ByteOS

Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product

Versions

Affected

APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCM2150, QCN7605, QCS405, QCS605, QM215, SA6155P, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX55, SM8150, SM8250, SXR2130

Problem Types

Type	CWE ID	Description
text	N/A	Improper Input Validation in WLAN Host

Type: text

CWE ID: N/A

Description: Improper Input Validation in WLAN Host

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:30 Jul, 2020 | 12:15

Updated At:21 Jul, 2021 | 11:39

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

>>apq8009_firmware>>-

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

>>apq8009>>-

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

>>apq8017_firmware>>-

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

>>apq8017>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

>>apq8053_firmware>>-

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

>>apq8053>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

>>apq8096au_firmware>>-

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

>>apq8096au>>-

cpe:2.3:o:qualcomm:apq8098_firmware:-:*:*:*:*:*:*:*

>>apq8098_firmware>>-

cpe:2.3:h:qualcomm:apq8098:-:*:*:*:*:*:*:*

>>apq8098>>-

cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*

>>mdm9150_firmware>>-

cpe:2.3:h:qualcomm:mdm9150:-:*:*:*:*:*:*:*

>>mdm9150>>-

cpe:2.3:o:qualcomm:mdm9206_firmware:-:*:*:*:*:*:*:*

>>mdm9206_firmware>>-

cpe:2.3:h:qualcomm:mdm9206:-:*:*:*:*:*:*:*

>>mdm9206>>-

cpe:2.3:o:qualcomm:mdm9207c_firmware:-:*:*:*:*:*:*:*

>>mdm9207c_firmware>>-

cpe:2.3:h:qualcomm:mdm9207c:-:*:*:*:*:*:*:*

>>mdm9207c>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

>>mdm9607_firmware>>-

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

>>mdm9607>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

>>mdm9650_firmware>>-

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

>>mdm9650>>-

cpe:2.3:o:qualcomm:msm8905_firmware:-:*:*:*:*:*:*:*

>>msm8905_firmware>>-

cpe:2.3:h:qualcomm:msm8905:-:*:*:*:*:*:*:*

>>msm8905>>-

cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*

>>msm8909w_firmware>>-

cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*

>>msm8909w>>-

cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*

>>msm8917_firmware>>-

cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*

>>msm8917>>-

cpe:2.3:o:qualcomm:msm8920_firmware:-:*:*:*:*:*:*:*

>>msm8920_firmware>>-

cpe:2.3:h:qualcomm:msm8920:-:*:*:*:*:*:*:*

>>msm8920>>-

cpe:2.3:o:qualcomm:msm8937_firmware:-:*:*:*:*:*:*:*

>>msm8937_firmware>>-

cpe:2.3:h:qualcomm:msm8937:-:*:*:*:*:*:*:*

>>msm8937>>-

cpe:2.3:o:qualcomm:msm8940_firmware:-:*:*:*:*:*:*:*

>>msm8940_firmware>>-

cpe:2.3:h:qualcomm:msm8940:-:*:*:*:*:*:*:*

>>msm8940>>-

cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*

>>msm8953_firmware>>-

cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*

>>msm8953>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

>>msm8996au_firmware>>-

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

>>msm8996au>>-

cpe:2.3:o:qualcomm:nicobar_firmware:-:*:*:*:*:*:*:*

>>nicobar_firmware>>-

cpe:2.3:h:qualcomm:nicobar:-:*:*:*:*:*:*:*

>>nicobar>>-

cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*

>>qca6174a_firmware>>-

cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*

>>qca6174a>>-

cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*

>>qca6574au_firmware>>-

cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

>>qca6574au>>-

cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*

>>qca9377_firmware>>-

cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*

>>qca9377>>-

cpe:2.3:o:qualcomm:qca9379_firmware:-:*:*:*:*:*:*:*

>>qca9379_firmware>>-

cpe:2.3:h:qualcomm:qca9379:-:*:*:*:*:*:*:*

>>qca9379>>-

cpe:2.3:o:qualcomm:qcm2150_firmware:-:*:*:*:*:*:*:*

>>qcm2150_firmware>>-

cpe:2.3:h:qualcomm:qcm2150:-:*:*:*:*:*:*:*

>>qcm2150>>-

cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*

>>qcn7605_firmware>>-

cpe:2.3:h:qualcomm:qcn7605:-:*:*:*:*:*:*:*

>>qcn7605>>-

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin	product-security@qualcomm.com	Broken Link
https://www.qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin	nvd@nist.gov	Patch Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/july-2020-bulletin

Source: product-security@qualcomm.com

Resource:

Broken Link

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/july-2020-security-bulletin

Source: nvd@nist.gov

Resource:

Patch

Vendor Advisory

Similar CVEs

4215Records found

CVE-2019-10588

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.90% / 55.71%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 22:24

Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware apq8076 sc8180x mdm9206 sdm670_firmware sdx24_firmware apq8076_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 sc7180_firmware mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sc7180 sdm630_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10609

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.91% / 55.87%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 22:31

Out of bound write can happen due to lack of check of array index value while calculating it. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware apq8076 sc8180x mdm9206 sdm670_firmware sdx24_firmware apq8076_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 sc7180_firmware mdm9607 mdm9645_firmware apq8017_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sc7180 sdm630_firmware mdm9205_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10526

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.91% / 55.87%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SC8180X, SDA845, SDM450, SDX20, SDX24, SDX55, SXR1130

Product-qca9377_firmware mdm9150_firmware msm8920 mdm9640_firmware msm8953 sdm450 msm8996au_firmware sdm450_firmware sdx20 sdx24 msm8920_firmware mdm9607_firmware mdm9650 sc8180x_firmware msm8940_firmware qcs405 qca6574au mdm9607 msm8996au apq8017_firmware apq8009_firmware qcn7605_firmware msm8917 mdm9150 msm8937 mdm9207c_firmware qcs605_firmware sc8180x mdm9206 mdm9207c qca6174a_firmware qca6174a qca9379_firmware sdx24_firmware apq8096au qcs405_firmware qca9377 sda845_firmware qcn7605 mdm9206_firmware qcs605 sdx55 msm8940 apq8053 apq8096au_firmware msm8953_firmware msm8917_firmware msm8937_firmware mdm9650_firmware sdx20_firmware qca6574au_firmware sdx55_firmware sxr1130_firmware apq8017 sxr1130 apq8009 qca9379 apq8053_firmware sda845 mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10538

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.11% / 62.14%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820A, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM660, SDX20, SDX24

CWE ID-CWE-20

Improper Input Validation

CVE-2019-10614

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.90% / 55.60%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:31

Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCN7605, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-mdm9640_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware apq8098 qcn7605 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p msm8937 mdm9207c_firmware mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10525

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.90% / 55.71%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Buffer overflow during SIB read when network configures complete sib list along with first and last segment of other SIB in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware msm8939_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware sdm630_firmware sda660_firmware mdm9625 qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10612

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.90% / 55.71%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:32

UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentially be corrupted by stack overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, MDM9650, QCS605, SA6155P, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10559

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.90% / 55.60%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 22:24

Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8939, MSM8953, MSM8996, MSM8996AU, Nicobar, QCS405, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-msm891_firmware sdm632_firmware msm8996au_firmware sdm450_firmware sdm632 sdm439 sdm429 sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware sxr2130 qcs605_firmware mdm9206 sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar msm8953 sdm450 apq8064 sdm636_firmware apq8098_firmware sdx20 sdm660 sdm630 mdm9607_firmware sm8250_firmware qcs405 qm215 mdm9607 apq8017_firmware msm8939_firmware mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware msm8953_firmware apq8053 apq8096au_firmware sm6150_firmware sm8250 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware msm891 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2019-10594

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.90% / 55.71%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware apq8076 sc8180x mdm9206 sdm670_firmware sdx24_firmware apq8076_firmware sdm636 sda845_firmware mdm9635m apq8098 mdm9615 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 mdm9655_firmware sc8180x_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware mdm9625_firmware sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 mdm9655 apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware mdm9625 rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-21473

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.66% / 47.61%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:06

Updated-13 Jan, 2025 | 21:54

Improper Input Validation in WIN SON

Memory corruption while redirecting log file to any file location with any file name.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21631

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.36% / 28.44%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Improper Input Validation in Modem

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

CWE ID-CWE-20

Improper Input Validation

CVE-2018-13904

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.25% / 66.07%

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 09:14

Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 675, SD 712 / SD 710 / SD 670, SD 8CX, SXR1130.

CWE ID-CWE-20

Improper Input Validation

CVE-2022-40514

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.47% / 38.01%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 12:21

Buffer copy without checking size of input in WLAN Firmware

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

Product-sd_8cx_gen3_firmware qca2066 sa6150p_firmware sm6250p_firmware qcs610 qca8337 ar9380 ipq8173_firmware qca6431_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 qca2062 sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 qca6554a_firmware wcd9371_firmware qam8295p wcn3950 qcn6024_firmware sd720g sm4125 sd_8cx_gen2_firmware ipq8076a qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 qca9986 sd680_firmware ipq8065 ipq8078a_firmware qca6678aq_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware qca6698aq qcs6125 sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 wcd9340 qcn6132 sd765g sw5100 sd680 qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca2066_firmware qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g qca1062 qcn5154_firmware wcn3910_firmware sxr2150p_firmware sd_8cx sa8150p wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 sd712 sd855_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 qcn5022_firmware wcn6750_firmware sa8295p_firmware ipq5018_firmware qca9985_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p ipq8072a qca9980_firmware sw5100p ipq8076a_firmware ipq8078 qca8084 sdx55m_firmware ipq8173 qca6564au wcn6856_firmware qcn5164 sd670_firmware qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware sdx50m_firmware sxr1230p qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcm4325_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c qcn6112 wcn3910 qca6320 qca9986_firmware qca6426_firmware sd695 ipq6028 ipq8064 sd835 qca9984 qcn9024 ipq9574_firmware wcn3980_firmware sd730 sdx55m ipq8064_firmware qcc5100_firmware sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware qca6678aq sd678_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware sd_636_firmware qca6564a_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware qsm8250 sa6145p ipq6018 qca9886_firmware sd695_firmware sdxr1 ar8031 qca6595_firmware qcs405_firmware sa8145p sdm630_firmware qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 ssg2115p_firmware sxr2150p ar8035_firmware qsm8250_firmware qcm2290 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sxr2230p_firmware sa8145p_firmware qca1062_firmware qcs2290_firmware sd7c_firmware csrb31024 snapdragon_4_gen_1_firmware sd_636 csra6620 qca8082 qcn9072 qca8386 qca9992 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware qca2064_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ssg2115p qcn5152_firmware qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware ipq8074a qca2065 sd662 qcn5124_firmware qam8295p_firmware qcn6102_firmware qcn9011_firmware qca1064 sa8155 qcn6100_firmware qca8082_firmware qca6320_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qca6310 qcn9274 ipq8174 wcn7851 sa515m_firmware qca9990 qcs6490 qcn5052 sdxr2_5g sdm630 qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sm6250 sa8195p sd712_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 sg4150p qca8081 qcn6023 ipq8071a ipq8071a_firmware qcs4290_firmware wcd9385 qca8085_firmware qcs6490_firmware qca2065_firmware sd_8cx_gen3 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 csr8811 sm6250_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware qcm6490 wcn6850_firmware wsa8835_firmware qca6564a sa4150p sg4150p_firmware qcm6125_firmware qcm4325 qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g qca6554a sd865_5g qca6595 ar9380_firmware qcc5100 qcn9012 sd888 qcn6122_firmware ipq8065_firmware sxr1230p_firmware wsa8835 sd665_firmware sd888_5g sm6250p qcn5154 qca8075_firmware sc8180x ssg2125p_firmware qca6574a wcn6855_firmware qca9889 sm7325p qcn6132_firmware qca9888 qca6310_firmware qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 sd855 sm4125_firmware sm7325p_firmware sd665 sxr2230p ipq8076 sd765 qca6574a_firmware qcn5152 sd768g_firmware qrb5165m sd850_firmware sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware qcn6102 qcn9100 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware wsa8832_firmware sdx50m qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware qcn9011 sc8180x_firmware sd_455 qca6574au qca9889_firmware sd710 sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware qcm6125 wsa8810 wcn6856 qcn5022 sd835_firmware sd768g ipq6010_firmware qca1064_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn6100 qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-33234

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.31% / 22.72%

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product-wcd9380_firmware wcd9340_firmware qca6595au_firmware qca6310 sd429_firmware sd730 qcn7606_firmware sd_675_firmware sd855_firmware sd662_firmware wcd9371 sdx50m qcs6490 sdx55 sd460_firmware qca6696 qca6421 sa6155 qsm8250_firmware qca6564au qca6426_firmware qcm4290_firmware wcn3660b sd720g sm4375 wcn3660b_firmware sa6150p sd460 sd665_firmware sd710_firmware sa6145p_firmware wsa8830 sd768g sm4125 wcn6740_firmware wcn6856 qca6390 wsa8815 sdx50m_firmware sa6155p sa8150p_firmware sd480 qca6430 sa8145p_firmware wcn3620_firmware sd855 qcs6490_firmware wcd9340 wcn6850 sa8145p sdx55_firmware wcn3950 sxr2150p_firmware sdxr2_5g_firmware qcm6490 wcd9335 sd670_firmware sd765g_firmware qca6574a qca6595_firmware sd865_5g_firmware qca6421_firmware qcm6125_firmware qca6574au_firmware sd662 sdm429w_firmware qca6564_firmware wcn6750 qcs610_firmware sm7325p sd695_firmware qcm2290_firmware wcd9380 sd_675 qca6335 qcm4290 qca6595 qca6431_firmware sd695 sd730_firmware sd480_firmware qca6430_firmware sa6150p_firmware sd888 wcd9375_firmware sm7315_firmware sm7325p_firmware wcn6856_firmware sd870 aqt1000 qca6390_firmware wcn6855_firmware qsm8250 qca6420 sa6155_firmware sd780g_firmware wcn6855 qcm2290 wcn3910 sd870_firmware qcm6490_firmware sm6250 sd845_firmware sdxr1_firmware qca6431 qca6595au wcd9370 sd888_firmware qcs4290_firmware wcn3990 wcn3980 sd429 sm4125_firmware sd690_5g sm7315 sd765_firmware sd720g_firmware sd765g sd670 wsa8835 sdx55m wcn3998 wcn6850_firmware sm6250p wsa8810_firmware wsa8815_firmware wcn3991_firmware sa8150p qcs2290 wcn6740 wcd9385 qca6436 sd678 qca6574au wcd9385_firmware wcn6750_firmware qcs410_firmware sa8155p sdxr1 wsa8810 sd680 sd888_5g aqt1000_firmware wsa8835_firmware sd678_firmware wcd9335_firmware qcs6125 sm4375_firmware sm7250p_firmware qca6391 wcn3991 qca6574 wcn3998_firmware qca6574_firmware wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware sa8195p qca6574a_firmware sd675_firmware sd665 sa8155_firmware sd888_5g_firmware wsa8830_firmware qcm6125 sm6250_firmware sdxr2_5g wcd9341 wcn3980_firmware qcs2290_firmware wcn6851_firmware sdm429w wcd9326 qcs610 sa6155p_firmware sd680_firmware qca6391_firmware wcd9326_firmware sm7250p sa8155p_firmware sa6145p wcn3910_firmware wcd9375 sd750g_firmware qca6696_firmware sm6250p_firmware sxr2150p sd865_5g sd780g qca6564au_firmware qca6426 qca6335_firmware sd690_5g_firmware qcs6125_firmware sdx55m_firmware sd778g wcn3950_firmware wcd9371_firmware wcn3988 wcn3990_firmware sa8155 sd750g wcn3620 sd765 sd768g_firmware qcs605_firmware qca6564 qcs605 wcn3988_firmware qca6310_firmware qcs4290 sd710 qcn7606 qca6436_firmware sa8195p_firmware sd845 wcd9341_firmware qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-33279

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.45% / 36.35%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Stack based buffer overflow in WLAN

Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.

Product-qcn5024_firmware qcn9070 ipq4028_firmware ar9380 ipq8173_firmware qcn5124 qca4024_firmware qcn9072 qca9880_firmware qca9992 ipq8078a ipq5028_firmware ipq6000 qcn5152_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq5018 wcd9385_firmware ipq8076a qcn6024_firmware ipq8074a qcn5124_firmware qcn6100_firmware qcn6102_firmware qcn9011_firmware qcn5164_firmware qcn5122_firmware qca8081_firmware qcn6023_firmware qrb5165n ipq5010 ipq8065 ipq8078a_firmware qcn9274 ipq8174 qca9990 qrb5165_firmware ipq5028 qca7500 ipq4029_firmware qcn5052 qrb5165m_firmware ipq6010 ipq8068 qcn6112_firmware qcn9074 qcn6132 qca8081 ipq8071a qcn6023 ipq8071a_firmware wcd9385 qca9888_firmware qcn6122 ipq8068_firmware ipq9008_firmware qcn5154_firmware qca9898_firmware csr8811 ipq4019 qcn9100_firmware qca9992_firmware ipq5010_firmware ipq8074a_firmware qca9898 qcn5022_firmware ipq4028 qca8072 ipq5018_firmware qca9985_firmware qcn9000 ipq8072a qca7500_firmware qca9980_firmware ipq8076a_firmware ar9380_firmware ipq8078 ipq8173 ipq9008 qcn9012 qcn5164 qcn6122_firmware ipq8065_firmware csr8811_firmware qcn5054_firmware qcn5154 qca8075_firmware ipq4019_firmware qcn5024 qca9889 qcn6132_firmware qca9888 qca8072_firmware qca9985 qca9994_firmware qcn5052_firmware qcn9012_firmware qcn9274_firmware ipq8070a_firmware ipq6018_firmware ipq8076_firmware qca9886 qcn6112 ipq8076 qca9984 ipq6028 ipq8064 qcn5152 qcn9024 qrb5165m ipq9574_firmware qca6391 ipq8064_firmware qcn6102 qcn9100 ipq8078_firmware qcn5054 qcn9070_firmware qrb5165 ipq6028_firmware ipq8072a_firmware qcn9011 qca9994 qca9889_firmware ipq9574 qca9980 qcn5122 ipq8174_firmware qcn9024_firmware qca9880 ipq6018 qcn5022 qca9886_firmware ipq6010_firmware qca6391_firmware qca4024 qca8075 qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn6100 qcn9072_firmware ipq6000_firmware qcn9074_firmware ipq4029 Snapdragon qcn5024_firmware ipq5018_firmware qca9985_firmware ipq4028_firmware qca7500_firmware qca9980_firmware ipq8076a_firmware ar9380_firmware ipq8173_firmware qca4024_firmware qcn6122_firmware ipq8065_firmware qca9880_firmware csr8811_firmware ipq5028_firmware qcn5054_firmware qca8075_firmware ipq4019_firmware qcn5152_firmware qcn6132_firmware qca8072_firmware qcn9000_firmware qca9984_firmware qca9994_firmware qcn5052_firmware qcn9012_firmware ipq8070a_firmware qcn9274_firmware qrb5165n_firmware wcd9385_firmware qcn6024_firmware ipq6018_firmware ipq8076_firmware qcn5124_firmware qcn6100_firmware qcn6102_firmware qcn9011_firmware qcn5164_firmware qcn5122_firmware ipq9574_firmware qca8081_firmware qcn6023_firmware ipq8064_firmware ipq8078a_firmware qrb5165_firmware qrb5165m_firmware ipq8078_firmware ipq4029_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn6112_firmware qca9889_firmware qcn9024_firmware ipq8174_firmware qca9886_firmware ipq8071a_firmware qca9888_firmware ipq8068_firmware ipq6010_firmware ipq9008_firmware qca6391_firmware qcn5154_firmware qca9898_firmware qcn9022_firmware qcn9100_firmware qca9990_firmware qca9992_firmware ipq5010_firmware ipq8074a_firmware qcn9072_firmware ipq6000_firmware qcn9074_firmware qcn5022_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-33265

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.36% / 28.27%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 15:15

Information exposure in Powerline Communication Firmware

Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device.

Product-qca7500_firmware qca7520_firmware qca7550 qca7520 qca7500 qca7550_firmware Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-13898

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.73% / 50.28%

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 09:14

Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 mdm9150_firmware sd_632 sd_675 sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware sd_450_firmware sd_845_firmware sd_410 qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sdx24_firmware sd_625_firmware sd_450 sd_8cx_firmware sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sxr1130 sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware sd_412 qualcomm_215 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 qcs405 sd_625 sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware qcs405_firmware sd_712_firmware sd_412_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 sd_427 sd_670 sd_435_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-11167

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.22% / 65.29%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qfe3100 qfs2580 qfe2550 pmi8996 qdm2307 qfs2530 qpa8802 qln1030 pm6125 qat3519 pm8150a qtc800h qdm5670 sa6155 qca6335 msm8917 pm7150l qpa8821 qln1020 wtr3905 qdm5671 qat3518 sd632 wcn3998 wcn3950 qpa5460 wcn3660b qfe4320 qdm5652 sd6905g qpm8870 qpm5679 qbt2000 msm8909w pm855p qca6420 wcd9360 pm6150a pm8150b qsm7250 pm8996 qfe2101 qca6430 qat3522 qfe4455fc pmr735a wcd9340 sd765g qfe3440fc qca6436 sdr660 sa6155p qpa6560 msm8937 sdr865 smb1358 wcd9341 pmi8952 qca6431 qln5020 sd750g wtr3950 pm6350 qdm5621 qtc800s qdm5650 sd712 wcn3988 wtr3925 qfe2080fc sdr052 smb1390 pm6150l sd450 qet4100 wcn3610 qpm6585 qtc410s wcn3991 smb1355 qln4650 qpa8801 sdm429w wgr7640 qet5100 qca6564au sdxr25g pm6150 pm7250b qca6574 qpa8842 pmm8996au wcd9380 qualcomm215 smb1381 sdr735 pm7250 smb1395 pm660l wtr4905 qpa8803 smr526 wtr5975 wcn3980 pmk8003 qdm2301 qsw8573 qcs605 wsa8815 qbt1000 qca6320 wcn3680 qfe4309 sd835 pm8009 sdx55m pm670a qfe4373fc pm8008 msm8953 qsw8574 pmi8998 pm855l qcs603 sd8655g qfe4302 qpm5621 qpm6582 apq8009w qfe4303 pm670 pm8150l qdm5677 pm8005 pm215 qdm2302 sdxr1 apq8096au wtr2965 sdx55 apq8053 sa8155p sd675 sd439 qet4101 pmi8994 qat3516 pm670l qpm5658 wcn3660 qca9379 pm855b qln1031 pm8909 qfe4465fc sdr051 pm660 wsa8830 qln5030 qbt1500 pmi632 qpa5581 pmk8001 qet6100 sdr660g pmm855au qpa8686 smb1396 pm7150a wcd9370 qca6426 whs9410 qat5516 wtr2955 qdm5620 qln1021aq smb1380 qfe4308 apq8037 pm3003a sa8155 qat5533 qca6595au wcn3615 qtc800t pm8940 qdm2305 qca6310 qpm8820 pm8937 qfe2081fc pm855 sd429 pm8250 sd821 pmx55 sd205 qca6421 qdm3301 pm8953 qat5515 qpm5677 wcd9326 wcd9335 qet4200aq wcd9385 pm439 qca6390 wcd9375 apq8064au aqt1000 qpa8673 qdm2310 qln4642 sd210 sd820 pmi8937 pm8998 wcn3620 apq8017 qca6564a qet6110 qln5040 qpm8895 sdr845 qpm5670 wcn3990 qca6595 qpm8830 qat5522 wsa8835 msm8996au pm8150c pmr735b rgr7640au qln1035bd qpa4360 pm855a qca6574a qpa4361 qca6174a smr525 pmr525 qpm4650 qtm525 sd855 sd8cx sd665 qfe4305 qca6175a sd765 pm640p qat3555 smb1351 qca6391 qfe2082fc msm8920 sdx50m pm640a sdr8150 qln1036aq qtc801s qca6574au sd710 qsw6310 wsa8810 qdm2308 pmw3100 pmx50 qat3550 qdm5679 wcn3680b sdr8250 sd768g qca6696 qfe4301 sdw2500 pm8004 pm640l msm8940 pmk8002 qpa2625 sd845 sm7250p sdm830 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2016-10456

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.00% / 59.08%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:00

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, if radish is executed with an interface name set to an invalid interface name, an arbitrary command of 15 characters or less may be executed as a system call.

CWE ID-CWE-20

Improper Input Validation

CVE-2019-2332

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.91% / 55.88%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:49

Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 600, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 mdm9615 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_600 sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_600_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2279

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.94% / 56.87%

7 Day CHG~0.00%

Published-22 Jul, 2019 | 13:47

Updated-04 Aug, 2024 | 18:42

Shared memory gets updated with invalid data and may lead to access beyond the allocated memory. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, Snapdragon_High_Med_2016

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 qca6574au_firmware sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sdm630 mdm9607_firmware sd_710_firmware qcs405 sd_625 qca6574au sd_210 mdm9607 sd_636_firmware sd_820_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_670 sd_710 sdx20_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-11945

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.35% / 68.42%

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 08:24

Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in versions MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, Snapdragon_High_Med_2016, SXR1130.

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_12 sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_625_firmware sd_450 sd_16_firmware mdm9635m sd_8cx_firmware mdm9615 sd_845 mdm9206_firmware qcs605 sd_52_firmware sd_632_firmware sd_835_firmware mdm9650_firmware sd_12_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sxr1130 msm8909w sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_16 sd_855 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware mdm9625_firmware sd_439_firmware mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_855_firmware sd_712_firmware sd_52 sdm630_firmware sda660_firmware mdm9625 sd_8cx sd_430 sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-14017

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.90% / 55.71%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-05 Aug, 2024 | 00:05

Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCS605, QM215, Rennell, SA6155P, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware msm8939 qcs605 msm8937_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8064 apq8098_firmware sdx20 msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware sa6155p msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-25729

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.44% / 35.86%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 04:49

Improper Input Validation in MODEM

Memory corruption in modem due to improper length check while copying into memory

Product-wcd9306 wcd9380_firmware wsa8830 ssg2125p sxr2230p_firmware wcn3999 wcn7851 ar8031_firmware wsa8832_firmware wcn6856_firmware qca4004_firmware csra6620 qcs405 qca4024_firmware qts110 wcd9306_firmware sxr1230p_firmware wsa8835 wsa8810_firmware wcd9380 wsa8810 wsa8832 qca4020_firmware wcn6855 wcd9335 csra6620_firmware ssg2125p_firmware wcn6856 ssg2115p wcn7851_firmware mdm9206 csra6640_firmware wcn6855_firmware sxr1230p wcd9385 ar8031 qcs405_firmware wcd9335_firmware wcn3980 wcn3998 mdm9205_firmware wcd9385_firmware qca4024 mdm9205 mdm9206_firmware wsa8815 qca4004 csra6640 sxr2230p wsa8830_firmware qca4020 wsa8815_firmware wcn7850 wcn7850_firmware wsa8835_firmware ssg2115p_firmware wcn3999_firmware wcn3998_firmware wcn3980_firmware qts110_firmware Snapdragon wcn6855_firmware csra6640_firmware wcd9380_firmware sxr2230p_firmware csra6620_firmware qcs405_firmware wcd9335_firmware ar8031_firmware wsa8832_firmware mdm9205_firmware wcd9385_firmware wcn6856_firmware qca4004_firmware mdm9206_firmware wsa8830_firmware qca4024_firmware wcd9306_firmware sxr1230p_firmware wsa8815_firmware wsa8835_firmware wsa8810_firmware wcn7851_firmware wcn7850_firmware ssg2115p_firmware wcn3999_firmware qca4020_firmware wcn3998_firmware wcn3980_firmware ssg2125p_firmware qts110_firmware

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-25678

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.42% / 33.84%

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 04:42

Buffer Copy Without Checking Size of Input in MODEM

Memory correction in modem due to buffer overwrite during coap connection

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-25740

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.42% / 33.84%

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 04:49

Buffer Copy Without Checking Size of Input in MODEM

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22096

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.45% / 36.49%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile

Product-wcn3991_firmware wcn3991 wsa8830 sd678 wcd9380_firmware sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 wsa8835 wcn3950_firmware sd665_firmware wcd9380 sd765g_firmware sd888_5g qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware sd_675_firmware sd690_5g_firmware wcn6855_firmware sm8475p_firmware sm7325p wcn3980 wcn6750 wcn3998 wcd9385_firmware wcn3950 sd720g sd_8_gen1_5g_firmware sd855 wsa8815 sm7325p_firmware sd665 sd662 wcn6850 sd460_firmware sd765 sm7315_firmware wcn7850 sd695 sd768g_firmware wcd9375_firmware wcn3998_firmware wcn3980_firmware sm7315 sm7250p_firmware sd730 sd460 qca6391 sdx55m sm8475_firmware sm7450_firmware sd680_firmware sd778g aqt1000_firmware wcn6740_firmware sd678_firmware wcn7851 wsa8832_firmware sd480_firmware wcn6851_firmware sd662_firmware wcn3988_firmware sm6250 sd778g_firmware wsa8810_firmware sd765g wcd9341_firmware sd480 sd765_firmware sd870 sd680 wcn6851 wsa8810 wcn6855 wsa8832 wcn7851_firmware wcn6856 wcd9385 wcd9341 sd695_firmware sd768g sd870_firmware wcn6740 qca6391_firmware qca6390 wcd9375 sd780g_firmware aqt1000 wcd9370_firmware sm6250_firmware sd888_firmware sd675 wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sm7250p sm7450 sd720g_firmware sm8475 wcn6750_firmware sm8475p Snapdragon Connectivity, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22088

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.51% / 39.91%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 04:42

Updated-09 Apr, 2025 | 19:58

Integer Overflow to Buffer Overflow in Bluetooth HOST

Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote

Product-sa6150p_firmware sm6250p_firmware qcs610 qca6431_firmware wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 csra6620_firmware apq8076 sd_675_firmware csra6640_firmware qcs6125_firmware msm8108 sm4375 wcn3998 msm8108_firmware wcn3950 sm4125 sd720g sd_8_gen1_5g_firmware wcn3660b sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware sa6155_firmware msm8909w apq8009w_firmware qca6420 sd680_firmware qrb5165_firmware qrb5165m_firmware qcs6125 apq8056_firmware sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 sd626_firmware qualcomm215_firmware sd765g sw5100 qca6436 sd680 wcn6851 sa6155p wcn7851_firmware apq8052 msm8209_firmware wcd9341 qca6431 qca6696_firmware sd750g sd870_firmware wcn3910_firmware sxr2150p_firmware sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware msm8208_firmware sm8475 qcn7606_firmware wcn6750_firmware wcn3610 msm8608 wcn3991 wcd9380_firmware sdm429w msm8996au_firmware sw5100p sd625_firmware qca6564au sdx55m_firmware wcn6856_firmware msm8976_firmware qca6574 wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca6430_firmware qcn9012_firmware sd626 wcd9335_firmware wcn3980 qca6335_firmware wcd9340_firmware wsa8815 wcn6850 wcn3910 msm8956_firmware qca6320 qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 sdx55m qcc5100_firmware qca6421_firmware wcn6740_firmware sd678_firmware ar8031_firmware wcn3680_firmware qrb5165 wcn6851_firmware qca6564a_firmware apq8009w msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware sa6145p sd695_firmware sdxr1 apq8096au ar8031 qcs405_firmware sa8145p qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sxr2150p qcm2290 qcn7606 wcn3991_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware csra6620 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware sd625 qca6426 qca6584au_firmware apq8076_firmware qrb5165n_firmware wcn3990_firmware sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 qcn9011_firmware sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware qca6595au wcn3615 sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware qca6584au sa6155p_firmware qca6310 msm8208 sd778g wcn7851 qcs6490 sd429 sdxr2_5g msm8976sg wcn3988_firmware qcn9074 sa6145p_firmware sd205 qca6421 sd429_firmware sd778g_firmware sm6250 sa8195p wsa8810_firmware sm4375_firmware sd765_firmware wcd9326 wcd9335 qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 msm8956 msm8976 sm6250_firmware msm8952 apq8056 sd210 wcn3620_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wcn3620 wsa8815_firmware wsa8835_firmware qca6564a qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qcc5100 qcn9012 sd888 msm8952_firmware msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a wcn6855_firmware sm7325p qca6310_firmware wcn6750 apq8052_firmware qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 qrb5165m sm7315 apq8009 qca6391 sd460 sdxr1_firmware aqt1000_firmware qcm4290 qcm6490_firmware sdx50m sd480_firmware qcn9011 qca6574au sa8155p_firmware sd205_firmware wcd9341_firmware qcm6125 wsa8810 wcn6856 wcn3680b sd835_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sa6150p sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-18147

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.65% / 47.08%

7 Day CHG~0.00%

Published-03 Apr, 2018 | 17:00

Updated-17 Sep, 2024 | 04:19

In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security patch level 2018-04-05, in MMCP, a downlink message is not being properly validated.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

CVE-2018-21055

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.83% / 53.51%

7 Day CHG~0.00%

Published-08 Apr, 2020 | 17:51

Updated-05 Aug, 2024 | 12:19

An issue was discovered on Samsung mobile devices with N(7.0) (Qualcomm models using MSM8996 chipsets) software. A device can be rooted with a custom image to execute arbitrary scripts in the INIT context. The Samsung ID is SVE-2018-11940 (September 2018).

Vendor-n/a Qualcomm Technologies, Inc.Google LLC

Product-android msm8996 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2023-43520

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.6||HIGH

EPSS-0.26% / 17.99%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Stack-based Buffer Overflow in WLAN HOST

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.

Product-qcm8550_firmware sa6150p_firmware wsa8845_firmware wsa8832 qcc2076_firmware qca6595 srv1m qca8081_firmware ar8035_firmware qca6696 wcd9340_firmware wcd9395_firmware qcc2073_firmware qcc710_firmware qca6564au wsa8832_firmware sa8195p_firmware qca8337_firmware qca8337 wcd9395 qca6574au_firmware qca6574au wcd9390 flight_rb5_5g_platform wsa8845h_firmware sa9000p_firmware srv1h qca6554a sa8770p qca6584au qcn6274_firmware ssg2115p qcc710 qfw7114_firmware qca6595_firmware qcs7230 fastconnect_6900 fastconnect_7800_firmware qfw7114 wcd9385_firmware fastconnect_6900_firmware qam8255p_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p sa8150p snapdragon_ar2_gen_1_platform_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 sa6155p qca6564au_firmware sxr1230p qam8650p video_collaboration_vc5_platform_firmware sa9000p snapdragon_8\+_gen_2_mobile_platform srv1h_firmware qca6595au sa6155p_firmware wsa8840 qca6688aq srv1m_firmware qcs8550_firmware qfw7124_firmware wcd9385 snapdragon_8_gen_2_mobile_platform sa8255p qcs7230_firmware sxr1230p_firmware wcd9390_firmware qcc2076 ssg2125p qca6554a_firmware qca6574a sa8195p wcd9340 qcs8250_firmware qamsrv1m qam8650p_firmware video_collaboration_vc5_platform sm8550p_firmware qcm8550 qca6584au_firmware qcn6274 qca6574 qfw7124 qrb5165n_firmware sa8775p qca6595au_firmware qca6391_firmware snapdragon_x75_5g_modem-rf_system sxr2230p_firmware wsa8835 wsa8840_firmware sa8775p_firmware snapdragon_ar2_gen_1_platform qamsrv1h qca6696_firmware wsa8845h wcd9380_firmware sa6150p qca6574_firmware sa8155p_firmware qca8081 sa8155p wsa8830 qam8775p sm8550p sa6145p sa8255p_firmware flight_rb5_5g_platform_firmware qcc2073 ar8035 qca6574a_firmware qamsrv1m_firmware sa8650p_firmware robotics_rb5_platform qca6391 qcn6224 ssg2125p_firmware qrb5165n sa8770p_firmware snapdragon_8_gen_2_mobile_platform_firmware robotics_rb5_platform_firmware qcs8550 fastconnect_7800 sa8145p_firmware sa8650p qam8775p_firmware qca6688aq_firmware sa8150p_firmware qamsrv1h_firmware sa8145p wsa8835_firmware ssg2115p_firmware snapdragon_x75_5g_modem-rf_system_firmware qcs8250 wsa8830_firmware qcn6224_firmware Snapdragon

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-43548

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.26% / 17.96%

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Video

Memory corruption while parsing qcp clip with invalid chunk data size.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-43518

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.26% / 17.99%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Untrusted Pointer Dereference in Video

Memory corruption in video while parsing invalid mp2 clip.

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-822

Untrusted Pointer Dereference

CVE-2017-14876

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.60% / 45.01%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 21:00

Updated-16 Sep, 2024 | 22:03

In msm_ispif_config_stereo() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-21, the parameter params->entries[i].vfe_intf comes from userspace without any bounds check which could potentially result in a kernel out-of-bounds write.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33028

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.54% / 41.75%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Buffer Copy without Checking Size of Input in WLAN Firmware

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33045

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.47% / 37.81%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-02 Aug, 2024 | 15:32

Buffer Copy Without Checking Size of Input in WLAN Firmware

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28582

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.44% / 35.56%

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-10 Jan, 2025 | 17:46

Buffer Copy Without Checking Size of Input in Data Modem

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28562

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 28.48%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:01

Buffer Copy Without Checking Size of Input in QESL

Memory corruption while handling payloads from remote ESL.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28581

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.42% / 34.42%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:01

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Firmware

Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-24855

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.54% / 41.72%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in Modem

Memory corruption in Modem while processing security related configuration before AS Security Exchange.

Product-qcm8550_firmware wsa8845_firmware wsa8832 wsa8840 sdx57m_firmware qcs8550_firmware wcd9370 qca8081_firmware ar8035_firmware wsa8830_firmware wcd9340_firmware snapdragon_888_5g_mobile_platform qfw7124_firmware wcd9385 wcd9395_firmware snapdragon_8\+_gen_1_mobile_platform qcn6024 qcs4490_firmware snapdragon_8_gen_2_mobile_platform snapdragon_7c\+_gen_3_compute_firmware qcc710_firmware wcn6740_firmware wcd9390_firmware fastconnect_6700 sm7325-af_firmware wsa8815_firmware sm7325-ae_firmware wsa8832_firmware sg8275p qca8337_firmware wcd9370_firmware qca8337 snapdragon_x70_modem-rf_system_firmware wcd9395 sg8275p_firmware qcm6490_firmware sm7325-ae qcm4490 sm8350-ac_firmware wcd9340 qcm4490_firmware wcd9390 sm7325p qcm6490 wcn3950 wsa8810_firmware wsa8845h_firmware sm8550p_firmware qcm8550 wcn3988 qcs6490_firmware snapdragon_x65_5g_modem-rf_system qcn9024 snapdragon_x65_5g_modem-rf_system_firmware qcn6274 snapdragon_7c\+_gen_3_compute snapdragon_480_5g_mobile_platform_firmware qfw7124 sm7325-af snapdragon_x75_5g_modem-rf_system wsa8835 qca6391_firmware wsa8840_firmware snapdragon_780g_5g_mobile_platform sdx57m qcn9024_firmware wsa8845h qcn6024_firmware wcd9380_firmware fastconnect_6200_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_695_5g_mobile_platform qca8081 snapdragon_4_gen_1_mobile_platform_firmware wsa8815 wsa8830 snapdragon_780g_5g_mobile_platform_firmware sm8550p qcn6274_firmware snapdragon_8\+_gen_1_mobile_platform_firmware qcc710 snapdragon_4_gen_2_mobile_platform ar8035 wcn6740 snapdragon_695_5g_mobile_platform_firmware qfw7114_firmware wcd9375_firmware fastconnect_7800_firmware fastconnect_6900 qca6391 snapdragon_x70_modem-rf_system qcn6224 snapdragon_778g_5g_mobile_platform_firmware qfw7114 wcn3950_firmware wcd9385_firmware snapdragon_480_5g_mobile_platform snapdragon_8_gen_2_mobile_platform_firmware fastconnect_6900_firmware snapdragon_8_gen_1_mobile_platform wcd9380 qcs8550 fastconnect_6200 fastconnect_7800 sm7325p_firmware snapdragon_888_5g_mobile_platform_firmware snapdragon_4_gen_1_mobile_platform qcs4490 snapdragon_8_gen_1_mobile_platform_firmware wcd9375 snapdragon_778g_5g_mobile_platform snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 wcn3988_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware sm4350-ac_firmware wsa8835_firmware wsa8810 snapdragon_x75_5g_modem-rf_system_firmware qcs6490 snapdragon_8\+_gen_2_mobile_platform sm4350-ac sm8350-ac video_collaboration_vc3_platform qcn6224_firmware Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CVE-2023-28561

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.38% / 29.78%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:15

Updated-02 Aug, 2024 | 13:43

Buffer Copy Without Checking Size of Input in QESL

Memory corruption in QESL while processing payload from external ESL device to firmware.

Product-qcn7606 qcn7606_firmware Snapdragon qcn7606_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-22385

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.35% / 27.58%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in Data Modem

Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-22388

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.35% / 27.58%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-16 Dec, 2025 | 18:23

Use of Out-of-range Pointer Offset in Multi-mode Call Processor

Memory Corruption in Multi-mode Call Processor while processing bit mask API.

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-30341

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.74% / 50.37%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:10

Updated-03 Aug, 2024 | 22:32

Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Product-qca9377_firmware wcn3991_firmware wsa8830 sd678 mdm9640_firmware sm6250p_firmware wcn3998_firmware qcs610 qcs2290_firmware qca8337 sd7c_firmware csrb31024 mdm9628_firmware wcd9360_firmware sdx65 qcs4290 wcn3950_firmware mdm9250 sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qcs6125_firmware qca6426 qca9377 sa415m wcn3998 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware wcn3950 mdm9628 sd720g mdm9206_firmware qsw8573_firmware sd_8_gen1_5g_firmware sm6375_firmware sd662 sd460_firmware sm7315_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware msm8909w sm7250p_firmware apq8009w_firmware qca6420 qca6436_firmware wcd9360 wcn3610_firmware mdm9207 qca6564au_firmware sd680_firmware sd778g qca9367_firmware wcd9306 mdm8207 sd_8cx_gen2 sa515m_firmware qcs6490 sd429 sdxr2_5g qca9367 qcs6125 qca4004_firmware mdm9607_firmware sd662_firmware sa415m_firmware wcn3988_firmware qca6430 sd205 sd429_firmware sm6250 sd778g_firmware wcd9306_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcn6851 qca8081 qca6174a_firmware mdm9250_firmware qcs4290_firmware wcd9385 qca6696_firmware qcs6490_firmware sd750g sd870_firmware ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 wcn3910_firmware sm6250_firmware mdm9207_firmware qca4004 wsa8830_firmware sda429w sd210 sd855_firmware sd660 sd865_5g_firmware sdx20_firmware qcm6490 sd888_5g_firmware wcn3620_firmware sd660_firmware wcn3620 wcn3988 wcn6850_firmware wsa8835_firmware qcx315 sm8475 qca6564a wcn6750_firmware wcn3610 qcm6125_firmware mdm9640 qcm2290_firmware sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sd_675 sdm429w msm8996au_firmware sd780g sw5100p wcd9330 sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware sd888 msm8909w_firmware qca6574 msm8996au qcx315_firmware sdm429w_firmware sd665_firmware wsa8835 wcd9380 sd888_5g sd850 sm6250p qcs410 qca6574a sd690_5g_firmware mdm9206 wcn6855_firmware qca9379_firmware qca6174a sm7325p sdx24_firmware qca6430_firmware wcn6750 qsw8573 mdm9205 sa515m qca6574_firmware sd855 sm7325p_firmware sd665 sd7c wcn3910 wcn6850 sd765 qca6426_firmware qca6574a_firmware sd768g_firmware sd850_firmware sm7315 sd460 qca6391 sd730 sdx55m sdxr1_firmware wcd9330_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx20 sd480_firmware wcn6851_firmware qca6574au mdm9607 sd205_firmware qca6564a_firmware apq8009w qcm6125 qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware wcn6856 sdxr1 sd768g apq8096au mdm8207_firmware qca6696 wcn6740 mdm9205_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdw2500 sd888_firmware sdx55 apq8096au_firmware sd675 sm7250p sd720g_firmware sdx12 sw5100_firmware qcs410_firmware qca9379 ar8035_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-40510

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 28.48%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-03 Aug, 2024 | 12:21

Buffer copy without checking size of input in Audio.

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

Product-qca9377_firmware sd_8cx_gen3_firmware mdm9640_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sc8180x\+sdx55 sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 sd_455_firmware csra6620_firmware qcs605_firmware apq8076 sd_675_firmware csra6640_firmware qcs6125_firmware sd632 msm8108 sa415m sm4375 wcn3998 wcd9371_firmware msm8108_firmware qam8295p wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware sd_8cx_gen2_firmware mdm9628 sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware qca4020 wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 wcd9360 sd680_firmware qca9367_firmware mdm8207 wcn3999 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware qcs6125 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9306_firmware wcd9340 sd626_firmware sd765g sw5100 sd680 qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware wcd9341 pm8937_firmware qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g wcn3910_firmware sxr2150p_firmware sd_8cx sa8150p mdm9207_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware msm8208_firmware wcn6750_firmware sa8295p_firmware sd450 wcn3610 msm8608 mdm9640 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 sd625_firmware qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qcn9012_firmware sd626 qca6430_firmware sd439_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6320 msm8937_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 qca9984 sd835 qcn9024 wcn3980_firmware sd730 wcd9330_firmware sdx55m qcc5100_firmware sa8295p qca6421_firmware wcn6740_firmware sd678_firmware apq8064au_firmware ar8031_firmware wcn3680_firmware qrb5165 wcn6851_firmware qcs603 sd670 sd_636_firmware qcn9024_firmware qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware qsm8250 sa6145p sd695_firmware sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware mdm8207_firmware sdm630_firmware sd820_firmware qca6391_firmware wcd9370_firmware qm215_firmware sd780g_firmware sdx55 sa8155p csra6640 sd675 sd439 wcn3660 qca9379 sxr2150p ar8035_firmware qsm8250_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcs2290_firmware sd7c_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware sd625 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware apq8076_firmware qca9984_firmware qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 qam8295p_firmware apq8037 qcn9011_firmware sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 sa6155p_firmware qca6310 pm8937 wcn7851 sd429 sa515m_firmware qcs6490 sdxr2_5g qca9367 sdm630 mdm9607_firmware sa415m_firmware wcn3988_firmware qcn9074 sd205 qm215 qca6421 sd429_firmware sd778g_firmware sa6145p_firmware sa8195p sm6250 sd712_firmware apq8017_firmware wsa8810_firmware sm4375_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware sd_8cx_gen3 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 apq8064au sc8180x\+sdx55_firmware sm6250_firmware sda429w msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qca6595 qcc5100 sdx24 qcn9012 msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd_8_gen1_5g sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 sa515m qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 qrb5165m sd850_firmware apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware msm8920 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m sdx20 sd480_firmware msm8920_firmware qcn9011 sd_455 qca6574au sd710 sa8155p_firmware mdm9607 sd205_firmware wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 wcn3680b sd835_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sdw2500 msm8940 apq8096au_firmware qcn6024 sd845 apq8037_firmware sm7250p sd720g_firmware sdx12 sw5100_firmware qcs410_firmware qcn9074_firmware sd850 Snapdragon qca9377_firmware sd_8cx_gen3_firmware mdm9150_firmware wcn3991_firmware mdm9640_firmware sm6250p_firmware qcs2290_firmware qca6431_firmware sd7c_firmware mdm9628_firmware wcd9360_firmware wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware apq8009_firmware sd730_firmware sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware csra6640_firmware qcs6125_firmware qca6584au_firmware apq8076_firmware qrb5165n_firmware wcn3990_firmware qca9984_firmware sdw2500_firmware sd_8cx_firmware msm8108_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware qcn6024_firmware wcd9326_firmware wcd9371_firmware mdm9206_firmware wcd9385_firmware sd_8_gen1_5g_firmware wcn3615_firmware sd450_firmware sd710_firmware sd460_firmware qam8295p_firmware qcn9011_firmware qca6320_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware qca8081_firmware sa6155_firmware sdx12_firmware sm7250p_firmware wcn3998_firmware apq8009w_firmware wcn3610_firmware qca6436_firmware wcn3999_firmware qca6564au_firmware sd680_firmware sa6155p_firmware qca9367_firmware sa515m_firmware qrb5165_firmware qrb5165m_firmware sa8155_firmware sd662_firmware mdm9607_firmware sa415m_firmware wcn3988_firmware sa6145p_firmware sd429_firmware wcd9306_firmware sd712_firmware sd778g_firmware apq8017_firmware sd626_firmware wsa8810_firmware qualcomm215_firmware sm4375_firmware sd765_firmware qca4020_firmware qcs603_firmware wcn7851_firmware msm8209_firmware qca6174a_firmware mdm9250_firmware qcs4290_firmware wcn3660_firmware pm8937_firmware qca6696_firmware qcs6490_firmware sd870_firmware wcn3910_firmware sxr2150p_firmware sd750g_firmware sm6250_firmware mdm9207_firmware wsa8830_firmware msm8917_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware wcn6850_firmware sd660_firmware wcn7850_firmware wsa8835_firmware sa8195p_firmware msm8208_firmware sa8295p_firmware wcn6750_firmware qcm6125_firmware qcm2290_firmware qca8337_firmware sda429w_firmware wcd9380_firmware msm8996au_firmware sd625_firmware sdx55m_firmware wcn6856_firmware msm8940_firmware msm8909w_firmware qcx315_firmware sd632_firmware sd670_firmware sdm429w_firmware sd665_firmware sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca9379_firmware sdx24_firmware qca6310_firmware qca6430_firmware qcn9012_firmware wcd9335_firmware sd439_firmware qca6335_firmware qca6574_firmware wcd9340_firmware sm4125_firmware sm7325p_firmware msm8937_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware sd768g_firmware sd850_firmware wcn3980_firmware sdxr1_firmware wcd9330_firmware qcc5100_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware apq8064au_firmware ar8031_firmware csrb31024_firmware qcm6490_firmware wcn3680_firmware sd480_firmware wcn6851_firmware msm8920_firmware sa8155p_firmware sd_636_firmware sd205_firmware qca6564a_firmware qcn9024_firmware wcd9341_firmware qcm4290_firmware sw5100p_firmware sd210_firmware qcs610_firmware sd835_firmware sd695_firmware qcs405_firmware qca6595_firmware mdm8207_firmware sdm630_firmware sd820_firmware qca6391_firmware sd845_firmware msm8608_firmware sd780g_firmware wcd9370_firmware apq8096au_firmware apq8037_firmware sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware ar8035_firmware qsm8250_firmware

CWE ID-CWE-457

Use of Uninitialized Variable

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1916

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.80% / 52.35%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 11:25

Updated-03 Aug, 2024 | 16:25

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware sm7250 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 qca6431_firmware wcd9360_firmware mdm9645 wcn3950_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 msm8917 mdm8215 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware mdm8615m_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sd720g mdm9628 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware mdm9230_firmware mdm8215m qca6574au_firmware mdm9630 wcd9375_firmware wcn3998_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware qca4004_firmware mdm9615m qca6430 wcd9306_firmware wcd9340 mdm9625_firmware sd765g qca1990_firmware qualcomm215_firmware qca6436 wcn6851 sa6155p qcs603_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware mdm9655 qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g mdm8215_firmware wcn3910_firmware sd_8cx sa8150p mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd855_firmware sd865_5g_firmware sd712 wcn3988 sa8195p_firmware msm8208_firmware wcn6750_firmware sd450 wcn3610 mdm9640 msm8608 wcn3991 sda429w_firmware wcd9380_firmware sdm429w wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6174 qca6430_firmware sd439_firmware qca6335_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware sd_8c_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 qca1990 sd730 wcd9330_firmware sdx55m qca6421_firmware wcn6740_firmware ar6003_firmware msm8953 sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware apq8084_firmware sa6145p sdxr1 apq8096au sa8145p mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sd780g_firmware sdx55 apq8053 sa8155p sd675 sd439 wcn3660 qca9379 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware sm7250_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware mdm9310_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 mdm9615m_firmware wcn3615_firmware apq8037 sa8155 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 sa6155p_firmware qca6310 sa515m_firmware sd429 sdxr2_5g qca9367 apq8084 sdm630 mdm9607_firmware sd821 mdm9655_firmware msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sa6145p_firmware sm6250 sa8195p sd712_firmware apq8017_firmware wsa8810_firmware qca6694 sd765_firmware qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m mdm9625 qca6390 wcd9375 sd750g_firmware aqt1000 msm8976 qca6694_firmware sm6250_firmware msm8953_firmware qca6694au sda429w msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 ar6003 csr6030_firmware qca6564a mdm9630_firmware qcm6125_firmware mdm9635m_firmware sd_675 sd780g sd865_5g sdx24 msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p sc8180x qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware wcn6750 mdm9635m mdm9615 mdm9205 sa515m qca6574_firmware sd855 sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 qca6391 sdxr1_firmware mdm9310 aqt1000_firmware msm8920 qcm4290 csrb31024_firmware sdx50m sdx20 sd480_firmware msm8920_firmware mdm9215 sc8180x_firmware sd_455 qca6574au sa8155p_firmware mdm8215m_firmware mdm9607 sd205_firmware mdm9645_firmware qcm6125 wsa8810 mdm9150 wcn6856 sd_8c wcn3680b sd835_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sdw2500 sa6150p msm8940 apq8096au_firmware sd845 mdm9615_firmware apq8037_firmware sd720g_firmware sdx12 qcs410_firmware mdm9330 sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-33211

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.42% / 33.84%

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Improper Input Validation in MODEM

memory corruption in modem due to improper check while calculating size of serialized CoAP message

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-131

Incorrect Calculation of Buffer Size

CVE-2021-1965

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-3.02% / 85.94%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:31

Updated-03 Aug, 2024 | 16:25

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Product-qcn5024_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sa6150p_firmware sa8145p_firmware ipq4028_firmware qcn5550 ar9380 ipq8173_firmware qcn5124 qca4024_firmware qcn9072 qca9880_firmware qca9992 wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware ipq6000 sd730_firmware wcd9370 sd_675_firmware sd675_firmware qcn5152_firmware qca6426 qcn9000_firmware qca9984_firmware ipq5018 wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 ipq8076a qcn6024_firmware sd720g ipq8074a qcn5124_firmware sm7315_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware sdx55_firmware qca6595au qca8081_firmware qcn6023_firmware wcd9375_firmware wcn3998_firmware qca6420 qca6436_firmware ipq5010 sd778g ipq8070_firmware sa6155p_firmware ipq8065 ipq8078a_firmware ipq8174 qca9990 ipq5028 qca7500 ipq4029_firmware qcn5052 sdxr2_5g ipq6010 ipq8068 wcn3988_firmware qca6430 qcn9074 sa6145p_firmware sm6250 sd778g_firmware sa8195p wsa8810_firmware qca6436 wcn6851 sa6155p qca8081 ipq8071a qcn6023 ipq8071a_firmware wcd9385 qca9888_firmware qcn6122 ipq8068_firmware wcd9341 qca6696_firmware sd870_firmware qcn5154_firmware qca6390 csr8811 qca9898_firmware aqt1000 ipq4019 sa8150p sm6250_firmware wcd9375 qcn9100_firmware wcn3910_firmware wsa8830_firmware qca9992_firmware sd855_firmware sd865_5g_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qcn5121 qca9898 qcn5022_firmware wcn6750_firmware ipq4028 qca8072 ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware wcd9380_firmware qcn9000 ipq8072a qca7500_firmware qca9980_firmware sd_675 sd780g ipq8076a_firmware sd865_5g ar9380_firmware ipq8078 sdx55m_firmware ipq8173 wcn6856_firmware qcn9012 sd888 qcn5164 qcn6122_firmware ipq8065_firmware wsa8835 csr8811_firmware wcd9380 sd888_5g qcn5054_firmware qcn5154 qca8075_firmware ipq4019_firmware ipq4018 ipq6005_firmware qca6574a qcn5024 sdx50m_firmware qca9889 wcn6855_firmware sm7325p qca9888 qca8072_firmware qca9985 qca6430_firmware qca9994_firmware qcn5052_firmware qcn9012_firmware ipq8070a_firmware wcn3980 wcn6750 ipq6018_firmware ipq8076_firmware qca9886 sd855 wsa8815 sm7325p_firmware wcn6850 pmp8074_firmware wcn3910 ipq8076 qca6426_firmware qca6574a_firmware qca9984 ipq6028 ipq8064 qcn5021 pmp8074 qcn5152 qcn9024 wcn3980_firmware sm7315 qcn5550_firmware qca6391 sd730 sdx55m ipq8064_firmware ipq6005 aqt1000_firmware wcn6740_firmware qcn9100 sd678_firmware sdx50m ipq8078_firmware qcn5054 qcn9070_firmware wcn6851_firmware ipq8070 ipq6028_firmware ipq8072a_firmware qca9994 qca6574au qca9889_firmware sa8155p_firmware sdx55 qca9980 qcn5122 qcn9024_firmware ipq8174_firmware qca9880 wcd9341_firmware wsa8810 sd870 qcn5121_firmware wcn6855 wcn6856 ipq6018 qcn5022 sa6145p qca9886_firmware ipq6010_firmware sa8145p wcn6740 qca6696 qca6391_firmware qca4024 sd780g_firmware wcd9370_firmware sa6150p sd888_firmware qca8075 qcn5021_firmware qcn9022_firmware qcn6024 qcn9022 sa8155p qca9990_firmware ipq8070a sd675 qcn9072_firmware ipq6000_firmware sd720g_firmware qcn9074_firmware ipq4029 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-1975

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.84% / 53.80%

7 Day CHG~0.00%

Published-12 Nov, 2021 | 06:15

Updated-03 Aug, 2024 | 16:25

Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware fsm10055 sm7250 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sc8180x\+sdx55 sa8150p_firmware qca6595au_firmware sa6155 qca6335 msm8917 mdm8215 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware mdm8615m_firmware sd632 msm8108 sa415m wcd9371_firmware msm8108_firmware wcn3950 sd720g mdm9628 mdm9206_firmware qsw8573_firmware sm6375_firmware wcn3660b sd450_firmware qsm8350_firmware qsm8350 sd460_firmware mdm9230_firmware wcn7850 mdm8215m qca6574au_firmware mdm9630 wcd9375_firmware qca8081_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware qca4004_firmware sd662_firmware mdm9615m wcd9306_firmware sd765g qualcomm215_firmware fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g mdm8215_firmware wcn3910_firmware sd_8cx sa8150p mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd865_5g_firmware sd712 wcn3988 wcn7850_firmware sa8195p_firmware msm8208_firmware wcn6750_firmware sd450 wcn3610 msm8608 mdm9640 sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware msm8976_firmware qca6574 sd632_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6174 sd439_firmware qca6335_firmware qsw8573 qcs605 wcn6850 sd7c wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware sd_8c_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd730 wcd9330_firmware sdx55m qca6421_firmware wcn6740_firmware ar6003_firmware sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware sa6145p sdxr1 apq8096au qca6595_firmware sa8145p mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sd780g_firmware sdx55 sa8155p sd675 sd439 wcn3660 qca9379 ar8035_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware fsm10056 sm7250_firmware sd7c_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 fsm10055_firmware qcs4290 mdm9250 sd765g_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware mdm9310_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware sm8450 qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 mdm9615m_firmware sd662 apq8037 sa8155 qca6320_firmware qca6584 sdx55_firmware qca6595au wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 sa6155p_firmware qca6310 sm6225 wcn7851 sd429 qcs6490 sdxr2_5g qca9367 sdm630 mdm9607_firmware sd821 msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sa6145p_firmware sm6250 sa8195p sd712_firmware apq8017_firmware qca6694 sm8450_firmware sd765_firmware qca8081 qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m qcs6490_firmware qca6390 wcd9375 sd750g_firmware ar8035 msm8976 qca6694_firmware sc8180x\+sdx55_firmware sm6250_firmware qca6694au sda429w msm8917_firmware sd210 wcn3620_firmware sdx20_firmware sd820 sd888_5g_firmware qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 ar6003 csr6030_firmware qca6564a mdm9630_firmware qcm6125_firmware sd_675 sd780g sd865_5g qca6595 sdx24 sm8450p_firmware msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware sm7325 wcn6750 mdm9615 mdm9205 qca6574_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 sd460 qca6391 sdxr1_firmware mdm9310 msm8920 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m sdx20 sd480_firmware msm8920_firmware mdm9215 sd_455 sm6225_firmware qca6574au sa8155p_firmware mdm8215m_firmware mdm9607 sd205_firmware qcm6125 sm8450p mdm9150 wcn6856 sd_8c sd768g wcn6740 qca6696 msm8608_firmware sdw2500 sa6150p msm8940 apq8096au_firmware mdm9615_firmware apq8037_firmware sd720g_firmware sdx12 qcs410_firmware mdm9330 sd850 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10587

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.90% / 55.71%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130