ByteOS

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product

Versions

Affected

APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55

Problem Types

Type	CWE ID	Description
text	N/A	Buffer Copy Without Checking Size of Input in Bluetooth SOC

Type: text

CWE ID: N/A

Description: Buffer Copy Without Checking Size of Input in Bluetooth SOC

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:02 Nov, 2020 | 07:15

Updated At:09 Nov, 2020 | 02:58

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	8.3	HIGH	AV:A/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 8.3

Base severity: HIGH

Vector:

AV:A/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

>>apq8009_firmware>>-

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

>>apq8009>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

>>apq8053_firmware>>-

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

>>apq8053>>-

cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*

>>qca6390_firmware>>-

cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*

>>qca6390>>-

cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*

>>qcn7605_firmware>>-

cpe:2.3:h:qualcomm:qcn7605:-:*:*:*:*:*:*:*

>>qcn7605>>-

cpe:2.3:o:qualcomm:qcn7606_firmware:-:*:*:*:*:*:*:*

>>qcn7606_firmware>>-

cpe:2.3:h:qualcomm:qcn7606:-:*:*:*:*:*:*:*

>>qcn7606>>-

cpe:2.3:o:qualcomm:sa415m_firmware:-:*:*:*:*:*:*:*

>>sa415m_firmware>>-

cpe:2.3:h:qualcomm:sa415m:-:*:*:*:*:*:*:*

>>sa415m>>-

cpe:2.3:o:qualcomm:sa515m_firmware:-:*:*:*:*:*:*:*

>>sa515m_firmware>>-

cpe:2.3:h:qualcomm:sa515m:-:*:*:*:*:*:*:*

>>sa515m>>-

cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*

>>sa6155p_firmware>>-

cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*

>>sa6155p>>-

cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*

>>sa8155p_firmware>>-

cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*

>>sa8155p>>-

cpe:2.3:o:qualcomm:sc8180x_firmware:-:*:*:*:*:*:*:*

>>sc8180x_firmware>>-

cpe:2.3:h:qualcomm:sc8180x:-:*:*:*:*:*:*:*

>>sc8180x>>-

cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*

>>sdx55_firmware>>-

cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*

>>sdx55>>-

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	nvd@nist.gov

CWE ID: CWE-120

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin	product-security@qualcomm.com	Broken Link
https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin	nvd@nist.gov	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2020-bulletin

Source: product-security@qualcomm.com

Resource:

Broken Link

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2020-security-bulletin

Source: nvd@nist.gov

Resource:

Vendor Advisory

Similar CVEs

328Records found

CVE-2019-10605

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.26%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, IPQ8074, MDM9607, MDM9650, MSM8909, MSM8939, QCN7605, SDA660, SDM630, SDM636, SDM660, SDX20, SDX24

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10598

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.26%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop further will not cause an overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MDM9607, MSM8996AU, QCA6574AU, QCN7605, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10606

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, QCS605, SDX24

Product-msm8920 sdx24_firmware msm8937 sdx24 msm8920_firmware qcs605 mdm9607_firmware msm8940 msm8940_firmware msm8909w_firmware mdm9607 msm8917_firmware msm8937_firmware msm8917 msm8909w qcs605_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10556

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.81%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 22:24

Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MSM8909W, MSM8917, MSM8953, Nicobar, QCN7605, QCS405, QCS605, QM215, Rennell, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-msm8953 sdm450 sdm429w sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 sm8250_firmware sc8180x_firmware sdm429 qcs405 sm7150_firmware sdm710 msm8909w_firmware qm215 sm6150 sdm429w_firmware sdm710_firmware apq8009 sm7150 apq8009_firmware qcn7605_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x sdm670_firmware sm8150_firmware sdx24_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sda845_firmware qcn7605 rennell_firmware qm215_firmware qcs605 sdx55 msm8953_firmware apq8053 apq8096au_firmware saipan_firmware sm6150_firmware msm8917_firmware sdm429_firmware sm8250 sm8150 sxr1130_firmware sdx55_firmware nicobar_firmware msm8909w saipan sxr1130 apq8053_firmware sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10566

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.81%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 22:24

Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8996AU, Nicobar, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA845, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR2130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-53013

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.02% / 3.26%

7 Day CHG~0.00%

Published-03 Jun, 2025 | 05:52

Updated-20 Aug, 2025 | 20:19

Buffer Copy Without Checking Size of Input in Audio

Memory corruption may occur while processing voice call registration with user.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10540

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.94% / 75.31%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MSM8996AU, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCS404, QCS405, QCS605, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SXR1130

Product-sd_712 qca9377_firmware sd_850 sd_855 sd_730_firmware sd_675 msm8996au_firmware sd_670_firmware sdm660 sdm630 qcs404_firmware sd_710_firmware sd_636 qcs405 ipq8074_firmware qca6574au sd_820_firmware msm8996au sd_636_firmware sd_820 sd_845_firmware qca8081 qcs605_firmware sd_675_firmware qca6174a_firmware qca6174a qca9379_firmware sd_665 qcs404 sd_730 sd_850_firmware ipq8074 qcs405_firmware qca9377 sd_712_firmware sdm630_firmware sd_8cx_firmware sda660_firmware sd_845 sd_8cx qcs605 sd_670 sd_835_firmware sd_710 sd_835 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 qca9379 sd_665_firmware sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-53027

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.08% / 24.39%

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN Host

Transient DOS may occur while processing the country IE.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10607

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.26%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8996, MSM8996AU, QCA4531, QCA8081, QCA9531, QCA9558, QCA9886, QCA9980, QCN7605, QCS605, SDA660, SDX20, SDX24, SDX55, SM8150, SXR1130

Product-qca4531_firmware mdm9640_firmware qca9980_firmware msm8996au_firmware sdx24 mdm9650 msm8940_firmware qca9558_firmware qca9558 msm8909w_firmware msm8996au apq8009_firmware msm8917 qcs605_firmware ipq4019_firmware mdm9206 sdx24_firmware ipq8074 qca4531 apq8098 qcn7605 mdm9615 mdm9206_firmware msm8939 qcs605 qca9886 msm8937_firmware mdm9650_firmware msm8905_firmware sda660 sdx55_firmware ipq8064 sxr1130_firmware apq8064_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware ipq8064_firmware msm8920 apq8064 apq8098_firmware sdx20 msm8920_firmware mdm9607_firmware qca9531 ipq8074_firmware mdm9607 qca9980 apq8017_firmware msm8939_firmware qcn7605_firmware qca8081 msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c qca9886_firmware sm8150_firmware msm8909 apq8096au sda660_firmware ipq4019 sdx55 msm8940 apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware sm8150 sdx20_firmware qca9531_firmware apq8017 msm8996 mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10589

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.34%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 22:24

Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8098, MDM9206, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QM215, SDA660, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10586

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.14%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware mdm9635m_firmware qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10498

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.81%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10491

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.85%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd616_firmware sd_615_firmware sd616 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware ipq4019_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware ipq8074 sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 ipq8064 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_205_firmware ipq8064_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 ipq8074_firmware sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 ipq4019 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10593

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.14%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Buffer overflow can occur when processing non standard SDP video Image attribute parameter in a VILTE\VOLTE call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware apq8076 sc8180x mdm9206 sdm670_firmware sdx24_firmware apq8076_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10571

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.05%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 22:24

Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCN7605, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR2130

Product-sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware apq8098 qcn7605 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware sda660 msm8909w msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p msm8937 mdm9207c_firmware mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-45547

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.34%

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-13 Jan, 2025 | 21:51

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-45541

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.88%

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to read board data.

Product-wsa8845_firmware qcc2076_firmware wsa8840 wcd9370 sc8180xp-aaab_firmware wcd9340_firmware wcd9385 sc8380xp wcd9341_firmware qca1064 qcn7606 snapdragon_7c_compute_platform_firmware qcn7605_firmware snapdragon_7c\+_gen_3_compute_firmware qcc2073_firmware fastconnect_6700 qca1064_firmware qca6420 sc8180xp-ad sc8280xp-abbb snapdragon_7c_gen_2_compute_platform_firmware qca6430 wsa8815_firmware wcd9370_firmware sc8180xp-ad_firmware qcn7605 qcc2076 qcm6490_firmware sc8180xp-aaab qcn7606_firmware qca6595au wcd9340 wcd9341 qcm6490 wsa8810_firmware wsa8845h_firmware qca2062 qca6420_firmware aqt1000_firmware qcs6490_firmware sc8180xp-acaf qca2064_firmware snapdragon_7c\+_gen_3_compute wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware qca2066_firmware qca6430_firmware fastconnect_6800_firmware qcs5430 wsa8845h wcd9380_firmware qcm5430 sm6250_firmware sc8180x-ad_firmware qcm5430_firmware sc8180x-acaf wsa8815 wsa8830 sc8180x\+sdx55_firmware qca2062_firmware qcc2073 sc8380xp_firmware qca2065 fastconnect_6800 qca1062 fastconnect_7800_firmware fastconnect_6900 wcd9375_firmware qca6391 qcs5430_firmware sc8180x\+sdx55 snapdragon_7c_gen_2_compute_platform wcd9385_firmware sm6250 fastconnect_6900_firmware wcd9380 qca1062_firmware fastconnect_6200 sc8280xp-abbb_firmware fastconnect_7800 sc8180x-acaf_firmware wcd9375 snapdragon_7c_compute_platform wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware qca2064 sc8180x-ad sc8180x-aaab wsa8810 sc8180x-aaab_firmware wsa8835_firmware qca2066 qcs6490 sc8180xp-acaf_firmware fastconnect_6200_firmware qca2065_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-43055

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.59%

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-03 Mar, 2025 | 13:14

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Memory corruption while processing camera use case IOCTL call.

Product-Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-38423

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.66%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:05

Updated-07 Nov, 2024 | 19:46

Buffer Copy Without Checking Size of Input in Graphics Linux

Memory corruption while processing GPU page table switch.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-38409

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.66%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-16 Nov, 2024 | 04:55

Buffer Copy Without Checking Size of Input in WLAN Windows Host

Memory corruption while station LL statistic handling.

Product-fastconnect_7800 wsa8830 wcd9380_firmware sdm429w qcs6490 qcm6490_firmware wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware qcc2073 wsa8840 wsa8835 sdm429w_firmware fastconnect_6700_firmware wcd9380 fastconnect_7800_firmware wsa8845h fastconnect_6700 video_collaboration_vc3_platform snapdragon_8cx_gen_3_compute_platform wcd9370 qcm5430 qcs5430 qcm5430_firmware wcd9385 video_collaboration_vc3_platform_firmware qcs6490_firmware qcc2076_firmware qcs5430_firmware wcd9385_firmware wsa8845 qcc2073_firmware wcd9375 wcd9370_firmware wcn3660b wsa8830_firmware qcc2076 wsa8845_firmware wcn3620_firmware qcm6490 wcn3660b_firmware wsa8835_firmware wcn3620 snapdragon_429_mobile_platform_firmware sc8380xp wsa8845h_firmware wcd9375_firmware snapdragon_429_mobile_platform snapdragon_8cx_gen_3_compute_platform_firmware Snapdragon qcm5430_firmware wcd9380_firmware qcs6490_firmware qcm6490_firmware qcc2076_firmware wsa8840_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware fastconnect_6900_firmware qcc2073_firmware wcd9370_firmware sc8380xp_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wcd9375_firmware wsa8845h_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-40514

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.14% / 35.29%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 12:21

Buffer copy without checking size of input in WLAN Firmware

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

Product-sd_8cx_gen3_firmware qca2066 sa6150p_firmware sm6250p_firmware qcs610 qca8337 ar9380 ipq8173_firmware qca6431_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 qca2062 sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 qca6554a_firmware wcd9371_firmware qam8295p wcn3950 qcn6024_firmware sd720g sm4125 sd_8cx_gen2_firmware ipq8076a qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 qca9986 sd680_firmware ipq8065 ipq8078a_firmware qca6678aq_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware qca6698aq qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 wcd9340 qcn6132 sd765g sw5100 sd680 qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca2066_firmware qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g qca1062 qcn5154_firmware wcn3910_firmware sxr2150p_firmware sd_8cx sa8150p wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 sd712 sd855_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 qcn5022_firmware wcn6750_firmware sa8295p_firmware ipq5018_firmware qca9985_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p ipq8072a qca9980_firmware sw5100p ipq8076a_firmware ipq8078 qca8084 sdx55m_firmware ipq8173 qca6564au wcn6856_firmware qcn5164 sd670_firmware qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware sdx50m_firmware sxr1230p qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcm4325_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c qcn6112 wcn3910 qca6320 qca9986_firmware qca6426_firmware sd695 ipq6028 ipq8064 sd835 qca9984 qcn9024 ipq9574_firmware wcn3980_firmware sd730 sdx55m ipq8064_firmware qcc5100_firmware sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware qca6678aq sd678_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware sd_636_firmware qca6564a_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware qsm8250 sa6145p ipq6018 qca9886_firmware sd695_firmware sdxr1 ar8031 qca6595_firmware qcs405_firmware sa8145p sdm630_firmware qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 ssg2115p_firmware sxr2150p ar8035_firmware qsm8250_firmware qcm2290 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sxr2230p_firmware sa8145p_firmware qca1062_firmware qcs2290_firmware sd7c_firmware csrb31024 snapdragon_4_gen_1_firmware sd_636 csra6620 qca8082 qcn9072 qca8386 qca9992 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware qca2064_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ssg2115p qcn5152_firmware qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware ipq8074a qca2065 sd662 qcn5124_firmware qam8295p_firmware qcn6102_firmware qcn9011_firmware qca1064 sa8155 qcn6100_firmware qca8082_firmware qca6320_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qca6310 qcn9274 ipq8174 wcn7851 sa515m_firmware qca9990 qcs6490 qcn5052 sdxr2_5g sdm630 qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sm6250 sa8195p sd712_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 sg4150p qca8081 qcn6023 ipq8071a ipq8071a_firmware qcs4290_firmware wcd9385 qca8085_firmware qcs6490_firmware qca2065_firmware sd_8cx_gen3 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 csr8811 sm6250_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware qcm6490 wcn6850_firmware wsa8835_firmware qca6564a sa4150p sg4150p_firmware qcm6125_firmware qcm4325 qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g qca6554a sd865_5g qca6595 ar9380_firmware qcc5100 qcn9012 sd888 qcn6122_firmware ipq8065_firmware sxr1230p_firmware wsa8835 sd665_firmware sd888_5g sm6250p qcn5154 qca8075_firmware sc8180x ssg2125p_firmware qca6574a wcn6855_firmware qca9889 sm7325p qcn6132_firmware qca9888 qca6310_firmware qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 sd855 sm4125_firmware sm7325p_firmware sd665 sxr2230p ipq8076 sd765 qca6574a_firmware qcn5152 sd768g_firmware qrb5165m sd850_firmware sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware qcn6102 qcn9100 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware wsa8832_firmware sdx50m qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware qcn9011 sc8180x_firmware sd_455 qca6574au qca9889_firmware sd710 sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware qcm6125 wsa8810 wcn6856 qcn5022 sd835_firmware sd768g ipq6010_firmware qca1064_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn6100 qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33052

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.79%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption when user provides data for FM HCI command control operations.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33054

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 24.84%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.

Product-qcm8550_firmware sdm429w_firmware wsa8845_firmware wsa8832 wsa8840 qcs8550_firmware wcd9370 snapdragon_8_gen_2_mobile_firmware wcd9385 wcd9395_firmware wcd9390_firmware fastconnect_6700 snapdragon_8_gen_2_mobile sg8275p wsa8832_firmware wcd9370_firmware wcd9395 sg8275p_firmware snapdragon_8\+_gen_2_mobile qcm6490_firmware wcn3660b wcn3620_firmware wcd9390 qcm6490 wsa8845h_firmware sm8550p_firmware qcm8550 qcs6490_firmware sdm429w wcn3660b_firmware wsa8835 wsa8840_firmware qcs5430 wsa8845h wcd9380_firmware qcm5430 qcm5430_firmware wsa8830 sm8550p wcn6755_firmware wcn3620 snapdragon_8_gen_3_mobile_firmware wcd9375_firmware fastconnect_6900 fastconnect_7800_firmware snapdragon_429_mobile sm8635 qcs5430_firmware sm8635_firmware wcd9385_firmware fastconnect_6900_firmware qcs8550 wcd9380 fastconnect_7800 snapdragon_8\+_gen_2_mobile_firmware wcd9375 wcn6755 wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wsa8835_firmware snapdragon_429_mobile_firmware qcs6490 snapdragon_8_gen_3_mobile wsa8830_firmware video_collaboration_vc3_platform Snapdragon wcd9380_firmware qcm8550_firmware qcm6490_firmware wsa8832_firmware wsa8840_firmware sg8275p_firmware fastconnect_6900_firmware qcs8550_firmware sdm429w_firmware fastconnect_6700_firmware fastconnect_7800_firmware wcn6755_firmware wcd9395_firmware sm8635_firmware qcm5430_firmware qcs6490_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware wcd9370_firmware sm8550p_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware wcd9375_firmware wsa8845h_firmware snapdragon_8_gen_2_mobile_platform_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33030

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.11%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-08 Nov, 2024 | 04:55

Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance

Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.

Product-fastconnect_7800 qca9377_firmware snapdragon_8_gen_1_mobile_platform qca6584au wcd9380_firmware wsa8830 qca9367_firmware qca8337_firmware snapdragon_x72_5g_modem-rf_system qcn6274_firmware qca8337 qca6698aq snapdragon_x75_5g_modem-rf_system_firmware qfw7124 qca9367 fastconnect_6900_firmware fastconnect_6900 qcn6224_firmware wsa8835 wcd9340 wcd9380 qcn6274 qcn6224 fastconnect_7800_firmware snapdragon_x72_5g_modem-rf_system_firmware snapdragon_x75_5g_modem-rf_system snapdragon_8_gen_1_mobile_platform_firmware qca8081 snapdragon_auto_5g_modem-rf_gen_2 qca6698aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qcc710 qca6584au_firmware qca9377 qfw7114_firmware ar8035 wcd9340_firmware qcc710_firmware wsa8830_firmware wsa8835_firmware qca8081_firmware qfw7124_firmware qfw7114 ar8035_firmware Snapdragon qca9377_firmware qca8337_firmware qca9367_firmware wcd9380_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qca6584au_firmware qcn6274_firmware qfw7114_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware wcd9340_firmware qcc710_firmware qcn6224_firmware wsa8830_firmware wsa8835_firmware fastconnect_7800_firmware snapdragon_x72_5g_modem-rf_system_firmware qca8081_firmware qfw7124_firmware snapdragon_8_gen_1_mobile_platform_firmware ar8035_firmware qca6698aq_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-33042

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.79%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption when Alternative Frequency offset value is set to 255.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-5840

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.12%

7 Day CHG~0.00%

Published-06 Jun, 2018 | 21:00

Updated-16 Sep, 2024 | 21:08

Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14068

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096AU, MDM9607, MSM8905, MSM8909W, Nicobar, QCS405, QCS605, Rennell, Saipan, SDM429W, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10508

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.85%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820A, SDX20

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-23378

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.61%

7 Day CHG~0.00%

Published-07 Oct, 2024 | 12:58

Updated-16 Oct, 2024 | 20:00

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-23368

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.91%

7 Day CHG~0.00%

Published-01 Jul, 2024 | 14:17

Updated-01 Aug, 2024 | 23:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC

Memory corruption when allocating and accessing an entry in an SMEM partition.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-23375

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.61%

7 Day CHG~0.00%

Published-07 Oct, 2024 | 12:58

Updated-16 Oct, 2024 | 20:26

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in RIL

Memory corruption during the network scan request.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-21463

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.08% / 25.18%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:06

Updated-13 Jan, 2025 | 21:54

Buffer Copy Without Checking Size of Input in Audio

Memory corruption while processing Codec2 during v13k decoder pitch synthesis.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-21464

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 5.88%

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-10 Jan, 2025 | 17:22

Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity

Memory corruption while processing IPA statistics, when there are no active clients registered.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-21480

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.10% / 27.98%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while playing audio file having large-sized input buffer.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-33259

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 32.00%

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking the size of input in Modem

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-33278

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 20.95%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking the size of input in HLOS

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

Product-wcn3991_firmware sd_8cx_gen3_firmware wsa8830 sd678 sa6150p_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware qca8337 qca6431_firmware snapdragon_4_gen_1_firmware sdx65 csra6620 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 csra6620_firmware sd_675_firmware sd675_firmware ssg2115p csra6640_firmware qcs6125_firmware qca6426 wcn3990_firmware wcn3998 wcd9385_firmware qam8295p sdxr2_5g_firmware qcn6024_firmware sd720g sm4125 wcd9326_firmware wcn3950 sd_8_gen1_5g_firmware qsm8350_firmware sd662 sd710_firmware qsm8350 sd460_firmware qam8295p_firmware sa8155 sa9000p_firmware sm7315_firmware qca6574au_firmware wcn7850 qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware sd680_firmware sd778g sa6155p_firmware wcn7851 qcs6490 sdxr2_5g qca6698aq qcs6125 sa4155p_firmware sa8155_firmware sd662_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware qca6421 sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcd9326 sa6155p sg4150p wcd9335 qca8081 wcn6851 wcn7851_firmware qca6698aq_firmware qcs4290_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware sd750g sd870_firmware sd_8cx_gen3 qca6390 ar8035 sd750g_firmware aqt1000 sa8150p sxr2150p_firmware sm6250_firmware wcd9375 wcn3910_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware snapdragon_4_gen_1 qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware sa8195p_firmware wsa8835_firmware sm8475 qcn7606_firmware sa8295p_firmware wcn6750_firmware sa4150p sg4150p_firmware qcm6125_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p wcn3990 sd_675 sw5100p sd780g sd865_5g qca6595 qcc5100 sdx55m_firmware wcn6856_firmware sd888 sd670_firmware qca6574 sxr1230p_firmware wsa8835 sd665_firmware sa8540p_firmware wcd9380 sd888_5g ssg2125p_firmware qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p sxr1230p qca6430_firmware wcd9335_firmware wcn3980 wcn6750 sa9000p qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sxr2230p wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware qca6574a_firmware sd695 sd768g_firmware qcn9024 wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m sdxr1_firmware sxr2150p qcc5100_firmware qca6421_firmware sa8295p aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd710 sd670 qcn9024_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 wsa8832 sa8540p sw5100p_firmware wcn6856 sa6145p sd695_firmware sdxr1 sd768g qca6595_firmware qcs405_firmware sa8145p wcn6740 qca6696 qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sa8155p csra6640 qcn6024 sd675 sm7250p sd720g_firmware ssg2115p_firmware sw5100_firmware sa4155p ar8035_firmware qcm2290 qcn7606 Snapdragon qcm2290_firmware wcn3991_firmware sd_8cx_gen3_firmware qca8337_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware qca6431_firmware sdx55m_firmware wcn6856_firmware snapdragon_4_gen_1_firmware sd670_firmware sxr1230p_firmware wcn3950_firmware sd665_firmware sa8540p_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sd730_firmware csra6620_firmware ssg2125p_firmware sd_675_firmware sd675_firmware sd690_5g_firmware sdx50m_firmware csra6640_firmware wcn6855_firmware qcs6125_firmware wcn3990_firmware qca6430_firmware wcd9335_firmware wcd9385_firmware sdxr2_5g_firmware qcn6024_firmware wcd9326_firmware qca6574_firmware sd_8_gen1_5g_firmware sm4125_firmware sm7325p_firmware qsm8350_firmware sd710_firmware sd460_firmware qam8295p_firmware qca6426_firmware sa9000p_firmware sm7315_firmware qca6574a_firmware qca6574au_firmware sd768g_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware sm7250p_firmware wcn3980_firmware sdxr1_firmware qca6436_firmware qcc5100_firmware qca6421_firmware aqt1000_firmware sd680_firmware wcn6740_firmware sa6155p_firmware sdx65_firmware sd678_firmware qcm6490_firmware wsa8832_firmware sa4155p_firmware sd480_firmware sa8155_firmware wcn6851_firmware sd662_firmware qcn7606_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware sd778g_firmware qcn9024_firmware wsa8810_firmware wcd9341_firmware qcm4290_firmware sd765_firmware sw5100p_firmware wcn7851_firmware qca6698aq_firmware qcs4290_firmware sd695_firmware qca6696_firmware qcs6490_firmware qca6595_firmware qcs405_firmware sd870_firmware qca6391_firmware sa4150p_firmware wcn3910_firmware sxr2150p_firmware sd750g_firmware wcn6750_firmware sd780g_firmware wcd9370_firmware sm6250_firmware sd888_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8835_firmware sd720g_firmware sa8195p_firmware ssg2115p_firmware sw5100_firmware sa8295p_firmware sg4150p_firmware ar8035_firmware qcm6125_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-49830

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.02% / 2.60%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:12

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while processing an IOCTL call to set mixer controls.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-49829

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 2.16%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:12

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera

Memory corruption can occur during context user dumps due to inadequate checks on buffer length.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30298

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 10.97%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:26

Updated-03 Aug, 2024 | 22:32

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-fsm10055 wcn3991_firmware mdm9150_firmware wsa8830 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware qcs610 qcn9000 ipq8072a fsm10056 qca8337 ipq8076a_firmware sd865_5g sdx55m_firmware csra6620 fsm10055_firmware wsa8835 wcn3950_firmware sd665_firmware wcd9380 sd765g_firmware qca6595au_firmware qca6390_firmware qualcomm215 qcs410 wcd9370 csra6620_firmware csra6640_firmware qrb5165n_firmware qcn9000_firmware wcd9335_firmware wcn3980 wcn3998 wcd9385_firmware wcn3950 ipq8076a wcd9340_firmware wcn3660b wsa8815 wcn6850 sd665 ipq8074a sd662 sd460_firmware sd765 wcn3660b_firmware qca6574au_firmware sdx55_firmware sd768g_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3999_firmware sm7250p_firmware wcn3980_firmware wcn3610_firmware sd460 qca6391 sdx55m qrb5165n wcn3999 ar8031_firmware qrb5165_firmware qrb5165 wcn6851_firmware sd662_firmware ipq8072a_firmware qcs405 wcn3988_firmware qca6574au qcn9074 sd205 sa8155p_firmware sd205_firmware wcd9340 wsa8810_firmware qualcomm215_firmware sd765g wcd9341_firmware wsa8810 sd765_firmware fsm10056_firmware sd870 wcn6851 wcd9335 sd210_firmware qcs610_firmware mdm9150 wcd9385 wcd9341 sd768g ar8031 qca6696_firmware qcs405_firmware sd870_firmware qca6696 qca6391_firmware ar8035 qca6390 wcd9375 wcd9370_firmware sdx55 sa8155p wsa8830_firmware sda429w sd210 csra6640 sd865_5g_firmware wcn3620_firmware ipq8074a_firmware wcn3988 wcn6850_firmware wcn3620 wsa8815_firmware wsa8835_firmware sm7250p qcn9074_firmware qcs410_firmware ar8035_firmware wcn3610 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30308

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 29.15%

7 Day CHG~0.00%

Published-13 Jan, 2022 | 11:40

Updated-03 Aug, 2024 | 22:32

Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-qca9377_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sm6250p_firmware qcs610 fsm10056 qca8337 sd7c_firmware csrb31024 wcd9360_firmware mdm9650 sdx65 wcn3950_firmware mdm9250 sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qca6426 wcn3990_firmware qca9377 sa415m wcn3998 wcd9385_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware wcd9326_firmware sd720g wcn3950 sd_8_gen1_5g_firmware sm6375_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware wcd9360 qca6564au_firmware sd_8cx_gen2 sa515m_firmware sdxr2_5g sa415m_firmware wcn3988_firmware qca6430 sm6250 wcd9340 wsa8810_firmware sd765g sd765_firmware fsm10056_firmware qca6436 wcd9326 wcd9335 wcn6851 qca8081 qcs603_firmware qca6174a_firmware mdm9250_firmware wcd9385 wcd9341 qca6696_firmware sd750g sd870_firmware qca6390 ar8035 sd750g_firmware aqt1000 wcd9375 sm6250_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sdx20_firmware wcn3988 wcn6850_firmware wsa8815_firmware sd660_firmware wsa8835_firmware qcx315 sm8475 qca6564a sm6375 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware wsa8835 qcx315_firmware sd665_firmware wcd9380 sm6250p qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6174a sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 sa515m qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 sd7c mdm9650_firmware sd765 qca6426_firmware qca6574a_firmware sd768g_firmware sd850_firmware wcn3980_firmware sd730 qca6391 sdx55m sdxr1_firmware aqt1000_firmware sdx65_firmware sd678_firmware csrb31024_firmware sdx20 sd480_firmware qcs603 wcn6851_firmware qca6574au qca6564a_firmware wcd9341_firmware sd480 sd870 wsa8810 wcn6855 qcs610_firmware mdm9150 wcn6856 sdxr1 sd768g qca6696 qca6391_firmware sd845_firmware wcd9370_firmware sdx55 sd675 sd845 sm7250p sd720g_firmware sdx12 qcs410_firmware ar8035_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-1984

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.10% / 27.89%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 16:32

Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Product-wcn3991_firmware wsa8830 sd678 sm7250 sm6250p_firmware qcs610 qcs2290_firmware sm7250_firmware sd_636 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qcs2290 qca6390_firmware qca6335 msm8917 sd690_5g sd730_firmware sd_455_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qcs6125_firmware qca6426 sd632 wcn3998 wcd9371_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcn3615_firmware wcn3660b sd662 sd460_firmware qca6320_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware wcn3615 wcn3998_firmware wcn3610_firmware qca6420 qca6436_firmware apq8053_firmware qca6564au_firmware sd778g qca6310 qcs6490 sd429 sdxr2_5g qcs6125 sd662_firmware sdm630 wcn3988_firmware qca6430 sd205 sd429_firmware sm6250 sd778g_firmware apq8017_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 wcn6851 qcs603_firmware qcs4290_firmware wcd9385 qcs6490_firmware wcd9371 sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 apq8064au wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd210 sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8835_firmware apq8017 qca6564a wcn6750_firmware wcn3610 qcm6125_firmware qcm2290_firmware wcn3991 wcd9380_firmware sd_675 msm8996au_firmware sd780g sd865_5g qca6564au sdx55m_firmware wcn6856_firmware sd888 wsa8835 sd632_firmware msm8996au sd665_firmware wcd9380 sd888_5g sm6250p qualcomm215 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6310_firmware sm7325 qca6430_firmware wcn6750 sd439_firmware qca6335_firmware qcs605 sd855 sm4125_firmware wcn6850 sd665 wcn3910 qca6320 sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware sd460 qca6391 sd730 sdx55m sdxr1_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware apq8064au_firmware qcm4290 qcm6490_firmware sdx50m wcn3680_firmware sd480_firmware qcs603 wcn6851_firmware sd_455 qca6574au sd_636_firmware sd205_firmware qca6564a_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware wcn6856 wcn3680b sdxr1 sd768g apq8096au wcn6740 sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 apq8096au_firmware sd675 sd439 sd720g_firmware qcm2290 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-1907

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.33% / 55.27%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:30

Updated-03 Aug, 2024 | 16:25

Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-wcn3991_firmware wsa8830 sa6150p_firmware sa8145p_firmware csrb31024 sd_636 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6595au_firmware qca6390_firmware sa6155 wcd9370 qcs6125_firmware qca6426 qca6584au_firmware wcn3990_firmware sa415m wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware wcn3615_firmware sd710_firmware sa8155 sm7315_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3615 sm7250p_firmware wcn3998_firmware apq8053_firmware qca6436_firmware qca6564au_firmware qca6584au sa6155p_firmware sd778g sa515m_firmware sdxr2_5g qcs6125 sa8155_firmware sdm630 sa415m_firmware wcn3988_firmware sa6145p_firmware sd778g_firmware wcd9340 sa8195p wsa8810_firmware sd765g sd765_firmware qca6436 wcd9326 wcd9335 sa6155p wcn6851 qcs4290_firmware wcd9385 wcd9341 qca6696_firmware sd870_firmware qca6390 wcd9375 wcn3910_firmware sa8150p msm8953_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware sd660_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qca6564a wcn6750_firmware qcm6125_firmware wcn3991 wcd9380_firmware wcn3990 sd780g sd865_5g qca6595 qca6564au sdx55m_firmware wcn6856_firmware sd888 sd670_firmware qca6574 wsa8835 sd665_firmware wcd9380 sd888_5g qca6574a wcn6855_firmware sm7325p wcd9335_firmware wcn3980 wcn6750 sa515m qca6574_firmware wcd9340_firmware sd855 wsa8815 sm7325p_firmware sd665 wcn3910 wcn6850 qca6175a sd765 qca6426_firmware qca6574a_firmware sd768g_firmware sd835 wcn3980_firmware sm7315 qca6391 sdx55m wcn6740_firmware msm8953 qcm4290 csrb31024_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd710 sd_636_firmware sd670 qca6564a_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 wcn6856 sa6145p wcn3680b sd835_firmware sd768g qca6595_firmware sa8145p wcn6740 qca6696 sdm630_firmware qca6391_firmware sd845_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sdx55 apq8053 sa8155p sd845 sm7250p qca6175a_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-1983

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.46%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 16:32

Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-1966

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.06% / 18.57%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 16:25

Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Product-fsm10055 wcn3991_firmware wsa8830 sm7250 sa6150p_firmware sa8145p_firmware qcs610 fsm10056 qca8337 sm7250_firmware csra6620 fsm10055_firmware wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sa6155 sd690_5g wcd9370 csra6620_firmware csra6640_firmware qcs6125_firmware wcn3998 sd_8cx_firmware wcd9385_firmware wcn3950 sa8155 qca6574au_firmware sdx55_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3998_firmware wcn3999_firmware qca6420 sa6155p_firmware wcn3999 qcs6125 sa8155_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware wcd9340 sa8195p wsa8810_firmware sd765g sd765_firmware fsm10056_firmware wcn6851 wcd9335 sa6155p wcd9385 wcd9341 qca6696_firmware sd750g sd870_firmware qca6390 ar8035 sd_8cx aqt1000 sa8150p sd750g_firmware wcd9375 wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qcm6125_firmware wcn3991 qca8337_firmware wcd9380_firmware sd865_5g qca6595 sdx55m_firmware wsa8835 qca6574 sd665_firmware wcd9380 qcs410 qca6574a sd690_5g_firmware qca6430_firmware wcd9335_firmware wcn3980 qca6574_firmware wcd9340_firmware sd855 wsa8815 wcn6850 sd665 sd_8c_firmware sd765 qca6574a_firmware sd768g_firmware wcn3980_firmware qca6391 sdx55m aqt1000_firmware ar8031_firmware wcn6851_firmware qca6574au sa8155p_firmware wcd9341_firmware qcm6125 wsa8810 sd870 qcs610_firmware sd_8c sa6145p sd768g ar8031 qca6595_firmware qcs405_firmware sa8145p qca6696 qca6391_firmware wcd9370_firmware sa6150p sdx55 sa8155p csra6640 qcs410_firmware ar8035_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2017-11015

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 29.83%

7 Day CHG~0.00%

Published-16 Nov, 2017 | 22:00

Updated-20 Apr, 2025 | 01:37

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, currently, the value of SIR_MAC_AUTH_CHALLENGE_LENGTH is set to 128 which may result in buffer overflow since the frame parser allows challenge text of length up to 253 bytes, but the driver can not handle challenge text larger than 128 bytes.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-3686

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.14% / 35.37%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 07:44

Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the length of array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-qfe3100 qfs2580 qfe2550 msm8960 qcs610 pmi8996 qdm5579 qfe1045 qdm2307 qfs2530 qpa8802 qln1030 pm6125 qat3519 mdm9645 pm8917 pm8150a sc8180x\+sdx55 qtc800h qdm5670 qcs2290 sa6155 qca6335 msm8917 pm7150l qpa8821 mdm8215 qln1020 apq8076 wtr3905 qdm5671 pmc1000h qfe2330 msm8630 qat3518 sd632 sd8c msm8108 sa415m wcn3998 wcn3950 sm4125 sd720g wtr1605 wtr2605 mdm9628 qpa5460 wcn3660b wtr2655 qfe4320 qcc112 qca4020 mdm8215m qdm5652 mdm9630 qpm8870 qpm5679 qbt2000 msm8909w pm855p qca6420 wcd9360 pm6150a wtr1625l msm8627 sdr735g wcn3999 pm8150b qsm7250 pm8996 qcs6125 qfe2101 mdm9615m qca6430 qcc1110 qat3522 qfe4455fc pmr735a wtr1625 qcs405 smb1360 wcd9340 wfr2600 sd765g qfe3440fc wcd9320 sdr660 qca6436 wcn6851 sa6155p qpa6560 qfe3345 apq8052 sdr865 smb1358 wcd9341 pmi8952 smr545 mdm9655 qca6431 qln5020 wcd9371 smb1350 sd750g qdm3302 wtr3950 sa8150p qpm5657 pm6350 qdm5621 qfe3340 qtc800s msm8226 sd660 qdm5650 sd712 wcn3988 wtr3925 qfe2080fc sdr052 smb1390 pm6150l sd450 qet4100 wcn3610 msm8608 mdm9640 qpm6585 qtc410s wcn3991 smb1355 qln4650 qpa8801 sdm429w wcd9330 wgr7640 qat5568 qet5100 sd636 qca6564au msm8230 pm6150 qca6574 pm7250b qfs2630 qpa8842 pmm8996au wcd9380 qualcomm215 mdm9230 qln4640 qcs410 smb1381 sdr735 pm7250 wtr4905 smb1395 pm660l qpa8803 ar8151 smr526 wtr5975 qca6174 pmk8003 wcn3980 pmd9645 qdm2301 qsw8573 qcs605 wsa8815 wcn6850 wcn3910 qca6320 smb1394 wcn3680 qca9984 pm8921 sd835 qfe4309 qca1990 pm8009 qpa8675 sd730 sdx55m pm670a qfe4373fc pm8008 msm8953 qsw8574 pmi8998 mdm9225 qfe2520 apq8064 pme605 mdm9225m pm855l qcs603 rsw8577 pmd9635 qfe4302 qpm5621 qpm6582 sd670 apq8009w qfe4303 pm670 pm8150l wtr1605l qdm5677 pm8005 qsm8250 sa6145p pm215 qdm2302 pmm6155au sdxr1 ar8031 apq8096au wtr2965 wfr1620 pm8150 qpm5875 sdx55 qet5100m apq8053 sa8155p csra6640 pm8350bhs sd675 wtr4605 sd439 qet4101 pm8952 pmi8994 qat3516 pm670l wcd9310 pm8226 wcn3660 qpm5658 qca9379 pm855b smb2351 qln1031 qcm2290 qpm5870 pm8909 qfe1040 wsa8830 qfe4465fc pm660 sdr051 msm8960sg qln5030 msm8930 pm4125 qbt1500 qpa5581 pmi632 pm456 csrb31024 mdm9650 csra6620 qpa5373 qpm4621 pmk8001 qcs4290 qet6100 pmm855au sdr660g qfe2340 sd455 qpa8686 pm8110 sd690_5g smb1396 wcd9370 pm8350 qca6564 sdr425 qca6426 qpm5641 whs9410 qat5516 wtr2955 qdm5620 qln1021aq sd662 smb1380 qfe4308 pm8350bh mdm8635m apq8037 pm3003a sa8155 qat5533 wcn3615 qca6595au msm8227 wtr2100 sm7350 qtc800t pm8940 qpm6670 smb1354 wcd9306 qca6584au qdm2305 qca6310 msm8208 qpm8820 qpm4641 pm8937 qpm2630 qfe2081fc pm855 sd429 sdxr2_5g pm8250 msm8962 mpq8064 smb1398 apq8084 sdm630 sd821 apq8062 qdm4643 msm8976sg pmx55 sd205 sdr675 sm6250 qdm3301 sa8195p pm8953 qat5515 qca6694 qpm5677 smb231 qfe1100 qat3514 wcd9326 wcd9335 wcn3660a qet4200aq wcd9385 mdm8615m pm439 qpm5620 pmm8155au mdm9625 qpm4630 qca6390 wcd9375 ar8035 aqt1000 msm8956 msm8976 apq8064au pmm8195au qpa8673 qdm2310 qln4642 qca6694au apq8056 msm8952 sda429w sd210 sd820 mdm9625m pmi8937 pm8998 pmk7350 sdw3100 wcn3620 apq8017 ar6003 mdm9235m qca6564a smr546 pmx24 qet6110 qfe1055 qln5040 qpm8895 sdr845 qpm5670 wcn3990 apq8030 sd865_5g pm8019 qca6595 pmk8350 qpm8830 pm8350b qat5522 wsa8835 msm8996au apq8060a pm8150c pmr735b pmi8940 sd888_5g sm6250p rgr7640au qpa4360 qln1035bd pm855a qpa4361 qca6574a qca6174a pm8350c smr525 qpm4640 wcn6750 mdm9635m pmr525 mdm9615 pm7350c qpm4650 qtm525 wtr6955 qfe3335 pm8821 sd855 sd665 sd8cx qfe4305 qca6175a sd765 pm640p pmd9607 msm8209 qat3555 apq8009 sd460 qca6391 smb1351 qpa5461 mdm9310 qfe2082fc msm8920 msm8610 pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 qfs2608 pm8916 qln1036aq qtc801s qdm4650 mdm9215 pmd9655 qca6574au qfe3320 sd710 mdm9607 qsw6310 qcm6125 qpm6621 wsa8810 qdm2308 pmw3100 pmx50 pm8018 qat3550 wcn6856 qdm5679 wcn3680b sdr8250 sd768g wcn6740 qca6696 qfe4301 pm8004 pm640l msm8940 pmk8002 qpa2625 sa6150p pm7150a_sd845 sm7250p sdm830 smb1357 mdm9330 sd850 pm6250 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-3667

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.96%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 07:44

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8098, IPQ5018, IPQ6018, IPQ8074, Kamorta, MSM8998, Nicobar, QCA6390, QCA8081, QCS404, QCS405, QCS605, Rennell, SA415M, Saipan, SC7180, SC8180X, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SM8250, SXR1130

Product-ipq5018_firmware sdm850_firmware kamorta_firmware sdm636_firmware apq8098_firmware sdm845 msm8998_firmware sdm660 sdm630 qcs404_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 sm7150_firmware ipq8074_firmware sdm710 sc7180_firmware sm6150 sdm710_firmware sm7150 qca6390_firmware sdm670 qca8081 qcs605_firmware sc8180x ipq6018 sdm670_firmware qcs404 sm8150_firmware ipq8074 sdm636 qcs405_firmware ipq5018 rennell sa415m sc7180 sda845_firmware apq8098 sdm630_firmware rennell_firmware qca6390 ipq6018_firmware qcs605 saipan_firmware sm6150_firmware sm8250 msm8998 sm8150 sdm850 sxr1130_firmware kamorta qca8081_firmware nicobar_firmware saipan sxr1130 sdm660_firmware sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-3688

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.37% / 58.08%

7 Day CHG~0.00%

Published-30 Jul, 2020 | 11:40

Updated-04 Aug, 2024 | 07:44

Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA6574AU, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-kamorta_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware sdm429_firmware msm8905_firmware qca6574au_firmware sda660 sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm660 qcs405 qca6574au sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8053 msm8917_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sm8250 kamorta apq8017 msm8996 saipan nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2018-21213

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.10% / 27.80%

7 Day CHG~0.00%

Published-28 Apr, 2020 | 15:40

Updated-05 Aug, 2024 | 12:26

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2018-21205

Matching Score-4

Assigner-MITRE Corporation