ByteOS

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product

Versions

Affected

AR8035, PM215, PM3003A, PM6125, PM6150, PM6150A, PM6150L, PM6350, PM640A, PM640L, PM640P, PM670, PM670L, PM7150A, PM7150L, PM7250, PM7250B, PM8005, PM8008, PM8009, PM8150A, PM8150B, PM8150C, PM8150L, PM8250, PM8350, PM8350B, PM8350BH, PM8350C, PM855, PM855B, PM855L, PM8909, PM8998, PMI632, PMI8998, PMK8002, PMK8003, PMK8350, PMM6155AU, PMM8155AU, PMM8195AU, PMM855AU, PMR525, PMR735A, PMR735B, PMW3100, PMX55, QAT3516, QAT3518, QAT3519, QAT3522, QAT3550, QAT3555, QAT5515, QAT5516, QAT5522, QAT5533, QAT5568, QBT1500, QBT2000, QCA6175A, QCA6390, QCA6391, QCA6421, QCA6426, QCA6431, QCA6436, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584AU, QCA6595, QCA6595AU, QCA6696, QCA8337, QCM4290, QCM6125, QCS4290, QCS605, QCS6125, QDM2301, QDM2302, QDM2305, QDM3301, QDM4643, QDM4650, QDM5620, QDM5621, QDM5650, QDM5652, QDM5670, QDM5671, QDM5677, QDM5679, QET4101, QET4200AQ, QET5100, QET5100M, QET6100, QET6105, QET6110, QFS2530, QFS2580, QFS2608, QFS2630, QLN1021AQ, QLN1031, QLN1036AQ, QLN4642, QLN ...[truncated*]

Problem Types

Type	CWE ID	Description
text	N/A	Improper Validation of Array Index in radio interface layer

Type: text

CWE ID: N/A

Description: Improper Validation of Array Index in radio interface layer

Metrics

Version	Base score	Base severity	Vector
3.1	5.9	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Version: 3.1

Base score: 5.9

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:07 May, 2021 | 09:15

Updated At:12 May, 2021 | 13:47

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	5.9	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 5.9

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Type: Primary

Version: 2.0

Base score: 4.6

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*

>>ar8035_firmware>>-

cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

>>ar8035>>-

cpe:2.3:o:qualcomm:pm215_firmware:-:*:*:*:*:*:*:*

>>pm215_firmware>>-

cpe:2.3:h:qualcomm:pm215:-:*:*:*:*:*:*:*

>>pm215>>-

cpe:2.3:o:qualcomm:pm3003a_firmware:-:*:*:*:*:*:*:*

>>pm3003a_firmware>>-

cpe:2.3:h:qualcomm:pm3003a:-:*:*:*:*:*:*:*

>>pm3003a>>-

cpe:2.3:o:qualcomm:pm6125_firmware:-:*:*:*:*:*:*:*

>>pm6125_firmware>>-

cpe:2.3:h:qualcomm:pm6125:-:*:*:*:*:*:*:*

>>pm6125>>-

cpe:2.3:o:qualcomm:pm6150_firmware:-:*:*:*:*:*:*:*

>>pm6150_firmware>>-

cpe:2.3:h:qualcomm:pm6150:-:*:*:*:*:*:*:*

>>pm6150>>-

cpe:2.3:o:qualcomm:pm6150a_firmware:-:*:*:*:*:*:*:*

>>pm6150a_firmware>>-

cpe:2.3:h:qualcomm:pm6150a:-:*:*:*:*:*:*:*

>>pm6150a>>-

cpe:2.3:o:qualcomm:pm6150l_firmware:-:*:*:*:*:*:*:*

>>pm6150l_firmware>>-

cpe:2.3:h:qualcomm:pm6150l:-:*:*:*:*:*:*:*

>>pm6150l>>-

cpe:2.3:o:qualcomm:pm6350_firmware:-:*:*:*:*:*:*:*

>>pm6350_firmware>>-

cpe:2.3:h:qualcomm:pm6350:-:*:*:*:*:*:*:*

>>pm6350>>-

cpe:2.3:o:qualcomm:pm640a_firmware:-:*:*:*:*:*:*:*

>>pm640a_firmware>>-

cpe:2.3:h:qualcomm:pm640a:-:*:*:*:*:*:*:*

>>pm640a>>-

cpe:2.3:o:qualcomm:pm640l_firmware:-:*:*:*:*:*:*:*

>>pm640l_firmware>>-

cpe:2.3:h:qualcomm:pm640l:-:*:*:*:*:*:*:*

>>pm640l>>-

cpe:2.3:o:qualcomm:pm640p_firmware:-:*:*:*:*:*:*:*

>>pm640p_firmware>>-

cpe:2.3:h:qualcomm:pm640p:-:*:*:*:*:*:*:*

>>pm640p>>-

cpe:2.3:o:qualcomm:pm670_firmware:-:*:*:*:*:*:*:*

>>pm670_firmware>>-

cpe:2.3:h:qualcomm:pm670:-:*:*:*:*:*:*:*

>>pm670>>-

cpe:2.3:o:qualcomm:pm670l_firmware:-:*:*:*:*:*:*:*

>>pm670l_firmware>>-

cpe:2.3:h:qualcomm:pm670l:-:*:*:*:*:*:*:*

>>pm670l>>-

cpe:2.3:o:qualcomm:pm7150a_firmware:-:*:*:*:*:*:*:*

>>pm7150a_firmware>>-

cpe:2.3:h:qualcomm:pm7150a:-:*:*:*:*:*:*:*

>>pm7150a>>-

cpe:2.3:o:qualcomm:pm7150l_firmware:-:*:*:*:*:*:*:*

>>pm7150l_firmware>>-

cpe:2.3:h:qualcomm:pm7150l:-:*:*:*:*:*:*:*

>>pm7150l>>-

cpe:2.3:o:qualcomm:pm7250_firmware:-:*:*:*:*:*:*:*

>>pm7250_firmware>>-

cpe:2.3:h:qualcomm:pm7250:-:*:*:*:*:*:*:*

>>pm7250>>-

cpe:2.3:o:qualcomm:pm7250b_firmware:-:*:*:*:*:*:*:*

>>pm7250b_firmware>>-

cpe:2.3:h:qualcomm:pm7250b:-:*:*:*:*:*:*:*

>>pm7250b>>-

cpe:2.3:o:qualcomm:pm8005_firmware:-:*:*:*:*:*:*:*

>>pm8005_firmware>>-

cpe:2.3:h:qualcomm:pm8005:-:*:*:*:*:*:*:*

>>pm8005>>-

cpe:2.3:o:qualcomm:pm8008_firmware:-:*:*:*:*:*:*:*

>>pm8008_firmware>>-

cpe:2.3:h:qualcomm:pm8008:-:*:*:*:*:*:*:*

>>pm8008>>-

cpe:2.3:o:qualcomm:pm8009_firmware:-:*:*:*:*:*:*:*

>>pm8009_firmware>>-

cpe:2.3:h:qualcomm:pm8009:-:*:*:*:*:*:*:*

>>pm8009>>-

cpe:2.3:o:qualcomm:pm8150a_firmware:-:*:*:*:*:*:*:*

>>pm8150a_firmware>>-

cpe:2.3:h:qualcomm:pm8150a:-:*:*:*:*:*:*:*

>>pm8150a>>-

cpe:2.3:o:qualcomm:pm8150b_firmware:-:*:*:*:*:*:*:*

>>pm8150b_firmware>>-

cpe:2.3:h:qualcomm:pm8150b:-:*:*:*:*:*:*:*

>>pm8150b>>-

cpe:2.3:o:qualcomm:pm8150c_firmware:-:*:*:*:*:*:*:*

>>pm8150c_firmware>>-

cpe:2.3:h:qualcomm:pm8150c:-:*:*:*:*:*:*:*

>>pm8150c>>-

cpe:2.3:o:qualcomm:pm8150l_firmware:-:*:*:*:*:*:*:*

>>pm8150l_firmware>>-

cpe:2.3:h:qualcomm:pm8150l:-:*:*:*:*:*:*:*

>>pm8150l>>-

cpe:2.3:o:qualcomm:pm8250_firmware:-:*:*:*:*:*:*:*

>>pm8250_firmware>>-

cpe:2.3:h:qualcomm:pm8250:-:*:*:*:*:*:*:*

>>pm8250>>-

Weaknesses

CWE ID	Type	Source
CWE-129	Primary	nvd@nist.gov

CWE ID: CWE-129

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

1190Records found

CVE-2020-3665

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.88%

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:44

A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of range in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, MSM8996, MSM8996AU, QCA6174A, QCA9377, QCA9379, SDM439, SDM636, SDM660, SDX20, SDX24, SM8150

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2020-3630

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.88%

7 Day CHG~0.00%

Published-02 Jun, 2020 | 15:05

Updated-04 Aug, 2024 | 07:37

Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8917, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA415M, SA6155P, Saipan, SC8180X, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-mdm9150_firmware kamorta_firmware qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sa415m apq8098 mdm9206_firmware qcs605 sdm429_firmware mdm9650_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware nicobar sa6155p_firmware msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 sdm710 qm215 mdm9607 sdm710_firmware sa6155p mdm9150 mdm9207c_firmware msm8996_firmware mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware apq8053 saipan_firmware sm6150_firmware apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware kamorta msm8996 saipan nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2025-21423

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 20.89%

7 Day CHG~0.00%

Published-07 Apr, 2025 | 10:15

Updated-19 Aug, 2025 | 17:07

Improper Validation of Array Index in Display

Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-53009

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.02% / 3.66%

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:48

Updated-11 Aug, 2025 | 15:06

Improper Validation of Array Index in Automotive Autonomy

Memory corruption while operating the mailbox in Automotive.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-49837

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.77%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-28 Feb, 2025 | 06:09

Improper Validation of Array Index in Automotive OS Platform

Memory corruption while reading CPU state data during guest VM suspend.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-49836

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.77%

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-05 Mar, 2025 | 04:55

Improper Validation of Array Index in Camera

Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.

Product-Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-49833

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.77%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:01

Improper Validation of Array Index in Camera

Memory corruption can occur in the camera when an invalid CID is used.

Product-fastconnect_7800_firmware sa7255p snapdragon_ar2_gen_1 wcn7860 qamsrv1m wcn7881_firmware qcs8550_firmware wcn7881 sa7775p_firmware sa8775p ssg2125p_firmware qam8775p sa8650p_firmware wcn3950_firmware sm8750 wcn6650 sa8255p wcd9370_firmware wcn3950 video_collaboration_vc3_platform_firmware sxr2230p wsa8845_firmware qcm8550_firmware snapdragon_8\+_gen_2_mobile wcn6755_firmware sxr2230p_firmware sm7635_firmware sd_8_gen1_5g_firmware wsa8845h ssg2115p_firmware wcn6450_firmware qcm8550 sa8650p sa8770p_firmware talynplus wcn3988 qca6698aq_firmware wcn7880_firmware wcd9395_firmware qamsrv1m_firmware sa8775p_firmware sm7635 talynplus_firmware wsa8835_firmware fastconnect_6900 wcn3988_firmware qcm4490 wcd9375_firmware wcd9385_firmware qam8650p_firmware wsa8810 snapdragon_8_gen_3_mobile_firmware qam8255p_firmware wcd9375 sa8620p_firmware sm6650 sa7255p_firmware qca6595_firmware sg8275p qamsrv1h wcn6740 wcd9380 video_collaboration_vc3_platform qamsrv1h_firmware wsa8832_firmware wcn7861_firmware snapdragon_4_gen_2_mobile wsa8830_firmware wcn6755 snapdragon_8_gen_2_mobile_firmware qca6595au_firmware qcs6490_firmware wcd9385 sa8255p_firmware wsa8840_firmware qca6595au qam8255p sxr2250p_firmware wsa8840 srv1h sm8550p_firmware sm7675 qca6595 wsa8845h_firmware qam8650p wsa8845 snapdragon_ar2_gen_1_firmware wcn6650_firmware sxr1230p_firmware sxr2330p wcd9380_firmware wcn6450 srv1m qam8775p_firmware sm8635p snapdragon_ar1_gen_1 sm8635p_firmware qcs4490 wcd9370 wcd9378 sm7675_firmware qcs4490_firmware sm8750p sa9000p snapdragon_4_gen_2_mobile_firmware wsa8835 sm8750p_firmware ssg2125p qca6678aq fastconnect_7800 qca6797aq_firmware snapdragon_8_gen_1_mobile snapdragon_8_gen_2_mobile wcn7880 wcd9378_firmware qca6797aq qcm4490_firmware sm7675p qcs8550 sxr2250p sm6650_firmware fastconnect_6700 snapdragon_8_gen_1_mobile_firmware sd_8_gen1_5g sm7675p_firmware snapdragon_ar1_gen_1_firmware wsa8810_firmware srv1m_firmware wsa8832 fastconnect_6700_firmware wcd9390_firmware sm8635 ssg2115p sm8635_firmware snapdragon_8_gen_3_mobile wsa8815 sxr1230p wcn7861 sa8620p sm8750_firmware wsa8830 wsa8815_firmware snapdragon_8\+_gen_2_mobile_firmware snapdragon_8\+_gen_1_mobile_firmware sa8770p wcn7860_firmware sg8275p_firmware srv1h_firmware qca6678aq_firmware qca6698aq fastconnect_6900_firmware qcs6490 sa9000p_firmware sm8550p snapdragon_8\+_gen_1_mobile wcd9390 sa7775p wcd9395 wcn6740_firmware sxr2330p_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-49843

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.77%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:02

Improper Validation of Array Index in Graphics_Linux

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.

Product-fastconnect_7800_firmware sm4635 wsa8840 wcn7860 sm7675 wsa8845h_firmware wcn7881_firmware video_collaboration_vc1_platform_firmware wsa8845 qcm6125 wcn7881 wcn6650_firmware wcd9380_firmware sxr2330p wcn6450 qca6391_firmware wcn3950_firmware qca6391 sm8750 sm8635p wcn6650 video_collaboration_vc5_platform wcn3980 wcd9370_firmware sm8635p_firmware snapdragon_480_5g_mobile wcn3950 snapdragon_w5\+_gen_1_wearable sw5100 wsa8845_firmware wcd9370 qcs7230_firmware wcd9378 sw5100p_firmware sm7675_firmware wcn6755_firmware video_collaboration_vc5_platform_firmware sm7635_firmware sm8750p wsa8835 sm8750p_firmware wsa8845h snapdragon_480_5g_mobile_firmware fastconnect_7800 wcn6450_firmware snapdragon_4_gen_1_mobile qcs8250_firmware snapdragon_695_5g_mobile wcn7880_firmware wcn3988 wcn7880 wcd9395_firmware sm4635_firmware qcm6125_firmware wcd9378_firmware qcs6125 sm7635 qcs7230 sm7675p sw5100_firmware wcn3988_firmware sm6650_firmware qcs8250 wcd9375_firmware sm7675p_firmware wsa8810_firmware wcd9385_firmware wsa8810 wsa8832 wcd9390_firmware sm8635 snapdragon_695_5g_mobile_firmware snapdragon_8_gen_3_mobile_firmware wcd9375 sm8635_firmware snapdragon_8_gen_3_mobile sm6650 wsa8815 qcs6125_firmware snapdragon_w5\+_gen_1_wearable_firmware fastconnect_6200_firmware wcn7861 sm8750_firmware wcd9380 wsa8830 snapdragon_480\+_5g_mobile_firmware snapdragon_480\+_5g_mobile wsa8815_firmware wsa8832_firmware wcn7861_firmware wcn7860_firmware sw5100p fastconnect_6200 wsa8830_firmware wcn6755 wcn3980_firmware video_collaboration_vc1_platform snapdragon_4_gen_1_mobile_firmware wcd9390 wcd9385 wsa8840_firmware wcd9395 wsa8835_firmware sxr2330p_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-49832

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.77%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:01

Improper Validation of Array Index in Camera

Memory corruption in Camera due to unusually high number of nodes passed to AXI port.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-49834

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.77%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:02

Improper Validation of Array Index in Camera

Memory corruption while power-up or power-down sequence of the camera sensor.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-45574

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.49%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:15

Improper Validation of Array Index in Camera Driver

Memory corruption during array access in Camera kernel due to invalid index from invalid command data.

Product-snapdragon_429_mobile_firmware wcn3620_firmware sdm429w wcn3620 sdm429w_firmware wcn3660b_firmware snapdragon_429_mobile wcn3660b Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-45582

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.77%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:01

Improper Validation of Array Index in Camera Driver

Memory corruption while validating number of devices in Camera kernel .

Product-fastconnect_7800_firmware wsa8840 sm8550p_firmware sm7675 wsa8845h_firmware wcn7881_firmware wsa8845 wcn6650_firmware wcn7881 wcd9380_firmware wcn6450 sm8635p wcn6650 sm8635p_firmware wsa8845_firmware video_collaboration_vc3_platform_firmware wcd9370 wcd9378 qcm8550_firmware sm7675_firmware snapdragon_8\+_gen_2_mobile wcn6755_firmware sm7635_firmware wsa8835 wsa8845h fastconnect_7800 wcn6450_firmware snapdragon_8_gen_1_mobile snapdragon_8_gen_2_mobile qcm8550 wcd9395_firmware wcd9378_firmware sm7635 sm7675p fastconnect_6900 sm6650_firmware wcd9375_firmware snapdragon_8_gen_1_mobile_firmware sm7675p_firmware wcd9385_firmware wsa8832 wcd9390_firmware sm8635 snapdragon_8_gen_3_mobile_firmware wcd9375 sm8635_firmware snapdragon_8_gen_3_mobile sm6650 wcn7861 wcd9380 video_collaboration_vc3_platform wsa8830 wsa8832_firmware snapdragon_8\+_gen_2_mobile_firmware wcn7861_firmware wsa8830_firmware wcn6755 fastconnect_6900_firmware qcs6490 snapdragon_8_gen_2_mobile_firmware qcs6490_firmware sm8550p wcd9390 wcd9385 wsa8840_firmware wcd9395 wsa8835_firmware wcd9370_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-45550

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.77%

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-13 Jan, 2025 | 21:51

Improper Validation of Array Index in DSP Services

Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.

Product-wsa8840_firmware fastconnect_7800 wsa8845h wsa8845h_firmware fastconnect_7800_firmware wcd9380_firmware wcd9385_firmware fastconnect_6900_firmware wcd9380 wcd9385 fastconnect_6900 sc8380xp_firmware sc8380xp wsa8840 wsa8845_firmware wsa8845 Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2024-45578

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.49%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:11

Improper Validation of Array Index in Camera Driver

Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2020-11146

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.89%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qpm5579 qfs2580 qca8337 qdm5579 qdm2307 qfs2530 qpa8802 qln1030 pm6125 qat3519 pm8150a qtc800h qdm5670 sa6155 qca6335 pm7150l qpa8821 qln1020 apq8076 qdm5671 pmc1000h qat3518 sd8c wcn3998 wcn3950 sm4125 sd720g wcn3660b qca4020 qdm5652 sd6905g qpm8870 qpm5679 qbt2000 pm855p qca6420 pm6150a sdr735g wcn3999 pm8150b qsm7250 qcs405 qca6430 qat3522 pmr735a wcd9340 sd765g sdr660 qca6436 wcn6851 sa6155p qpa6560 msm8937 sdr865 wcd9341 pmi8952 smr545 qca6431 qln5020 wcd9371 sd750g qdm3302 sa8150p pm6350 qdm5621 qtc800s qdm5650 wcn3988 wtr3925 smb1390 pm6150l sd8885g qet4100 wcn3610 qpm6585 qtc410s wcn3991 smb1355 qln4650 qpa8801 sdm429w wgr7640 qat5568 qet5100 qca6564au sdxr25g pm6150 qca6574 pm7250b qfs2630 qpa8842 wcd9380 qualcomm215 qln4640 smb1381 sdr735 pm7250 wtr4905 smb1395 pm660l qpa8803 smr526 wtr5975 wcn3980 pmk8003 qdm2301 qsw8573 qcs605 wsa8815 wcn6850 wcn3910 qpm6375 smb1394 wcn3680 pm8009 qpa8675 sd730 sdx55m pm8008 qsw8574 pmi8998 pm855l sd8655g qpm5621 qpm6582 sd670 pm670 pm8150l qdm5677 pm8005 sa6145p pm215 qdm2302 pmm6155au sdxr1 ar8031 qpm5577 wtr2965 pm8150 qpm5875 sdx55 qet5100m sa8155p csra6640 pm8350bhs sd675 qet4101 pm8952 qat3516 pm670l qpm5658 qca9379 pm855b smb2351 qln1031 qpm5870 pm8909 wsa8830 pm660 qln5030 qpm6325 pm4125 qbt1500 qpa5581 pmi632 pm456 csra6620 qpm4621 qcs4290 qet6100 pmm855au sdr660g qpa8686 smb1396 pm7150a wcd9370 pm8350 qca6564 sdr425 qca6426 qpm5641 qpm5541 qat5516 wtr2955 qdm5620 qln1021aq sd662 smb1380 pm8350bh pm3003a sa8155 qat5533 wcn3615 qca6595au sm7350 qpm6670 smb1354 wcd9306 qca6584au qdm2305 qca6310 qpm8820 qpm4641 pm8937 qpm2630 pm855 sd429 pm8250 smb1398 qdm4643 pmx55 sd205 sdr675 qca6421 sm6250 qdm3301 sa8195p qpm5677 qat5515 qat3514 wcd9326 wcd9335 qet4200aq wcd9385 pmm8155au qpm4630 qca6390 wcd9375 ar8035 aqt1000 qpa8673 qdm2310 pmm8195au qln4642 sda429w sd210 pmi8937 pm8998 pmk7350 wcn3620 qca6564a smr546 qet6110 qln5040 qpm8895 qpm5670 wcn3990 qtm527 qca6595 pmk8350 qpm8830 pm8350b qat5522 wsa8835 pm8150c pmr735b sm6250p qpa4360 qpa4361 qca6574a qca6174a pm8350c smr525 qpm4640 wcn6750 pmr525 pm7350c qpm4650 qtm525 wtr6955 sd855 sd8cx sd665 qca6175a sd765 pm640p qat3555 sd460 qca6391 smb1351 qpa5461 qcm4290 pm640a sdr8150 qfs2608 pm8916 qln1036aq qtc801s qdm4650 pmd9655 qca6574au sd710 qsw6310 qpm6621 wsa8810 qdm2308 pmw3100 qat3550 wcn6856 qdm5679 wcn3680b sdr8250 sd768g wcn6740 qca6696 pm8004 pm640l pmk8002 qpa2625 sd845 sm7250p pm8956 pm6250 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2020-11271

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.22%

7 Day CHG~0.00%

Published-22 Feb, 2021 | 06:25

Updated-04 Aug, 2024 | 11:28

Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-qfs2580 qpm5679_firmware sm6250p_firmware ipq4028_firmware qca8337 qdm5579 ar9380 ipq8173_firmware qfs2608_firmware qfs2530 qpm8870_firmware pm6125 qat5522_firmware wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpm5541_firmware qpa5581_firmware sa6155 pm7150l qpa8821 qcs6125_firmware pm456_firmware qpa5580_firmware wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g qsw8573_firmware wcn3660b qsw8574_firmware sd460_firmware smb2351_firmware sd6905g qpa4360_firmware qca8081_firmware wcn3998_firmware pm855p qca6420 pm6150a qpm6670_firmware ipq8070_firmware ipq8065 ipq8078a_firmware pm660_firmware pm8150b ipq8072_firmware sa8155_firmware ipq8068 qca6430 qat3522 pmr735a wcd9340 sd765g sdr660 qfs2630_firmware sdr865 qdm5620_firmware qca9888_firmware smr545 qca6696_firmware qln5020 wcd9371 pmm855au_firmware sa8150p pm6350 qdm5621 qtc800s qat3514_firmware qca9992_firmware sd660 pm640p_firmware sd660_firmware qat5516_firmware pm6150l sd8885g pm855l_firmware qca6428_firmware qca9985_firmware qtc410s ipq4018_firmware wcn3991 qca9980_firmware qpa8801 pm8150l_firmware ipq8173 qat5533_firmware sdx55m_firmware sdxr25g qpa8673_firmware pm6150 smb1354_firmware qca6574 qfs2630 qpa8842 csr8811_firmware sdr052_firmware wcd9380 qualcomm215 qln4640 qcs410 qpm5579_firmware pmk8350_firmware smb1381 pm855p_firmware pm7250 qca9379_firmware qpa8803 qca9985 sdxr25g_firmware qdm2301 ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 qdm5621_firmware qdm2301_firmware qpm6375 ipq6028 ipq8064 wcn3980_firmware sd730 pm660l_firmware pm6250_firmware wcn6740_firmware pm8008 pm8350b_firmware qtm525_firmware qpm5621_firmware rsw8577 qpa6560_firmware qca9994 qpa8802_firmware qln4640_firmware qca9980 qpm5621 qpm6582 ipq8174_firmware pm8009_firmware qfs2580_firmware qcm4290_firmware pm8150l qcs610_firmware sa6145p pm660a_firmware pm215 qca9886_firmware ar8031 qpm5577 wtr2965 qca6391_firmware pm8150 qca4024 wcd9370_firmware qat3516_firmware sdx55 csra6640 pm8350bhs qat3555_firmware qpa8803_firmware qca9379 pm855b smb2351 qpm5870 wsa8830 pm660 qet6110_firmware qdm5579_firmware qpm6325 pm6125_firmware qbt1500 qpa5581 fsm10055_firmware qbt1500_firmware qpm5870_firmware qca9992 qcs4290 pmm855au qet6100 qca6420_firmware smb1394_firmware smb1396 pm7150a sd675_firmware ipq8072 pm8350 qca6564 qpa4361_firmware pm8350c_firmware qpa5461_firmware qca6426 wcn3990_firmware qca9984_firmware qpm5641 wcd9385_firmware qdm5650_firmware qpa4340_firmware wcd9326_firmware wcn3615_firmware pm7250_firmware qdm5620 ipq8074a pmk8002_firmware qsw6310_firmware sa8155 qdm4650_firmware qcn5122_firmware pmm6155au_firmware qat5533 sdx55_firmware wcn3615 sm7250p_firmware wcn3610_firmware qsm7250_firmware qpm6670 pm7150l_firmware qca6584au qpm4641 qat5515_firmware ipq8174 pm855 qpm8830_firmware pm8250 qdm4643 qfs2530_firmware wcn3988_firmware pmx55 qpm4641_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware qpm5677 qat5515 qat3514 wcd9326 wcd9335 pm6350_firmware pm8004_firmware sdr8150_firmware qcs4290_firmware qtc800h_firmware pmk7350_firmware qpm5620 qpm4630 qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 sm6250_firmware pmm8195au qln4642 qpm5677_firmware ipq8074a_firmware wsa8815_firmware smr525_firmware wtr3925_firmware pmk7350 qpm8820_firmware qpm6621_firmware qcm6125_firmware pmx55_firmware qca6595 pm8150_firmware smb1398_firmware qpm8830 qat5522 ipq8065_firmware pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qca8075_firmware qpa4361 qpm4640_firmware qpm5577_firmware qdm5679_firmware pm8350c smr525 qca9888 ipq8070a_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware qca9886 sd665 pm6150a_firmware pm6150_firmware sd765 qca6574a_firmware qpm4630_firmware qat3555 qpa5461 sd8c_firmware wtr2965_firmware pm670_firmware qfs2608 qtc801s ipq6028_firmware ipq8072a_firmware qpm5641_firmware qca9889_firmware qcn5122 pm8008_firmware qpm6621 pmr735a_firmware pmx50 qca6564_firmware sdr8250 sd768g wcn6740 pm8004 pm640l pmk8002 qca8075 ipq6000_firmware qcs410_firmware qpa5580 qpm5579 fsm10055 sa6150p_firmware qcs610 qcn5550 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 qpm6585_firmware qat3519 qbt2000_firmware qca4024_firmware ipq8078a qtc800h sa8150p_firmware sdr8250_firmware csra6620_firmware qcs605_firmware smr546_firmware qdm5671 csra6640_firmware pmc1000h qpm4650_firmware qat3518 sd8c sdr425_firmware smr526_firmware ipq8076a pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware qca4020 qca6428 qdm5652 qca6574au_firmware ipq8071 qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware qca6438_firmware pmx50_firmware qpa8675_firmware sdr735g wcn3999 qdm3301_firmware qca7500 qsm7250 ipq4029_firmware qcs6125 ipq6010 sd662_firmware qcs405 qualcomm215_firmware rsw8577_firmware qdm2308_firmware fsm10056_firmware qca4020_firmware qca6436 wcn6851 sa6155p qpa6560 sdr675_firmware wcd9341 ipq8068_firmware qdm4643_firmware qca6431 sm7350_firmware qet4100_firmware sd750g qdm3302 wcn3910_firmware qpm5657 qpm5875_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 qca6438 wtr3925 sdr052 sa8195p_firmware smb1390 qca9898 ipq4028 qet4100 wcn3610 qpa8686_firmware qpm6585 qca8337_firmware sda429w_firmware wcd9380_firmware smb1355 ipq8072a qca7500_firmware qln4650 sdr735g_firmware pm8350bhs_firmware wgr7640 ipq8076a_firmware qat5568 qdm5671_firmware qet5100 qca6564au qpa8801_firmware qtm527_firmware wcn6856_firmware qet4101_firmware pm7250b qln4642_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware sdx50m_firmware sdr735 smb1395 pm660l smr526 qca6430_firmware pmk8003 qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 pm7350c_firmware qsw8573 qcs605 wcn3910 smb1394 qca6426_firmware pm8350_firmware wcn3660b_firmware wcn3680 qca9984 pm8009 qpa8675 qcn5550_firmware sdr051_firmware sdx55m ipq8064_firmware qca6421_firmware qat3518_firmware qsw8574 sd6905g_firmware ar8031_firmware wcn3680_firmware pm855l wcn6851_firmware qdm5670_firmware ipq8070 sd8655g pm7150a_firmware pm8150b_firmware smr545_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware qca9880 sd8885g_firmware pm670 qdm5677 ipq6018 pm855_firmware qdm2302 pmm6155au pm855b_firmware qca6595_firmware qcs405_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware qln4650_firmware qpm5875 qet5100m sa8155p sd675 qet4101 qat3516 pm670l qpm5658 ar8035_firmware qpm5658_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware sdr051 qln5030 pm4125 fsm10056 pmi632 qpa2625_firmware pm456 pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qpm4621 qca9880_firmware qet6100_firmware pm670l_firmware sdr660g sd765g_firmware qpa8686 qca6390_firmware ipq6000 sd730_firmware wcd9370 qcn5152_firmware sdr425 pmr525_firmware qca6584au_firmware pmi632_firmware qpm5541 qat5516 sd662 qpa8821_firmware sdr660g_firmware pm8350bh pm3003a wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware sm7350 smb1354 qca6564au_firmware qdm2305 sa6155p_firmware qpm8820 qln5020_firmware sa515m_firmware qca9990 smb1398 sa6145p_firmware sdr675 sm6250 wsa8810_firmware sd765_firmware qdm5677_firmware qca8081 ipq8071a qca6174a_firmware ipq8071a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware ar8035 csr8811 qpa8673 qdm2310 qln5030_firmware sda429w wcn3620_firmware smb1396_firmware wcn6850_firmware wcn3620 wsa8835_firmware qca6564a smr546 qet6110 qln5040 qpm8895 qpm5670 wcn3990 qtm527 ar9380_firmware pmk8350 qdm3302_firmware pm8350b qdm2307_firmware wsa8835 qpm5657_firmware sm6250p sdr660_firmware ipq4018 qca6574a pm8916_firmware qca9889 qca6174a smb1390_firmware ipq8074 qca9994_firmware qpm4640 pm7350c qet5100m_firmware ipq8076_firmware qpm4650 qtm525 sa515m sd855 sm4125_firmware sd8cx ipq8076 pm640p qcn5152 sd768g_firmware sdr865_firmware pm8250_firmware sd460 qca6391 sd8cx_firmware smb1351 aqt1000_firmware pm215_firmware qpm8895_firmware pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 pm8916 smb1395_firmware qdm4650 pmd9655 ipq8074_firmware qca6574au sa8155p_firmware qsw6310 sd8655g_firmware wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qat5568_firmware qdm2308 qat3550 wcn6856 qdm5679 wcn3680b ipq6010_firmware pm3003a_firmware qca6696 qtc800s_firmware smb1381_firmware qpa2625 sa6150p qca9990_firmware ipq8070a pmm8195au_firmware sm7250p sd720g_firmware ipq8071_firmware qpm4621_firmware ipq4029 pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2020-11174

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.88%

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 11:28

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ4019, IPQ5018, IPQ6018, IPQ8064, IPQ8074, Kamorta, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, QCA6390, QCA9531, QCM2150, QCS404, QCS405, QCS605, SA415M, SA515M, SA6155P, SA8155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM8150, SM8250, SXR1130, SXR2130

Product-ipq5018_firmware kamorta_firmware qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm632 sdx24 qcs404_firmware mdm9650 sdm429 sm6150 msm8909w_firmware agatti_firmware msm8996au sdm429w_firmware qca6390_firmware apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x ipq4019_firmware sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 sda845_firmware ipq5018 sa415m bitra apq8098 ipq6018_firmware sa515m qcs605 bitra_firmware sdm429_firmware mdm9650_firmware msm8905_firmware sda660 sdx55_firmware ipq8064 sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware ipq8064_firmware sda845 agatti sa6155p_firmware msm8953 sdm636_firmware sdm845_firmware sa515m_firmware apq8098_firmware sdx20 qcm2150 sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 qca9531 ipq8074_firmware sa8155p_firmware sdm710 mdm9607 apq8017_firmware sdm710_firmware sa6155p msm8905 ipq6018 sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware sdm630_firmware sda660_firmware qca6390 ipq4019 sdx55 msm8953_firmware apq8053 saipan_firmware sm6150_firmware apq8096au_firmware sa8155p sm8250 sm8150 sdx20_firmware qca9531_firmware kamorta apq8017 saipan sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2020-11187

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.47%

7 Day CHG~0.00%

Published-22 Feb, 2021 | 06:25

Updated-04 Aug, 2024 | 11:28

Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile

Product-wcn3991_firmware qdm5652_firmware qpm5679_firmware sdr051 qet6110_firmware qln5030 qca8337 qpa2625_firmware csrb31024 qpa8802 qpm6585_firmware qat3519 pmx24_firmware qbt2000_firmware qet5100_firmware qat5522_firmware sd765g_firmware qdm5670 qpa8686 qca6595au_firmware pm7150l qpa8821 pm7150a qdm5671 qat3518 qca6584au_firmware qpa5580_firmware sa415m wcn3998 smr526_firmware wcd9385_firmware qdm5650_firmware pm7250_firmware qdm2305_firmware qdm5620 qln1021aq qpa8821_firmware qpm5670_firmware pmk8002_firmware qdm5652 qca6574au_firmware qln1031_firmware sdx55_firmware qat5533 qca6595au qpm5679 qbt2000 wcn3998_firmware sm7250p_firmware pm855p pm7150l_firmware pmx50_firmware qca6564au_firmware qca6584au qdm2305 qat5515_firmware qln5020_firmware pm855 qdm3301_firmware qpm8830_firmware sa415m_firmware pmx55 qpa8842_firmware qdm3301 qat3519_firmware wsa8810_firmware qpm5677 qat5515 sd765g sd765_firmware qdm5677_firmware qpa6560 pm8004_firmware sdr865 sdr8150_firmware qdm5620_firmware wcd9385 wcd9341 qca6696_firmware qln5020 qln5040_firmware aqt1000 qpa8673 qdm5621 qln5030_firmware qln4642 qpm5677_firmware qdm5650 wsa8815_firmware smr525_firmware sdr052 smb1390 pmx24 pm855l_firmware qet6110 qln5040 qpa8686_firmware qpm8895 qpm6585 wcn3991 qca8337_firmware qpm5670 wcd9380_firmware smb1355 qln4650 qpa8801 pmx55_firmware qtm527 qet5100 qdm5671_firmware qpa8801_firmware qca6564au qat5533_firmware qtm527_firmware qpm8830 qpa8673_firmware qat5522 qet4101_firmware pm7250b qln4642_firmware qpa8842 sdr052_firmware wcd9380 smb1355_firmware pm7250b_firmware qca6574a pm855p_firmware sdx50m_firmware smb1390_firmware pm7250 qdm5679_firmware smr525 qpa8803 smr526 qtc801s_firmware qdm2301 qtm525 qln1036aq_firmware wsa8815 qdm5621_firmware qdm2301_firmware sd765 qca6574a_firmware sd768g_firmware sdr865_firmware qat3555 sdr051_firmware qca6391 aqt1000_firmware pm8008 qpm8895_firmware qat3518_firmware qtm525_firmware csrb31024_firmware sdx50m sdr8150 qpm5621_firmware pm855l qln1021aq_firmware qdm5670_firmware qln1036aq qtc801s qpa6560_firmware qpa8802_firmware pm7150a_firmware qca6574au qpm5621 qpm6582 pm8008_firmware wcd9341_firmware wsa8810 pmx50 qdm5677 qdm5679 pm855_firmware pm855b_firmware sd768g qpm6582_firmware qca6696 qca6391_firmware qln4650_firmware qat3516_firmware pm8004 pmk8002 qpa2625 sdx55 qet4101 qat3555_firmware qat3516 sm7250p qpa8803_firmware qpm5658 pm855b qln1031 qpm5658_firmware qpa5580 Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2020-11128

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 9.22%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 11:21

u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8096AU, APQ8098, Bitra, Kamorta, MDM9150, MDM9607, MDM9650, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, QCM2150, QCS405, QCS605, QCS610, QM215, Rennell, SA515M, SA6155P, Saipan, SC8180X, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM660, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-mdm9150_firmware qcm2150_firmware qcs610 sdm429w sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x sdm670_firmware sdx24_firmware bitra apq8098 sa515m qcs605 bitra_firmware msm8937_firmware mdm9650_firmware sdm429_firmware sxr1130_firmware sdx55_firmware sxr1130 apq8009 sa6155p_firmware msm8920 msm8953 sdm450 sa515m_firmware apq8098_firmware msm8998_firmware qcm2150 msm8920_firmware sdm660 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 sdm710 qm215 mdm9607 sdm710_firmware sa6155p qcs610_firmware mdm9150 msm8937 sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 saipan_firmware sm6150_firmware sm8250 msm8917_firmware apq8096au_firmware msm8998 sm8150 saipan sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2023-28565

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.65%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:01

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command streams through WMI interfaces.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28567

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.65%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:01

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command through WMI interfaces.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28558

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.20%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-02 Aug, 2024 | 13:43

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN handler while processing PhyID in Tx status handler.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28548

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 5.84%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2023-24850

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.20%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Improper Validation of Array Index in HLOS

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2023-21636

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 4.96%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:23

Updated-02 Aug, 2024 | 09:44

Improper Validation of Array Index in Linux

Memory Corruption due to improper validation of array index in Linux while updating adn record.

Product-wcn3991_firmware wcn3991 wsa8830 sda429w_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware sw5100p sd865_5g qcc5100 sdx55m_firmware wcd9360_firmware wsa8835 wcd9380 sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware wcd9370 qca6574a qca6426 qca6430_firmware wcn3980 sm4375 wcn3998 wcd9385_firmware sdxr2_5g_firmware sa515m wcn3660b sd855 wsa8815 wcn6850 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3980_firmware qca6391 wcn3610_firmware wcd9360 qca6420 qca6436_firmware sdx55m qcc5100_firmware aqt1000_firmware sa6155p_firmware sa515m_firmware sdxr2_5g sd480_firmware wcn6851_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sm4375_firmware sw5100 sd480 sd870 qca6436 wcn6851 wsa8810 sa6155p sw5100p_firmware sa6145p wcn3680b wcd9385 wcd9341 sd695_firmware qca6696_firmware sa8145p sd870_firmware qca6696 qca6391_firmware qca6390 wcd9375 wcd9370_firmware aqt1000 sa8150p sa6150p sdx55 sa8155p wsa8830_firmware sda429w sd855_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware wcn3610 Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2018-5851

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 13.13%

7 Day CHG~0.00%

Published-12 Jun, 2018 | 20:00

Updated-16 Sep, 2024 | 17:48

Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-13914

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.88%

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 09:14

Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in version MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 636, SD 820A, SD 835, SDM630, SDM660, SDX20.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-13893

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.09%

7 Day CHG~0.00%

Published-11 Feb, 2019 | 15:00

Updated-05 Aug, 2024 | 09:14

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Out of bound mask range access caused by using possible old value of msg mask table count while copying masks to userspace.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-13916

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 26.50%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-05 Aug, 2024 | 09:14

Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve thread data. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX55, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8976_firmware msm8996au apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware qcs404 ipq8074 sdm636 sda845_firmware mdm9635m apq8098 qcn7605 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware mdm9655_firmware sdm660 sc8180x_firmware qcs405 ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware qca8081 mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware mdm9655 apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware msm8976 sdx55 msm8953_firmware msm8940 apq8053 apq8096au_firmware sm8250 msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2018-13908

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 13.69%

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 09:14

Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 mdm9150_firmware sd_632 sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware ipq8074 sd_450 sd_8cx_firmware sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sd_652_firmware qca8081_firmware sxr1130 msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_412 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware qcs405 sdm630 sd_625 ipq8074_firmware qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qca8081 mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware qcs405_firmware sd_712_firmware sd_412_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 qm215_firmware sd_427 sd_670 sd_435_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-285

Improper Authorization

CVE-2013-2596

Matching Score-8

Assigner-MITRE Corporation

Vendor-n/a Linux Kernel Organization, Inc Qualcomm Technologies, Inc.Motorola Mobility LLC. (Lenovo Group Limited)

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-2.70% / 85.54%

7 Day CHG+0.70%

Published-13 Apr, 2013 | 01:00

Updated-22 Oct, 2025 | 01:15

Known KEV||Action Due Date - 2022-10-06||Apply updates per vendor instructions.

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.

Product-atrix_hd razr_hd msm8960 linux_kernel razr_m android n/a Kernel

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2017-11081

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.64%

7 Day CHG~0.00%

Published-10 Jan, 2018 | 22:00

Updated-17 Sep, 2024 | 03:38

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a potential buffer overflow vulnerability in hdd_parse_setrmcenable_command and hdd_parse_setrmcactionperiod_command APIs as buffers defined in this API can hold maximum 32 bytes but data more than 32 bytes can get copied.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-11838

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 26.50%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 08:17

Possible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, MDM9640, SDA660, SDM636, SDM660, SDX20

Product-apq8053 mdm9640_firmware sdx20_firmware sdm636_firmware sdm636 sda660 sda660_firmware sdx20 sdm660 apq8053_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-415

Double Free

CVE-2018-11984

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 5.06%

7 Day CHG~0.00%

Published-20 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, A use after free condition and an out-of-bounds access can occur in the DIAG driver.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2018-11924

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.68%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:32

Updated-05 Aug, 2024 | 08:24

Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24, SM7150

Product-qca9377_firmware sd_850 mdm9150_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_670_firmware sdx24 mdm9650 sd_636 sm7150_firmware msm8996au sd_450_firmware sd_845_firmware sm7150 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 qca9379_firmware qca6174a sd_425_firmware sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 mdm9206_firmware qcs605 mdm9640 sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sda660 sd_210_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 qca6574au sd_210 mdm9607 sd_636_firmware mdm9150 qca6174a_firmware sd_212_firmware sd_850_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sd_205 qca9379 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2018-11923

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 13.53%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:31

Updated-05 Aug, 2024 | 08:24

Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2018-11952

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.18%

7 Day CHG~0.00%

Published-26 Nov, 2024 | 08:55

Updated-09 Jan, 2025 | 20:39

Improper Authentication in TrustZone

An image with a version lower than the fuse version may potentially be booted lead to improper authentication.

CWE ID-CWE-287

Improper Authentication

CVE-2018-11983

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.09%

7 Day CHG~0.00%

Published-20 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Error in kernel observed while accessing freed mask pointers after reallocating memory for mask table.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2018-12010

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.50%

7 Day CHG~0.00%

Published-11 Feb, 2019 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Absence of length sanity check may lead to possible stack overflow resulting in memory corruption in trustzone region.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-11938

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.31%

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 08:24

Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_12 sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_625_firmware ipq8074 sd_450 sd_16_firmware sd_8cx_firmware sd_845 mdm9206_firmware qcs605 sd_52_firmware sd_632_firmware sd_835_firmware mdm9650_firmware sd_12_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware qca8081_firmware sxr1130 msm8909w sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_16 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 sd_625 ipq8074_firmware sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qca8081 mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sd_52 sdm630_firmware sda660_firmware sd_8cx sd_430 sd_427 sd_670 sd_435_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-11986

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.50%

7 Day CHG~0.00%

Published-20 Dec, 2018 | 15:00

Updated-05 Aug, 2024 | 08:24

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in TX and RX FIFOs of microcontroller in camera subsystem used to exchange commands and messages between Micro FW and CPP driver.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2018-11929

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 13.53%

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 08:24

Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS405, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDM630, SDM660, SDX20, SDX24

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-38420

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.8||HIGH

EPSS-0.03% / 9.77%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:56

Improper Input Validation in Hypervisor

Memory corruption while configuring a Hypervisor based input virtual device.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-38409

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.15% / 35.98%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-16 Nov, 2024 | 04:55

Buffer Copy Without Checking Size of Input in WLAN Windows Host

Memory corruption while station LL statistic handling.

Product-fastconnect_7800 wsa8830 wcd9380_firmware sdm429w qcs6490 qcm6490_firmware wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware qcc2073 wsa8840 wsa8835 sdm429w_firmware fastconnect_6700_firmware wcd9380 fastconnect_7800_firmware wsa8845h fastconnect_6700 video_collaboration_vc3_platform snapdragon_8cx_gen_3_compute_platform wcd9370 qcm5430 qcs5430 qcm5430_firmware wcd9385 video_collaboration_vc3_platform_firmware qcs6490_firmware qcc2076_firmware qcs5430_firmware wcd9385_firmware wsa8845 qcc2073_firmware wcd9375 wcd9370_firmware wcn3660b wsa8830_firmware qcc2076 wsa8845_firmware wcn3620_firmware qcm6490 wcn3660b_firmware wsa8835_firmware wcn3620 snapdragon_429_mobile_platform_firmware sc8380xp wsa8845h_firmware wcd9375_firmware snapdragon_429_mobile_platform snapdragon_8cx_gen_3_compute_platform_firmware Snapdragon qcm5430_firmware wcd9380_firmware qcs6490_firmware qcm6490_firmware qcc2076_firmware wsa8840_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware fastconnect_6900_firmware qcc2073_firmware wcd9370_firmware sc8380xp_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wcd9375_firmware wsa8845h_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-38418

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.72%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:57

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Memory corruption while parsing the memory map info in IOCTL calls.

Product-fastconnect_7800_firmware qca6426 sdm429w qca6696 sd865_5g csrb31024 qcs610 sa8155p_firmware qam8295p_firmware sd865_5g_firmware c-v2x_9150_firmware sa8195p_firmware sa8145p_firmware qcn9074_firmware wcn3620_firmware video_collaboration_vc1_platform_firmware wcn3680b wcd9380_firmware snapdragon_auto_4g_modem qca6574au_firmware qsm8250_firmware qca6391_firmware sa8195p snapdragon_auto_4g_modem_firmware wcn3950_firmware qca6391 wcn3660b sdm429w_firmware c-v2x_9150 wcn3980 wcn3950 video_collaboration_vc3_platform_firmware snapdragon_w5\+_gen_1_wearable sw5100 sxr2230p wcd9370 sa8540p_firmware snapdragon_x55_5g_modem-rf sw5100p_firmware sa8295p_firmware snapdragon_865\+_5g_mobile sa8150p_firmware sxr2230p_firmware snapdragon_429_mobile_firmware wsa8835 sa9000p sxr2130 csrb31024_firmware qsm8250 qca6426_firmware qcn9074 fastconnect_7800 sa6155p_firmware wcd9341_firmware snapdragon_8_gen_1_mobile qca6564au_firmware snapdragon_870_5g_mobile snapdragon_865_5g_mobile_firmware qam8295p snapdragon_xr2_5g_firmware wcd9341 wcn3988 snapdragon_x55_5g_modem-rf_firmware snapdragon_865_5g_mobile qca6574au sa8150p sa6150p_firmware fastconnect_6900 snapdragon_xr2_5g wcn3988_firmware sw5100_firmware sxr2250p fastconnect_6800 snapdragon_429_mobile qcs410_firmware sa8530p_firmware qca6696_firmware snapdragon_8_gen_1_mobile_firmware wsa8810_firmware wcd9385_firmware sa6150p wcn3680b_firmware wsa8810 wsa8832 sa8295p sa6145p_firmware qcs610_firmware sa6145p snapdragon_870_5g_mobile_firmware wsa8815 snapdragon_w5\+_gen_1_wearable_firmware qcs410 sdx55 sdx55_firmware sa6155p snapdragon_865\+_5g_mobile_firmware wcd9380 video_collaboration_vc3_platform wsa8830 qca6436_firmware wsa8815_firmware sa8155p wsa8832_firmware sa8145p sw5100p sa8530p wsa8830_firmware wcn3620 wcn3980_firmware qca6564au sxr2130_firmware video_collaboration_vc1_platform qca6436 fastconnect_6900_firmware sa8540p qca6595au_firmware sa9000p_firmware fastconnect_6800_firmware wcd9385 qca6595au wcn3660b_firmware wsa8835_firmware sxr2250p_firmware wcd9370_firmware Snapdragon

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CVE-2018-11816

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.11%

7 Day CHG~0.00%

Published-26 Nov, 2024 | 13:56

Updated-06 Feb, 2025 | 16:41

Use After Free in Video

Crafted Binder Request Causes Heap UAF in MediaServer

CWE ID-CWE-416

Use After Free

CVE-2024-38415

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.18% / 39.77%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-07 Nov, 2024 | 19:41

Use After Free in Computer Vision

Memory corruption while handling session errors from firmware.

CWE ID-CWE-416

Use After Free

CVE-2024-38411

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.03% / 9.77%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-11 Aug, 2025 | 15:06

Use After Free in Computer Vision

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls.

CWE ID-CWE-416

Use After Free

CVE-2018-11819

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.68%

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 08:17

Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 675, SD 730, SD 820A, SD 835, SD 855, SDA660, SDX20, SDX24

CWE ID-CWE-416

Use After Free

CVE-2018-11980

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 31.30%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-05 Aug, 2024 | 08:24

When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen in both cds_is_mmie_valid and qdf_nbuf_trim_tail in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8937, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SDM630, SDM636, SDM660, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130