CVE-2020-11132 | ByteOS Network

Vulnerability Details :

CVE-2020-11132

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-12 Nov, 2020 | 10:00

Updated At-04 Aug, 2024 | 11:21

u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096AU, APQ8098, MDM8207, MDM9150, MDM9205, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8998, QCM4290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA670, SDA845, SDA855, SDM1000, SDM640, SDM670, SDM710, SDM712, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:12 Nov, 2020 | 10:00

Updated At:04 Aug, 2024 | 11:21

▼CVE Numbering Authority (CNA)

u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096AU, APQ8098, MDM8207, MDM9150, MDM9205, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8998, QCM4290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA670, SDA845, SDA855, SDM1000, SDM640, SDM670, SDM710, SDM712, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Versions

Affected

APQ8009, APQ8096AU, APQ8098, MDM8207, MDM9150, MDM9205, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8998, QCM4290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA670, SDA845, SDA855, SDM1000, SDM640, SDM670, SDM710, SDM712, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330

Problem Types

Type	CWE ID	Description
text	N/A	Buffer Over read Issue in Boot

Type: text

CWE ID: N/A

Description: Buffer Over read Issue in Boot

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:12 Nov, 2020 | 10:15

Updated At:19 Nov, 2020 | 18:21

u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096AU, APQ8098, MDM8207, MDM9150, MDM9205, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9650, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8998, QCM4290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA670, SDA845, SDA855, SDM1000, SDM640, SDM670, SDM710, SDM712, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR1120, SXR1130, SXR2130, SXR2130P, WCD9330

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Primary	2.0	3.6	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:P

Type: Primary

Version: 3.1

Base score: 7.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Type: Primary

Version: 2.0

Base score: 3.6

Base severity: LOW

Vector:

AV:L/AC:L/Au:N/C:P/I:N/A:P

CPE Matches

Qualcomm Technologies, Inc.

>>apq8009_firmware>>-

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8096au_firmware>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8098_firmware>>-

cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm8207_firmware>>-

cpe:2.3:o:qualcomm:mdm8207_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm8207:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9150_firmware>>-

cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9150:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9205_firmware>>-

cpe:2.3:o:qualcomm:mdm9205_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9205:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9206_firmware>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9207_firmware>>-

cpe:2.3:o:qualcomm:mdm9207_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9207:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9250_firmware>>-

cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9250:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9607_firmware>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9628_firmware>>-

cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9628:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>mdm9650_firmware>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8108_firmware>>-

cpe:2.3:o:qualcomm:msm8108_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8108:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8208_firmware>>-

cpe:2.3:o:qualcomm:msm8208_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8208:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8209_firmware>>-

cpe:2.3:o:qualcomm:msm8209_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8209:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8608_firmware>>-

cpe:2.3:o:qualcomm:msm8608_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8608:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8905_firmware>>-

cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8905:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8909_firmware>>-

cpe:2.3:o:qualcomm:msm8909_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8909:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8998_firmware>>-

cpe:2.3:o:qualcomm:msm8998_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:msm8998:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcm4290_firmware>>-

cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcm4290:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs405_firmware>>-

cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs405:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs410_firmware>>-

cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs410:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs4290_firmware>>-

cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs4290:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs603_firmware>>-

cpe:2.3:o:qualcomm:qcs603_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs603:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs605_firmware>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-125	Primary	nvd@nist.gov

CWE ID: CWE-125

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/november-2020-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

879Records found

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.15% / 63.23%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDX20, SDX55, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sdm636_firmware msm8996au_firmware sdx20 sdm660 sdm630 mdm9607_firmware mdm9650 qca6574au mdm9607 msm8996au apq8017_firmware apq8009_firmware qcn7605_firmware qcs605_firmware mdm9207c_firmware mdm9206 mdm9207c qca6174a_firmware qca6174a qca9379_firmware apq8096au sdm636 sda845_firmware qca9377 sdm630_firmware sda660_firmware qcn7605 mdm9206_firmware qcs605 sdx55 apq8053 apq8096au_firmware mdm9650_firmware sdx20_firmware qca6574au_firmware sda660 sdx55_firmware sxr1130_firmware apq8017 sxr1130 apq8009 qca9379 apq8053_firmware sdm660_firmware sda845 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.90% / 55.65%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 22:24

Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8939, MSM8953, MSM8996, MSM8996AU, Nicobar, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-msm891_firmware sdm632_firmware msm8996au_firmware sdm450_firmware sdm632 sdm439 sdm429 sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware sxr2130 qcs605_firmware mdm9206 sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar msm8953 sdm450 apq8064 sdm636_firmware apq8098_firmware sdx20 sdm660 sdm630 mdm9607_firmware sm8250_firmware qcs405 qm215 mdm9607 apq8017_firmware msm8939_firmware mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware msm8953_firmware apq8053 apq8096au_firmware sm6150_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware msm891 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.98% / 58.36%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS domain/ PRAU accept/while logging DL message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.91% / 55.93%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.98% / 58.36%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.71% / 49.51%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 845 / SD 850, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 qca9377_firmware sd_850 mdm9150_firmware mdm9640_firmware sd_820a msm8996au_firmware sdx20 sd_670_firmware sd_425 sd_430_firmware mdm9607_firmware sd_435 mdm9650 sd_710_firmware sd_625 qca6574au sd_210 mdm9607 msm8996au sd_820_firmware sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware mdm9150 mdm9206 qca6174a_firmware qca6174a qca9379_firmware sd_212_firmware sd_425_firmware sd_850_firmware sd_625_firmware sd_450 qca9377 sd_712_firmware mdm9615 sd_845 mdm9206_firmware sd_427 sd_430 sd_670 sd_435_firmware mdm9615_firmware mdm9650_firmware sd_710 sdx20_firmware sd_600_firmware sd_205 qca6574au_firmware sd_210_firmware sd_600 qca9379 sd_205_firmware sd_212 mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 9.10%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 430, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9150_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdx24 mdm9650 sd_636 msm8996au sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 qca9379_firmware qca6174a sd_425_firmware sd_665 sdx24_firmware sd_625_firmware qca9377 sd_845 mdm9206_firmware qcs605 mdm9640 sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sda660 sd_210_firmware sd_600 sd_665_firmware sd_205_firmware sd_212 sd_712 sd_855 sd_730_firmware sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_710_firmware sdm630 sd_625 qca6574au sd_210 mdm9607 sd_636_firmware mdm9150 qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_670 sd_710 sdx20_firmware sd_600_firmware sd_205 qca9379 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.43% / 35.18%

||

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-02 Aug, 2024 | 15:32

Buffer over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing t2lm buffers.

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware qam8255p_firmware wsa8830 qcn9070 sxr2230p_firmware qca8337 qam8650p qfw7124 ipq8173_firmware wcn785x-5 qam8775p qcf8001 qcn6224_firmware qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 wsa8840 immersive_home_318_platform_firmware ipq8078a ipq5028_firmware qca6595au_firmware ipq6000 ssg2115p qcn5152_firmware qca0000_firmware qca6584au_firmware wcn685x-1 qcn9000_firmware snapdragon_8_gen_2_mobile_platform ipq9554 qca6554a_firmware wcd9385_firmware immersive_home_216_platform ipq8076a immersive_home_316_platform immersive_home_316_platform_firmware qca8386_firmware qcn6024_firmware qca8084_firmware immersive_home_318_platform ipq8074a qcn5124_firmware qca8082_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware sdx55_firmware qca6595au qca8081_firmware qcn6023_firmware qfw7114 wsa8845h_firmware ipq5010 qca6564au_firmware qca6584au snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware ipq8078a_firmware qcn9274 ipq8174 ipq5028 wsa8840_firmware qca6698aq qcn5052 qca0000 qcf8001_firmware ipq6010 sc8380xp_firmware qcn6112_firmware qcn9074 qca8085 sdx65m wcd9340 qcn6132 qcn6224 qcn9013 wsa8845h snapdragon_ar2_gen_1_platform_firmware snapdragon_x75_5g_modem-rf_system wcd9395_firmware qca8081 qcf8000 qca6698aq_firmware ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware wcn685x-1_firmware immersive_home_3210_platform qca8085_firmware qam8775p_firmware qca9888_firmware qcn6122 wcd9385 qca6696_firmware ipq9008_firmware ipq9570 qcn5154_firmware qca6797aq ar8035 csr8811 wcd9390 qcc710_firmware qcn9100_firmware wsa8830_firmware ipq5010_firmware ipq8074a_firmware wsa8835_firmware qcn5022_firmware immersive_home_216_platform_firmware snapdragon_8_gen_2_mobile_platform_firmware wcn785x-1 qca8337_firmware wcd9380_firmware ssg2125p qcn9000 ipq8072a qcf8000_firmware qca6554a ipq8076a_firmware qca6595 ipq8078 qca6564au qca8084 ipq8173 qcm8550 ipq9008 qcn9012 qcn5164 immersive_home_326_platform_firmware qcn6122_firmware qca6574 sxr1230p_firmware wsa8835 snapdragon_8\+_gen_2_mobile_platform_firmware csr8811_firmware qcn6274 wcd9380 ipq9554_firmware qcn5154 qca8075_firmware ssg2125p_firmware qca6574a qcn5024 wcn685x-5_firmware qca9889 qcn6132_firmware sxr1230p qca9888 qcn9012_firmware qcn5052_firmware qcn9274_firmware qcc2076_firmware ipq8070a_firmware qfw7114_firmware wsa8845 qcc2073_firmware ipq6018_firmware ipq8076_firmware qca6574_firmware wcd9340_firmware qcn6112 sxr2230p ipq8076 wsa8845_firmware qca6574a_firmware qcn5152 ipq6028 sc8380xp qcn9024 ipq9574_firmware wcn785x-5_firmware immersive_home_3210_platform_firmware qcn9100 qcn6274_firmware snapdragon_x65_5g_modem-rf_system ipq8078_firmware ipq9570_firmware qcn9070_firmware snapdragon_x75_5g_modem-rf_system_firmware wsa8832_firmware wcn685x-5 ipq6028_firmware ipq8072a_firmware qca6797aq_firmware wcn785x-1_firmware qca6574au qca9889_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware snapdragon_8\+_gen_2_mobile_platform wsa8832 ipq5332_firmware ipq5332 sm8550p immersive_home_326_platform snapdragon_ar2_gen_1_platform ipq6018 qcn5022 qcn9013_firmware qam8650p_firmware qcc710 ipq6010_firmware immersive_home_214_platform qca6595_firmware wcd9395 qca6696 immersive_home_214_platform_firmware qca4024 sm8550p_firmware sdx55 qca8075 qcn9022_firmware wcd9390_firmware qcn6024 qcn9022 qcc2076 ipq8070a qcn9072_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware qfw7124_firmware qam8255p qcc2073 ar8035_firmware Snapdragon qcn5024_firmware qam8255p_firmware qca8337_firmware wcd9380_firmware sxr2230p_firmware qcf8000_firmware ipq8076a_firmware ipq8173_firmware ar8035_firmware qcn6224_firmware qca4024_firmware immersive_home_326_platform_firmware qcn6122_firmware sxr1230p_firmware immersive_home_318_platform_firmware csr8811_firmware ipq5028_firmware qca6595au_firmware ipq9554_firmware qca8075_firmware ssg2125p_firmware qcn5152_firmware qca0000_firmware qcn6132_firmware qca6584au_firmware qcn9000_firmware qcn9012_firmware qcn5052_firmware qcn9274_firmware qcc2076_firmware ipq8070a_firmware qca6554a_firmware qfw7114_firmware wcd9385_firmware qcn6024_firmware qca8386_firmware qcc2073_firmware immersive_home_316_platform_firmware ipq6018_firmware ipq8076_firmware qca6574_firmware wcd9340_firmware qca8084_firmware qcn5124_firmware wsa8845_firmware qca8082_firmware qca6574a_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware sdx55_firmware wsa8845h_firmware qca8081_firmware qcn6023_firmware ipq9574_firmware immersive_home_3210_platform_firmware qca6564au_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware ipq8078a_firmware qcn6274_firmware wsa8840_firmware ipq8078_firmware ipq9570_firmware qcn9070_firmware snapdragon_x75_5g_modem-rf_system_firmware qcf8001_firmware wsa8832_firmware fastconnect_6900_firmware ipq6028_firmware sc8380xp_firmware ipq8072a_firmware qcn6112_firmware qca6797aq_firmware qca9889_firmware qcn9024_firmware ipq8174_firmware fastconnect_7800_firmware snapdragon_ar2_gen_1_platform_firmware wcd9395_firmware ipq5332_firmware qca6698aq_firmware sdx65m_firmware qcn9013_firmware ipq8071a_firmware qam8650p_firmware qca8085_firmware qam8775p_firmware qca9888_firmware ipq6010_firmware qca6696_firmware qca6595_firmware ipq9008_firmware qcn5154_firmware immersive_home_214_platform_firmware sm8550p_firmware qcc710_firmware qcn9100_firmware qcn9022_firmware wsa8830_firmware wcd9390_firmware ipq5010_firmware ipq8074a_firmware qcn9072_firmware wsa8835_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware qcn5022_firmware qfw7124_firmware immersive_home_216_platform_firmware snapdragon_8_gen_2_mobile_platform_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.80%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, MSM8909W, MSM8917, MSM8953, Nicobar, QCS405, QCS605, QM215, SA6155P, SDA845, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sa6155p_firmware msm8953 sdm450 sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 sm8250_firmware sdm429 qcs405 sm7150_firmware sdm710 msm8909w_firmware qm215 sm6150 sdm710_firmware apq8009 sm7150 apq8009_firmware msm8917 sa6155p sdm670 sxr2130 qcs605_firmware sdm670_firmware sm8150_firmware sdx24_firmware sxr2130_firmware sdm439_firmware qcs405_firmware sda845_firmware qm215_firmware qcs605 sdx55 msm8953_firmware apq8053 sm6150_firmware sm8250 msm8917_firmware sdm429_firmware sm8150 sxr1130_firmware sdx55_firmware nicobar_firmware msm8909w sxr1130 apq8053_firmware sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.92% / 56.42%

||

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:44

Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA6574AU, QCS405, QCS605, QM215, Rennell, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-kamorta_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 apq8098 mdm9206_firmware qcs605 msm8937_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 qca6574au sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sm8250 kamorta apq8017 msm8996 saipan sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-476

NULL Pointer Dereference

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.19% / 8.80%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Possibility of out of bound access in debug queue, if packet size field is corrupted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCN7605, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware apq8098 qcn7605 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p msm8937 mdm9207c_firmware mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.10% / 1.01%

||

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-10 Jan, 2025 | 17:48

Buffer Over-read in Audio

Transient DOS while processing channel information for speaker protection v2 module in ADSP.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_865_5g_mobile qam8650p sa8145p_firmware snapdragon_xr2_5g sa8770p_firmware sa8650p_firmware fastconnect_7800 sa8770p snapdragon_x75_5g_modem-rf_firmware qam8255p sa6150p qca6436_firmware sa8775p srv1m_firmware snapdragon_x75_5g_modem-rf wcd9380 snapdragon_870_5g_mobile sa8155p qamsrv1m wsa8815 qca6698aq_firmware sa8150p sa9000p sa8295p_firmware fastconnect_6900_firmware qam8650p_firmware srv1h_firmware wsa8810 qca6426 sa8195p sa8195p_firmware fastconnect_6900 qfw7124 qamsrv1h_firmware snapdragon_865_5g_mobile_firmware snapdragon_x55_5g_modem-rf qcc710 qca6391 qca6696 qcc710_firmware qca8337_firmware snapdragon_865\+_5g_mobile_firmware qam8255p_firmware qamsrv1m_firmware sa8650p wcd9340_firmware wsa8810_firmware sd865_5g sa9000p_firmware qca6574au qam8775p sa8775p_firmware sa6145p qca6391_firmware wcd9380_firmware fastconnect_6800_firmware qca6574au_firmware qca8337 qca6698aq sa8255p_firmware sd865_5g_firmware sa8295p sa6155p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qamsrv1h qca8081_firmware sa8150p_firmware qam8775p_firmware qca6426_firmware sa6155p qca8081 qca6584au sxr2130_firmware ar8035_firmware qcn6224_firmware snapdragon_x55_5g_modem-rf_firmware qca6436 snapdragon_870_5g_mobile_firmware qam8295p sa6150p_firmware wcd9340 fastconnect_6800 qcn6274 qca6584au_firmware qcn6224 sa8255p sxr2130 sa6145p_firmware wsa8815_firmware qam8295p_firmware sa8145p snapdragon_xr2_5g_firmware snapdragon_865\+_5g_mobile snapdragon_auto_5g_modem-rf_gen_2 srv1m fastconnect_7800_firmware srv1h sa8155p_firmware qca6696_firmware qfw7124_firmware qfw7114 qfw7114_firmware qcn6274_firmware ar8035 Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.21% / 10.98%

||

7 Day CHG~0.00%

Published-09 Sep, 2020 | 06:25

Updated-04 Aug, 2024 | 07:44

Information can leak into userspace due to improper transfer of data from kernel to userspace in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in Nicobar, QCS405, Saipan, SC8180X, SDX55, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sm8150_firmware sxr2130_firmware qcs405_firmware sm8250_firmware sdx55 sc8180x_firmware qcs405 saipan_firmware sm8250 sm8150 sdx55_firmware nicobar_firmware saipan sxr2130 sc8180x nicobar Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.88% / 55.00%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI Realloc cmd in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.72% / 49.82%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware qca9379_firmware qca6174a sd_665 sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 mdm9206_firmware sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sda660 sd_210_firmware sd_415_firmware sd_652_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_616 sd_425 sdm660 sdm630 mdm9607_firmware sd_615 sd_710_firmware qcs405 sd_625 qca6574au sd_210 mdm9607 sd_636_firmware sd_439_firmware mdm9150 sd_429_firmware qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_670 sdx20_firmware sd_710 sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.88% / 55.00%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Buffer Over-read when UE is trying to process the message received form the network without zero termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9206, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w msm8909_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware sdx20 qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 sc8180x_firmware sdm710 qm215 mdm9607 sdm710_firmware msm8937 msm8905 sm8150_firmware msm8909 sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware msm8917_firmware sm8150 sdx20_firmware sdm850 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.36% / 28.12%

||

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN Host Cmn

Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware immersive_home_214 qcs410_firmware wcn6650 ipq9574 qcn9000_firmware qca6595 qcn9022 qcs610_firmware ipq6028_firmware wcd9370 qca8081_firmware qca6696 qam8620p_firmware wcn7880_firmware wcd9340_firmware sa8530p wcd9341_firmware ipq5028_firmware wcd9395_firmware sxr2330p_firmware qcn6024 wcn7881_firmware wcn6450 qcc2073_firmware qcc710_firmware ipq8076 fastconnect_6700 qcn6422_firmware ipq6018_firmware qcn6023 qcn5124_firmware wsa8832_firmware qca8337 wcd9395 ipq9048 ipq6000 qca6574au_firmware ipq8078a snapdragon_x72_5g_modem-rf ipq8078a_firmware qam8295p wcd9341 ipq5312 qca6574au wcd9390 sa8620p_firmware wsa8810_firmware wsa8845h_firmware sa9000p_firmware srv1h qcn9100_firmware qcn5122 qcs9100 qca6554a qcs5430 wcn7860 qcn6024_firmware qcm5430 qcm5430_firmware video_collaboration_vc1_platform_firmware sa8770p qcn9000 qcc710 qcn6132_firmware sa8540p qca6777aq fastconnect_6900 qcn6402 qcn6432 video_collaboration_vc1_platform immersive_home_326_firmware ipq5332_firmware sa7255p sm8635 qcn5052 qfw7114 wcd9385_firmware ipq9574_firmware qam8255p_firmware ipq8074a_firmware ipq8076a qcn5164 snapdragon_x65_5g_modem-rf qca6787aq wsa8845 sa6155p qcn9160 qca6564au_firmware csr8811_firmware wsa8810 qca8075 qam8650p sa9000p qca8085 srv1h_firmware qca6595au sxr2250p_firmware sa6155p_firmware wsa8840 srv1m_firmware qcs8550_firmware snapdragon_8_gen_2_mobile_firmware qfw7124_firmware sm8750p qcn9012 ipq8070a_firmware qcn9070 qcf8001 qca8084 sm8635p snapdragon_8_gen_2_mobile sdx65m wcd9370_firmware qcc2076 sa7255p_firmware qca6574a snapdragon_x72_5g_modem-rf_firmware ipq9570 snapdragon_8\+_gen_2_mobile sa8195p wcd9340 snapdragon_auto_5g_modem-rf_gen_2 qcm6490 ipq5302 sa8540p_firmware qcn6122_firmware qcn5154_firmware ipq9048_firmware sm8550p_firmware sxr2250p qcm8550 wcn3988 qcn5122_firmware qcn9274 qcn9024 ipq8076a_firmware sa8775p qca6574 ipq9570_firmware sxr2230p_firmware qca6777aq_firmware sa8775p_firmware qamsrv1h qcn6412_firmware qcn9024_firmware wsa8845h qca8082 qcs410 sa8155p_firmware sa8155p wsa8830 ipq5312_firmware sm8550p qcf8000_firmware qcn9074_firmware ipq8174 immersive_home_318_firmware qcn6122 sa8255p_firmware sm7675_firmware qcc2073 ipq8174_firmware ar8035 sm7635_firmware ipq8072a qamsrv1m_firmware sa8650p_firmware immersive_home_216_firmware wcn6450_firmware immersive_home_316 qcf8000sfp_firmware srv1l_firmware qcs9100_firmware qcn6224 ipq8071a qcn6112 qca6698aq qxm8083 wcn3950_firmware sa7775p_firmware sm7635 sa8530p_firmware wcd9378 sm8635p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware qcn6023_firmware qcn5164_firmware snapdragon_x75_5g_modem-rf_firmware ipq8078 snapdragon_8_gen_3_mobile qcs6490 ipq9554_firmware qcn9072 wsa8830_firmware qcn6224_firmware qca6678aq_firmware qca8386_firmware wsa8845_firmware wsa8832 qca8082_firmware wcd9378_firmware qcc2076_firmware srv1l immersive_home_216 sm7675p srv1m qca6678aq qcn6432_firmware ar8035_firmware qcn5022_firmware wcn7860_firmware qca4024_firmware qca0000_firmware ipq9008 ipq9554 qca6564au ipq9008_firmware qcn9074 ipq5300_firmware wsa8815_firmware sa8195p_firmware qca8337_firmware qca9888 ipq5332 ipq8173 qcm6490_firmware ipq8072a_firmware ipq6010_firmware wcn3950 qcn6112_firmware sm8750 qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware ipq5028 qca8085_firmware qcf8001_firmware qcn9070_firmware sa8295p_firmware qcn9022_firmware ipq5010_firmware qcn6132 ipq6018 qcn9160_firmware qca6584au qcn6274_firmware wcn6755_firmware wcn6650_firmware snapdragon_8_gen_3_mobile_firmware qfw7114_firmware qca4024 qca6595_firmware fastconnect_7800_firmware qcn6422 immersive_home_214_firmware ipq5302_firmware qxm8083_firmware ipq5300 ipq8070a sm8635_firmware fastconnect_6900_firmware wcd9380 qam8255p sxr2230p wcn7880 sxr2330p qca8075_firmware wcn6755 immersive_home_3210 qcf8000 qcn5052_firmware wcn7881 sm6650 ipq6010 sdx65m_firmware video_collaboration_vc3_platform qca6688aq qam8295p_firmware qcn6402_firmware qca6698aq_firmware wcd9385 qca8084_firmware sa8255p wcd9390_firmware qcn5024 sdx55_firmware immersive_home_326 ipq8071a_firmware sm8750_firmware qca6554a_firmware ipq6028 snapdragon_x65_5g_modem-rf_firmware qcn9100 qamsrv1m wcn7861_firmware wcn7861 qam8650p_firmware qcs6490_firmware sm6650_firmware ipq8076_firmware qam8620p wcn3980_firmware qca6584au_firmware qcn5152_firmware qcn6274 qfw7124 wsa8835 wsa8840_firmware qca6595au_firmware qca0000 qca6696_firmware wcd9380_firmware qca6574_firmware qca8081 wsa8815 qcn5124 qam8775p qca6797aq qcn5152 snapdragon_x75_5g_modem-rf qcn6412 sa8620p qca6574a_firmware sdx55 qcn9072_firmware qca9888_firmware ipq8074a immersive_home_3210_firmware qca9889 qcn5024_firmware qca6787aq_firmware wcd9375_firmware qca8386 sa7775p immersive_home_318 ipq5010 qcn9274_firmware ipq8173_firmware qcs5430_firmware qcn9012_firmware sa8770p_firmware sa8295p qcs8550 ipq6000_firmware fastconnect_7800 sa8650p qam8775p_firmware sm8750p_firmware wcd9375 snapdragon_8\+_gen_2_mobile_firmware ipq8078_firmware qca6688aq_firmware qca9889_firmware wcn3988_firmware immersive_home_316_firmware qamsrv1h_firmware sm7675 qcn5154 wsa8835_firmware csr8811 qcn5022 wcn3980 sm7675p_firmware qcf8000sfp qcs610 Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.92% / 56.22%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 07:37

Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length of variable received. in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180, SC8180X, SDM850

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sc7180_firmware msm8998 sdm850 sc7180 qca6390_firmware msm8998_firmware qca6390 sc8180x sc8180x_firmware Snapdragon Compute, Snapdragon Connectivity

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.47% / 37.84%

||

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN Firmware

Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

Vendor-Qualcomm Technologies, Inc.

Product-sd865_5g qca6595 ipq6028_firmware immersive_home_214_platform qca8081_firmware qcn9001 wcd9340_firmware ipq5028_firmware wcd9395_firmware qcn6024 ar9380 snapdragon_sc8180xp-aa_firmware qcc710_firmware qca6426 fastconnect_6700 snapdragon_768g_5g_mobile_platform_firmware sa4150p qcn5124_firmware wsa8832_firmware qca8337 qca6426_firmware wcd9395 qcn7605 qca6574au_firmware qcn7606_firmware ipq8078a_firmware qam8295p wcd9341 wsa8810_firmware wsa8845h_firmware sa9000p_firmware qca2064_firmware fastconnect_6800_firmware qcs5430 snapdragon_4_gen_2_mobile_platform_firmware qcm5430_firmware sa4155p snapdragon_4_gen_1_mobile_platform_firmware snapdragon_778g\+_5g_mobile_platform sa8770p qcn9000 qca2062_firmware snapdragon_480\+_5g_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware qsm8250_firmware qsm8350_firmware snapdragon_765g_5g_mobile_platform wcd9385_firmware qca6421 ipq8074a_firmware ipq8076a wcd9360 snapdragon_ar2_gen_1_platform_firmware snapdragon_8_gen_1_mobile_platform_firmware immersive_home_3210_platform_firmware sa6155p snapdragon_sc8180x-aa qca6564au_firmware snapdragon_768g_5g_mobile_platform qca8075 qam8650p video_collaboration_vc5_platform_firmware sa9000p sa6155p_firmware snapdragon_870_5g_mobile_platform_firmware qca6436_firmware snapdragon_8\+_gen_1_mobile_platform ipq8070a_firmware qcn5021_firmware qcn9070 snapdragon_8_gen_2_mobile_platform snapdragon_7c\+_gen_3_compute_firmware qca8084 qca6420 wcn3910 csrb31024 snapdragon_x55_5g_modem-rf_system_firmware qcc2076 snapdragon_660_mobile_platform qca6574a wcd9340 qcs8250_firmware qcm2290 snapdragon_auto_5g_modem-rf_gen_2 qcn6122_firmware qcn5154_firmware sm8550p_firmware qcm8550 wcn3988 qcn5122_firmware qcn9024 pmp8074 qca6574 snapdragon_x75_5g_modem-rf_system qca2066_firmware qca8082 qcm2290_firmware sa8155p qca8072_firmware wsa8830 sm8550p qcf8000_firmware sa6145p snapdragon_8\+_gen_1_mobile_platform_firmware qcn6122 sa8255p_firmware qcc2073 qrb5165m_firmware qca9985 ipq8071a qcn6112 wcn3950_firmware qrb5165n snapdragon_8_gen_1_mobile_platform qca1062_firmware fastconnect_6200 sm7325p_firmware wcd9360_firmware snapdragon_sc8280xp-ab_firmware smart_audio_400_platform video_collaboration_vc3_platform_firmware qcn6023_firmware qcn5164_firmware immersive_home_326_platform_firmware snapdragon_750g_5g_mobile_platform qcn9072 qcn6224_firmware qca6431 sd660_firmware qca8082_firmware sxr2130_firmware ar8035_firmware qrb5165m snapdragon_888_5g_mobile_platform sc8380xp qca1064 snapdragon_w5\+_gen_1_wearable_platform_firmware qca4024_firmware qca0000_firmware sd888_firmware qca9992_firmware qca9990 ipq9008_firmware qcn9074 wsa8815_firmware qca8337_firmware ipq8173 sm7250p_firmware wcn3999 ipq6010_firmware wcn3950 snapdragon_x65_5g_modem-rf_system_firmware qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_765g_5g_mobile_platform_firmware ipq5028 qca9986 qcf8001_firmware qcn9070_firmware snapdragon_780g_5g_mobile_platform sa8295p_firmware sa4155p_firmware qca9984 ipq5010_firmware qcn9022_firmware sm7250p csrb31024_firmware ipq6018 sa8155 sd888 snapdragon_4_gen_2_mobile_platform sc8380xp_firmware ipq8065 fastconnect_6800 qcs7230 qcn9001_firmware snapdragon_782g_mobile_platform_firmware fastconnect_6900_firmware snapdragon_xr2_5g_platform_firmware snapdragon_sc8280xp-ab qca8075_firmware qcf8000 snapdragon_865\+_5g_mobile_platform qca2065_firmware snapdragon_sc8180x-ad_firmware sdx65m_firmware video_collaboration_vc3_platform snapdragon_sc8180xp-ad_firmware snapdragon_865_5g_mobile_platform_firmware qca9980_firmware qca9985_firmware qca6431_firmware qca6698aq_firmware qcs2290 qcn7606 qcs2290_firmware wcn3999_firmware qca8084_firmware qcn7605_firmware sa8255p qcs7230_firmware wcd9390_firmware immersive_home_318_platform_firmware qcn5024 snapdragon_690_5g_mobile_platform qca6430 snapdragon_auto_5g_modem-rf ssg2125p csra6640_firmware immersive_home_326_platform qam8650p_firmware qcn9013_firmware video_collaboration_vc5_platform qca2062 qca6420_firmware qcs6490_firmware snapdragon_x65_5g_modem-rf_system ipq8076_firmware wcd9335_firmware wcn3980_firmware qrb5165n_firmware qca6436 snapdragon_sc8180x-aa_firmware wsa8835 wsa8840_firmware qca6391_firmware ipq8068 qcs4290_firmware snapdragon_865_5g_mobile_platform csra6620 qca8081 sd660 wsa8815 qam8775p qca9377 qcm4290_firmware qca9888_firmware qca9889 qca1062 qcn5024_firmware qcn9002_firmware ipq5010 qcn9274_firmware smart_audio_400_platform_firmware qcs5430_firmware snapdragon_778g_5g_mobile_platform_firmware snapdragon_480_5g_mobile_platform csra6620_firmware qcs8550 ipq8068_firmware qam8775p_firmware sd865_5g_firmware pmp8074_firmware wcd9375 qca9889_firmware sa8145p immersive_home_316_platform snapdragon_888\+_5g_mobile_platform_firmware qca2066 csr8811 qcm8550_firmware sa6150p_firmware sw5100p ipq9574 qcn9000_firmware qcn6102_firmware qcn9022 wcd9335 wcd9370 qca8072 qca6696 wcd9341_firmware qcn9003_firmware qcc2073_firmware ipq8076 wcn6740_firmware qca1064_firmware ipq6018_firmware qca9984_firmware qcn6023 immersive_home_216_platform qca9994_firmware ipq6000 snapdragon_auto_4g_modem ipq8078a qca6574au wcd9390 csra6640 qcn9100_firmware qcn5122 qca6554a qcn6024_firmware qca9886_firmware qcm5430 snapdragon_695_5g_mobile_platform ssg2115p qcc710 qcn6132_firmware qcn5054 315_5g_iot_modem_firmware fastconnect_6900 ipq5332_firmware qcn5052 qca9980 qfw7114 315_5g_iot_modem ipq9574_firmware snapdragon_x55_5g_modem-rf_system qam8255p_firmware ipq8064 sa8155_firmware qcn5164 snapdragon_888_5g_mobile_platform_firmware qcs4490 snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 qcn6100_firmware qca6421_firmware csr8811_firmware snapdragon_sc8180xp-aa wsa8810 qcn5021 qca8085 qsm8250 snapdragon_8\+_gen_2_mobile_platform qcn6100 qca6595au sm7315_firmware wsa8840 qcs8550_firmware qca9986_firmware qfw7124_firmware qcn9012 snapdragon_sc8180x-ad qcs4490_firmware qcf8001 wcn3910_firmware sdx65m wcd9370_firmware snapdragon_750g_5g_mobile_platform_firmware ipq9570 sa8195p qcm6490 immersive_home_316_platform_firmware immersive_home_3210_platform qcn9274 ipq8076a_firmware sa8775p ipq9570_firmware sxr2230p_firmware ar9380_firmware qca6430_firmware snapdragon_870_5g_mobile_platform qcn9011 sa8775p_firmware qcn9024_firmware wsa8845h sa6150p sa8155p_firmware snapdragon_sc8180x-ac qcn9074_firmware ipq8174 sc8180x\+sdx55_firmware snapdragon_765_5g_mobile_platform flight_rb5_5g_platform_firmware ipq8174_firmware ar8035 ipq8072a sa6155 qca2065 robotics_rb5_platform qcn6224 sc8180x\+sdx55 qca6698aq ssg2125p_firmware sa8145p_firmware snapdragon_888\+_5g_mobile_platform sa8150p_firmware snapdragon_w5\+_gen_1_wearable_platform fastconnect_6700_firmware wcn3990 qcn9002 ipq8078 qcs6490 qcs8250 ipq9554_firmware fastconnect_6200_firmware ar8031_firmware snapdragon_sc8180xp-ac wsa8830_firmware qca6678aq_firmware qca8386_firmware wsa8845_firmware wsa8832 snapdragon_auto_4g_modem_firmware qcc2076_firmware qca6678aq qcn5022_firmware qca9992 sa4150p_firmware ipq9008 ipq9554 qca6564au immersive_home_214_platform_firmware sa8195p_firmware qcm4290 qcn5054_firmware qca9888 ipq5332 qcn9013 ar8031 sg8275p_firmware qca9377_firmware qcm6490_firmware ipq8072a_firmware qcm4490_firmware flight_rb5_5g_platform snapdragon_xr2_5g_platform qcn6112_firmware snapdragon_7c\+_gen_3_compute snapdragon_xr2\+_gen_1_platform_firmware qca8085_firmware qca9886 qcn6132 qcn6102 snapdragon_780g_5g_mobile_platform_firmware qca6584au qcn6274_firmware qcn9011_firmware sw5100_firmware snapdragon_765_5g_mobile_platform_firmware wcn6740 qfw7114_firmware qca4024 qca6595_firmware fastconnect_7800_firmware immersive_home_216_platform_firmware ipq8070a wcd9380 sa6145p_firmware qam8255p sa6155_firmware sxr2230p qca9990_firmware snapdragon_4_gen_1_mobile_platform sa8150p qcn9003 snapdragon_778g_5g_mobile_platform qcn5052_firmware snapdragon_auto_5g_modem-rf_firmware qca2064 sxr1230p ipq6010 sw5100 aqt1000 qam8295p_firmware wcn3990_firmware sm7315 wcd9385 qca9994 qsm8350 qcs4290 sxr1230p_firmware snapdragon_778g\+_5g_mobile_platform_firmware snapdragon_865\+_5g_mobile_platform_firmware sg8275p sdx55_firmware ipq8071a_firmware qca6554a_firmware snapdragon_sc8180x-ac_firmware sxr2130 ipq6028 qcm4490 qcn9100 snapdragon_xr2\+_gen_1_platform sm7325p aqt1000_firmware qca6584au_firmware qcn5152_firmware qcn6274 snapdragon_480_5g_mobile_platform_firmware qfw7124 qca6595au_firmware qca0000 sw5100p_firmware snapdragon_sc8180xp-ac_firmware snapdragon_ar2_gen_1_platform snapdragon_782g_mobile_platform qca6696_firmware wcd9380_firmware qca6574_firmware sd_8_gen1_5g qcn5124 ipq8064_firmware qca6797aq qcn5152 ipq8065_firmware qca6574a_firmware sdx55 qcn9072_firmware snapdragon_480\+_5g_mobile_platform ipq8074a immersive_home_318_platform sd_8_gen1_5g_firmware wcd9375_firmware qca8386 qca6391 snapdragon_sc8180xp-ad ipq8173_firmware qcn9012_firmware sa8770p_firmware sa8295p snapdragon_8_gen_2_mobile_platform_firmware robotics_rb5_platform_firmware ipq6000_firmware fastconnect_7800 ipq8078_firmware wcn3988_firmware qcn5154 wsa8835_firmware ssg2115p_firmware qcn5022 snapdragon_660_mobile_platform_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn3980 snapdragon_690_5g_mobile_platform_firmware Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 1.53%

||

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:05

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in Trusted Execution Environment

Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware robotics_rb3 sd865_5g qca6595 wcd9370 qca8081_firmware snapdragon_670_mobile qca6696 wcd9340_firmware wcd9341_firmware wcd9395_firmware qcc710_firmware qca6426 wcn6740_firmware fastconnect_6700 snapdragon_780g_5g_mobile snapdragon_x50_5g_modem-rf_firmware snapdragon_782g_mobile_firmware wsa8832_firmware qca8337 qdu1110 qca6426_firmware wcd9395 sc8180xp-aaab qca6574au_firmware qam8295p wcd9341 qca6574au wcd9390 snapdragon_888\+_5g_mobile_firmware sa8620p_firmware wsa8810_firmware wsa8845h_firmware snapdragon_778g_5g_mobile_firmware sa9000p_firmware sc8180xp-acaf srv1h snapdragon_850_mobile_compute fastconnect_6800_firmware qcs5430 qcm5430 qcm5430_firmware sa8770p snapdragon_678_mobile_firmware ssg2115p qcc710 snapdragon_xr2_5g_firmware sa8540p qsm8350_firmware fastconnect_6900 qru1032_firmware qep8111 sa7255p qfw7114 wcd9385_firmware qca6421 qca6310 qam8255p_firmware sa8155_firmware qca6335 snapdragon_x65_5g_modem-rf wsa8845 sa6155p qca6421_firmware sc8180x-ad qca6564au_firmware wsa8810 qam8650p video_collaboration_vc5_platform_firmware sa9000p qdu1000_firmware srv1h_firmware snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile sxr2250p_firmware sm7315_firmware qdu1010 wcd9326_firmware sa6155p_firmware snapdragon_845_mobile_firmware wsa8840 srv1m_firmware snapdragon_x35_5g_modem-rf_firmware snapdragon_782g_mobile qdu1210_firmware snapdragon_x55_5g_modem-rf qfw7124_firmware qca6436_firmware qcn9012 snapdragon_x55_5g_modem-rf_firmware snapdragon_7c\+_gen_3_compute_firmware qca6420 wcd9370_firmware qdu1110_firmware qdu1000 sa7255p_firmware qca6574a qca6174a wcd9340 qcs8250_firmware qdu1210 snapdragon_auto_5g_modem-rf_gen_2 qca6335_firmware qcm6490 sa8540p_firmware sxr2250p snapdragon_765_5g_mobile_firmware vision_intelligence_300_firmware sa8775p qca6574 sxr2230p_firmware sd675_firmware snapdragon_855_mobile_firmware qca6430_firmware qcn9011 sa8775p_firmware qamsrv1h sdx57m wsa8845h wcd9326 sa8155p_firmware qca6564a sa8155p snapdragon_765g_5g_mobile_firmware wsa8830 sa6145p snapdragon_768g_5g_mobile_firmware sa8255p_firmware ar8035 qamsrv1m_firmware sa6155 qrb5165m_firmware sa8650p_firmware qcn6224 snapdragon_865\+_5g_mobile_firmware qca6698aq wcn3950_firmware ssg2125p_firmware qrb5165n fastconnect_6200 sd670 sm7325p_firmware sc8180x-acaf_firmware qdx1011 sa8150p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 robotics_rb3_firmware snapdragon_x75_5g_modem-rf_firmware sd670_firmware snapdragon_8_gen_3_mobile snapdragon_855_mobile qcs6490 qcs8250 sc8180xp-acaf_firmware snapdragon_778g_5g_mobile fastconnect_6200_firmware wsa8830_firmware qcn6224_firmware qca6431 qca6678aq_firmware wsa8845_firmware wsa8832 sdx57m_firmware sxr2130_firmware srv1m qca6678aq snapdragon_860_mobile_firmware snapdragon_x35_5g_modem-rf ar8035_firmware sc8180xp-aaab_firmware snapdragon_778g\+_5g_mobile qrb5165m sc8380xp sd888_firmware qca6564au sc8180xp-ad sc8280xp-abbb wsa8815_firmware qca8337_firmware qca9377_firmware qcm6490_firmware sm7250p_firmware qru1032 vision_intelligence_400_firmware wcn3950 flight_rb5_5g snapdragon_870_5g_mobile_firmware qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_7c\+_gen_3_compute snapdragon_778g\+_5g_mobile_firmware sa8295p_firmware snapdragon_870_5g_mobile sd_675_firmware snapdragon_678_mobile sm7250p sc8180x-acaf sa8155 sd_8cx_firmware sc8180x-ad_firmware qca6584au sd888 qcn6274_firmware qcn9011_firmware qru1062_firmware snapdragon_850_mobile_compute_firmware snapdragon_675_mobile_firmware wcn6740 snapdragon_768g_5g_mobile sc8380xp_firmware snapdragon_780g_5g_mobile_firmware qru1062 qca6310_firmware snapdragon_845_mobile snapdragon_8_gen_3_mobile_firmware fastconnect_6800 qfw7114_firmware qcs7230 qca6595_firmware fastconnect_7800_firmware snapdragon_675_mobile snapdragon_865_5g_mobile_firmware fastconnect_6900_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p sa6155_firmware sxr2230p snapdragon_xr2_5g sa8150p snapdragon_x24_lte_modem sc8180x-aaab sxr1230p sc8180x-aaab_firmware video_collaboration_vc3_platform aqt1000 qam8295p_firmware sd855 qca6431_firmware wcn3990_firmware sm7315 qca6698aq_firmware qca6564a_firmware wcd9385 snapdragon_888\+_5g_mobile qsm8350 snapdragon_8_gen_1_mobile sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware snapdragon_865\+_5g_mobile qep8111_firmware qca6430 snapdragon_855\+_mobile snapdragon_765_5g_mobile qdx1011_firmware snapdragon_860_mobile sc8180xp-ad_firmware sdx55_firmware flight_rb5_5g_firmware ssg2125p qru1052 sxr2130 snapdragon_x65_5g_modem-rf_firmware qamsrv1m robotics_rb5 qca6174a_firmware sm7325p snapdragon_x50_5g_modem-rf qam8650p_firmware video_collaboration_vc5_platform snapdragon_670_mobile_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sd855_firmware wcn3980_firmware qrb5165n_firmware qca6436 qca6584au_firmware qcn6274 snapdragon_x24_lte_modem_firmware wsa8835 qca6391_firmware wsa8840_firmware qfw7124 qca6595au_firmware qdu1010_firmware qca6696_firmware wcd9380_firmware qca6574_firmware qca8081 wsa8815 sd_8_gen1_5g qam8775p qca9377 snapdragon_ar2_gen_1_firmware qca6797aq snapdragon_x75_5g_modem-rf sa8620p qca6574a_firmware sdx55 snapdragon_865_5g_mobile snapdragon_855\+_mobile_firmware sd675 sd_8_gen1_5g_firmware wcd9375_firmware qca6391 qcn9012_firmware qcs5430_firmware qru1052_firmware sa8770p_firmware sa8295p sc8280xp-abbb_firmware fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware wcd9375 vision_intelligence_300 snapdragon_ar2_gen_1 snapdragon_765g_5g_mobile qamsrv1h_firmware sd_675 sd_8cx vision_intelligence_400 ssg2115p_firmware wsa8835_firmware wcn3980 qdx1010 snapdragon_8_gen_1_mobile_firmware Snapdragon qam8255p_firmware qca9377_firmware snapdragon_850_mobile_compute_platform_firmware sxr2230p_firmware snapdragon_x24_lte_modem_firmware qca6431_firmware flight_rb5_5g_platform_firmware qcn6224_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware sd_675_firmware sd675_firmware qcm5430_firmware qca6584au_firmware qep8111_firmware qrb5165n_firmware wcn3990_firmware qualcomm_video_collaboration_vc3_platform_firmware sd_8cx_firmware wcd9385_firmware wcd9326_firmware qamsrv1h_firmware sd_8_gen1_5g_firmware qsm8350_firmware qam8295p_firmware qcn9011_firmware sa9000p_firmware sm7315_firmware qca6574au_firmware sdx55_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wsa8845h_firmware sm7250p_firmware qca6436_firmware qca6564au_firmware sa8620p_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qca6678aq_firmware sa8775p_firmware qrb5165m_firmware wsa8840_firmware sa8155_firmware robotics_rb3_platform_firmware sc8380xp_firmware vision_intelligence_300_platform_firmware qru1062_firmware sa6145p_firmware fastconnect_6700_firmware wsa8810_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware qdu1000_firmware qca6698aq_firmware qca6174a_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware qru1052_firmware snapdragon_855_mobile_platform_firmware qcc710_firmware vision_intelligence_400_platform_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware snapdragon_780g_5g_mobile_platform_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sa8295p_firmware sxr2250p_firmware snapdragon_675_mobile_platform_firmware robotics_rb5_platform_firmware qca8337_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware qcs7230_firmware qdu1010_firmware snapdragon_670_mobile_platform_firmware sd670_firmware sxr1230p_firmware qdu1110_firmware sa8540p_firmware ssg2125p_firmware qca6310_firmware qca6430_firmware qcn9012_firmware qfw7114_firmware qca6335_firmware qca6574_firmware wcd9340_firmware sm7325p_firmware sdx57m_firmware qru1032_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware qca6426_firmware qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware snapdragon_x35_5g_modem-rf_system_firmware snapdragon_845_mobile_platform_firmware qcn6274_firmware qcm6490_firmware sa8650p_firmware wsa8832_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware srv1h_firmware qca6797aq_firmware sa8155p_firmware qdx1011_firmware qca6564a_firmware sa7255p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qdx1010_firmware snapdragon_8_gen_1_mobile_platform_firmware qamsrv1m_firmware srv1m_firmware qam8650p_firmware qca6595_firmware qcs5430_firmware qca6391_firmware wcd9370_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware ssg2115p_firmware qfw7124_firmware qdu1210_firmware ar8035_firmware

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.32% / 24.64%

||

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-02 Aug, 2024 | 15:32

Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware qca2066 sa6150p_firmware ipq4028_firmware sc8180x-ab_firmware qca8337 ar9380 ipq8173_firmware qca6431_firmware wcd9360_firmware qcn5124 qca4024_firmware wcn3950_firmware snapdragon_8_gen_1 sc8180x\+sdx55 ipq8078a ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 qca2062 snapdragon_x55_5g snapdragon_xr2\+_gen_1 sc8180xp-ad qca6554a_firmware qam8295p wcn3950 qcn6024_firmware ipq8076a sd_8_gen1_5g_firmware qsm8350_firmware qsm8350 snapdragon_x65_5g_firmware sm7315_firmware snapdragon_778g\+_5g qca6428 snapdragon_x55_5g_firmware qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware sa6155_firmware qca6420 wcd9360 snapdragon_xr2_5g qca6438_firmware qca9986 snapdragon_888_5g ipq8070_firmware sc8180xp-af ipq8065 ipq8078a_firmware qca6678aq_firmware qrb5165m_firmware ipq5028 ipq4029_firmware sc8180xp-aa_firmware qca6698aq sa8155_firmware ipq6010 ipq8068 qca6430 snapdragon_870_5g snapdragon_778g\+_5g_firmware wcd9340 qcn6132 qca6436 sa6155p qca6698aq_firmware snapdragon_865\+_5g_firmware qca9888_firmware qcn6122 wcd9341 sa8255p ipq8068_firmware qca6696_firmware qca2066_firmware qca6431 sc8180xp-ab_firmware qca1062 sc8180x-ab qcn5154_firmware qca6797aq sa8150p snapdragon_auto_4g_firmware wsa8830_firmware qca9992_firmware sd865_5g_firmware snapdragon_778g_5g qca6438 sa8195p_firmware fastconnect_6800_firmware qcn5022_firmware qcn7606_firmware snapdragon_865_5g_firmware qca9898 sa8295p_firmware ipq4028 qca6428_firmware qca9985_firmware immersive_home_216_firmware ipq4018_firmware qca8337_firmware ssg2125p wcd9380_firmware ipq8072a qca9980_firmware immersive_home_214_firmware ipq8076a_firmware ipq8078 qca6564au ipq8173 snapdragon_8_gen_1_firmware 315_5g qcn5164 snapdragon_ar2_gen_1 qca6574 csr8811_firmware wcd9380 sc8180xp-aa fastconnect_6700 qcn5054_firmware qcn5024 snapdragon_auto_5g sxr1230p sc8180xp-ad_firmware qca9985 qcn9012_firmware qca8072_firmware sc8180x-ac_firmware qca6430_firmware qcn5052_firmware wcn3980 qca6335_firmware ipq6018_firmware wcd9340_firmware wsa8815 pmp8074_firmware snapdragon_xr2\+_gen_1_firmware qca9986_firmware qcs8250 qca6426_firmware qca9984 ipq6028 ipq8064 sc8180x-ad pmp8074 qcn9024 wcn3980_firmware snapdragon_888_5g_firmware ipq8064_firmware sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware qcs4490_firmware qca6678aq ipq8078_firmware fastconnect_6900 qcn5054 fastconnect_6900_firmware ipq8070 immersive_home_318 qca9994 qca6797aq_firmware qca9980 qcn9024_firmware ipq8174_firmware snapdragon_8\+_gen_1_firmware wsa8832 sc8180xp-ac_firmware qcn7605_firmware qsm8250 sa6145p ipq6018 qca9886_firmware qcs4490 qca6595_firmware sa8145p sc8280xp-bb qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware qca2064 sdx55 sd888_firmware qcn5021_firmware sa8155p ssg2115p_firmware qam8255p ar8035_firmware qsm8250_firmware qcn7606 qcn5024_firmware wsa8830 qcn9070 sxr2230p_firmware sa8145p_firmware snapdragon_x65_5g qca1062_firmware immersive_home_318_firmware csrb31024 snapdragon_7c\+_gen_3_firmware qcn9072 sc8280xp-bb_firmware qca9992 qca6420_firmware ipq8069_firmware qca2064_firmware wcd9370 immersive_home_216 ssg2115p qcn5152_firmware qca6426 sc8280xp-ab qca6584au_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware wcd9385_firmware qcn7605 snapdragon_782g_firmware fastconnect_6200 snapdragon_780g_5g_firmware ipq8074a qca2065 qcn5124_firmware qam8295p_firmware qca1064 qcn9011_firmware flight_rb5_5g_firmware sa8155 qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware qca6436_firmware qrb5165n snapdragon_888\+_5g ipq5010 immersive_home_214 qca6564au_firmware qca6584au sa6155p_firmware qca6310 ipq8174 qca9990 qcs6490 qcn5052 qcs8550_firmware snapdragon_778g_5g_firmware qcn9074 sa6145p_firmware qca6421 fastconnect_6700_firmware sa8195p wsa8810_firmware robotics_rb5 sa8255p_firmware snapdragon_780g_5g qca8081 qcm4490 qcn6023 ipq8071a ipq8071a_firmware wcd9385 sxr2130_firmware snapdragon_auto_4g qcs6490_firmware qca2065_firmware immersive_home_316_firmware sc8180x-ac snapdragon_xr2_5g_firmware qca9898_firmware wcd9375 ar8035 aqt1000 csr8811 sc8180x\+sdx55_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware qcm6490 wsa8835_firmware sa4150p qca8072 snapdragon_865_5g qcn9000 qca6554a sd865_5g fastconnect_6800 qca6595 ar9380_firmware qcn9012 sd888 qcn6122_firmware ipq8065_firmware sxr1230p_firmware snapdragon_auto_5g_firmware wsa8835 sd_8_gen1_5g snapdragon_7c\+_gen_3 snapdragon_865\+_5g qcn5154 qca8075_firmware sc8180xp-ac sxr2130 ssg2125p_firmware ipq4018 qca6574a qca9889 sc8180x-af sm7325p qcn6132_firmware qca9888 qca6310_firmware ipq8074 qca9994_firmware snapdragon_8\+_gen_1 ipq8070a_firmware ipq8076_firmware qca6574_firmware qca9886 snapdragon_888\+_5g_firmware sm7325p_firmware sxr2230p ipq8076 snapdragon_782g 315_5g_firmware qca6574a_firmware fastconnect_6200_firmware ipq8069 qcn5021 qcn5152 qrb5165m sm7315 qca6391 sc8280xp-ab_firmware fastconnect_7800 aqt1000_firmware qcn9100 qcm4490_firmware snapdragon_ar2_gen_1_firmware csrb31024_firmware qcm6490_firmware wsa8832_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn9011 sc8180xp-af_firmware ipq8074_firmware immersive_home_316 qca9889_firmware qca6574au sa8155p_firmware qcn5122 qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware wsa8810 sc8180x-aa_firmware robotics_rb5_firmware qcn5022 sc8180x-aa ipq6010_firmware sc8180x-af_firmware qca1064_firmware wcn6740 qca6696 qcs8550 sc8180xp-ab sa6150p qca8075 qcn9022_firmware snapdragon_870_5g_firmware qcn6024 qcn9022 qca9990_firmware flight_rb5_5g ipq8070a sc8180x-ad_firmware qcn9072_firmware qcn9074_firmware ipq4029 Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.22% / 12.09%

||

7 Day CHG~0.00%

Published-04 May, 2026 | 16:43

Updated-06 May, 2026 | 18:03

Buffer Over-read in WLAN Firmware

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.

Vendor-Qualcomm Technologies, Inc.

Product-qxm1083 wsa8845h_firmware wcd9378 fastconnect_6700 wsa8850 qcn9070 sm8650q_firmware snapdragon_8_elite_gen_5_firmware snapdragon_x75_5g_modem-rf g3x_gen_2 qcn5054_firmware sa7775p_firmware x2000094_firmware lemans_au_lgit x1e80100_firmware sdx65m_firmware wcn7861_firmware networking_pro_810 qamsrv1m qcn5154 qamsrv1h sm8475p_firmware immersive_home_214_firmware qca6584au qcn6132_firmware lemansau_firmware qpa1083bd qxm1094_firmware qcn5024 xg101039_firmware sm6850 qca4024 snapdragon_8_elite_firmware qmp1000_firmware networking_pro_1200 qcs8550 cq8725s qca9888_firmware wcn3950_firmware sm8475p qcs4490_firmware immersive_home_216 sar1165p_firmware wcn7881_firmware fwa_gen_3_ultra snapdragon_8_elite ipq5010_firmware snapdragon_x72_5g_modem-rf_firmware qcn9002 qcn5022_firmware video_collaboration_vc3 x2000077 snapdragon_8\+_gen_2_mobile ipq5302 wsa8855c_firmware sm8845p_firmware palawan25_firmware qca6174a sm7550_firmware qcn5152 qam8255p_firmware snapdragon_4_gen_2_mobile_firmware immersive_home_318_firmware sm7425_firmware qln1083bd wcn7881 qca6797aq_firmware networking_pro_600_firmware wcd9370_firmware immersive_home_326_firmware qca6554a_firmware sm8735p qca6698aq qcm5430 qxm1096_firmware sd_8_gen1_5g qca6564au sc8380xp_firmware sm7425 qcn6132 qxm1095_firmware ar8035 ipq5302_firmware snapdragon_x62_5g_modem-rf fastconnect_6900 immersive_home_3210_firmware qca8081_firmware x2000086_firmware snapdragon_4_gen_2_mobile x2000086 qca6574a qca9889_firmware qcc2073_firmware sm7635p_firmware fastconnect_7800 cq7790 sm7525 qca6391 qca6584au_firmware qca6688aq_firmware sm6450p_firmware snapdragon_6_gen_4_mobile_firmware snapdragon_8\+_gen_1_mobile_firmware sxr2330p sm7525_firmware sm8425_firmware sa8620p_firmware qcn9011 fwa_gen_5_elite_firmware ipq6000_firmware qcf8001 qca6595 fastconnect_7800_firmware qcf8000 snapdragon_8_elite_gen_5 sm6650p_firmware qcn9022_firmware qcn9003 wcd9371_firmware kobuk qca6777aq snapdragon_auto_5g_modem-rf_gen_2 xg101002 x2000092_firmware ipq9554 networking_pro_400 qxm1093 wcd9375 networking_pro_800 sxr2350p_firmware snapdragon_7\+_gen_2_mobile ar8035_firmware qcn9002_firmware sa8255p snapdragon_8\+_gen_2_mobile_firmware qfw7124_firmware qmb715 networking_pro_400_firmware qcn6024_firmware networking_pro_610 qca6777aq_firmware sm8650q sm8750p_firmware qcn6432 qcf8000_firmware qca8386_firmware networking_pro_1210_firmware x2000090_firmware wsa8815 marina sxr2350p qcn6432_firmware snapdragon_ar1_gen_1 lemansau ipq8078_firmware orne xg101032_firmware sm8425 qcn6274_firmware trestles qcm4490_firmware qca6678aq snapdragon_7s_gen_3_mobile qpa1086bd qcn6422_firmware qca0000_firmware sxr2250p_firmware wsa8850w_firmware immersive_home_316_firmware qca6797aq ipq9570 ipq6000 qca6595_firmware x2000092 sm7550 wcn7860 cologne_firmware sm6475p_firmware ipq9574 qmp2001_firmware wsa8830 qcn9274 sdx61_firmware wcd9380 wsa8845_firmware sm6475q_firmware snapdragon_ar1\+_gen_1 wcn3950 marina_firmware qam8397p qln1086bd_firmware qln1083bd_firmware qcm5430_firmware wsa8845h qca8075 srv1m wcn7861 ipq5300_firmware qcn9274_firmware networking_pro_1200_firmware networking_pro_1210 wcn7880 snapdragon_x75_5g_modem-rf_firmware qcn5164 qcc710_firmware wsa8855c wcn6450 qca6678aq_firmware qca0000 ipq9008_firmware qca6787aq_firmware milos_firmware networking_pro_810_firmware wcd9390 snapdragon_8_gen_3_mobile qcn9022 sm7675p_firmware sm7675_firmware xrv9209 snapdragon_7_gen_4_mobile_firmware cq8725s_firmware qca6574au qcn9001_firmware snapdragon_8_gen_3_mobile_firmware wcd9378_firmware qcs6690_firmware iqx5121_firmware sm7435 xrv9209_firmware sd_8_gen1_5g_firmware qcn5052 qcn5022 qca4024_firmware qcn5124_firmware sm7435p_firmware qcn9100 qca6696 xrv7209 qcn6402_firmware wcn6755_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_8_gen_1_mobile ipq5332 wsa8835_firmware sc8380xp pandeiro_firmware fwa_gen_5_elite sa7255p_firmware sm8550p cq8750m qcn6422 x2000077_firmware qfw7114 qca8075_firmware npro_a8_elite_firmware networking_pro_800_firmware wsa8840 snapdragon_8_gen_2_mobile sa7775p qcn9012_firmware wsa8832_firmware ipq9570_firmware wcd9395_firmware qca8072 sdx81_firmware sm8845p ipq8076 qcn9070_firmware netrani qam8255p qxm1083_firmware sm7435_firmware snapdragon_x65_5g_modem-rf_firmware iqx5121 wsa8840_firmware qca8695au_firmware ipq5332_firmware fwa_gen_3_ultra_firmware qca6595au_firmware qmp1000 qca8085 qcn6023 wsa8850w qcn9024_firmware npro_a8_elite sxr2250p qcn6412 qca6174a_firmware qca6574a_firmware milos_iot_firmware milos csr8811_firmware lemans_au_lgit_firmware qxm1095 wcn6650 wcn7760_firmware wcn6650_firmware sm8635_firmware sa8770p_firmware wsa8810_firmware wsa8832 snapdragon_6_gen_3_mobile srv1h fastconnect_6700_firmware sar2130p qcn9000 qcn6024 qcc2076_firmware qfw7124 wcd9378c_firmware qcc710 snapdragon_7_gen_1_mobile_firmware ipq8078 qcn5124 g3x_gen_2_firmware sdx65m qcn9003_firmware qcn9012 sa8620p wsa8830_firmware fastconnect_6200_firmware ipq5028_firmware qam8397p_firmware qca6574_firmware srv1m_firmware qca6696_firmware sxr2330p_firmware networking_pro_610_firmware immersive_home_316 snapdragon_6_gen_4_mobile wcd9340_firmware video_collaboration_vc3_firmware qcc2076 qcs8550_firmware molokai qcn6122_firmware ipq9554_firmware qfw7114_firmware qcf8001_firmware sa7255p xg101039 qca6391_firmware qcn9011_firmware qca6574 qamsrv1m_firmware sa9000p_firmware snapdragon_7\+_gen_2_mobile_firmware sxr2230p_firmware qcn6122 sm6650p qcs4490 sm6850_firmware pandeiro wsa8850_firmware csr8811 snapdragon_6_gen_3_mobile_firmware wsa8835 qcn5122 wcd9340 ipq5312 sm7675 cq8750m_firmware qcm4490 qcn6224_firmware qamsrv1h_firmware wcd9371 qcc2073 qca9888 x2000090 qcn5164_firmware qca8081 palawan25 qxm1093_firmware fastconnect_6200 sa8770p sm7435p qcn6274 qcn5052_firmware qcs6690 qmb415 qxm1086_firmware g2_gen_1_firmware qxm1086 trestles_firmware wcn6450_firmware g2_gen_1 snapdragon_x62_5g_modem-rf_firmware snapdragon_7_gen_1_mobile fastconnect_6900_firmware wsa8810 qca8386 qmp2001 wcd9370 qca8337 sar2130p_firmware qcm6490 snapdragon_6_gen_1_mobile qcn6023_firmware netrani_firmware wcn3988 ipq9574_firmware orne_firmware qcn5024_firmware xrv7209_firmware sm8735p_firmware networking_pro_600 ipq5028 snapdragon_ar1_gen_1_firmware qxm1096 srv1h_firmware x1e80100 qcn5122_firmware xg101002_firmware qca8080_firmware qcn5152_firmware sdx61 qpa1083bd_firmware snapdragon_ar1\+_gen_1_firmware qca8072_firmware networking_pro_1610 sm6475q ipq6018_firmware snapdragon_7_gen_4_mobile qca8084 qca6698aq_firmware qcn5054 snapdragon_8\+_gen_1_mobile qcn5154_firmware wcn7760 wcd9395 iqx7181_firmware kobuk_firmware ipq5312_firmware sm7550p_firmware cologne milos_iot ipq8076_firmware sar1165p qca8085_firmware networking_pro_1610_firmware immersive_home_214 ipq6010_firmware qca8082 qcn9001 wcd9375_firmware snapdragon_8_gen_2_mobile_firmware iqx7181 sm8635p_firmware sm8550p_firmware sm7635p qca8337_firmware qpa1086bd_firmware sm8635 qca6595au qca6787aq snapdragon_8_gen_1_mobile_firmware immersive_home_326 sa9000p snapdragon_6_gen_1_mobile_firmware x2000094 qca8080 xg101032 qca6688aq sm6450p qcn9024 wcd9385_firmware sm8750p qln1086bd qcn6224 qca6564au_firmware qca9889 wcn6755 qmb715_firmware sm7550p qcn9000_firmware cq7790_firmware immersive_home_3210 qcn6402 qcn9100_firmware sm7675p immersive_home_216_firmware qcn6412_firmware wcn3988_firmware qca6554a sm6475p wcd9378c wcn7860_firmware qcm6490_firmware ipq5300 qmb415_firmware snapdragon_x65_5g_modem-rf sa8255p_firmware wcd9390_firmware ipq6010 sm8635p snapdragon_x72_5g_modem-rf qca8082_firmware snapdragon_7s_gen_3_mobile_firmware qca8695au ipq6018 wsa8815_firmware qca8084_firmware immersive_home_318 wcd9380_firmware qxm1094 ipq9008 qca6574au_firmware sdx81 sxr2230p molokai_firmware wcd9385 ipq5010 wsa8845 wcn7880_firmware Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.32% / 24.60%

||

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-17 Jun, 2025 | 19:55

Buffer over-read without Checking Size of Input in WLAN Host

Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware qcn9070 ipq4028_firmware qca8337 qfw7124 ar9380 ipq8173_firmware qcf8001 flight_rb5_5g_platform flight_rb5_5g_platform_firmware qcn6224_firmware qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 qca9880_firmware qca9992 immersive_home_318_platform_firmware ipq8078a ipq5028_firmware ipq6000 qcn5152_firmware qca0000_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware wcd9385_firmware immersive_home_216_platform ipq8076a immersive_home_316_platform immersive_home_316_platform_firmware qca8386_firmware qcn6024_firmware qca8084_firmware immersive_home_318_platform ipq8074a qcn5124_firmware qcn9011_firmware qca8082_firmware qcn5164_firmware qcn5122_firmware sdx55_firmware qca8081_firmware qcn6023_firmware qfw7114 qrb5165n ipq5010 ipq8070_firmware snapdragon_x65_5g_modem-rf_system_firmware ipq8065 ipq8078a_firmware qcn9274 ipq8174 qca9990 qrb5165m_firmware ipq5028 qca7500 ipq4029_firmware qcn5052 qca0000 qcf8001_firmware ipq6010 ipq8068 qcn6112_firmware qcn9074 qca8085 sdx65m wcd9340 qcn6132 qcn6224 qcn9013 snapdragon_x75_5g_modem-rf_system qca8081 ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware immersive_home_3210_platform qca8085_firmware qca9888_firmware ipq8068_firmware qcn6122 wcd9385 ipq9008_firmware ipq9570 qcn5154_firmware ar8035 csr8811 qca9898_firmware ipq4019 qcc710_firmware qcn9100_firmware robotics_rb5_platform qca9992_firmware ipq5010_firmware ipq8074a_firmware qca9898 qcn5022_firmware ipq4028 immersive_home_216_platform_firmware qca9985_firmware robotics_rb5_platform_firmware ipq4018_firmware qca8337_firmware wcd9380_firmware qcn9000 ipq8072a qca7500_firmware qca9980_firmware ipq8076a_firmware ar9380_firmware ipq8078 qca8084 ipq8173 ipq9008 qcn9012 qcn5164 immersive_home_326_platform_firmware qcn6122_firmware ipq8065_firmware csr8811_firmware qcn6274 wcd9380 qcn5154 qca8075_firmware ipq4018 ipq4019_firmware qcn5024 qca9889 qcn6132_firmware qca9888 qca9985 qca9994_firmware qcn5052_firmware qcn9012_firmware qcn9274_firmware ipq8070a_firmware qfw7114_firmware wcn3980 ipq6018_firmware ipq8076_firmware qca9886 wcd9340_firmware qcn6112 ipq8076 qca9984 ipq6028 ipq8064 qcn5152 qcn9024 qrb5165m ipq9574_firmware wcn3980_firmware immersive_home_3210_platform_firmware qca6391 ipq8064_firmware fastconnect_7800 qcn9100 qcn6274_firmware snapdragon_x65_5g_modem-rf_system ipq8078_firmware ipq9570_firmware fastconnect_6900 qcn9070_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware ipq8070 ipq6028_firmware ipq8072a_firmware qcn9011 qca9994 qca9889_firmware ipq9574 qca9980 qcn5122 ipq8174_firmware qcn9024_firmware qca9880 fastconnect_7800_firmware immersive_home_326_platform ipq6018 qcn5022 qcn9013_firmware qca9886_firmware qcc710 ipq6010_firmware immersive_home_214_platform qca6391_firmware immersive_home_214_platform_firmware qca4024 sdx55 qca8075 qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9072_firmware ipq6000_firmware qcn9074_firmware qfw7124_firmware ipq4029 ar8035_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.22% / 12.09%

||

7 Day CHG~0.00%

Published-04 May, 2026 | 16:43

Updated-06 May, 2026 | 18:03

Buffer Over-read in WLAN HAL

Transient DOS when processing target power rate tables during channel configuration.

Vendor-Qualcomm Technologies, Inc.

Product-qca2062_firmware qrb5165m flight_rb5_5g qxm8083 qca8101_firmware snapdragon_8_gen_2_mobile sa7775p qxm1083 wsa8845h_firmware qcn9012_firmware qca2064_firmware wcd9378 wsa8832_firmware ipq9570_firmware fastconnect_6700 wcd9395_firmware sa510m_firmware wsa8850 sm8845p sm8650q_firmware snapdragon_8_elite_gen_5_firmware snapdragon_x75_5g_modem-rf g3x_gen_2 sa7775p_firmware x2000094_firmware netrani qam8255p lemans_au_lgit x1e80100_firmware qxm1083_firmware qam8295p_firmware sm7435_firmware iqx5121 snapdragon_x65_5g_modem-rf_firmware wcn7861_firmware wsa8840_firmware qca8695au_firmware ipq5332_firmware networking_pro_810 qamsrv1m qamsrv1h qcn5154 sm8475p_firmware fwa_gen_3_ultra_firmware qca2066 qca6595au_firmware qmp1000 snapdragon_auto_5g_modem-rf qca8085 wsa8850w qca6584au qcn9024_firmware qcn5224 robotics_rb5_firmware snapdragon_8_gen1_5g lemansau_firmware qpa1083bd qxm1094_firmware sxr2250p qcn6412 qca6174a_firmware qca6574a_firmware snapdragon_888_5g_mobile qca8101 milos_iot_firmware milos xg101039_firmware lemans_au_lgit_firmware sm6850 qxm1095 wcn6650 wcn7760_firmware snapdragon_8_elite_firmware qmp1000_firmware wcn6650_firmware networking_pro_1200 qcs8550 sm8635_firmware cq8725s sa8770p_firmware wcn3950_firmware wsa8810_firmware wsa8832 sm8475p qcs4490_firmware snapdragon_6_gen_3_mobile qca2062 srv1h sar1165p_firmware fwa_gen_3_ultra wcn7881_firmware snapdragon_8_elite fastconnect_6700_firmware sar2130p snapdragon_x72_5g_modem-rf_firmware qcn9000 qcn6024 qrb5165n_firmware video_collaboration_vc3 qfw7124 qcc710 snapdragon_7_gen_1_mobile_firmware wcd9378c_firmware x2000077 snapdragon_8\+_gen_2_mobile ipq5302 sm8845p_firmware wsa8855c_firmware qcn5124 g3x_gen_2_firmware palawan25_firmware qca6174a sm7550_firmware qam8255p_firmware snapdragon_4_gen_2_mobile_firmware sm7425_firmware qcn9012 qln1083bd sa8620p qca6797aq_firmware wcn7881 qca8384_firmware fastconnect_6200_firmware qca6574_firmware qam8397p_firmware wcd9370_firmware wsa8830_firmware immersive_home_326_firmware qca6554a_firmware sm8735p srv1m_firmware qca6696_firmware qca6698aq qcm5430 networking_pro_610_firmware sxr2330p_firmware qcn9160 qxm1096_firmware qxm8083_firmware qca6564au sc8380xp_firmware sm7425 snapdragon_6_gen_4_mobile wcd9340_firmware qcn5224_firmware qxm1095_firmware video_collaboration_vc3_firmware qca2066_firmware qcs8550_firmware ar8035 molokai ipq5302_firmware ipq9554_firmware snapdragon_x62_5g_modem-rf qfw7114_firmware fastconnect_6900 qcf8001_firmware immersive_home_3210_firmware sa7255p xg101039 qca8081_firmware x2000086_firmware qca6391_firmware snapdragon_4_gen_2_mobile qcn9011_firmware x2000086 qca6574 qamsrv1m_firmware qca6574a sa6155p sa9000p_firmware snapdragon_7\+_gen_2_mobile_firmware sxr2230p_firmware sm6650p sm7635p_firmware sa510m fastconnect_7800 sa8295p_firmware qcs4490 sm6850_firmware wsa8850_firmware cq7790 sm7525 pandeiro qca6391 qca6584au_firmware snapdragon_6_gen_3_mobile_firmware qca2064 qca6688aq_firmware sa8155p_firmware sm6450p_firmware wsa8835 ipq5312 wcd9340 snapdragon_6_gen_4_mobile_firmware sm7675 snapdragon_8\+_gen_1_mobile_firmware sxr2330p cq8750m_firmware qcm4490 sm7525_firmware sm8425_firmware qcn6224_firmware qamsrv1h_firmware sa8620p_firmware qca8385_firmware wcd9371 x2000090 qca8102_firmware qcn9011 qca8081 snapdragon_x32_5g_modem-rf_firmware qcf8001 palawan25 qxm1093_firmware qca6595 fastconnect_7800_firmware snapdragon_8_elite_gen_5 qcf8000 fastconnect_6200 sa8770p sm7435p qcn6274 sm6650p_firmware qcs6690 qmb415 qxm1086_firmware qca8111_firmware wcd9371_firmware g2_gen_1_firmware qca6777aq snapdragon_x35_5g_modem-rf_firmware qxm1086 snapdragon_auto_5g_modem-rf_gen_2 snapdragon_888\+_5g_mobile xg101002 g2_gen_1 wcn6450_firmware monaco_iot snapdragon_x62_5g_modem-rf_firmware x2000092_firmware ipq9554 qca8112 snapdragon_7_gen_1_mobile fastconnect_6900_firmware qxm1093 qep8111_firmware wsa8810 qca8386 wcd9375 qmp2001 sxr2350p_firmware wcd9370 snapdragon_7\+_gen_2_mobile ar8035_firmware flight_rb5_5g_firmware qrb5165n sa8255p qca8337 sar2130p_firmware snapdragon_8\+_gen_2_mobile_firmware qfw7124_firmware qmb715 qcm6490 snapdragon_6_gen_1_mobile qcn6024_firmware netrani_firmware wcn3988 ipq9574_firmware snapdragon_8cx_gen_3_compute_firmware networking_pro_610 orne_firmware qca6777aq_firmware sm8650q sm8750p_firmware sm8735p_firmware xrv7209_firmware qcn6432 snapdragon_ar1_gen_1_firmware qcf8000_firmware qxm1096 srv1h_firmware x1e80100 qca8386_firmware networking_pro_1210_firmware qca8080_firmware xg101002_firmware x2000090_firmware robotics_rb5 wsa8815 marina sxr2350p qcn6432_firmware sdx61 snapdragon_ar1_gen_1 qpa1083bd_firmware lemansau snapdragon_ar1\+_gen_1_firmware sa8295p orne networking_pro_1610 xg101032_firmware sm8425 qcn6274_firmware sm6475q snapdragon_x32_5g_modem-rf qcm4490_firmware qca6678aq snapdragon_7s_gen_3_mobile snapdragon_7_gen_4_mobile sa8195p_firmware qca8084 qpa1086bd qca6698aq_firmware qcn6422_firmware qca0000_firmware sxr2250p_firmware snapdragon_8\+_gen_1_mobile monaco_iot_firmware qca8385 qcn5154_firmware wcn7760 wsa8850w_firmware iqx7181_firmware wcd9395 qca6797aq ipq5312_firmware sm7550p_firmware cologne ipq9570 qca6595_firmware milos_iot x2000092 sm7550 wcn7860 qca8384 sar1165p cologne_firmware qca8085_firmware sm6475p_firmware qca2065 networking_pro_1610_firmware ipq9574 qmp2001_firmware wsa8830 sa8195p qcn9274 sdx61_firmware qca8082 wcd9380 wsa8845_firmware wcd9375_firmware sm6475q_firmware snapdragon_8_gen_2_mobile_firmware snapdragon_ar1\+_gen_1 marina_firmware wcn3950 qam8397p qln1086bd_firmware iqx7181 qln1083bd_firmware sm8635p_firmware qcm5430_firmware wsa8845h sm8550p_firmware sm7635p qca8075 srv1m wcn7861 qca8337_firmware ipq5300_firmware qpa1086bd_firmware qcn9274_firmware sm8635 snapdragon_888_5g_mobile_firmware snapdragon_888\+_5g_mobile_firmware networking_pro_1200_firmware networking_pro_1210 qca6595au qca6787aq wcn7880 snapdragon_x75_5g_modem-rf_firmware snapdragon_8_gen_1_mobile_firmware snapdragon_8cx_gen_3_compute immersive_home_326 qcc710_firmware wsa8855c qca6678aq_firmware wcn6450 snapdragon_8_gen1_5g_firmware sa9000p snapdragon_6_gen_1_mobile_firmware x2000094 qca0000 qca8080 xg101032 qca6688aq ipq9008_firmware sm6450p sa8155p qca6787aq_firmware qcn9024 milos_firmware networking_pro_810_firmware wcd9385_firmware sa6155p_firmware wcd9390 sm8750p snapdragon_8_gen_3_mobile qln1086bd sm7675p_firmware qca6564au_firmware qcn6224 sm7675_firmware qca8111 snapdragon_7_gen_4_mobile_firmware qca8102 xrv9209 wcn6755 qmb715_firmware cq8725s_firmware qca6574au sm7550p qcn9000_firmware wcn7880_firmware snapdragon_8_gen_3_mobile_firmware cq7790_firmware immersive_home_3210 wcd9378_firmware qcn6402 qcs6690_firmware snapdragon_x35_5g_modem-rf sm7675p iqx5121_firmware sm7435 snapdragon_auto_5g_modem-rf_firmware qcn6412_firmware xrv9209_firmware wcn3988_firmware qca6554a sm6475p qca8112_firmware wcd9378c wcn7860_firmware qcm6490_firmware qep8111 ipq5300 qmb415_firmware qcn5124_firmware sm7435p_firmware snapdragon_x65_5g_modem-rf sa8255p_firmware qrb5165m_firmware wcd9390_firmware qca6696 sm8635p snapdragon_x72_5g_modem-rf qca8082_firmware snapdragon_7s_gen_3_mobile_firmware qca8695au xrv7209 qcn6402_firmware wsa8815_firmware qca2065_firmware qca8084_firmware qam8295p wcn6755_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_8_gen_1_mobile ipq5332 wsa8835_firmware qcn9160_firmware sc8380xp wcd9380_firmware pandeiro_firmware qxm1094 ipq9008 qca6574au_firmware sa7255p_firmware sm8550p cq8750m qcn6422 x2000077_firmware sxr2230p molokai_firmware qfw7114 qca8075_firmware wcd9385 wsa8845 wsa8840 Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.07% / 0.09%

||

7 Day CHG~0.00%

Published-04 May, 2026 | 16:43

Updated-06 May, 2026 | 18:02

Buffer Over-read in DSP Service

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

Vendor-Qualcomm Technologies, Inc.

Product-wcd9370_firmware wcd9370 xg101002 xg101039_firmware qcm5430 qca0000_firmware wsa8845h_firmware qcm6490_firmware wcd9378c qcm6490 x2000090 video_collaboration_vc3_platform fastconnect_6700 wsa8845 iqx7181_firmware sc8380xp_firmware snapdragon_8cx_gen_3_compute_firmware snapdragon_8cx_gen_3_compute fastconnect_7800_firmware cologne x2000094_firmware iqx5121 fastconnect_6900 x2000092 wsa8840_firmware qca0000 qcm5430_firmware x2000094 xg101039 cologne_firmware x2000086_firmware fastconnect_6700_firmware xg101002_firmware xg101032 x2000086 x2000090_firmware wsa8835_firmware wcd9385_firmware sc8380xp wcd9378c_firmware snapdragon_7c\+_gen_3_compute wsa8830 snapdragon_7c\+_gen_3_compute_firmware fastconnect_6900_firmware wcd9380_firmware x2000077 x2000092_firmware wcd9380 wsa8845_firmware wcd9375_firmware fastconnect_7800 x2000077_firmware xg101032_firmware wcd9375 wsa8835 video_collaboration_vc3_platform_firmware iqx7181 wcd9385 iqx5121_firmware wsa8840 wsa8830_firmware wsa8845h Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.10% / 1.02%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in Audio

Transient DOS in Audio when invoking callback function of ASM driver.

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w_firmware qcs410_firmware sa6150p_firmware sd865_5g snapdragon_429_mobile_platform_firmware qcs610_firmware wcd9335 sxr2130_firmware srv1m qca8081_firmware wcd9370 ar8035_firmware qca6696 wcd9340_firmware wcd9341_firmware qca6320 qcc710_firmware qca6426 qca6564au wcn3610 qcn9074 wsa8815_firmware sa8195p_firmware qca8337_firmware qca8337 qca6426_firmware qca6574au_firmware qam8295p wcd9341 qca6574au snapdragon_855_mobile_platform wcn3950 wsa8810_firmware snapdragon_xr2_5g_platform snapdragon_429_mobile_platform sa9000p_firmware srv1h snapdragon_835_mobile_pc_platform_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware wcn3660b_firmware fastconnect_6800_firmware sa8295p_firmware sd835_firmware video_collaboration_vc1_platform_firmware sa8770p c-v2x_9150 qca6584au qca6320_firmware qcn6274_firmware qcc710 qca6310_firmware fastconnect_6800 qfw7114_firmware fastconnect_7800_firmware fastconnect_6900 video_collaboration_vc1_platform qfw7114 snapdragon_x55_5g_modem-rf_system fastconnect_6900_firmware qca6310 qam8255p_firmware wcd9380 sa6145p_firmware qam8255p snapdragon_xr2_5g_platform_firmware sa8150p msm8996au_firmware sa6155p snapdragon_835_mobile_pc_platform qca6564au_firmware wsa8810 qam8650p snapdragon_865\+_5g_mobile_platform sa9000p srv1h_firmware video_collaboration_vc3_platform aqt1000 snapdragon_865_5g_mobile_platform_firmware c-v2x_9150_firmware sa6155p_firmware qam8295p_firmware srv1m_firmware sd855 sd835 wcn3990_firmware snapdragon_870_5g_mobile_platform_firmware qfw7124_firmware qca6564a_firmware qca6436_firmware qca6698aq_firmware snapdragon_wear_4100\+_platform_firmware mdm9650_firmware wcn3610_firmware sa8255p snapdragon_855\+\/860_mobile_platform_firmware qca6420 snapdragon_865\+_5g_mobile_platform_firmware qca6430 wcd9370_firmware mdm9650 snapdragon_x55_5g_modem-rf_system_firmware wcn3660b qca6574a sxr2130 wcn3620_firmware sa8195p wcd9340 qamsrv1m snapdragon_820_automotive_platform_firmware snapdragon_auto_5g_modem-rf_gen_2 qam8650p_firmware snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware sdm429w qca6584au_firmware sd855_firmware qcn6274 qca6436 qfw7124 sa8775p snapdragon_x75_5g_modem-rf_system wcd9335_firmware qca6391_firmware wcn3980_firmware qca6430_firmware snapdragon_870_5g_mobile_platform sa8775p_firmware qamsrv1h qca6696_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware sa6150p qcs410 sa8155p_firmware qca8081 qca6564a wsa8815 mdm9628 sa8155p qam8775p mdm9628_firmware sa6145p qcn9074_firmware sa8255p_firmware ar8035 qca6574a_firmware qamsrv1m_firmware msm8996au sa8650p_firmware wcn3620 qca6391 qcn6224 qca6698aq wcn3950_firmware sa8770p_firmware sa8295p fastconnect_6200 fastconnect_7800 sa8145p_firmware sa8650p qam8775p_firmware sd865_5g_firmware wcn3680b sa8150p_firmware snapdragon_855\+\/860_mobile_platform qamsrv1h_firmware video_collaboration_vc3_platform_firmware sa8145p wcn3990 snapdragon_wear_4100\+_platform snapdragon_x75_5g_modem-rf_system_firmware wcn3980 snapdragon_820_automotive_platform fastconnect_6200_firmware wcn3680b_firmware qcn6224_firmware qcs610 Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.32% / 24.60%

||

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing rsn ies.

Vendor-Qualcomm Technologies, Inc.

Product-sd865_5g qca6595 snapdragon_xr1_platform ipq6028_firmware immersive_home_214_platform qca8081_firmware qcn9001 sm7250-ab snapdragon_x50_5g_modem-rf_system wcd9340_firmware ipq5028_firmware wcd9395_firmware qcn6024 ar9380 qcc710_firmware qca6426 sc8180x-ab sa4150p qcn5124_firmware sm7325-ae_firmware wsa8832_firmware qca8337 qca6426_firmware wcd9395 qcn7605 qca6574au_firmware qcn7606_firmware ipq8078a_firmware wcn785x-5 qam8295p wcd9341 wsa8810_firmware sd730_firmware wsa8845h_firmware qca2064_firmware sdm670 sm8150-ac sm6375_firmware sd835_firmware snapdragon_4_gen_2_mobile_platform_firmware sm7150-ac video_collaboration_vc1_platform_firmware sa4155p qcn9000 qca2062_firmware sm6375 sm7250-aa_firmware qsm8250_firmware sc8180xp-ac qsm8350_firmware video_collaboration_vc1_platform wcd9385_firmware qca6421 qca6310 snapdragon_630_mobile_platform ipq8074a_firmware ipq8076a qcs603_firmware wcd9360 snapdragon_ar2_gen_1_platform_firmware immersive_home_3210_platform_firmware sa6155p sm7150-ac_firmware qca6564au_firmware qca8075 qam8650p video_collaboration_vc5_platform_firmware sm7325_firmware sa6155p_firmware qca6390_firmware sd835 qca6436_firmware ipq8070a_firmware qcn5021_firmware qcn9070 sc8180x-af snapdragon_8_gen_2_mobile_platform snapdragon_7c\+_gen_3_compute_firmware qca8084 sm4125_firmware sm8250-ac_firmware qca6420 wcn3910 csrb31024 snapdragon_845_mobile_platform snapdragon_x55_5g_modem-rf_system_firmware qcc2076 snapdragon_660_mobile_platform qca6574a sm7325-ae qca9898_firmware wcd9340 qcs8250_firmware qcm2290 snapdragon_630_mobile_platform_firmware sm6150-ac sc8180xp-aa_firmware qcn6122_firmware qcn5154_firmware sm8150-ac_firmware ipq8074 sm8550p_firmware wcn3998_firmware qcm8550 wcn3988 qcn5122_firmware qcn9024 pmp8074 qca6574 sm7325-af snapdragon_x75_5g_modem-rf_system qca2066_firmware sdm710_firmware sc8180xp-ac_firmware qca8082 qcs410 qcm2290_firmware sa8155p qca8072_firmware wsa8830 sm8550p sa6145p qcn6122 sa8255p_firmware wcn785x-1_firmware qcc2073 qrb5165m_firmware qca9985 ipq8071a qcn6112 wcn3950_firmware qrb5165n qca1062_firmware sc7180-ac sm7325p_firmware sd460 wcd9360_firmware video_collaboration_vc3_platform_firmware qcn6023_firmware qcn5164_firmware sd670_firmware immersive_home_326_platform_firmware qca6438_firmware sc8280xp-bb_firmware qcn9072 sm7150-aa qcn6224_firmware ipq4028_firmware qca6431 sd660_firmware qca8082_firmware sm6350 sxr2130_firmware ar8035_firmware qrb5165m qca1064 qca6320 snapdragon_w5\+_gen_1_wearable_platform_firmware qca4024_firmware qca0000_firmware sd888_firmware snapdragon_662_mobile_platform_firmware qcs6125_firmware qca9992_firmware qca6428 qca9990 ipq8070 ipq9008_firmware qcn9074 sdm712_firmware wsa8815_firmware sm8250-ab qca8337_firmware sm7325 ipq8173 sm8350-ac_firmware sm7250p_firmware wcn3999 ipq6010_firmware wcn785x-5_firmware wcn3950 sm4250-aa snapdragon_x65_5g_modem-rf_system_firmware qca6797aq_firmware sm4350_firmware sm7350-ab_firmware ipq5028 qca9986 wcn3991 qcf8001_firmware qcn9070_firmware sa8295p_firmware sd_675_firmware sa4155p_firmware qca9984 ipq5010_firmware qcn9022_firmware sm7250p csrb31024_firmware ipq6018 sa8155 sd_8cx_firmware sm7150-aa_firmware snapdragon_845_mobile_platform_firmware sd888 sd460_firmware snapdragon_4_gen_2_mobile_platform ipq8069 wcn685x-5 ipq8065 qca6310_firmware qcs7230 sm8250-ac wcd9371 qcn9001_firmware sc8180xp-aa snapdragon_xr2_5g_platform_firmware qca8075_firmware vision_intelligence_300_platform_firmware sm7350-ab sm8350_firmware qca2065_firmware sdx65m_firmware video_collaboration_vc3_platform qca9980_firmware qca9985_firmware qca6431_firmware sm7225_firmware qca6698aq_firmware qcs2290 qcn7606 8998_firmware qcs2290_firmware sc8280xp-bb wcn3999_firmware qca8084_firmware qcn7605_firmware sa8255p qcs7230_firmware wcd9390_firmware immersive_home_318_platform_firmware sc8180xp-ab wcn6750 qcn5024 qca6430 wcn6750_firmware sc8180xp-ad_firmware snapdragon_auto_5g_modem-rf sm7250-ab_firmware ssg2125p csra6640_firmware sm4350 immersive_home_326_platform qcn9013_firmware qam8650p_firmware wcn3998 qca2062 video_collaboration_vc5_platform qca6420_firmware qcs6490_firmware sm8450 snapdragon_x65_5g_modem-rf_system ipq8076_firmware sd855_firmware wcd9335_firmware qrb5165n_firmware qca6436 wcn3980_firmware wsa8835 wsa8840_firmware qca6391_firmware sm4250-aa_firmware ipq8068 qcs4290_firmware csra6620 qca8081 sd660 sdm670_firmware sm4375 wsa8815 qam8775p qcm4325_firmware sm7125_firmware ipq8069_firmware qcm4290_firmware qca9888_firmware qca9889 qca1062 qcn5024_firmware qcn9002_firmware ipq5010 qcn9274_firmware sg4150p_firmware sc8180xp-af_firmware csra6620_firmware qcs8550 ipq8068_firmware qam8775p_firmware sd865_5g_firmware pmp8074_firmware sc7180-ad_firmware wcd9375 sdm712 qca9889_firmware sa8145p sd_675 immersive_home_316_platform sm4350-ac_firmware qca2066 csr8811 sc7180-ac_firmware sm7250-ac_firmware wcn685x-1_firmware qcm8550_firmware qcs410_firmware sa6150p_firmware sw5100p sxr1120 ipq9574 qcn9000_firmware qcn6102_firmware vision_intelligence_300_platform qcn9022 qcs610_firmware wcd9335 wcd9370 qca8072 qca6696 wcd9341_firmware 8998 qcn9003_firmware qca6390 qcc2073_firmware ipq8076 wcn6740_firmware qca1064_firmware ipq6018_firmware qca9984_firmware qcn6023 immersive_home_216_platform qca9994_firmware ipq6000 snapdragon_auto_4g_modem ipq8078a sm8150_firmware qca6574au wcd9390 csra6640 sc8180x-af_firmware qcn9100_firmware qcn5122 sd730 qca6554a qcn6024_firmware qca9886_firmware sm8350 qcm6125_firmware ssg2115p qcc710 snapdragon_850_mobile_compute_platform qcn6132_firmware sxr1120_firmware qcn5054 robotics_rb3_platform 315_5g_iot_modem_firmware sm8450_firmware ipq5332_firmware qcn5052 qca9980 qfw7114 315_5g_iot_modem ipq9574_firmware snapdragon_x55_5g_modem-rf_system qam8255p_firmware ipq8064 sa8155_firmware qcn5164 sm7150-ab qca6335 qcs4490 sc7180-ad sc8180xp-af snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 qcn6100_firmware qca6421_firmware qcm6125 sc8180x-ad csr8811_firmware sm7125 wsa8810 qcn5021 qca8085 qsm8250 snapdragon_8\+_gen_2_mobile_platform sm8350-ac qcn6100 qca6595au sm7315_firmware wcd9326_firmware wsa8840 qcs8550_firmware qca9986_firmware qfw7124_firmware qcn9012 wcd9371_firmware qcs4490_firmware qcf8001 wcn3910_firmware sdx65m wcd9370_firmware ipq9570 sa8195p qca6335_firmware qcm6490 immersive_home_316_platform_firmware immersive_home_3210_platform qcn9274 ipq8076a_firmware ipq9570_firmware sxr2230p_firmware ar9380_firmware sd675_firmware qca6430_firmware sc8180x-aa ipq4029_firmware qcn9011 qcs605 qcn9024_firmware wsa8845h sa6150p sm7250-aa wcd9326 sa8155p_firmware qca6564a snapdragon_675_mobile_platform snapdragon_662_mobile_platform qcn9074_firmware ipq8174 sc8180x\+sdx55_firmware flight_rb5_5g_platform_firmware ipq8174_firmware snapdragon_665_mobile_platform ar8035 ipq8072a sa6155 qca2065 qcm4325 robotics_rb5_platform qcn6224 sc8280xp-ab sm8475_firmware sc8180x\+sdx55 qca6698aq ssg2125p_firmware sm6250 sm7250-ac sc8180x-aa_firmware sd670 wcn685x-1 sa8145p_firmware sa8150p_firmware snapdragon_w5\+_gen_1_wearable_platform snapdragon_636_mobile_platform_firmware wcn3990 qca6428_firmware qcn9002 ipq8078 snapdragon_680_4g_mobile_platform_firmware qcs6490 qcs8250 ipq9554_firmware ar8031_firmware wsa8830_firmware qca6678aq_firmware qca8386_firmware snapdragon_850_mobile_compute_platform_firmware wsa8845_firmware wsa8832 snapdragon_auto_4g_modem_firmware qcc2076_firmware qcs603 qca6678aq snapdragon_675_mobile_platform_firmware qcn5022_firmware sm8475 qca9992 sm8250-ab_firmware sa4150p_firmware qca9898 ipq9008 ipq9554 qca6564au sc8180xp-ad sm6250p_firmware immersive_home_214_platform_firmware sm7325-af_firmware sa8195p_firmware qcm4290 qcn5054_firmware qca9888 ipq5332 snapdragon_680_4g_mobile_platform sd_455_firmware qcn9013 ar8031 sg8275p_firmware qcm6490_firmware ipq8072a_firmware sm4125 qcm4490_firmware robotics_rb3_platform_firmware flight_rb5_5g_platform snapdragon_xr2_5g_platform qcn6112_firmware qcs6125 apq5053-aa_firmware snapdragon_7c\+_gen_3_compute snapdragon_xr2\+_gen_1_platform_firmware qca8085_firmware apq5053-aa sdm710 sd_455 qca9886 qcn6132 sm6250_firmware sc8180x-ad_firmware qcn6102 qca6584au qca6320_firmware qcn6274_firmware qcn9011_firmware sw5100_firmware wcn6740 sm6225-ad_firmware qfw7114_firmware qcs605_firmware qca4024 sc8280xp-ab_firmware qca6595_firmware sm8250_firmware immersive_home_216_platform_firmware ipq8070a sm7225 wcd9380 ipq4028 qam8255p sa6145p_firmware sa6155_firmware sxr2230p qca9990_firmware sa8150p qcn9003 snapdragon_665_mobile_platform_firmware qcn5052_firmware snapdragon_auto_5g_modem-rf_firmware qca2064 sxr1230p sm6225-ad sd662_firmware sm4350-ac ipq6010 sw5100 aqt1000 sm8150 wcn3991_firmware qam8295p_firmware sd855 sc8180x-ab_firmware wcn3990_firmware sm7315 qca6564a_firmware wcd9385 qca9994 qsm8350 sc8180xp-ab_firmware sd662 qcs4290 sxr1230p_firmware ipq4018 sg8275p sm6250p sdx55_firmware ipq8071a_firmware qca6438 qca6554a_firmware sxr2130 ipq6028 qcm4490 8098_firmware snapdragon_636_mobile_platform qcn9100 sm7150-ab_firmware snapdragon_xr2\+_gen_1_platform ipq4029 sm7325p aqt1000_firmware ipq4018_firmware sm6150-ac_firmware qca6584au_firmware qcn5152_firmware qcn6274 sc8180x-ac qfw7124 ipq8074_firmware qca6595au_firmware qca0000 sc8180x-ac_firmware sw5100p_firmware sm8250 snapdragon_ar2_gen_1_platform qca6696_firmware wcd9380_firmware qca6574_firmware sg4150p sd_8_gen1_5g qcn5124 ipq8064_firmware qca6797aq sm4375_firmware qcn5152 ipq8065_firmware qca6574a_firmware sdx55 qcn9072_firmware ipq8074a immersive_home_318_platform sd675 sm6350_firmware sd_8_gen1_5g_firmware wcd9375_firmware qca8386 qca6391 wcn785x-1 ipq8173_firmware qcn9012_firmware snapdragon_8_gen_2_mobile_platform_firmware sa8295p 8098 snapdragon_xr1_platform_firmware robotics_rb5_platform_firmware snapdragon_x50_5g_modem-rf_system_firmware ipq6000_firmware ipq8078_firmware wcn685x-5_firmware wcn3988_firmware ipq8070_firmware qcn5154 sd_8cx wsa8835_firmware ssg2115p_firmware qcn5022 snapdragon_660_mobile_platform_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn3980 qcs610 Snapdragon qam8255p_firmware snapdragon_850_mobile_compute_platform_firmware sa6150p_firmware sm6250p_firmware ipq4028_firmware 315_5g_iot_modem_firmware sg8275p_firmware ipq8173_firmware qca6431_firmware wcd9360_firmware qca4024_firmware immersive_home_318_platform_firmware wcn3950_firmware ipq5028_firmware sa8150p_firmware qca6595au_firmware sd_455_firmware csra6620_firmware sd_675_firmware csra6640_firmware snapdragon_460_mobile_platform_firmware qcs6125_firmware snapdragon_480_5g_mobile_platform_firmware qca6554a_firmware wcd9371_firmware qcn6024_firmware qca8386_firmware immersive_home_316_platform_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware snapdragon_660_mobile_platform_firmware sd460_firmware sm7315_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware sa6155_firmware qca6438_firmware snapdragon_auto_5g_modem-rf_firmware ipq8070_firmware ipq8078a_firmware qca6678aq_firmware smart_audio_400_platform_firmware qrb5165m_firmware wsa8840_firmware ipq4029_firmware sa4155p_firmware qcf8001_firmware sa8155_firmware robotics_rb3_platform_firmware sd662_firmware qca6698aq_firmware qca9888_firmware qam8775p_firmware ipq8068_firmware qca2066_firmware qca6696_firmware ipq9008_firmware qcn5154_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware qcc710_firmware wsa8830_firmware qca9992_firmware sd855_firmware sd865_5g_firmware sd660_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware qcn5022_firmware qcn7606_firmware sa8295p_firmware immersive_home_216_platform_firmware snapdragon_750g_5g_mobile_platform_firmware snapdragon_675_mobile_platform_firmware qca6428_firmware qualcomm_video_collaboration_vc1_platform_firmware qca9985_firmware ipq4018_firmware qca8337_firmware snapdragon_778g_5g_mobile_platform_firmware wcd9380_firmware qca9980_firmware ipq8076a_firmware qcn9001_firmware snapdragon_670_mobile_platform_firmware sd670_firmware csr8811_firmware ipq9554_firmware qcn5054_firmware qca8072_firmware qca6430_firmware qcn5052_firmware qcn9012_firmware qcn9274_firmware qfw7114_firmware wcd9335_firmware qca6335_firmware qcc2073_firmware ipq6018_firmware qcm4325_firmware wcd9340_firmware pmp8074_firmware snapdragon_630_mobile_platform_firmware qca9986_firmware qca6426_firmware ipq9574_firmware wcn3980_firmware immersive_home_3210_platform_firmware ipq8064_firmware snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware qca2062_firmware wcn6740_firmware qcs4490_firmware ar8031_firmware ipq8078_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware qca6797aq_firmware qca6564a_firmware ipq8174_firmware qcn9024_firmware qcm4290_firmware qcn7605_firmware sw5100p_firmware qcs610_firmware qca9886_firmware qca6595_firmware qca6391_firmware snapdragon_710_mobile_platform_firmware immersive_home_214_platform_firmware sa4150p_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware qcn5021_firmware ssg2115p_firmware qfw7124_firmware snapdragon_720g_mobile_platform_firmware ar8035_firmware qsm8250_firmware qcn5024_firmware snapdragon_662_mobile_platform_firmware sa8145p_firmware sxr2230p_firmware qca1062_firmware qcs2290_firmware flight_rb5_5g_platform_firmware qcn6224_firmware snapdragon_888_5g_mobile_platform_firmware qca6420_firmware ipq8069_firmware qca2064_firmware sd730_firmware snapdragon_auto_4g_modem_firmware sd675_firmware qcn5152_firmware qca0000_firmware qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qualcomm_video_collaboration_vc3_platform_firmware sd_8cx_firmware wcd9385_firmware wcd9326_firmware qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware qcn9011_firmware qca8082_firmware qca6320_firmware snapdragon_835_mobile_pc_platform_firmware qcn5122_firmware sdx55_firmware wcn3999_firmware qcn6023_firmware wsa8845h_firmware sm7250p_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qcs8550_firmware vision_intelligence_300_platform_firmware qcn6112_firmware wcn3988_firmware sa6145p_firmware fastconnect_6700_firmware wsa8810_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware sdx65m_firmware ipq8071a_firmware qcs4290_firmware qca8085_firmware sxr2130_firmware qca2065_firmware qcs6490_firmware snapdragon_665_mobile_platform_firmware qca9898_firmware sm6250_firmware qcn9100_firmware snapdragon_712_mobile_platform_firmware vision_intelligence_400_platform_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wsa8835_firmware snapdragon_636_mobile_platform_firmware sxr1120_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qcm6125_firmware qcm2290_firmware robotics_rb5_platform_firmware ar9380_firmware qcs7230_firmware immersive_home_326_platform_firmware qcn6122_firmware ipq8065_firmware sxr1230p_firmware snapdragon_4_gen_1_mobile_platform_firmware qca8075_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qcn6132_firmware qcn9003_firmware qca6310_firmware qca9994_firmware qcc2076_firmware ipq8070a_firmware ipq8076_firmware qca6574_firmware sm4125_firmware sm7325p_firmware wsa8845_firmware snapdragon_xr2_5g_platform_firmware qca6574a_firmware fastconnect_6200_firmware snapdragon_x55_5g_modem-rf_system_firmware aqt1000_firmware qcm4490_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcn6274_firmware csrb31024_firmware qcm6490_firmware wsa8832_firmware ipq9570_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware ipq8074_firmware qca9889_firmware sa8155p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware ipq5332_firmware snapdragon_8_gen_1_mobile_platform_firmware qcn9013_firmware sd835_firmware qam8650p_firmware ipq6010_firmware qca1064_firmware qcn9022_firmware wcd9390_firmware qca9990_firmware qcn9002_firmware qcn9072_firmware ipq6000_firmware sw5100_firmware qcn9074_firmware qcs410_firmware snapdragon_xr1_platform_firmware

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.47% / 37.84%

||

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-02 Aug, 2024 | 15:32

Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while processing a FTMR frame.

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware qam8255p_firmware snapdragon_8_gen_1_mobile_platform wsa8830 qcn9070 sxr2230p_firmware qca8337 qam8650p qfw7124 sg8275p_firmware ipq8173_firmware qam8775p qcf8001 qcn6224_firmware qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 wsa8840 immersive_home_318_platform_firmware ipq8078a ipq5028_firmware qca6595au_firmware ipq6000 ssg2115p qcn5152_firmware qca0000_firmware qca6584au_firmware qcn9000_firmware snapdragon_8_gen_2_mobile_platform ipq9554 qca6554a_firmware wcd9385_firmware immersive_home_216_platform ipq8076a immersive_home_316_platform immersive_home_316_platform_firmware qca8386_firmware qcn6024_firmware sd_8_gen1_5g_firmware qca8084_firmware immersive_home_318_platform ipq8074a qcn5124_firmware qca8082_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware sdx55_firmware qca6595au qca8081_firmware qcn6023_firmware qfw7114 wsa8845h_firmware qcn9002 ipq5010 qca6564au_firmware qca6584au snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware ipq8078a_firmware qcn9274 ipq8174 qcn9001 ipq5028 wsa8840_firmware qca6698aq qcn5052 qca0000 qcf8001_firmware ipq6010 qcs8550_firmware sc8380xp_firmware qcn6112_firmware qcn9074 qca8085 sdx65m wcd9340 qcn6132 qcn6224 qcn9013 wsa8845h snapdragon_ar2_gen_1_platform_firmware snapdragon_x75_5g_modem-rf_system wcd9395_firmware qca8081 qcf8000 qca6698aq_firmware ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware immersive_home_3210_platform qca8085_firmware qam8775p_firmware qca9888_firmware qcn6122 wcd9385 qca6696_firmware ipq9008_firmware ipq9570 qcn5154_firmware qca6797aq ar8035 csr8811 wcd9390 qcc710_firmware qcn9100_firmware wsa8830_firmware ipq5010_firmware ipq8074a_firmware wsa8835_firmware qcn5022_firmware immersive_home_216_platform_firmware snapdragon_8_gen_2_mobile_platform_firmware qca8072 qca8337_firmware wcd9380_firmware ssg2125p qcn9000 ipq8072a qcf8000_firmware qca6554a ipq8076a_firmware qca6595 ipq8078 qca6564au qca8084 ipq8173 qcm8550 qcn9001_firmware ipq9008 qcn9012 qcn5164 immersive_home_326_platform_firmware qcn6122_firmware qca6574 sxr1230p_firmware wsa8835 snapdragon_8\+_gen_2_mobile_platform_firmware csr8811_firmware sd_8_gen1_5g qcn6274 wcd9380 ipq9554_firmware qcn5054_firmware qcn5154 qca8075_firmware ssg2125p_firmware qca6574a qcn5024 qca9889 qcn6132_firmware qcn9003_firmware sxr1230p qca9888 qca8072_firmware sg8275p qcn9012_firmware qcn5052_firmware qcn9274_firmware qcc2076_firmware ipq8070a_firmware qcn9003 qfw7114_firmware wsa8845 qcc2073_firmware ipq6018_firmware ipq8076_firmware qca6574_firmware wcd9340_firmware qcn6112 sxr2230p ipq8076 wsa8845_firmware qca6574a_firmware qcn5152 ipq6028 sc8380xp qcn9024 ipq9574_firmware immersive_home_3210_platform_firmware fastconnect_7800 qcn9100 qcn6274_firmware snapdragon_x65_5g_modem-rf_system ipq8078_firmware ipq9570_firmware fastconnect_6900 qcn5054 qcn9070_firmware fastconnect_6900_firmware snapdragon_x75_5g_modem-rf_system_firmware wsa8832_firmware ipq6028_firmware ipq8072a_firmware qca6797aq_firmware qca6574au qca9889_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware fastconnect_7800_firmware snapdragon_8\+_gen_2_mobile_platform wsa8832 ipq5332_firmware ipq5332 sm8550p snapdragon_8_gen_1_mobile_platform_firmware immersive_home_326_platform snapdragon_ar2_gen_1_platform ipq6018 qcn5022 qcn9013_firmware qam8650p_firmware qcc710 ipq6010_firmware immersive_home_214_platform qca6595_firmware wcd9395 qca6696 qcs8550 immersive_home_214_platform_firmware qca4024 sm8550p_firmware sdx55 qca8075 qcn9022_firmware wcd9390_firmware qcn6024 qcn9022 qcc2076 ipq8070a qcn9002_firmware qcn9072_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware qfw7124_firmware qam8255p qcc2073 ar8035_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.10% / 1.07%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-02 Aug, 2024 | 15:32

Buffer Over-read in Core

Transient DOS in Core when DDR memory check is called while DDR is not initialized.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_8_gen_1_mobile_platform wsa8830 qca8337_firmware wcd9380_firmware qca8337 qfw7124 sg8275p_firmware qcm8550 ar8035_firmware qcn6224_firmware wsa8840 wsa8835 wcn3950_firmware snapdragon_8\+_gen_2_mobile_platform_firmware qcn6274 wcd9380 fastconnect_6700 snapdragon_x70_modem-rf_system wcd9370 snapdragon_4_gen_2_mobile_platform_firmware qca6584au_firmware sg8275p snapdragon_8_gen_2_mobile_platform qfw7114_firmware wcd9385_firmware wsa8845 wcn3950 qcn6024_firmware wcd9340_firmware wsa8815 wsa8845_firmware snapdragon_4_gen_2_mobile_platform qcn9024 wsa8845h_firmware qca8081_firmware snapdragon_8_gen_3_mobile_platform qfw7114 fastconnect_7800 qca6584au snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qcm4490_firmware qcn6274_firmware qcs4490_firmware snapdragon_x70_modem-rf_system_firmware snapdragon_x65_5g_modem-rf_system wsa8840_firmware qca6698aq wsa8832_firmware fastconnect_6900 snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware qcs8550_firmware wcn3988_firmware snapdragon_8\+_gen_1_mobile_platform fastconnect_6700_firmware wcd9340 qcn9024_firmware wsa8810_firmware qcn6224 fastconnect_7800_firmware snapdragon_8\+_gen_2_mobile_platform wsa8810 wsa8845h wsa8832 wcd9395_firmware snapdragon_x75_5g_modem-rf_system qca8081 sm8550p snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qcm4490 snapdragon_auto_5g_modem-rf_gen_2 snapdragon_auto_5g_modem-rf_gen_2_firmware wcd9385 qcc710 qcs4490 wcd9395 qcs8550 ar8035 wcd9370_firmware sm8550p_firmware wcd9390 qcc710_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware qcn6024 wcn3988 wsa8815_firmware wsa8835_firmware snapdragon_8\+_gen_1_mobile_platform_firmware qfw7124_firmware snapdragon_8_gen_2_mobile_platform_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.43% / 35.18%

||

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-02 Aug, 2024 | 15:32

Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware qam8255p_firmware wsa8830 qcn9070 sxr2230p_firmware qca8337 qam8650p qfw7124 ipq8173_firmware wcn785x-5 qam8775p qcf8001 qcn6224_firmware qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 wsa8840 immersive_home_318_platform_firmware ipq8078a ipq5028_firmware qca6595au_firmware ipq6000 ssg2115p qcn5152_firmware qca0000_firmware qca6584au_firmware wcn685x-1 qcn9000_firmware snapdragon_8_gen_2_mobile_platform ipq9554 qca6554a_firmware wcd9385_firmware immersive_home_216_platform ipq8076a immersive_home_316_platform immersive_home_316_platform_firmware qca8386_firmware qcn6024_firmware qca8084_firmware immersive_home_318_platform ipq8074a qcn5124_firmware qca8082_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware sdx55_firmware qca6595au qca8081_firmware qcn6023_firmware qfw7114 wsa8845h_firmware ipq5010 qca6564au_firmware qca6584au snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware ipq8078a_firmware qcn9274 ipq8174 ipq5028 wsa8840_firmware qca6698aq qcn5052 qca0000 qcf8001_firmware ipq6010 sc8380xp_firmware qcn6112_firmware qcn9074 qca8085 sdx65m wcd9340 qcn6132 qcn6224 qcn9013 wsa8845h snapdragon_ar2_gen_1_platform_firmware snapdragon_x75_5g_modem-rf_system wcd9395_firmware qca8081 qcf8000 qca6698aq_firmware ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware wcn685x-1_firmware immersive_home_3210_platform qca8085_firmware qam8775p_firmware qca9888_firmware qcn6122 wcd9385 qca6696_firmware ipq9008_firmware ipq9570 qcn5154_firmware qca6797aq ar8035 csr8811 wcd9390 qcc710_firmware qcn9100_firmware wsa8830_firmware ipq5010_firmware ipq8074a_firmware wsa8835_firmware qcn5022_firmware immersive_home_216_platform_firmware snapdragon_8_gen_2_mobile_platform_firmware wcn785x-1 qca8337_firmware wcd9380_firmware ssg2125p qcn9000 ipq8072a qcf8000_firmware qca6554a ipq8076a_firmware qca6595 ipq8078 qca6564au qca8084 ipq8173 qcm8550 ipq9008 qcn9012 qcn5164 immersive_home_326_platform_firmware qcn6122_firmware qca6574 sxr1230p_firmware wsa8835 snapdragon_8\+_gen_2_mobile_platform_firmware csr8811_firmware qcn6274 wcd9380 ipq9554_firmware qcn5154 qca8075_firmware ssg2125p_firmware qca6574a qcn5024 wcn685x-5_firmware qca9889 qcn6132_firmware sxr1230p qca9888 qcn9012_firmware qcn5052_firmware qcn9274_firmware qcc2076_firmware ipq8070a_firmware qfw7114_firmware wsa8845 qcc2073_firmware ipq6018_firmware ipq8076_firmware qca6574_firmware wcd9340_firmware qcn6112 sxr2230p ipq8076 wsa8845_firmware qca6574a_firmware qcn5152 ipq6028 sc8380xp qcn9024 ipq9574_firmware wcn785x-5_firmware immersive_home_3210_platform_firmware qcn9100 qcn6274_firmware snapdragon_x65_5g_modem-rf_system ipq8078_firmware ipq9570_firmware qcn9070_firmware snapdragon_x75_5g_modem-rf_system_firmware wsa8832_firmware wcn685x-5 ipq6028_firmware ipq8072a_firmware qca6797aq_firmware wcn785x-1_firmware qca6574au qca9889_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware snapdragon_8\+_gen_2_mobile_platform wsa8832 ipq5332_firmware ipq5332 sm8550p immersive_home_326_platform snapdragon_ar2_gen_1_platform ipq6018 qcn5022 qcn9013_firmware qam8650p_firmware qcc710 ipq6010_firmware immersive_home_214_platform qca6595_firmware wcd9395 qca6696 immersive_home_214_platform_firmware qca4024 sm8550p_firmware sdx55 qca8075 qcn9022_firmware wcd9390_firmware qcn6024 qcn9022 qcc2076 ipq8070a qcn9072_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware qfw7124_firmware qam8255p qcc2073 ar8035_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.47% / 37.84%

||

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-02 Aug, 2024 | 15:32

Buffer over-read in WLAN Firmware

Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware sc8180x-ab_firmware qca8337 qfw7124 ipq8173_firmware qca6431_firmware qam8775p qcf8001 qcn5124 qca4024_firmware wsa8840 immersive_home_318_platform_firmware sc8180x\+sdx55 ipq8078a ipq5028_firmware qca6595au_firmware wcn685x-1 wcn3998 qca6554a_firmware sc8180xp-ad ipq8076a qca8386_firmware qcn6024_firmware immersive_home_316_platform_firmware qca8084_firmware qca6574au_firmware qcn5164_firmware wcn3998_firmware qca8081_firmware qca6420 sc8180xp-af ipq8078a_firmware ipq5028 wsa8840_firmware qca6698aq sc8180xp-aa_firmware qca0000 qcf8001_firmware ipq6010 sc8380xp_firmware qca6430 sdx65m wcd9340 qcn6132 qcn9013 qca6436 qcf8000 qca6698aq_firmware wcn685x-1_firmware qca9888_firmware qam8775p_firmware qcn6122 wcd9341 qca6431 qca6696_firmware sc8180xp-ab_firmware ipq9008_firmware qca1062 sc8180x-ab qcn5154_firmware qca6797aq qcc710_firmware sm8250-ac_firmware wsa8830_firmware sd865_5g_firmware qcn5022_firmware immersive_home_216_platform_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p ipq8072a ipq8076a_firmware ipq8078 qca6564au qca8084 ipq8173 qcm8550 ipq9008 qcn5164 qca6574 csr8811_firmware sc8180xp-aa wcd9380 ipq9554_firmware qcn5024 sxr1230p sc8180xp-ad_firmware sc8180x-ac_firmware qca6430_firmware qcn5052_firmware qcn9012_firmware qcn9274_firmware qfw7114_firmware wsa8845 qcc2073_firmware ipq6018_firmware wcd9340_firmware wsa8815 qcn6112 qca6426_firmware sc8380xp ipq6028 sc8180x-ad qcn9024 ipq9574_firmware immersive_home_3210_platform_firmware qca6421_firmware snapdragon_xr2_5g_platform snapdragon_x65_5g_modem-rf_system ipq8078_firmware snapdragon_x75_5g_modem-rf_system_firmware qca6797aq_firmware wcn785x-1_firmware qcn9024_firmware ipq8174_firmware snapdragon_8\+_gen_2_mobile_platform wsa8832 sc8180xp-ac_firmware ipq5332 immersive_home_326_platform ipq6018 qcc710 immersive_home_214_platform qca6595_firmware wcd9395 qca6391_firmware immersive_home_214_platform_firmware qca4024 sm8550p_firmware sdx55 sm8250 ssg2115p_firmware qfw7124_firmware qam8255p ar8035_firmware qcn5024_firmware wcn3991_firmware wsa8830 qcn9070 sxr2230p_firmware qca1062_firmware qam8650p wcn785x-5 qcn6224_firmware qca8082 qcn9072 qca8386 qca6420_firmware qca6390_firmware ipq6000 ssg2115p qcn5152_firmware qca0000_firmware qca6426 qca6584au_firmware qcn9000_firmware snapdragon_8_gen_2_mobile_platform sm8250-ab ipq9554 wcd9385_firmware immersive_home_216_platform immersive_home_316_platform immersive_home_318_platform ipq8074a qcn5124_firmware qca1064 qca8082_firmware snapdragon_x55_5g_modem-rf_system qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wsa8845h_firmware qfw7114 qca6436_firmware ipq5010 qca6564au_firmware qca6584au snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qcn9274 ipq8174 qcn5052 sm8250_firmware qcn6112_firmware sm8250-ac qcn9074 qca6421 qca8085 wsa8810_firmware qcn6224 wsa8845h snapdragon_ar2_gen_1_platform_firmware snapdragon_x75_5g_modem-rf_system wcd9395_firmware qca8081 ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware wcd9385 immersive_home_3210_platform qca8085_firmware sxr2130_firmware ipq9570 sc8180x-ac qca6390 ar8035 csr8811 aqt1000 sc8180x\+sdx55_firmware wcd9390 qcn9100_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wsa8835_firmware snapdragon_8_gen_2_mobile_platform_firmware wcn785x-1 qcn9000 qcf8000_firmware qca6554a sd865_5g qca6595 qcn9012 immersive_home_326_platform_firmware qcn6122_firmware wsa8835 sxr1230p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware qcn6274 qcn5154 qca8075_firmware sc8180xp-ac qca6574a ssg2125p_firmware sxr2130 wcn685x-5_firmware qca9889 sc8180x-af qcn6132_firmware qca9888 qcc2076_firmware ipq8070a_firmware ipq8076_firmware qca6574_firmware sxr2230p ipq8076 wsa8845_firmware snapdragon_xr2_5g_platform_firmware qca6574a_firmware qcn5152 wcn785x-5_firmware snapdragon_x55_5g_modem-rf_system_firmware sm8250-ab_firmware qca6391 aqt1000_firmware qcn9100 qcn6274_firmware wsa8832_firmware ipq9570_firmware qcn9070_firmware wcn685x-5 ipq6028_firmware ipq8072a_firmware sc8180xp-af_firmware qca6574au qca9889_firmware ipq9574 qcn5122 wcd9341_firmware wsa8810 sc8180x-aa_firmware ipq5332_firmware sm8550p snapdragon_ar2_gen_1_platform qcn5022 qcn9013_firmware sc8180x-aa qam8650p_firmware ipq6010_firmware sc8180x-af_firmware qca1064_firmware qca6696 sc8180xp-ab qca8075 qcn9022_firmware wcd9390_firmware qcn6024 qcn9022 qcc2076 ipq8070a sc8180x-ad_firmware qcn9072_firmware ipq6000_firmware qcn9074_firmware qcc2073 Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.43% / 35.18%

||

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing no-inherit IES.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware sd865_5g ipq9574 qcn9000_firmware qcn6102_firmware qca6595 qcn9022 ipq6028_firmware immersive_home_214_platform qca8081_firmware wcd9370 qcn9001 qca8072 qca6696 wcd9340_firmware ipq5028_firmware wcd9395_firmware qcn6024 qcn9003_firmware qca6390 ar9380 qcc2073_firmware qcc710_firmware ipq8076 qca6426 wcn6740_firmware ipq6018_firmware qca9984_firmware qcn6023 qcn5124_firmware wsa8832_firmware immersive_home_216_platform qca8337 qca9994_firmware qca6426_firmware wcd9395 ipq6000 qca6574au_firmware ipq8078a ipq8078a_firmware wcn785x-5 qam8295p qca6574au wcd9390 wsa8810_firmware wsa8845h_firmware qcn9100_firmware qca2064_firmware qcn5122 qca6554a qcn6024_firmware qca9886_firmware sm8350 qcn9000 ssg2115p qcc710 qcn6132_firmware qca2062_firmware qsm8350_firmware qcn5054 sm8450_firmware ipq5332_firmware qcn5052 qca9980 qfw7114 wcd9385_firmware snapdragon_x55_5g_modem-rf_system ipq9574_firmware qam8255p_firmware ipq8064 ipq8074a_firmware ipq8076a qcn5164 snapdragon_ar2_gen_1_platform_firmware qcs4490 immersive_home_3210_platform_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 qcn6100_firmware qca6564au_firmware csr8811_firmware wsa8810 qca8075 qam8650p qca8085 snapdragon_8\+_gen_2_mobile_platform sm8350-ac qcn6100 qca6595au wsa8840 qcs8550_firmware qca6390_firmware qca9986_firmware qfw7124_firmware qca6436_firmware qcn9012 ipq8070a_firmware qcn9070 qcs4490_firmware snapdragon_8_gen_2_mobile_platform qcf8001 qca8084 sm8250-ac_firmware sdx65m wcd9370_firmware snapdragon_x55_5g_modem-rf_system_firmware qcc2076 qca6574a ipq9570 wcd9340 qcm6490 immersive_home_316_platform_firmware qcn6122_firmware qcn5154_firmware sm8550p_firmware immersive_home_3210_platform qcm8550 qcn5122_firmware qcn9274 qcn9024 ipq8076a_firmware qca6574 snapdragon_x75_5g_modem-rf_system ipq9570_firmware sxr2230p_firmware ar9380_firmware qca2066_firmware qcn9024_firmware wsa8845h qca8082 qca8072_firmware wsa8830 sm8550p qcf8000_firmware qcn9074_firmware ipq8174 qcn6122 sa8255p_firmware ipq8174_firmware wcn785x-1_firmware qcc2073 ar8035 ipq8072a qca2065 qca9985 qcn6224 ipq8071a sc8280xp-ab sm8475_firmware qcn6112 qca6698aq wcn3950_firmware ssg2125p_firmware wcn685x-1 video_collaboration_vc3_platform_firmware qcn6023_firmware qcn5164_firmware qcn9002 ipq8078 immersive_home_326_platform_firmware qcs6490 ipq9554_firmware sc8280xp-bb_firmware qcn9072 wsa8830_firmware qcn6224_firmware qca6678aq_firmware qca8386_firmware wsa8845_firmware wsa8832 qca8082_firmware qcc2076_firmware sxr2130_firmware qca6678aq ar8035_firmware qcn5022_firmware sm8475 qca9992 sc8380xp sm8250-ab_firmware qca4024_firmware qca0000_firmware sd888_firmware ipq9008 ipq9554 qca6564au qca9992_firmware qca9990 ipq9008_firmware qcn9074 immersive_home_214_platform_firmware wsa8815_firmware sm8250-ab qca8337_firmware qcn5054_firmware qca9888 ipq5332 qcn9013 sg8275p_firmware ipq8173 qcm6490_firmware ipq8072a_firmware sm8350-ac_firmware ipq6010_firmware qcm4490_firmware wcn785x-5_firmware wcn3950 snapdragon_xr2_5g_platform qcn6112_firmware snapdragon_x65_5g_modem-rf_system_firmware qca6797aq_firmware sm7350-ab_firmware ipq5028 qca9986 qcf8001_firmware qcn9070_firmware qca8085_firmware sa8295p_firmware qca9984 ipq5010_firmware qcn9022_firmware qca9886 qcn6132 ipq6018 qcn6102 qca6584au sd888 qcn6274_firmware wcn685x-5 wcn6740 sc8380xp_firmware ipq8065 qfw7114_firmware qca4024 sc8280xp-ab_firmware qca6595_firmware sm8250-ac sm8250_firmware qcn9001_firmware immersive_home_216_platform_firmware ipq8070a wcd9380 qam8255p sxr2230p qca9990_firmware snapdragon_xr2_5g_platform_firmware qcn9003 qca8075_firmware qcf8000 qcn5052_firmware sm7350-ab snapdragon_auto_5g_modem-rf_firmware qca2064 sm8350_firmware sxr1230p qca2065_firmware ipq6010 sdx65m_firmware video_collaboration_vc3_platform qca9980_firmware qca9985_firmware qam8295p_firmware qca6698aq_firmware wcd9385 qca9994 qsm8350 sc8280xp-bb qca8084_firmware sa8255p sxr1230p_firmware wcd9390_firmware immersive_home_318_platform_firmware wcn6750 qcn5024 sg8275p wcn6750_firmware sdx55_firmware ipq8071a_firmware snapdragon_auto_5g_modem-rf ssg2125p qca6554a_firmware sxr2130 ipq6028 qcm4490 qcn9100 immersive_home_326_platform qam8650p_firmware qcn9013_firmware qca2062 qcs6490_firmware sm8450 snapdragon_x65_5g_modem-rf_system ipq8076_firmware qca6584au_firmware qcn5152_firmware qcn6274 qca6436 qfw7124 wsa8835 wsa8840_firmware qca6391_firmware qca6595au_firmware qca0000 sm8250 snapdragon_ar2_gen_1_platform ipq8068 qca6696_firmware wcd9380_firmware qca6574_firmware qca8081 wsa8815 sd_8_gen1_5g qcn5124 qam8775p ipq8064_firmware qca6797aq qcn5152 ipq8065_firmware qca6574a_firmware sdx55 qcn9072_firmware qca9888_firmware ipq8074a immersive_home_318_platform qca9889 qcn5024_firmware sd_8_gen1_5g_firmware qcn9002_firmware wcd9375_firmware qca8386 qca6391 ipq5010 qcn9274_firmware wcn785x-1 ipq8173_firmware qcn9012_firmware snapdragon_8_gen_2_mobile_platform_firmware sa8295p qcs8550 ipq8068_firmware ipq6000_firmware qam8775p_firmware sd865_5g_firmware wcd9375 ipq8078_firmware wcn685x-5_firmware qca9889_firmware qcn5154 immersive_home_316_platform wsa8835_firmware qca2066 ssg2115p_firmware csr8811 qcn5022 snapdragon_x75_5g_modem-rf_system_firmware wcn685x-1_firmware Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.12% / 62.61%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 19:00

Updated-17 Sep, 2024 | 04:04

While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read can potentially occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 0.45%

||

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:49

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in Camera

Memory corruption during the image encoding process.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8845_firmware wsa8840 wcd9370 snapdragon_7c_gen_2_compute_firmware sc8180xp-aaab_firmware wcd9340_firmware wcd9385 sc8380xp wcd9341_firmware snapdragon_7c\+_gen_3_compute_firmware fastconnect_6700 qca6420 sc8180xp-ad sc8280xp-abbb qca6430 wsa8815_firmware wcd9370_firmware sc8180xp-ad_firmware qcm6490_firmware sc8180xp-aaab wcd9340 wcd9341 qcm6490 wsa8810_firmware wsa8845h_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sc8180xp-acaf snapdragon_7c\+_gen_3_compute wsa8835 wsa8840_firmware qca6391_firmware qca6430_firmware fastconnect_6800_firmware qcs5430 wsa8845h wcd9380_firmware qcm5430 sm6250_firmware sc8180x-ad_firmware qcm5430_firmware sc8180x-acaf wsa8815 snapdragon_7c_compute wsa8830 snapdragon_7c_gen_2_compute sc8180x\+sdx55_firmware snapdragon_7c_compute_firmware sc8380xp_firmware fastconnect_6800 wcd9375_firmware fastconnect_7800_firmware fastconnect_6900 qca6391 qcs5430_firmware sc8180x\+sdx55 wcd9385_firmware sm6250 fastconnect_6900_firmware wcd9380 fastconnect_6200 sc8280xp-abbb_firmware fastconnect_7800 sc8180x-acaf_firmware wcd9375 wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware sc8180x-ad wsa8835_firmware sc8180x-aaab wsa8810 sc8180x-aaab_firmware qcs6490 sc8180xp-acaf_firmware fastconnect_6200_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.84% / 53.79%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 19:25

Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.37% / 29.68%

||

7 Day CHG~0.00%

Published-28 Nov, 2018 | 15:00

Updated-05 Aug, 2024 | 05:47

Buffer overread while decoding PDP modify request or network initiated secondary PDP activation in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDA845, SDX20, SXR1130.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.17% / 6.66%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 17:32

While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.17% / 6.13%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 17:32

Buffer over-read may happen in wma_process_utf_event() due to improper buffer length validation before writing into param_buf->num_wow_packet_buffer in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.87% / 54.90%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 16:52

In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, a buffer over-read can potentially occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.53% / 41.57%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 18:18

While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.16% / 5.99%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 18:03

In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, kernel panic may happen due to out-of-bound read, caused by not checking source buffer length against length of packet stream to be copied.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.34% / 26.74%

||

7 Day CHG~0.00%

Published-03 Apr, 2018 | 17:00

Updated-17 Sep, 2024 | 00:11

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in function wma_wow_wakeup_host_event(), wake_info->vdev_id is received from FW and is used directly as array index to access wma->interfaces whose max index should be (max_bssid-1). If wake_info->vdev_id is greater than or equal to max_bssid, an out-of-bounds read occurs.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.18% / 7.54%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 17:00

Updated-16 Sep, 2024 | 16:48

In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the data_len value is received from firmware and not properly validated which could potentially lead to an out-of-bounds access.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.18% / 7.34%

||

7 Day CHG~0.00%

Published-06 Jul, 2018 | 19:00

Updated-16 Sep, 2024 | 20:21

While processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read and information leak can potentially occur.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-4.6||MEDIUM

EPSS-0.14% / 3.88%

||

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:30

Updated-03 Aug, 2024 | 16:25

Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wcn3991 sda429w_firmware sd678 wcd9380_firmware sd_675 sdm429w sdx55m_firmware msm8909w_firmware sdm429w_firmware wcn3950_firmware wcd9380 qca6420_firmware qualcomm215 sd730_firmware wcd9370 sd_675_firmware sd675_firmware sdx50m_firmware qca9379_firmware qca6174a qca6430_firmware wcn3980 wcn3998 wcn3950 wcd9326_firmware sd720g wcn3615_firmware wcn3660b sd855 wsa8815 qca4020 wcn3660b_firmware wcn3680 wcn3680b_firmware sdx55_firmware wcd9375_firmware wcn3615 wcn3998_firmware wcn3980_firmware msm8909w sd730 wcn3610_firmware apq8009w_firmware qca6420 sdx55m aqt1000_firmware sd678_firmware wcn3680_firmware sdx50m wcn3988_firmware qca6430 sd205 sm6250 sd205_firmware apq8009w wsa8810_firmware qualcomm215_firmware wcd9341_firmware wsa8810 qca4020_firmware wcd9326 sd210_firmware wcn3680b qca6174a_firmware wcd9341 wcd9375 wcd9370_firmware aqt1000 sm6250_firmware sdx55 sd675 sda429w sd210 sd855_firmware wcn3620_firmware wcn3988 wsa8815_firmware wcn3620 sd720g_firmware qca9379 wcn3610 Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.20% / 9.87%

||

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:49

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN Embedded SW

Transient DOS while processing received beacon frame.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_x20_lte_modem immersive_home_214 robotics_rb3 sd865_5g apq8017 sa6150p_firmware sw5100p sxr1120 sm8735 snapdragon_670_mobile sxr2330p_firmware ar9380 snapdragon_8\+_gen_1_mobile fastconnect_6700 snapdragon_780g_5g_mobile snapdragon_750g_5g_mobile snapdragon_685_4g_mobile sa4150p snapdragon_782g_mobile_firmware snapdragon_x50_5g_modem-rf_firmware snapdragon_auto_4g_modem snapdragon_665_mobile_firmware sc8180xp-aaab snapdragon_690_5g_mobile_firmware snapdragon_x72_5g_modem-rf sm6370 snapdragon_820_automotive snapdragon_x12_lte_modem snapdragon_888\+_5g_mobile_firmware sa8620p_firmware sd730_firmware csra6640 snapdragon_778g_5g_mobile_firmware sa9000p_firmware sc8180xp-acaf srv1h sm8650q_firmware sd730 snapdragon_820_automotive_firmware fastconnect_6800_firmware snapdragon_690_5g_mobile sdx20m snapdragon_636_mobile_firmware video_collaboration_vc1_platform_firmware sa4155p snapdragon_712_mobile_firmware sa8770p snapdragon_678_mobile_firmware ssg2115p sd821 snapdragon_x32_5g_modem-rf_firmware snapdragon_xr2_5g_firmware snapdragon_xr1_firmware sxr1120_firmware snapdragon_x5_lte_modem_firmware 315_5g_iot_modem_firmware fastconnect_6900 robotics_rb2 snapdragon_w5\+_gen_1_wearable_firmware video_collaboration_vc1_platform sa7255p sm8635 snapdragon_730_mobile_firmware 315_5g_iot_modem sa8155_firmware sdx61 snapdragon_x65_5g_modem-rf snapdragon_730_mobile sc7180-ad sd821_firmware snapdragon_680_4g_mobile sa6155p sc8180x-ad sd820 csr8811_firmware video_collaboration_vc5_platform_firmware sa9000p srv1h_firmware snapdragon_888_5g_mobile_firmware snapdragon_888_5g_mobile sxr2250p_firmware sm7315_firmware snapdragon_662_mobile_firmware sa6155p_firmware snapdragon_685_4g_mobile_firmware snapdragon_845_mobile_firmware snapdragon_ar1_gen_1 srv1m_firmware snapdragon_x35_5g_modem-rf_firmware snapdragon_730g_mobile snapdragon_782g_mobile snapdragon_8_gen_2_mobile_firmware snapdragon_x55_5g_modem-rf snapdragon_4_gen_2_mobile_firmware sm8750p snapdragon_695_5g_mobile_firmware snapdragon_x55_5g_modem-rf_firmware sm4125_firmware snapdragon_850_mobile sm8635p snapdragon_x62_5g_modem-rf_firmware snapdragon_460_mobile snapdragon_8_gen_2_mobile apq8064au_firmware csrb31024 robotics_rb2_firmware snapdragon_712_mobile sa7255p_firmware snapdragon_x72_5g_modem-rf_firmware sm7635p_firmware snapdragon_8\+_gen_2_mobile sa8195p snapdragon_1200_wearable_firmware snapdragon_auto_5g_modem-rf_gen_2 snapdragon_7c_firmware sxr2250p sm8550p_firmware snapdragon_x20_lte_modem_firmware sm6370_firmware snapdragon_765_5g_mobile_firmware snapdragon_662_mobile apq8076 vision_intelligence_300_firmware sa8775p sxr2230p_firmware sd675_firmware ar9380_firmware snapdragon_855_mobile_firmware sa8775p_firmware smart_audio_400 sa6150p sm8650q sa8155p_firmware snapdragon_630_mobile sa8155p home_hub_100 snapdragon_765g_5g_mobile_firmware sm8550p sa6145p snapdragon_768g_5g_mobile_firmware sc8180x\+sdx55_firmware immersive_home_318_firmware sa8255p_firmware sm7675_firmware ar8035 sm7635_firmware snapdragon_4_gen_2_mobile sa6155 sa8650p_firmware snapdragon_820_mobile_firmware sm7635p immersive_home_216_firmware immersive_home_316 srv1l_firmware snapdragon_x5_lte_modem snapdragon_865\+_5g_mobile_firmware apq8064au sc8180x\+sdx55 sa7775p_firmware ssg2125p_firmware sm6250 sm7635 snapdragon_480\+_5g_mobile fastconnect_6200 sd670 sm7325p_firmware sa8145p_firmware sd460 sc8180x-acaf_firmware snapdragon_480_5g_mobile_firmware snapdragon_660_mobile_firmware sm8635p_firmware sm6650p_firmware sa8150p_firmware fastconnect_6700_firmware snapdragon_710_mobile_firmware video_collaboration_vc3_platform_firmware robotics_rb3_firmware snapdragon_x75_5g_modem-rf_firmware sd670_firmware snapdragon_8_gen_3_mobile snapdragon_855_mobile snapdragon_695_5g_mobile sc8180xp-acaf_firmware snapdragon_778g_5g_mobile fastconnect_6200_firmware ar8031_firmware home_hub_100_firmware snapdragon_460_mobile_firmware sd660_firmware snapdragon_7c\+_gen_3 sdx61_firmware snapdragon_auto_4g_modem_firmware snapdragon_480_5g_mobile snapdragon_750g_5g_mobile_firmware srv1l immersive_home_216 srv1m sxr2130_firmware sm7675p snapdragon_860_mobile_firmware snapdragon_x35_5g_modem-rf ar8035_firmware sc8180xp-aaab_firmware snapdragon_778g\+_5g_mobile sc8380xp sa4150p_firmware sd888_firmware snapdragon_x62_5g_modem-rf sm4635 snapdragon_820_mobile sc8180xp-ad sm6250p_firmware sc8280xp-abbb sa8195p_firmware snapdragon_x12_lte_modem_firmware sd_455_firmware ar8031 sg8275p_firmware snapdragon_xr2\+_gen_1 snapdragon_665_mobile sm7250p_firmware sm4635_firmware sm4125 vision_intelligence_400_firmware flight_rb5_5g snapdragon_870_5g_mobile_firmware snapdragon_730g_mobile_firmware sm8750 snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_732g_mobile snapdragon_778g\+_5g_mobile_firmware sa8295p_firmware smart_audio_400_firmware sd_675_firmware snapdragon_870_5g_mobile smart_audio_200_firmware sa4155p_firmware snapdragon_720g_mobile snapdragon_678_mobile sd_455 sm7250p csrb31024_firmware sa8155 sd_8cx_firmware sc8180x-acaf sm6250_firmware snapdragon_652_mobile sc8180x-ad_firmware sd888 sd460_firmware snapdragon_675_mobile_firmware sw5100_firmware snapdragon_768g_5g_mobile sc8380xp_firmware snapdragon_780g_5g_mobile_firmware snapdragon_845_mobile snapdragon_8_gen_3_mobile_firmware fastconnect_6800 fastconnect_7800_firmware snapdragon_675_mobile immersive_home_214_firmware snapdragon_865_5g_mobile_firmware sm8635_firmware fastconnect_6900_firmware robotics_rb5_firmware apq8017_firmware sa6145p_firmware sa6155_firmware sxr2230p smart_audio_200 snapdragon_xr2_5g sa8150p sxr2330p snapdragon_x24_lte_modem snapdragon_1200_wearable snapdragon_auto_5g_modem-rf_firmware sc8180x-aaab sxr1230p sc8180x-aaab_firmware sd662_firmware sm6650 sw5100 video_collaboration_vc3_platform aqt1000 snapdragon_4_gen_1_mobile_firmware sm6650p sd855 sm7315 snapdragon_660_mobile sdx20m_firmware snapdragon_888\+_5g_mobile snapdragon_xr2\+_gen_1_firmware snapdragon_8_gen_1_mobile snapdragon_630_mobile_firmware sd662 snapdragon_680_4g_mobile_firmware sa8255p sxr1230p_firmware snapdragon_821_mobile snapdragon_865\+_5g_mobile sd820_firmware snapdragon_855\+_mobile sg8275p sm6250p snapdragon_765_5g_mobile snapdragon_860_mobile sdx55_firmware sc8180xp-ad_firmware sm8750_firmware snapdragon_auto_5g_modem-rf flight_rb5_5g_firmware ssg2125p sxr2130 9206_lte_modem_firmware snapdragon_x65_5g_modem-rf_firmware csra6640_firmware snapdragon_480\+_5g_mobile_firmware robotics_rb5 sm7325p snapdragon_x50_5g_modem-rf snapdragon_732g_mobile_firmware video_collaboration_vc5_platform snapdragon_670_mobile_firmware aqt1000_firmware sm6650_firmware snapdragon_652_mobile_firmware sd855_firmware snapdragon_x24_lte_modem_firmware sw5100p_firmware snapdragon_7c csra6620 sd660 sg4150p sd_8_gen1_5g snapdragon_ar2_gen_1_firmware snapdragon_x75_5g_modem-rf sa8620p 9206_lte_modem sdx55 snapdragon_4_gen_1_mobile snapdragon_720g_mobile_firmware snapdragon_865_5g_mobile snapdragon_855\+_mobile_firmware sd675 snapdragon_821_mobile_firmware sd_8_gen1_5g_firmware sa7775p snapdragon_7c\+_gen_3_firmware snapdragon_ar1_gen_1_firmware immersive_home_318 snapdragon_710_mobile snapdragon_x32_5g_modem-rf sg4150p_firmware sa8770p_firmware csra6620_firmware sa8295p sm8735_firmware sc8280xp-abbb_firmware fastconnect_7800 sa8650p sd865_5g_firmware sm8750p_firmware snapdragon_xr1 sc7180-ad_firmware apq8076_firmware snapdragon_8\+_gen_2_mobile_firmware vision_intelligence_300 snapdragon_ar2_gen_1 snapdragon_765g_5g_mobile snapdragon_850_mobile_firmware immersive_home_316_firmware snapdragon_636_mobile sm7675 sa8145p sd_675 snapdragon_8\+_gen_1_mobile_firmware sd_8cx vision_intelligence_400 ssg2115p_firmware csr8811 sm7675p_firmware snapdragon_w5\+_gen_1_wearable snapdragon_8_gen_1_mobile_firmware Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.38% / 30.63%

||

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 14:57

Buffer over-read in WLAN

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware ipq4028_firmware qca1023 qca8337 ar9380 ipq8173_firmware qcn5124 mdm9645 wcn3950_firmware qca6595au_firmware sa6155 mdm8215 sd_455_firmware apq8076 qcs6125_firmware sa415m sm4375 wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware wcn3660b qsm8350_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca8081_firmware wcn3998_firmware qca6420 qcn9002 qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware sd_8cx_gen2 ipq8072_firmware qca0000 sa8155_firmware ipq8068 qca6430 wcd9340 sd765g sd680 wcn7851_firmware mdm9250_firmware qca9888_firmware qcn6122 qca6696_firmware wcd9371 sd870_firmware qca1062 qcn5154_firmware mdm8215_firmware sd_8cx sa8150p qca9992_firmware sd660 sd865_5g_firmware sd712 sd660_firmware sm8475 qcn5022_firmware qcn7606_firmware wcn6750_firmware qca6428_firmware qca9985_firmware wcn3991 ipq4018_firmware qca9980_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 sdx55m_firmware msm8976_firmware qca6574 sd670_firmware csr8811_firmware wcd9380 qcs410 qcn5024 sd690_5g_firmware qca9379_firmware sdx24_firmware qca9985 qcn9012_firmware qcn9274_firmware ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qcn6112 qca6584_firmware mdm9215_firmware sd695 ipq6028 ipq8064 sd835 pmp8074 ipq9574_firmware wcn3980_firmware sd730 qcc5100_firmware sa8295p qca2062_firmware wcn6740_firmware sd678_firmware apq8064au_firmware ipq8078_firmware qcn5054 qcs603 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware qcm4290_firmware wcn6855 qcn7605_firmware sw5100p_firmware qcs610_firmware sa6145p qca9886_firmware ar8031 qca1023_firmware sdm630_firmware sd820_firmware qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware csra6640 qca9379 sa4155p sxr2150p qcn7606 qsm8250_firmware wsa8830 qca1062_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qca8082 qca9992 qcs4290 mdm9250 qca6420_firmware apq8009_firmware qca2064_firmware sd690_5g mdm9310_firmware sd675_firmware ipq8072 qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9984_firmware qca9377 wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware ipq8074a qcn6102_firmware qcn9011_firmware sa8155 qca6584 qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware sm7250p_firmware wcn3610_firmware qrb5165n qca6584au sd778g ipq8174 wcn7851 qcn5052 qca9367 sdm630 mdm9607_firmware qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 qca6421 qca8085 sd778g_firmware sa8195p qca6694 sm4375_firmware wcd9326 wcd9335 qcn6023 qcs4290_firmware qca8085_firmware qcs6490_firmware qca6390 qca9898_firmware sd750g_firmware aqt1000 msm8976 wcd9375 sm6250_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware apq8017 qcx315 qcm6125_firmware sd780g sd865_5g qca6595 qcc5100 ipq8065_firmware qcx315_firmware sd665_firmware qcn5154 qca8075_firmware sc8180x mdm9206 wcn6855_firmware qcn6132_firmware qcn9003_firmware qca9888 qca6310_firmware ipq8070a_firmware mdm9615 qca6574_firmware qca9886 sm7325p_firmware sd665 qca6175a sd765 qca6574a_firmware qrb5165m sd850_firmware sm7315 apq8009 mdm9310 qcn6102 csrb31024_firmware qcm6490_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware sc8180x_firmware qca9889_firmware sd710 mdm9607 qcn5122 mdm9645_firmware sdx20m_firmware qcn5022 qca6564_firmware sd768g qca1064_firmware wcn6740 qca8075 apq8096au_firmware qcn6024 qcn9022 sd845 mdm9615_firmware qcn9002_firmware ipq6000_firmware sdx12 qcs410_firmware qca6175a_firmware sd_8cx_gen3_firmware qca2066 sa6150p_firmware qcs610 qca6431_firmware wcd9360_firmware sdx65 qca4024_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6335 qca2062 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qca6554a_firmware qam8295p sd_8cx_gen2_firmware ipq8076a mdm9628 qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware sd710_firmware qca4020 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware sa6155_firmware sdx12_firmware wcd9360 sdx20m qca6438_firmware sd680_firmware wcn3999 qrb5165_firmware ipq5028 qrb5165m_firmware ipq4029_firmware qcs6125 sa4155p_firmware ipq6010 sd662_firmware qcs405 qcn6132 sw5100 qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcd9341 ipq8068_firmware qca2066_firmware qca6431 sd750g ipq9008_firmware wcn3910_firmware sxr2150p_firmware wsa8830_firmware sd855_firmware wcn3988 qca6438 wcn7850_firmware sa8195p_firmware qca9898 sa8295p_firmware ipq4028 wcn3610 mdm9640 ipq5018_firmware qca8337_firmware wcd9380_firmware ipq8072a sw5100p msm8996au_firmware wcd9330 ipq8076a_firmware qca6564au wcn6856_firmware ipq9008 qcn5164 qcn5054_firmware sdx50m_firmware qca8072_firmware qca6174 qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 sd7c wcn3910 qca6320 mdm9650_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware qca9984 qcn9024 wcd9330_firmware sdx55m ipq8064_firmware qca6421_firmware sd821_firmware ar8031_firmware qrb5165 wcn6851_firmware ipq8070 sd_636_firmware qca6564a_firmware sd480 sd870 qsm8250 ipq6018 sd695_firmware sdxr1 apq8096au qca6595_firmware qcs405_firmware sa8145p qca2064 sd780g_firmware sd888_firmware sa8155p sd675 ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware sd678 qcn9070 sa8145p_firmware qcs2290_firmware sd7c_firmware csra6620 qcn9072 qca8386 sd765g_firmware ipq8069_firmware qca6390_firmware ipq6000 qca6174_firmware sd730_firmware wcd9370 qcn5152_firmware qca0000_firmware qca6584au_firmware apq8076_firmware qcn9000_firmware ipq5018 sd_8cx_firmware qcn7605 qca2065 sd662 qcn5124_firmware qam8295p_firmware qca1064 qcn6100_firmware qca8082_firmware qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware ipq5010 qca6564au_firmware sa6155p_firmware qca6310 qcn9274 qcn9001 qca9990 qcs6490 sa515m_firmware sdxr2_5g sd821 sa6145p_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware sd765_firmware qca8081 ipq8071a qca6174a_firmware ipq8071a_firmware wcd9385 qca2065_firmware sd_8cx_gen3 ar8035 csr8811 apq8064au qca6694_firmware qcn9100_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware qca6564a sa4150p qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 qca6554a ar9380_firmware sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 msm8996au sd888_5g sm6250p ipq4018 qca6574a qca9889 qca6174a sm7325p ipq8074 qca9994_firmware wcn6750 qcn9003 ipq8076_firmware sa515m sd855 sm4125_firmware ipq8076 qcn5021 ipq8069 qcn5152 sd768g_firmware sd460 qca6391 sdxr1_firmware aqt1000_firmware qcn9100 sdx65_firmware qcm4290 sdx50m sdx20 mdm9215 qcn9011 sd_455 ipq8074_firmware qca6574au sa8155p_firmware ipq9574 wcd9341_firmware qcm6125 wsa8810 wcn6856 wcn3680b sd835_firmware ipq6010_firmware qca6696 sd845_firmware sa6150p qcn9022_firmware qca9990_firmware ipq8070a qcn6100 qcn9072_firmware sm7250p sd720g_firmware ipq8071_firmware qcn9074_firmware sw5100_firmware ipq4029 sd850 Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.38% / 29.90%

||

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Buffer over-read in WLAN

Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_8cx_gen3_firmware qca2066 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 qca8337 ar9380 ipq8173_firmware qca6431_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 qca2062 sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 qca6554a_firmware wcd9371_firmware qam8295p wcn3950 qcn6024_firmware sd720g sm4125 sd_8cx_gen2_firmware ipq8076a qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 sdx20m qcn9002 qca9986 sd680_firmware ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware qca6678aq_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware qca6698aq qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 wcd9340 qcn6132 sd765g sw5100 sd680 qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca2066_firmware qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g qca1062 ipq9008_firmware qcn5154_firmware wcn3910_firmware sxr2150p_firmware sd_8cx sa8150p wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 sd712 sd855_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 qcn5022_firmware qcn7606_firmware wcn6750_firmware sa8295p_firmware mdm9640 ipq5018_firmware qca9985_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p ipq8072a qca9980_firmware sw5100p msm8996au_firmware wcd9330 ipq8076a_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 sdx55m_firmware qca6564au wcn6856_firmware ipq9008 qcn5164 sd670_firmware qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware sdx50m_firmware sxr1230p sdx24_firmware qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcm4325_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c pmp8074_firmware qcn6112 wcn3910 qca6320 qca9986_firmware qca6426_firmware sd695 ipq6028 ipq8064 sd835 pmp8074 qca9984 ipq9574_firmware wcn3980_firmware qcn9024 sd730 wcd9330_firmware sdx55m ipq8064_firmware qcc5100_firmware sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware sd821_firmware qca6678aq sd678_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 ipq8070 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware sd_636_firmware qca6564a_firmware sd480 sd870 wsa8832 wcn6855 qcn7605_firmware sw5100p_firmware qcs610_firmware qsm8250 sa6145p ipq6018 qca9886_firmware sd695_firmware sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware sa8145p sdm630_firmware sd820_firmware qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware qcn5021_firmware sa8155p csra6640 sd675 ssg2115p_firmware sxr2150p ar8035_firmware qsm8250_firmware qcn7606 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sxr2230p_firmware sa8145p_firmware qca1062_firmware sd7c_firmware csrb31024 snapdragon_4_gen_1_firmware sd_636 csra6620 qca8082 qcn9072 qca8386 qca9992 sd765g_firmware qca6420_firmware qca6390_firmware qca2064_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ssg2115p qcn5152_firmware qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware qcn7605 wcd9326_firmware ipq8074a qca2065 sd662 qcn5124_firmware qam8295p_firmware qcn6102_firmware qcn9011_firmware qca1064 sa8155 qcn6100_firmware qca8082_firmware qca6320_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qca6310 qcn9274 ipq8174 wcn7851 sa515m_firmware qca9990 qcn9001 qcn5052 qca9367 qcs6490 sdxr2_5g sdm630 sd821 qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sm6250 sa8195p sd712_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 sg4150p qca8081 qcn6023 ipq8071a qca6174a_firmware ipq8071a_firmware wcd9385 qca8085_firmware qcs6490_firmware qca2065_firmware sd_8cx_gen3 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 csr8811 sm6250_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware qca6564a sa4150p sg4150p_firmware qcm6125_firmware qcm4325 qca8072 wcn3990 qcn9000 sd_675 sd780g qca6554a sd865_5g qca6595 ar9380_firmware qcc5100 sdx24 qcn9012 sd888 qcn6122_firmware ipq8065_firmware sxr1230p_firmware wsa8835 msm8996au sd665_firmware sd888_5g sm6250p qcn5154 qca8075_firmware sc8180x ssg2125p_firmware qca6574a wcn6855_firmware qca9889 qca6174a sm7325p qcn6132_firmware qcn9003_firmware qca9888 qca6310_firmware qca9994_firmware wcn6750 qcn9003 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 sd855 sm4125_firmware sm7325p_firmware sd665 sxr2230p ipq8076 sd765 qca6574a_firmware qcn5021 qcn5152 sd768g_firmware qrb5165m sd850_firmware sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware qcn6102 qcn9100 sdx65_firmware csrb31024_firmware qcm6490_firmware wsa8832_firmware sdx50m qcn9070_firmware sdx20 sd480_firmware ipq6028_firmware ipq8072a_firmware qcn9011 sc8180x_firmware sd_455 qca6574au qca9889_firmware sd710 sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware sdx20m_firmware qcm6125 wsa8810 wcn6856 qcn5022 sd835_firmware sd768g ipq6010_firmware qca1064_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware sd850 Snapdragon qcn5024_firmware qca9377_firmware sd_8cx_gen3_firmware wcn3991_firmware mdm9640_firmware sa6150p_firmware sa8145p_firmware sm6250p_firmware sxr2230p_firmware qca1062_firmware ipq8173_firmware qca6431_firmware sd7c_firmware snapdragon_4_gen_1_firmware wcd9360_firmware qca4024_firmware wcn3950_firmware ipq5028_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware sd765g_firmware qca6390_firmware qca2064_firmware sd730_firmware sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware csra6640_firmware qcn5152_firmware qcs6125_firmware qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca6554a_firmware sd_8cx_firmware wcd9371_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware qcn6024_firmware qca8386_firmware wcd9326_firmware wcd9385_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware sd710_firmware qcn5124_firmware sd460_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware qcn9011_firmware qca8082_firmware qca6320_firmware sm7315_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware sdx55_firmware wcd9375_firmware qca8081_firmware qcn6023_firmware sa6155_firmware sm7250p_firmware wcn3998_firmware wcn3999_firmware qca6436_firmware qca6564au_firmware sd680_firmware ipq8070_firmware qca9367_firmware sa6155p_firmware ipq8078a_firmware qca6678aq_firmware sa515m_firmware qrb5165_firmware qrb5165m_firmware sa8155_firmware sd662_firmware qcn6112_firmware sa415m_firmware wcn3988_firmware sa6145p_firmware sd712_firmware sd778g_firmware wsa8810_firmware sd765_firmware qcs603_firmware wcn7851_firmware qca6698aq_firmware qca6174a_firmware ipq8071a_firmware qca8085_firmware qca9888_firmware ipq8068_firmware qca2066_firmware qca6696_firmware qca2065_firmware qcs6490_firmware sd870_firmware ipq9008_firmware qcn5154_firmware wcn3910_firmware sxr2150p_firmware sd750g_firmware sm6250_firmware qcn9100_firmware wsa8830_firmware qca9992_firmware sd855_firmware sd865_5g_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware sd660_firmware wcn6850_firmware wcn7850_firmware sa8195p_firmware wsa8815_firmware wsa8835_firmware qcn5022_firmware qcn7606_firmware sa8295p_firmware wcn6750_firmware sg4150p_firmware qcm6125_firmware ipq5018_firmware qca9985_firmware qca8337_firmware wcd9380_firmware qca9980_firmware msm8996au_firmware ipq8076a_firmware ar9380_firmware qcn9001_firmware sdx55m_firmware wcn6856_firmware qcn6122_firmware ipq8065_firmware sd670_firmware sxr1230p_firmware sd665_firmware csr8811_firmware qcn5054_firmware qca8075_firmware ssg2125p_firmware sd690_5g_firmware sdx50m_firmware wcn6855_firmware qcn6132_firmware qcn9003_firmware sdx24_firmware qca8072_firmware qca6310_firmware qca6430_firmware qca9994_firmware qcn5052_firmware qcn9012_firmware ipq8070a_firmware qcn9274_firmware wcd9335_firmware qca6335_firmware ipq6018_firmware ipq8076_firmware qcm4325_firmware qca6574_firmware wcd9340_firmware sm4125_firmware sm7325p_firmware pmp8074_firmware qca9986_firmware qca6426_firmware qca6574a_firmware sd768g_firmware ipq9574_firmware sd850_firmware wcn3980_firmware sdxr1_firmware wcd9330_firmware ipq8064_firmware qcc5100_firmware qca6421_firmware aqt1000_firmware qca2062_firmware wcn6740_firmware sdx65_firmware sd821_firmware sd678_firmware ar8031_firmware csrb31024_firmware qcm6490_firmware ipq8078_firmware wsa8832_firmware qcn9070_firmware sd480_firmware wcn6851_firmware ipq6028_firmware ipq8072a_firmware qca9889_firmware sa8155p_firmware sd_636_firmware qca6564a_firmware ipq8174_firmware qcn9024_firmware wcd9341_firmware sdx20m_firmware qcn7605_firmware sw5100p_firmware qcs610_firmware sd835_firmware qca9886_firmware sd695_firmware ipq6010_firmware qca6595_firmware qcs405_firmware qca1064_firmware sdm630_firmware sd820_firmware qca6391_firmware sa4150p_firmware sd845_firmware sd780g_firmware wcd9370_firmware sd888_firmware qcn9022_firmware qcn5021_firmware apq8096au_firmware qca9990_firmware qcn9002_firmware qcn9072_firmware ipq6000_firmware sd720g_firmware ssg2115p_firmware sw5100_firmware qcn9074_firmware qcs410_firmware ar8035_firmware qsm8250_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.08% / 0.38%

||

7 Day CHG~0.00%

Published-06 Aug, 2025 | 07:25

Updated-28 Nov, 2025 | 16:24

Out-of-bounds Read in Core

Information disclosure while reading data from an image using specified offset and size parameters.

Vendor-Qualcomm Technologies, Inc.

Product-qcn9000_firmware qca8072_firmware sdx80m sdx55 sm4125 qam8650p snapdragon_x72_5g_modem-rf_system qcn5121 sa6155p snapdragon_870_5g_mobile_platform_\(sm8250-ac\)snapdragon_7c\+_gen_3_compute_firmware snapdragon_8\+_gen_2_mobile_platform snapdragon_8cx_compute_platform_\(sc8180xp-ac\)_firmware qfw7124_firmware snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)_firmware sdx61 aqt1000 snapdragon_8cx_compute_platform_\(sc8180x-ab\)qdx1011 snapdragon_8_gen_2_mobile_platform_firmware sm7325p_firmware qxm8083_firmware qcn9022_firmware qam8255p_firmware srv1l_firmware vision_intelligence_400_platform sa8150p_firmware qcf8000sfp qcm8550_firmware qamsrv1h_firmware snapdragon_auto_4g_modem sd855 wcd9341_firmware sd_8_gen1_5g snapdragon_xr2\+_gen_1_platform_firmware snapdragon_845_mobile_platform qca8075 wcd9306_firmware wcd9385_firmware qcm6490_firmware snapdragon_x62_5g_modem-rf_system qcn9072 sa7255p_firmware qcn6412_firmware qcs4290 qcs4290_firmware qca6335_firmware qca6584au_firmware snapdragon_480_5g_mobile_platform snapdragon_x72_5g_modem-rf_system_firmware snapdragon_x62_5g_modem-rf_system_firmware sd_675_firmware sm8635p_firmware snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)_firmware qcm8550 snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-af\)_firmware qcn9024 sc8380xp_firmware wsa8815 sm7315 qcs8300 srv1h qcm4490_firmware snapdragon_855_mobile_platform video_collaboration_vc5_platform wcd9326_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-ab\)snapdragon_480_5g_mobile_platform_firmware qca6421_firmware sm8550p_firmware video_collaboration_vc3_platform_firmware qca6574au_firmware snapdragon_8cx_compute_platform_\(sc8180x-aa\)qcm4290_firmware snapdragon_662_mobile_platform_firmware snapdragon_wear_1300_platform_firmware qca6595au_firmware snapdragon_460_mobile_platform snapdragon_8_gen_2_mobile_platform qdx1010 qsm8250_firmware csra6620 wcn3980 qca6584au ipq5312 sd662_firmware vision_intelligence_300_platform_firmware snapdragon_ar1_gen_1_platform_\"luna1\"_firmware sa8145p_firmware qcn6224_firmware sm8750_firmware qcm2290 smart_audio_400_platform sa8155p qcm6125 sa8540p_firmware wcd9385 qca4024_firmware wcd9380_firmware qca8386_firmware qsm8250 qcn5124_firmware sm8750p wcn6450 snapdragon_680_4g_mobile_platform snapdragon_675_mobile_platform qcf8000sfp_firmware sc8180x\+sdx55_firmware ipq9048 wcn7880 ipq6028 sg8275p_firmware qca8337_firmware sd662 wcn3988_firmware csra6640_firmware snapdragon_8c_compute_platform_\(sc8180x-ad\)_firmware qca6698aq snapdragon_x70_modem-rf_system qsm8350_firmware ipq9554_firmware snapdragon_x24_lte_modem sm7675p sm6250 fastconnect_6800 qca6574a_firmware 9205_lte_modem wsa8832_firmware sa8650p sa2150p_firmware sxr2230p_firmware snapdragon_690_5g_mobile_platform_firmware qca6678aq_firmware sm6250_firmware qsm8350 qcn9070 snapdragon_680_4g_mobile_platform_firmware sm8550p wcd9378_firmware qcn9013_firmware wcn7881_firmware qcn6023_firmware qcn9274_firmware qca6431_firmware ssg2115p_firmware sm7315_firmware fastconnect_6900_firmware qca6678aq wsa8835_firmware sa8295p sc8380xp qdx1011_firmware sdx55_firmware sd730 wcn3988 sa8540p qca6696_firmware vision_intelligence_300_platform qca8084 snapdragon_8c_compute_platform_\(sc8180xp-ad\)_firmware snapdragon_x55_5g_modem-rf_system_firmware qcs4490_firmware sm7675_firmware qcn5022 qcn9012 snapdragon_662_mobile_platform sxr2250p wcn6755_firmware sxr2330p_firmware snapdragon_x65_5g_modem-rf_system_firmware wsa8810_firmware wcn6650 wcd9360 qdu1110_firmware ipq9554 wsa8840 qcm4325 snapdragon_778g_5g_mobile_platform qdu1110 csr8811 ipq9574 wsa8840_firmware snapdragon_460_mobile_platform_firmware snapdragon_8\+_gen_2_mobile_platform_firmware qcc711_firmware ipq6000 qdu1000 sm7250p_firmware wcn3950_firmware qcn5122_firmware wsa8845h qrb5165m snapdragon_auto_5g_modem-rf_firmware qca6310 snapdragon_780g_5g_mobile_platform_firmware sdx57m ssg2125p_firmware snapdragon_720g_mobile_platform_firmware qcn9274 snapdragon_865_5g_mobile_platform snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\)sm7325p qca0000 qcn6024_firmware qcm4290 qcs9100 qfw7114 snapdragon_665_mobile_platform_firmware qca6421 wcd9370_firmware snapdragon_855_mobile_platform_firmware snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)ar8035_firmware qcn9000 srv1l wsa8845 sdx80m_firmware immersive_home_326_platform wcn7860_firmware qamsrv1h qru1062 sm8750 snapdragon_xr2_5g_platform sa6150p_firmware sg4150p_firmware wcn3910_firmware sm8750p_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_8\+_gen_1_mobile_platform_firmware sg8275p qca4004 fastconnect_7800_firmware qxm8083 qru1052_firmware snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-bb\)_firmware snapdragon_8c_compute_platform_\(sc8180xp-ad\)qca9984 sxr2230p sa8620p_firmware snapdragon_ar2_gen_1_platform qcs7230 snapdragon_850_mobile_compute_platform_firmware snapdragon_695_5g_mobile_platform robotics_rb2_platform_firmware sa8770p qrb5165n srv1m_firmware wcd9375 qca6574_firmware snapdragon_x24_lte_modem_firmware sa6145p_firmware snapdragon_x75_5g_modem-rf_system_firmware qca6430 qca6391_firmware qdu1000_firmware wcn6755 snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\)_firmware sd_8cx_firmware ipq9570_firmware snapdragon_8_gen_3_mobile_platform qcn5052 qca6688aq_firmware qcf8001 qcn5124 ipq5300 sw5100p_firmware snapdragon_850_mobile_compute_platform sa6155_firmware snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"snapdragon_x75_5g_modem-rf_system wcn7861 sa8775p wcn6650_firmware qcn5022_firmware immersive_home_326_platform_firmware snapdragon_765g_5g_mobile_platform_\(sm7250-ab\)qca6431 sd_8cx fastconnect_6800_firmware wcd9375_firmware immersive_home_3210_platform qcn9074_firmware qca6564au qca6595au qcc710 ssg2125p qamsrv1m qca8085_firmware snapdragon_wear_1300_platform snapdragon_ar2_gen_1_platform_firmware qfw7114_firmware qru1032_firmware qts110_firmware sm8635p snapdragon_670_mobile_platform snapdragon_x50_5g_modem-rf_system_firmware qcs9100_firmware snapdragon_8_gen_3_mobile_platform_firmware qca6174a_firmware sm4635 qca6564a_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\)_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware sa4150p_firmware sw5100 talynplus_firmware wsa8830 qcn5122 csrb31024 wsa8830_firmware qcn6023 qca6430_firmware sa8155p_firmware snapdragon_678_mobile_platform_\(sm6150-ac\)_firmware qcm6490 c-v2x_9150_firmware snapdragon_xr2_5g_platform_firmware sd865_5g_firmware qca6436_firmware qca6595 wcn3999 ipq9574_firmware snapdragon_750g_5g_mobile_platform wcd9380 smart_audio_400_platform_firmware 315_5g_iot_modem_firmware qcs6490_firmware qca6564 snapdragon_888_5g_mobile_platform_firmware snapdragon_8cx_compute_platform_\(sc8180x-ab\)_firmware qca6310_firmware ipq6000_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware sd670_firmware qca6420_firmware qca6688aq wcd9340_firmware qamsrv1m_firmware snapdragon_720g_mobile_platform snapdragon_730g_mobile_platform_\(sm7150-ab\)ar8031 qcs8550 qca9984_firmware qep8111_firmware wcn3950 qcn5021_firmware sdx65m snapdragon_x50_5g_modem-rf_system sdx61_firmware snapdragon_w5\+_gen_1_wearable_platform snapdragon_665_mobile_platform sm4635_firmware snapdragon_auto_5g_modem-rf_gen_2 wcd9360_firmware snapdragon_765g_5g_mobile_platform_\(sm7250-ab\)_firmware qam8295p ssg2115p sm7675 qep8111 qca6391 csr8811_firmware sa8295p_firmware 9205_lte_modem_firmware qcs6490 ipq9570 wsa8810 qcs610 qts110 qcn9160_firmware snapdragon_xr2\+_gen_1_platform qdu1010_firmware snapdragon_778g_5g_mobile_platform_firmware sg4150p video_collaboration_vc5_platform_firmware qru1062_firmware snapdragon_4_gen_2_mobile_platform_firmware sm6370 sd_8_gen1_5g_firmware wcd9378 snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmware ipq6028_firmware sa8530p qcs8300_firmware qca8386 snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware qcs8250_firmware wcn7880_firmware snapdragon_730g_mobile_platform_\(sm7150-ab\)_firmware qcn6274 snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\)sa8150p qcs610_firmware snapdragon_x70_modem-rf_system_firmware qca6797aq qam8650p_firmware ipq6005 qca6564a snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-af\)snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\)sw5100_firmware qcs410 ipq6005_firmware qcn6024 qca9377_firmware qca8075_firmware qca6574a snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\)wcn3999_firmware qca6564_firmware qca8082_firmware qca6436 wsa8845_firmware qrb5165n_firmware wcd9340 wcd9341 sa7255p qca6426_firmware qcs8155_firmware sd460 snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware fastconnect_6200 snapdragon_7c_compute_platform_\(sc7180-ac\)sd888 snapdragon_x35_5g_modem-rf_system snapdragon_675_mobile_platform_firmware snapdragon_765_5g_mobile_platform_\(sm7250-aa\)_firmware snapdragon_8cx_compute_platform_\(sc8180x-aa\)_firmware immersive_home_3210_platform_firmware ipq6018 wsa8832 aqt1000_firmware snapdragon_ar1_gen_1_platform_firmware sd675_firmware qdu1210 sdx65m_firmware qcn6224 snapdragon_7c\+_gen_3_compute snapdragon_ar1_gen_1_platform sm6250p qcs2290 sdx57m_firmware snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)snapdragon_670_mobile_platform_firmware wcd9370 qca8081_firmware qcc710_firmware qca6698aq_firmware csra6640 wcd9306 qcn9013 sa4150p sw5100p sc8180x\+sdx55 wcn7860 sm7250p sm6650 qcs5430 qcs2290_firmware sa8145p wsa8845h_firmware wcd9371 sd670 wcd9395_firmware snapdragon_x35_5g_modem-rf_system_firmware sa8195p sa9000p snapdragon_4_gen_1_mobile_platform ipq6010 snapdragon_888_5g_mobile_platform qcn9072_firmware wcd9390 ar8035 sa8775p_firmware sm7675p_firmware qcn7606_firmware qam8775p qcm2290_firmware mdm9205s vision_intelligence_400_platform_firmware qca6797aq_firmware qcs8250 qca6564au_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-ab\)_firmware snapdragon_730_mobile_platform_\(sm7150-aa\)sa8650p_firmware mdm9205s_firmware qcn9011_firmware qcc711 snapdragon_678_mobile_platform_\(sm6150-ac\)wcn7881 robotics_rb3_platform_firmware sxr2250p_firmware snapdragon_780g_5g_mobile_platform srv1m qcn9012_firmware csra6620_firmware wcd9395 qcs410_firmware qcn5052_firmware qcm4490 qru1052 robotics_rb2_platform snapdragon_768g_5g_mobile_platform_\(sm7250-ac\)_firmware qca8085 qdu1210_firmware snapdragon_8cx_compute_platform_\(sc8180xp-af\)qca4004_firmware sxr1230p wcn7861_firmware qca9377 qcn7606 fastconnect_6700_firmware sa8155_firmware snapdragon_685_4g_mobile_platform_\(sm6225-ad\)snapdragon_782g_mobile_platform_\(sm7325-af\)_firmware snapdragon_8cx_compute_platform_\(sc8180xp-af\)_firmware fastconnect_6700 snapdragon_730_mobile_platform_\(sm7150-aa\)_firmware ipq5300_firmware qca6696 wcn3980_firmware qcm5430_firmware snapdragon_8cx_compute_platform_\(sc8180xp-ac\)sxr2330p qcs8550_firmware robotics_rb5_platform qca6426 qdx1010_firmware sa4155p_firmware ipq9008 qcn9074 qcn9011 snapdragon_8\+_gen_1_mobile_platform qca8084_firmware qcf8000 qcn5121_firmware sa2150p qam8295p_firmware wcn3910 qcf8001_firmware sm7635_firmware snapdragon_690_5g_mobile_platform snapdragon_4_gen_2_mobile_platform wcd9326 snapdragon_x55_5g_modem-rf_system snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmware snapdragon_8_gen_1_mobile_platform qdu1010 snapdragon_865_5g_mobile_platform_firmware snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"_firmware sa8155 snapdragon_695_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcn9022 qcm6125_firmware sdx71m_firmware qca6574 wcn6740_firmware sa8255p_firmware qcn6412 ipq5332 qcs7230_firmware sa6155 sxr1230p_firmware sd855_firmware ipq5302 snapdragon_782g_mobile_platform_\(sm7325-af\)qcn9160 sdx71m snapdragon_855\+\/860_mobile_platform_\(sm8150-ac\)_firmware robotics_rb5_platform_firmware video_collaboration_vc1_platform_firmware qcn6432 snapdragon_ar1_gen_1_platform_\"luna1\"snapdragon_765_5g_mobile_platform_\(sm7250-aa\)qcs8155 sd675 sa7775p video_collaboration_vc1_platform qcn6402 qcn6402_firmware snapdragon_888\+_5g_mobile_platform_\(sm8350-ac\)snapdragon_8_gen_1_mobile_platform_firmware qcs4490 flight_rb5_5g_platform_firmware sa8620p wcn6450_firmware snapdragon_768g_5g_mobile_platform_\(sm7250-ac\)snapdragon_auto_5g_modem-rf sm6370_firmware qrb5165m_firmware qca6595_firmware qam8775p_firmware sa8195p_firmware snapdragon_x65_5g_modem-rf_system qcn6432_firmware wcn6740 qca8081 sm7635 qcm4325_firmware qcn5152 qcn5152_firmware snapdragon_732g_mobile_platform_\(sm7150-ac\)wcd9335_firmware sd888_firmware sm8635 sa7775p_firmware csrb31024_firmware ipq5302_firmware snapdragon_750g_5g_mobile_platform_firmware wcd9335 wsa8815_firmware ipq5312_firmware sa9000p_firmware snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)wcd9390_firmware fastconnect_6900 qam8255p video_collaboration_vc3_platform qcn6274_firmware snapdragon_8c_compute_platform_\(sc8180x-ad\)fastconnect_6200_firmware wsa8835 sd865_5g robotics_rb3_platform qca8072 flight_rb5_5g_platform sa6150p qam8620p ipq6010_firmware snapdragon_732g_mobile_platform_\(sm7150-ac\)_firmware sm4125_firmware ar8031_firmware qcn9070_firmware snapdragon_778g\+_5g_mobile_platform_\(sm7325-ae\)_firmware qcn9024_firmware sa6155p_firmware c-v2x_9150 qca4024 ipq9008_firmware sa4155p sm6650_firmware srv1h_firmware sxr2130_firmware qca8082 fastconnect_7800 qcs6125_firmware qcf8000_firmware qfw7124 sd_675 qcs6125 qcn5021 sa6145p qcm5430 talynplus sa8530p_firmware sd730_firmware sm6250p_firmware qcn6422_firmware qcn6422 qca6174a qca6335 qca8337 snapdragon_855\+\/860_mobile_platform_\(sm8150-ac\)ipq9048_firmware snapdragon_7c_compute_platform_\(sc7180-ac\)_firmware qru1032 sd460_firmware qca0000_firmware qam8620p_firmware 315_5g_iot_modem snapdragon_auto_4g_modem_firmware wcd9371_firmware wcn3990_firmware wcn3990 qca6574au ipq6018_firmware qcs5430_firmware sa8770p_firmware qca6420 sxr2130 ipq5332_firmware sa8255p sm8635_firmware Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 0.52%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-26 Feb, 2026 | 18:28

Buffer Over-read in Display

Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8845_firmware wsa8840 wcd9370 snapdragon_7c_gen_2_compute_firmware sc8180xp-aaab_firmware wcd9340_firmware wcd9385 sc8380xp wcd9341_firmware snapdragon_7c\+_gen_3_compute_firmware fastconnect_6700 qca6420 sc8180xp-ad sc8280xp-abbb qca6430 wsa8815_firmware wcd9370_firmware sc8180xp-ad_firmware qcm6490_firmware sc8180xp-aaab wcd9340 wcd9341 qcm6490 wsa8810_firmware wsa8845h_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sc8180xp-acaf snapdragon_7c\+_gen_3_compute wsa8835 wsa8840_firmware qca6391_firmware qca6430_firmware fastconnect_6800_firmware qcs5430 wsa8845h wcd9380_firmware qcm5430 sm6250_firmware sc8180x-ad_firmware qcm5430_firmware sc8180x-acaf wsa8815 snapdragon_7c_compute wsa8830 snapdragon_7c_gen_2_compute sc8180x\+sdx55_firmware snapdragon_7c_compute_firmware sc8380xp_firmware fastconnect_6800 wcd9375_firmware fastconnect_7800_firmware fastconnect_6900 qca6391 qcs5430_firmware sc8180x\+sdx55 wcd9385_firmware sm6250 fastconnect_6900_firmware wcd9380 fastconnect_6200 sc8280xp-abbb_firmware fastconnect_7800 sc8180x-acaf_firmware wcd9375 wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware sc8180x-ad wsa8835_firmware sc8180x-aaab wsa8810 sc8180x-aaab_firmware qcs6490 sc8180xp-acaf_firmware fastconnect_6200_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read