ByteOS

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Product

Versions

Affected

APQ8017, APQ8053, APQ8064AU, APQ8096AU, AQT1000, MSM8917, MSM8953, MSM8996AU, QCA6310, QCA6320, QCA6335, QCA6390, QCA6391, QCA6420, QCA6426, QCA6430, QCA6436, QCA6564A, QCA6564AU, QCA6574A, QCA6574AU, QCM2290, QCM4290, QCM6125, QCM6490, QCS2290, QCS4290, QCS603, QCS605, QCS610, QCS6125, QCS6490, Qualcomm215, SD 455, SD 636, SD 675, SD205, SD210, SD429, SD439, SD460, SD480, SD632, SD662, SD665, SD675, SD678, SD690 5G, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD855, SD865 5G, SD870, SD888, SD888 5G, SDM429W, SDM630, SDX50M, SDX55, SDX55M, SDXR1, SDXR2 5G, SM4125, SM6250, SM6250P, SM7250P, SM7315, SM7325P, WCD9370, WCD9371, WCD9375, WCD9380, WCD9385, WCN3610, WCN3615, WCN3620, WCN3660B, WCN3680, WCN3680B, WCN3910, WCN3950, WCN3988, WCN3991, WCN3998, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WSA8830, WSA8835

Problem Types

Type	CWE ID	Description
text	N/A	Stack-based Buffer Overflow in VR Service

Type: text

CWE ID: N/A

Description: Stack-based Buffer Overflow in VR Service

Metrics

Version	Base score	Base severity	Vector
3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:20 Oct, 2021 | 07:15

Updated At:26 Oct, 2021 | 18:40

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

>>apq8017_firmware>>-

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

>>apq8017>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

>>apq8053_firmware>>-

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

>>apq8053>>-

cpe:2.3:o:qualcomm:apq8064au_firmware:-:*:*:*:*:*:*:*

>>apq8064au_firmware>>-

cpe:2.3:h:qualcomm:apq8064au:-:*:*:*:*:*:*:*

>>apq8064au>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

>>apq8096au_firmware>>-

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

>>apq8096au>>-

cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*

>>aqt1000_firmware>>-

cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

>>aqt1000>>-

cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*

>>msm8917_firmware>>-

cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*

>>msm8917>>-

cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*

>>msm8953_firmware>>-

cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*

>>msm8953>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

>>msm8996au_firmware>>-

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

>>msm8996au>>-

cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*

>>qca6310_firmware>>-

cpe:2.3:h:qualcomm:qca6310:-:*:*:*:*:*:*:*

>>qca6310>>-

cpe:2.3:o:qualcomm:qca6320_firmware:-:*:*:*:*:*:*:*

>>qca6320_firmware>>-

cpe:2.3:h:qualcomm:qca6320:-:*:*:*:*:*:*:*

>>qca6320>>-

cpe:2.3:o:qualcomm:qca6335_firmware:-:*:*:*:*:*:*:*

>>qca6335_firmware>>-

cpe:2.3:h:qualcomm:qca6335:-:*:*:*:*:*:*:*

>>qca6335>>-

cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*

>>qca6390_firmware>>-

cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*

>>qca6390>>-

cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*

>>qca6391>>-

cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*

>>qca6391_firmware>>-

cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*

>>qca6420>>-

cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*

>>qca6420_firmware>>-

cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:*

>>qca6426>>-

cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*

>>qca6426_firmware>>-

cpe:2.3:h:qualcomm:qca6430:-:*:*:*:*:*:*:*

>>qca6430>>-

cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*

>>qca6430_firmware>>-

cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:*

>>qca6436>>-

cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*

>>qca6436_firmware>>-

cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*

>>qca6564a>>-

cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*

>>qca6564a_firmware>>-

cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*

>>qca6564au>>-

cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*

>>qca6564au_firmware>>-

cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*

>>qca6574a>>-

cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*

>>qca6574a_firmware>>-

cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*

>>qca6574au_firmware>>-

cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

>>qca6574au>>-

cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*

>>qcm2290_firmware>>-

cpe:2.3:h:qualcomm:qcm2290:-:*:*:*:*:*:*:*

>>qcm2290>>-

cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*

>>qcm4290_firmware>>-

cpe:2.3:h:qualcomm:qcm4290:-:*:*:*:*:*:*:*

>>qcm4290>>-

cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*

>>qcm6125_firmware>>-

cpe:2.3:h:qualcomm:qcm6125:-:*:*:*:*:*:*:*

>>qcm6125>>-

cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*

>>qcm6490_firmware>>-

cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*

>>qcm6490>>-

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

2197Records found

CVE-2024-45577

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.31%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:14

Improper Input Validation in Camera Driver

Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-45579

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.31%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:12

Improper Input Validation in Camera Driver

Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-45563

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.02% / 2.58%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:31

Updated-09 May, 2025 | 19:17

Out-of-bounds Write in Camera Driver

Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-43048

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.59%

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:27

Stack-based Buffer Overflow in Performance

Memory corruption when invalid input is passed to invoke GPU Headroom API call.

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-15832

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 25.92%

7 Day CHG+0.01%

Published-26 Nov, 2024 | 08:55

Updated-09 Jan, 2025 | 21:01

Buffer overwrite due to improper input validation in WLAN host

Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW

Product-sd_845 sd_850_firmware mdm9607 sd_850 mdm9607_firmware sd_835_firmware mdm9206 sd_835 mdm9206_firmware sd_845_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-43050

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.59%

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:28

Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-43053

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.59%

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:29

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.

Product-fastconnect_7800 qca2062_firmware qca2066 wcd9380_firmware sdm429w wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware wsa8840 sdm429w_firmware fastconnect_6700_firmware snapdragon_7c\+_gen_3_compute wcd9380 fastconnect_7800_firmware wsa8845h fastconnect_6700 qca2064_firmware qca2062 wcd9385 qca2066_firmware qca2065_firmware qcc2076_firmware wcd9385_firmware wsa8845 snapdragon_429_mobile_platform qcc2073_firmware qca2064 wcn3660b qca2065 qcc2076 wsa8845_firmware wcn3620_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3660b_firmware sc8380xp snapdragon_429_mobile_platform_firmware wcn3620 wsa8845h_firmware qcc2073 Snapdragon qca2062_firmware wcd9380_firmware qca2066_firmware qca2065_firmware qcc2076_firmware wsa8840_firmware wcd9385_firmware fastconnect_6900_firmware qcc2073_firmware sc8380xp_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wsa8845h_firmware qca2064_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-38413

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.03% / 8.30%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:58

Improper Input Validation in Computer Vision

Memory corruption while processing frame packets.

Product-fastconnect_7800_firmware wsa8840 snapdragon_8_gen_3_mobile_firmware wsa8845_firmware wsa8845h_firmware wsa8845 snapdragon_8_gen_3_mobile wcd9395_firmware wcd9390 wsa8840_firmware wsa8845h wcd9395 fastconnect_7800 wcd9390_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-30257

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 27.25%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 22:24

Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

Product-wcn3991_firmware wsa8830 sd678 sm7250 qcs2290_firmware sm7250_firmware sd_636 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qcs2290 qca6390_firmware msm8917 sd690_5g sd730_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qcs6125_firmware qca6426 sd632 wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcn3615_firmware wcn3660b sd662 sd460_firmware wcn3680b_firmware sdx55_firmware wcd9375_firmware wcn3615 wcn3998_firmware qca6420 qca6436_firmware apq8053_firmware sd778g qcs6490 sd429 sdxr2_5g qcs6125 sd662_firmware sdm630 wcn3988_firmware qca6430 sd429_firmware sm6250 sd778g_firmware apq8017_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 wcn6851 qcs4290_firmware wcd9385 qcs6490_firmware sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8835_firmware apq8017 wcn6750_firmware qcm6125_firmware qcm2290_firmware wcn3991 wcd9380_firmware sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 wsa8835 sd632_firmware sd665_firmware wcd9380 sd888_5g qualcomm215 sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325 qca6430_firmware wcn6750 sd439_firmware qcs605 sd855 sm4125_firmware wcn6850 sd665 wcn3910 sd765 qca6426_firmware wcn3660b_firmware wcn3680 sd768g_firmware sd730 sd460 qca6391 sdx55m sdxr1_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware qcm4290 qcm6490_firmware sdx50m wcn3680_firmware sd480_firmware wcn6851_firmware sd_636_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wcn6856 wcn3680b sdxr1 sd768g wcn6740 sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sd675 sd439 sd720g_firmware qcm2290 sm7325_firmware Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CVE-2021-30322

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.25%

7 Day CHG~0.00%

Published-11 Feb, 2022 | 10:40

Updated-03 Aug, 2024 | 22:32

Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-fsm10055 qca9377_firmware mdm9150_firmware wcn3991_firmware sd678 wsa8830 sm6250p_firmware qcs610 fsm10056 qca8337 sd7c_firmware csrb31024 wcd9360_firmware mdm9650 sdx65 fsm10055_firmware wcn3950_firmware mdm9250 sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qcs6125_firmware qca6426 wcn3990_firmware qca9377 sa415m wcn3998 wcd9385_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware wcd9326_firmware sd720g wcn3950 sd_8_gen1_5g_firmware sm6375_firmware sm7315_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware wcd9360 qca6564au_firmware sd778g sd_8cx_gen2 sa515m_firmware qcs6490 sdxr2_5g qcs6125 mdm9655_firmware sa415m_firmware wcn3988_firmware qca6430 sm6250 sd778g_firmware wcd9340 wsa8810_firmware sd765g sd765_firmware fsm10056_firmware qca6436 wcd9326 wcd9335 wcn6851 qca8081 qcs603_firmware qca6174a_firmware mdm9250_firmware wcd9385 wcd9341 mdm9655 qca6696_firmware qcs6490_firmware sd750g sd870_firmware ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 sm6250_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sdx20_firmware qcm6490 sd888_5g_firmware wcn3988 sd660_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qcx315 sm8475 qca6564a wcn6750_firmware qcm6125_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware sd888 wsa8835 qcx315_firmware sd665_firmware wcd9380 sd888_5g sm6250p qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6174a sm7325p sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 wcn6750 sa515m qcs605 wcd9340_firmware sd855 wsa8815 sm7325p_firmware sd665 sd7c wcn6850 mdm9650_firmware sd765 qca6426_firmware qca6574a_firmware sd768g_firmware sd850_firmware wcn3980_firmware sm7315 sd730 qca6391 sdx55m sdxr1_firmware aqt1000_firmware sdx65_firmware sd678_firmware csrb31024_firmware qcm6490_firmware sdx20 sd480_firmware qcs603 wcn6851_firmware qca6574au qca6564a_firmware wcd9341_firmware qcm6125 sd480 sd870 wsa8810 wcn6855 qcs610_firmware mdm9150 wcn6856 sdxr1 sd768g qca6696 qca6391_firmware sd845_firmware wcd9370_firmware sdx55 sd888_firmware sd675 sd845 sm7250p sd720g_firmware sdx12 qcs410_firmware ar8035_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-30288

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.39%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 22:32

Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product-qca9377_firmware qca2066 sm7250 sm6250p_firmware qcs610 qcn5550 qca1023 ipq8173_firmware qca6431_firmware wcd9360_firmware qcn5124 qca4024_firmware wcn3950_firmware sc8180x\+sdx55 ipq8078a ipq5028_firmware qcs2290 qca6595au_firmware qca6335 qca2062 qcn5064 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 ipq8076a wcn3660b qsm8350_firmware sd710_firmware qsm8350 sd460_firmware qca4020 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware qca6420 apq8053_firmware wcd9360 qca10901_firmware sdx20m qca6438_firmware ipq8070_firmware whs9410_firmware ipq8078a_firmware wcn3999 qrb5165_firmware ipq5028 ipq8072_firmware qcs6125 sa8155_firmware ipq6010 sd662_firmware qcs405 qca6430 sc8280xp_firmware wcd9340 sdm830_firmware sd765g qca4020_firmware qca6436 wcn6851 qca9888_firmware qcn6122 wcd9341 qca2066_firmware qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g qca1062 qcn5154_firmware wcn3910_firmware sd_8cx wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 qca6438 sd660_firmware qcn5121 qcn5022_firmware qcn7606_firmware wcn6750_firmware qca4010_firmware wcn3610 qca6428_firmware ipq5018_firmware wcn3991 wcd9380_firmware ipq8072a msm8996au_firmware ipq8076a_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 sd670_firmware qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca8072_firmware qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c pmp8074_firmware wcn3910 sd_8c_firmware qca6426_firmware wcn3660b_firmware qca9984 ipq6028 qcn9024 pmp8074 wcn3980_firmware sd730 qcn5550_firmware sdx55m qca6421_firmware qca2062_firmware wcn6740_firmware qcn5064_firmware sd678_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware ipq8070 sd670 qcn9024_firmware ipq8174_firmware qcm4290_firmware sd480 sd870 wcn6855 qcn7605_firmware qcn5121_firmware sd210_firmware qcs610_firmware ipq6018 sdxr1 ar8031 qca1023_firmware apq8096au qcs405_firmware sd820_firmware qca6391_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware sc8280xp apq8053 qcn5021_firmware csra6640 sa8155p sd675 qca9379 ar8035_firmware qcm2290 qcn7606 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qcn9070 qca1062_firmware qcs2290_firmware sm7250_firmware sd7c_firmware csrb31024 csra6620 qcn9072 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware qca2064_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6426 qca6584au_firmware wcn3990_firmware qcn9000_firmware qca9984_firmware qca9377 ipq5018 qca9369 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 wcd9326_firmware qcn7605 wcn3615_firmware ipq8074a qca2065 sd662 qcn5124_firmware qca1064 sa8155 wcn3680b_firmware qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware qca6595au wcn3999_firmware wcn3610_firmware qca6436_firmware ipq5010 qca6564au_firmware qca6584au sd778g qca6310 ipq8174 qcs6490 sdxr2_5g qcn5052 wcn3988_firmware qcn9074 qca6421 sd778g_firmware sm6250 wsa8810_firmware qca6694 sd765_firmware wcd9326 wcd9335 qca4010 qca8081 qcn6023 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca2065_firmware qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 csr8811 sc8180x\+sdx55_firmware sm6250_firmware qca6694_firmware qcn9100_firmware sd210 ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware qcm6125_firmware qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g sd865_5g sdx24 sd888 qcn6122_firmware wsa8835 msm8996au qca10901 sd665_firmware sd888_5g qca9369_firmware sm6250p qcn5154 qca8075_firmware qca6574a ipq6005_firmware wcn6855_firmware qca9889 qca6174a qca9888 qca6310_firmware sm7325 ipq8074 wcn6750 ipq8070a_firmware ipq8076_firmware qca6574_firmware sd855 sm4125_firmware sd665 ipq8076 sd765 qca6574a_firmware qcn5021 qcn5152 sd768g_firmware sd850_firmware apq8009 sd460 qca6391 sdxr1_firmware ipq6005 aqt1000_firmware qcn9100 qcm4290 csrb31024_firmware qcm6490_firmware sdx50m qcn9070_firmware sdx20 sd480_firmware ipq6028_firmware ipq8072a_firmware ipq8074_firmware qca6574au qca9889_firmware sd710 sa8155p_firmware qcn5122 wcd9341_firmware sdx20m_firmware qcm6125 wsa8810 wcn6856 sd_8c qcn5022 wcn3680b sd768g ipq6010_firmware qca1064_firmware wcn6740 qca6696 sd845_firmware qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 sd845 ipq8070a qcn9072_firmware sdm830 ipq6000_firmware sd720g_firmware ipq8071_firmware qcn9074_firmware qcs410_firmware sd850 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33038

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.72%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Untrusted Pointer Dereference in Computer Vision

Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.

Product-qcm8550_firmware wsa8845_firmware wsa8832 wsa8840 qcs8550_firmware snapdragon_8\+_gen_1 wcd9370 snapdragon_8_gen_1_firmware wcd9385 wcd9395_firmware qcs4490_firmware snapdragon_8_gen_1 wcn6740_firmware sxr1230p_firmware wcd9390_firmware fastconnect_6700 snapdragon_8_gen_3 wsa8815_firmware wsa8832_firmware sg8275p wcd9370_firmware wcd9395 snapdragon_8_gen_2 snapdragon_4_gen_2_firmware ssg2125p sg8275p_firmware qcm6490_firmware qcm4490 talynplus qcm4490_firmware wcd9390 qcm6490 wcn3950 wsa8810_firmware wsa8845h_firmware sm8550p_firmware qcm8550 wcn3988 qcs6490_firmware talynplus_firmware wsa8835 wsa8840_firmware snapdragon_8\+_gen_2 qcs5430 wsa8845h wcd9380_firmware qcm5430 wsa8815 qcm5430_firmware sd_8_gen1_5g wsa8830 snapdragon_ar2_gen_1_firmware sm8550p ssg2115p wcn6755_firmware wcn6740 snapdragon_8\+_gen_1_firmware sd_8_gen1_5g_firmware fastconnect_6900 fastconnect_7800_firmware snapdragon_4_gen_2 snapdragon_8_gen_3_firmware snapdragon_8_gen_2_firmware wcd9375_firmware sm8635 qcs5430_firmware ssg2125p_firmware sm8635_firmware wcd9385_firmware wcn3950_firmware fastconnect_6900_firmware wcd9380 qcs8550 fastconnect_7800 qcs4490 wcn6755 wcd9375 snapdragon_8\+_gen_2_firmware wsa8845 snapdragon_ar2_gen_1 wcn3988_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wsa8835_firmware sxr1230p wsa8810 ssg2115p_firmware qcs6490 wsa8830_firmware video_collaboration_vc3_platform Snapdragon wcn6740_firmware talynplus_firmware wcd9380_firmware qcm4490_firmware qcm8550_firmware qcs4490_firmware qcm6490_firmware wsa8832_firmware wsa8840_firmware sg8275p_firmware fastconnect_6900_firmware qcs8550_firmware wcn3988_firmware sxr1230p_firmware fastconnect_6700_firmware wcn3950_firmware wsa8810_firmware fastconnect_7800_firmware wcn6755_firmware snapdragon_ar2_gen_1_platform_firmware wcd9395_firmware snapdragon_8_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware sm8635_firmware qcm5430_firmware qcs6490_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware wcd9370_firmware sm8550p_firmware sd_8_gen1_5g_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8845_firmware wsa8815_firmware wsa8835_firmware ssg2115p_firmware wcd9375_firmware wsa8845h_firmware snapdragon_8_gen_2_mobile_platform_firmware

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-822

Untrusted Pointer Dereference

CVE-2024-33045

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 10.72%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Return of Stack Variable Address in Buses

Memory corruption when BTFM client sends new messages over Slimbus to ADSP.

CWE ID-CWE-562

Return of Stack Variable Address

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33052

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.72%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption when user provides data for FM HCI command control operations.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33054

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 24.81%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.

Product-qcm8550_firmware sdm429w_firmware wsa8845_firmware wsa8832 wsa8840 qcs8550_firmware wcd9370 snapdragon_8_gen_2_mobile_firmware wcd9385 wcd9395_firmware wcd9390_firmware fastconnect_6700 snapdragon_8_gen_2_mobile sg8275p wsa8832_firmware wcd9370_firmware wcd9395 sg8275p_firmware snapdragon_8\+_gen_2_mobile qcm6490_firmware wcn3660b wcn3620_firmware wcd9390 qcm6490 wsa8845h_firmware sm8550p_firmware qcm8550 qcs6490_firmware sdm429w wcn3660b_firmware wsa8835 wsa8840_firmware qcs5430 wsa8845h wcd9380_firmware qcm5430 qcm5430_firmware wsa8830 sm8550p wcn6755_firmware wcn3620 snapdragon_8_gen_3_mobile_firmware wcd9375_firmware fastconnect_6900 fastconnect_7800_firmware snapdragon_429_mobile sm8635 qcs5430_firmware sm8635_firmware wcd9385_firmware fastconnect_6900_firmware qcs8550 wcd9380 fastconnect_7800 snapdragon_8\+_gen_2_mobile_firmware wcd9375 wcn6755 wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wsa8835_firmware snapdragon_429_mobile_firmware qcs6490 snapdragon_8_gen_3_mobile wsa8830_firmware video_collaboration_vc3_platform Snapdragon wcd9380_firmware qcm8550_firmware qcm6490_firmware wsa8832_firmware wsa8840_firmware sg8275p_firmware fastconnect_6900_firmware qcs8550_firmware sdm429w_firmware fastconnect_6700_firmware fastconnect_7800_firmware wcn6755_firmware wcd9395_firmware sm8635_firmware qcm5430_firmware qcs6490_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware wcd9370_firmware sm8550p_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware wcd9375_firmware wsa8845h_firmware snapdragon_8_gen_2_mobile_platform_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33042

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.72%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption when Alternative Frequency offset value is set to 255.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23356

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.26%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-26 Nov, 2024 | 16:40

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Memory corruption during session sign renewal request calls in HLOS.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23355

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.26%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-26 Nov, 2024 | 15:32

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive

Memory corruption when keymaster operation imports a shared key.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-21474

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 19.07%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-15 Jan, 2025 | 16:57

Stack-based Buffer Overflow in PMIC

Memory corruption when size of buffer from previous call is used without validation or re-initialization.

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-21481

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.14%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor

Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-21469

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.11% / 29.81%

7 Day CHG~0.00%

Published-01 Jul, 2024 | 14:17

Updated-01 Aug, 2024 | 22:20

Permissions, Privileges, and Access Control issues in TZ Secure OS

Memory corruption when an invoke call and a TEE call are bound for the same trusted application.

CWE ID-CWE-264

Not Available

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-21476

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 24.82%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-15 Jan, 2025 | 17:00

Improper Input Validation in Secure Processor

Memory corruption when the channel ID passed by user is not validated and further used.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1886

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 10.39%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:30

Updated-03 Aug, 2024 | 16:25

Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware fsm10055 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware wcn3950_firmware sc8180x\+sdx55 sa8150p_firmware qcs2290 qca6595au_firmware sa6155 msm8917 sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sd632 sa415m wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g wcn3660b sd450_firmware qsm8350_firmware qsm8350 sd460_firmware qca4020 qca6574au_firmware wcd9375_firmware wcn3998_firmware sa6155_firmware qca6420 apq8053_firmware wcd9360 wcn3999 qcs6125 sa8155_firmware qca4004_firmware sd662_firmware qcs405 qca6430 wcd9306_firmware sd765g qualcomm215_firmware fsm10056_firmware qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware msm8937 wcn3660_firmware mdm9655 qca6696_firmware pm8937_firmware qca6431 wcd9371 sd870_firmware sd750g wcn3910_firmware sd_8cx sa8150p qca4004 wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware sa8195p_firmware wcn6750_firmware sd450 wcn3610 mdm9640 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w msm8996au_firmware qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6430_firmware wcd9335_firmware sd439_firmware qcs605 wcn6850 sd7c wcn3910 qca6320 msm8937_firmware mdm9650_firmware sd_8c_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 sd730 sdx55m qca6421_firmware wcn6740_firmware msm8953 sd821_firmware sd678_firmware apq8064au_firmware ar8031_firmware wcn3680_firmware qca6234 wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware qca6694au_firmware qcm4290_firmware sd480 sd870 wcn6855 qcs610_firmware qsm8250 sa6145p sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware sa8145p sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sd780g_firmware sdx55 apq8053 sa8155p csra6640 sd675 sd439 wcn3660 qca9379 qca6234_firmware ar8035_firmware qsm8250_firmware qcm2290 wcn3991_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware fsm10056 sd7c_firmware csrb31024 mdm9650 sd_636 csra6620 fsm10055_firmware qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 qca6584au_firmware qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcn3615_firmware sd662 apq8037 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware wcd9306 qca6584au sd778g qca6564au_firmware sa6155p_firmware pm8937 sa515m_firmware sd429 sdxr2_5g sdm630 sd821 mdm9655_firmware sa415m_firmware wcn3988_firmware sd429_firmware sa6145p_firmware qca6421 sd778g_firmware sm6250 sd712_firmware sa8195p apq8017_firmware qca6694 sd765_firmware wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 apq8064au sm6250_firmware sc8180x\+sdx55_firmware qca6694_firmware msm8953_firmware qca6694au sda429w msm8917_firmware wcn3620_firmware sd820 sd888_5g_firmware wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qca6564a qcm6125_firmware qcm2290_firmware sd_675 sd780g sd865_5g qca6595 sdx24 wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a wcn6855_firmware qca6174a sm7325p wcn6750 mdm9205 sa515m qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 qca6175a sd765 qca6574a_firmware sd768g_firmware sd850_firmware sd460 qca6391 sdxr1_firmware aqt1000_firmware msm8920 qcm4290 csrb31024_firmware sdx50m sd480_firmware msm8920_firmware sd_455 qca6574au sa8155p_firmware qcm6125 wcn6856 sd_8c wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sa6150p msm8940 apq8096au_firmware apq8037_firmware sm7250p sd720g_firmware qcs410_firmware qca6175a_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1959

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.39%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 16:25

Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware fsm10055 sm7250 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware wcn3950_firmware sc8180x\+sdx55 sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sm4125 sd720g mdm9628 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware mdm9230_firmware qca6574au_firmware mdm9630 wcd9375_firmware wcn3998_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware sd662_firmware qca6430 wcd9306_firmware wcd9340 sd765g qca1990_firmware qualcomm215_firmware fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g wcn3910_firmware sd_8cx sa8150p mdm9207_firmware wsa8830_firmware mdm9330_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware sa8195p_firmware msm8208_firmware wcn6750_firmware sd450 wcn3610 msm8608 mdm9640 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware qet4101_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6174 qca6430_firmware wcd9335_firmware sd439_firmware wcn3980 qca6335_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware sd_8c_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 qca1990 wcn3980_firmware sd730 wcd9330_firmware sdx55m qca6421_firmware msm8953 sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware sa6145p sdxr1 apq8096au qca6595_firmware sa8145p mdm8207_firmware sdm630_firmware sd820_firmware qca6391_firmware wcd9370_firmware sdx55 apq8053 sa8155p sd675 sd439 qet4101 wcn3660 qca9379 ar8035_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware fsm10056 sm7250_firmware sd7c_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 fsm10055_firmware qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware wcn3990_firmware qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 wcd9326_firmware wcn3615_firmware sd662 apq8037 sa8155 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 sa6155p_firmware qca6310 sa515m_firmware sd429 qcs6490 sdxr2_5g qca9367 sdm630 mdm9607_firmware sd821 msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sd778g_firmware sa6145p_firmware sm6250 sa8195p sd712_firmware apq8017_firmware wsa8810_firmware qca6694 sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 msm8976 ar8035 sm6250_firmware sc8180x\+sdx55_firmware qca6694_firmware msm8953_firmware qca6694au sda429w msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 csr6030_firmware qca6564a mdm9630_firmware qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd865_5g qca6595 sdx24 msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware sm7325 wcn6750 sa515m qca6574_firmware sd855 sm4125_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware msm8920 qcm4290 csrb31024_firmware qcm6490_firmware sdx50m sdx20 sd480_firmware msm8920_firmware sd_455 qca6574au sd710 sa8155p_firmware mdm9607 sd205_firmware wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 sd_8c wcn3680b sd835_firmware sd768g qca6696 sd845_firmware msm8608_firmware sdw2500 sa6150p msm8940 apq8096au_firmware sd845 apq8037_firmware sd720g_firmware sdx12 qcs410_firmware mdm9330 sd850 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1979

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.39%

7 Day CHG~0.00%

Published-12 Nov, 2021 | 06:15

Updated-03 Aug, 2024 | 16:25

Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-fsm10055 qca9377_firmware mdm9150_firmware wcn3991_firmware sd678 sm7250 sm6250p_firmware wsa8830 qcs610 fsm10056 qca8337 sm7250_firmware qca6431_firmware sd7c_firmware csrb31024 wcd9360_firmware mdm9650 sd_636 sdx65 fsm10055_firmware wcn3950_firmware sc8180x\+sdx55 mdm9250 sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware qca6335 sd690_5g sd730_firmware sd_455_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qcs6125_firmware qca6426 qca6584au_firmware wcn3990_firmware sm8450 qca9377 sa415m wcn3998 sd_8cx_firmware wcd9371_firmware sdxr2_5g_firmware wcd9385_firmware wcd9326_firmware sd720g wcn3950 whs9410 sm6375_firmware qsm8350_firmware sd710_firmware qsm8350 sa8155 qca6320_firmware wcn7850 qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware wcn3998_firmware qca6420 qca6436_firmware wcd9360 qca6564au_firmware qca6584au sd778g qca6310 whs9410_firmware sa515m_firmware qcs6490 wcn7851 sdxr2_5g qcs6125 sa8155_firmware sdm630 sa415m_firmware wcn3988_firmware qca6430 qca6421 sd712_firmware sd778g_firmware sm6250 wcd9340 wsa8810_firmware sd765g sm8450_firmware sd765_firmware fsm10056_firmware qca6436 wcd9326 wcd9335 wcn6851 qca8081 qcs603_firmware wcn7851_firmware qca6174a_firmware mdm9250_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware wcd9371 sd750g sd870_firmware ar8035 qca6390 sd_8cx aqt1000 sd750g_firmware wcd9375 sc8180x\+sdx55_firmware sm6250_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sdx20_firmware qcm6490 sd712 sd888_5g_firmware sd660_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware qcx315 qca6564a wcn6750_firmware qcm6125_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd780g sd865_5g qca6564au sdx24 sdx55m_firmware sm8450p_firmware wcn6856_firmware sd670_firmware qcx315_firmware wsa8835 sd665_firmware wcd9380 sd888_5g sm6250p qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6174a sdx24_firmware qca6310_firmware sm7325 qca6430_firmware wcd9335_firmware wcn3980 wcn6750 qca6335_firmware sa515m qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 sd7c qca6320 wcn3910 mdm9650_firmware sd_8c_firmware sd765 qca6426_firmware qca6574a_firmware sd768g_firmware sd835 sd850_firmware wcn3980_firmware sd730 qca6391 sdx55m sdxr1_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware csrb31024_firmware qcm6490_firmware sdx50m sdx20 sd480_firmware qcs603 wcn6851_firmware sd_455 qca6574au sa8155p_firmware sd710 sd_636_firmware sd670 qca6564a_firmware wcd9341_firmware qcm6125 sd480 sd870 sm8450p wcn6855 wsa8810 qcs610_firmware mdm9150 wcn6856 sd_8c sd835_firmware sdxr1 sd768g wcn6740 qca6696 sdm630_firmware qca6391_firmware sd845_firmware sd780g_firmware wcd9370_firmware sdx55 sa8155p sd675 sd845 sd720g_firmware sdx12 qcs410_firmware ar8035_firmware sd850 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1890

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 10.39%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:30

Updated-03 Aug, 2024 | 16:25

Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2304

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 31.77%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 18:49

Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, QCN7605, QCS405, QCS605, SDA845, SDM660, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2024-45542

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.84%

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-11 Aug, 2025 | 15:06

Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

Product-wsa8845_firmware qcc2076_firmware wsa8840 wcd9370 sc8180xp-aaab_firmware wcd9340_firmware wcd9385 sc8380xp wcd9341_firmware qca1064 qcn7606 snapdragon_7c_compute_platform_firmware qcn7605_firmware snapdragon_7c\+_gen_3_compute_firmware qcc2073_firmware fastconnect_6700 qca1064_firmware qca6420 sc8180xp-ad sc8280xp-abbb snapdragon_7c_gen_2_compute_platform_firmware qca6430 wsa8815_firmware wcd9370_firmware sc8180xp-ad_firmware qcn7605 qcc2076 qcm6490_firmware sc8180xp-aaab qcn7606_firmware qca6595au wcd9340 wcd9341 qcm6490 wsa8810_firmware wsa8845h_firmware qca2062 qca6420_firmware aqt1000_firmware qcs6490_firmware sc8180xp-acaf qca2064_firmware snapdragon_7c\+_gen_3_compute wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware qca2066_firmware qca6430_firmware fastconnect_6800_firmware qcs5430 wsa8845h wcd9380_firmware qcm5430 sm6250_firmware sc8180x-ad_firmware qcm5430_firmware sc8180x-acaf wsa8815 wsa8830 sc8180x\+sdx55_firmware qca2062_firmware qcc2073 sc8380xp_firmware qca2065 fastconnect_6800 qca1062 fastconnect_7800_firmware fastconnect_6900 wcd9375_firmware qca6391 qcs5430_firmware sc8180x\+sdx55 snapdragon_7c_gen_2_compute_platform wcd9385_firmware sm6250 fastconnect_6900_firmware wcd9380 qca1062_firmware fastconnect_6200 sc8280xp-abbb_firmware fastconnect_7800 sc8180x-acaf_firmware wcd9375 snapdragon_7c_compute_platform wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware qca2064 sc8180x-ad sc8180x-aaab wsa8810 sc8180x-aaab_firmware wsa8835_firmware qca2066 qcs6490 sc8180xp-acaf_firmware fastconnect_6200_firmware qca2065_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-45581

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.05% / 16.42%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:12

Out-of-bounds Write in Audio

Memory corruption while sound model registration for voice activation with audio kernel driver.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-43549

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.12% / 32.29%

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-10 Jan, 2025 | 20:07

Stack-based Buffer Overflow in WLAN HAL

Memory corruption while processing TPC target power table in FTM TPC.

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-43554

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 11.12%

7 Day CHG~0.00%

Published-01 Jul, 2024 | 14:17

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services

Memory corruption while processing IOCTL handler in FastRPC.

Product-wsa8845_firmware snapdragon_7c\+_gen_3 wsa8840 wcd9370 sc8180x-ab_firmware wcd9340_firmware wcd9385 sc8380xp wcd9341_firmware sc8180xp-ab_firmware sc8280xp-bb sc8180x-af sc8180x-ab fastconnect_6700 qca6420 sc8180xp-ab sc8180xp-ad qca6430 wsa8815_firmware wcd9370_firmware sc8180xp-ad_firmware qcm6490_firmware wcd9340 wcd9341 qcm6490 sc8180xp-aa_firmware wsa8810_firmware wsa8845h_firmware sc8180x-af_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware sc8180x-ac wsa8835 wsa8840_firmware qca6391_firmware sc8180x-ac_firmware qca6430_firmware sc8180x-aa fastconnect_6800_firmware qcs5430 wsa8845h sc8180xp-ac_firmware wcd9380_firmware qcm5430 sc8180x-ad_firmware qcm5430_firmware wsa8815 wsa8830 sc8180x\+sdx55_firmware sc8380xp_firmware sc8180xp-ac fastconnect_6800 sc8280xp-ab_firmware wcd9375_firmware fastconnect_7800_firmware fastconnect_6900 snapdragon_7c\+_gen_3_firmware qca6391 sc8280xp-ab qcs5430_firmware sc8180x\+sdx55 wcd9385_firmware sc8180xp-af_firmware fastconnect_6900_firmware sc8180xp-aa wcd9380 fastconnect_6200 sc8180x-aa_firmware fastconnect_7800 wcd9375 sc8180xp-af wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware sc8180x-ad wsa8835_firmware wsa8810 qcs6490 fastconnect_6200_firmware sc8280xp-bb_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon aqt1000_firmware qcm5430_firmware wcd9380_firmware qca6430_firmware qcs6490_firmware qcm6490_firmware qcs5430_firmware wsa8840_firmware qualcomm_video_collaboration_vc3_platform_firmware qca6391_firmware wcd9385_firmware fastconnect_6900_firmware wcd9370_firmware sc8380xp_firmware wcd9340_firmware wsa8830_firmware wsa8845_firmware fastconnect_6700_firmware wsa8815_firmware wsa8835_firmware wsa8810_firmware fastconnect_6200_firmware wcd9341_firmware fastconnect_7800_firmware qca6420_firmware wcd9375_firmware wsa8845h_firmware fastconnect_6800_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-43513

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.48%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in PCIe

Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CVE-2024-43049

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.59%

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:28

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.

Product-fastconnect_7800 wcd9380_firmware wsa8830 sdm429w wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware qcc2073 wsa8835 wsa8840 sdm429w_firmware fastconnect_6700_firmware snapdragon_7c\+_gen_3_compute wcd9380 fastconnect_7800_firmware wsa8845h fastconnect_6700 snapdragon_8cx_gen_3_compute_platform wcd9385 qcc2076_firmware wcd9385_firmware wsa8845 qcc2073_firmware wcn3660b wsa8830_firmware qcc2076 wsa8845_firmware wcn3620_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3660b_firmware wsa8835_firmware sc8380xp snapdragon_429_mobile_platform_firmware wcn3620 wsa8845h_firmware snapdragon_429_mobile_platform snapdragon_8cx_gen_3_compute_platform_firmware Snapdragon wcd9380_firmware qcc2076_firmware wsa8840_firmware wcd9385_firmware fastconnect_6900_firmware qcc2073_firmware sc8380xp_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wsa8845h_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2319

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 28.66%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2251

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.87%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 18:42

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8016, APQ8096AU, APQ8098, MDM9205, MSM8996AU, MSM8998, Nicobar, QCS405, QCS605, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2246

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.25%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 18:42

Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9205, MDM9640, MSM8996AU, QCA6574, QCS605, Qualcomm 215, SD 425, SD 427, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX24, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 mdm9640_firmware sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 sd_636 snapdragon_high_med_2016_firmware qca6574 msm8996au sd_820 sd_450_firmware sd_845_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_8cx_firmware mdm9205 sd_845 qcs605 qca6574_firmware mdm9640 sd_835_firmware sd_835 sda660 sxr1130_firmware sxr1130 sd_665_firmware sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sd_425 sdm660 sdm630 sd_710_firmware sd_435 sd_625 sd_820_firmware sd_636_firmware sd_439_firmware qualcomm_215_firmware sd_429_firmware sd_730 snapdragon_high_med_2016 sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware mdm9205_firmware sda660_firmware sd_8cx sd_427 sd_670 sd_435_firmware sd_710 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-14028

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.69%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Buffer overwrite during memcpy due to lack of check on SSID length validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS404, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-qca9377_firmware apq8096_firmware mdm9640_firmware qca4531_firmware msm8996au_firmware sdm845 apq8096 sdx24 qcs404_firmware mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca6564 qca9379_firmware qca6174a sdm670_firmware qcs404 sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 qca4531 apq8098 qcn7605 ipq6018_firmware mdm9206_firmware qca6574_firmware qca9886 qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware apq8064 sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p qca8081 mdm9207c_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware qca6564_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware apq8053 sm6150_firmware apq8096au_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-14000

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.39%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory corruption and potential information leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9607, MDM9640, MDM9645, MDM9650, MDM9655, MSM8905, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCS404, QCS405, QCS605, QM215, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-mdm9150_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8996au mdm9645 sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 sda845_firmware apq8098 ipq6018_firmware mdm9205 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware mdm9655_firmware sdm660 sc8180x_firmware qcs405 ipq8074_firmware sdm710 qm215 mdm9607 mdm9645_firmware apq8017_firmware sdm710_firmware sa6155p qca8081 mdm9150 msm8937 msm8996_firmware msm8905 ipq6018 sm8150_firmware sxr2130_firmware mdm9655 apq8096au sdm439_firmware rennell qcs405_firmware sdm630_firmware mdm9205_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-14105

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.69%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150

Product-sm8150_firmware sm8150 sda845_firmware sdm845 sda845 sdm845_firmware Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-14050

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.39%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Out-of-bound writes occurs due to lack of check of buffer size will cause buffer overflow only in 32bit architecture. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, MDM9150, MDM9205, MDM9607, MDM9650, MSM8905, Nicobar, QCS405, QCS605, Rennell, SA6155P, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, SXR1130

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33031

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.34%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Automotive Audio

Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33074

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 6.78%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-05 Feb, 2025 | 18:05

Use After Free in Audio

Memory corruption in Audio when SSR event is triggered after music playback is stopped.

Product-qam8255p_firmware wsa8830 wcd9380_firmware sa6150p_firmware ssg2125p sa8145p_firmware sxr2230p_firmware sw5100p qam8650p sd865_5g sg8275p_firmware snapdragon_w5\+_gen_1_wearable_platform wcn785x-5 qca6595 qam8775p wsa8840 wsa8835 qca6574 sxr1230p_firmware wcn3950_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wcd9380 sa8150p_firmware qca6595au_firmware ssg2125p_firmware qca6574a ssg2115p wcn685x-5_firmware sxr1230p wcn685x-1 sg8275p snapdragon_8_gen_2_mobile_platform wcn6750 wcn3980 wcd9385_firmware qam8295p wcn3950 wsa8845 qcm4325_firmware qca6574_firmware wsa8815 sxr2230p wsa8845_firmware qam8295p_firmware snapdragon_xr2_5g_platform_firmware qca6574a_firmware qca6574au_firmware qca6595au sm6225-ad wsa8845h_firmware wcn785x-5_firmware wcn3980_firmware sa8295p snapdragon_w5\+_gen_1_wearable_platform_firmware sm8475_firmware sa6155p_firmware sm6225 snapdragon_xr2_5g_platform sm6225-ad_firmware wsa8840_firmware qca6698aq sa4155p_firmware wsa8832_firmware wcn685x-5 sm6225_firmware wcn3988_firmware qca6797aq_firmware wcn785x-1_firmware qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware snapdragon_8\+_gen_2_mobile_platform sw5100 wsa8810 wsa8845h wsa8832 wcd9395_firmware sa8255p_firmware sa6155p sw5100p_firmware sm8550p qca6698aq_firmware sa6145p wcn685x-1_firmware wcd9385 qam8650p_firmware qam8775p_firmware sa8255p qca6696_firmware qca6595_firmware sa8145p wcd9395 qca6696 qca6797aq sa4150p_firmware wcn6750_firmware sa8150p sm8550p_firmware sa6150p wcd9390 wcd9390_firmware sa8155p wsa8830_firmware sd865_5g_firmware wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware ssg2115p_firmware sw5100_firmware sm8475 sa8295p_firmware qam8255p sa4155p sa4150p snapdragon_8_gen_2_mobile_platform_firmware wcn785x-1 qcm4325 Snapdragon

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33030

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.06% / 18.86%

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-03 Jun, 2025 | 14:46

Buffer Copy without Checking Size of Input in HLOS

Memory corruption in HLOS while running playready use-case.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10527

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.39%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 22:24

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Bitra, IPQ6018, IPQ8074, Kamorta, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6574AU, QCA8081, QCM2150, QCN7605, QCN7606, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA515M, SA6155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-mdm9150_firmware mdm9640_firmware qcs610 sdm450_firmware sdm632 qcs404_firmware mdm9650 apq8009_firmware msm8917 sdm670 qcs605_firmware sda845_firmware sa415m qca4531 bitra apq8098 qcn7605 mdm9206_firmware bitra_firmware msm8905_firmware qca6574au_firmware sda660 sdx55_firmware qca8081_firmware sxr1130 msm8909w apq8053_firmware sda845 sa6155p_firmware sdm450 sdm636_firmware sa515m_firmware apq8098_firmware msm8998_firmware sdm630 mdm9607_firmware sm8250_firmware sa415m_firmware qcs405 qm215 sc7180_firmware apq8017_firmware sdm710_firmware sa6155p qca8081 msm8937 msm8905 sm8150_firmware msm8909 sxr2130_firmware rennell sc7180 msm8953_firmware saipan_firmware sm6150_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 kamorta apq8017 msm8996 saipan qcn7606_firmware mdm9640 kamorta_firmware qca4531_firmware qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdx24 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 sxr2130 sc8180x mdm9206 sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 ipq6018_firmware mdm9205 sa515m qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware sxr1130_firmware apq8009 msm8909_firmware nicobar sdm850_firmware msm8920 msm8953 sdx20 qcm2150 msm8920_firmware sdm660 sc8180x_firmware ipq8074_firmware qca6574au sdm710 mdm9607 qcn7605_firmware qcs610_firmware mdm9150 mdm9207c_firmware msm8996_firmware ipq6018 mdm9207c apq8096au sdm439_firmware qcs405_firmware sdm630_firmware mdm9205_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8940 apq8053 apq8096au_firmware sm8250 nicobar_firmware sdm660_firmware qcn7606 sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10615

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.39%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 22:32

u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster bob which can lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS404, QCS405, QCS605, QCS610, QM215, Rennell, SA415M, SA515M, SA6155P, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-mdm9150_firmware kamorta_firmware qcm2150_firmware qcs610 sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware qcs404 sdx24_firmware sdm636 sda845_firmware sa415m apq8098 mdm9205 mdm9206_firmware sa515m qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware sa515m_firmware apq8098_firmware msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware sdm660 sc8180x_firmware sa415m_firmware qcs405 sdm710 qm215 sc7180_firmware mdm9607 apq8017_firmware sdm710_firmware sa6155p qcs610_firmware mdm9150 msm8937 msm8996_firmware msm8905 sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sc7180 sdm630_firmware mdm9205_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdm850 kamorta apq8017 msm8996 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2019-10480

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.25%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Out of bound write can happen in WMI firmware event handler due to lack of validation of data received from WLAN firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCA9980, QCN7605, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130

Product-qca9377_firmware mdm9640_firmware qca9980_firmware msm8996au_firmware sdm845 sdx24 mdm9650 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 qcs605_firmware ipq4019_firmware mdm9206 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 qcn7605 mdm9615 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware qca6574au_firmware sda660 ipq8064 sxr1130_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware ipq8064_firmware sda845 msm8920 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware qca6574au sdm710 mdm9607 qca9980 apq8017_firmware sdm710_firmware msm8939_firmware qcn7605_firmware msm8937 mdm9207c_firmware mdm9207c qca6174a_firmware sm8150_firmware msm8909 apq8096au sdm630_firmware sda660_firmware ipq4019 msm8940 apq8053 sm6150_firmware apq8096au_firmware msm8917_firmware mdm9615_firmware sm8150 sdx20_firmware apq8017 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10569

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.39%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Stack buffer overflow due to instance id is misplaced inside definition of hardware accelerated effects in makefile in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, APQ8098, MDM9607, MDM9640, MSM8998, QCS605, SC8180X, SDM439, SDM630, SDM636, SDM660, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10597

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.49%

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 22:24

kernel writes to user passed address without any checks can lead to arbitrary memory write in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, MSM8996, MSM8996AU, Nicobar, QCS605, Rennell, Saipan, SC7180, SC8180X, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10604

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.69%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 22:24

Possibility of heap-buffer-overflow during last iteration of loop while populating image version information in diag command response packet, in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MDM9607, MDM9640, MSM8909W, MSM8917, MSM8953, Nicobar, QCS605, QM215, Rennell, SA6155P, Saipan, SDA660, SDM429, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-10595

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.25%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8064, APQ8096AU, IPQ4019, IPQ8064, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8909, MSM8909W, MSM8939, MSM8996AU, QCA4531, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCA9558, QCA9880, QCA9886, QCA9980, SDA660, SDM630, SDM636, SDM660, SDX20, SDX24