ByteOS

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product

Versions

Affected

APQ8009, APQ8009W, APQ8017, APQ8053, APQ8064AU, APQ8076, APQ8096AU, AQT1000, AR7420, AR8031, AR8035, AR9380, CSR6030, CSR8811, CSRA6620, CSRA6640, CSRB31024, FSM10055, FSM10056, IPQ4018, IPQ4019, IPQ4028, IPQ4029, IPQ5010, IPQ5018, IPQ6000, IPQ6005, IPQ6010, IPQ6018, IPQ6028, IPQ8064, IPQ8065, IPQ8068, IPQ8069, IPQ8070, IPQ8070A, IPQ8071, IPQ8071A, IPQ8072, IPQ8072A, IPQ8074, IPQ8074A, IPQ8076, IPQ8076A, IPQ8078, IPQ8078A, IPQ8173, IPQ8174, MDM9206, MDM9230, MDM9250, MDM9330, MDM9607, MDM9626, MDM9628, MDM9630, MDM9640, MDM9650, MSM8909W, MSM8917, MSM8937, MSM8953, MSM8996AU, PM8937, PMP8074, QCA4020, QCA4024, QCA6174, QCA6174A, QCA6310, QCA6320, QCA6335, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6428, QCA6430, QCA6431, QCA6436, QCA6438, QCA6564, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584, QCA6584AU, QCA6595, QCA6595AU, QCA6694, QCA6696, QCA7500, QCA7520, QCA7550, QCA8072, QCA8075, QCA8081, QCA8337, QCA9367, QCA9377, QCA9379, QCA9531, QCA9558, QCA9561, QCA9563, QCA9880, Q ...[truncated*]

Problem Types

Type	CWE ID	Description
text	N/A	Improper Restriction of Operations within the Bounds of a Memory Buffer in Boot Kernel

Type: text

CWE ID: N/A

Description: Improper Restriction of Operations within the Bounds of a Memory Buffer in Boot Kernel

Metrics

Version	Base score	Base severity	Vector
3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:09 Jun, 2021 | 07:15

Updated At:17 Jun, 2021 | 14:58

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 4.6

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

>>apq8009_firmware>>-

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

>>apq8009>>-

cpe:2.3:o:qualcomm:apq8009w_firmware:-:*:*:*:*:*:*:*

>>apq8009w_firmware>>-

cpe:2.3:h:qualcomm:apq8009w:-:*:*:*:*:*:*:*

>>apq8009w>>-

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

>>apq8017_firmware>>-

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

>>apq8017>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

>>apq8053_firmware>>-

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

>>apq8053>>-

cpe:2.3:o:qualcomm:apq8064au_firmware:-:*:*:*:*:*:*:*

>>apq8064au_firmware>>-

cpe:2.3:h:qualcomm:apq8064au:-:*:*:*:*:*:*:*

>>apq8064au>>-

cpe:2.3:o:qualcomm:apq8076_firmware:-:*:*:*:*:*:*:*

>>apq8076_firmware>>-

cpe:2.3:h:qualcomm:apq8076:-:*:*:*:*:*:*:*

>>apq8076>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

>>apq8096au_firmware>>-

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

>>apq8096au>>-

cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*

>>aqt1000_firmware>>-

cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

>>aqt1000>>-

cpe:2.3:o:qualcomm:ar7420_firmware:-:*:*:*:*:*:*:*

>>ar7420_firmware>>-

cpe:2.3:h:qualcomm:ar7420:-:*:*:*:*:*:*:*

>>ar7420>>-

cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*

>>ar8031_firmware>>-

cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*

>>ar8031>>-

cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*

>>ar8035_firmware>>-

cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

>>ar8035>>-

cpe:2.3:o:qualcomm:ar9380_firmware:-:*:*:*:*:*:*:*

>>ar9380_firmware>>-

cpe:2.3:h:qualcomm:ar9380:-:*:*:*:*:*:*:*

>>ar9380>>-

cpe:2.3:o:qualcomm:csr6030_firmware:-:*:*:*:*:*:*:*

>>csr6030_firmware>>-

cpe:2.3:h:qualcomm:csr6030:-:*:*:*:*:*:*:*

>>csr6030>>-

cpe:2.3:o:qualcomm:csr8811_firmware:-:*:*:*:*:*:*:*

>>csr8811_firmware>>-

cpe:2.3:h:qualcomm:csr8811:-:*:*:*:*:*:*:*

>>csr8811>>-

cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*

>>csra6620_firmware>>-

cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:*

>>csra6620>>-

cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*

>>csra6640_firmware>>-

cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:*

>>csra6640>>-

cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*

>>csrb31024_firmware>>-

cpe:2.3:h:qualcomm:csrb31024:-:*:*:*:*:*:*:*

>>csrb31024>>-

cpe:2.3:o:qualcomm:fsm10055_firmware:-:*:*:*:*:*:*:*

>>fsm10055_firmware>>-

cpe:2.3:h:qualcomm:fsm10055:-:*:*:*:*:*:*:*

>>fsm10055>>-

cpe:2.3:o:qualcomm:fsm10056_firmware:-:*:*:*:*:*:*:*

>>fsm10056_firmware>>-

cpe:2.3:h:qualcomm:fsm10056:-:*:*:*:*:*:*:*

>>fsm10056>>-

cpe:2.3:o:qualcomm:ipq4018_firmware:-:*:*:*:*:*:*:*

>>ipq4018_firmware>>-

cpe:2.3:h:qualcomm:ipq4018:-:*:*:*:*:*:*:*

>>ipq4018>>-

cpe:2.3:o:qualcomm:ipq4019_firmware:-:*:*:*:*:*:*:*

>>ipq4019_firmware>>-

cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:*

>>ipq4019>>-

cpe:2.3:o:qualcomm:ipq4028_firmware:-:*:*:*:*:*:*:*

>>ipq4028_firmware>>-

cpe:2.3:h:qualcomm:ipq4028:-:*:*:*:*:*:*:*

>>ipq4028>>-

cpe:2.3:o:qualcomm:ipq4029_firmware:-:*:*:*:*:*:*:*

>>ipq4029_firmware>>-

cpe:2.3:h:qualcomm:ipq4029:-:*:*:*:*:*:*:*

>>ipq4029>>-

cpe:2.3:o:qualcomm:ipq5010_firmware:-:*:*:*:*:*:*:*

>>ipq5010_firmware>>-

cpe:2.3:h:qualcomm:ipq5010:-:*:*:*:*:*:*:*

>>ipq5010>>-

cpe:2.3:o:qualcomm:ipq5018_firmware:-:*:*:*:*:*:*:*

>>ipq5018_firmware>>-

cpe:2.3:h:qualcomm:ipq5018:-:*:*:*:*:*:*:*

>>ipq5018>>-

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin	product-security@qualcomm.com	Patch Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin

Source: product-security@qualcomm.com

Resource:

Patch

Vendor Advisory

Similar CVEs

2541Records found

CVE-2023-33066

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.07% / 21.18%

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in Audio

Memory corruption in Audio while processing RT proxy port register driver.

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CVE-2023-33076

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-5.9||MEDIUM

EPSS-0.03% / 8.60%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-17 Jun, 2025 | 21:29

Configuration Issue in Core

Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-16

Not Available

CVE-2023-33067

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 4.81%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in Audio

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CVE-2023-33030

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.06% / 18.61%

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-03 Jun, 2025 | 14:46

Buffer Copy without Checking Size of Input in HLOS

Memory corruption in HLOS while running playready use-case.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33059

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.11%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-16 Dec, 2025 | 18:23

Buffer Copy Without Checking Size of Input in Audio

Memory corruption in Audio while processing the VOC packet data from ADSP.

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33055

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.11%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-16 Dec, 2025 | 18:23

Buffer Copy Without Checking Size of Input in Audio

Memory Corruption in Audio while invoking callback function in driver from ADSP.

Product-qcm8550_firmware qcs410_firmware sa6150p_firmware sd865_5g sw5100p qca6595 qcs610_firmware wcd9335 wcd9370 qca8081_firmware qca6696 sm7250-ab snapdragon_x50_5g_modem-rf_system wcd9340_firmware wcd9341_firmware wcd9395_firmware qcc710_firmware qca6426 wcn6740_firmware sa4150p sm7325-ae_firmware qca8337 qca6426_firmware wcd9395 qca6574au_firmware wcn785x-5 qam8295p sm8150_firmware wcd9341 qca6574au wcd9390 snapdragon_x12_lte_modem wsa8810_firmware wsa8845h_firmware csra6640 wcn3660b_firmware sm8150-ac sm6375_firmware video_collaboration_vc1_platform_firmware sa4155p sm8350 qcm6125_firmware qcc710 sm6375 sm7250-aa_firmware sdm439_firmware video_collaboration_vc1_platform qfw7114 wcd9385_firmware qca6421 snapdragon_x55_5g_modem-rf_system qam8255p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p qca6421_firmware qcm6125 wsa8810 qam8650p video_collaboration_vc5_platform_firmware snapdragon_8\+_gen_2_mobile_platform sm8350-ac qca6595au sm7315_firmware sm7325_firmware wcd9326_firmware sa6155p_firmware wsa8840 qcs8550_firmware qfw7124_firmware qca6436_firmware qcn9012 snapdragon_8_gen_2_mobile_platform wcn3910_firmware snapdragon_7c\+_gen_3_compute_firmware sm4125_firmware sm8250-ac_firmware qca6420 wcn3910 wcd9370_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_660_mobile_platform wcn3660b qca6574a sm7325-ae qca6174a sa8195p wcd9340 qcs8250_firmware qcm2290 sm6225 qcm6490 sm8150-ac_firmware sm8550p_firmware wcn3998_firmware qcm8550 wcn3988 qca6574 sm7325-af snapdragon_x75_5g_modem-rf_system qca6430_firmware qcn9011 wsa8845h wcd9326 sa6150p sm7250-aa qcs410 qcm2290_firmware sa8155p_firmware wcn685x-1_firmware sa8155p wsa8830 snapdragon_662_mobile_platform sm8550p sa6145p sa8255p_firmware wcn785x-1_firmware ar8035 qrb5165m_firmware qcm4325 qcn6224 qca6698aq wcn3950_firmware qrb5165n sm7250-ac wcn685x-1 sa8145p_firmware sm7325p_firmware wcn3680b sa8150p_firmware snapdragon_w5\+_gen_1_wearable_platform video_collaboration_vc3_platform_firmware wcn3990 qcs6490 qcs8250 wsa8830_firmware qcn6224_firmware qca6431 wsa8845_firmware sd660_firmware sm6350 sxr2130_firmware ar8035_firmware qrb5165m sm8250-ab_firmware sa4150p_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware sd888_firmware snapdragon_662_mobile_platform_firmware qcs6125_firmware sm6225_firmware sm7325-af_firmware wsa8815_firmware sa8195p_firmware sm8250-ab qca8337_firmware qcm4290 snapdragon_x12_lte_modem_firmware sm7325 sg8275p_firmware qca9377_firmware qcm6490_firmware sm8350-ac_firmware sm7250p_firmware sm4125 wcn785x-5_firmware wcn3950 snapdragon_xr2_5g_platform sm4250-aa qcs6125 apq5053-aa_firmware qca6797aq_firmware snapdragon_7c\+_gen_3_compute snapdragon_xr2\+_gen_1_platform_firmware sm7350-ab_firmware wcn3991 sa8295p_firmware apq5053-aa sa4155p_firmware sm7250p qcn6274_firmware sd888 qcn9011_firmware sw5100_firmware wcn685x-5 wcn6740 sm6225-ad_firmware qfw7114_firmware qca6595_firmware qcs7230 sm8250-ac sm8250_firmware sm7225 wcd9380 sa6145p_firmware qam8255p snapdragon_xr2_5g_platform_firmware sa8150p sm7350-ab snapdragon_auto_5g_modem-rf_firmware qrb5165_firmware sm8350_firmware sm6225-ad sm4350-ac sw5100 video_collaboration_vc3_platform aqt1000 sm8150 wcn3991_firmware qam8295p_firmware sd855 qca6431_firmware sm7225_firmware wcn3990_firmware sm7315 qca6698aq_firmware qcs2290 wcd9385 qcs2290_firmware wcn3615 sa8255p qcs7230_firmware qcs4290 wcd9390_firmware wcn6750 qca6430 sg8275p wcn6750_firmware sdx55_firmware snapdragon_auto_5g_modem-rf wcn3615_firmware sm7250-ab_firmware sxr2130 csra6640_firmware snapdragon_xr2\+_gen_1_platform qca6174a_firmware sm7325p qam8650p_firmware wcn3998 video_collaboration_vc5_platform qca6420_firmware aqt1000_firmware qcs6490_firmware wcn3980_firmware sd855_firmware wcd9335_firmware qcn6274 qca6436 qfw7124 qrb5165n_firmware qca6595au_firmware qca6391_firmware wsa8835 wsa8840_firmware sw5100p_firmware sm4250-aa_firmware sm8250 qca6696_firmware qcs4290_firmware wcd9380_firmware qca6574_firmware wsa8815 csra6620 qca8081 sd660 sg4150p sm4375 qam8775p qca6797aq qca9377 sm4375_firmware qcm4325_firmware qca6574a_firmware sdx55 sdm439 qcm4290_firmware sm6350_firmware wcd9375_firmware qca6391 qrb5165 wcn785x-1 qualcomm_215_mobile_platform qcn9012_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware csra6620_firmware sa8295p snapdragon_x50_5g_modem-rf_system_firmware qcs8550 qam8775p_firmware sd865_5g_firmware qualcomm_215_mobile_platform_firmware wcd9375 wcn685x-5_firmware wcn3988_firmware sa8145p sm4350-ac_firmware wsa8835_firmware snapdragon_660_mobile_platform_firmware snapdragon_x75_5g_modem-rf_system_firmware sm7250-ac_firmware wcn3980 wcn3680b_firmware qcs610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33034

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.33%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Signed-to-unsigned conversion error in Audio

Memory corruption while parsing the ADSP response command.

Product-qcs410_firmware sa6150p_firmware qca6595 qcs610_firmware wcd9335 wcd9370 qca6696 qrb5165m wcd9341_firmware sa4150p_firmware sd888_firmware wcn6740_firmware sa4150p sm7325-af_firmware wsa8815_firmware sm7325-ae_firmware sa8195p_firmware sm7325 qcm6490_firmware qca6574au_firmware sm8350-ac_firmware qam8295p wcd9341 qca6574au flight_rb5_5g_platform wcn3950 wsa8810_firmware csra6640 apq5053-aa_firmware snapdragon_7c\+_gen_3_compute sm7350-ab_firmware wcn3991 sa8295p_firmware sm6375_firmware apq5053-aa sa4155p_firmware video_collaboration_vc1_platform_firmware sa4155p sm8350 sd888 qcn9011_firmware sm6375 wcn685x-5 wcn6740 qca6595_firmware video_collaboration_vc1_platform wcd9385_firmware wcd9380 sa6145p_firmware sa8150p sa6155p sm7350-ab sm8350_firmware wsa8810 sm4350-ac sm8350-ac video_collaboration_vc3_platform qca6595au sm7315_firmware sm7325_firmware sa6155p_firmware wcn3991_firmware qam8295p_firmware sm7315 qca6698aq_firmware wcd9385 qcn9012 snapdragon_7c\+_gen_3_compute_firmware wcn6750 wcn6750_firmware wcd9370_firmware sm7325-ae sa8195p csra6640_firmware sm7325p qcm6490 wcn3998 wcn3998_firmware wcn3988 qcs6490_firmware wcd9335_firmware wcn3980_firmware qrb5165n_firmware sm7325-af wsa8835 qca6595au_firmware qca6391_firmware qcn9011 qca6696_firmware wcd9380_firmware sa6150p qcs410 sa8155p_firmware csra6620 wsa8815 sa8155p sm4375 wsa8830 sm4375_firmware sa6145p flight_rb5_5g_platform_firmware qrb5165m_firmware wcd9375_firmware robotics_rb5_platform qca6391 qcn9012_firmware qca6698aq wcn3950_firmware qrb5165n csra6620_firmware sa8295p robotics_rb5_platform_firmware wcn685x-1 sa8145p_firmware sm7325p_firmware wcd9375 wcn685x-5_firmware sa8150p_firmware wcn3988_firmware video_collaboration_vc3_platform_firmware sa8145p sm4350-ac_firmware wsa8835_firmware qcs6490 wcn3980 wsa8830_firmware wcn685x-1_firmware qcs610 Snapdragon

CWE ID-CWE-195

Signed to Unsigned Conversion Error

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33033

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.61%

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-21 May, 2025 | 14:06

Use of Out-of-range Pointer Offset in Audio

Memory corruption in Audio during playback with speaker protection.

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-11205

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.90%

7 Day CHG~0.00%

Published-12 Nov, 2020 | 10:00

Updated-04 Aug, 2024 | 11:28

u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155P, SA8195P, SDX55M, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2023-28560

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 5.84%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28565

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.53%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:01

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command streams through WMI interfaces.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28567

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.53%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:01

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command through WMI interfaces.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28550

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.61%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance

Memory corruption in MPP performance while accessing DSM watermark using external memory address.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28537

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.53%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:15

Updated-02 Aug, 2024 | 13:43

Integer Overflow or Wraparound in Audio

Memory corruption while allocating memory in COmxApeDec module in Audio.

CWE ID-CWE-190

Integer Overflow or Wraparound

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28570

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.02%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Copy without Checking Size of Input in Audio

Memory corruption while processing audio effects.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28574

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9||CRITICAL

EPSS-0.04% / 13.68%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-02 Aug, 2024 | 13:43

Improper Input Validation in Core

Memory corruption in core services when Diag handler receives a command to configure event listeners.

Product-qam8255p_firmware wsa8830 sxr2230p_firmware qca8337 qam8650p qfw7124 sg8275p_firmware wcn785x-5 qam8775p qru1052 qcn6224_firmware wsa8840 wcn3950_firmware qca6595au_firmware snapdragon_x70_modem-rf_system wcd9370 ssg2115p qdu1110 wcn685x-1 wcn3990_firmware snapdragon_8_gen_2_mobile_platform qamsrv1h wcd9385_firmware wcn3950 qcn6024_firmware qamsrv1h_firmware sa9000p_firmware qca6320_firmware snapdragon_835_mobile_pc_platform_firmware snapdragon_4_gen_2_mobile_platform qca6595au qca8081_firmware wsa8845h_firmware qfw7114 qca6310 snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware snapdragon_x70_modem-rf_system_firmware wsa8840_firmware qca6698aq qcs8550_firmware sc8380xp_firmware wcn3988_firmware qru1062_firmware srv1h wcd9340 wsa8810_firmware qcn6224 wsa8845h snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware snapdragon_x75_5g_modem-rf_system wcd9335 qdu1000_firmware qca8081 wcd9395_firmware qca6698aq_firmware qcm4490 wcn685x-1_firmware wcd9385 wcd9341 qam8775p_firmware sa8255p qca6696_firmware qca6797aq ar8035 qru1052_firmware wcd9390 qcc710_firmware wsa8830_firmware wcn3988 wsa8815_firmware wsa8835_firmware wcn6750_firmware snapdragon_8_gen_2_mobile_platform_firmware wcn785x-1 qca8337_firmware wcd9380_firmware ssg2125p wcn3990 qca6595 qru1032 qcm8550 snapdragon_835_mobile_pc_platform qdu1010_firmware qdx1011 qdu1000 wsa8835 sxr1230p_firmware qdu1110_firmware snapdragon_8\+_gen_2_mobile_platform_firmware qcn6274 wcd9380 snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware wcn685x-5_firmware sxr1230p sg8275p qca6310_firmware wcn6750 wcd9335_firmware qfw7114_firmware qru1062 wsa8845 sa8650p sa9000p wcd9340_firmware wsa8815 sxr2230p qca6320 qru1032_firmware wsa8845_firmware sc8380xp sd835 qcn9024 wcn785x-5_firmware qcm4490_firmware qcn6274_firmware qcs4490_firmware snapdragon_x65_5g_modem-rf_system sa8650p_firmware wsa8832_firmware snapdragon_x75_5g_modem-rf_system_firmware srv1h_firmware wcn685x-5 qca6797aq_firmware qdu1010 wcn785x-1_firmware qdx1011_firmware qcn9024_firmware wcd9341_firmware snapdragon_8\+_gen_2_mobile_platform wsa8810 wsa8832 qdx1010_firmware sm8550p snapdragon_ar2_gen_1_platform sd835_firmware qam8650p_firmware qcc710 qcs4490 qca6595_firmware wcd9395 qca6696 qcs8550 wcd9370_firmware sm8550p_firmware qdx1010 wcd9390_firmware qcn6024 qdu1210 ssg2115p_firmware qfw7124_firmware qam8255p qdu1210_firmware ar8035_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28558

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.19%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-02 Aug, 2024 | 13:43

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN handler while processing PhyID in Tx status handler.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28551

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.61%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28580

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.72%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN Host

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

Product-sw5100p qcs410_firmware sa6150p_firmware sa6155p_firmware qam8295p_firmware qcs610_firmware wcd9370 qca8081_firmware ar8035_firmware qca6696 wsa8830_firmware wcd9340_firmware qfw7124_firmware wcd9341_firmware qcc710_firmware wsa8815_firmware sa8195p_firmware wcd9370_firmware qca8337_firmware qca8337 wcn3660b qca6574au_firmware sa8195p qca6595au wcd9340 qam8295p wcd9341 qca6574au wcn3950 wsa8810_firmware wcn3988 wcn3980_firmware qcn6274 wcn3660b_firmware qfw7124 snapdragon_x75_5g_modem-rf_system wsa8835 qca6595au_firmware qca6391_firmware sw5100p_firmware sa8295p_firmware qca6696_firmware wcd9380_firmware sa6150p qcs410 sa8155p_firmware qca8081 wsa8815 video_collaboration_vc1_platform_firmware sa8155p wcn3680b_firmware wsa8830 qcn6274_firmware sa6145p qcc710 sw5100_firmware ar8035 qfw7114_firmware fastconnect_6900 fastconnect_7800_firmware qca6391 video_collaboration_vc1_platform qcn6224 qfw7114 wcn3950_firmware fastconnect_6900_firmware sa8295p snapdragon_8_gen_1_mobile_platform wcd9380 sa6145p_firmware fastconnect_7800 sa8145p_firmware wcn3680b sa8150p snapdragon_8_gen_1_mobile_platform_firmware sa8150p_firmware wcn3988_firmware sa6155p video_collaboration_vc3_platform_firmware sa8145p wsa8835_firmware wsa8810 snapdragon_x75_5g_modem-rf_system_firmware wcn3980 sw5100 video_collaboration_vc3_platform qcn6224_firmware qcs610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-24851

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.86%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN HOST

Memory Corruption in WLAN HOST while parsing QMI response message from firmware.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22070

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.18%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sc8180x\+sdx55 qcs2290 qca6595au_firmware sa6155 qca6335 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 wcd9371_firmware sd_8cx_gen2_firmware sm4125 sd720g wcn3950 sd_8_gen1_5g_firmware sd710_firmware sd460_firmware sm7315_firmware qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware sdx12_firmware wcn3998_firmware qca6420 wcd9360 sm7450_firmware sd680_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware qcs6125 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 sd765g sw5100 qca6436 sd680 wcn6851 sa6155p qcs603_firmware wcn7851_firmware mdm9250_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware sd_8cx wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware sa8195p_firmware sm8475 wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware sw5100p qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6320 mdm9650_firmware qca6426_firmware sd695 sd835 wcn3980_firmware sd730 sdx55m qca6421_firmware sm8475_firmware wcn6740_firmware sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sd695_firmware sdxr1 ar8031 qca6595_firmware qcs405_firmware sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sm8475p_firmware ar8035_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcs2290_firmware sd7c_firmware csrb31024 mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware sd662 sa8155 qca6320_firmware sdx55_firmware qca6595au wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware qca6310 sa515m_firmware qcs6490 wcn7851 sdxr2_5g sdm630 sa415m_firmware wcn3988_firmware sa6145p_firmware qca6421 sd712_firmware sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 sc8180x\+sdx55_firmware sm6250_firmware sdx20_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7450 qca6564a qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qca6595 sdx24 sd888 wsa8835 sd665_firmware sd888_5g sm6250p qca6574a wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 sa515m qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 qca6175a sd765 qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m wsa8832_firmware sdx20 sd480_firmware qca6574au sa8155p_firmware sd710 wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sd845 sm7250p sd720g_firmware sdx12 sw5100_firmware qcs410_firmware qca6175a_firmware sd850 sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22085

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 30.26%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-03 Aug, 2024 | 03:00

Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware sm6250p_firmware qcs610 sdx65 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sd632 wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g mdm9628 mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware qca4020 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware sa6155_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware qca9367_firmware wcn3999 qcs6125 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 sd765g qualcomm215_firmware sw5100 sd680 qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware msm8937 mdm9250_firmware wcn3660_firmware wcd9341 pm8937_firmware qca6696_firmware wcd9371 sd870_firmware sd750g wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware sd450 wcn3610 wcn3991 wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 msm8937_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m sm8475_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sdxr1 ar8031 apq8096au qcs405_firmware sdm630_firmware sd820_firmware qca6391_firmware wcd9370_firmware sd780g_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 wcn3660 sm8475p_firmware qca9379 qcm2290 wcn3991_firmware wsa8830 sd678 qcs2290_firmware mdm9628_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 pm8937 wcn7851 sd429 qcs6490 sdxr2_5g qca9367 sdm630 mdm9607_firmware wcn3988_firmware sd429_firmware sa6145p_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware msm8953_firmware msm8917_firmware wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 sm7450 apq8017 qca6564a qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd765 qca6574a_firmware sd768g_firmware sm7315 apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware mdm9626 qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sdx20 sd480_firmware mdm9626_firmware qca6574au sd710 sa8155p_firmware mdm9607 wcd9341_firmware qcm6125 wsa8810 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22063

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-1.42% / 80.26%

7 Day CHG~0.00%

Published-14 Dec, 2022 | 05:54

Updated-18 Apr, 2025 | 14:35

Memory corruption in Core

Memory corruption in Core due to improper configuration in boot remapper.

Product-mdm9640_firmware mdm9645 mdm9645_firmware qca6174_firmware wcn3990 qca6574au_firmware qca6574au qca6174a_firmware mdm9640 wcn3990_firmware qca6174a qca6574a apq8096au apq8096au_firmware qca6574a_firmware qca6174 Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-45542

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.29%

7 Day CHG+0.08%

Published-06 Jan, 2025 | 10:33

Updated-11 Aug, 2025 | 15:06

Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

Product-wsa8845_firmware qcc2076_firmware wsa8840 wcd9370 sc8180xp-aaab_firmware wcd9340_firmware wcd9385 sc8380xp wcd9341_firmware qca1064 qcn7606 snapdragon_7c_compute_platform_firmware qcn7605_firmware snapdragon_7c\+_gen_3_compute_firmware qcc2073_firmware fastconnect_6700 qca1064_firmware qca6420 sc8180xp-ad sc8280xp-abbb snapdragon_7c_gen_2_compute_platform_firmware qca6430 wsa8815_firmware wcd9370_firmware sc8180xp-ad_firmware qcn7605 qcc2076 qcm6490_firmware sc8180xp-aaab qcn7606_firmware qca6595au wcd9340 wcd9341 qcm6490 wsa8810_firmware wsa8845h_firmware qca2062 qca6420_firmware aqt1000_firmware qcs6490_firmware sc8180xp-acaf qca2064_firmware snapdragon_7c\+_gen_3_compute wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware qca2066_firmware qca6430_firmware fastconnect_6800_firmware qcs5430 wsa8845h wcd9380_firmware qcm5430 sm6250_firmware sc8180x-ad_firmware qcm5430_firmware sc8180x-acaf wsa8815 wsa8830 sc8180x\+sdx55_firmware qca2062_firmware qcc2073 sc8380xp_firmware qca2065 fastconnect_6800 qca1062 fastconnect_7800_firmware fastconnect_6900 wcd9375_firmware qca6391 qcs5430_firmware sc8180x\+sdx55 snapdragon_7c_gen_2_compute_platform wcd9385_firmware sm6250 fastconnect_6900_firmware wcd9380 qca1062_firmware fastconnect_6200 sc8280xp-abbb_firmware fastconnect_7800 sc8180x-acaf_firmware wcd9375 snapdragon_7c_compute_platform wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware qca2064 sc8180x-ad sc8180x-aaab wsa8810 sc8180x-aaab_firmware wsa8835_firmware qca2066 qcs6490 sc8180xp-acaf_firmware fastconnect_6200_firmware qca2065_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2319

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 28.14%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2299

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.64%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:49

An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM660, SDX20, SDX24

Product-qca9377_firmware sd_850 mdm9150_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdx24 mdm9650 sd_636 msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware ipq4019_firmware mdm9206 sd_425_firmware qca9379_firmware qca6174a sdx24_firmware sd_625_firmware ipq8074 sd_450 qca9377 sd_845 mdm9206_firmware qcs605 sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware ipq8064 sd_210_firmware sd_600 qca8081_firmware sd_205_firmware ipq8064_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sd_625 ipq8074_firmware qca6574au sd_820_firmware sd_210 mdm9607 sd_636_firmware qca8081 mdm9150 qca6174a_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sd_712_firmware sd_430 ipq4019 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2304

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 31.19%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 18:49

Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, QCN7605, QCS405, QCS605, SDA845, SDM660, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2019-2292

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.64%

7 Day CHG~0.00%

Published-22 Jul, 2019 | 13:47

Updated-04 Aug, 2024 | 18:42

Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9650, MSM8996AU, QCA6574AU, QCS405, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 665, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-22386

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.68%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN HOST

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-22383

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.02%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Use After Free in Camera

Memory Corruption in camera while installing a fd for a particular DMA buffer.

Product-sw5100p qcs410_firmware sa6150p_firmware sd865_5g snapdragon_865_5g_mobile_platform_firmware qcs8155_firmware c-v2x_9150_firmware sa6155p_firmware qam8295p_firmware sd855 qcs610_firmware sxr2130_firmware wcd9370 wsa8830_firmware qca6696 snapdragon_870_5g_mobile_platform_firmware qca6436_firmware wcd9341_firmware snapdragon_wear_4100\+_platform_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware wcn3610_firmware qca6426 snapdragon_855\+\/860_mobile_platform_firmware fastconnect_6700 wcn3610 qca6420 snapdragon_865\+_5g_mobile_platform_firmware qcn9074 qca6430 wsa8815_firmware sa8195p_firmware wcd9370_firmware qca8337_firmware sdx55_firmware qca8337 qca6426_firmware snapdragon_x55_5g_modem-rf_system_firmware wcn3660b sxr2130 qca6574au_firmware sa8195p qam8295p wcd9341 qca6574au snapdragon_855_mobile_platform wcn3950 wsa8810_firmware snapdragon_xr2_5g_platform snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware wcn3988 qcs6490_firmware sd855_firmware wcn3980_firmware wcn3660b_firmware qca6436 wsa8835 qca6391_firmware qca6430_firmware snapdragon_870_5g_mobile_platform sw5100p_firmware fastconnect_6800_firmware sa8295p_firmware qca6696_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware sa6150p qcs410 sa8155p_firmware wsa8815 wcn3680b_firmware video_collaboration_vc1_platform_firmware sa8155p wsa8830 c-v2x_9150 sa6145p qcn9074_firmware sw5100_firmware sdx55 qsm8250_firmware fastconnect_6800 fastconnect_6900 qca6391 video_collaboration_vc1_platform wcn3950_firmware snapdragon_x55_5g_modem-rf_system fastconnect_6900_firmware sa8295p wcd9380 sa6145p_firmware fastconnect_6200 wcn3680b sa8145p_firmware snapdragon_xr2_5g_platform_firmware sd865_5g_firmware sa8150p qcs8155 sa8150p_firmware snapdragon_855\+\/860_mobile_platform snapdragon_w5\+_gen_1_wearable_platform wcn3988_firmware sa6155p fastconnect_6700_firmware video_collaboration_vc3_platform_firmware sa8145p snapdragon_wear_4100\+_platform wsa8835_firmware wsa8810 qcs6490 wcn3980 snapdragon_865\+_5g_mobile_platform qsm8250 fastconnect_6200_firmware sw5100 video_collaboration_vc3_platform aqt1000 qcs610 Snapdragon

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21628

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.53%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:39

Updated-02 Aug, 2024 | 09:44

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL

Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-43049

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 23.88%

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:28

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.

Product-fastconnect_7800 wcd9380_firmware wsa8830 sdm429w wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware qcc2073 wsa8835 wsa8840 sdm429w_firmware fastconnect_6700_firmware snapdragon_7c\+_gen_3_compute wcd9380 fastconnect_7800_firmware wsa8845h fastconnect_6700 snapdragon_8cx_gen_3_compute_platform wcd9385 qcc2076_firmware wcd9385_firmware wsa8845 qcc2073_firmware wcn3660b wsa8830_firmware qcc2076 wsa8845_firmware wcn3620_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3660b_firmware wsa8835_firmware sc8380xp snapdragon_429_mobile_platform_firmware wcn3620 wsa8845h_firmware snapdragon_429_mobile_platform snapdragon_8cx_gen_3_compute_platform_firmware Snapdragon wcd9380_firmware qcc2076_firmware wsa8840_firmware wcd9385_firmware fastconnect_6900_firmware qcc2073_firmware sc8380xp_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wsa8845h_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-43050

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 23.88%

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:28

Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21643

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.07% / 20.66%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-02 Aug, 2024 | 09:44

Untrusted Pointer Dereference in Automotive

Memory corruption due to untrusted pointer dereference in automotive during system call.

CWE ID-CWE-822

Untrusted Pointer Dereference

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21649

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 9.66%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-02 Aug, 2024 | 09:44

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Memory corruption in WLAN while running doDriverCmd for an unspecific command.

Product-wcn3991_firmware wsa8830 sa6150p_firmware sa8145p_firmware qcs610 qca8337 qca6431_firmware mdm9628_firmware mdm9650 wcn3950_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware wcd9370 qca6426 qca6584au_firmware sm4375 wcn3998 qca6554a_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 mdm9628 wcn3660b qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3610_firmware qca6420 qca6436_firmware qca6564au_firmware qca6584au sa6155p_firmware sdxr2_5g wcn3988_firmware qca6430 qcn9074 sa6145p_firmware qca6421 sa8195p wsa8810_firmware sm4375_firmware sw5100 qca6436 wcn6851 sa6155p wcd9385 wcd9341 qca6431 qca6696_firmware sd870_firmware qca6390 wcd9375 aqt1000 sa8150p wsa8830_firmware sda429w sd855_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qca6564a wcn3610 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sw5100p qca6554a sd865_5g qca6595 qca6564au qcc5100 sdx55m_firmware wsa8835 qca6574 wcd9380 qcs410 qca6574a qca6430_firmware wcn3980 qca6574_firmware sd855 wsa8815 wcn6850 mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 wcn3980_firmware qca6391 sdx55m qcc5100_firmware qca6421_firmware aqt1000_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware qca6564a_firmware wcd9341_firmware sd480 sd870 wsa8810 sw5100p_firmware qcs610_firmware sa6145p wcn3680b sd695_firmware apq8096au qca6595_firmware sa8145p qca6696 qca6391_firmware wcd9370_firmware sa6150p sdx55 apq8096au_firmware sa8155p sw5100_firmware qcn9074_firmware qcs410_firmware Snapdragon wcn3991_firmware qca8337_firmware sda429w_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware qca6431_firmware sdx55m_firmware mdm9628_firmware wcn3950_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware qca6584au_firmware qca6430_firmware qca6554a_firmware wcd9385_firmware sdxr2_5g_firmware qca6574_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware wcn3998_firmware wcn3980_firmware wcn3610_firmware qca6436_firmware qcc5100_firmware qca6421_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware sd480_firmware wcn6851_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware qca6564a_firmware wsa8810_firmware wcd9341_firmware sm4375_firmware sw5100p_firmware qcs610_firmware sd695_firmware qca6696_firmware qca6595_firmware sd870_firmware qca6391_firmware wcd9370_firmware apq8096au_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware qcn9074_firmware qcs410_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-43048

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 23.88%

7 Day CHG-0.02%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:27

Stack-based Buffer Overflow in Performance

Memory corruption when invalid input is passed to invoke GPU Headroom API call.

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21648

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 10.33%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-02 Aug, 2024 | 09:44

Integer Overflow to Buffer Overflow in RIL

Memory corruption in RIL while trying to send apdu packet.

CWE ID-CWE-680

Integer Overflow to Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21639

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 7.88%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Buffer Copy Without Checking the Size of Input in Audio

Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

Product-aqt1000_firmware snapdragon_w5\+_gen_1 sa6155p_firmware wsa8830 sw5100p sa4155p_firmware snapdragon_855\+\/860_firmware wcn3988_firmware qca6430 snapdragon_855 sa8155p_firmware wsa8835 sa8195p wsa8810_firmware wcd9341_firmware qca6420_firmware sw5100 wsa8810 sa6155p sw5100p_firmware snapdragon_855_firmware wcd9341 snapdragon_855\+\/860 qca6430_firmware wcn3980 sa4150p_firmware fastconnect_6200 aqt1000 sd855 wsa8815 sa8155p wsa8830_firmware sd855_firmware wcn3988 wsa8815_firmware wsa8835_firmware fastconnect_6200_firmware sa8195p_firmware sw5100_firmware wcn3980_firmware sa4155p qca6420 sa4150p snapdragon_w5\+_gen_1_firmware Snapdragon aqt1000_firmware sa6155p_firmware qca6430_firmware sa4155p_firmware sa4150p_firmware snapdragon_855_mobile_platform_firmware wcn3988_firmware wsa8830_firmware sa8155p_firmware sd855_firmware wsa8815_firmware wsa8835_firmware wsa8810_firmware fastconnect_6200_firmware wcd9341_firmware sa8195p_firmware qca6420_firmware sw5100_firmware wcn3980_firmware sw5100p_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21634

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.02%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-02 Aug, 2024 | 09:44

Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

Product-snapdragon_855\+\/860_mobile_platform_firmware wsa8830 wcd9380_firmware sa6150p_firmware wcn3990 sa8145p_firmware sw5100p sd865_5g fastconnect_6800 snapdragon_w5\+_gen_1_wearable_platform snapdragon_835_mobile_pc_platform snapdragon_870_5g_mobile_platform_firmware snapdragon_865_5g_mobile_platform wsa8835 wcd9380 sa8150p_firmware qca6420_firmware qca6595au_firmware snapdragon_wear_4100\+_platform_firmware snapdragon_855\+\/860_mobile_platform sxr2130 snapdragon_wear_4100\+_platform qca6426 wcn3990_firmware qca6310_firmware qca6430_firmware wcd9335_firmware wcn3980 fastconnect_6200 wcd9340_firmware wcn3660b sd855 wsa8815 qca6320 snapdragon_865\+_5g_mobile_platform snapdragon_xr2_5g_platform_firmware qca6426_firmware wcn3660b_firmware qca6320_firmware snapdragon_x55_5g_modem-rf_system qca6574au_firmware snapdragon_835_mobile_pc_platform_firmware wcn3680b_firmware fastconnect_6200_firmware qca6595au sd835 wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware aqt1000_firmware sa6155p_firmware qca6310 snapdragon_865\+_5g_mobile_platform_firmware snapdragon_870_5g_mobile_platform snapdragon_xr2_5g_platform fastconnect_6900 fastconnect_6900_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware wcd9340 sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 qca6436 wcd9335 sa6155p sw5100p_firmware sa6145p wcn3680b sd835_firmware sxr2130_firmware wcd9341 qca6696_firmware sa8145p qca6696 qca6391_firmware snapdragon_855_mobile_platform_firmware aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware sw5100_firmware fastconnect_6800_firmware snapdragon_855_mobile_platform wcn3610 Snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21633

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 7.88%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux

Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21635

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 7.88%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-38413

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.03% / 9.19%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:58

Improper Input Validation in Computer Vision

Memory corruption while processing frame packets.

Product-fastconnect_7800_firmware wsa8840 snapdragon_8_gen_3_mobile_firmware wsa8845_firmware wsa8845h_firmware wsa8845 snapdragon_8_gen_3_mobile wcd9395_firmware wcd9390 wsa8840_firmware wsa8845h wcd9395 fastconnect_7800 wcd9390_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21632

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.53%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:39

Updated-02 Aug, 2024 | 09:44

Stack-based Buffer Overflow in Automotive GPU

Memory corruption in Automotive GPU while querying a gsl memory node.

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-38420

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.8||HIGH

EPSS-0.03% / 9.73%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:56

Improper Input Validation in Hypervisor

Memory corruption while configuring a Hypervisor based input virtual device.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2251

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.00%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:42

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8016, APQ8096AU, APQ8098, MDM9205, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21654

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 4.69%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:23

Updated-02 Aug, 2024 | 09:44

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Memory corruption in Audio during playback session with audio effects enabled.

Product-mdm9150_firmware wsa8830 sda429w_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware qcs610 sw5100p msm8996au_firmware sd865_5g qca6564au qcc5100 sdx55m_firmware mdm9628_firmware wsa8835 msm8996au wcn3950_firmware wcd9380 sa8150p_firmware qca6420_firmware qca6390_firmware qcs410 wcd9370 qca6574a qca6426 qca6564a qca6430_firmware wcn3980 sa415m wcn3998 qam8295p sdxr2_5g_firmware wcn3950 mdm9628 wcn3660b sd855 wsa8815 wcn6850 qam8295p_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcn3998_firmware wcn3980_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware sdx55m sa8295p qcc5100_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware sdxr2_5g wcn6851_firmware sa415m_firmware wcn3988_firmware qca6430 qca6574au qcn9074 sa6145p_firmware sa8155p_firmware qca6564a_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 sd870 qca6436 wcn6851 sa6155p sw5100p_firmware qcs610_firmware mdm9150 qsm8250 sa6145p wcn3680b wcd9341 apq8096au qca6696_firmware sa8145p sd870_firmware qca6696 qca6391_firmware qca6390 wcd9370_firmware aqt1000 sa8150p sa6150p sdx55 apq8096au_firmware wsa8830_firmware sda429w sa8155p sd855_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware qcn9074_firmware qcs410_firmware sa8295p_firmware wcn3610 qsm8250_firmware Snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-38410

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.15% / 35.90%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-16 Nov, 2024 | 04:55

Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

Product-fastconnect_7800 wsa8830 wcd9380_firmware sdm429w qcs6490 qcm6490_firmware wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware qcc2073 wsa8840 wsa8835 sdm429w_firmware fastconnect_6700_firmware wcd9380 fastconnect_7800_firmware wsa8845h fastconnect_6700 video_collaboration_vc3_platform snapdragon_8cx_gen_3_compute_platform wcd9370 qcm5430 qcs5430 qcm5430_firmware wcd9385 video_collaboration_vc3_platform_firmware qcs6490_firmware qcc2076_firmware qcs5430_firmware wcd9385_firmware wsa8845 qcc2073_firmware wcd9375 wcd9370_firmware wcn3660b wsa8830_firmware qcc2076 wsa8845_firmware wcn3620_firmware qcm6490 wcn3660b_firmware wsa8835_firmware wcn3620 snapdragon_429_mobile_platform_firmware sc8380xp wsa8845h_firmware wcd9375_firmware snapdragon_429_mobile_platform snapdragon_8cx_gen_3_compute_platform_firmware Snapdragon qcm5430_firmware wcd9380_firmware qcs6490_firmware qcm6490_firmware qcc2076_firmware wsa8840_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware fastconnect_6900_firmware qcc2073_firmware wcd9370_firmware sc8380xp_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wcd9375_firmware wsa8845h_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21663

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 4.69%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-02 Aug, 2024 | 09:44

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display

Memory Corruption while accessing metadata in Display.

Product-sda429w_firmware wcd9380_firmware sa6150p_firmware wsa8830 sa8145p_firmware sw5100p qcc5100 wcn6856_firmware wsa8835 sd_8_gen1_5g wcd9380 sa8150p_firmware sd888_5g qca6420_firmware wcn6855_firmware qca6430_firmware wcn3980 wcn3998 wcd9385_firmware sd_8_gen1_5g_firmware sd855 wcn3660b wcn6850 wsa8815 wcn3660b_firmware wcn7850 qca6574au_firmware wcn3680b_firmware wcn3998_firmware wcn3980_firmware wcn3610_firmware qca6420 qcc5100_firmware aqt1000_firmware sa6155p_firmware wcn7851 wcn6851_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 wcn6855 wcn6851 sa6155p sw5100p_firmware wcn7851_firmware wcn6856 sa6145p wcn3680b wcd9385 wcd9341 qca6696_firmware sa8145p qca6696 aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sda429w sd855_firmware wsa8815_firmware wcn3988 wsa8835_firmware sd888_5g_firmware wcn6850_firmware wcn7850_firmware sa8195p_firmware sw5100_firmware wcn3610 Snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2246

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 26.39%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9205, MDM9640, MSM8996AU, QCA6574, QCS605, Qualcomm 215, SD 425, SD 427, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 mdm9640_firmware sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 sd_636 snapdragon_high_med_2016_firmware qca6574 msm8996au sd_820 sd_450_firmware sd_845_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_8cx_firmware mdm9205 sd_845 qcs605 qca6574_firmware mdm9640 sd_835_firmware sd_835 sda660 sxr1130_firmware sxr1130 sd_665_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sd_425 sdm660 sdm630 sd_710_firmware sd_435 sd_625 sd_820_firmware sd_636_firmware sd_439_firmware qualcomm_215_firmware sd_429_firmware sd_730 snapdragon_high_med_2016 sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware mdm9205_firmware sda660_firmware sd_8cx sd_427 sd_670 sd_435_firmware sd_710 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2238

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.82%

7 Day CHG~0.00%

Published-25 Jul, 2019 | 16:33

Updated-04 Aug, 2024 | 18:42

Lack of check of data type can lead to subsequent loop-expression potentially go negative and the condition will still evaluate to true leading to buffer underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 8CX, SXR1130