CVE-2020-11159 | ByteOS Network

Vulnerability Details :

CVE-2020-11159

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-09 Jun, 2021 | 05:00

Updated At-04 Aug, 2024 | 11:28

Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:09 Jun, 2021 | 05:00

Updated At:04 Aug, 2024 | 11:28

▼CVE Numbering Authority (CNA)

Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Versions

Affected

APQ8009, APQ8017, APQ8053, APQ8064AU, APQ8076, APQ8084, APQ8092, APQ8094, APQ8096AU, AQT1000, AR8031, AR8035, AR8151, AR9380, CSR6030, CSR8811, CSRA6620, CSRA6640, CSRB31024, IPQ4018, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, MDM8215, MDM9206, MDM9215, MDM9225, MDM9225M, MDM9230, MDM9235M, MDM9250, MDM9310, MDM9330, MDM9607, MDM9615, MDM9625, MDM9625M, MDM9626, MDM9628, MDM9630, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8976, MSM8992, MSM8994, MSM8996AU, PM3003A, PM4125, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM640A, PM640L, PM640P, PM660, PM660A, PM660L, PM670, PM670A, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM8004, PM8005, PM8008, PM8009, PM8018, PM8019, PM8150, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855A, PM855B, PM855L, PM855P, ...[truncated*]

Problem Types

Type	CWE ID	Description
text	N/A	Buffer Over-read Issue in WLAN

Type: text

CWE ID: N/A

Description: Buffer Over-read Issue in WLAN

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:09 Jun, 2021 | 05:15

Updated At:15 Jun, 2021 | 17:33

Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Primary	2.0	9.4	HIGH	AV:N/AC:L/Au:N/C:C/I:N/A:C

Type: Primary

Version: 3.1

Base score: 9.1

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Type: Primary

Version: 2.0

Base score: 9.4

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:N/A:C

CPE Matches

Qualcomm Technologies, Inc.

>>apq8009_firmware>>-

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8017_firmware>>-

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8053_firmware>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8064au_firmware>>-

cpe:2.3:o:qualcomm:apq8064au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8064au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8076_firmware>>-

cpe:2.3:o:qualcomm:apq8076_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8076:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8084_firmware>>-

cpe:2.3:o:qualcomm:apq8084_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8084:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8092_firmware>>-

cpe:2.3:o:qualcomm:apq8092_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8092:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8094_firmware>>-

cpe:2.3:o:qualcomm:apq8094_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8094:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>apq8096au_firmware>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>aqt1000_firmware>>-

cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ar8031_firmware>>-

cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ar8035_firmware>>-

cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ar8151_firmware>>-

cpe:2.3:o:qualcomm:ar8151_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ar8151:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ar9380_firmware>>-

cpe:2.3:o:qualcomm:ar9380_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ar9380:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>csr6030_firmware>>-

cpe:2.3:o:qualcomm:csr6030_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:csr6030:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>csr8811_firmware>>-

cpe:2.3:o:qualcomm:csr8811_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:csr8811:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>csra6620_firmware>>-

cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>csra6640_firmware>>-

cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>csrb31024_firmware>>-

cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:csrb31024:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq4018_firmware>>-

cpe:2.3:o:qualcomm:ipq4018_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq4018:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq4028_firmware>>-

cpe:2.3:o:qualcomm:ipq4028_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq4028:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq4029_firmware>>-

cpe:2.3:o:qualcomm:ipq4029_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq4029:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq5010_firmware>>-

cpe:2.3:o:qualcomm:ipq5010_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq5010:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq5018_firmware>>-

cpe:2.3:o:qualcomm:ipq5018_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq5018:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ipq6000_firmware>>-

cpe:2.3:o:qualcomm:ipq6000_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ipq6000:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-125	Primary	nvd@nist.gov

CWE ID: CWE-125

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

562Records found

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.22%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 09:14

Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, Qualcomm 215, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, Snapdragon_High_Med_2016

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_632 sd_820a sd_412 msm8996au_firmware sd_439 sd_425 sd_429 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware mdm9650 sdm439 sd_625 ipq8074_firmware snapdragon_high_med_2016_firmware qm215 mdm9607 msm8996au sd_820_firmware sd_650 sd_820 sd_450_firmware sd_410 sd_439_firmware sd_820a_firmware qca8081 sd_429_firmware mdm9206 sd_652 sd_425_firmware snapdragon_high_med_2016 sd_625_firmware ipq8074 mdm9655 sd_450 sd_412_firmware sdm439_firmware qm215_firmware mdm9206_firmware sd_427 sd_430 sd_435_firmware sd_632_firmware mdm9650_firmware sd_410_firmware sd_652_firmware qca8081_firmware sd_650_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.15% / 35.84%

||

7 Day CHG~0.00%

Published-01 Jul, 2024 | 14:17

Updated-01 Aug, 2024 | 22:20

Buffer Over-read in WLAN HOST

Information disclosure while handling SA query action frame.

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware qam8255p_firmware qcn9070 qca8337 qam8650p qfw7124 ipq8173_firmware qam8775p qcf8001 qamsrv1m qcn6224_firmware qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 immersive_home_318_platform_firmware ipq8078a ipq5028_firmware qca6595au_firmware ipq6000 qcn5152_firmware qca0000_firmware qca6584au_firmware qcn9000_firmware ipq9554 qamsrv1h qca6554a_firmware immersive_home_216_platform ipq8076a immersive_home_316_platform immersive_home_316_platform_firmware qamsrv1h_firmware qca8386_firmware qcn6024_firmware qca8084_firmware immersive_home_318_platform ipq8074a qcn6412 qcn5124_firmware qca8082_firmware sa9000p_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware qcn6422_firmware qca6595au qca8081_firmware qcn6023_firmware qfw7114 sa7255p sdx55_firmware ipq5010 qca6564au_firmware qca6584au sa8620p_firmware snapdragon_x65_5g_modem-rf_system_firmware ipq8078a_firmware qcn9274 qca6678aq_firmware snapdragon_x72_5g_modem-rf_system sa8775p_firmware ipq8174 ipq5028 qca6698aq qcn5052 qca0000 qcf8001_firmware ipq6010 qcn6112_firmware qcn9074 srv1h qca8085 sa7775p_firmware sdx65m wcd9340 qcn6132 qcn6224 sa8255p_firmware snapdragon_x75_5g_modem-rf_system qca8081 qcf8000 qca6698aq_firmware ipq8071a qcn6023 sa7775p sdx65m_firmware ipq5312 ipq8071a_firmware snapdragon_auto_5g_modem-rf_gen_2 immersive_home_3210_platform qca8085_firmware ipq5300 qam8775p_firmware qca9888_firmware qcn6122 qca6696_firmware sa8255p sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware ipq9008_firmware ipq9570 qcn5154_firmware ar8035 csr8811 qcc710_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware qcn5022_firmware immersive_home_216_platform_firmware sa8770p qca8337_firmware qcn9000 ipq8072a qcf8000_firmware qca6554a ipq8076a_firmware qca6595 ipq8078 qca6564au qca8084 ipq8173 ipq9008 qcn5164 immersive_home_326_platform_firmware qcn6122_firmware qca6574 qcn6402_firmware csr8811_firmware qcn6274 qcn6422 ipq9554_firmware snapdragon_x72_5g_modem-rf_system_firmware qcn5154 qca8075_firmware qca6574a qcn5024 qca9889 qcn6132_firmware qca9888 qcn5052_firmware qcn9274_firmware qcc2076_firmware ipq8070a_firmware qfw7114_firmware qcc2073_firmware ipq6018_firmware ipq8076_firmware sa8650p qca6574_firmware sa9000p wcd9340_firmware qcn6112 ipq8076 qca6574a_firmware qcn5152 ipq6028 sa8775p qcn9024 ipq9574_firmware immersive_home_3210_platform_firmware ipq5302 fastconnect_7800 qcn9100 qcn6274_firmware qca6678aq snapdragon_x65_5g_modem-rf_system ipq5300_firmware ipq8078_firmware ipq9570_firmware qcn9070_firmware sa8650p_firmware snapdragon_x75_5g_modem-rf_system_firmware srv1h_firmware ipq6028_firmware ipq8072a_firmware qcn6432_firmware ipq5312_firmware qca6574au qca9889_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware sa7255p_firmware fastconnect_7800_firmware sa8620p qcn6412_firmware ipq5332_firmware ipq5332 ipq5302_firmware immersive_home_326_platform qamsrv1m_firmware ipq6018 qcn5022 srv1m_firmware qam8650p_firmware qcc710 ipq6010_firmware immersive_home_214_platform qca6595_firmware qca6696 immersive_home_214_platform_firmware qca4024 sdx55 qca8075 qcn6402 qcn9022_firmware qcn6024 qcn9022 qcc2076 ipq8070a qcn9072_firmware ipq6000_firmware srv1m qcn9074_firmware qfw7124_firmware qam8255p qcc2073 qcn6432 ar8035_firmware Snapdragon qcn5024_firmware qam8255p_firmware qca8337_firmware qcf8000_firmware ipq8076a_firmware ipq8173_firmware qcn6224_firmware qca4024_firmware immersive_home_326_platform_firmware qcn6122_firmware qcn6402_firmware immersive_home_318_platform_firmware csr8811_firmware ipq5028_firmware qca6595au_firmware ipq9554_firmware snapdragon_x72_5g_modem-rf_system_firmware qca8075_firmware qcn5152_firmware qca0000_firmware qcn6132_firmware qca6584au_firmware qcn9000_firmware qcn5052_firmware qcn9274_firmware qcc2076_firmware ipq8070a_firmware qca6554a_firmware qfw7114_firmware qcn6024_firmware qca8386_firmware qcc2073_firmware immersive_home_316_platform_firmware qamsrv1h_firmware ipq6018_firmware ipq8076_firmware qca6574_firmware qca8084_firmware wcd9340_firmware qcn5124_firmware qca8082_firmware sa9000p_firmware qca6574a_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware qcn6422_firmware sdx55_firmware qca8081_firmware qcn6023_firmware ipq9574_firmware immersive_home_3210_platform_firmware qca6564au_firmware sa8620p_firmware snapdragon_x65_5g_modem-rf_system_firmware ipq8078a_firmware qca6678aq_firmware qcn6274_firmware sa8775p_firmware ipq5300_firmware ipq8078_firmware ipq9570_firmware qcn9070_firmware sa8650p_firmware snapdragon_x75_5g_modem-rf_system_firmware qcf8001_firmware srv1h_firmware ipq6028_firmware ipq8072a_firmware qcn6112_firmware qcn6432_firmware ipq5312_firmware qca9889_firmware sa7775p_firmware qcn9024_firmware ipq8174_firmware sa7255p_firmware fastconnect_7800_firmware sa8255p_firmware qcn6412_firmware ipq5332_firmware ipq5302_firmware qca6698aq_firmware qamsrv1m_firmware sdx65m_firmware srv1m_firmware ipq8071a_firmware qam8650p_firmware sa8770p_firmware qca8085_firmware qam8775p_firmware qca9888_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware ipq6010_firmware qca6696_firmware qca6595_firmware ipq9008_firmware qcn5154_firmware immersive_home_214_platform_firmware qcc710_firmware qcn9100_firmware qcn9022_firmware ipq5010_firmware ipq8074a_firmware qcn9072_firmware ipq6000_firmware qcn9074_firmware qcn5022_firmware qfw7124_firmware immersive_home_216_platform_firmware ar8035_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.72%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 08:24

While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 650/52, SD 820, SD 820A, SDM439, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware sd_632 mdm9640_firmware sd_820a msm8996au_firmware sd_439 sdx20 sd_415 sd_616 sd_425 sd_429 sdm439 mdm9607_firmware sd_615 mdm9650 sd_650_firmware sd_625 qca6574au sd_615_firmware msm8909w_firmware mdm9607 msm8996au qm215 sd_210 sd_650 sd_820_firmware sd_820 sd_450_firmware sd_439_firmware sd_820a_firmware mdm9150 sd_429_firmware mdm9206 sd_652 qca6174a_firmware qca6174a qca9379_firmware sd_212_firmware sd_425_firmware sd_625_firmware sd_450 sdm439_firmware qca9377 mdm9206_firmware qm215_firmware sd_632_firmware mdm9650_firmware sdx20_firmware sd_205 qca6574au_firmware sd_210_firmware sd_415_firmware sd_652_firmware msm8909w qca9379 sd_616_firmware sd_205_firmware sd_212 mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.81%

||

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 08:24

Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 665, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware mdm9206 sd_652 sd_425_firmware qca9379_firmware qca6174a sd_665 sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sd_210_firmware sd_600 sd_652_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware qcs405 sd_625 qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.72%

||

7 Day CHG~0.00%

Published-24 May, 2019 | 16:35

Updated-05 Aug, 2024 | 08:24

Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.83%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing start bss request from upper layer, out of bounds read occurs if ssid length is greater than maximum.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.79%

||

7 Day CHG~0.00%

Published-19 Sep, 2018 | 14:00

Updated-05 Aug, 2024 | 08:24

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing diag event after associating to a network out of bounds read occurs if ssid of the network joined is greater than max limit.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.16% / 37.02%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:59

Buffer Over-read in Multi Mode Call Processor

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware wsa8840 qfw7124 sdm429w ar8035_firmware qcn6224_firmware sm7675 wsa8845h_firmware qca8337 wcn3620_firmware qca8337_firmware wsa8845 snapdragon_x72_5g_modem-rf_system_firmware wcn3680b wcn3610_firmware wcn3610 qcn6274_firmware qca6584au wcn3660b sm8635p sdm429w_firmware wcn3980 sm8635p_firmware wsa8845_firmware wcd9370 wcd9340_firmware qcc710_firmware sm7675_firmware wcn6755_firmware ar8035 snapdragon_429_mobile_firmware wsa8835 wsa8845h qca8081_firmware fastconnect_7800 wcd9340 snapdragon_x75_5g_modem-rf_system qca6698aq_firmware wcd9395_firmware snapdragon_x72_5g_modem-rf_system qfw7114_firmware sm7675p snapdragon_auto_5g_modem-rf_gen_2 qca6584au_firmware snapdragon_429_mobile wcd9375_firmware sm7675p_firmware wcn3680b_firmware wsa8832 wcd9390_firmware qcn6274 sm8635 qcc710 snapdragon_8_gen_3_mobile_firmware wcd9375 sdx80m sm8635_firmware snapdragon_8_gen_3_mobile sdx80m_firmware snapdragon_wear_4100\+wsa8830 snapdragon_wear_4100\+_firmware wsa8832_firmware wsa8830_firmware wcn3620 wcn6755 wcn3980_firmware qca8081 qca6698aq snapdragon_x75_5g_modem-rf_system_firmware qcn6224 qfw7114 wcd9390 wsa8840_firmware wcd9395 qfw7124_firmware wcn3660b_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware wsa8835_firmware wcd9370_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.03% / 8.80%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:58

Buffer Over-read in Automotive Multimedia

Information disclosure while processing IO control commands.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware qfw7124 sdm429w ar8035_firmware qca6696 sa8195p_firmware qcn6224_firmware qcs610 qam8295p_firmware sa8155p_firmware c-v2x_9150_firmware qca8337 sa8145p_firmware qcn9074_firmware wcn3620_firmware qca8337_firmware video_collaboration_vc1_platform_firmware qca9367_firmware wcn3680b wcd9380_firmware qca6574au_firmware sa8195p qcn6274_firmware qca6584au wcn3950_firmware wcn3660b sdm429w_firmware c-v2x_9150 wcn3980 wcn3950 video_collaboration_vc3_platform_firmware sw5100 wcd9370 wcd9340_firmware qcc710_firmware sa8540p_firmware sw5100p_firmware sa8295p_firmware ar8035 sa8150p_firmware snapdragon_429_mobile_firmware wsa8835 qca9377 sa9000p qca8081_firmware qcn9074 fastconnect_7800 snapdragon_x75_5g_modem-rf sa6155p_firmware wcd9341_firmware snapdragon_8_gen_1_mobile wcd9340 qam8295p wcd9341 wcn3988 qca6698aq_firmware qca6574au qfw7114_firmware sa8150p sa6150p_firmware fastconnect_6900 wcn3988_firmware sw5100_firmware snapdragon_auto_5g_modem-rf_gen_2 qca6584au_firmware snapdragon_429_mobile qcs410_firmware sa8530p_firmware qca6696_firmware snapdragon_8_gen_1_mobile_firmware snapdragon_x72_5g_modem-rf_firmware wsa8810_firmware sa6150p wcn3680b_firmware wsa8810 qcn6274 qcc710 sa8295p sa6145p_firmware qcs610_firmware sa6145p qca9367 wsa8815 snapdragon_x72_5g_modem-rf qcs410 qca9377_firmware sa6155p snapdragon_x75_5g_modem-rf_firmware wcd9380 video_collaboration_vc3_platform wsa8830 wsa8815_firmware sa8155p sa8145p sw5100p sa8530p wsa8830_firmware wcn3620 wcn3980_firmware qca8081 qca6698aq video_collaboration_vc1_platform fastconnect_6900_firmware sa8540p qcn6224 sa9000p_firmware qfw7114 qfw7124_firmware wcn3660b_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware wsa8835_firmware wcd9370_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.22% / 44.58%

||

7 Day CHG~0.00%

Published-07 Oct, 2024 | 12:58

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN Host Communication

Transient DOS while parsing probe response and assoc response frame.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_8_gen_3_mobile_platform_firmware qcm8550_firmware wsa8845_firmware qca8386_firmware qca6678aq_firmware wsa8832 qcn9000_firmware qca8082_firmware ipq9574 srv1l qca6595 wcd9370 srv1m qcn6432_firmware qca8081_firmware qca6678aq ar8035_firmware qca6696 qam8620p_firmware wcd9340_firmware wcd9395_firmware qca0000_firmware qcc710_firmware ipq9554 ipq9008 qca6564au fastconnect_6700 qcn6422_firmware ipq9008_firmware qcn9074 qcn5124_firmware ipq5300_firmware wsa8832_firmware sa8195p_firmware qca8337_firmware qca8337 wcd9395 ipq5332 sg8275p_firmware qcm6490_firmware qca6574au_firmware qam8295p snapdragon_x72_5g_modem-rf_system_firmware wcd9390 qca6574au ipq5312 sa8620p_firmware flight_rb5_5g_platform wsa8845h_firmware sa9000p_firmware srv1h snapdragon_x65_5g_modem-rf_system_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qca6797aq_firmware qca8085_firmware qcf8001_firmware qca6554a qcs5430 sa8295p_firmware qcm5430 qcm5430_firmware sa8770p qcn9000 qcn6274_firmware ssg2115p qca6584au qcc710 snapdragon_x72_5g_modem-rf_system qfw7114_firmware qcs7230 qca6595_firmware qcn6402 qcn6422 fastconnect_7800_firmware qcn6432 fastconnect_6900 ipq5332_firmware sa7255p ipq5302_firmware qfw7114 ipq5300 wcd9385_firmware ipq9574_firmware fastconnect_6900_firmware qam8255p_firmware wcd9380 qam8255p sxr2230p snapdragon_ar2_gen_1_platform_firmware qca8075_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 qcf8000 sa6155p immersive_home_3210_platform_firmware qca6564au_firmware sxr1230p qca8075 video_collaboration_vc5_platform_firmware qam8650p sa9000p snapdragon_8\+_gen_2_mobile_platform srv1h_firmware qca8085 sdx65m_firmware video_collaboration_vc3_platform qca6595au sxr2250p_firmware sa6155p_firmware wsa8840 qca6688aq qam8295p_firmware srv1m_firmware qcs8550_firmware qcn6402_firmware qam8620p qfw7124_firmware wcd9385 qca6698aq_firmware qca8084_firmware snapdragon_8_gen_2_mobile_platform qcf8001 sa8255p qcs7230_firmware qca8084 sxr1230p_firmware wcd9390_firmware snapdragon_8_gen_3_mobile_platform sdx65m sg8275p wcd9370_firmware ssg2125p qca6554a_firmware sa7255p_firmware qca6574a ipq9570 sa8195p wcd9340 qcs8250_firmware qamsrv1m snapdragon_auto_5g_modem-rf_gen_2 immersive_home_326_platform qcm6490 ipq5302 qam8650p_firmware video_collaboration_vc5_platform sxr2250p sm8550p_firmware qcm8550 immersive_home_3210_platform qcs6490_firmware snapdragon_x65_5g_modem-rf_system qcn9274 qcn9024 qca6584au_firmware sa8775p qrb5165n_firmware snapdragon_x75_5g_modem-rf_system qfw7124 wsa8835 wsa8840_firmware sxr2230p_firmware qcn6274 qca6595au_firmware qca6574 qca6391_firmware qca0000 ipq9570_firmware sa8775p_firmware snapdragon_ar2_gen_1_platform qcn6412_firmware qca6696_firmware wsa8845h qcn9024_firmware qamsrv1h wcd9380_firmware qca8082 qca6574_firmware sa8155p_firmware qca8081 sa8155p wsa8830 qcn5124 qca6797aq qam8775p sm8550p qcf8000_firmware ipq5312_firmware qcn9074_firmware qcn6412 sa8620p sa8255p_firmware flight_rb5_5g_platform_firmware qca6574a_firmware ar8035 qamsrv1m_firmware sa8650p_firmware wcd9375_firmware robotics_rb5_platform sa7775p srv1l_firmware qca8386 qca6391 qcn6224 qcn9274_firmware qcs5430_firmware ssg2125p_firmware sa7775p_firmware qca6698aq snapdragon_8_gen_2_mobile_platform_firmware sa8770p_firmware sa8295p qrb5165n robotics_rb5_platform_firmware qcs8550 fastconnect_7800 sa8650p qam8775p_firmware wcd9375 qca6688aq_firmware fastconnect_6700_firmware qamsrv1h_firmware video_collaboration_vc3_platform_firmware wsa8835_firmware ssg2115p_firmware snapdragon_x75_5g_modem-rf_system_firmware qcs6490 qcs8250 immersive_home_326_platform_firmware ipq9554_firmware wsa8830_firmware qcn6224_firmware Snapdragon qam8255p_firmware robotics_rb5_platform_firmware qca8337_firmware wcd9380_firmware sxr2230p_firmware qcf8000_firmware sg8275p_firmware qcs7230_firmware ar8035_firmware flight_rb5_5g_platform_firmware qcn6224_firmware immersive_home_326_platform_firmware sxr1230p_firmware qcn6402_firmware srv1l_firmware qca6595au_firmware ipq9554_firmware snapdragon_x72_5g_modem-rf_system_firmware qca8075_firmware ssg2125p_firmware qca0000_firmware qcm5430_firmware qca6584au_firmware qrb5165n_firmware qcn9000_firmware qcn9274_firmware qfw7114_firmware qca6554a_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qca8386_firmware qamsrv1h_firmware qca6574_firmware wcd9340_firmware qca8084_firmware qcn5124_firmware wsa8845_firmware qam8295p_firmware qca8082_firmware sa9000p_firmware qca6574a_firmware qca6574au_firmware qcn6422_firmware wcd9375_firmware qca8081_firmware wsa8845h_firmware ipq9574_firmware immersive_home_3210_platform_firmware qca6564au_firmware sa8620p_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qca6678aq_firmware qcn6274_firmware sa8775p_firmware ipq5300_firmware qcm6490_firmware wsa8840_firmware sa8650p_firmware ipq9570_firmware snapdragon_x75_5g_modem-rf_system_firmware wsa8832_firmware qcf8001_firmware fastconnect_6900_firmware srv1h_firmware qcs8550_firmware qca6797aq_firmware ipq5312_firmware qcn6432_firmware sa8155p_firmware sa7775p_firmware fastconnect_6700_firmware qcn9024_firmware sa7255p_firmware qcs8250_firmware fastconnect_7800_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware wcd9395_firmware qcn6412_firmware ipq5332_firmware ipq5302_firmware qca6698aq_firmware qamsrv1m_firmware sdx65m_firmware srv1m_firmware qam8650p_firmware sa8770p_firmware qca8085_firmware qam8775p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qca6696_firmware qcs6490_firmware qca6595_firmware qcs5430_firmware ipq9008_firmware qca6391_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware qcc710_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware sxr2250p_firmware wsa8835_firmware sa8195p_firmware ssg2115p_firmware qcn9074_firmware qam8620p_firmware qfw7124_firmware sa8295p_firmware snapdragon_8_gen_2_mobile_platform_firmware qca6688aq_firmware

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.21% / 43.77%

||

7 Day CHG~0.00%

Published-20 Sep, 2018 | 13:00

Updated-05 Aug, 2024 | 08:01

In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710, SDX20, Snapdragon_High_Med_2016, while parsing FLAC file with corrupted picture block, a buffer over-read can occur.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.44% / 62.67%

||

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-07 Nov, 2024 | 20:06

Buffer Over-read in WLAN Host

Transient DOS while processing the CU information from RNR IE.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware wsa8830 qca6777aq sxr2230p_firmware qca8337 qam8650p qfw7124 qam8775p qamsrv1m qca6777aq_firmware qcn6224_firmware wsa8840 srv1l_firmware wcn6755_firmware qca6595au_firmware video_collaboration_vc3_platform wcd9370 ssg2115p qcm5430_firmware qca6584au_firmware snapdragon_8_gen_2_mobile_platform qamsrv1h sa8530p qca6554a_firmware wcd9385_firmware qam8295p wcn7881_firmware qamsrv1h_firmware qca6688aq qam8295p_firmware sa9000p_firmware qca6574au_firmware sa7255p wsa8845h_firmware wcd9375_firmware snapdragon_8_gen_3_mobile_platform qfw7114 qca8081_firmware qca6595au wcn7860 qca6564au_firmware sa8620p_firmware sa6155p_firmware qca6584au qcm8550_firmware qcn9274 wcn7881 snapdragon_x72_5g_modem-rf_system qca6678aq_firmware sa8775p_firmware qcs6490 wsa8840_firmware qca6698aq video_collaboration_vc5_platform qcs8550_firmware sm8635 wcn7880_firmware srv1h sa7775p_firmware wcd9340 sa8195p fastconnect_6700_firmware qcn6224 wsa8845h wcn6755 wcd9395_firmware snapdragon_x75_5g_modem-rf_system snapdragon_ar2_gen_1_platform_firmware sm8750p_firmware sm8750_firmware sa8255p_firmware sa6155p qcs7230 qca8081 snapdragon_auto_5g_modem-rf_gen_2 qca6698aq_firmware sa7775p sxr2250p qcs5430 qam8620p wcd9385 snapdragon_auto_5g_modem-rf_gen_2_firmware sa8770p_firmware sa8255p qam8775p_firmware qca6696_firmware qcs6490_firmware qca6797aq ar8035 wcd9375 wcd9390 qcc710_firmware wsa8830_firmware qcm6490 wsa8835_firmware sa8195p_firmware video_collaboration_vc5_platform_firmware sxr2250p_firmware sa8295p_firmware snapdragon_8_gen_2_mobile_platform_firmware wcn7880 sa8770p qca6787aq_firmware qca6688aq_firmware wcd9380_firmware qca8337_firmware ssg2125p qca6554a qca6595 qcm8550 qca6564au qcs7230_firmware sa8530p_firmware wsa8835 qca6574 sxr1230p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware sa8540p_firmware wcd9380 qcn6274 snapdragon_x72_5g_modem-rf_system_firmware fastconnect_6700 ssg2125p_firmware sm8635_firmware qca6574a sxr1230p video_collaboration_vc3_platform_firmware qfw7114_firmware qcn9274_firmware qcc2076_firmware wsa8845 qcc2073_firmware sa8650p sa9000p qca6574_firmware wcd9340_firmware sxr2230p wsa8845_firmware qcs8250 sm8750p sa8775p qca6574a_firmware qcs9100_firmware qca6391 sa8295p fastconnect_7800 qcn6274_firmware qca6678aq wcn7861_firmware qcm6490_firmware wsa8832_firmware sa8650p_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900 srv1h_firmware fastconnect_6900_firmware qca6797aq_firmware qca6574au sa8155p_firmware srv1l sa7255p_firmware qcs8250_firmware snapdragon_8\+_gen_2_mobile_platform fastconnect_7800_firmware sa8620p wsa8832 sa8540p sm8550p srv1m_firmware snapdragon_ar2_gen_1_platform qcm5430 qamsrv1m_firmware sm8750 qam8650p_firmware qcc710 wcn7860_firmware qca6595_firmware wcn7861 wcd9395 qcs5430_firmware qca6787aq qca6696 qca6391_firmware qcs8550 wcd9370_firmware sm8550p_firmware wcd9390_firmware snapdragon_8_gen_3_mobile_platform_firmware sa8155p qcs9100 qcc2076 srv1m ssg2115p_firmware qam8620p_firmware qfw7124_firmware qam8255p qcc2073 ar8035_firmware Snapdragon qam8255p_firmware qca8337_firmware wcd9380_firmware sxr2230p_firmware qcs7230_firmware ar8035_firmware qca6777aq_firmware sa8530p_firmware qcn6224_firmware sxr1230p_firmware sa8540p_firmware srv1l_firmware wcn6755_firmware qca6595au_firmware snapdragon_x72_5g_modem-rf_system_firmware ssg2125p_firmware sm8635_firmware qcm5430_firmware qca6584au_firmware qcn9274_firmware qcc2076_firmware qfw7114_firmware qca6554a_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware wcn7881_firmware qcc2073_firmware qamsrv1h_firmware qca6574_firmware wcd9340_firmware wsa8845_firmware qam8295p_firmware sa9000p_firmware qca6574a_firmware qca6574au_firmware qcs9100_firmware wcd9375_firmware qca8081_firmware wsa8845h_firmware qca6564au_firmware sa8620p_firmware sa6155p_firmware qcm8550_firmware qca6678aq_firmware qcn6274_firmware sa8775p_firmware wcn7861_firmware qcm6490_firmware wsa8840_firmware sa8650p_firmware wsa8832_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware srv1h_firmware qcs8550_firmware qca6797aq_firmware wcn7880_firmware sa8155p_firmware sa7775p_firmware fastconnect_6700_firmware sa7255p_firmware qcs8250_firmware fastconnect_7800_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware sm8750_firmware sm8750p_firmware wcd9395_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware qam8650p_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware qca6696_firmware qcs6490_firmware wcn7860_firmware qca6595_firmware qcs5430_firmware qca6391_firmware wcd9370_firmware sm8550p_firmware qualcomm_video_collaboration_vc5_platform_firmware qcc710_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware sxr2250p_firmware wsa8835_firmware sa8195p_firmware ssg2115p_firmware qam8620p_firmware qfw7124_firmware sa8295p_firmware snapdragon_8_gen_2_mobile_platform_firmware qca6688aq_firmware qca6787aq_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.7||MEDIUM

EPSS-0.06% / 17.66%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in wma_ndp_confirm_event_handler and wma_ndp_indication_event_handler, ndp_cfg len and num_ndp_app_info is from fw. If they are not checked, it may cause buffer over-read once the value is too large.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.03% / 8.80%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:58

Buffer Over-read in Audio

Information disclosure during audio playback.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware qcn6224_firmware qam8295p_firmware c-v2x_9150_firmware qcn9074_firmware qcs8550_firmware qca9367_firmware wcn3680b qca6574au_firmware qsm8250_firmware sa8195p qcn6274_firmware qca6391 qca6584au wcn3950_firmware wcn3660b qca6564a msm8996au wcn3950 video_collaboration_vc3_platform_firmware sxr2230p qcc710_firmware sa8540p_firmware snapdragon_x55_5g_modem-rf snapdragon_865\+_5g_mobile ar8035 sa8150p_firmware qca6564a_firmware sxr2230p_firmware sxr2130 snapdragon_xr2_5g_platform sa6155p_firmware wcd9341 qca6698aq_firmware snapdragon_x55_5g_modem-rf_firmware snapdragon_865_5g_mobile fastconnect_6900 qca6574a fastconnect_6800 qcs410_firmware sa8530p_firmware wcd9385_firmware sa6150p wcn3680b_firmware wsa8810 snapdragon_820_automotive sa8295p sa6145p_firmware sa6145p snapdragon_870_5g_mobile_firmware qcs410 sdx55 sa6155p snapdragon_865\+_5g_mobile_firmware snapdragon_x75_5g_modem-rf_firmware wcd9380 video_collaboration_vc3_platform qca6436_firmware sa8155p wsa8832_firmware wsa8830_firmware qca6564au sxr2130_firmware snapdragon_xr2_5g_platform_firmware qca8081 qcn6224 wcd9385 qfw7124_firmware wcn3660b_firmware sxr2250p_firmware qca6426 qfw7124 ar8035_firmware qca6696 sa8195p_firmware sd865_5g_firmware qcs610 sa8155p_firmware sd865_5g qca8337 sa8145p_firmware qca8337_firmware video_collaboration_vc1_platform_firmware wcd9380_firmware qca6391_firmware c-v2x_9150 wcn3980 wcd9370 wcd9340_firmware sa8295p_firmware wsa8835 qca9377 sa9000p qsm8250 qca6426_firmware qca8081_firmware qcn9074 fastconnect_7800 snapdragon_x75_5g_modem-rf wcd9341_firmware qca6564au_firmware snapdragon_870_5g_mobile snapdragon_865_5g_mobile_firmware wcd9340 qam8295p qca6574au qcs8550 sa8150p sa6150p_firmware sxr2250p snapdragon_auto_5g_modem-rf_gen_2 qca6584au_firmware qca6696_firmware snapdragon_x72_5g_modem-rf_firmware wsa8810_firmware wsa8832 qcn6274 qcc710 qcs610_firmware qca9367 wsa8815 snapdragon_x72_5g_modem-rf snapdragon_auto_5g_modem-rf_gen_2_firmware msm8996au_firmware qca9377_firmware qca6574a_firmware sdx55_firmware wsa8830 wsa8815_firmware sa8145p sa8530p wcn3980_firmware qca6698aq video_collaboration_vc1_platform qca6436 fastconnect_6900_firmware sa8540p sa9000p_firmware qfw7114 fastconnect_6800_firmware qfw7114_firmware snapdragon_820_automotive_firmware wsa8835_firmware wcd9370_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.01% / 2.79%

||

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Venus HW searches for start code when decoding input bit stream buffers. If start code is not found in entire buffer, there is over-fetch beyond allocation length. This leads to page fault.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.03% / 8.80%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:58

Buffer Over-read in Computer Vision

Information disclosure while processing information on firmware image during core initialization.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware sa8150p sa6150p_firmware fastconnect_6900 sw5100_firmware wcn3988_firmware qca6696 sa8195p_firmware sa8155p_firmware qca6696_firmware qam8295p_firmware sa8530p_firmware snapdragon_8_gen_1_mobile_firmware sa8145p_firmware wcd9385_firmware sa6150p wcd9380_firmware qca6574au_firmware snapdragon_888\+_5g_mobile sa8195p qca6174a_firmware sa6145p_firmware sa8295p sa6145p snapdragon_888_5g_mobile_firmware snapdragon_w5\+_gen_1_wearable_firmware wcn3980 snapdragon_w5\+_gen_1_wearable sw5100 snapdragon_888_5g_mobile sa8540p_firmware sa6155p sw5100p_firmware sa8295p_firmware wcd9380 wsa8830 sa8150p_firmware wsa8835 sa8145p sa8155p sa9000p sw5100p sa8530p wsa8830_firmware fastconnect_7800 wcn3980_firmware sa6155p_firmware snapdragon_8_gen_1_mobile qam8295p fastconnect_6900_firmware sa8540p qca6174a wcn3988 sa9000p_firmware snapdragon_888\+_5g_mobile_firmware wcd9385 qca6574au wsa8835_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.03% / 9.22%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Slab-out-of-bounds access can occur if the context pointer is invalid due to lack of null check on pointer before accessing it in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, SC8180X, SDX55, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-apq8053 sdx55 sm8150_firmware sm8150 sdx55_firmware apq8053_firmware sc8180x sc8180x_firmware Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.56% / 67.83%

||

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-07 Nov, 2024 | 20:06

Buffer Over-read in WLAN Firmware

Transient DOS while parsing BTM ML IE when per STA profile is not included.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware wsa8830 qca6777aq sxr2230p_firmware qca8337 qam8650p qfw7124 qam8775p qca6777aq_firmware qcn6224_firmware wsa8840 wcn6755_firmware qca6595au_firmware wcd9370 ssg2115p qca6584au_firmware snapdragon_8_gen_2_mobile_platform qca6554a_firmware wcd9385_firmware wcn7881_firmware wcn3660b sa9000p_firmware snapdragon_429_mobile_platform_firmware wcn3680b_firmware qca6574au_firmware sa7255p wsa8845h_firmware wcd9375_firmware snapdragon_8_gen_3_mobile_platform qfw7114 qca8081_firmware qca6595au wcn3610_firmware snapdragon_429_mobile_platform wcn7860 qca6564au_firmware sa8620p_firmware qca6584au qcm8550_firmware wcn7881 snapdragon_x72_5g_modem-rf_system sa8775p_firmware wsa8840_firmware qca6698aq sc8380xp_firmware sm8635 wcn7880_firmware sa7775p_firmware wcd9340 qcn6224 wsa8845h wcn6755 wcd9395_firmware snapdragon_x75_5g_modem-rf_system sm8750_firmware snapdragon_ar2_gen_1_platform_firmware sm8750p_firmware sa8255p_firmware qca8081 qca6698aq_firmware sa7775p sxr2250p wcd9385 sa8255p qam8775p_firmware qca6696_firmware qca6797aq ar8035 wcd9375 wcd9390 qcc710_firmware wsa8830_firmware wcn3620_firmware wsa8835_firmware wcn3620 sxr2250p_firmware snapdragon_8_gen_2_mobile_platform_firmware wcn3610 wcn7880 qca6787aq_firmware wcd9380_firmware qca8337_firmware ssg2125p sdm429w qca6554a qca6595 qcm8550 qca6564au wsa8835 qca6574 sxr1230p_firmware sdm429w_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wcd9380 qcn6274 snapdragon_wear_4100\+_platform_firmware snapdragon_x72_5g_modem-rf_system_firmware ssg2125p_firmware snapdragon_wear_4100\+_platform sm8635_firmware qca6574a sxr1230p wcn3980 qfw7114_firmware qcc2076_firmware wsa8845 qcc2073_firmware sa8650p sa9000p qca6574_firmware wcd9340_firmware sxr2230p wsa8845_firmware wcn3660b_firmware sm8750p sc8380xp sa8775p qca6574a_firmware wcn3980_firmware fastconnect_7800 qcn6274_firmware wcn7861_firmware wsa8832_firmware sa8650p_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900 fastconnect_6900_firmware qca6797aq_firmware qca6574au sa7255p_firmware snapdragon_8\+_gen_2_mobile_platform fastconnect_7800_firmware sa8620p wsa8832 sm8550p snapdragon_ar2_gen_1_platform wcn3680b sm8750 qam8650p_firmware qcc710 wcn7860_firmware qca6595_firmware wcn7861 wcd9395 qca6696 qca6787aq wcd9370_firmware sm8550p_firmware wcd9390_firmware snapdragon_8_gen_3_mobile_platform_firmware qcc2076 ssg2115p_firmware qfw7124_firmware qam8255p qcc2073 ar8035_firmware Snapdragon qam8255p_firmware qca8337_firmware wcd9380_firmware sxr2230p_firmware ar8035_firmware qca6777aq_firmware qcn6224_firmware sxr1230p_firmware sdm429w_firmware wcn6755_firmware qca6595au_firmware snapdragon_x72_5g_modem-rf_system_firmware ssg2125p_firmware sm8635_firmware qca6584au_firmware qfw7114_firmware qcc2076_firmware qca6554a_firmware wcd9385_firmware wcn7881_firmware qcc2073_firmware qca6574_firmware wcd9340_firmware wsa8845_firmware wcn3660b_firmware sa9000p_firmware qca6574a_firmware snapdragon_429_mobile_platform_firmware qca6574au_firmware wcn3680b_firmware wcd9375_firmware qca8081_firmware wcn3980_firmware wsa8845h_firmware wcn3610_firmware qca6564au_firmware sa8620p_firmware qcm8550_firmware qcn6274_firmware sa8775p_firmware wcn7861_firmware sa8650p_firmware wsa8832_firmware snapdragon_x75_5g_modem-rf_system_firmware wsa8840_firmware fastconnect_6900_firmware sc8380xp_firmware qca6797aq_firmware wcn7880_firmware sa7775p_firmware sa7255p_firmware fastconnect_7800_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware sm8750_firmware sm8750p_firmware wcd9395_firmware qca6698aq_firmware qam8650p_firmware qam8775p_firmware qca6696_firmware qca6595_firmware wcn7860_firmware wcd9370_firmware sm8550p_firmware qcc710_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wcn3620_firmware wsa8835_firmware ssg2115p_firmware qfw7124_firmware sxr2250p_firmware snapdragon_8_gen_2_mobile_platform_firmware qca6787aq_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.48% / 64.68%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9205, MDM9650, QCA8081, QCS605, SD 427, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sd_427_firmware sd_712 sd_850 sd_855 sd_730_firmware sd_675 sdx20 sd_670_firmware sdm660 sdm630 sd_710_firmware sd_435 mdm9650 sd_636 sd_625 ipq8074_firmware snapdragon_high_med_2016_firmware sd_636_firmware sd_450_firmware sd_845_firmware qca8081 qcs605_firmware sd_675_firmware sd_730 snapdragon_high_med_2016 sd_665 sd_850_firmware sd_625_firmware ipq8074 sd_450 sd_712_firmware sdm630_firmware mdm9205_firmware sd_8cx_firmware sda660_firmware mdm9205 sd_845 sd_427 qcs605 sd_8cx sd_670 sd_435_firmware sd_835_firmware mdm9650_firmware sd_710 sdx20_firmware sd_835 sda660 sxr1130_firmware qca8081_firmware sxr1130 sd_665_firmware sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.30% / 52.63%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SDA660, SDA845, SDM450, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware msm8996au_firmware sdm845 sdm450_firmware mdm9650 msm8940_firmware msm8996au apq8009_firmware msm8917 sdm670 qcs605_firmware mdm9206 qca9379_firmware qca6174a sdm670_firmware sdm636 sda845_firmware qca9377 apq8098 qcn7605 mdm9206_firmware qcs605 mdm9640 msm8937_firmware mdm9650_firmware qca6574au_firmware sda660 apq8009 msm8909_firmware apq8053_firmware sda845 msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware msm8937 mdm9207c_firmware mdm9207c qca6174a_firmware sm8150_firmware msm8909 apq8096au sdm630_firmware sda660_firmware msm8940 apq8053 apq8096au_firmware msm8953_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware apq8017 qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.64% / 69.95%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9150_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdx24 mdm9650 sd_636 msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware qca9379_firmware qca6174a sd_665 sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 mdm9206_firmware qcs605 sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sd_210_firmware sd_600 sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware mdm9150 qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware qcs405_firmware sd_712_firmware sdm630_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.37% / 58.25%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

While Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more than message length which may cause device to shutdown in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware qcm2150_firmware mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8976_firmware msm8996au sm7150 msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware apq8098 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 sm8250_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 sdm710_firmware mdm9150 msm8937 msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware qm215_firmware msm8976 sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.32% / 54.81%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_850 mdm9150_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdx24 mdm9650 sd_636 msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 qca9379_firmware qca6174a sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 mdm9206_firmware qcs605 mdm9640 sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sda660 sd_665_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 qca6574au sd_820_firmware mdm9607 sd_636_firmware mdm9150 qca6174a_firmware sd_730 sd_850_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware qca9379 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.37% / 58.30%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

Buffer over-read can occur while parsing an ogg file with a corrupted comment block. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_600 sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.68%

||

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, MSM8909W, MSM8996AU, QCA9980, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDM439, SDM660, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_712 sd_850 sd_632 sd_855 sd_820a qualcomm_215 qca9980_firmware msm8996au_firmware sd_439 sd_670_firmware sd_425 sd_429 sdm660 sdm439 sd_710_firmware sdx24 sd_636 sd_625 msm8909w_firmware msm8996au qca9980 sd_636_firmware sd_450_firmware sd_845_firmware sd_439_firmware sd_820a_firmware qualcomm_215_firmware sd_429_firmware qcs605_firmware ipq4019_firmware sd_425_firmware sd_850_firmware sdx24_firmware sd_625_firmware sd_450 sdm439_firmware sdm660_firmware sd_712_firmware sd_845 qcs605 ipq4019 sd_670 sd_632_firmware sd_710 ipq8064 msm8909w ipq8064_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 53.96%

||

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.48%

||

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.59%

||

7 Day CHG~0.00%

Published-11 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a camera driver.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 22.44%

||

7 Day CHG~0.00%

Published-13 Jun, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.59%

||

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android All Qualcomm products

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.10% / 28.01%

||

7 Day CHG~0.00%

Published-12 Oct, 2022 | 00:00

Updated-15 May, 2025 | 19:15

Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qcs605 wcn6855_firmware qca6391_firmware sd888_5g_firmware sd850 qca6574_firmware sdx50m_firmware ar8035 qca6430 sa8155 wcn7850_firmware sdx24_firmware wcd9375_firmware sd855_firmware sa8540p_firmware wcn3990 qca6174a_firmware wsa8835_firmware qca6696_firmware qca8337 sa6145p qca6431_firmware wcn6855 qam8295p wsa8830 qca6696 sm8475 sdx65 qsm8350_firmware qca6420 sa6155p wcn3998_firmware sdx55 qca6390_firmware sm7250p ar8035_firmware sd765 sdx55_firmware qca6574a_firmware wcd9385_firmware qca8081_firmware wcn3950_firmware qcs605_firmware sdx24 sdxr2_5g_firmware qca6436_firmware wsa8815_firmware sd678 sdx57m_firmware sa6145p_firmware sa9000p qca6430_firmware qca6595 sd675_firmware wcd9370_firmware aqt1000 qca6391 wcn3991_firmware sa8295p qca6174a sa8295p_firmware wsa8835 sm7250p_firmware wcn6851_firmware sd768g_firmware wcn3980_firmware qca6574a qca6564a sdx65_firmware qca6595au wcn6851 wcn6850_firmware sd865_5g wcd9340_firmware sd865_5g_firmware qca6564au_firmware qca9377_firmware wsa8830_firmware wcd9341 sd845_firmware wcn3991 wcn3998 wcn6856_firmware qca6574au wcn3990_firmware sdx55m wcd9341_firmware qcs603_firmware sd670 qca6420_firmware qca6564au sd_675 sa9000p_firmware wsa8815 sd850_firmware sd_8cx_gen3 wcd9326 wcn6856 qca6564a_firmware wcn7850 sd_8_gen1_5g_firmware qca6426 wcd9380 sa8155p_firmware qsm8350 sd_8cx_firmware qca8337_firmware sd870_firmware wcd9326_firmware sd_8cx_gen3_firmware qca6574 sd_8cx_gen2_firmware sd870 sd765_firmware wcn7851_firmware sdx57m qca6426_firmware sd845 qam8295p_firmware sd_675_firmware sd768g wsa8810 qca6335 wcn6850 sd855 sd_8cx_gen2 qca6310_firmware wcd9380_firmware sd678_firmware sd888_5g sa8155_firmware sd670_firmware qca6335_firmware qca6390 qca6421 sa6155 qca6595au_firmware wsa8810_firmware qca6310 sdx55m_firmware wcd9375 wcd9370 sa8150p_firmware wcn7851 wcd9340 qca6436 qca9377 wcd9385 sa6155p_firmware sd_8cx sa8150p sd765g wcn3950 qca6595_firmware qcs603 sdxr2_5g sa6155_firmware aqt1000_firmware sdx50m qca6431 sd675 wcn3980 qca8081 qca6574au_firmware sa8155p sa8540p qca6421_firmware sd765g_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.24% / 46.76%

||

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:26

Updated-03 Aug, 2024 | 04:49

Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-sm6250p_firmware qcs610 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 qcs605_firmware sd_675_firmware sd632 wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware sa6155_firmware wcn3998_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware sa8155_firmware sd662_firmware qca6430 wcd9340 qualcomm215_firmware sd765g sw5100 qca6436 sd680 wcn6851 sa6155p qcs603_firmware wcn7851_firmware wcn3660_firmware wcd9341 qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware sd450 wcn3991 wcd9380_firmware sdm429w msm8996au_firmware sw5100p qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 sd690_5g_firmware sdx50m_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 sdx55m sm8475_firmware wcn6740_firmware msm8953 sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sd695_firmware sdxr1 apq8096au sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p sd675 sd439 wcn3660 sm8475p_firmware qcm2290 wcn3991_firmware wsa8830 sd678 qcs2290_firmware sd_636 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6426 wcn3990_firmware sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware qca6595au wcn3615 sm7250p_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 wcn7851 qcs6490 sd429 sdxr2_5g sdm630 wcn3988_firmware sa6145p_firmware sd429_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware msm8953_firmware msm8917_firmware wcn3620_firmware qcm6490 sd888_5g_firmware wsa8835_firmware wcn3620 wcn6850_firmware wsa8815_firmware sm7450 apq8017 qca6564a qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a wcn6855_firmware sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sd480_firmware qca6574au sa8155p_firmware sd710 wcd9341_firmware wsa8810 wcn6856 wcn3680b sd835_firmware sd768g wcn6740 qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 53.96%

||

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware sdm670_firmware sm8150_firmware ipq8074 sda845_firmware sdm845 qcs605 sm7150_firmware ipq8074_firmware sm6150_firmware sdm710 sm6150 sm8150 sdm850 sdm710_firmware sxr1130_firmware sm7150 qca8081_firmware sxr1130 sdm670 qca8081 qcs605_firmware sda845 sdm845_firmware Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 31.77%

||

7 Day CHG~0.00%

Published-30 Jul, 2020 | 11:40

Updated-05 Aug, 2024 | 00:12

Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HLOS client as non-trustable in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-kamorta_firmware qcs404 sxr2130_firmware rennell sc7180 rennell_firmware qcs404_firmware sm8250_firmware sdx55 sm7150_firmware sm6150_firmware sm8250 sm6150 sc7180_firmware kamorta sdx55_firmware sm7150 sxr2130 Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.04% / 12.88%

||

7 Day CHG~0.00%

Published-30 Jul, 2020 | 11:40

Updated-05 Aug, 2024 | 00:12

Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is less than expected length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8096, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCM2150, QCN7605, QCS404, QCS405, QCS605, QM215, Rennell, SA415M, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware kamorta_firmware mdm9635m_firmware mdm9640_firmware apq8096_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware qcs404 sdx24_firmware sdm636 sda845_firmware sa415m mdm9635m apq8098 qcn7605 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sa415m_firmware qcs405 sdm710 qm215 sc7180_firmware mdm9607 mdm9625_firmware sdm710_firmware qcn7605_firmware mdm9150 msm8937 msm8996_firmware msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sc7180 qcs405_firmware sdm630_firmware mdm9205_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 saipan_firmware sm6150_firmware apq8096au_firmware msm8917_firmware msm8998 sm8150 sdm850 kamorta msm8996 saipan nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.04% / 12.88%

||

7 Day CHG~0.00%

Published-02 Jun, 2020 | 15:05

Updated-05 Aug, 2024 | 00:05

Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Kamorta, MDM9150, MDM9205, MDM9650, MSM8998, Nicobar, QCS404, QCS405, QCS605, Rennell, SA415M, SA6155P, SC7180, SC8180X, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-sdm850_firmware kamorta_firmware mdm9150_firmware sa6155p_firmware sdm636_firmware sdm845 msm8998_firmware sdm660 sdx24 sdm630 qcs404_firmware sm8250_firmware mdm9650 sc8180x_firmware sa415m_firmware qcs405 sm7150_firmware sdm710 sc7180_firmware sm6150 sdm710_firmware sm7150 sa6155p sdm670 mdm9150 qcs605_firmware sc8180x sxr2130 sdm670_firmware qcs404 sdx24_firmware sm8150_firmware sxr2130_firmware sdm636 qcs405_firmware rennell sa415m sc7180 sdm630_firmware mdm9205_firmware sda660_firmware rennell_firmware mdm9205 qcs605 sdx55 sm6150_firmware sm8250 mdm9650_firmware msm8998 sm8150 sdm850 sda660 kamorta sdx55_firmware sxr1130_firmware nicobar_firmware sxr1130 sdm660_firmware nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.32% / 54.81%

||

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-17 Jun, 2025 | 19:55

Buffer over-read without Checking Size of Input in WLAN Host

Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware qcn9070 ipq4028_firmware qca8337 qfw7124 ar9380 ipq8173_firmware qcf8001 flight_rb5_5g_platform flight_rb5_5g_platform_firmware qcn6224_firmware qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 qca9880_firmware qca9992 immersive_home_318_platform_firmware ipq8078a ipq5028_firmware ipq6000 qcn5152_firmware qca0000_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware wcd9385_firmware immersive_home_216_platform ipq8076a immersive_home_316_platform immersive_home_316_platform_firmware qca8386_firmware qcn6024_firmware qca8084_firmware immersive_home_318_platform ipq8074a qcn5124_firmware qcn9011_firmware qca8082_firmware qcn5164_firmware qcn5122_firmware sdx55_firmware qca8081_firmware qcn6023_firmware qfw7114 qrb5165n ipq5010 ipq8070_firmware snapdragon_x65_5g_modem-rf_system_firmware ipq8065 ipq8078a_firmware qcn9274 ipq8174 qca9990 qrb5165m_firmware ipq5028 qca7500 ipq4029_firmware qcn5052 qca0000 qcf8001_firmware ipq6010 ipq8068 qcn6112_firmware qcn9074 qca8085 sdx65m wcd9340 qcn6132 qcn6224 qcn9013 snapdragon_x75_5g_modem-rf_system qca8081 ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware immersive_home_3210_platform qca8085_firmware qca9888_firmware ipq8068_firmware qcn6122 wcd9385 ipq9008_firmware ipq9570 qcn5154_firmware ar8035 csr8811 qca9898_firmware ipq4019 qcc710_firmware qcn9100_firmware robotics_rb5_platform qca9992_firmware ipq5010_firmware ipq8074a_firmware qca9898 qcn5022_firmware ipq4028 immersive_home_216_platform_firmware qca9985_firmware robotics_rb5_platform_firmware ipq4018_firmware qca8337_firmware wcd9380_firmware qcn9000 ipq8072a qca7500_firmware qca9980_firmware ipq8076a_firmware ar9380_firmware ipq8078 qca8084 ipq8173 ipq9008 qcn9012 qcn5164 immersive_home_326_platform_firmware qcn6122_firmware ipq8065_firmware csr8811_firmware qcn6274 wcd9380 qcn5154 qca8075_firmware ipq4018 ipq4019_firmware qcn5024 qca9889 qcn6132_firmware qca9888 qca9985 qca9994_firmware qcn5052_firmware qcn9012_firmware qcn9274_firmware ipq8070a_firmware qfw7114_firmware wcn3980 ipq6018_firmware ipq8076_firmware qca9886 wcd9340_firmware qcn6112 ipq8076 qca9984 ipq6028 ipq8064 qcn5152 qcn9024 qrb5165m ipq9574_firmware wcn3980_firmware immersive_home_3210_platform_firmware qca6391 ipq8064_firmware fastconnect_7800 qcn9100 qcn6274_firmware snapdragon_x65_5g_modem-rf_system ipq8078_firmware ipq9570_firmware fastconnect_6900 qcn9070_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware ipq8070 ipq6028_firmware ipq8072a_firmware qcn9011 qca9994 qca9889_firmware ipq9574 qca9980 qcn5122 ipq8174_firmware qcn9024_firmware qca9880 fastconnect_7800_firmware immersive_home_326_platform ipq6018 qcn5022 qcn9013_firmware qca9886_firmware qcc710 ipq6010_firmware immersive_home_214_platform qca6391_firmware immersive_home_214_platform_firmware qca4024 sdx55 qca8075 qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9072_firmware ipq6000_firmware qcn9074_firmware qfw7124_firmware ipq4029 ar8035_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.19% / 40.60%

||

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-02 Aug, 2024 | 15:32

Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware qam8255p_firmware wsa8830 qcn9070 sxr2230p_firmware qca8337 qam8650p qfw7124 ipq8173_firmware wcn785x-5 qam8775p qcf8001 qcn6224_firmware qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 wsa8840 immersive_home_318_platform_firmware ipq8078a ipq5028_firmware qca6595au_firmware ipq6000 ssg2115p qcn5152_firmware qca0000_firmware qca6584au_firmware wcn685x-1 qcn9000_firmware snapdragon_8_gen_2_mobile_platform ipq9554 qca6554a_firmware wcd9385_firmware immersive_home_216_platform ipq8076a immersive_home_316_platform immersive_home_316_platform_firmware qca8386_firmware qcn6024_firmware qca8084_firmware immersive_home_318_platform ipq8074a qcn5124_firmware qca8082_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware sdx55_firmware qca6595au qca8081_firmware qcn6023_firmware qfw7114 wsa8845h_firmware ipq5010 qca6564au_firmware qca6584au snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware ipq8078a_firmware qcn9274 ipq8174 ipq5028 wsa8840_firmware qca6698aq qcn5052 qca0000 qcf8001_firmware ipq6010 sc8380xp_firmware qcn6112_firmware qcn9074 qca8085 sdx65m wcd9340 qcn6132 qcn6224 qcn9013 wsa8845h snapdragon_ar2_gen_1_platform_firmware snapdragon_x75_5g_modem-rf_system wcd9395_firmware qca8081 qcf8000 qca6698aq_firmware ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware wcn685x-1_firmware immersive_home_3210_platform qca8085_firmware qam8775p_firmware qca9888_firmware qcn6122 wcd9385 qca6696_firmware ipq9008_firmware ipq9570 qcn5154_firmware qca6797aq ar8035 csr8811 wcd9390 qcc710_firmware qcn9100_firmware wsa8830_firmware ipq5010_firmware ipq8074a_firmware wsa8835_firmware qcn5022_firmware immersive_home_216_platform_firmware snapdragon_8_gen_2_mobile_platform_firmware wcn785x-1 qca8337_firmware wcd9380_firmware ssg2125p qcn9000 ipq8072a qcf8000_firmware qca6554a ipq8076a_firmware qca6595 ipq8078 qca6564au qca8084 ipq8173 qcm8550 ipq9008 qcn9012 qcn5164 immersive_home_326_platform_firmware qcn6122_firmware qca6574 sxr1230p_firmware wsa8835 snapdragon_8\+_gen_2_mobile_platform_firmware csr8811_firmware qcn6274 wcd9380 ipq9554_firmware qcn5154 qca8075_firmware ssg2125p_firmware qca6574a qcn5024 wcn685x-5_firmware qca9889 qcn6132_firmware sxr1230p qca9888 qcn9012_firmware qcn5052_firmware qcn9274_firmware qcc2076_firmware ipq8070a_firmware qfw7114_firmware wsa8845 qcc2073_firmware ipq6018_firmware ipq8076_firmware qca6574_firmware wcd9340_firmware qcn6112 sxr2230p ipq8076 wsa8845_firmware qca6574a_firmware qcn5152 ipq6028 sc8380xp qcn9024 ipq9574_firmware wcn785x-5_firmware immersive_home_3210_platform_firmware qcn9100 qcn6274_firmware snapdragon_x65_5g_modem-rf_system ipq8078_firmware ipq9570_firmware qcn9070_firmware snapdragon_x75_5g_modem-rf_system_firmware wsa8832_firmware wcn685x-5 ipq6028_firmware ipq8072a_firmware qca6797aq_firmware wcn785x-1_firmware qca6574au qca9889_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware snapdragon_8\+_gen_2_mobile_platform wsa8832 ipq5332_firmware ipq5332 sm8550p immersive_home_326_platform snapdragon_ar2_gen_1_platform ipq6018 qcn5022 qcn9013_firmware qam8650p_firmware qcc710 ipq6010_firmware immersive_home_214_platform qca6595_firmware wcd9395 qca6696 immersive_home_214_platform_firmware qca4024 sm8550p_firmware sdx55 qca8075 qcn9022_firmware wcd9390_firmware qcn6024 qcn9022 qcc2076 ipq8070a qcn9072_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware qfw7124_firmware qam8255p qcc2073 ar8035_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.03% / 7.27%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in Audio

Information disclosure in Audio while accessing AVCS services from ADSP payload.

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w_firmware qcs410_firmware sa6150p_firmware sd865_5g snapdragon_429_mobile_platform_firmware qcs610_firmware wcd9335 sxr2130_firmware srv1m qca8081_firmware wcd9370 ar8035_firmware qca6696 wcd9340_firmware snapdragon_888_5g_mobile_platform wcd9341_firmware qca6320 sd888_firmware qcc710_firmware qca6426 wcn6740_firmware fastconnect_6700 qca6564au wcn3610 qcn9074 wsa8815_firmware sa8195p_firmware qca8337_firmware qca8337 qca6426_firmware qca6574au_firmware qam8295p wcd9341 qca6574au snapdragon_855_mobile_platform wcn3950 wsa8810_firmware snapdragon_xr2_5g_platform snapdragon_429_mobile_platform sa9000p_firmware srv1h snapdragon_835_mobile_pc_platform_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_7c\+_gen_3_compute wcn3660b_firmware snapdragon_780g_5g_mobile_platform fastconnect_6800_firmware sa8295p_firmware sd835_firmware video_collaboration_vc1_platform_firmware snapdragon_778g\+_5g_mobile_platform sa8770p snapdragon_780g_5g_mobile_platform_firmware c-v2x_9150 qca6584au qca6320_firmware qcn6274_firmware sd888 qcc710 wcn6740 qca6310_firmware fastconnect_6800 qfw7114_firmware fastconnect_7800_firmware fastconnect_6900 video_collaboration_vc1_platform qfw7114 snapdragon_782g_mobile_platform_firmware wcd9385_firmware snapdragon_x55_5g_modem-rf_system fastconnect_6900_firmware qca6310 qam8255p_firmware wcd9380 sa6145p_firmware qam8255p snapdragon_888_5g_mobile_platform_firmware snapdragon_xr2_5g_platform_firmware sa8150p snapdragon_778g_5g_mobile_platform msm8996au_firmware sa6155p snapdragon_835_mobile_pc_platform qca6564au_firmware wsa8810 qam8650p snapdragon_865\+_5g_mobile_platform sa9000p srv1h_firmware video_collaboration_vc3_platform aqt1000 sm7315_firmware snapdragon_865_5g_mobile_platform_firmware c-v2x_9150_firmware sa6155p_firmware qam8295p_firmware srv1m_firmware sd855 sd835 wcn3990_firmware sm7315 snapdragon_870_5g_mobile_platform_firmware qfw7124_firmware qca6564a_firmware qca6436_firmware qca6698aq_firmware snapdragon_wear_4100\+_platform_firmware wcd9385 mdm9650_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3610_firmware sa8255p snapdragon_855\+\/860_mobile_platform_firmware snapdragon_778g\+_5g_mobile_platform_firmware qca6420 snapdragon_865\+_5g_mobile_platform_firmware qca6430 wcd9370_firmware mdm9650 snapdragon_x55_5g_modem-rf_system_firmware wcn3660b qca6574a sxr2130 wcn3620_firmware sa8195p wcd9340 qamsrv1m snapdragon_820_automotive_platform_firmware snapdragon_auto_5g_modem-rf_gen_2 sm7325p qam8650p_firmware snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware sdm429w qca6584au_firmware sd855_firmware qcn6274 qca6436 qfw7124 sa8775p snapdragon_x75_5g_modem-rf_system wcd9335_firmware qca6391_firmware wcn3980_firmware wsa8835 qca6430_firmware snapdragon_870_5g_mobile_platform sa8775p_firmware snapdragon_782g_mobile_platform qamsrv1h qca6696_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware sa6150p qcs410 sa8155p_firmware qca8081 qca6564a wsa8815 sa8155p wsa8830 qam8775p sa6145p qcn9074_firmware sa8255p_firmware ar8035 qca6574a_firmware qamsrv1m_firmware msm8996au sa8650p_firmware wcn3620 wcd9375_firmware qca6391 qcn6224 snapdragon_778g_5g_mobile_platform_firmware qca6698aq wcn3950_firmware sa8770p_firmware sa8295p fastconnect_6200 fastconnect_7800 sa8145p_firmware sa8650p qam8775p_firmware sd865_5g_firmware sm7325p_firmware wcn3680b snapdragon_888\+_5g_mobile_platform wcd9375 sa8150p_firmware snapdragon_855\+\/860_mobile_platform fastconnect_6700_firmware qamsrv1h_firmware video_collaboration_vc3_platform_firmware sa8145p wcn3990 snapdragon_wear_4100\+_platform snapdragon_888\+_5g_mobile_platform_firmware wsa8835_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn3980 snapdragon_820_automotive_platform fastconnect_6200_firmware wsa8830_firmware wcn3680b_firmware qcn6224_firmware qcs610 Snapdragon qam8255p_firmware qualcomm_video_collaboration_vc1_platform_firmware qca8337_firmware wcd9380_firmware sa6150p_firmware snapdragon_778g_5g_mobile_platform_firmware sa8145p_firmware msm8996au_firmware snapdragon_820_automotive_platform_firmware qcn6224_firmware sdm429w_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6584au_firmware wcn3990_firmware c-v2x_9150_firmware qca6310_firmware qca6430_firmware wcd9335_firmware qfw7114_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware qamsrv1h_firmware wcd9340_firmware sm7325p_firmware qam8295p_firmware mdm9650_firmware snapdragon_xr2_5g_platform_firmware qca6426_firmware wcn3660b_firmware sa9000p_firmware qca6320_firmware sm7315_firmware qca6574au_firmware snapdragon_429_mobile_platform_firmware snapdragon_835_mobile_pc_platform_firmware wcn3680b_firmware wcd9375_firmware qca8081_firmware qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware wcn3610_firmware qca6436_firmware aqt1000_firmware qca6564au_firmware wcn6740_firmware sa6155p_firmware qcn6274_firmware sa8775p_firmware sa8650p_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware srv1h_firmware sa6145p_firmware sa8155p_firmware fastconnect_6700_firmware qca6564a_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware sa8255p_firmware qcs610_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware sd835_firmware qam8650p_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware sxr2130_firmware qca6696_firmware qca6391_firmware snapdragon_855_mobile_platform_firmware wcd9370_firmware sd888_firmware qcc710_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware wsa8815_firmware wsa8835_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware qcn9074_firmware fastconnect_6800_firmware qcs410_firmware sa8295p_firmware qfw7124_firmware ar8035_firmware

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.04% / 12.88%

||

7 Day CHG~0.00%

Published-02 Jun, 2020 | 15:05

Updated-05 Aug, 2024 | 00:05

Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, QCS605, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM670, SDM710, SDM845, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-mdm9640_firmware msm8953 sdm845_firmware sdm429w apq8098_firmware sdm845 sdx20 sdx24 sdm439 mdm9607_firmware mdm9650 sdm429 sdm710 msm8909w_firmware mdm9607 sdm429w_firmware sdm710_firmware msm8917 sdm670 qcs605_firmware mdm9207c_firmware mdm9206 msm8905 mdm9207c sdm670_firmware sdx24_firmware sdm439_firmware sda845_firmware apq8098 sda660_firmware mdm9206_firmware qcs605 msm8953_firmware apq8053 msm8917_firmware sdm429_firmware mdm9650_firmware sdx20_firmware msm8905_firmware sda660 msm8909w apq8053_firmware sda845 mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.04% / 12.88%

||

7 Day CHG~0.00%

Published-02 Jun, 2020 | 15:05

Updated-05 Aug, 2024 | 00:05

Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, QCS605, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM670, SDM710, SDM845, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-mdm9640_firmware msm8953 sdm845_firmware sdm429w apq8098_firmware sdm845 sdx20 sdx24 sdm439 mdm9607_firmware mdm9650 sdm429 sdm710 msm8909w_firmware mdm9607 sdm429w_firmware sdm710_firmware apq8009_firmware msm8909w msm8917 sdm670 qcs605_firmware mdm9207c_firmware mdm9206 msm8905 mdm9207c sdm670_firmware sdx24_firmware sdm439_firmware sda845_firmware apq8098 sda660_firmware mdm9206_firmware qcs605 msm8953_firmware apq8053 msm8917_firmware sdm429_firmware mdm9650_firmware sdx20_firmware msm8905_firmware sda660 apq8009 apq8053_firmware sda845 mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.15% / 35.19%

||

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-02 Aug, 2024 | 15:32

Buffer over-read in WLAN Firmware

Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware sc8180x-ab_firmware qca8337 qfw7124 ipq8173_firmware qca6431_firmware qam8775p qcf8001 qcn5124 qca4024_firmware wsa8840 immersive_home_318_platform_firmware sc8180x\+sdx55 ipq8078a ipq5028_firmware qca6595au_firmware wcn685x-1 wcn3998 qca6554a_firmware sc8180xp-ad ipq8076a qca8386_firmware qcn6024_firmware immersive_home_316_platform_firmware qca8084_firmware qca6574au_firmware qcn5164_firmware wcn3998_firmware qca8081_firmware qca6420 sc8180xp-af ipq8078a_firmware ipq5028 wsa8840_firmware qca6698aq sc8180xp-aa_firmware qca0000 qcf8001_firmware ipq6010 sc8380xp_firmware qca6430 sdx65m wcd9340 qcn6132 qcn9013 qca6436 qcf8000 qca6698aq_firmware wcn685x-1_firmware qca9888_firmware qam8775p_firmware qcn6122 wcd9341 qca6431 qca6696_firmware sc8180xp-ab_firmware ipq9008_firmware qca1062 sc8180x-ab qcn5154_firmware qca6797aq qcc710_firmware sm8250-ac_firmware wsa8830_firmware sd865_5g_firmware qcn5022_firmware immersive_home_216_platform_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p ipq8072a ipq8076a_firmware ipq8078 qca6564au qca8084 ipq8173 qcm8550 ipq9008 qcn5164 qca6574 csr8811_firmware sc8180xp-aa wcd9380 ipq9554_firmware qcn5024 sxr1230p sc8180xp-ad_firmware sc8180x-ac_firmware qca6430_firmware qcn5052_firmware qcn9012_firmware qcn9274_firmware qfw7114_firmware wsa8845 qcc2073_firmware ipq6018_firmware wcd9340_firmware wsa8815 qcn6112 qca6426_firmware sc8380xp ipq6028 sc8180x-ad qcn9024 ipq9574_firmware immersive_home_3210_platform_firmware qca6421_firmware snapdragon_xr2_5g_platform snapdragon_x65_5g_modem-rf_system ipq8078_firmware snapdragon_x75_5g_modem-rf_system_firmware qca6797aq_firmware wcn785x-1_firmware qcn9024_firmware ipq8174_firmware snapdragon_8\+_gen_2_mobile_platform wsa8832 sc8180xp-ac_firmware ipq5332 immersive_home_326_platform ipq6018 qcc710 immersive_home_214_platform qca6595_firmware wcd9395 qca6391_firmware immersive_home_214_platform_firmware qca4024 sm8550p_firmware sdx55 sm8250 ssg2115p_firmware qfw7124_firmware qam8255p ar8035_firmware qcn5024_firmware wcn3991_firmware wsa8830 qcn9070 sxr2230p_firmware qca1062_firmware qam8650p wcn785x-5 qcn6224_firmware qca8082 qcn9072 qca8386 qca6420_firmware qca6390_firmware ipq6000 ssg2115p qcn5152_firmware qca0000_firmware qca6426 qca6584au_firmware qcn9000_firmware snapdragon_8_gen_2_mobile_platform sm8250-ab ipq9554 wcd9385_firmware immersive_home_216_platform immersive_home_316_platform immersive_home_318_platform ipq8074a qcn5124_firmware qca1064 qca8082_firmware snapdragon_x55_5g_modem-rf_system qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wsa8845h_firmware qfw7114 qca6436_firmware ipq5010 qca6564au_firmware qca6584au snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qcn9274 ipq8174 qcn5052 sm8250_firmware qcn6112_firmware sm8250-ac qcn9074 qca6421 qca8085 wsa8810_firmware qcn6224 wsa8845h snapdragon_ar2_gen_1_platform_firmware snapdragon_x75_5g_modem-rf_system wcd9395_firmware qca8081 ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware wcd9385 immersive_home_3210_platform qca8085_firmware sxr2130_firmware ipq9570 sc8180x-ac qca6390 ar8035 csr8811 aqt1000 sc8180x\+sdx55_firmware wcd9390 qcn9100_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wsa8835_firmware snapdragon_8_gen_2_mobile_platform_firmware wcn785x-1 qcn9000 qcf8000_firmware qca6554a sd865_5g qca6595 qcn9012 immersive_home_326_platform_firmware qcn6122_firmware wsa8835 sxr1230p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware qcn6274 qcn5154 qca8075_firmware sc8180xp-ac qca6574a ssg2125p_firmware sxr2130 wcn685x-5_firmware qca9889 sc8180x-af qcn6132_firmware qca9888 qcc2076_firmware ipq8070a_firmware ipq8076_firmware qca6574_firmware sxr2230p ipq8076 wsa8845_firmware snapdragon_xr2_5g_platform_firmware qca6574a_firmware qcn5152 wcn785x-5_firmware snapdragon_x55_5g_modem-rf_system_firmware sm8250-ab_firmware qca6391 aqt1000_firmware qcn9100 qcn6274_firmware wsa8832_firmware ipq9570_firmware qcn9070_firmware wcn685x-5 ipq6028_firmware ipq8072a_firmware sc8180xp-af_firmware qca6574au qca9889_firmware ipq9574 qcn5122 wcd9341_firmware wsa8810 sc8180x-aa_firmware ipq5332_firmware sm8550p snapdragon_ar2_gen_1_platform qcn5022 qcn9013_firmware sc8180x-aa qam8650p_firmware ipq6010_firmware sc8180x-af_firmware qca1064_firmware qca6696 sc8180xp-ab qca8075 qcn9022_firmware wcd9390_firmware qcn6024 qcn9022 qcc2076 ipq8070a sc8180x-ad_firmware qcn9072_firmware ipq6000_firmware qcn9074_firmware qcc2073 Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.19% / 40.60%

||

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN Firmware

Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

Vendor-Qualcomm Technologies, Inc.

Product-sd865_5g qca6595 ipq6028_firmware immersive_home_214_platform qca8081_firmware qcn9001 wcd9340_firmware ipq5028_firmware wcd9395_firmware qcn6024 ar9380 snapdragon_sc8180xp-aa_firmware qcc710_firmware qca6426 fastconnect_6700 snapdragon_768g_5g_mobile_platform_firmware sa4150p qcn5124_firmware wsa8832_firmware qca8337 qca6426_firmware wcd9395 qcn7605 qca6574au_firmware qcn7606_firmware ipq8078a_firmware qam8295p wcd9341 wsa8810_firmware wsa8845h_firmware sa9000p_firmware qca2064_firmware fastconnect_6800_firmware qcs5430 snapdragon_4_gen_2_mobile_platform_firmware qcm5430_firmware sa4155p snapdragon_4_gen_1_mobile_platform_firmware snapdragon_778g\+_5g_mobile_platform sa8770p qcn9000 qca2062_firmware snapdragon_480\+_5g_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware qsm8250_firmware qsm8350_firmware snapdragon_765g_5g_mobile_platform wcd9385_firmware qca6421 ipq8074a_firmware ipq8076a wcd9360 snapdragon_ar2_gen_1_platform_firmware snapdragon_8_gen_1_mobile_platform_firmware immersive_home_3210_platform_firmware sa6155p snapdragon_sc8180x-aa qca6564au_firmware snapdragon_768g_5g_mobile_platform qca8075 qam8650p video_collaboration_vc5_platform_firmware sa9000p sa6155p_firmware snapdragon_870_5g_mobile_platform_firmware qca6436_firmware snapdragon_8\+_gen_1_mobile_platform ipq8070a_firmware qcn5021_firmware qcn9070 snapdragon_8_gen_2_mobile_platform snapdragon_7c\+_gen_3_compute_firmware qca8084 qca6420 wcn3910 csrb31024 snapdragon_x55_5g_modem-rf_system_firmware qcc2076 snapdragon_660_mobile_platform qca6574a wcd9340 qcs8250_firmware qcm2290 snapdragon_auto_5g_modem-rf_gen_2 qcn6122_firmware qcn5154_firmware sm8550p_firmware qcm8550 wcn3988 qcn5122_firmware qcn9024 pmp8074 qca6574 snapdragon_x75_5g_modem-rf_system qca2066_firmware qca8082 qcm2290_firmware sa8155p qca8072_firmware wsa8830 sm8550p qcf8000_firmware sa6145p snapdragon_8\+_gen_1_mobile_platform_firmware qcn6122 sa8255p_firmware qcc2073 qrb5165m_firmware qca9985 ipq8071a qcn6112 wcn3950_firmware qrb5165n snapdragon_8_gen_1_mobile_platform qca1062_firmware fastconnect_6200 sm7325p_firmware wcd9360_firmware snapdragon_sc8280xp-ab_firmware smart_audio_400_platform video_collaboration_vc3_platform_firmware qcn6023_firmware qcn5164_firmware immersive_home_326_platform_firmware snapdragon_750g_5g_mobile_platform qcn9072 qcn6224_firmware qca6431 sd660_firmware qca8082_firmware sxr2130_firmware ar8035_firmware qrb5165m snapdragon_888_5g_mobile_platform sc8380xp qca1064 snapdragon_w5\+_gen_1_wearable_platform_firmware qca4024_firmware qca0000_firmware sd888_firmware qca9992_firmware qca9990 ipq9008_firmware qcn9074 wsa8815_firmware qca8337_firmware ipq8173 sm7250p_firmware wcn3999 ipq6010_firmware wcn3950 snapdragon_x65_5g_modem-rf_system_firmware qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware snapdragon_765g_5g_mobile_platform_firmware ipq5028 qca9986 qcf8001_firmware qcn9070_firmware snapdragon_780g_5g_mobile_platform sa8295p_firmware sa4155p_firmware qca9984 ipq5010_firmware qcn9022_firmware sm7250p csrb31024_firmware ipq6018 sa8155 sd888 snapdragon_4_gen_2_mobile_platform sc8380xp_firmware ipq8065 fastconnect_6800 qcs7230 qcn9001_firmware snapdragon_782g_mobile_platform_firmware fastconnect_6900_firmware snapdragon_xr2_5g_platform_firmware snapdragon_sc8280xp-ab qca8075_firmware qcf8000 snapdragon_865\+_5g_mobile_platform qca2065_firmware snapdragon_sc8180x-ad_firmware sdx65m_firmware video_collaboration_vc3_platform snapdragon_sc8180xp-ad_firmware snapdragon_865_5g_mobile_platform_firmware qca9980_firmware qca9985_firmware qca6431_firmware qca6698aq_firmware qcs2290 qcn7606 qcs2290_firmware wcn3999_firmware qca8084_firmware qcn7605_firmware sa8255p qcs7230_firmware wcd9390_firmware immersive_home_318_platform_firmware qcn5024 snapdragon_690_5g_mobile_platform qca6430 snapdragon_auto_5g_modem-rf ssg2125p csra6640_firmware immersive_home_326_platform qam8650p_firmware qcn9013_firmware video_collaboration_vc5_platform qca2062 qca6420_firmware qcs6490_firmware snapdragon_x65_5g_modem-rf_system ipq8076_firmware wcd9335_firmware wcn3980_firmware qrb5165n_firmware qca6436 snapdragon_sc8180x-aa_firmware wsa8835 wsa8840_firmware qca6391_firmware ipq8068 qcs4290_firmware snapdragon_865_5g_mobile_platform csra6620 qca8081 sd660 wsa8815 qam8775p qca9377 qcm4290_firmware qca9888_firmware qca9889 qca1062 qcn5024_firmware qcn9002_firmware ipq5010 qcn9274_firmware smart_audio_400_platform_firmware qcs5430_firmware snapdragon_778g_5g_mobile_platform_firmware snapdragon_480_5g_mobile_platform csra6620_firmware qcs8550 ipq8068_firmware qam8775p_firmware sd865_5g_firmware pmp8074_firmware wcd9375 qca9889_firmware sa8145p immersive_home_316_platform snapdragon_888\+_5g_mobile_platform_firmware qca2066 csr8811 qcm8550_firmware sa6150p_firmware sw5100p ipq9574 qcn9000_firmware qcn6102_firmware qcn9022 wcd9335 wcd9370 qca8072 qca6696 wcd9341_firmware qcn9003_firmware qcc2073_firmware ipq8076 wcn6740_firmware qca1064_firmware ipq6018_firmware qca9984_firmware qcn6023 immersive_home_216_platform qca9994_firmware ipq6000 snapdragon_auto_4g_modem ipq8078a qca6574au wcd9390 csra6640 qcn9100_firmware qcn5122 qca6554a qcn6024_firmware qca9886_firmware qcm5430 snapdragon_695_5g_mobile_platform ssg2115p qcc710 qcn6132_firmware qcn5054 315_5g_iot_modem_firmware fastconnect_6900 ipq5332_firmware qcn5052 qca9980 qfw7114 315_5g_iot_modem ipq9574_firmware snapdragon_x55_5g_modem-rf_system qam8255p_firmware ipq8064 sa8155_firmware qcn5164 snapdragon_888_5g_mobile_platform_firmware qcs4490 snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 qcn6100_firmware qca6421_firmware csr8811_firmware snapdragon_sc8180xp-aa wsa8810 qcn5021 qca8085 qsm8250 snapdragon_8\+_gen_2_mobile_platform qcn6100 qca6595au sm7315_firmware wsa8840 qcs8550_firmware qca9986_firmware qfw7124_firmware qcn9012 snapdragon_sc8180x-ad qcs4490_firmware qcf8001 wcn3910_firmware sdx65m wcd9370_firmware snapdragon_750g_5g_mobile_platform_firmware ipq9570 sa8195p qcm6490 immersive_home_316_platform_firmware immersive_home_3210_platform qcn9274 ipq8076a_firmware sa8775p ipq9570_firmware sxr2230p_firmware ar9380_firmware qca6430_firmware snapdragon_870_5g_mobile_platform qcn9011 sa8775p_firmware qcn9024_firmware wsa8845h sa6150p sa8155p_firmware snapdragon_sc8180x-ac qcn9074_firmware ipq8174 sc8180x\+sdx55_firmware snapdragon_765_5g_mobile_platform flight_rb5_5g_platform_firmware ipq8174_firmware ar8035 ipq8072a sa6155 qca2065 robotics_rb5_platform qcn6224 sc8180x\+sdx55 qca6698aq ssg2125p_firmware sa8145p_firmware snapdragon_888\+_5g_mobile_platform sa8150p_firmware snapdragon_w5\+_gen_1_wearable_platform fastconnect_6700_firmware wcn3990 qcn9002 ipq8078 qcs6490 qcs8250 ipq9554_firmware fastconnect_6200_firmware ar8031_firmware snapdragon_sc8180xp-ac wsa8830_firmware qca6678aq_firmware qca8386_firmware wsa8845_firmware wsa8832 snapdragon_auto_4g_modem_firmware qcc2076_firmware qca6678aq qcn5022_firmware qca9992 sa4150p_firmware ipq9008 ipq9554 qca6564au immersive_home_214_platform_firmware sa8195p_firmware qcm4290 qcn5054_firmware qca9888 ipq5332 qcn9013 ar8031 sg8275p_firmware qca9377_firmware qcm6490_firmware ipq8072a_firmware qcm4490_firmware flight_rb5_5g_platform snapdragon_xr2_5g_platform qcn6112_firmware snapdragon_7c\+_gen_3_compute snapdragon_xr2\+_gen_1_platform_firmware qca8085_firmware qca9886 qcn6132 qcn6102 snapdragon_780g_5g_mobile_platform_firmware qca6584au qcn6274_firmware qcn9011_firmware sw5100_firmware snapdragon_765_5g_mobile_platform_firmware wcn6740 qfw7114_firmware qca4024 qca6595_firmware fastconnect_7800_firmware immersive_home_216_platform_firmware ipq8070a wcd9380 sa6145p_firmware qam8255p sa6155_firmware sxr2230p qca9990_firmware snapdragon_4_gen_1_mobile_platform sa8150p qcn9003 snapdragon_778g_5g_mobile_platform qcn5052_firmware snapdragon_auto_5g_modem-rf_firmware qca2064 sxr1230p ipq6010 sw5100 aqt1000 qam8295p_firmware wcn3990_firmware sm7315 wcd9385 qca9994 qsm8350 qcs4290 sxr1230p_firmware snapdragon_778g\+_5g_mobile_platform_firmware snapdragon_865\+_5g_mobile_platform_firmware sg8275p sdx55_firmware ipq8071a_firmware qca6554a_firmware snapdragon_sc8180x-ac_firmware sxr2130 ipq6028 qcm4490 qcn9100 snapdragon_xr2\+_gen_1_platform sm7325p aqt1000_firmware qca6584au_firmware qcn5152_firmware qcn6274 snapdragon_480_5g_mobile_platform_firmware qfw7124 qca6595au_firmware qca0000 sw5100p_firmware snapdragon_sc8180xp-ac_firmware snapdragon_ar2_gen_1_platform snapdragon_782g_mobile_platform qca6696_firmware wcd9380_firmware qca6574_firmware sd_8_gen1_5g qcn5124 ipq8064_firmware qca6797aq qcn5152 ipq8065_firmware qca6574a_firmware sdx55 qcn9072_firmware snapdragon_480\+_5g_mobile_platform ipq8074a immersive_home_318_platform sd_8_gen1_5g_firmware wcd9375_firmware qca8386 qca6391 snapdragon_sc8180xp-ad ipq8173_firmware qcn9012_firmware sa8770p_firmware sa8295p snapdragon_8_gen_2_mobile_platform_firmware robotics_rb5_platform_firmware ipq6000_firmware fastconnect_7800 ipq8078_firmware wcn3988_firmware qcn5154 wsa8835_firmware ssg2115p_firmware qcn5022 snapdragon_660_mobile_platform_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn3980 snapdragon_690_5g_mobile_platform_firmware Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.03% / 8.50%

||

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-02 Aug, 2024 | 15:32

Buffer Over-read in Core

Transient DOS in Core when DDR memory check is called while DDR is not initialized.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_8_gen_1_mobile_platform wsa8830 qca8337_firmware wcd9380_firmware qca8337 qfw7124 sg8275p_firmware qcm8550 ar8035_firmware qcn6224_firmware wsa8840 wsa8835 wcn3950_firmware snapdragon_8\+_gen_2_mobile_platform_firmware qcn6274 wcd9380 fastconnect_6700 snapdragon_x70_modem-rf_system wcd9370 snapdragon_4_gen_2_mobile_platform_firmware qca6584au_firmware sg8275p snapdragon_8_gen_2_mobile_platform qfw7114_firmware wcd9385_firmware wsa8845 wcn3950 qcn6024_firmware wcd9340_firmware wsa8815 wsa8845_firmware snapdragon_4_gen_2_mobile_platform qcn9024 wsa8845h_firmware qca8081_firmware snapdragon_8_gen_3_mobile_platform qfw7114 fastconnect_7800 qca6584au snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qcm4490_firmware qcn6274_firmware qcs4490_firmware snapdragon_x70_modem-rf_system_firmware snapdragon_x65_5g_modem-rf_system wsa8840_firmware qca6698aq wsa8832_firmware fastconnect_6900 snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware qcs8550_firmware wcn3988_firmware snapdragon_8\+_gen_1_mobile_platform fastconnect_6700_firmware wcd9340 qcn9024_firmware wsa8810_firmware qcn6224 fastconnect_7800_firmware snapdragon_8\+_gen_2_mobile_platform wsa8810 wsa8845h wsa8832 wcd9395_firmware snapdragon_x75_5g_modem-rf_system qca8081 sm8550p snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qcm4490 snapdragon_auto_5g_modem-rf_gen_2 snapdragon_auto_5g_modem-rf_gen_2_firmware wcd9385 qcc710 qcs4490 wcd9395 qcs8550 ar8035 wcd9370_firmware sm8550p_firmware wcd9390 qcc710_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware qcn6024 wcn3988 wsa8815_firmware wsa8835_firmware snapdragon_8\+_gen_1_mobile_platform_firmware qfw7124_firmware snapdragon_8_gen_2_mobile_platform_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.07% / 21.68%

||

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-02 Aug, 2024 | 15:32

Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.

Vendor-Qualcomm Technologies, Inc.

Product-qam8255p_firmware qca2066 sa6150p_firmware ipq4028_firmware sc8180x-ab_firmware qca8337 ar9380 ipq8173_firmware qca6431_firmware wcd9360_firmware qcn5124 qca4024_firmware wcn3950_firmware snapdragon_8_gen_1 sc8180x\+sdx55 ipq8078a ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 qca2062 snapdragon_x55_5g snapdragon_xr2\+_gen_1 sc8180xp-ad qca6554a_firmware qam8295p wcn3950 qcn6024_firmware ipq8076a sd_8_gen1_5g_firmware qsm8350_firmware qsm8350 snapdragon_x65_5g_firmware sm7315_firmware snapdragon_778g\+_5g qca6428 snapdragon_x55_5g_firmware qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware sa6155_firmware qca6420 wcd9360 snapdragon_xr2_5g qca6438_firmware qca9986 snapdragon_888_5g ipq8070_firmware sc8180xp-af ipq8065 ipq8078a_firmware qca6678aq_firmware qrb5165m_firmware ipq5028 ipq4029_firmware sc8180xp-aa_firmware qca6698aq sa8155_firmware ipq6010 ipq8068 qca6430 snapdragon_870_5g snapdragon_778g\+_5g_firmware wcd9340 qcn6132 qca6436 sa6155p qca6698aq_firmware snapdragon_865\+_5g_firmware qca9888_firmware qcn6122 wcd9341 sa8255p ipq8068_firmware qca6696_firmware qca2066_firmware qca6431 sc8180xp-ab_firmware qca1062 sc8180x-ab qcn5154_firmware qca6797aq sa8150p snapdragon_auto_4g_firmware wsa8830_firmware qca9992_firmware sd865_5g_firmware snapdragon_778g_5g qca6438 sa8195p_firmware fastconnect_6800_firmware qcn5022_firmware qcn7606_firmware snapdragon_865_5g_firmware qca9898 sa8295p_firmware ipq4028 qca6428_firmware qca9985_firmware immersive_home_216_firmware ipq4018_firmware qca8337_firmware ssg2125p wcd9380_firmware ipq8072a qca9980_firmware immersive_home_214_firmware ipq8076a_firmware ipq8078 qca6564au ipq8173 snapdragon_8_gen_1_firmware 315_5g qcn5164 snapdragon_ar2_gen_1 qca6574 csr8811_firmware wcd9380 sc8180xp-aa fastconnect_6700 qcn5054_firmware qcn5024 snapdragon_auto_5g sxr1230p sc8180xp-ad_firmware qca9985 qcn9012_firmware qca8072_firmware sc8180x-ac_firmware qca6430_firmware qcn5052_firmware wcn3980 qca6335_firmware ipq6018_firmware wcd9340_firmware wsa8815 pmp8074_firmware snapdragon_xr2\+_gen_1_firmware qca9986_firmware qcs8250 qca6426_firmware qca9984 ipq6028 ipq8064 sc8180x-ad pmp8074 qcn9024 wcn3980_firmware snapdragon_888_5g_firmware ipq8064_firmware sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware qcs4490_firmware qca6678aq ipq8078_firmware fastconnect_6900 qcn5054 fastconnect_6900_firmware ipq8070 immersive_home_318 qca9994 qca6797aq_firmware qca9980 qcn9024_firmware ipq8174_firmware snapdragon_8\+_gen_1_firmware wsa8832 sc8180xp-ac_firmware qcn7605_firmware qsm8250 sa6145p ipq6018 qca9886_firmware qcs4490 qca6595_firmware sa8145p sc8280xp-bb qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware qca2064 sdx55 sd888_firmware qcn5021_firmware sa8155p ssg2115p_firmware qam8255p ar8035_firmware qsm8250_firmware qcn7606 qcn5024_firmware wsa8830 qcn9070 sxr2230p_firmware sa8145p_firmware snapdragon_x65_5g qca1062_firmware immersive_home_318_firmware csrb31024 snapdragon_7c\+_gen_3_firmware qcn9072 sc8280xp-bb_firmware qca9992 qca6420_firmware ipq8069_firmware qca2064_firmware wcd9370 immersive_home_216 ssg2115p qcn5152_firmware qca6426 sc8280xp-ab qca6584au_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware wcd9385_firmware qcn7605 snapdragon_782g_firmware fastconnect_6200 snapdragon_780g_5g_firmware ipq8074a qca2065 qcn5124_firmware qam8295p_firmware qca1064 qcn9011_firmware flight_rb5_5g_firmware sa8155 qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware qca6436_firmware qrb5165n snapdragon_888\+_5g ipq5010 immersive_home_214 qca6564au_firmware qca6584au sa6155p_firmware qca6310 ipq8174 qca9990 qcs6490 qcn5052 qcs8550_firmware snapdragon_778g_5g_firmware qcn9074 sa6145p_firmware qca6421 fastconnect_6700_firmware sa8195p wsa8810_firmware robotics_rb5 sa8255p_firmware snapdragon_780g_5g qca8081 qcm4490 qcn6023 ipq8071a ipq8071a_firmware wcd9385 sxr2130_firmware snapdragon_auto_4g qcs6490_firmware qca2065_firmware immersive_home_316_firmware sc8180x-ac snapdragon_xr2_5g_firmware qca9898_firmware wcd9375 ar8035 aqt1000 csr8811 sc8180x\+sdx55_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware qcm6490 wsa8835_firmware sa4150p qca8072 snapdragon_865_5g qcn9000 qca6554a sd865_5g fastconnect_6800 qca6595 ar9380_firmware qcn9012 sd888 qcn6122_firmware ipq8065_firmware sxr1230p_firmware snapdragon_auto_5g_firmware wsa8835 sd_8_gen1_5g snapdragon_7c\+_gen_3 snapdragon_865\+_5g qcn5154 qca8075_firmware sc8180xp-ac sxr2130 ssg2125p_firmware ipq4018 qca6574a qca9889 sc8180x-af sm7325p qcn6132_firmware qca9888 qca6310_firmware ipq8074 qca9994_firmware snapdragon_8\+_gen_1 ipq8070a_firmware ipq8076_firmware qca6574_firmware qca9886 snapdragon_888\+_5g_firmware sm7325p_firmware sxr2230p ipq8076 snapdragon_782g 315_5g_firmware qca6574a_firmware fastconnect_6200_firmware ipq8069 qcn5021 qcn5152 qrb5165m sm7315 qca6391 sc8280xp-ab_firmware fastconnect_7800 aqt1000_firmware qcn9100 qcm4490_firmware snapdragon_ar2_gen_1_firmware csrb31024_firmware qcm6490_firmware wsa8832_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn9011 sc8180xp-af_firmware ipq8074_firmware immersive_home_316 qca9889_firmware qca6574au sa8155p_firmware qcn5122 qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware wsa8810 sc8180x-aa_firmware robotics_rb5_firmware qcn5022 sc8180x-aa ipq6010_firmware sc8180x-af_firmware qca1064_firmware wcn6740 qca6696 qcs8550 sc8180xp-ab sa6150p qca8075 qcn9022_firmware snapdragon_870_5g_firmware qcn6024 qcn9022 qca9990_firmware flight_rb5_5g ipq8070a sc8180x-ad_firmware qcn9072_firmware qcn9074_firmware ipq4029 Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.04% / 12.88%

||

7 Day CHG~0.00%

Published-02 Jun, 2020 | 15:05

Updated-05 Aug, 2024 | 00:05

When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to a value that does not resolve to a valid XFRM mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QCA4531, QCN7605, QCS605, QM215, SA415M, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qca4531_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sxr2130 qcs605_firmware sc8180x ipq4019_firmware mdm9206 sdx24_firmware ipq8074 sdm636 sda845_firmware sa415m qca4531 apq8098 qcn7605 mdm9206_firmware qcs605 sdm429_firmware mdm9650_firmware msm8905_firmware sda660 sdx55_firmware msm8909w apq8009 apq8053_firmware sda845 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware sa415m_firmware ipq8074_firmware qm215 mdm9607 qcn7605_firmware mdm9207c_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware ipq4019 sdx55 msm8953_firmware apq8053 sm6150_firmware apq8096au_firmware sm8250 msm8917_firmware sm8150 sdx20_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-5.1||MEDIUM

EPSS-0.03% / 8.22%

||

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-10 Jan, 2025 | 17:47

Buffer Over-read in DSP Services

Information Disclosure while processing IOCTL request in FastRPC.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.88%

||

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Possible out of bound memory access while playing a crafted clip in media player in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in SM8150

Vendor-Qualcomm Technologies, Inc.

Product-sm8150 sm8150_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.15% / 35.19%

||

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-02 Aug, 2024 | 15:32

Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while processing a FTMR frame.

Vendor-Qualcomm Technologies, Inc.

Product-qcn5024_firmware qam8255p_firmware snapdragon_8_gen_1_mobile_platform wsa8830 qcn9070 sxr2230p_firmware qca8337 qam8650p qfw7124 sg8275p_firmware ipq8173_firmware qam8775p qcf8001 qcn6224_firmware qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 wsa8840 immersive_home_318_platform_firmware ipq8078a ipq5028_firmware qca6595au_firmware ipq6000 ssg2115p qcn5152_firmware qca0000_firmware qca6584au_firmware qcn9000_firmware snapdragon_8_gen_2_mobile_platform ipq9554 qca6554a_firmware wcd9385_firmware immersive_home_216_platform ipq8076a immersive_home_316_platform immersive_home_316_platform_firmware qca8386_firmware qcn6024_firmware sd_8_gen1_5g_firmware qca8084_firmware immersive_home_318_platform ipq8074a qcn5124_firmware qca8082_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware sdx55_firmware qca6595au qca8081_firmware qcn6023_firmware qfw7114 wsa8845h_firmware qcn9002 ipq5010 qca6564au_firmware qca6584au snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware ipq8078a_firmware qcn9274 ipq8174 qcn9001 ipq5028 wsa8840_firmware qca6698aq qcn5052 qca0000 qcf8001_firmware ipq6010 qcs8550_firmware sc8380xp_firmware qcn6112_firmware qcn9074 qca8085 sdx65m wcd9340 qcn6132 qcn6224 qcn9013 wsa8845h snapdragon_ar2_gen_1_platform_firmware snapdragon_x75_5g_modem-rf_system wcd9395_firmware qca8081 qcf8000 qca6698aq_firmware ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware immersive_home_3210_platform qca8085_firmware qam8775p_firmware qca9888_firmware qcn6122 wcd9385 qca6696_firmware ipq9008_firmware ipq9570 qcn5154_firmware qca6797aq ar8035 csr8811 wcd9390 qcc710_firmware qcn9100_firmware wsa8830_firmware ipq5010_firmware ipq8074a_firmware wsa8835_firmware qcn5022_firmware immersive_home_216_platform_firmware snapdragon_8_gen_2_mobile_platform_firmware qca8072 qca8337_firmware wcd9380_firmware ssg2125p qcn9000 ipq8072a qcf8000_firmware qca6554a ipq8076a_firmware qca6595 ipq8078 qca6564au qca8084 ipq8173 qcm8550 qcn9001_firmware ipq9008 qcn9012 qcn5164 immersive_home_326_platform_firmware qcn6122_firmware qca6574 sxr1230p_firmware wsa8835 snapdragon_8\+_gen_2_mobile_platform_firmware csr8811_firmware sd_8_gen1_5g qcn6274 wcd9380 ipq9554_firmware qcn5054_firmware qcn5154 qca8075_firmware ssg2125p_firmware qca6574a qcn5024 qca9889 qcn6132_firmware qcn9003_firmware sxr1230p qca9888 qca8072_firmware sg8275p qcn9012_firmware qcn5052_firmware qcn9274_firmware qcc2076_firmware ipq8070a_firmware qcn9003 qfw7114_firmware wsa8845 qcc2073_firmware ipq6018_firmware ipq8076_firmware qca6574_firmware wcd9340_firmware qcn6112 sxr2230p ipq8076 wsa8845_firmware qca6574a_firmware qcn5152 ipq6028 sc8380xp qcn9024 ipq9574_firmware immersive_home_3210_platform_firmware fastconnect_7800 qcn9100 qcn6274_firmware snapdragon_x65_5g_modem-rf_system ipq8078_firmware ipq9570_firmware fastconnect_6900 qcn5054 qcn9070_firmware fastconnect_6900_firmware snapdragon_x75_5g_modem-rf_system_firmware wsa8832_firmware ipq6028_firmware ipq8072a_firmware qca6797aq_firmware qca6574au qca9889_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware fastconnect_7800_firmware snapdragon_8\+_gen_2_mobile_platform wsa8832 ipq5332_firmware ipq5332 sm8550p snapdragon_8_gen_1_mobile_platform_firmware immersive_home_326_platform snapdragon_ar2_gen_1_platform ipq6018 qcn5022 qcn9013_firmware qam8650p_firmware qcc710 ipq6010_firmware immersive_home_214_platform qca6595_firmware wcd9395 qca6696 qcs8550 immersive_home_214_platform_firmware qca4024 sm8550p_firmware sdx55 qca8075 qcn9022_firmware wcd9390_firmware qcn6024 qcn9022 qcc2076 ipq8070a qcn9002_firmware qcn9072_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware qfw7124_firmware qam8255p qcc2073 ar8035_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.19% / 40.60%

||

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing no-inherit IES.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware sd865_5g ipq9574 qcn9000_firmware qcn6102_firmware qca6595 qcn9022 ipq6028_firmware immersive_home_214_platform qca8081_firmware wcd9370 qcn9001 qca8072 qca6696 wcd9340_firmware ipq5028_firmware wcd9395_firmware qcn6024 qcn9003_firmware qca6390 ar9380 qcc2073_firmware qcc710_firmware ipq8076 qca6426 wcn6740_firmware ipq6018_firmware qca9984_firmware qcn6023 qcn5124_firmware wsa8832_firmware immersive_home_216_platform qca8337 qca9994_firmware qca6426_firmware wcd9395 ipq6000 qca6574au_firmware ipq8078a ipq8078a_firmware wcn785x-5 qam8295p qca6574au wcd9390 wsa8810_firmware wsa8845h_firmware qcn9100_firmware qca2064_firmware qcn5122 qca6554a qcn6024_firmware qca9886_firmware sm8350 qcn9000 ssg2115p qcc710 qcn6132_firmware qca2062_firmware qsm8350_firmware qcn5054 sm8450_firmware ipq5332_firmware qcn5052 qca9980 qfw7114 wcd9385_firmware snapdragon_x55_5g_modem-rf_system ipq9574_firmware qam8255p_firmware ipq8064 ipq8074a_firmware ipq8076a qcn5164 snapdragon_ar2_gen_1_platform_firmware qcs4490 immersive_home_3210_platform_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 qcn6100_firmware qca6564au_firmware csr8811_firmware wsa8810 qca8075 qam8650p qca8085 snapdragon_8\+_gen_2_mobile_platform sm8350-ac qcn6100 qca6595au wsa8840 qcs8550_firmware qca6390_firmware qca9986_firmware qfw7124_firmware qca6436_firmware qcn9012 ipq8070a_firmware qcn9070 qcs4490_firmware snapdragon_8_gen_2_mobile_platform qcf8001 qca8084 sm8250-ac_firmware sdx65m wcd9370_firmware snapdragon_x55_5g_modem-rf_system_firmware qcc2076 qca6574a ipq9570 wcd9340 qcm6490 immersive_home_316_platform_firmware qcn6122_firmware qcn5154_firmware sm8550p_firmware immersive_home_3210_platform qcm8550 qcn5122_firmware qcn9274 qcn9024 ipq8076a_firmware qca6574 snapdragon_x75_5g_modem-rf_system ipq9570_firmware sxr2230p_firmware ar9380_firmware qca2066_firmware qcn9024_firmware wsa8845h qca8082 qca8072_firmware wsa8830 sm8550p qcf8000_firmware qcn9074_firmware ipq8174 qcn6122 sa8255p_firmware ipq8174_firmware wcn785x-1_firmware qcc2073 ar8035 ipq8072a qca2065 qca9985 qcn6224 ipq8071a sc8280xp-ab sm8475_firmware qcn6112 qca6698aq wcn3950_firmware ssg2125p_firmware wcn685x-1 video_collaboration_vc3_platform_firmware qcn6023_firmware qcn5164_firmware qcn9002 ipq8078 immersive_home_326_platform_firmware qcs6490 ipq9554_firmware sc8280xp-bb_firmware qcn9072 wsa8830_firmware qcn6224_firmware qca6678aq_firmware qca8386_firmware wsa8845_firmware wsa8832 qca8082_firmware qcc2076_firmware sxr2130_firmware qca6678aq ar8035_firmware qcn5022_firmware sm8475 qca9992 sc8380xp sm8250-ab_firmware qca4024_firmware qca0000_firmware sd888_firmware ipq9008 ipq9554 qca6564au qca9992_firmware qca9990 ipq9008_firmware qcn9074 immersive_home_214_platform_firmware wsa8815_firmware sm8250-ab qca8337_firmware qcn5054_firmware qca9888 ipq5332 qcn9013 sg8275p_firmware ipq8173 qcm6490_firmware ipq8072a_firmware sm8350-ac_firmware ipq6010_firmware qcm4490_firmware wcn785x-5_firmware wcn3950 snapdragon_xr2_5g_platform qcn6112_firmware snapdragon_x65_5g_modem-rf_system_firmware qca6797aq_firmware sm7350-ab_firmware ipq5028 qca9986 qcf8001_firmware qcn9070_firmware qca8085_firmware sa8295p_firmware qca9984 ipq5010_firmware qcn9022_firmware qca9886 qcn6132 ipq6018 qcn6102 qca6584au sd888 qcn6274_firmware wcn685x-5 wcn6740 sc8380xp_firmware ipq8065 qfw7114_firmware qca4024 sc8280xp-ab_firmware qca6595_firmware sm8250-ac sm8250_firmware qcn9001_firmware immersive_home_216_platform_firmware ipq8070a wcd9380 qam8255p sxr2230p qca9990_firmware snapdragon_xr2_5g_platform_firmware qcn9003 qca8075_firmware qcf8000 qcn5052_firmware sm7350-ab snapdragon_auto_5g_modem-rf_firmware qca2064 sm8350_firmware sxr1230p qca2065_firmware ipq6010 sdx65m_firmware video_collaboration_vc3_platform qca9980_firmware qca9985_firmware qam8295p_firmware qca6698aq_firmware wcd9385 qca9994 qsm8350 sc8280xp-bb qca8084_firmware sa8255p sxr1230p_firmware wcd9390_firmware immersive_home_318_platform_firmware wcn6750 qcn5024 sg8275p wcn6750_firmware sdx55_firmware ipq8071a_firmware snapdragon_auto_5g_modem-rf ssg2125p qca6554a_firmware sxr2130 ipq6028 qcm4490 qcn9100 immersive_home_326_platform qam8650p_firmware qcn9013_firmware qca2062 qcs6490_firmware sm8450 snapdragon_x65_5g_modem-rf_system ipq8076_firmware qca6584au_firmware qcn5152_firmware qcn6274 qca6436 qfw7124 wsa8835 wsa8840_firmware qca6391_firmware qca6595au_firmware qca0000 sm8250 snapdragon_ar2_gen_1_platform ipq8068 qca6696_firmware wcd9380_firmware qca6574_firmware qca8081 wsa8815 sd_8_gen1_5g qcn5124 qam8775p ipq8064_firmware qca6797aq qcn5152 ipq8065_firmware qca6574a_firmware sdx55 qcn9072_firmware qca9888_firmware ipq8074a immersive_home_318_platform qca9889 qcn5024_firmware sd_8_gen1_5g_firmware qcn9002_firmware wcd9375_firmware qca8386 qca6391 ipq5010 qcn9274_firmware wcn785x-1 ipq8173_firmware qcn9012_firmware snapdragon_8_gen_2_mobile_platform_firmware sa8295p qcs8550 ipq8068_firmware ipq6000_firmware qam8775p_firmware sd865_5g_firmware wcd9375 ipq8078_firmware wcn685x-5_firmware qca9889_firmware qcn5154 immersive_home_316_platform wsa8835_firmware qca2066 ssg2115p_firmware csr8811 qcn5022 snapdragon_x75_5g_modem-rf_system_firmware wcn685x-1_firmware Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read