ByteOS

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product

Versions

Affected

APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55

Problem Types

Type	CWE ID	Description
text	N/A	Buffer Copy Without Checking Size of Input in Bluetooth SOC

Type: text

CWE ID: N/A

Description: Buffer Copy Without Checking Size of Input in Bluetooth SOC

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:02 Nov, 2020 | 07:15

Updated At:09 Nov, 2020 | 02:58

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	8.3	HIGH	AV:A/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 8.3

Base severity: HIGH

Vector:

AV:A/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

>>apq8009_firmware>>-

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

>>apq8009>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

>>apq8053_firmware>>-

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

>>apq8053>>-

cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*

>>qca6390_firmware>>-

cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*

>>qca6390>>-

cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*

>>qcn7605_firmware>>-

cpe:2.3:h:qualcomm:qcn7605:-:*:*:*:*:*:*:*

>>qcn7605>>-

cpe:2.3:o:qualcomm:qcn7606_firmware:-:*:*:*:*:*:*:*

>>qcn7606_firmware>>-

cpe:2.3:h:qualcomm:qcn7606:-:*:*:*:*:*:*:*

>>qcn7606>>-

cpe:2.3:o:qualcomm:sa415m_firmware:-:*:*:*:*:*:*:*

>>sa415m_firmware>>-

cpe:2.3:h:qualcomm:sa415m:-:*:*:*:*:*:*:*

>>sa415m>>-

cpe:2.3:o:qualcomm:sa515m_firmware:-:*:*:*:*:*:*:*

>>sa515m_firmware>>-

cpe:2.3:h:qualcomm:sa515m:-:*:*:*:*:*:*:*

>>sa515m>>-

cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*

>>sa6155p_firmware>>-

cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*

>>sa6155p>>-

cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*

>>sa8155p_firmware>>-

cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*

>>sa8155p>>-

cpe:2.3:o:qualcomm:sc8180x_firmware:-:*:*:*:*:*:*:*

>>sc8180x_firmware>>-

cpe:2.3:h:qualcomm:sc8180x:-:*:*:*:*:*:*:*

>>sc8180x>>-

cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*

>>sdx55_firmware>>-

cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*

>>sdx55>>-

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	nvd@nist.gov

CWE ID: CWE-120

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin	product-security@qualcomm.com	Broken Link
https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin	nvd@nist.gov	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin

Source: product-security@qualcomm.com

Resource:

Broken Link

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin

Source: nvd@nist.gov

Resource:

Vendor Advisory

Similar CVEs

328Records found

CVE-2019-2321

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ4019, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS404, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, Snapdragon_High_Med_2016, SXR1130, SXR2130

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware ipq4019_firmware mdm9206 sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware qca8081 mdm9150 msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware qm215_firmware ipq4019 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-2333

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.84%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 18:49

Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_210 mdm9607 sd_636_firmware sd_820_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-2341

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.84%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 18:49

Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-2252

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.20% / 78.10%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 18:42

Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sd_625_firmware sd_450 sd_8cx_firmware sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sxr1130 msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 qualcomm_215 sd_425 sdm660 sd_430_firmware sd_710_firmware sd_435 sdm630 sd_625 sd_210 sd_820_firmware sd_636_firmware sd_439_firmware qualcomm_215_firmware sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_427 sd_430 sd_670 sd_435_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2025-27043

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.01% / 1.88%

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:49

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Video

Memory corruption while processing manipulated payload in video firmware.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-28560

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.65%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28559

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.49%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-45541

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.87%

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to read board data.

Product-wsa8845_firmware qcc2076_firmware wsa8840 wcd9370 sc8180xp-aaab_firmware wcd9340_firmware wcd9385 sc8380xp wcd9341_firmware qca1064 qcn7606 snapdragon_7c_compute_platform_firmware qcn7605_firmware snapdragon_7c\+_gen_3_compute_firmware qcc2073_firmware fastconnect_6700 qca1064_firmware qca6420 sc8180xp-ad sc8280xp-abbb snapdragon_7c_gen_2_compute_platform_firmware qca6430 wsa8815_firmware wcd9370_firmware sc8180xp-ad_firmware qcn7605 qcc2076 qcm6490_firmware sc8180xp-aaab qcn7606_firmware qca6595au wcd9340 wcd9341 qcm6490 wsa8810_firmware wsa8845h_firmware qca2062 qca6420_firmware aqt1000_firmware qcs6490_firmware sc8180xp-acaf qca2064_firmware snapdragon_7c\+_gen_3_compute wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware qca2066_firmware qca6430_firmware fastconnect_6800_firmware qcs5430 wsa8845h wcd9380_firmware qcm5430 sm6250_firmware sc8180x-ad_firmware qcm5430_firmware sc8180x-acaf wsa8815 wsa8830 sc8180x\+sdx55_firmware qca2062_firmware qcc2073 sc8380xp_firmware qca2065 fastconnect_6800 qca1062 fastconnect_7800_firmware fastconnect_6900 wcd9375_firmware qca6391 qcs5430_firmware sc8180x\+sdx55 snapdragon_7c_gen_2_compute_platform wcd9385_firmware sm6250 fastconnect_6900_firmware wcd9380 qca1062_firmware fastconnect_6200 sc8280xp-abbb_firmware fastconnect_7800 sc8180x-acaf_firmware wcd9375 snapdragon_7c_compute_platform wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware qca2064 sc8180x-ad sc8180x-aaab wsa8810 sc8180x-aaab_firmware wsa8835_firmware qca2066 qcs6490 sc8180xp-acaf_firmware fastconnect_6200_firmware qca2065_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-28544

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.65%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy without Checking the Size of Input in WLAN Firmware

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-28546

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.88%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in SPS Applications

Memory Corruption in SPS Application while exporting public key in sorter TA.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33069

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 3.59%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Audio

Memory corruption in Audio while processing the calibration data returned from ACDB loader.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33017

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.88%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Boot

Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33072

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.03% / 6.52%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Buffer copy without checking size of Input in Core

Memory corruption in Core while processing control functions.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33030

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.06% / 18.88%

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-03 Jun, 2025 | 14:46

Buffer Copy without Checking Size of Input in HLOS

Memory corruption in HLOS while running playready use-case.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33068

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 3.48%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Audio

Memory corruption in Audio while processing IIR config data from AFE calibration block.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33055

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.37%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Audio

Memory Corruption in Audio while invoking callback function in driver from ADSP.

Product-qcm8550_firmware qcs410_firmware sa6150p_firmware sd865_5g sw5100p qca6595 qcs610_firmware wcd9335 wcd9370 qca8081_firmware qca6696 sm7250-ab snapdragon_x50_5g_modem-rf_system wcd9340_firmware wcd9341_firmware wcd9395_firmware qcc710_firmware qca6426 wcn6740_firmware sa4150p sm7325-ae_firmware qca8337 qca6426_firmware wcd9395 qca6574au_firmware wcn785x-5 qam8295p sm8150_firmware wcd9341 qca6574au wcd9390 snapdragon_x12_lte_modem wsa8810_firmware wsa8845h_firmware csra6640 wcn3660b_firmware sm8150-ac sm6375_firmware video_collaboration_vc1_platform_firmware sa4155p sm8350 qcm6125_firmware qcc710 sm6375 sm7250-aa_firmware sdm439_firmware video_collaboration_vc1_platform qfw7114 wcd9385_firmware qca6421 snapdragon_x55_5g_modem-rf_system qam8255p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p qca6421_firmware qcm6125 wsa8810 qam8650p video_collaboration_vc5_platform_firmware snapdragon_8\+_gen_2_mobile_platform sm8350-ac qca6595au sm7315_firmware sm7325_firmware wcd9326_firmware sa6155p_firmware wsa8840 qcs8550_firmware qfw7124_firmware qca6436_firmware qcn9012 snapdragon_8_gen_2_mobile_platform wcn3910_firmware snapdragon_7c\+_gen_3_compute_firmware sm4125_firmware sm8250-ac_firmware qca6420 wcn3910 wcd9370_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_660_mobile_platform wcn3660b qca6574a sm7325-ae qca6174a sa8195p wcd9340 qcs8250_firmware qcm2290 sm6225 qcm6490 sm8150-ac_firmware sm8550p_firmware wcn3998_firmware qcm8550 wcn3988 qca6574 sm7325-af snapdragon_x75_5g_modem-rf_system qca6430_firmware qcn9011 wsa8845h wcd9326 sa6150p sm7250-aa qcs410 qcm2290_firmware sa8155p_firmware wcn685x-1_firmware sa8155p wsa8830 snapdragon_662_mobile_platform sm8550p sa6145p sa8255p_firmware wcn785x-1_firmware ar8035 qrb5165m_firmware qcm4325 qcn6224 qca6698aq wcn3950_firmware qrb5165n sm7250-ac wcn685x-1 sa8145p_firmware sm7325p_firmware wcn3680b sa8150p_firmware snapdragon_w5\+_gen_1_wearable_platform video_collaboration_vc3_platform_firmware wcn3990 qcs6490 qcs8250 wsa8830_firmware qcn6224_firmware qca6431 wsa8845_firmware sd660_firmware sm6350 sxr2130_firmware ar8035_firmware qrb5165m sm8250-ab_firmware sa4150p_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware sd888_firmware snapdragon_662_mobile_platform_firmware qcs6125_firmware sm6225_firmware sm7325-af_firmware wsa8815_firmware sa8195p_firmware sm8250-ab qca8337_firmware qcm4290 snapdragon_x12_lte_modem_firmware sm7325 sg8275p_firmware qca9377_firmware qcm6490_firmware sm8350-ac_firmware sm7250p_firmware sm4125 wcn785x-5_firmware wcn3950 snapdragon_xr2_5g_platform sm4250-aa qcs6125 apq5053-aa_firmware qca6797aq_firmware snapdragon_7c\+_gen_3_compute snapdragon_xr2\+_gen_1_platform_firmware sm7350-ab_firmware wcn3991 sa8295p_firmware apq5053-aa sa4155p_firmware sm7250p qcn6274_firmware sd888 qcn9011_firmware sw5100_firmware wcn685x-5 wcn6740 sm6225-ad_firmware qfw7114_firmware qca6595_firmware qcs7230 sm8250-ac sm8250_firmware sm7225 wcd9380 sa6145p_firmware qam8255p snapdragon_xr2_5g_platform_firmware sa8150p sm7350-ab snapdragon_auto_5g_modem-rf_firmware qrb5165_firmware sm8350_firmware sm6225-ad sm4350-ac sw5100 video_collaboration_vc3_platform aqt1000 sm8150 wcn3991_firmware qam8295p_firmware sd855 qca6431_firmware sm7225_firmware wcn3990_firmware sm7315 qca6698aq_firmware qcs2290 wcd9385 qcs2290_firmware wcn3615 sa8255p qcs7230_firmware qcs4290 wcd9390_firmware wcn6750 qca6430 sg8275p wcn6750_firmware sdx55_firmware snapdragon_auto_5g_modem-rf wcn3615_firmware sm7250-ab_firmware sxr2130 csra6640_firmware snapdragon_xr2\+_gen_1_platform qca6174a_firmware sm7325p qam8650p_firmware wcn3998 video_collaboration_vc5_platform qca6420_firmware aqt1000_firmware qcs6490_firmware wcn3980_firmware sd855_firmware wcd9335_firmware qcn6274 qca6436 qfw7124 qrb5165n_firmware qca6595au_firmware qca6391_firmware wsa8835 wsa8840_firmware sw5100p_firmware sm4250-aa_firmware sm8250 qca6696_firmware qcs4290_firmware wcd9380_firmware qca6574_firmware wsa8815 csra6620 qca8081 sd660 sg4150p sm4375 qam8775p qca6797aq qca9377 sm4375_firmware qcm4325_firmware qca6574a_firmware sdx55 sdm439 qcm4290_firmware sm6350_firmware wcd9375_firmware qca6391 qrb5165 wcn785x-1 qualcomm_215_mobile_platform qcn9012_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware csra6620_firmware sa8295p snapdragon_x50_5g_modem-rf_system_firmware qcs8550 qam8775p_firmware sd865_5g_firmware qualcomm_215_mobile_platform_firmware wcd9375 wcn685x-5_firmware wcn3988_firmware sa8145p sm4350-ac_firmware wsa8835_firmware snapdragon_660_mobile_platform_firmware snapdragon_x75_5g_modem-rf_system_firmware sm7250-ac_firmware wcn3980 wcn3680b_firmware qcs610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2025-21426

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.01% / 1.66%

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:48

Updated-21 Jul, 2025 | 19:37

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Memory corruption while processing camera TPG write request.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33082

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 41.62%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-02 Aug, 2024 | 15:32

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.

Product-qcn5024_firmware qcn9070 ipq4028_firmware qca8337 qfw7124 ar9380 wcn785x-5 ipq8173_firmware qca9563_firmware flight_rb5_5g_platform flight_rb5_5g_platform_firmware qcn6224_firmware qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 qca9880_firmware qca9992 immersive_home_318_platform_firmware ipq8078a ipq5028_firmware ipq6000 qcn5152_firmware qca0000_firmware wcn685x-1 qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq9554 wcd9385_firmware immersive_home_216_platform ipq8076a immersive_home_316_platform immersive_home_316_platform_firmware qca8386_firmware qca9563 qcn6024_firmware qca8084_firmware immersive_home_318_platform ipq8074a qcn5124_firmware qcn9011_firmware qca8082_firmware qcn5164_firmware qcn5122_firmware sdx55_firmware qca8081_firmware qcn6023_firmware qfw7114 qrb5165n ipq5010 qca9986 ipq8070_firmware snapdragon_x65_5g_modem-rf_system_firmware ipq8065 ipq8078a_firmware qcn9274 ipq8174 qca9990 qrb5165m_firmware ipq5028 qca7500 ipq4029_firmware qcn5052 qca0000 ipq6010 ipq8068 qcn6112_firmware qcn9074 qca8085 sdx65m wcd9340 qcn6132 qcn6224 qcn9013 snapdragon_x75_5g_modem-rf_system qca8081 qcf8000 ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware wcn685x-1_firmware immersive_home_3210_platform qca8085_firmware qca9888_firmware ipq8068_firmware qcn6122 wcd9385 ipq9008_firmware qca9988_firmware ipq9570 qcn5154_firmware ar8035 csr8811 qca9898_firmware ipq4019 qcc710_firmware qcn9100_firmware robotics_rb5_platform qca9992_firmware ipq5010_firmware ipq8074a_firmware qca9898 qcn5022_firmware ipq4028 immersive_home_216_platform_firmware qca9988 wcn785x-1 qca8072 qca9985_firmware robotics_rb5_platform_firmware ipq4018_firmware qca8337_firmware wcd9380_firmware qcn9000 ipq8072a qca7500_firmware qca9980_firmware qcf8000_firmware ipq8076a_firmware ar9380_firmware ipq8078 qca8084 ipq8173 ipq9008 qcn9012 qcn5164 qca9558 qca9558_firmware immersive_home_326_platform_firmware qcn6122_firmware ipq8065_firmware csr8811_firmware qcn6274 wcd9380 ipq9554_firmware qcn5054_firmware qcn5154 qca8075_firmware ipq4018 ipq4019_firmware qcn5024 wcn685x-5_firmware qca9889 qcn6132_firmware qca9888 qca8072_firmware qca9985 qca9994_firmware qcn5052_firmware qcn9012_firmware qcn9274_firmware ipq8070a_firmware qfw7114_firmware wcn3980 ipq6018_firmware ipq8076_firmware qca9886 qcn5502_firmware wcd9340_firmware pmp8074_firmware qcn6112 ipq8076 qca9986_firmware qca9984 ipq6028 ipq8064 qcn5021 pmp8074 qcn5152 ipq9574_firmware wcn785x-5_firmware qcn9024 qrb5165m immersive_home_3210_platform_firmware qca6391 wcn3980_firmware ipq8064_firmware qcn9100 qcn6274_firmware snapdragon_x65_5g_modem-rf_system ipq8078_firmware ipq9570_firmware qcn5054 qcn9070_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn685x-5 ipq8070 ipq6028_firmware ipq8072a_firmware qcn5502 qca9994 qcn9011 qca9531 wcn785x-1_firmware qca9889_firmware ipq9574 qca9980 qcn5122 ipq8174_firmware qcn9024_firmware qca9880 immersive_home_326_platform ipq6018 qcn5022 qcn9013_firmware qca9886_firmware qcc710 ipq6010_firmware immersive_home_214_platform qca6391_firmware immersive_home_214_platform_firmware qca4024 sdx55 qca8075 qcn5021_firmware qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9072_firmware qca9531_firmware ipq6000_firmware qcn9074_firmware qfw7124_firmware ipq4029 ar8035_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33045

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.21% / 43.58%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-02 Aug, 2024 | 15:32

Buffer Copy Without Checking Size of Input in WLAN Firmware

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33025

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.16% / 37.38%

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-17 Apr, 2025 | 18:51

Buffer Copy without Checking Size of Input in Data Modem

Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2025-21443

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.06%

7 Day CHG~0.00%

Published-07 Apr, 2025 | 10:16

Updated-19 Aug, 2025 | 16:54

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Automotive Vehicle Networks

Memory corruption while processing message content in eAVB.

Product-sa7775p sa8620p srv1h_firmware sa7255p qca6595au_firmware sa8540p_firmware qamsrv1m_firmware sa6145p_firmware sa8255p sa6155p_firmware sa8195p qca6698aq sa8295p sa8145p_firmware sa8155_firmware sa8295p_firmware sa8150p sa8775p sa6150p_firmware qam8295p_firmware qam8620p qca6574au_firmware sa8145p qamsrv1m sa6155_firmware sa8540p sa8770p sa6150p srv1m_firmware qca6696 qamsrv1h_firmware qca6574au sa8775p_firmware qca6595_firmware qca6688aq_firmware qam8295p sa6155 srv1l_firmware qca6696_firmware sa8770p_firmware sa6155p sa8155 qca6595au qca6574a_firmware srv1h qca6688aq sa6145p qca6574a qamsrv1h qca6595 qam8775p qam8255p qam8650p_firmware sa8255p_firmware qam8620p_firmware sa9000p sa7255p_firmware sa8620p_firmware srv1l sa8650p sa8155p_firmware sa9000p_firmware sa8155p qam8775p_firmware sa8650p_firmware qam8255p_firmware sa7775p_firmware qca6698aq_firmware sa8150p_firmware srv1m qam8650p sa8195p_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33087

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.88%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-11 Aug, 2025 | 15:06

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core

Memory corruption in Core while processing RX intent request.

Product-qdx1010_firmware qcm8550_firmware qcs410_firmware sa6150p_firmware sw5100p wsa8832 wsa8845_firmware qca6595 qcs610_firmware wcd9335 wcd9370 qca8081_firmware ar8035_firmware qca6696 wsa8830_firmware wcd9340_firmware qrb5165m wcd9341_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware sa4150p_firmware wcd9395_firmware qcc710_firmware sm6225_firmware sa4150p wsa8815_firmware wsa8832_firmware sa8195p_firmware qca8337_firmware qca8337 qdu1110 wcd9395 sg8275p_firmware qcm6490_firmware qca6574au_firmware wcn785x-5 qam8295p wcd9341 qcm4490_firmware qca6574au qru1032 wcn785x-5_firmware flight_rb5_5g_platform wcd9390 wcn3950 wsa8810_firmware wsa8845h_firmware csra6640 sa9000p_firmware apq5053-aa_firmware qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware wcn3991 qcs5430 sa8295p_firmware apq5053-aa sa4155p_firmware snapdragon_4_gen_2_mobile_platform_firmware qcm5430 qcm5430_firmware video_collaboration_vc1_platform_firmware sa4155p sa8770p qca6584au qcn6274_firmware ssg2115p qcn9011_firmware qcc710 qru1062_firmware snapdragon_4_gen_2_mobile_platform sw5100_firmware wcn685x-5 qru1062 sm6225-ad_firmware qfw7114_firmware qca6595_firmware qcs7230 sm8450_firmware video_collaboration_vc1_platform qru1032_firmware qfw7114 wcd9385_firmware qam8255p_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p sa8150p snapdragon_ar2_gen_1_platform_firmware qcs4490 snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p snapdragon_auto_5g_modem-rf_firmware qrb5165_firmware sxr1230p wsa8810 sm6225-ad qam8650p qdu1000_firmware video_collaboration_vc5_platform_firmware sa9000p snapdragon_8\+_gen_2_mobile_platform sw5100 qca6595au video_collaboration_vc3_platform qdu1010 sa6155p_firmware wsa8840 wcn3991_firmware qam8295p_firmware qcs8550_firmware qdu1210_firmware qfw7124_firmware qca6698aq_firmware wcd9385 qcn9012 snapdragon_8\+_gen_1_mobile_platform qcs4490_firmware snapdragon_8_gen_2_mobile_platform sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware wcn6750 sg8275p wcn6750_firmware wcd9370_firmware qdx1011_firmware snapdragon_auto_5g_modem-rf qdu1110_firmware qdu1000 ssg2125p qca6574a qru1052 qcm4490 sa8195p wcd9340 csra6640_firmware qcs8250_firmware qdu1210 sm6225 snapdragon_auto_5g_modem-rf_gen_2 qcm6490 qam8650p_firmware wcn3998 video_collaboration_vc5_platform sm8550p_firmware wcn3998_firmware qcm8550 wcn3988 qcs6490_firmware sm8450 qca6584au_firmware wcd9335_firmware qcn6274 qca6574 qfw7124 qrb5165n_firmware sa8775p qca6595au_firmware qca6391_firmware snapdragon_x75_5g_modem-rf_system sxr2230p_firmware wsa8835 qdu1010_firmware wsa8840_firmware sw5100p_firmware qcn9011 sa8775p_firmware snapdragon_ar2_gen_1_platform qca6696_firmware wsa8845h wcd9380_firmware sa6150p qca6574_firmware qcs410 sa8155p_firmware csra6620 qca8081 sg4150p sa8155p wcn3980_firmware wsa8815 qam8775p qca6797aq wsa8830 sm8550p sa6145p snapdragon_8\+_gen_1_mobile_platform_firmware qcm4325_firmware sa8255p_firmware flight_rb5_5g_platform_firmware wcn785x-1_firmware ar8035 qca6574a_firmware qrb5165m_firmware qcm4325 wcd9375_firmware qca6391 qcn6224 qrb5165 wcn785x-1 qcn9012_firmware qcs5430_firmware qca6698aq sg4150p_firmware ssg2125p_firmware qru1052_firmware qrb5165n csra6620_firmware sa8295p sa8770p_firmware snapdragon_8_gen_2_mobile_platform_firmware qcs8550 wcn3950_firmware wcn685x-1 sa8145p_firmware qam8775p_firmware qdx1011 wcd9375 wcn685x-5_firmware sa8150p_firmware snapdragon_w5\+_gen_1_wearable_platform wcn3988_firmware video_collaboration_vc3_platform_firmware sa8145p wsa8835_firmware ssg2115p_firmware snapdragon_x75_5g_modem-rf_system_firmware qcs6490 qcs8250 wcn3980 qdx1010 wcn685x-1_firmware qcn6224_firmware qcs610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2025-21445

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.01% / 1.88%

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:48

Updated-21 Jul, 2025 | 19:46

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Data HLOS - QX

Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2025-21444

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.01% / 1.88%

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:48

Updated-21 Jul, 2025 | 19:45

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Data HLOS - QX

Memory corruption while copying the result to the transmission queue in EMAC.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33035

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.96%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Audio

Memory corruption while invoking callback function of AFE from ADSP.

Product-qcm8550_firmware qcs410_firmware sa6150p_firmware sd865_5g sw5100p qca6595 qcs610_firmware wcd9335 wcd9370 qca8081_firmware qca6696 sm7250-ab wcd9340_firmware wcd9341_firmware wcd9395_firmware qca6390 qcc710_firmware qca6426 wcn6740_firmware sa4150p sm7325-ae_firmware qca8337 qca6426_firmware wcd9395 qca6574au_firmware wcn785x-5 qam8295p wcd9341 qca6574au wcd9390 snapdragon_x12_lte_modem wsa8810_firmware wsa8845h_firmware csra6640 wcn3660b_firmware sm6375_firmware video_collaboration_vc1_platform_firmware sa4155p sm8350 qcc710 sm6375 sm7250-aa_firmware video_collaboration_vc1_platform qfw7114 wcd9385_firmware qca6421 snapdragon_x55_5g_modem-rf_system qam8255p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p qca6421_firmware wsa8810 qam8650p video_collaboration_vc5_platform_firmware snapdragon_8\+_gen_2_mobile_platform sm8350-ac qca6595au sm7315_firmware sm7325_firmware wcd9326_firmware sa6155p_firmware wsa8840 qcs8550_firmware qca6390_firmware qfw7124_firmware qca6436_firmware qcn9012 mdm9650_firmware snapdragon_8_gen_2_mobile_platform wcn3910_firmware snapdragon_7c\+_gen_3_compute_firmware sm4125_firmware sm8250-ac_firmware wcn3910 wcd9370_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_660_mobile_platform wcn3660b qca6574a sm7325-ae qca6174a sa8195p wcd9340 qcs8250_firmware qcm2290 sm6225 qcm6490 sm8550p_firmware wcn3998_firmware qcm8550 wcn3988 qca6574 sm7325-af snapdragon_x75_5g_modem-rf_system qcn9011 wsa8845h wcd9326 sa6150p sm7250-aa qcs410 qcm2290_firmware sa8155p_firmware wcn685x-1_firmware sa8155p wsa8830 snapdragon_662_mobile_platform sm8550p sa6145p sa8255p_firmware wcn785x-1_firmware ar8035 qrb5165m_firmware qcm4325 qcn6224 qca6698aq qm215_firmware wcn3950_firmware qrb5165n sm7250-ac wcn685x-1 sa8145p_firmware sm7325p_firmware wcn3680b sa8150p_firmware s820a_firmware snapdragon_w5\+_gen_1_wearable_platform video_collaboration_vc3_platform_firmware wcn3990 qcs6490 qcs8250 wsa8830_firmware qcn6224_firmware qca6431 wsa8845_firmware sd660_firmware sm6350 sxr2130_firmware ar8035_firmware qrb5165m sm8250-ab_firmware sa4150p_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware sd888_firmware snapdragon_662_mobile_platform_firmware sm6225_firmware sm7325-af_firmware wsa8815_firmware sa8195p_firmware sm8250-ab qca8337_firmware qcm4290 snapdragon_x12_lte_modem_firmware sm7325 sg8275p_firmware qca9377_firmware qcm6490_firmware sm8350-ac_firmware sm7250p_firmware sm4125 wcn785x-5_firmware wcn3950 snapdragon_xr2_5g_platform sm4250-aa apq5053-aa_firmware qca6797aq_firmware snapdragon_7c\+_gen_3_compute snapdragon_xr2\+_gen_1_platform_firmware sm4350_firmware sm7350-ab_firmware wcn3991 sa8295p_firmware apq5053-aa sa4155p_firmware sm7250p qcn6274_firmware sd888 qcn9011_firmware sw5100_firmware wcn685x-5 wcn6740 sm6225-ad_firmware qfw7114_firmware qca6595_firmware qcs7230 s820a sm8250-ac sm7225 wcd9380 sa6145p_firmware qam8255p snapdragon_xr2_5g_platform_firmware sa8150p sm7350-ab snapdragon_auto_5g_modem-rf_firmware qrb5165_firmware sm8350_firmware sm6225-ad sm4350-ac sw5100 video_collaboration_vc3_platform wcn3991_firmware qam8295p_firmware qca6431_firmware sm7225_firmware wcn3990_firmware sm7315 qca6698aq_firmware qcs2290 wcd9385 qcs2290_firmware wcn3615 sa8255p qcs7230_firmware qcs4290 wcd9390_firmware wcn6750 sg8275p wcn6750_firmware mdm9650 snapdragon_auto_5g_modem-rf wcn3615_firmware sm7250-ab_firmware sxr2130 csra6640_firmware sm4350 snapdragon_xr2\+_gen_1_platform qca6174a_firmware sm7325p qam8650p_firmware wcn3998 video_collaboration_vc5_platform qcs6490_firmware wcd9335_firmware wcn3980_firmware qcn6274 qca6436 qfw7124 qrb5165n_firmware wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware sw5100p_firmware sm4250-aa_firmware qca6696_firmware qcs4290_firmware wcd9380_firmware qca6574_firmware wsa8815 csra6620 qca8081 sd660 sg4150p sm4375 qam8775p qca6797aq qca9377 sm4375_firmware qcm4325_firmware qca6574a_firmware qcm4290_firmware sm6350_firmware wcd9375_firmware qca6391 qrb5165 wcn785x-1 qcn9012_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware csra6620_firmware sa8295p qcs8550 qm215 qam8775p_firmware sd865_5g_firmware wcd9375 wcn685x-5_firmware wcn3988_firmware sa8145p sm4350-ac_firmware wsa8835_firmware snapdragon_660_mobile_platform_firmware snapdragon_x75_5g_modem-rf_system_firmware sm7250-ac_firmware wcn3980 wcn3680b_firmware qcs610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33024

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.11%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-02 Aug, 2024 | 15:32

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer

Memory corruption while sending SMS from AP firmware.

Product-wcn3991_firmware wsa8830 sa6150p_firmware 8998 sa8145p_firmware qca8337 8098 qfw7124 wcn785x-5 qcn6224_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware qca6426 wcn685x-1 wcn3990_firmware sm8250-ab wcn3998 qam8295p wcn3660b qam8295p_firmware 8998_firmware qca6320_firmware snapdragon_x55_5g_modem-rf_system qca6574au_firmware wcn3680b_firmware qca6595au wcn3998_firmware qca8081_firmware qfw7114 wcn3610_firmware qca6420 qca6436_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware snapdragon_auto_5g_modem-rf_firmware sa6155p_firmware qca6310 qca6698aq sa4155p_firmware sm8250_firmware sm8250-ac wcn3988_firmware qca6430 sa6145p_firmware wcd9340 sa8195p wsa8810_firmware qcn6224 sw5100 qca6436 snapdragon_x75_5g_modem-rf_system sa6155p wcd9335 qca8081 qca6698aq_firmware wcn685x-1_firmware sm8150_firmware sxr2130_firmware wcd9341 qca6696_firmware qca6390 ar8035 aqt1000 sa8150p qcc710_firmware sm8250-ac_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware sm8150 wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware sa8295p_firmware sa4150p wcn785x-1 wcn3610 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sw5100p sd865_5g snapdragon_w5\+_gen_1_wearable_platform sm8150-ac wsa8835 snapdragon_auto_5g_modem-rf qcn6274 wcd9380 snapdragon_wear_4100\+_platform_firmware sxr2130 snapdragon_wear_4100\+_platform wcn685x-5_firmware qca6310_firmware qca6430_firmware wcd9335_firmware qfw7114_firmware wcn3980 wcd9340_firmware sd855 wsa8815 qca6320 snapdragon_xr2_5g_platform_firmware qca6426_firmware wcn3660b_firmware sd835 wcn785x-5_firmware snapdragon_x55_5g_modem-rf_system_firmware sm8250-ab_firmware qca6391 wcn3980_firmware sa8295p aqt1000_firmware qcn6274_firmware snapdragon_xr2_5g_platform snapdragon_x75_5g_modem-rf_system_firmware 8098_firmware wcn685x-5 wcn785x-1_firmware qca6574au sa8155p_firmware wcd9341_firmware wsa8810 sw5100p_firmware sm8150-ac_firmware sa6145p wcn3680b sd835_firmware qcc710 sa8145p qca6696 qca6391_firmware sa4150p_firmware sa6150p sa8155p sm8250 sw5100_firmware qfw7124_firmware sa4155p ar8035_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33113

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 30.03%

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33077

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 3.59%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in HLOS

Memory corruption in HLOS while converting from authorization token to HIDL vector.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33023

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.96%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:05

Updated-11 Aug, 2025 | 15:06

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications

Memory corruption while processing finish_sign command to pass a rsp buffer.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33031

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.37%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Automotive Audio

Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33092

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.88%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33083

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.20% / 42.28%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-02 Dec, 2024 | 17:09

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host

Memory corruption in WLAN Host while processing RRM beacon on the AP.

Product-qcn5024_firmware qcn9070 ipq4028_firmware qca8337 qfw7124 ar9380 wcn785x-5 ipq8173_firmware qca9563_firmware qcf8001 flight_rb5_5g_platform flight_rb5_5g_platform_firmware qcn6224_firmware qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 qca9880_firmware qca9992 immersive_home_318_platform_firmware ipq8078a ipq5028_firmware ipq6000 qcn5152_firmware qca0000_firmware wcn685x-1 qrb5165n_firmware qcn9000_firmware qca9984_firmware wcd9385_firmware immersive_home_216_platform ipq8076a immersive_home_316_platform immersive_home_316_platform_firmware qca8386_firmware qca9563 qcn6024_firmware qca8084_firmware immersive_home_318_platform ipq8074a qcn5124_firmware qcn9011_firmware qca8082_firmware qcn5164_firmware qcn5122_firmware sdx55_firmware qca8081_firmware qcn6023_firmware qfw7114 qrb5165n ipq5010 qca9986 ipq8070_firmware snapdragon_x65_5g_modem-rf_system_firmware ipq8065 ipq8078a_firmware qcn9274 ipq8174 qca9990 qrb5165m_firmware ipq5028 qca7500 ipq4029_firmware qcn5052 qca0000 qcf8001_firmware ipq6010 ipq8068 qcn6112_firmware qcn9074 qca8085 sdx65m wcd9340 qcn6132 qcn6224 qcn9013 snapdragon_x75_5g_modem-rf_system qca8081 qcf8000 ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware wcn685x-1_firmware immersive_home_3210_platform qca8085_firmware qca9888_firmware ipq8068_firmware qcn6122 wcd9385 ipq9008_firmware qca9988_firmware ipq9570 qcn5154_firmware ar8035 csr8811 qca9898_firmware ipq4019 qcc710_firmware qcn9100_firmware robotics_rb5_platform qca9992_firmware ipq5010_firmware ipq8074a_firmware qca9898 qcn5022_firmware ipq4028 immersive_home_216_platform_firmware qca9988 wcn785x-1 qca8072 qca9985_firmware robotics_rb5_platform_firmware ipq4018_firmware qca8337_firmware wcd9380_firmware qcn9000 ipq8072a qca7500_firmware qca9980_firmware qcf8000_firmware ipq8076a_firmware ar9380_firmware ipq8078 qca8084 ipq8173 ipq9008 qcn9012 qcn5164 qca9558 qca9558_firmware immersive_home_326_platform_firmware qcn6122_firmware ipq8065_firmware csr8811_firmware qcn6274 wcd9380 qcn5054_firmware qcn5154 qca8075_firmware ipq4018 ipq4019_firmware qcn5024 wcn685x-5_firmware qca9889 qcn6132_firmware qca9888 qca8072_firmware qca9985 qca9994_firmware qcn5052_firmware qcn9012_firmware qcn9274_firmware ipq8070a_firmware qfw7114_firmware wcn3980 ipq6018_firmware ipq8076_firmware qca9886 qcn5502_firmware wcd9340_firmware pmp8074_firmware qcn6112 ipq8076 qca9986_firmware qca9984 ipq6028 ipq8064 qcn5021 pmp8074 qcn5152 ipq9574_firmware wcn785x-5_firmware qcn9024 qrb5165m immersive_home_3210_platform_firmware qca6391 wcn3980_firmware ipq8064_firmware qcn9100 qcn6274_firmware snapdragon_x65_5g_modem-rf_system ipq8078_firmware ipq9570_firmware qcn5054 qcn9070_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn685x-5 ipq8070 ipq6028_firmware ipq8072a_firmware qcn5502 qca9994 qcn9011 qca9531 wcn785x-1_firmware qca9889_firmware ipq9574 qca9980 qcn5122 ipq8174_firmware qcn9024_firmware qca9880 immersive_home_326_platform ipq6018 qcn5022 qcn9013_firmware qca9886_firmware qcc710 ipq6010_firmware immersive_home_214_platform qca6391_firmware immersive_home_214_platform_firmware qca4024 sdx55 qca8075 qcn5021_firmware qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9072_firmware qca9531_firmware ipq6000_firmware qcn9074_firmware qfw7124_firmware ipq4029 ar8035_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33085

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.88%

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables

Memory corruption in wearables while processing data from AON.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14026

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.43%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6574, QCA6574AU, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS404, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-qca9377_firmware apq8096_firmware mdm9640_firmware msm8996au_firmware sdm845 apq8096 sdx24 qcs404_firmware mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca9379_firmware qca6174a sdm670_firmware qcs404 sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 qcn7605 ipq6018_firmware mdm9206_firmware qca6574_firmware qca9886 qcs605 mdm9650_firmware qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p qca8081 mdm9207c_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware apq8053 sm6150_firmware apq8096au_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14098

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:12

Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096, APQ8096AU, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, QCA9886, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130, SXR2130

Product-qca9377_firmware apq8096_firmware mdm9640_firmware qca4531_firmware msm8996au_firmware sdm845 apq8096 sdx24 mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca6564 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware qca6584au_firmware ipq8074 sdm636 qca9377 qca4531 ipq6018_firmware mdm9206_firmware qca6574_firmware qca9886 qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 apq8009 apq8053_firmware nicobar qca6584au sa6155p_firmware sdm636_firmware apq8064 sdm845_firmware sdx20 sdm660 sdm630 mdm9607_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware sa6155p mdm9207c_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware qca6564_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware apq8053 sm6150_firmware apq8096au_firmware sm8150 sdx20_firmware apq8017 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14031

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.43% / 61.54%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Buffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS405, QCS605, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-qca9377_firmware apq8096_firmware mdm9640_firmware qca4531_firmware msm8996au_firmware sdm845 apq8096 sdx24 mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca6564 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 qca4531 apq8098 qcn7605 ipq6018_firmware mdm9206_firmware qca6574_firmware qca9886 qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware apq8064 sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p qca8081 mdm9207c_firmware msm8996_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware qca6564_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware sdm630_firmware sda660_firmware apq8053 sm6150_firmware apq8096au_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14127

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 apq8098 mdm9206_firmware qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 apq8053_firmware nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware sa6155p msm8937 mdm9207c_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sm8250 apq8017 saipan nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14110

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS404, QCS405, QCS605, Rennell, SA6155P, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130, SXR2130

Product-qca9377_firmware apq8096_firmware mdm9640_firmware qca4531_firmware msm8996au_firmware sdm845 apq8096 sdx24 qcs404_firmware mdm9650 sm7150_firmware sm6150 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca6564 qca9379_firmware qca6174a sdm670_firmware qcs404 sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 qca4531 apq8098 qcn7605 ipq6018_firmware mdm9206_firmware qcs605 qca9886 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware apq8064 sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 sc7180_firmware mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p qca8081 mdm9207c_firmware msm8996_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware qca6564_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sc7180 sdm630_firmware sda660_firmware rennell_firmware apq8053 sm6150_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14111

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Nicobar, QCA6390, QCA8081, QCN7605, QCS404, QCS405, Rennell, SC7180, SC8180X, SM6150, SM7150, SM8150, SXR2130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-13992

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-05 Aug, 2024 | 00:05

u'Out of bound memory access if stack push and pop operation are performed without doing a bound check on stack top' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Bitra, IPQ6018, IPQ8074, MDM9205, Nicobar, QCA8081, QCN7605, QCS404, QCS405, QCS605, QCS610, Rennell, SA415M, SA6155P, Saipan, SC7180, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-sdm850_firmware sa6155p_firmware qcs610 sdm845 sdx20 sdx24 qcs404_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 sm7150_firmware ipq8074_firmware sdm710 sc7180_firmware sm6150 sdm710_firmware sm7150 qcn7605_firmware sa6155p sdm670 qca8081 qcs610_firmware qcs605_firmware sc8180x sxr2130 ipq6018 sdm670_firmware qcs404 sdx24_firmware sm8150_firmware ipq8074 sxr2130_firmware qcs405_firmware rennell sa415m sc7180 bitra sda845_firmware mdm9205_firmware qcn7605 rennell_firmware ipq6018_firmware mdm9205 qcs605 sdx55 saipan_firmware sm6150_firmware sm8250 bitra_firmware sm8150 sdx20_firmware sdm850 sxr1130_firmware sdx55_firmware qca8081_firmware nicobar_firmware saipan sxr1130 sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14097

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:12

Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9607, MDM9640, MDM9650, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCN7605, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-qca9377_firmware apq8096_firmware mdm9640_firmware msm8996au_firmware sdm845 apq8096 mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 sdm670 sxr2130 qcs605_firmware sc8180x qca9379_firmware qca6174a sdm670_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 qcn7605 ipq6018_firmware qca6574_firmware qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware sdm845_firmware apq8098_firmware msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 sdm710_firmware qcn7605_firmware sa6155p qca8081 ipq6018 qca6174a_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware sm6150_firmware apq8096au_firmware sm8250 msm8998 sm8150 sdm850 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14095

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.38% / 58.58%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:12

Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8016, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6390, QCA6574AU, QCA9377, QCA9379, QCA9886, QCM2150, QCN7605, QCS404, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-qca9377_firmware mdm9640_firmware sdm450_firmware sdm632 qcs404_firmware mdm9650 qca6390_firmware apq8009_firmware msm8917 sdm670 qcs605_firmware apq8076 apq8076_firmware sda845_firmware qca9377 apq8098 qcn7605 mdm9206_firmware msm8905_firmware qca6574au_firmware sda660 sdx55_firmware sxr1130 msm8909w apq8053_firmware sda845 sa6155p_firmware sdm450 sdm636_firmware apq8098_firmware msm8998_firmware apq8016_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 qm215 apq8017_firmware sdm710_firmware sa6155p msm8937 msm8905 qca6174a_firmware sm8150_firmware msm8909 sxr2130_firmware rennell qca6390 msm8953_firmware saipan_firmware sm6150_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 saipan mdm9640 apq8096_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 apq8096 sdx24 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 sxr2130 sc8180x mdm9206 qca9379_firmware qca6174a sdm670_firmware qcs404 sdx24_firmware sdm636 msm8939 qcs605 qca9886 msm8937_firmware mdm9650_firmware sdm429_firmware sxr1130_firmware apq8009 msm8909_firmware nicobar sdm850_firmware msm8920 msm8953 sdx20 qcm2150 msm8920_firmware sdm660 sc8180x_firmware qca6574au sdm710 mdm9607 msm8939_firmware qcn7605_firmware mdm9207c_firmware msm8996_firmware mdm9207c qca9886_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware rennell_firmware apq8016 qm215_firmware sdx55 msm8940 apq8053 apq8096au_firmware sm8250 nicobar_firmware qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14045

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Possible buffer overflow while processing clientlog and serverlog due to lack of validation of data received in logs in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8096AU, QCS605, SDM439, SM8150, SXR1130

Product-apq8096au_firmware sm8150_firmware sm8150 apq8096au sdm439_firmware sxr1130_firmware sxr1130 sdm439 qcs605 qcs605_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14021

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:05

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w msm8909_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 sc8180x_firmware sdm710 qm215 sc7180_firmware mdm9607 sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 apq8096au sdm439_firmware rennell sc7180 sdm630_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8096au_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14041

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-1.23% / 78.33%

7 Day CHG~0.00%

Published-07 Feb, 2020 | 05:00

Updated-05 Aug, 2024 | 00:05

During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physical address information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 sm7150_firmware sm6150 msm8909w_firmware md9607 msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sda845_firmware apq8098 md9607_firmware mdm9206_firmware qcs605 sdm429_firmware mdm9650_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8953 sdm450 sdm845_firmware apq8098_firmware sdx20 qcm2150 sm8250_firmware sc8180x_firmware qcs405 sdm710 qm215 apq8017_firmware sdm710_firmware sa6155p mdm9207c_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware apq8053 saipan_firmware sm6150_firmware apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 saipan nicobar_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14068

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096AU, MDM9607, MSM8905, MSM8909W, Nicobar, QCS405, QCS605, Rennell, Saipan, SDM429W, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14135

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.43%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4010, QCA6174A, QCA6574AU, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS405, QCS605, SA6155P, Saipan, SDA845, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130

Product-qca9377_firmware mdm9640_firmware msm8996au_firmware sdm845 sdx24 mdm9650 sm7150_firmware sm6150 msm8996au sm7150 qca4010_firmware apq8009_firmware sdm670 qcs605_firmware mdm9206 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware qca6584au_firmware ipq8074 sda845_firmware qca9377 qcn7605 mdm9206_firmware qcs605 qca9886 mdm9640 mdm9650_firmware qca6574au_firmware sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 sdm850_firmware qca6584au sa6155p_firmware sdx20 sdm660 mdm9607_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware qca4010 sa6155p qca8081 mdm9207c_firmware mdm9207c qca6174a_firmware qca9886_firmware sm8150_firmware apq8096au qcs405_firmware apq8053 apq8096au_firmware saipan_firmware sm6150_firmware sm8150 sdx20_firmware sdm850 apq8017 saipan qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-190

Integer Overflow or Wraparound

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14030

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, Rennell, SC8180X, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14112

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.13%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ6018, IPQ8074, MSM8998, Nicobar, QCA8081, QCN7605, QCS404, QCS605, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14076

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.79%

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-05 Aug, 2024 | 00:12

Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8998, Nicobar, QCS404, QCS405, QCS605, Rennell, SA415M, SC7180, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130