firmware qca9377 mdm9206_firmware qm215_firmware sd_632_firmware mdm9650_firmware sdx20_firmware sd_205 qca6574au_firmware sd_210_firmware sd_415_firmware sd_652_firmware msm8909w qca9379 sd_616_firmware sd_205_firmware sd_212 mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.26%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a buffer over-read can occur In the WMA NDP event handler functions due to lack of validation of input value event_info which is received from FW.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.08% / 23.86%

||

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 14:15

Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware wcd9340_firmware wcn3615_firmware qca6595au_firmware qca6310 sd429_firmware qualcomm215_firmware apq8009 qca6174a_firmware qca6564a_firmware qcs405_firmware sdx55 mdm9607 qca6696 mdm9628 wcn3610_firmware sa6155 wcn7850 qca6564au qca6426_firmware sdx24 wcn3660b wcn3660b_firmware sa6150p sd205_firmware qrb5165m_firmware sa6145p_firmware wcd9341_firmware sdx24_firmware wsa8830 wcn6856 wsa8815 qca6390 wcn3680b sa6155p sa8150p_firmware sa8145p_firmware wcd9330 sw5100 wcn3620_firmware wcn7851_firmware wcd9340 wcn6850 sa8145p sdx55_firmware wcn3950 qca6584au_firmware qca6320_firmware sdxr2_5g_firmware qca6174a wcd9335 sd835 wcn3680b_firmware qca6574a qrb5165n sd865_5g_firmware qrb5165 apq8017_firmware qca6574au_firmware mdm9250_firmware qrb5165n_firmware sdm429w_firmware sd835_firmware qcs610_firmware qcn9074 qcc5100 wcd9380 ar8031 qca6335 qcs405 wcn3680 csra6640 mdm9628_firmware sd660_firmware sa6150p_firmware qca6584au wcn6856_firmware sd870 qca9367 qca6390_firmware wcn6855_firmware qcn9011_firmware sa6155_firmware wcn6855 wcn3680_firmware mdm9250 qcn9011 sd870_firmware mdm9206 sd845_firmware sdxr1_firmware qca6595au wcd9370 mdm9607_firmware wcn3990 wcn3980 sd429 wsa8835 sdx55m wcn3998 wcn6850_firmware ar8031_firmware wsa8810_firmware qca8337_firmware wsa8815_firmware sa8150p mdm9206_firmware qrb5165m wcd9385 qca6436 qca6574au wcn7850_firmware wcd9385_firmware qcs410_firmware sa8155p sdxr1 wsa8810 sd210 sw5100p_firmware qcn9012 wsa8835_firmware wcd9335_firmware apq8009_firmware qca6391 qca6574 csra6620 wcn3998_firmware csra6640_firmware qca6574_firmware wcn6851 qca6564a wcd9370_firmware sa8195p qca6574a_firmware qcc5100_firmware sa8155_firmware sd210_firmware wsa8830_firmware qca6320 qca8337 sd_8_gen1_5g_firmware sdxr2_5g wcd9341 wcn3980_firmware sd660 wcn6851_firmware sdm429w wcd9326 qcs610 qualcomm215 sa6155p_firmware qca6391_firmware qcn9074_firmware sd205 wcd9326_firmware qcn9012_firmware sa8155p_firmware csra6620_firmware sa6145p wcn3610 qca9377_firmware qrb5165_firmware apq8017 sw5100_firmware qca6696_firmware sd865_5g qca6564au_firmware qca6426 qca9377 qca6335_firmware sdx55m_firmware sm8475 wcn3950_firmware wcn3988 wcn3990_firmware wcn3615 sa8155 wcn3620 qcs605_firmware qcs605 wcd9330_firmware wcn3988_firmware wcn7851 qca6310_firmware sw5100p qca6436_firmware sa8195p_firmware sd845 qca9367_firmware qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.03% / 7.61%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Buffer overread in Linux Sensors

Information disclosure due to buffer overread in Linux sensors

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.7||MEDIUM

EPSS-0.06% / 17.65%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in wma_ndp_confirm_event_handler and wma_ndp_indication_event_handler, ndp_cfg len and num_ndp_app_info is from fw. If they are not checked, it may cause buffer over-read once the value is too large.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 29.10%

||

7 Day CHG~0.00%

Published-20 Sep, 2018 | 13:00

Updated-05 Aug, 2024 | 08:01

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, while parsing FLAC file with corrupted picture block, a buffer over-read can occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.01% / 2.10%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.15% / 36.79%

||

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 04:42

Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware wsa8830 sd678 mdm9640_firmware sm6250p_firmware wcn3998_firmware qcs2290_firmware qca8337 mdm9628_firmware mdm9650 sdx65 csra6620 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware apq8009_firmware sa6155 msm8917 sd690_5g sd730_firmware wcd9370 csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware csra6640_firmware qca6426 sd632 wcn3990_firmware qrb5165n_firmware qca9377 wcn3998 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 mdm9628 sd720g wcd9326_firmware wcn3615_firmware sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd662 sd460_firmware qca4020 sa8155 qca6584 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au qca8081_firmware sa6155_firmware sdx12_firmware msm8909w sm7250p_firmware apq8009w_firmware qca6420 qca6436_firmware apq8053_firmware qrb5165n wcn3610_firmware sm7450_firmware qca6564au_firmware sa6155p_firmware qca9367_firmware pm8937 wcn3999 wcn7851 sd429 qrb5165_firmware qrb5165m_firmware sdxr2_5g qca9367 sa8155_firmware sd662_firmware mdm9607_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware sd429_firmware sm6250 sa8195p apq8017_firmware wsa8810_firmware qualcomm215_firmware sd765g sd765_firmware qca4020_firmware qca6436 wcd9326 sa6155p wcd9335 wcn6851 qca8081 wcn7851_firmware msm8937 qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 wcn3660_firmware pm8937_firmware qca6696_firmware sd750g sd870_firmware ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware sdx20_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wcn3620 wsa8815_firmware wsa8835_firmware sa8195p_firmware sm7450 apq8017 sm8475 qca6564a wcn6750_firmware sd450 wcn3610 mdm9640 qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd865_5g wcn3615 qca6564au sdx55m_firmware wcn6856_firmware wcd9375_firmware msm8909w_firmware qca6574 sd632_firmware wsa8835 wcd9380 sd888_5g sm6250p wcn3999_firmware qualcomm215 qca6574a sd690_5g_firmware wcn6855_firmware qca9379_firmware qca6174a qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware wcn6750 qca6574_firmware qcs605 sd855 sm4125_firmware wcn6850 wsa8815 wcn3910 qca6584_firmware msm8937_firmware mdm9650_firmware qca6175a sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware qrb5165m wcn3980_firmware apq8009 qca6391 sd460 sd730 sdx55m sm8475_firmware aqt1000_firmware msm8953 sdx65_firmware mdm9626 sd678_firmware ar8031_firmware qcm4290 wcn3680_firmware wsa8832_firmware sdx20 qrb5165 wcn6851_firmware mdm9626_firmware qca6574au sa8155p_firmware mdm9607 qca6564a_firmware apq8009w wcd9341_firmware qcm4290_firmware sd870 wsa8810 wcn6855 wsa8832 wcn6856 sa6145p wcn3680b sd768g apq8096au ar8031 qcs405_firmware qca6696 qca6391_firmware wcd9370_firmware sdw2500 sdx55 apq8053 apq8096au_firmware csra6640 sa8155p sd675 sd439 sm7250p sd720g_firmware sdx12 wcn3660 sm8475p_firmware qca9379 qca6175a_firmware ar8035_firmware qcm2290 sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.08% / 24.38%

||

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 04:49

Buffer Over-read in MODEM

Information disclosure in modem due to buffer over read in dns client due to missing length check

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware wsa8830 ssg2125p sxr2230p_firmware wcd9330 wcn6856_firmware csra6620 qca4024_firmware wsa8835 sxr1230p_firmware wcd9380 csra6620_firmware ssg2125p_firmware ssg2115p mdm9206 csra6640_firmware wcn6855_firmware sxr1230p wcd9335_firmware wcn3980 wcd9385_firmware mdm9205 mdm9206_firmware wsa8815 sxr2230p qca4020 wcn7850 wcn3999_firmware wcn3980_firmware wcd9330_firmware mdm9207 wcd9306 mdm8207 wcn3999 wcn7851 ar8031_firmware wsa8832_firmware qca4004_firmware mdm9607_firmware qcs405 qts110 mdm9607 wcd9306_firmware wsa8810_firmware wsa8810 wsa8832 qca4020_firmware wcn6855 wcd9335 wcn7851_firmware wcn6856 wcd9385 ar8031 qcs405_firmware mdm8207_firmware mdm9205_firmware qca4024 mdm9207_firmware qca4004 csra6640 wsa8830_firmware wsa8815_firmware wsa8835_firmware wcn7850_firmware ssg2115p_firmware qts110_firmware Snapdragon wcd9380_firmware sxr2230p_firmware ar8031_firmware wsa8832_firmware wcn6856_firmware qca4004_firmware mdm9607_firmware qca4024_firmware wcd9306_firmware sxr1230p_firmware wsa8810_firmware qca4020_firmware ssg2125p_firmware csra6620_firmware wcn7851_firmware wcn6855_firmware csra6640_firmware qcs405_firmware wcd9335_firmware mdm8207_firmware mdm9205_firmware wcd9385_firmware mdm9206_firmware mdm9207_firmware wsa8830_firmware wsa8815_firmware wsa8835_firmware wcn7850_firmware ssg2115p_firmware wcn3999_firmware wcn3980_firmware wcd9330_firmware qts110_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.07% / 21.25%

||

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 04:49

Buffer Over-read in MODEM

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet

Vendor-Qualcomm Technologies, Inc.

Product-wcd9306 wcd9380_firmware wsa8830 snapdragon_wear_1300 ssg2125p sxr2230p_firmware mdm8207 snapdragon_wear_1200 wcd9330 snapdragon_x5_lte_modem_firmware wsa8832_firmware wcn785x-5 wcn685x-5 qca4004_firmware wcn785x-1_firmware qts110 wcd9306_firmware sxr1230p_firmware wsa8835 wcd9380 wsa8832 snapdragon_wear_1100_firmware snapdragon_ar2_gen_1_platform_firmware snapdragon_wear_1200_firmware ssg2125p_firmware ssg2115p snapdragon_ar2_gen_1_platform mdm9206 wcn685x-5_firmware wcn685x-1_firmware sxr1230p wcd9385 wcn685x-1 snapdragon_x5_lte_modem mdm8207_firmware snapdragon_wear_1100 mdm9205_firmware wcd9385_firmware mdm9205 mdm9206_firmware mdm9207_firmware qca4004 sxr2230p wsa8830_firmware wsa8835_firmware ssg2115p_firmware snapdragon_wear_1300_firmware wcn785x-5_firmware wcd9330_firmware wcn785x-1 mdm9207 qts110_firmware Snapdragon 9205_lte_modem_firmware wcd9380_firmware snapdragon_wear_1300_platform_firmware 9207_lte_modem_firmware sxr2230p_firmware snapdragon_x5_lte_modem_firmware mdm8207_firmware wsa8832_firmware wcd9385_firmware fastconnect_6900_firmware qca4004_firmware snapdragon_1200_wearable_platform_firmware snapdragon_1100_wearable_platform_firmware 9206_lte_modem_firmware wsa8830_firmware wcd9306_firmware sxr1230p_firmware wsa8835_firmware fastconnect_7800_firmware ssg2115p_firmware snapdragon_ar2_gen_1_platform_firmware wcd9330_firmware ssg2125p_firmware qts110_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.04% / 12.76%

||

7 Day CHG~0.00%

Published-12 Oct, 2022 | 00:00

Updated-15 May, 2025 | 19:15

Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qcs605 wcn6855_firmware qca6391_firmware sd888_5g_firmware sd850 qca6574_firmware sdx50m_firmware ar8035 qca6430 sa8155 wcn7850_firmware sdx24_firmware wcd9375_firmware sd855_firmware sa8540p_firmware wcn3990 qca6174a_firmware wsa8835_firmware qca6696_firmware qca8337 sa6145p qca6431_firmware wcn6855 qam8295p wsa8830 qca6696 sm8475 sdx65 qsm8350_firmware qca6420 sa6155p wcn3998_firmware sdx55 qca6390_firmware sm7250p ar8035_firmware sd765 sdx55_firmware qca6574a_firmware wcd9385_firmware qca8081_firmware wcn3950_firmware qcs605_firmware sdx24 sdxr2_5g_firmware qca6436_firmware wsa8815_firmware sd678 sdx57m_firmware sa6145p_firmware sa9000p qca6430_firmware qca6595 sd675_firmware wcd9370_firmware aqt1000 qca6391 wcn3991_firmware sa8295p qca6174a sa8295p_firmware wsa8835 sm7250p_firmware wcn6851_firmware sd768g_firmware wcn3980_firmware qca6574a qca6564a sdx65_firmware qca6595au wcn6851 wcn6850_firmware sd865_5g wcd9340_firmware sd865_5g_firmware qca6564au_firmware qca9377_firmware wsa8830_firmware wcd9341 sd845_firmware wcn3991 wcn3998 wcn6856_firmware qca6574au wcn3990_firmware sdx55m wcd9341_firmware qcs603_firmware sd670 qca6420_firmware qca6564au sd_675 sa9000p_firmware wsa8815 sd850_firmware sd_8cx_gen3 wcd9326 wcn6856 qca6564a_firmware wcn7850 sd_8_gen1_5g_firmware qca6426 wcd9380 sa8155p_firmware qsm8350 sd_8cx_firmware qca8337_firmware sd870_firmware wcd9326_firmware sd_8cx_gen3_firmware qca6574 sd_8cx_gen2_firmware sd870 sd765_firmware wcn7851_firmware sdx57m qca6426_firmware sd845 qam8295p_firmware sd_675_firmware sd768g wsa8810 qca6335 wcn6850 sd855 sd_8cx_gen2 qca6310_firmware wcd9380_firmware sd678_firmware sd888_5g sa8155_firmware sd670_firmware qca6335_firmware qca6390 qca6421 sa6155 qca6595au_firmware wsa8810_firmware qca6310 sdx55m_firmware wcd9375 wcd9370 sa8150p_firmware wcn7851 wcd9340 qca6436 qca9377 wcd9385 sa6155p_firmware sd_8cx sa8150p sd765g wcn3950 qca6595_firmware qcs603 sdxr2_5g sa6155_firmware aqt1000_firmware sdx50m qca6431 sd675 wcn3980 qca8081 qca6574au_firmware sa8155p sa8540p qca6421_firmware sd765g_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.08% / 24.38%

||

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 04:49

Buffer Over-read in MODEM

Information disclosure in modem due to buffer over-red while performing checksum of packet received

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.08% / 24.38%

||

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 04:49

Buffer Over-read in MODEM

Information disclosure in modem due to buffer over-read while processing response from DNS server

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware wsa8830 ssg2125p sxr2230p_firmware wcd9330 wcn6856_firmware csra6620 qca4024_firmware wsa8835 sxr1230p_firmware wcd9380 csra6620_firmware ssg2125p_firmware ssg2115p mdm9206 csra6640_firmware wcn6855_firmware sxr1230p wcd9335_firmware wcn3980 wcn3998 wcd9385_firmware mdm9205 mdm9206_firmware wsa8815 sxr2230p qca4020 wcn7850 wcn3999_firmware wcn3998_firmware wcn3980_firmware wcd9330_firmware mdm9207 wcd9306 mdm8207 wcn3999 wcn7851 ar8031_firmware wsa8832_firmware qca4004_firmware mdm9607_firmware qcs405 qts110 mdm9607 wcd9306_firmware wsa8810_firmware wsa8810 wsa8832 qca4020_firmware wcn6855 wcd9335 wcn7851_firmware wcn6856 wcd9385 ar8031 qcs405_firmware mdm8207_firmware mdm9205_firmware qca4024 mdm9207_firmware qca4004 csra6640 wsa8830_firmware wsa8815_firmware wsa8835_firmware wcn7850_firmware ssg2115p_firmware qts110_firmware Snapdragon wcd9380_firmware sxr2230p_firmware ar8031_firmware wsa8832_firmware wcn6856_firmware qca4004_firmware mdm9607_firmware qca4024_firmware wcd9306_firmware sxr1230p_firmware wsa8810_firmware qca4020_firmware ssg2125p_firmware csra6620_firmware wcn7851_firmware wcn6855_firmware csra6640_firmware qcs405_firmware wcd9335_firmware mdm8207_firmware mdm9205_firmware wcd9385_firmware mdm9206_firmware mdm9207_firmware wsa8830_firmware wsa8815_firmware wsa8835_firmware wcn7850_firmware ssg2115p_firmware wcn3999_firmware wcn3998_firmware wcn3980_firmware wcd9330_firmware qts110_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.05% / 14.58%

||

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware wcn3615_firmware qca6595au_firmware sd730 qcn7606_firmware sd_675_firmware sd855_firmware sd662_firmware sdx50m qcs6490 sdx55 sd460_firmware qca6696 wcn3610_firmware wcn7850 qca6426_firmware qcm4290_firmware wcn3660b sd720g sm4375 wcn3660b_firmware sa6150p sd460 sd665_firmware sa6145p_firmware sd626 wsa8830 sd768g sm4125 wcn6740_firmware sd626_firmware qca6390 sda429w_firmware sdx50m_firmware wcn3680b sa6155p wcn6856 sa8150p_firmware sd480 qca6430 sa8145p_firmware sw5100 sd855 wcn7851_firmware qcs6490_firmware wcn6850 sa8145p sdx55_firmware wcn3950 sxr2150p_firmware sdxr2_5g_firmware qcm6490 sa4155p_firmware wcd9335 sd765g_firmware wcn3680b_firmware qca6574a sd865_5g_firmware qcm6125_firmware qca6574au_firmware sd662 qam8295p_firmware sa8295p wcn6750 qcs610_firmware sa8295p_firmware sm7325p sd695_firmware qcm2290_firmware qcc5100 wcd9380 sd_675 qcm4290 sd625_firmware sd695 sd660_firmware sd730_firmware sd480_firmware qca6430_firmware sa6150p_firmware sd888 wcd9375_firmware sm7315_firmware sm7325p_firmware wcn6856_firmware sd870 aqt1000 qca6390_firmware wcn6855_firmware qca6420 sd780g_firmware wcn6855 qcm2290 wcn3910 sd870_firmware qcm6490_firmware sm6250 qca6595au wcd9370 sd888_firmware qcs4290_firmware wcn3990 wcn3980 sm4125_firmware sd439_firmware sd690_5g sm7315 sd765_firmware sd720g_firmware sd765g wsa8815 wsa8835 sdx55m qam8295p wcn3998 wcn6850_firmware wsa8810_firmware wsa8815_firmware sd625 wcn3991_firmware sa8150p qcs2290 wcn6740 wcd9385 qca6436 sd678 qca6574au wcn7850_firmware wcd9385_firmware wcn6750_firmware qcs410_firmware sa8155p wsa8810 sd680 sd888_5g sw5100p_firmware aqt1000_firmware wsa8835_firmware sd678_firmware wcd9335_firmware qcs6125 sm4375_firmware sm7250p_firmware qca6391 wcn3991 qca6574 wcn3998_firmware qca6574_firmware wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware sa8195p qca6574a_firmware sd439 sd665 sd675_firmware sda429w qcc5100_firmware sd888_5g_firmware wsa8830_firmware qcm6125 sm6250_firmware sd_8_gen1_5g_firmware sdxr2_5g wcd9341 wcn3980_firmware qcs2290_firmware sd660 wcn6851_firmware sa4150p_firmware wcd9326 qcs610 sa6155p_firmware sd680_firmware qca6391_firmware sa4150p wcd9326_firmware sm7250p sa8155p_firmware sa6145p wcn3610 wcn3910_firmware sw5100_firmware wcd9375 sd750g_firmware qca6696_firmware sxr2150p sd865_5g sd780g qca6426 sdx55m_firmware sd690_5g_firmware qcs6125_firmware sm8475 sd778g wcn3950_firmware wcn3988 wcn3990_firmware wcn3615 sd750g sd765 sd768g_firmware wcn3988_firmware wcn7851 qcs4290 sa4155p qcn7606 sw5100p qca6436_firmware sa8195p_firmware wcd9341_firmware qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read