ByteOS

Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

Product

Versions

Affected

APQ8017, APQ8053, AQT1000, MSM8917, MSM8953, PM215, PM3003A, PM4125, PM439, PM456, PM6125, PM6150, PM6150A, PM6150L, PM6250, PM6350, PM660, PM660A, PM660L, PM7150A, PM7150L, PM7250, PM7250B, PM7350C, PM8004, PM8008, PM8009, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350BHS, PM8350C, PM855, PM855B, PM855L, PM855P, PM8937, PM8953, PMI632, PMI8937, PMI8952, PMK7350, PMK8002, PMK8003, PMK8350, PMR525, PMR735A, PMR735B, PMX50, PMX55, QAT3514, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA6390, QCA6391, QCA6420, QCA6430, QDM2307, QDM2308, QDM2310, QDM3301, QDM3302, QDM4643, QDM4650, QDM5579, QDM5620, QDM5621, QDM5650, QDM5652, QDM5670, QDM5671, QDM5677, QDM5679, QET4100, QET4101, QET5100, QET5100M, QET6100, QET6110, QFE2101, QFE2550, QFE4301, QFE4302, QFE4303, QFE4305, QFE4308, QFE4309, QFE4320, QFE4373FC, QFS2530, QFS2580, QFS2608, QFS2630, QLN4642, QLN4650, QLN5020, QLN5030, QLN5040, QPA2625, Q ...[truncated*]

Problem Types

Type	CWE ID	Description
text	N/A	Use of Uninitialized Variable in DIAG

Type: text

CWE ID: N/A

Description: Use of Uninitialized Variable in DIAG

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:09 Jun, 2021 | 05:15

Updated At:21 Jun, 2021 | 14:01

An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 8.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

>>apq8017_firmware>>-

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

>>apq8017>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

>>apq8053_firmware>>-

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

>>apq8053>>-

cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*

>>aqt1000_firmware>>-

cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

>>aqt1000>>-

cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*

>>msm8917_firmware>>-

cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*

>>msm8917>>-

cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*

>>msm8953_firmware>>-

cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*

>>msm8953>>-

cpe:2.3:o:qualcomm:pm215_firmware:-:*:*:*:*:*:*:*

>>pm215_firmware>>-

cpe:2.3:h:qualcomm:pm215:-:*:*:*:*:*:*:*

>>pm215>>-

cpe:2.3:o:qualcomm:pm3003a_firmware:-:*:*:*:*:*:*:*

>>pm3003a_firmware>>-

cpe:2.3:h:qualcomm:pm3003a:-:*:*:*:*:*:*:*

>>pm3003a>>-

cpe:2.3:o:qualcomm:pm4125_firmware:-:*:*:*:*:*:*:*

>>pm4125_firmware>>-

cpe:2.3:h:qualcomm:pm4125:-:*:*:*:*:*:*:*

>>pm4125>>-

cpe:2.3:o:qualcomm:pm439_firmware:-:*:*:*:*:*:*:*

>>pm439_firmware>>-

cpe:2.3:h:qualcomm:pm439:-:*:*:*:*:*:*:*

>>pm439>>-

cpe:2.3:o:qualcomm:pm456_firmware:-:*:*:*:*:*:*:*

>>pm456_firmware>>-

cpe:2.3:h:qualcomm:pm456:-:*:*:*:*:*:*:*

>>pm456>>-

cpe:2.3:o:qualcomm:pm6125_firmware:-:*:*:*:*:*:*:*

>>pm6125_firmware>>-

cpe:2.3:h:qualcomm:pm6125:-:*:*:*:*:*:*:*

>>pm6125>>-

cpe:2.3:o:qualcomm:pm6150_firmware:-:*:*:*:*:*:*:*

>>pm6150_firmware>>-

cpe:2.3:h:qualcomm:pm6150:-:*:*:*:*:*:*:*

>>pm6150>>-

cpe:2.3:o:qualcomm:pm6150a_firmware:-:*:*:*:*:*:*:*

>>pm6150a_firmware>>-

cpe:2.3:h:qualcomm:pm6150a:-:*:*:*:*:*:*:*

>>pm6150a>>-

cpe:2.3:o:qualcomm:pm6150l_firmware:-:*:*:*:*:*:*:*

>>pm6150l_firmware>>-

cpe:2.3:h:qualcomm:pm6150l:-:*:*:*:*:*:*:*

>>pm6150l>>-

cpe:2.3:o:qualcomm:pm6250_firmware:-:*:*:*:*:*:*:*

>>pm6250_firmware>>-

cpe:2.3:h:qualcomm:pm6250:-:*:*:*:*:*:*:*

>>pm6250>>-

cpe:2.3:o:qualcomm:pm6350_firmware:-:*:*:*:*:*:*:*

>>pm6350_firmware>>-

cpe:2.3:h:qualcomm:pm6350:-:*:*:*:*:*:*:*

>>pm6350>>-

cpe:2.3:o:qualcomm:pm660_firmware:-:*:*:*:*:*:*:*

>>pm660_firmware>>-

cpe:2.3:h:qualcomm:pm660:-:*:*:*:*:*:*:*

>>pm660>>-

cpe:2.3:o:qualcomm:pm660a_firmware:-:*:*:*:*:*:*:*

>>pm660a_firmware>>-

cpe:2.3:h:qualcomm:pm660a:-:*:*:*:*:*:*:*

>>pm660a>>-

cpe:2.3:o:qualcomm:pm660l_firmware:-:*:*:*:*:*:*:*

>>pm660l_firmware>>-

cpe:2.3:h:qualcomm:pm660l:-:*:*:*:*:*:*:*

>>pm660l>>-

cpe:2.3:o:qualcomm:pm7150a_firmware:-:*:*:*:*:*:*:*

>>pm7150a_firmware>>-

cpe:2.3:h:qualcomm:pm7150a:-:*:*:*:*:*:*:*

>>pm7150a>>-

cpe:2.3:o:qualcomm:pm7150l_firmware:-:*:*:*:*:*:*:*

>>pm7150l_firmware>>-

cpe:2.3:h:qualcomm:pm7150l:-:*:*:*:*:*:*:*

>>pm7150l>>-

cpe:2.3:o:qualcomm:pm7250_firmware:-:*:*:*:*:*:*:*

>>pm7250_firmware>>-

cpe:2.3:h:qualcomm:pm7250:-:*:*:*:*:*:*:*

>>pm7250>>-

cpe:2.3:o:qualcomm:pm7250b_firmware:-:*:*:*:*:*:*:*

>>pm7250b_firmware>>-

cpe:2.3:h:qualcomm:pm7250b:-:*:*:*:*:*:*:*

>>pm7250b>>-

cpe:2.3:o:qualcomm:pm7350c_firmware:-:*:*:*:*:*:*:*

>>pm7350c_firmware>>-

cpe:2.3:h:qualcomm:pm7350c:-:*:*:*:*:*:*:*

>>pm7350c>>-

cpe:2.3:o:qualcomm:pm8004_firmware:-:*:*:*:*:*:*:*

>>pm8004_firmware>>-

cpe:2.3:h:qualcomm:pm8004:-:*:*:*:*:*:*:*

>>pm8004>>-

Weaknesses

CWE ID	Type	Source
CWE-908	Primary	nvd@nist.gov

CWE ID: CWE-908

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/january-2021-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

600Records found

CVE-2017-11007

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.49%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possibility of stack corruption due to buffer overflow of Partition name while converting ascii string to unicode string in function HandleMetaImgFlash.

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-40539

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 7.34%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 12:21

Improper Validation of Array Index in Automotive Android OS

Memory corruption in Automotive Android OS due to improper validation of array index.

Product-sa8295p sa6155p_firmware wsa8830 sa6150p_firmware sa8145p_firmware qcs610 sw5100p qcc5100 wcn3988_firmware qca6574au sa6145p_firmware sa8155p_firmware wsa8835 sa8195p wcn3950_firmware wsa8810_firmware sa8150p_firmware wcd9341_firmware sw5100 wsa8810 sa6155p qcs410 sw5100p_firmware qcs610_firmware wcd9370 sa6145p wcd9341 qca6696_firmware wcn3980 sa8145p qca6696 qam8295p wcn3950 wcd9370_firmware sa8150p sa6150p wsa8815 sa8155p wsa8830_firmware qam8295p_firmware wcn3988 wsa8815_firmware wsa8835_firmware qca6574au_firmware sa8195p_firmware sw5100_firmware qcs410_firmware wcn3980_firmware sa8295p_firmware qcc5100_firmware Snapdragon sa6155p_firmware sa6150p_firmware sa8145p_firmware qca6696_firmware wcd9370_firmware wcn3988_firmware wsa8830_firmware sa6145p_firmware sa8155p_firmware qam8295p_firmware wcn3950_firmware wsa8815_firmware wsa8835_firmware wsa8810_firmware sa8150p_firmware wcd9341_firmware qca6574au_firmware sa8195p_firmware sw5100_firmware qcs410_firmware wcn3980_firmware sa8295p_firmware sw5100p_firmware qcs610_firmware qcc5100_firmware

CWE ID-CWE-284

Improper Access Control

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2022-40516

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-4.31% / 88.44%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 14:50

Stack-based buffer overflow in Core

Memory corruption in Core due to stack-based buffer overflow.

Product-qca9377_firmware sd_8cx_gen3_firmware sa6150p_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 qca4024_firmware wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sa415m wcn3998 wcd9371_firmware qam8295p wcn3950 qcn6024_firmware sd720g sm4125 sd_8cx_gen2_firmware qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 sd680_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware sa4155p_firmware sa8155_firmware qca4004_firmware ipq6010 sd662_firmware qcs405 qca6430 wcd9306_firmware wcd9340 sd765g sw5100 fsm10056_firmware sd680 qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g ipq9008_firmware wcn3910_firmware sxr2150p_firmware sd_8cx sa8150p qca4004 wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware qcn5121 sm8475 qcn5022_firmware qcn7606_firmware wcn6750_firmware sa8295p_firmware wcn3991 qca8337_firmware wcd9380_firmware sw5100p qca8084 qca6564au sdx55m_firmware wcn6856_firmware ipq9008 sd670_firmware qca6574 csr8811_firmware wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware sdx24_firmware qca8072_firmware qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6320 qca6426_firmware qca9984 ipq6028 sd835 qcn9024 ipq9574_firmware wcn3980_firmware sd730 sdx55m qcc5100_firmware sa8295p qca6421_firmware wcn6740_firmware sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 sd670 qcn9024_firmware qca6564a_firmware qcm4290_firmware sd870 wcn6855 qcn5121_firmware sw5100p_firmware sa8540p qcs610_firmware qsm8250 sa6145p ipq6018 sdxr1 ar8031 qca6595_firmware qcs405_firmware sa8145p mdm9205_firmware qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware sd780g_firmware sdx55 sd888_firmware qcn5021_firmware sa8155p csra6640 sd675 qcs8155_firmware sa4155p sxr2150p ar8035_firmware qsm8250_firmware qcn7606 qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcn9070 sa8145p_firmware qcs2290_firmware fsm10056 sd7c_firmware csrb31024 csra6620 qca8082 qcn9072 qca8386 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware qcn5152_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware sd662 qam8295p_firmware qcn9011_firmware sa8155 qca8082_firmware qca6320_firmware sa9000p_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n wcd9306 sd778g qca6564au_firmware sa6155p_firmware qca6310 qcn9274 qcs8155 wcn7851 sa515m_firmware qcs6490 sdxr2_5g qcn5052 sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sm6250 sa8195p sd712_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 qca6174a_firmware qcs4290_firmware wcd9385 qca8085_firmware qcs6490_firmware sd_8cx_gen3 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 csr8811 sm6250_firmware wsa8815_firmware sd888_5g_firmware qcm6490 wcn6850_firmware wsa8835_firmware qcx315 qca6564a sa4150p qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 qcc5100 sdx24 qcn9012 sd888 wsa8835 qcx315_firmware sa8540p_firmware sd888_5g sm6250p qca8075_firmware sc8180x qca6574a ipq6005_firmware wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 mdm9205 sa9000p qca6574_firmware sa515m sd855 sm4125_firmware sm7325p_firmware sd765 qca6574a_firmware qcn5021 qcn5152 sd768g_firmware qrb5165m sd850_firmware sm7315 sd460 qca6391 sdxr1_firmware ipq6005 aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m qcn9070_firmware ipq6028_firmware qcn9011 sc8180x_firmware qca6574au sd710 sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware wsa8810 mdm9150 wcn6856 qcn5022 sd835_firmware qca6564_firmware sd768g ipq6010_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 sd845 qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware sd850 Snapdragon

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-40520

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-4.31% / 88.44%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 19:38

Stack based buffer overflow in Core

Memory corruption due to stack-based buffer overflow in Core

Product-qca9377_firmware sd_8cx_gen3_firmware mdm9640_firmware sa6150p_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 sd_455_firmware qcs605_firmware sd_675_firmware sa415m wcn3998 wcd9371_firmware qam8295p sd_8cx_gen2_firmware qcn6024_firmware sd720g wcn3950 sd_8_gen1_5g_firmware qsm8350_firmware sd710_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware qca6420 wcd9360 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware sa4155p_firmware sa8155_firmware qca4004_firmware qca6430 wcd9306_firmware wcd9340 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd750g sd870_firmware sxr2150p_firmware sd_8cx sa8150p qca4004 wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 sa8295p_firmware wcn6750_firmware mdm9640 wcn3991 qca8337_firmware wcd9380_firmware msm8996au_firmware qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware sdx24_firmware qca6430_firmware qcn9012_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c qca6320 mdm9650_firmware qca6426_firmware sd835 qcn9024 wcn3980_firmware sd730 sdx55m sa8295p qca6421_firmware wcn6740_firmware sd678_firmware apq8064au_firmware qrb5165 wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware qcn9024_firmware sd870 wcn6855 sa8540p qcs610_firmware qsm8250 sa6145p sdxr1 apq8096au qca6595_firmware sa8145p sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 qcs8155_firmware sa4155p sxr2150p ar8035_firmware qsm8250_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware fsm10056 sd7c_firmware csrb31024 mdm9650 sd_636 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware qam8295p_firmware qcn9011_firmware sa8155 qca6320_firmware sa9000p_firmware sdx55_firmware qca6595au sm7250p_firmware qca6436_firmware qrb5165n qca6564au_firmware qca6584au sa6155p_firmware qca6310 sd778g wcd9306 qcs8155 sa515m_firmware qcs6490 wcn7851 sdxr2_5g sdm630 sa415m_firmware wcn3988_firmware sa6145p_firmware qca6421 sd712_firmware sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware wcd9385 qcs6490_firmware sd_8cx_gen3 ar8035 qca6390 sd750g_firmware apq8064au aqt1000 wcd9375 sm6250_firmware sd820 qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qcx315 qca6564a sa4150p wcn3990 sd_675 sd780g sd865_5g qca6595 sdx24 qcn9012 sd888 wsa8835 qcx315_firmware msm8996au sa8540p_firmware sd888_5g sm6250p sc8180x qca6574a wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 mdm9205 sa515m qca6574_firmware sa9000p sd855 sm7325p_firmware sd765 qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware sm7315 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware csrb31024_firmware qcm6490_firmware sdx50m qcn9011 sc8180x_firmware sd_455 qca6574au sa8155p_firmware sd710 wcd9341_firmware wsa8810 mdm9150 wcn6856 sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sa6150p apq8096au_firmware qcn6024 sd845 sm7250p sd720g_firmware qcs410_firmware sd850 Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-40507

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-3.01% / 86.06%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-07 Jan, 2025 | 19:33

Double free in Core

Memory corruption due to double free in Core while mapping HLOS address to the list.

CWE ID-CWE-415

Double Free

CVE-2022-40531

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.70%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 12:21

Incorrect type conversion in WLAN

Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware ipq4028_firmware qca8337 ar9380 ipq8173_firmware qcn5124 wcn3950_firmware sc8180x\+sdx55 qca6595au_firmware sa6155 sd_455_firmware apq8076 qcs6125_firmware sa415m wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware wcn3660b qsm8350_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca8081_firmware wcn3998_firmware qca6420 qcn9002 qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware sd_8cx_gen2 ipq8072_firmware sa8155_firmware qca4004_firmware ipq8068 qca6430 qts110 wcd9306_firmware sdx65m wcd9340 sd765g sd680 wcn7851_firmware qca6698aq_firmware mdm9250_firmware qca9888_firmware qcn6122 qca6696_firmware wcd9371 sd870_firmware qca1062 qcn5154_firmware sd_8cx sa8150p qca4004 qca9992_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 sd712 sd660_firmware sm8475 qcn5022_firmware qcn7606_firmware wcn6750_firmware qca6428_firmware qca9985_firmware wcn3991 ipq4018_firmware ssg2125p qca9980_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 sdx55m_firmware msm8976_firmware qca6574 sd670_firmware csr8811_firmware wcd9380 qcs410 qcn5024 sd690_5g_firmware qca9379_firmware sxr1230p sdx24_firmware qca9985 qcn9012_firmware qcn9274_firmware ipq6018_firmware qcm4325_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qcn6112 sd695 ipq6028 ipq8064 sd835 pmp8074 ipq9574_firmware wcn3980_firmware sd730 qcc5100_firmware sa8295p qca2062_firmware wcn6740_firmware qca6678aq sd678_firmware ipq8078_firmware qcn5054 qcs603 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware qcm4290_firmware wcn6855 qcn7605_firmware sw5100p_firmware qcs610_firmware sa6145p qca9886_firmware ar8031 sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware sa4150p_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware csra6640 ssg2115p_firmware qca9379 sxr2150p qcn7606 qsm8250_firmware wsa8830 sxr2230p_firmware qca1062_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qca8082 qca9992 qcs4290 mdm9250 qca6420_firmware apq8009_firmware qca2064_firmware sd690_5g sd675_firmware ipq8072 qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9984_firmware qca9377 wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware ipq8074a qcn6102_firmware qcn9011_firmware sa8155 qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware sm7250p_firmware wcn3610_firmware qrb5165n wcd9306 qca6584au sd778g ipq8174 wcn7851 qcn5052 qca9367 sdm630 mdm9607_firmware qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 qca6421 qca8085 sd778g_firmware sa8195p wcd9326 wcd9335 qcn6023 qcs4290_firmware qca8085_firmware qcs6490_firmware qca6390 qca9898_firmware sd750g_firmware aqt1000 msm8976 wcd9375 sc8180x\+sdx55_firmware sm6250_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware apq8017 qcx315 qcm6125_firmware sd780g sd865_5g qca6595 qcc5100 ipq8065_firmware qcx315_firmware sxr1230p_firmware sd665_firmware qcn5154 qca8075_firmware mdm9206 wcn6855_firmware qcn6132_firmware qcn9003_firmware qca9888 qca6310_firmware ipq8070a_firmware qca6574_firmware qca9886 sm7325p_firmware sd665 sxr2230p qca6175a sd765 qca6574a_firmware qrb5165m sd850_firmware sm7315 apq8009 qcn6102 csrb31024_firmware qcm6490_firmware wsa8832_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware qca9889_firmware sd710 mdm9607 qcn5122 sdx20m_firmware qcn5022 qca6564_firmware sd768g qca1064_firmware wcn6740 qca8075 apq8096au_firmware qcn6024 qcn9022 sd845 qcn9002_firmware ipq6000_firmware sdx12 qcs410_firmware qca6175a_firmware qts110_firmware sd_8cx_gen3_firmware qca2066 sa6150p_firmware qcs610 qca6431_firmware wcd9360_firmware sdx65 qca4024_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6335 qca2062 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qca6554a_firmware qam8295p sd_8cx_gen2_firmware ipq8076a mdm9628 qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware sd710_firmware qca4020 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware sa6155_firmware sdx12_firmware wcd9360 sdx20m qca6438_firmware sd680_firmware qca6678aq_firmware wcn3999 qrb5165_firmware ipq5028 qrb5165m_firmware ipq4029_firmware qca6698aq qcs6125 ipq6010 sd662_firmware qcs405 qcn6132 sw5100 qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcd9341 ipq8068_firmware qca2066_firmware qca6431 sd750g ipq9008_firmware wcn3910_firmware sxr2150p_firmware wsa8830_firmware sd855_firmware wcn3988 qca6438 wcn7850_firmware sa8195p_firmware qca9898 sa8295p_firmware ipq4028 wcn3610 mdm9640 ipq5018_firmware qca8337_firmware wcd9380_firmware ipq8072a sw5100p msm8996au_firmware wcd9330 ipq8076a_firmware qca6564au wcn6856_firmware ipq9008 qcn5164 qcn5054_firmware sdx50m_firmware qca8072_firmware qca6174 qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 sd7c wcn3910 qca6320 mdm9650_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware qca9984 qcn9024 wcd9330_firmware sdx55m ipq8064_firmware qca6421_firmware sd821_firmware ar8031_firmware qrb5165 wcn6851_firmware ipq8070 sd_636_firmware qca6564a_firmware sd480 sd870 wsa8832 qsm8250 ipq6018 sd695_firmware sdxr1 apq8096au qca6595_firmware qcs405_firmware sa8145p qca2064 sd780g_firmware sd888_firmware sa8155p sd675 ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware sd678 qcn9070 sa8145p_firmware qcs2290_firmware sd7c_firmware snapdragon_4_gen_1_firmware csra6620 qcn9072 qca8386 sd765g_firmware ipq8069_firmware qca6390_firmware ipq6000 qca6174_firmware sd730_firmware wcd9370 ssg2115p qcn5152_firmware qca6584au_firmware apq8076_firmware qcn9000_firmware ipq5018 sd_8cx_firmware qcn7605 qca2065 sd662 qcn5124_firmware qam8295p_firmware qca1064 qcn6100_firmware qca8082_firmware qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware ipq5010 qca6564au_firmware sa6155p_firmware qca6310 qcn9274 qcn9001 qca9990 qcs6490 sa515m_firmware sdxr2_5g sd821 sa6145p_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware sd765_firmware sg4150p qca8081 ipq8071a sdx65m_firmware qca6174a_firmware ipq8071a_firmware wcd9385 qca2065_firmware sd_8cx_gen3 ar8035 csr8811 qcn9100_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware qca6564a sa4150p sg4150p_firmware qcm4325 qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 qca6554a ar9380_firmware sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 msm8996au sd888_5g sm6250p ssg2125p_firmware ipq4018 qca6574a qca9889 qca6174a sm7325p ipq8074 qca9994_firmware wcn6750 qcn9003 ipq8076_firmware mdm9205 sa515m sd855 sm4125_firmware ipq8076 qcn5021 ipq8069 qcn5152 sd768g_firmware sd460 qca6391 sdxr1_firmware aqt1000_firmware qcn9100 sdx65_firmware qcm4290 sdx50m sdx20 qcn9011 sd_455 ipq8074_firmware qca6574au sa8155p_firmware ipq9574 wcd9341_firmware qcm6125 wsa8810 wcn6856 wcn3680b sd835_firmware ipq6010_firmware qca6696 sd845_firmware sa6150p qcn9022_firmware qca9990_firmware ipq8070a qcn6100 qcn9072_firmware sm7250p sd720g_firmware ipq8071_firmware qcn9074_firmware sw5100_firmware ipq4029 sd850 Snapdragon

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CVE-2022-40517

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 26.59%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 14:49

Stack based buffer overflow in Core

Memory corruption in core due to stack-based buffer overflow

Product-qca9377_firmware sd_8cx_gen3_firmware sa6150p_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 qca4024_firmware wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sa415m wcn3998 wcd9371_firmware qam8295p wcn3950 qcn6024_firmware sd720g sm4125 sd_8cx_gen2_firmware qca8386_firmware qca8084_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware sm7315_firmware qca6574au_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 sd680_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware sa4155p_firmware sa8155_firmware qca4004_firmware ipq6010 sd662_firmware qcs405 qca6430 wcd9306_firmware wcd9340 sd765g sw5100 fsm10056_firmware sd680 qca6436 wcn6851 sa6155p qcs603_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g ipq9008_firmware wcn3910_firmware sxr2150p_firmware sd_8cx sa8150p qca4004 wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware sa8195p_firmware qcn5121 qcn5022_firmware qcn7606_firmware wcn6750_firmware sa8295p_firmware wcn3991 qca8337_firmware wcd9380_firmware sw5100p qca8084 qca6564au sdx55m_firmware wcn6856_firmware ipq9008 sd670_firmware qca6574 csr8811_firmware wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware sdx24_firmware qca8072_firmware qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6320 qca6426_firmware qca9984 ipq6028 sd835 qcn9024 ipq9574_firmware wcn3980_firmware sd730 sdx55m qcc5100_firmware sa8295p qca6421_firmware wcn6740_firmware sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 sd670 qcn9024_firmware qca6564a_firmware qcm4290_firmware sd870 wcn6855 qcn5121_firmware sw5100p_firmware sa8540p qcs610_firmware qsm8250 sa6145p ipq6018 sdxr1 ar8031 qca6595_firmware qcs405_firmware sa8145p mdm9205_firmware qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware sd780g_firmware sdx55 sd888_firmware qcn5021_firmware sa8155p csra6640 sd675 qcs8155_firmware sa4155p sxr2150p ar8035_firmware qsm8250_firmware qcn7606 qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcn9070 sa8145p_firmware qcs2290_firmware fsm10056 sd7c_firmware csrb31024 csra6620 qca8082 qcn9072 qca8386 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware qcn5152_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware sd662 qam8295p_firmware qcn9011_firmware sa8155 qca8082_firmware qca6320_firmware sa9000p_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n wcd9306 sd778g qca6564au_firmware sa6155p_firmware qca6310 qcn9274 qcs8155 sa515m_firmware qcs6490 sdxr2_5g qcn5052 sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sm6250 sa8195p sd712_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 qca6174a_firmware qcs4290_firmware wcd9385 qca8085_firmware qcs6490_firmware sd_8cx_gen3 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 csr8811 sm6250_firmware wsa8815_firmware sd888_5g_firmware qcm6490 wcn6850_firmware wsa8835_firmware qcx315 qca6564a sa4150p qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 qcc5100 sdx24 qcn9012 sd888 wsa8835 qcx315_firmware sa8540p_firmware sd888_5g sm6250p qca8075_firmware sc8180x qca6574a ipq6005_firmware wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 mdm9205 sa9000p qca6574_firmware sa515m sd855 sm4125_firmware sm7325p_firmware sd765 qca6574a_firmware qcn5021 qcn5152 sd768g_firmware qrb5165m sd850_firmware sm7315 sd460 qca6391 sdxr1_firmware ipq6005 aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m qcn9070_firmware ipq6028_firmware qcn9011 sc8180x_firmware qca6574au sd710 sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware wsa8810 mdm9150 wcn6856 qcn5022 sd835_firmware qca6564_firmware sd768g ipq6010_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 sd845 qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware sd850 Snapdragon

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-40540

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.76%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 12:21

Buffer copy without checking the size of input in Linux Kernel

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-2328

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.84%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_600 sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-40532

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 15.42%

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 12:21

Integer overflow or wraparound in WLAN

Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2022-40522

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.96%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 12:21

Double free in Linux Networking

Memory corruption in Linux Networking due to double free while handling a hyp-assign.

Product-qca8072 wcn3991_firmware wcn3991 wcd9380_firmware qcn9070 sa6150p_firmware sa8145p_firmware qcn9000 qca8084 ipq9008 qcn5021 qca4024_firmware qca8082 qcn9072 qca8386 sm7250-ac_firmware csr8811_firmware wcd9380 sa8150p_firmware qca6595au_firmware sa6155 ipq6000 qca8075_firmware qca6574a ipq6005_firmware qcn5152_firmware qca8072_firmware qcn9000_firmware qcn5052_firmware qcn9274_firmware wcn3998 wcd9385_firmware qcn6024_firmware qca8386_firmware ipq6018_firmware sm7250-ab wsa8815 qca8084_firmware qca8082_firmware sa8155 qca6574a_firmware qca6574au_firmware qcn5122_firmware qcn5152 ipq6028 qca6595au wcn3998_firmware qca8081_firmware qcn6023_firmware sa6155_firmware sm7250p_firmware qcn9024 ipq9574_firmware ipq6005 sa6155p_firmware qcn9274 qcn5052 qcn9070_firmware sa8155_firmware ipq6010 ipq6028_firmware sm7250-ab_firmware qca6574au qcn9074 sa6145p_firmware sa8155p_firmware qca8085 sm7250-aa ipq9574 qcn5122 sa8195p qcn9024_firmware wsa8810_firmware wsa8810 sm7250-aa_firmware qcn5121_firmware sa6155p sm7250-ac qca8081 qcn6023 ipq6018 qcn5022 sa6145p wcd9385 qca8085_firmware ipq6010_firmware qca6696_firmware sa8145p qca6696 ipq9008_firmware csr8811 qca4024 sa8150p sa6150p qca8075 qcn5021_firmware qcn9022_firmware qcn6024 qcn9022 sa8155p wsa8815_firmware qcn9072_firmware sm7250p ipq6000_firmware sa8195p_firmware qcn5121 qcn9074_firmware qcn5022_firmware Snapdragon sa6155p_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware qcn9070_firmware sa8155_firmware ipq6028_firmware qca4024_firmware sa6145p_firmware sa8155p_firmware qcn9024_firmware csr8811_firmware wsa8810_firmware sa8150p_firmware qca6595au_firmware qcn5121_firmware qca8075_firmware ipq6005_firmware qcn5152_firmware qca8085_firmware ipq6010_firmware qca8072_firmware qca6696_firmware qcn9000_firmware qcn5052_firmware qcn9274_firmware ipq9008_firmware wcd9385_firmware qcn6024_firmware ipq6018_firmware qca8386_firmware qca8084_firmware qcn9022_firmware qcn5021_firmware sm7250p_firmware qcn9072_firmware wsa8815_firmware qca8082_firmware qca6574a_firmware ipq6000_firmware fastconnect_6200_firmware qca6574au_firmware qcn5122_firmware sa8195p_firmware ipq9574_firmware qca8081_firmware qcn5022_firmware qcn6023_firmware qcn9074_firmware sa6155_firmware

CWE ID-CWE-415

Double Free

CVE-2022-40530

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 13.49%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 12:21

Integer overflow to buffer overflow in WLAN

Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.

Product-sd_8cx_gen3_firmware qca2066 sa6150p_firmware qcs610 qca8337 ipq8173_firmware qca6431_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware sc8180x\+sdx55 ipq8078a sa8150p_firmware qca6595au_firmware sa6155 qca2062 csra6620_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 qca6554a_firmware wcd9371_firmware qam8295p wcn3950 qcn6024_firmware sd_8cx_gen2_firmware ipq8076a qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 ipq8070_firmware ipq8078a_firmware qca6678aq_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware ipq8072_firmware qca6698aq qcs6125 sa8155_firmware ipq6010 qcs405 qca6430 sdx65m wcd9340 qcn6132 sd765g qca6436 wcn6851 sa6155p wcn7851_firmware qca6698aq_firmware qca9888_firmware qcn6122 wcd9341 qca2066_firmware qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g qca1062 ipq9008_firmware qcn5154_firmware sxr2150p_firmware sd_8cx sa8150p wsa8830_firmware sd855_firmware sd865_5g_firmware snapdragon_4_gen_1 wcn3988 wcn7850_firmware sa8195p_firmware sm8475 qcn5022_firmware qcn7606_firmware wcn6750_firmware sa8295p_firmware ipq5018_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p ipq8072a ipq8076a_firmware ipq8078 qca8084 sdx55m_firmware ipq8173 qca6564au wcn6856_firmware ipq9008 qcn5164 qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware sdx50m_firmware sxr1230p qca8072_firmware qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcd9335_firmware wcn3980 ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qcn6112 qca6426_firmware sd695 ipq6028 qca9984 qcn9024 pmp8074 ipq9574_firmware wcn3980_firmware sd730 sdx55m sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware qca6678aq sd678_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware ipq8070 qcn9024_firmware ipq8174_firmware sd480 sd870 wsa8832 wcn6855 qcn7605_firmware qcs610_firmware qsm8250 sa6145p ipq6018 sd695_firmware ar8031 qca6595_firmware qcs405_firmware sa8145p qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware qcn5021_firmware sa8155p csra6640 sd675 ssg2115p_firmware sxr2150p ar8035_firmware qsm8250_firmware qcn7606 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sxr2230p_firmware sa8145p_firmware qca1062_firmware csrb31024 snapdragon_4_gen_1_firmware csra6620 qca8082 qcn9072 qca8386 sd765g_firmware qca6420_firmware qca6390_firmware qca2064_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware ssg2115p ipq8072 qcn5152_firmware qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware qcn7605 ipq8074a qca2065 qcn5124_firmware qam8295p_firmware qcn6102_firmware qcn9011_firmware qca1064 sa8155 qcn6100_firmware qca8082_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n qca6564au_firmware qca6584au sd778g sa6155p_firmware qcn9274 ipq8174 wcn7851 sa515m_firmware qcs6490 sdxr2_5g qcn5052 qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sa8195p wsa8810_firmware sd765_firmware wcd9335 qca8081 qcn6023 ipq8071a sdx65m_firmware ipq8071a_firmware wcd9385 qca8085_firmware qcs6490_firmware qca2065_firmware sd_8cx_gen3 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 csr8811 sc8180x\+sdx55_firmware qcn9100_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware qcm6490 wcn6850_firmware wsa8835_firmware qcx315 sa4150p qcm6125_firmware qca8072 wcn3990 qcn9000 sd_675 sd780g qca6554a sd865_5g qca6595 qcn9012 sd888 qcn6122_firmware qcx315_firmware sxr1230p_firmware wsa8835 sd665_firmware sd888_5g qcn5154 qca8075_firmware ssg2125p_firmware qca6574a wcn6855_firmware qca9889 sm7325p qcn6132_firmware qca9888 ipq8074 wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware sd855 sm7325p_firmware sd665 sxr2230p ipq8076 sd765 qca6574a_firmware qcn5021 sd768g_firmware qcn5152 qrb5165m sm7315 qca6391 aqt1000_firmware qcn6102 qcn9100 sdx65_firmware csrb31024_firmware qcm6490_firmware wsa8832_firmware sdx50m qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware qcn9011 ipq8074_firmware qca6574au qca9889_firmware sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware qcm6125 wsa8810 wcn6856 qcn5022 sd768g ipq6010_firmware qca1064_firmware wcn6740 qca6696 sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 ipq8070a qcn6100 qcn9072_firmware sm7250p ipq8071_firmware qcn9074_firmware qcs410_firmware Snapdragon

CWE ID-CWE-680

Integer Overflow to Buffer Overflow

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2024-21472

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 24.04%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:06

Updated-13 Jan, 2025 | 21:54

Use After Free in Kernel

Memory corruption in Kernel while handling GPU operations.

Product-sa8770p_firmware snapdragon_685_4g_mobile_firmware wsa8840_firmware qam8255p_firmware qca6797aq_firmware fastconnect_7800_firmware sa8155p qam8255p qca6595au_firmware snapdragon_auto_5g_modem-rf_gen_2 sg8275p_firmware wsa8845_firmware qam8650p_firmware qca6574_firmware snapdragon_8_gen_1_mobile sa8255p_firmware qca6595au snapdragon_auto_5g_modem-rf_gen_2_firmware wcd9390 wsa8835 snapdragon_680_4g_mobile wcn3950 fastconnect_7800 wsa8845h_firmware wcd9395_firmware wsa8830 sa8295p_firmware qca6696 qcm4325 sa8295p qca6584au_firmware fastconnect_6900 qca6574au_firmware snapdragon_685_4g_mobile wsa8845 snapdragon_680_4g_mobile_firmware qcm4325_firmware qca6584au qca6595 sa8155p_firmware wsa8835_firmware qca6595_firmware sa8255p wcd9390_firmware qca6574a qca6797aq wsa8845h qam8775p_firmware wcd9385_firmware fastconnect_6900_firmware qam8295p_firmware wcd9380 wcn3950_firmware wcd9385 wcd9395 qam8650p sa8770p sa8195p_firmware qca6574a_firmware qca6574 qca6696_firmware sa8775p sa6155p wsa8830_firmware sa9000p_firmware qca6698aq sa6155p_firmware qam8775p qam8295p wcd9380_firmware sa9000p snapdragon_8_gen_1_mobile_firmware sa8775p_firmware qca6698aq_firmware wsa8840 sg8275p qca6574au sa8195p Snapdragon qam8255p_firmware sa6155p_firmware wcd9380_firmware sa8775p_firmware wsa8840_firmware sg8275p_firmware fastconnect_6900_firmware qca6797aq_firmware sa8155p_firmware wcn3950_firmware fastconnect_7800_firmware qca6595au_firmware wcd9395_firmware sa8255p_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qam8650p_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qam8775p_firmware qca6584au_firmware qca6696_firmware qca6595_firmware wcd9385_firmware qcm4325_firmware qca6574_firmware wcd9390_firmware wsa8830_firmware wsa8845_firmware qam8295p_firmware sa9000p_firmware qca6574a_firmware wsa8835_firmware qca6574au_firmware sa8195p_firmware wsa8845h_firmware sa8295p_firmware snapdragon_680_4g_mobile_platform_firmware

CWE ID-CWE-416

Use After Free

CVE-2022-40534

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:23

Updated-27 Feb, 2025 | 21:03

Improper Validation of Array Index in Audio

Memory corruption due to improper validation of array index in Audio.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2000-0096

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.2||HIGH

EPSS-0.13% / 32.83%

7 Day CHG~0.00%

Published-08 Feb, 2000 | 05:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.

Vendor-n/a Qualcomm Technologies, Inc.

Product-qpopper n/a

CVE-2024-21461

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.10% / 27.89%

7 Day CHG~0.00%

Published-01 Jul, 2024 | 14:17

Updated-01 Aug, 2024 | 22:20

Double Free in HLOS

Memory corruption while performing finish HMAC operation when context is freed by keymaster.

CWE ID-CWE-415

Double Free

CVE-2024-21468

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.96%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:06

Updated-11 Aug, 2025 | 15:06

Use After Free in Kernel

Memory corruption when there is failed unmap operation in GPU.

CWE ID-CWE-416

Use After Free

CVE-2024-21474

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 19.10%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-15 Jan, 2025 | 16:57

Stack-based Buffer Overflow in PMIC

Memory corruption when size of buffer from previous call is used without validation or re-initialization.

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-21481

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.18%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor

Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2288

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.23%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:42

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, Snapdragon_High_Med_2016, SXR1130

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 mdm9650 sdm429 msm8940_firmware snapdragon_high_med_2016_firmware msm8976_firmware msm8996au apq8009_firmware msm8917 sdm670 qcs605_firmware mdm9206 sdm670_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qca8081 mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 msm8909 apq8096au sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware msm8976 msm8953_firmware msm8940 apq8053 apq8096au_firmware msm8917_firmware msm8998 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-2346

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ8074, QCA8081, QCS404, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM630, SDM660

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-2304

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 31.76%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 18:49

Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, QCN7605, QCS405, QCS605, SDA845, SDM660, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2019-2316

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9640, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 845 / SD 850, SD 855, SDM660, SDX24

CWE ID-CWE-416

Use After Free

CVE-2019-2257

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.94%

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-04 Aug, 2024 | 18:42

Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 855, SDA660, SDM660, SDX20, SDX24

CWE ID-CWE-732

Incorrect Permission Assignment for Critical Resource

CVE-2019-2315

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.23%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:49

While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCS404, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, Snapdragon_High_Med_2016, SXR1130, SXR2130

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware qcs404 sdm636 sda845_firmware apq8098 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware sxr1130 apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CVE-2019-2250

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-04 Aug, 2024 | 18:42

Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCS605, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SM7150, SXR1130

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-20

Improper Input Validation

CVE-2019-2278

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.51%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SDM660

CWE ID-CWE-347

Improper Verification of Cryptographic Signature

CVE-2019-2267

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.23%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 18:42

Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM8150, SXR1130, SXR2130

CVE-2019-2321

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ4019, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS404, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, Snapdragon_High_Med_2016, SXR1130, SXR2130

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware ipq4019_firmware mdm9206 sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware qca8081 mdm9150 msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware qm215_firmware ipq4019 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-2251

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.87%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:42

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8016, APQ8096AU, APQ8098, MDM9205, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2308

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.53%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 msm8909w sd_665_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CVE-2019-2326

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.53%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-2339

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.23%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:49

Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-2329

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 26.38%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:49

Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDX55, SM6150, SM7150, SM8150, SXR1130, SXR2130

CWE ID-CWE-416

Use After Free

CVE-2019-2246

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.23%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9205, MDM9640, MSM8996AU, QCA6574, QCS605, Qualcomm 215, SD 425, SD 427, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 mdm9640_firmware sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 sd_636 snapdragon_high_med_2016_firmware qca6574 msm8996au sd_820 sd_450_firmware sd_845_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_8cx_firmware mdm9205 sd_845 qcs605 qca6574_firmware mdm9640 sd_835_firmware sd_835 sda660 sxr1130_firmware sxr1130 sd_665_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sd_425 sdm660 sdm630 sd_710_firmware sd_435 sd_625 sd_820_firmware sd_636_firmware sd_439_firmware qualcomm_215_firmware sd_429_firmware sd_730 snapdragon_high_med_2016 sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware mdm9205_firmware sda660_firmware sd_8cx sd_427 sd_670 sd_435_firmware sd_710 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2274

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.23%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 18:42

Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017, APQ8053, APQ8098, IPQ8074, MDM9150, MDM9650, MDM9655, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCA8081, QCN7605, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 sm7150 msm8917 sdm670 qcs605_firmware sdm670_firmware ipq8074 sdm636 sda845_firmware apq8098 qcn7605 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware sda660 sdx55_firmware sxr1130_firmware qca8081_firmware sxr1130 apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9655_firmware ipq8074_firmware sdm710 qm215 apq8017_firmware sdm710_firmware qcn7605_firmware qca8081 mdm9150 msm8937 sm8150_firmware mdm9655 sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware sdx55 msm8940 apq8053 msm8953_firmware sm6150_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CVE-2018-5880

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.43%

7 Day CHG~0.00%

Published-18 Jan, 2019 | 22:00

Updated-05 Aug, 2024 | 05:47

Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-33300

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 14:53

Improper input validation in Automotive Android OS

Memory corruption in Automotive Android OS due to improper input validation.

Product-qca9377_firmware wsa8830 wcd9380_firmware sa6150p_firmware wcn3990 sa8145p_firmware sw5100p sd865_5g qcc5100 sdx55m_firmware wcn6856_firmware qcn9012 wsa8835 wcd9380 sa8150p_firmware sd888_5g qca6595au_firmware qca6390_firmware wcn6855_firmware qca6174a qca6426 wcn3990_firmware qrb5165n_firmware qcn9012_firmware qca9377 wcd9335_firmware wcn3980 wcd9385_firmware qam8295p sdxr2_5g_firmware sd_8_gen1_5g_firmware wsa8815 wcn6850 qam8295p_firmware qcn9011_firmware qca6426_firmware wcn7850 qca6574au_firmware qca6595au sdx12_firmware qrb5165m wcn3980_firmware qca6391 sdx55m qca6436_firmware qrb5165n sa8295p qcc5100_firmware sa6155p_firmware wcn7851 qrb5165_firmware qrb5165m_firmware sdxr2_5g qrb5165 wcn6851_firmware qcn9011 wcn3988_firmware qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 sd870 qca6436 wcn6851 wcd9335 sa6155p wcn6855 sw5100p_firmware wcn7851_firmware wcn6856 sa6145p qca6174a_firmware wcd9385 wcd9341 qca6696_firmware sa8145p sd870_firmware qca6696 qca6391_firmware qca6390 sa8150p sa6150p sa8155p wsa8830_firmware sd660 sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware sd660_firmware wcn7850_firmware wsa8815_firmware sa8195p_firmware wsa8835_firmware sdx12 sw5100_firmware sm8475 sa8295p_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-33307

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.96%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 08:01

Double free in Automotive

Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed.

CWE ID-CWE-415

Double Free

CVE-2024-21464

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 5.87%

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-10 Jan, 2025 | 17:22

Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity

Memory corruption while processing IPA statistics, when there are no active clients registered.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-33210

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 24.59%

7 Day CHG~0.00%

Published-17 Oct, 2022 | 00:00

Updated-14 May, 2025 | 15:15

Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snapdragon Auto

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-33277

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.96%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking size of input in modem

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

Product-sd_8cx_gen3_firmware qca2066 sa6150p_firmware sm6250p_firmware qcs610 ipq4028_firmware qca8337 ar9380 ipq8173_firmware qca6431_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 qca2062 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 qca6554a_firmware wcd9371_firmware qam8295p wcn3950 qcn6024_firmware sd720g sm4125 sd_8cx_gen2_firmware ipq8076a qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 qcn9002 qca6438_firmware qca9986 sd680_firmware ipq8070_firmware ipq8065 ipq8078a_firmware qca6678aq_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware ipq8072_firmware ipq4029_firmware qca6698aq qcs6125 sa8155_firmware sa4155p_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 wcd9340 qcn6132 sd765g sw5100 sd680 qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca2066_firmware qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g qca1062 ipq9008_firmware qcn5154_firmware wcn3910_firmware sxr2150p_firmware sd_8cx sa8150p wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 sd712 sd855_firmware wcn3988 sd660_firmware qca6438 wcn7850_firmware sa8195p_firmware sm8475 qcn5022_firmware qcn7606_firmware wcn6750_firmware qca9898 sa8295p_firmware ipq4028 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware ssg2125p wcd9380_firmware ipq8072a qca9980_firmware sw5100p ipq8076a_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 sdx55m_firmware qca6564au wcn6856_firmware ipq9008 qcn5164 sd670_firmware qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware sdx50m_firmware sxr1230p qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcm4325_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c pmp8074_firmware qcn6112 wcn3910 qca9986_firmware qca6426_firmware sd695 ipq6028 ipq8064 qca9984 pmp8074 qcn9024 ipq9574_firmware wcn3980_firmware sd730 sdx55m ipq8064_firmware qcc5100_firmware sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware qca6678aq sd678_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 ipq8070 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware qcm4290_firmware sd480 sd870 wcn6855 qcn7605_firmware wsa8832 sw5100p_firmware qcs610_firmware qsm8250 sa6145p ipq6018 qca9886_firmware sd695_firmware sdxr1 ar8031 qca6595_firmware qcs405_firmware sa8145p qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware qcn5021_firmware sa8155p csra6640 sd675 ssg2115p_firmware sa4155p sxr2150p ar8035_firmware qsm8250_firmware qcn7606 qcm2290 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sxr2230p_firmware sa8145p_firmware qca1062_firmware qcs2290_firmware sd7c_firmware csrb31024 snapdragon_4_gen_1_firmware csra6620 qca8082 qcn9072 qca8386 qca9992 qcs4290 sd765g_firmware qca6420_firmware ipq8069_firmware qca6390_firmware qca2064_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ssg2115p ipq8072 qcn5152_firmware qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware qcn7605 wcd9326_firmware ipq8074a qca2065 sd662 qcn5124_firmware qam8295p_firmware qcn6102_firmware qcn9011_firmware qca1064 sa8155 qcn6100_firmware qca8082_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qca6310 qcn9274 ipq8174 wcn7851 sa515m_firmware qca9990 qcn9001 qcn5052 qcs6490 sdxr2_5g qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sm6250 sa8195p sd712_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 sg4150p qca8081 qcn6023 ipq8071a ipq8071a_firmware qcs4290_firmware wcd9385 qca8085_firmware qcs6490_firmware qca2065_firmware sd_8cx_gen3 qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 ar8035 sm6250_firmware csr8811 qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware qcm6490 wcn6850_firmware wsa8835_firmware qcx315 sa4150p sg4150p_firmware qcm6125_firmware qcm4325 qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g qca6554a sd865_5g qca6595 ar9380_firmware qcc5100 qcn9012 sd888 qcn6122_firmware ipq8065_firmware qcx315_firmware sxr1230p_firmware wsa8835 sd665_firmware sd888_5g sm6250p qcn5154 qca8075_firmware sc8180x ssg2125p_firmware ipq4018 qca6574a wcn6855_firmware qca9889 sm7325p qcn6132_firmware qcn9003_firmware qca9888 qca6310_firmware ipq8074 qca9994_firmware wcn6750 qcn9003 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 sd855 sm4125_firmware sm7325p_firmware sd665 sxr2230p ipq8076 sd765 qca6574a_firmware qcn5021 ipq8069 qcn5152 sd768g_firmware qrb5165m sd850_firmware sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware qcn6102 qcn9100 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware wsa8832_firmware sdx50m qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware qcn9011 sc8180x_firmware ipq8074_firmware qca6574au qca9889_firmware sd710 sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware qcm6125 wsa8810 wcn6856 qcn5022 sd768g ipq6010_firmware qca1064_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware ipq8071_firmware qcn9074_firmware qcs410_firmware sw5100_firmware ipq4029 sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-21471

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 24.82%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Use After Free in Graphics Linux

Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.

CWE ID-CWE-416

Use After Free

CVE-2024-21470

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 24.04%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:06

Updated-13 Jan, 2025 | 21:54

Integer Overflow to Buffer Overflow in Graphics Windows

Memory corruption while allocating memory for graphics.

CWE ID-CWE-680

Integer Overflow to Buffer Overflow

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2019-14023

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are properly NULL terminated before string copy in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, Rennell, SA6155P, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

CVE-2019-14047

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-05 Aug, 2024 | 00:05

While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit list in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, APQ8096AU, MDM9607, MSM8909W, MSM8996, MSM8996AU, QCN7605, QCS605, SC8180X, SDA845, SDX20, SDX24, SDX55, SM8150, SXR1130

CWE ID-CWE-20

Improper Input Validation

CVE-2019-14029

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 9.61%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Use-after-free in graphics module due to destroying already queued syncobj in error case in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, MDM9607, MSM8909W, MSM8953, MSM8996AU, Nicobar, QCS405, QCS605, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 sdm429 sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x sdm670_firmware sdx24_firmware sda845_firmware apq8098 qcs605 sdm429_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 apq8009 msm8909w apq8053_firmware sda845 nicobar sa6155p_firmware msm8953 sdm450 apq8098_firmware mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 sdm710 mdm9607 sdm710_firmware sa6155p sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sda660_firmware rennell_firmware sdx55 msm8953_firmware apq8053 apq8096au_firmware saipan_firmware sm6150_firmware sm8250 sm8150 nicobar_firmware saipan sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2022-33275

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:23

Updated-27 Feb, 2025 | 21:03

Improper validation of array index in WLAN HAL

Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

Product-sm7325-ae_firmware sm6250p_firmware ipq4028_firmware qca8337 ar9380 ipq8173_firmware qcn5124 wcn3950_firmware sc8180x\+sdx55 sm4450_firmware qca6595au_firmware sa6155 sm4375 wcn3998 sc8180xp-ad wcn3950 qcn6024_firmware sm4125 immersive_home_316_platform_firmware sm6375_firmware qsm8350_firmware qsm8350 sd460_firmware sm7315_firmware sm4250-aa wcn3998_firmware qca8081_firmware qca6420 qcn9002 qca9986 snapdragon_auto_5g_modem-rf_firmware ipq8070_firmware ipq8065 ipq8078a_firmware ipq8072_firmware sc8180xp-aa_firmware sa8155_firmware ipq8068 qca6430 wcd9340 qca6698aq_firmware wcn685x-1_firmware qca9888_firmware qcn6122 sm8150_firmware qca6696_firmware qca1062 sc8180x-ab qcn5154_firmware sm4350_firmware sd_8cx sa8150p qca9992_firmware sd660 sd865_5g_firmware sm7225_firmware sd660_firmware sm8475 qcn5022_firmware wcn6750_firmware immersive_home_216_platform_firmware snapdragon_750g_5g_mobile_platform_firmware snapdragon_675_mobile_platform_firmware qca6428_firmware sm6375 qca9985_firmware wcn3991 ipq4018_firmware ssg2125p qca9980_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 qca6574 csr8811_firmware snapdragon_7c\+_gen_3_compute wcd9380 qcn5024 sxr1230p sc8180xp-ad_firmware qca9985 qcn9012_firmware qcn9274_firmware ipq6018_firmware qcm4325_firmware wcd9340_firmware wsa8815 sm6150-ac_firmware pmp8074_firmware qcn6112 qcs8250 ipq6028 ipq8064 pmp8074 ipq9574_firmware wcn3980_firmware sd730 sc7180-ac_firmware sa8295p sm6350 qca2062_firmware sm8475_firmware wcn6740_firmware qcs4490_firmware qca6678aq snapdragon_x65_5g_modem-rf_system ipq8078_firmware qcn5054 qca9994 sm6350_firmware wcn785x-1_firmware qca9980 qcn9024_firmware ipq8174_firmware qcm4290_firmware sw5100p_firmware sa6145p qca9886_firmware immersive_home_214_platform sc8280xp-bb snapdragon_750g_5g_mobile_platform qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware sm8250 csra6640 ssg2115p_firmware qsm8250_firmware wsa8830 sxr2230p_firmware qca1062_firmware csrb31024 flight_rb5_5g_platform flight_rb5_5g_platform_firmware qca8082 qca9992 qcs4290 qca6420_firmware sc7180-ac qca2064_firmware snapdragon_auto_4g_modem_firmware ipq8072 qca6426 sc8280xp-ab wcn3990_firmware qrb5165n_firmware qca9984_firmware wcd9385_firmware wcd9326_firmware ipq8074a sm7325-af qcn6102_firmware qcn9011_firmware sa8155 snapdragon_x55_5g_modem-rf_system qcn5122_firmware sdx55_firmware qcn6023_firmware sm7250p_firmware qrb5165n qca6584au snapdragon_x65_5g_modem-rf_system_firmware sm6225 ipq8174 qcn5052 sm8250_firmware qcn6112_firmware sm8250-ac wcn3988_firmware 315_5g_iot_modem qcn9074 qca6421 qca8085 sm7250-aa sa8195p sm4375_firmware wcd9326 wcd9335 qcm4490 qcn6023 qcs4290_firmware qca8085_firmware sxr2130_firmware qcs6490_firmware sm7150-ab qca6390 qca9898_firmware wcd9375 aqt1000 sc8180x\+sdx55_firmware sm6250_firmware snapdragon_662_mobile_platform sm8150 ipq5010_firmware ipq8074a_firmware wsa8815_firmware sd865_5g qca6595 ipq8065_firmware sxr1230p_firmware qcn5154 qca8075_firmware sc8180xp-ac sxr2130 wcn685x-5_firmware qcn6132_firmware qcn9003_firmware qca9888 qca6310_firmware ipq8070a_firmware qca6574_firmware qca9886 sm7325p_firmware sxr2230p snapdragon_xr2_5g_platform_firmware qca6574a_firmware qrb5165m sm7315 snapdragon_x55_5g_modem-rf_system_firmware sc8280xp-ab_firmware qcn6102 snapdragon_auto_4g_modem csrb31024_firmware qcm6490_firmware wsa8832_firmware qcn9070_firmware wcn685x-5 ipq6028_firmware ipq8072a_firmware sc8180xp-af_firmware qca9889_firmware qcn5122 qcs8250_firmware sm7250-aa_firmware sc8180x-aa_firmware sm8150-ac_firmware qcn5022 sc8180x-aa sm8350-ac sc8180x-af_firmware qca1064_firmware wcn6740 sm6150-ac snapdragon_x50_5g_modem-rf_system qca8075 qcn6024 qcn9022 qcn9002_firmware ipq6000_firmware sdm660_firmware qca2066 sa6150p_firmware 315_5g_iot_modem_firmware sc8180x-ab_firmware qca6431_firmware wcd9360_firmware qca4024_firmware immersive_home_318_platform_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6335 qca2062 sm8350 csra6620_firmware csra6640_firmware apq5053-aa_firmware wcn685x-1 sm7350-ab_firmware qca6554a_firmware qam8295p ipq8076a qca8386_firmware qca8084_firmware sm7150-ac qca6428 sm7325-ae qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware sa6155_firmware sm6225-ad wcd9360 snapdragon_xr2\+_gen_1_platform qca6438_firmware sc8180xp-af qca6678aq_firmware sm6225-ad_firmware qrb5165m_firmware ipq5028 qrb5165_firmware ipq4029_firmware qca6698aq ipq6010 sd662_firmware sm7250-ab_firmware qcn6132 sw5100 qca6436 sa6155p wcd9341 ipq8068_firmware qca2066_firmware qca6431 sc8180xp-ab_firmware ipq9008_firmware wcn3910_firmware sm8250-ac_firmware wsa8830_firmware sd855_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3988 qca6438 sm4250-aa_firmware sa8195p_firmware qca9898 sa8295p_firmware ipq4028 qca8337_firmware wcd9380_firmware ipq8072a sw5100p ipq8076a_firmware snapdragon_w5\+_gen_1_wearable_platform qca6564au ipq9008 qcn5164 sc8180xp-aa qcn5054_firmware sm7150-aa_firmware qca8072_firmware sc8180x-ac_firmware qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware sm7225 wcn3910 qca9986_firmware qca6426_firmware sm4450 qca9984 sc8180x-ad qcn9024 snapdragon_xr2\+_gen_1_platform_firmware ipq8064_firmware sm7150-aa snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware sm7125 snapdragon_xr2_5g_platform sm7150-ab_firmware qrb5165 sm8350_firmware ipq8070 sdm660 wsa8832 sc8180xp-ac_firmware qsm8250 ipq6018 qcs4490 qca6595_firmware sa8145p immersive_home_214_platform_firmware qca2064 sm4350-ac_firmware sd888_firmware sa8155p ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware snapdragon_662_mobile_platform_firmware qcn9070 sa8145p_firmware qcs2290_firmware wcn785x-5 csra6620 qcn9072 sm7250-ac_firmware qca8386 sc8280xp-bb_firmware qca6390_firmware ipq8069_firmware ipq6000 sd730_firmware wcd9370 ssg2115p qcn5152_firmware qca6584au_firmware qcn9000_firmware sm8450 sm8250-ab sd_8cx_firmware immersive_home_216_platform immersive_home_316_platform immersive_home_318_platform qca2065 sd662 qcn5124_firmware qam8295p_firmware qca1064 qcn6100_firmware qca8082_firmware qca6595au sm7325-af_firmware qca6436_firmware sm4350-ac snapdragon_w5\+_gen_1_wearable_platform_firmware ipq5010 qca6564au_firmware sa6155p_firmware qca6310 qcn9274 qcn9001 qca9990 qcs6490 sa6145p_firmware sm6250 wsa8810_firmware sm8450_firmware sc7180-ad snapdragon_ar2_gen_1_platform_firmware sg4150p qca8081 ipq8071a ipq8071a_firmware wcd9385 qca2065_firmware sc8180x-ac ar8035 csr8811 qcn9100_firmware qcm6490 wsa8835_firmware sm7350-ab sa4150p sg4150p_firmware wcn785x-1 qcm4325 qca8072 qcm2290_firmware apq5053-aa wcn3990 qcn9000 qca6554a ar9380_firmware sm8350-ac_firmware sm8150-ac qcn9012 sd888 qcn6122_firmware wsa8835 sc7180-ad_firmware snapdragon_auto_5g_modem-rf sm6250p ssg2125p_firmware ipq4018 qca6574a qca9889 sc8180x-af sm7325p ipq8074 wcn6750 qca9994_firmware qcn9003 ipq8076_firmware sm7150-ac_firmware sm7250-ab sd855 sm4125_firmware ipq8076 qcn5021 ipq8069 qcn5152 wcn785x-5_firmware sd460 qca6391 sm8250-ab_firmware aqt1000_firmware qcn9100 qcm4490_firmware qcm4290 qcn9011 sm6225_firmware ipq8074_firmware qca6574au sa8155p_firmware ipq9574 wcd9341_firmware wsa8810 sm7250-ac snapdragon_ar2_gen_1_platform snapdragon_675_mobile_platform ipq6010_firmware qca6696 sm4350 sm7125_firmware sa6150p sc8180xp-ab qcn9022_firmware qca9990_firmware ipq8070a qcn6100 qcn9072_firmware sc8180x-ad_firmware sm7250p ipq8071_firmware qcn9074_firmware sw5100_firmware ipq4029 Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2019-14135

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.43%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4010, QCA6174A, QCA6574AU, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS405, QCS605, SA6155P, Saipan, SDA845, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130

Product-qca9377_firmware mdm9640_firmware msm8996au_firmware sdm845 sdx24 mdm9650 sm7150_firmware sm6150 msm8996au sm7150 qca4010_firmware apq8009_firmware sdm670 qcs605_firmware mdm9206 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware qca6584au_firmware ipq8074 sda845_firmware qca9377 qcn7605 mdm9206_firmware qcs605 qca9886 mdm9640 mdm9650_firmware qca6574au_firmware sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 sdm850_firmware qca6584au sa6155p_firmware sdx20 sdm660 mdm9607_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware qca4010 sa6155p qca8081 mdm9207c_firmware mdm9207c qca6174a_firmware qca9886_firmware sm8150_firmware apq8096au qcs405_firmware apq8053 apq8096au_firmware saipan_firmware sm6150_firmware sm8150 sdx20_firmware sdm850 apq8017 saipan qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-190

Integer Overflow or Wraparound

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14028

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Buffer overwrite during memcpy due to lack of check on SSID length validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS404, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130