ByteOS

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product

Versions

Affected

AR8035, FSM10055, FSM10056, MDM9150, MDM9650, QCA6174A, QCA6390, QCA6391, QCA6426, QCA6436, QCA8081, QCA8337, QCA9377, QCM2290, QCM4290, QCM6125, QCM6490, QCS2290, QCS410, QCS4290, QCS610, QCS6125, QCS6490, QCX315, SD 675, SD 8 Gen1 5G, SD460, SD480, SD662, SD665, SD675, SD678, SD690 5G, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD778G, SD865 5G, SD870, SD888 5G, SDX55, SDX55M, SDX65, SDXR2 5G, SM6225, SM6250, SM6250P, SM6375, SM7250P, SM7325P, SW5100, SW5100P, WCD9335, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3910, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, WCN3998, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WSA8810, WSA8815, WSA8830, WSA8835

Problem Types

Type	CWE ID	Description
text	N/A	Information Exposure in Data Modem

Type: text

CWE ID: N/A

Description: Information Exposure in Data Modem

Metrics

Version	Base score	Base severity	Vector
3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:01 Apr, 2022 | 05:15

Updated At:19 Apr, 2023 | 17:10

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Secondary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 2.0

Base score: 2.1

Base severity: LOW

Vector:

AV:L/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

>>ar8035>>-

cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*

>>ar8035_firmware>>-

cpe:2.3:h:qualcomm:fsm10055:-:*:*:*:*:*:*:*

>>fsm10055>>-

cpe:2.3:o:qualcomm:fsm10055_firmware:-:*:*:*:*:*:*:*

>>fsm10055_firmware>>-

cpe:2.3:h:qualcomm:fsm10056:-:*:*:*:*:*:*:*

>>fsm10056>>-

cpe:2.3:o:qualcomm:fsm10056_firmware:-:*:*:*:*:*:*:*

>>fsm10056_firmware>>-

cpe:2.3:h:qualcomm:mdm9150:-:*:*:*:*:*:*:*

>>mdm9150>>-

cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*

>>mdm9150_firmware>>-

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

>>mdm9650>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

>>mdm9650_firmware>>-

cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*

>>qca6174a>>-

cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*

>>qca6174a_firmware>>-

cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*

>>qca6390>>-

cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*

>>qca6390_firmware>>-

cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*

>>qca6391>>-

cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*

>>qca6391_firmware>>-

cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*

>>qca6426_firmware>>-

cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:*

>>qca6426>>-

cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*

>>qca6436_firmware>>-

cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:*

>>qca6436>>-

cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*

>>qca8081_firmware>>-

cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

>>qca8081>>-

cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*

>>qca8337_firmware>>-

cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*

>>qca8337>>-

cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*

>>qca9377_firmware>>-

cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*

>>qca9377>>-

cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*

>>qcm2290_firmware>>-

cpe:2.3:h:qualcomm:qcm2290:-:*:*:*:*:*:*:*

>>qcm2290>>-

cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*

>>qcm4290_firmware>>-

cpe:2.3:h:qualcomm:qcm4290:-:*:*:*:*:*:*:*

>>qcm4290>>-

cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*

>>qcm6125_firmware>>-

cpe:2.3:h:qualcomm:qcm6125:-:*:*:*:*:*:*:*

>>qcm6125>>-

cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*

>>qcm6490_firmware>>-

cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*

>>qcm6490>>-

cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*

>>qcs2290_firmware>>-

cpe:2.3:h:qualcomm:qcs2290:-:*:*:*:*:*:*:*

>>qcs2290>>-

cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*

>>qcs410_firmware>>-

cpe:2.3:h:qualcomm:qcs410:-:*:*:*:*:*:*:*

>>qcs410>>-

cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*

>>qcs4290_firmware>>-

cpe:2.3:h:qualcomm:qcs4290:-:*:*:*:*:*:*:*

>>qcs4290>>-

cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*

>>qcs610_firmware>>-

cpe:2.3:h:qualcomm:qcs610:-:*:*:*:*:*:*:*

>>qcs610>>-

cpe:2.3:o:qualcomm:qcs6125_firmware:-:*:*:*:*:*:*:*

>>qcs6125_firmware>>-

cpe:2.3:h:qualcomm:qcs6125:-:*:*:*:*:*:*:*

>>qcs6125>>-

cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*

>>qcs6490_firmware>>-

cpe:2.3:h:qualcomm:qcs6490:-:*:*:*:*:*:*:*

>>qcs6490>>-

cpe:2.3:o:qualcomm:qcx315_firmware:-:*:*:*:*:*:*:*

>>qcx315_firmware>>-

cpe:2.3:h:qualcomm:qcx315:-:*:*:*:*:*:*:*

>>qcx315>>-

cpe:2.3:o:qualcomm:sd_675_firmware:-:*:*:*:*:*:*:*

>>sd_675_firmware>>-

cpe:2.3:h:qualcomm:sd_675:-:*:*:*:*:*:*:*

>>sd_675>>-

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	nvd@nist.gov

CWE ID: CWE-120

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

346Records found

CVE-2023-28582

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.17% / 38.28%

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-10 Jan, 2025 | 17:46

Buffer Copy Without Checking Size of Input in Data Modem

Memory corruption in Data Modem while verifying hello-verify message during the DTLS handshake.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28570

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.14%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Copy without Checking Size of Input in Audio

Memory corruption while processing audio effects.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28580

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.95%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN Host

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

Product-sw5100p qcs410_firmware sa6150p_firmware sa6155p_firmware qam8295p_firmware qcs610_firmware wcd9370 qca8081_firmware ar8035_firmware qca6696 wsa8830_firmware wcd9340_firmware qfw7124_firmware wcd9341_firmware qcc710_firmware wsa8815_firmware sa8195p_firmware wcd9370_firmware qca8337_firmware qca8337 wcn3660b qca6574au_firmware sa8195p qca6595au wcd9340 qam8295p wcd9341 qca6574au wcn3950 wsa8810_firmware wcn3988 wcn3980_firmware qcn6274 wcn3660b_firmware qfw7124 snapdragon_x75_5g_modem-rf_system wsa8835 qca6595au_firmware qca6391_firmware sw5100p_firmware sa8295p_firmware qca6696_firmware wcd9380_firmware sa6150p qcs410 sa8155p_firmware qca8081 wsa8815 video_collaboration_vc1_platform_firmware sa8155p wcn3680b_firmware wsa8830 qcn6274_firmware sa6145p qcc710 sw5100_firmware ar8035 qfw7114_firmware fastconnect_6900 fastconnect_7800_firmware qca6391 video_collaboration_vc1_platform qcn6224 qfw7114 wcn3950_firmware fastconnect_6900_firmware sa8295p snapdragon_8_gen_1_mobile_platform wcd9380 sa6145p_firmware fastconnect_7800 sa8145p_firmware wcn3680b sa8150p snapdragon_8_gen_1_mobile_platform_firmware sa8150p_firmware wcn3988_firmware sa6155p video_collaboration_vc3_platform_firmware sa8145p wsa8835_firmware wsa8810 snapdragon_x75_5g_modem-rf_system_firmware wcn3980 sw5100 video_collaboration_vc3_platform qcn6224_firmware qcs610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28539

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.03% / 7.44%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN Host

Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.

Product-sw5100p qcs410_firmware sa6150p_firmware sd865_5g ipq9574 qcn9000_firmware qca6595 qcn9022 qcs610_firmware wcd9335 ipq6028_firmware immersive_home_214_platform qca8081_firmware qca6696 wcd9340_firmware wcd9341_firmware ipq5028_firmware qcn6024 ar9380 qcc2073_firmware qcc710_firmware ipq8076 qca6426 ipq6018_firmware qca9984_firmware qcn6023 qcn5124_firmware immersive_home_216_platform qca8337 qca9994_firmware qca6426_firmware ipq6000 snapdragon_auto_4g_modem qca6574au_firmware ipq8078a ipq8078a_firmware qam8295p wcd9341 qca6574au wsa8810_firmware qcn9100_firmware snapdragon_835_mobile_pc_platform_firmware qcn5122 qca6554a fastconnect_6800_firmware sd835_firmware qcn6024_firmware qca9886_firmware video_collaboration_vc1_platform_firmware qca9880 qcn9000 qcc710 qcn6132_firmware fastconnect_6900 video_collaboration_vc1_platform qcn5052 qca9980 qfw7114 wcd9385_firmware qca6421 snapdragon_x55_5g_modem-rf_system ipq9574_firmware qca6310 qam8255p_firmware ipq8064 ipq8074a_firmware ipq8076a qcn5164 immersive_home_3210_platform_firmware sa6155p qca6421_firmware qca6564au_firmware csr8811_firmware wsa8810 qca8075 qca8085 qca6595au sa6155p_firmware sd835 qfw7124_firmware qca6436_firmware qcn9012 ipq8070a_firmware qcn9070 qca8084 sm8250-ac_firmware sdx65m csrb31024 snapdragon_x55_5g_modem-rf_system_firmware qcc2076 qca6574a sa8195p qca9898_firmware wcd9340 immersive_home_316_platform_firmware qcn6122_firmware qcn5154_firmware qca7500 immersive_home_3210_platform wcn3988 ipq4019 qcn5122_firmware qcn9274 qcn9024 ipq8076a_firmware qca6574 snapdragon_x75_5g_modem-rf_system ar9380_firmware ipq4029_firmware qcn9011 qcn9024_firmware qca8082 sa6150p qcs410 sa8155p_firmware sa8155p wsa8830 sa6145p qcn9074_firmware ipq8174 qcn6122 sa8255p_firmware flight_rb5_5g_platform_firmware qcc2073 ipq8174_firmware ar8035 ipq8072a qrb5165m_firmware qca9985 robotics_rb5_platform qcn6224 ipq8071a qcn6112 qca6698aq wcn3950_firmware qrb5165n sa8145p_firmware sa8150p_firmware snapdragon_w5\+_gen_1_wearable_platform video_collaboration_vc3_platform_firmware wcn3990 qcn6023_firmware qcn5164_firmware ipq8078 immersive_home_326_platform_firmware qcn9072 wsa8830_firmware qcn6224_firmware ipq4028_firmware qca6431 qca6678aq_firmware qca8386_firmware qca8082_firmware snapdragon_auto_4g_modem_firmware qcc2076_firmware qca9880_firmware sxr2130_firmware qca6678aq ar8035_firmware qcn5022_firmware qca9992 qrb5165m snapdragon_w5\+_gen_1_wearable_platform_firmware qca6320 sm8250-ab_firmware qca4024_firmware qca9898 ipq9008 qca6564au qca9992_firmware qca9990 ipq9008_firmware qcn9074 immersive_home_214_platform_firmware wsa8815_firmware sm8250-ab sa8195p_firmware qca8337_firmware qca9888 ipq8173 ipq8072a_firmware ipq6010_firmware wcn3950 flight_rb5_5g_platform snapdragon_xr2_5g_platform qcn6112_firmware snapdragon_x65_5g_modem-rf_system_firmware qca6797aq_firmware ipq5028 qca8085_firmware qcn9070_firmware sa8295p_firmware qca9984 ipq5010_firmware qcn9022_firmware qca9886 qcn6132 csrb31024_firmware ipq6018 qca6584au qca6320_firmware qcn6274_firmware qcn9011_firmware sw5100_firmware ipq8065 qca6310_firmware fastconnect_6800 qfw7114_firmware qca4024 qca6595_firmware sm8250-ac fastconnect_7800_firmware immersive_home_216_platform_firmware ipq8070a fastconnect_6900_firmware wcd9380 ipq4028 qam8255p sa6145p_firmware qca9990_firmware snapdragon_xr2_5g_platform_firmware qca7500_firmware sa8150p qca8075_firmware qcn5052_firmware snapdragon_835_mobile_pc_platform snapdragon_auto_5g_modem-rf_firmware ipq6010 sdx65m_firmware video_collaboration_vc3_platform sw5100 snapdragon_865_5g_mobile_platform_firmware qca9980_firmware qca9985_firmware qam8295p_firmware qca6431_firmware wcn3990_firmware qca6175a_firmware qca6698aq_firmware wcd9385 qca9994 qca8084_firmware sa8255p immersive_home_318_platform_firmware qcn5024 sdx55_firmware ipq8071a_firmware snapdragon_auto_5g_modem-rf ipq4019_firmware qca6554a_firmware sxr2130 ipq6028 qcn9100 immersive_home_326_platform ipq4029 snapdragon_x65_5g_modem-rf_system ipq8076_firmware wcd9335_firmware wcn3980_firmware qrb5165n_firmware qca6436 qca6584au_firmware qcn5152_firmware wsa8835 qcn6274 qca6391_firmware qfw7124 qca6595au_firmware sw5100p_firmware ipq8068 qca6696_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware qca6574_firmware qca8081 wsa8815 qcn5124 ipq8064_firmware qca6797aq qcn5152 ipq8065_firmware qca6574a_firmware sdx55 qcn9072_firmware qca9888_firmware ipq8074a immersive_home_318_platform qca9889 qca6175a qcn5024_firmware qca8386 qca6391 ipq5010 qcn9274_firmware ipq8173_firmware qcn9012_firmware sa8295p robotics_rb5_platform_firmware ipq8068_firmware ipq6000_firmware fastconnect_7800 sd865_5g_firmware ipq8078_firmware qca9889_firmware wcn3988_firmware qcn5154 sa8145p immersive_home_316_platform wsa8835_firmware csr8811 qcn5022 snapdragon_x75_5g_modem-rf_system_firmware wcn3980 qcs610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-28546

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.91%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in SPS Applications

Memory Corruption in SPS Application while exporting public key in sorter TA.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-28559

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.49%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28579

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.59%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN Host

Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

Product-sw5100p qcs410_firmware sa6150p_firmware sa6155p_firmware qam8295p_firmware qcs610_firmware wcd9370 qca6696 wcd9341_firmware wsa8815_firmware sa8195p_firmware wcd9370_firmware wcn3660b qca6574au_firmware sa8195p qca6595au qam8295p wcd9341 qca6574au wcn3950 wsa8810_firmware wcn3988 wcn3980_firmware wcn3660b_firmware wsa8835 qca6595au_firmware qca6391_firmware sw5100p_firmware sa8295p_firmware qca6696_firmware wcd9380_firmware sa6150p qcs410 sa8155p_firmware wcn3680b_firmware wsa8815 video_collaboration_vc1_platform_firmware sa8155p wsa8830 sa6145p sw5100_firmware fastconnect_7800_firmware fastconnect_6900 qca6391 video_collaboration_vc1_platform wcn3950_firmware fastconnect_6900_firmware sa8295p snapdragon_8_gen_1_mobile_platform wcd9380 sa6145p_firmware fastconnect_7800 sa8145p_firmware wcn3680b sa8150p snapdragon_8_gen_1_mobile_platform_firmware sw5100 sa8150p_firmware wcn3988_firmware sa6155p video_collaboration_vc3_platform_firmware sa8145p wsa8835_firmware wsa8810 wcn3980 wsa8830_firmware video_collaboration_vc3_platform qcs610 Snapdragon snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-28561

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.14% / 35.29%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:15

Updated-02 Aug, 2024 | 13:43

Buffer Copy Without Checking Size of Input in QESL

Memory corruption in QESL while processing payload from external ESL device to firmware.

Product-qcn7606 qcn7606_firmware Snapdragon qcn7606_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-11225

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.33% / 55.34%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product-qpm5579 qfs2580 fsm10055 qcs610 qcn5550 qca8337 qdm5579 ar9380 qdm2307 qfs2530 qpa8802 qln1030 pm6125 qat3519 qcn5124 pm8150a ipq8078a qtc800h qdm5670 qcs2290 sa6155 qca6335 pm7150l qpa8821 qcn5064 qln1020 qdm5671 pmc1000h qat3518 sd8c sa415m wcn3998 wcn3950 sm4125 sd720g ipq8076a qca6428 qdm5652 sd6905g ipq8071 qpm8870 qpm5679 qbt2000 pm855p qca6420 pm6150a ipq8065 sdr735g wcn3999 pm8150b qsm7250 qca7500 qcs6125 ipq6010 ipq8068 qcs405 qca6430 qat3522 pmr735a wcd9340 sd765g sdr660 qca6436 wcn6851 sa6155p qpa6560 sdr865 wcd9341 smr545 qca6431 qln5020 wcd9371 sd750g qca1062 qdm3302 sa8150p qpm5657 pm6350 qdm5621 qtc800s sd660 qdm5650 wcn3988 qca6438 wtr3925 sdr052 qcn5121 smb1390 qca9898 pm6150l ipq4028 sd8885g qet4100 qpm6585 qtc410s wcn3991 smb1355 ipq8072a qln4650 qpa8801 wgr7640 qat5568 qet5100 sd636 ipq8078 qca6564au ipq8173 sdxr25g qcn5164 qca9558 pm6150 qca6574 pm7250b qfs2630 qpa8842 pmm8996au wcd9380 qln4640 qcs410 smb1381 qcn5024 sdr735 pm7250 wtr4905 smb1395 pm660l qpa8803 smr526 wtr5975 qca9985 wcn3980 pmk8003 qdm2301 qsw8573 wsa8815 wcn6850 wcn3910 qca6320 qpm6375 smb1394 qca9984 ipq6028 ipq8064 sd835 pmp8074 qcn9024 pm8009 qpa8675 sd730 sdx55m pm8008 qsw8574 pmi8998 qcn5054 pm855l rsw8577 ipq8070 qca9896 sd8655g qcn5502 qca9994 qca9980 qpm5621 qpm6582 sd670 qca9880 wcn6855 pm8150l qdm5677 pm8005 sa6145p ipq6018 qdm2302 pmm6155au sdxr1 ar8031 apq8096au qpm5577 wtr2965 pm8150 qca4024 qpm5875 sdx55 qet5100m sa8155p csra6640 pm8350bhs sd675 qet4101 qat3516 qpm5658 pm855b smb2351 qln1031 qcn7606 qcm2290 qpm5870 qcn5500 wsa8830 sdr051 pm660 qca9561 qcn9070 qln5030 qpm6325 pm4125 qbt1500 fsm10056 qpa5581 pmi632 pm456 csrb31024 mdm9650 csra6620 qpm4621 qcn9072 qca9992 qcs4290 pmm855au qet6100 sdr660g qpa8686 smb1396 ipq6000 pm7150a wcd9370 ipq8072 pm8350 qca6564 sdr425 qca6426 ipq5018 qpm5641 qcn7605 qpm5541 qat5516 qca9563 qdm5620 qln1021aq ipq8074a smb1380 sd662 qca9982 pm8350bh qca1064 pm3003a sa8155 qat5533 qca6595au sm7350 qpm6670 smb1354 ipq5010 qca6584au qdm2305 qca6310 qpm8820 qpm4641 qpm2630 ipq8174 pm855 qca9990 pm8250 qcn5052 smb1398 sdm630 qdm4643 pmx55 qcn9074 sdr675 qca6421 sm6250 qdm3301 sa8195p qpm5677 qat5515 qca6694 qat3514 wcd9326 wcd9335 qet4200aq qca8081 qcn6023 ipq8071a wcd9385 qpm5620 pmm8155au qpm4630 qca6390 wcd9375 ar8035 aqt1000 csr8811 apq8064au ipq4019 pmm8195au qpa8673 qdm2310 qln4642 pm8998 pmk7350 qca6564a smr546 pmx24 qet6110 qln5040 qca9882 qca8072 qpm8895 qpm5670 wcn3990 qcn9000 qtm527 qca6595 pmk8350 qpm8830 qcn9012 pm8350b qat5522 wsa8835 msm8996au pm8150c pmr735b sm6250p rgr7640au qpa4360 qcn5154 qpa4361 ipq4018 qca6574a qca9889 pm8350c smr525 qca9888 ipq8074 qpm4640 wcn6750 pmr525 pm7350c qpm4650 qtm525 sa515m wtr6955 qca9886 sd855 sd8cx sd665 ipq8076 qca6175a sd765 qca9887 pm640p qcn5021 ipq8069 qcn5152 qat3555 sd460 qca6391 smb1351 qpa5461 ipq6005 qcn9100 pm660a qpa4340 qcm4290 sdx50m pm640a sdr8150 qfs2608 qln1036aq qtc801s qdm4650 qca9531 pmd9655 qca6574au sd710 qcn5122 qsw6310 qcm6125 qpm6621 wsa8810 qdm2308 qat3550 pmx50 wcn6856 qdm5679 qcn5022 sdr8250 sd768g wcn6740 qca6696 pm8004 pm640l pmk8002 qca8075 qpa2625 qcn6024 qcn9022 sd845 sa6150p ipq8070a sm7250p ipq4029 pm6250 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2017-11003

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.41%

7 Day CHG~0.00%

Published-10 Jan, 2018 | 22:00

Updated-16 Sep, 2024 | 23:56

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating a firmware image, data is read from flash into RAM without checking that the data fits into allotted RAM size.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-24851

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.67%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN HOST

Memory Corruption in WLAN HOST while parsing QMI response message from firmware.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2017-11013

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.27% / 50.42%

7 Day CHG~0.00%

Published-16 Nov, 2017 | 22:00

Updated-20 Apr, 2025 | 01:37

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, countOffset (in function UnpackCore) is increased for each loop, while there is no boundary check against "pIe->arraybound".

Vendor-Google LLC Qualcomm Technologies, Inc.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-2300

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.14%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 18:49

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8098, IPQ8074, MDM9206, MDM9207C, MDM9607, MSM8996, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA8081, QCA9377, QCA9379, QCA9886, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130

Product-qca9377_firmware apq8096_firmware msm8996au_firmware sdm845 apq8096 sm7150_firmware sm6150 msm8996au sm7150 apq8009_firmware sdm670 qcs605_firmware mdm9206 qca9379_firmware qca6174a sdm670_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 mdm9206_firmware qcs605 qca9886 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 sdm850_firmware sdm636_firmware apq8098_firmware msm8998_firmware sdm660 sdm630 mdm9607_firmware ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qca8081 mdm9207c_firmware msm8996_firmware mdm9207c qca6174a_firmware qca9886_firmware sm8150_firmware sdm630_firmware sda660_firmware apq8053 sm6150_firmware msm8998 sm8150 sdm850 apq8017 msm8996 qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-22384

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 3.62%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-27 Feb, 2025 | 20:48

Buffer Copy Without Checking Size of Input in VR Service

Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2288

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.26%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:42

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, Snapdragon_High_Med_2016, SXR1130

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 mdm9650 sdm429 msm8940_firmware snapdragon_high_med_2016_firmware msm8976_firmware msm8996au apq8009_firmware msm8917 sdm670 qcs605_firmware mdm9206 sdm670_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qca8081 mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 msm8909 apq8096au sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware msm8976 msm8953_firmware msm8940 apq8053 apq8096au_firmware msm8917_firmware msm8998 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-2252

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.20% / 78.12%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 18:42

Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sd_625_firmware sd_450 sd_8cx_firmware sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sxr1130 msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 qualcomm_215 sd_425 sdm660 sd_430_firmware sd_710_firmware sd_435 sdm630 sd_625 sd_210 sd_820_firmware sd_636_firmware sd_439_firmware qualcomm_215_firmware sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_427 sd_430 sd_670 sd_435_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-22386

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.44%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN HOST

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21640

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.52%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-26 Nov, 2024 | 18:56

Buffer Copy Without Checking Size of Input in Linux

Memory corruption in Linux when the file upload API is called with parameters having large buffer.

Product-fastconnect_7800 wsa8830_firmware wcd9380_firmware wsa8830 wsa8835 snapdragon_8_gen_1 wsa8835_firmware wcd9380 fastconnect_7800_firmware fastconnect_6900 fastconnect_6900_firmware snapdragon_8_gen_1_firmware Snapdragon snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21662

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.49%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Memory corruption in Core Platform while printing the response buffer in log.

Product-qca9377_firmware sd_8cx_gen3_firmware sa6150p_firmware qca8337 qca6431_firmware sdx65 wcn3950_firmware ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 qcs605_firmware sd_675_firmware wcn3998 qam8295p sd_8cx_gen2_firmware qcn6024_firmware qca8386_firmware wcn3950 sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware qca6420 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware qca6698aq sa4155p_firmware sa8155_firmware qca6430 sdx65m wcd9340 qcn6132 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qcn6122 wcd9341 qca6431 qca6696_firmware sd870_firmware ipq9008_firmware sd_8cx sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd660_firmware wcn7850_firmware sa8195p_firmware sa8295p_firmware wcn6750_firmware ipq5018_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p qca8084 qca6564au sdx55m_firmware wcn6856_firmware ipq9008 sd670_firmware qca6574 wcd9380 sdx50m_firmware sxr1230p sdx24_firmware qca6430_firmware qcn9012_firmware qcn9274_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 qca6426_firmware qcn9024 ipq9574_firmware wcn3980_firmware sdx55m sa8295p qca6421_firmware wcn6740_firmware sd678_firmware qrb5165 wcn6851_firmware qcs603 sd670 qca6564a_firmware qcn9024_firmware sdx57m sd870 wsa8832 wcn6855 sa8540p sa6145p qca6595_firmware sa8145p qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sdx70m ssg2115p_firmware qcs8155_firmware sa4155p ar8035_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sa8145p_firmware fsm10056 qca8082 qcn9072 qca8386 sd765g_firmware qca6420_firmware qca6390_firmware wcd9370 sd675_firmware ssg2115p qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware ipq5018 qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware qam8295p_firmware qcn9011_firmware qca8082_firmware sa8155 sa9000p_firmware sdx55_firmware qca6595au qcn6023_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware sd778g sa6155p_firmware qca6310 qcn9274 qcs8155 wcn7851 qcs6490 sdxr2_5g qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 sdx65m_firmware qca6174a_firmware wcd9385 qca8085_firmware qcs6490_firmware sd_8cx_gen3 sdx70m_firmware ar8035 qca6390 wcd9375 aqt1000 qcn9100_firmware ipq5010_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qca6564a sa4150p wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 sxr1230p_firmware sa8540p_firmware sd_8_gen1_5g sd888_5g ssg2125p_firmware qca6574a wcn6855_firmware qca6174a sm7325p qcn6132_firmware qca6310_firmware wcn6750 sa9000p qca6574_firmware sd855 sm7325p_firmware sdx57m_firmware sd765 qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware sm7315 qca6391 aqt1000_firmware qcn9100 sdx65_firmware qcm6490_firmware sdx50m wsa8832_firmware qcn9070_firmware qcn9011 qca6574au sa8155p_firmware ipq9574 wcd9341_firmware wsa8810 wcn6856 qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sa6150p qcn9022_firmware qcn6024 qcn9022 sd845 qcn9072_firmware sm7250p qcn9074_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2006-6024

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.46% / 62.95%

7 Day CHG~0.00%

Published-21 Nov, 2006 | 23:00

Updated-03 Apr, 2025 | 16:15

Multiple buffer overflows in Eudora Worldmail, possibly Worldmail 3 version 6.1.22.0, have unknown impact and attack vectors, as demonstrated by the (1) "Eudora WorldMail stack overflow" and (2) "Eudora WorldMail heap overflow" modules in VulnDisco Pack. NOTE: Some of these details are obtained from third party information. As of 20061118, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

Vendor-n/a Qualcomm Technologies, Inc.

Product-eudora_worldmail n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-11130

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.81%

7 Day CHG~0.00%

Published-12 Nov, 2020 | 10:00

Updated-04 Aug, 2024 | 11:21

u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-35129

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.19%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:11

Updated-04 Aug, 2024 | 00:33

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Product-ipq5018_firmware sd_8cx_gen3_firmware qca2066 wsa8830 qcn9070 qca8337_firmware wcd9380_firmware qcn9000 qca8337 wcn6856_firmware qcn9012 sd888 sdx65 qcn9072 qcn6122_firmware wsa8835 wcd9380 ipq5028_firmware sd888_5g qca2064_firmware qca2062 wcd9370 wcn6855_firmware qcn6132_firmware qcn9000_firmware qcn9012_firmware ipq5018 wcn6750 wcd9385_firmware qcn6024_firmware sd_8_gen1_5g_firmware wcn6850 qca2065 qcn6112 qcn6100_firmware qcn6102_firmware qcn9024 wcd9375_firmware qca8081_firmware qcn6023_firmware qca6391 ipq5010 qca2062_firmware qcn6102 qcn9100 sdx65_firmware qcs6490 qcm6490_firmware ipq5028 qcn9070_firmware wcn6851_firmware qcn6112_firmware qcn9074 qcn9024_firmware qcn6132 wcn6855 wcn6851 qca8081 wcn6856 qcn6023 wcd9385 qcn6122 qcc710 qca2066_firmware qca2065_firmware qcs6490_firmware sd_8cx_gen3 qca6391_firmware ar8035 wcd9375 qca2064 wcd9370_firmware sd888_firmware qcc710_firmware qcn9100_firmware qcn9022_firmware wsa8830_firmware qcn6024 qcn9022 ipq5010_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8835_firmware qcn6100 qcn9072_firmware qcn9074_firmware sm8475 wcn6750_firmware ar8035_firmware Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-35114

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.46%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-04 Aug, 2024 | 00:33

Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto

Product-sa8540p sa9000p sa8540p_firmware sa9000p_firmware Snapdragon Auto

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-35102

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 32.57%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-04 Aug, 2024 | 00:33

Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Product-wcn3991_firmware wsa8830 sd678 sm6250p_firmware qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sd765g_firmware qca6595au_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 wcn3990_firmware wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 sd720g sd_8_gen1_5g_firmware sm7315_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware wcd9360 qca6436_firmware sm7450_firmware sd778g sa515m_firmware wcn7851 sdxr2_5g wcn3988_firmware qca6421 sd778g_firmware sm6250 wsa8810_firmware sd765g sd765_firmware qca6436 wcn6851 qca8081 wcn7851_firmware wcd9385 wcd9341 qca6431 qca6696_firmware sd750g sd870_firmware qca6390 ar8035 sd750g_firmware wcd9375 sm6250_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wsa8815_firmware sm7450 sm8475 wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 wcd9380 sd888_5g sm6250p qca6574a sd690_5g_firmware wcn6855_firmware wcn3980 wcn6750 sa515m sd855 wsa8815 wcn6850 sd765 qca6426_firmware qca6574a_firmware sd695 sd768g_firmware wcn3980_firmware sm7315 sd730 qca6391 sdx55m qca6421_firmware sm8475_firmware wcn6740_firmware sdx65_firmware sd678_firmware wsa8832_firmware sd480_firmware wcn6851_firmware qca6574au wcd9341_firmware sd480 sd870 wsa8810 wcn6855 wsa8832 wcn6856 sd695_firmware sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sd675 sm7250p sd720g_firmware sm8475p_firmware ar8035_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-11172

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.31% / 53.52%

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 11:28

u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack overflow' in Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA9531, QCA9980

Product-ipq6018 qca9531 ipq8074_firmware qca9980 ipq8074 qca9531_firmware qca9980_firmware ipq8064 ipq8064_firmware ipq6018_firmware ipq4019 ipq4019_firmware Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-11133

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.05%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 11:21

u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8998, QCS605, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SXR1130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-11183

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 10.19%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code as that service in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qfe3100 pm8909 qfe2550 qfe4465fc sdr051 pm660 pmi8996 qbt1500 pmi632 qln1030 mdm9650 qpa5373 pmk8001 pmm855au mdm9250 qtc800h msm8917 wtr3905 qca9377 qpa5460 wtr2955 wcn3660b qln1021aq qfe4320 smb1380 qfe4308 apq8037 qca6595au wcn3615 msm8909w qtc800t pm8940 sdx20m qca6310 pm8937 qfe2081fc pm8996 qca9367 sd821 sdm630 qcc1110 qfe2101 smb1360 qat3522 qfe4455fc wcd9340 pm8953 smb231 qfe3440fc qat3514 sdr660 wcd9326 wcd9335 qet4200aq msm8937 smb1358 wcd9341 pm439 pmi8952 mdm9655 smb1350 wtr3950 qtc800s sd660 sd820 sd712 wtr3925 pmi8937 pm8998 qfe2080fc sdr052 sdw3100 wcn3620 apq8017 qca6564a sd450 qet4100 wcn3990 smb1355 wcd9330 wgr7640 sd636 qet5100 qca6595 qca6564au msm8996au pmi8940 pmm8996au rgr7640au qualcomm215 qln1035bd qpa4360 pm855a qca6574a mdm9206 qca6174a pm660l wtr4905 ar8151 wtr5975 wcn3980 qsw8573 wsa8815 qbt1000 qfe4305 qca6320 wcn3680 pmx20 pmd9607 qfe4309 sd835 apq8009 smb1351 qfe4373fc qfe2082fc msm8920 msm8953 pmi8998 pm660a qpa4340 sdx50m sdx20 pm8916 qln1036aq qtc801s rsw8577 pmd9655 qfe4302 qca6574au sd710 apq8009w qfe4303 wsa8810 qat3550 pm8005 wcn3680b pm215 apq8096au wtr2965 qfe4301 pm8004 sdw2500 msm8940 apq8053 sd439 qet4101 pmi8994 sdm830 smb1357 qca9379 qln1031 Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-11292

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 14.27%

7 Day CHG~0.00%

Published-09 Jun, 2021 | 06:20

Updated-04 Aug, 2024 | 11:28

Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware qcs610 qca6431_firmware wcd9360_firmware mdm9645 wcn3950_firmware sc8180x\+sdx55 qca6595au_firmware qca6335 msm8917 mdm8215 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware mdm8615m_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sd720g mdm9628 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware sd710_firmware mdm9230_firmware mdm8215m qca6574au_firmware mdm9630 wcd9375_firmware wcn3998_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware qca4004_firmware mdm9615m qca6430 wcd9306_firmware wcd9340 mdm9625_firmware sd765g qca1990_firmware qualcomm215_firmware qca6436 wcn6851 qcs603_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware wcd9341 mdm9655 qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g mdm8215_firmware wcn3910_firmware sd_8cx mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware msm8208_firmware sd450 wcn3610 mdm9640 msm8608 wcn3991 sda429w_firmware wcd9380_firmware sdm429w wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware qet4101_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6174 qca6430_firmware wcd9335_firmware sd439_firmware wcn3980 qca6335_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware sd_8c_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 qca1990 wcn3980_firmware sd730 wcd9330_firmware sdx55m qca6421_firmware ar6003_firmware msm8953 sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware apq8084_firmware sdxr1 apq8096au mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sdx55 apq8053 sa8155p sd675 sd439 qet4101 wcn3660 qca9379 wcn3991_firmware mdm9150_firmware wsa8830 sd678 csrb31024 mdm9628_firmware mdm9650 sd_636 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware mdm9310_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware wcn3990_firmware qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 wcd9326_firmware mdm9615m_firmware wcn3615_firmware apq8037 sa8155 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au sm7250p_firmware wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au qca6564au_firmware qca6310 msm8208 sa515m_firmware sd429 sdxr2_5g qca9367 apq8084 sdm630 mdm9607_firmware sd821 mdm9655_firmware msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sm6250 sd712_firmware apq8017_firmware wsa8810_firmware qca6694 sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m mdm9625 qca6390 wcd9375 sd750g_firmware aqt1000 msm8976 qca6694_firmware sm6250_firmware sc8180x\+sdx55_firmware msm8953_firmware qca6694au sda429w msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 ar6003 csr6030_firmware qca6564a mdm9630_firmware qcm6125_firmware mdm9635m_firmware wcn3990 sd_675 sd865_5g sdx24 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware mdm9635m mdm9615 mdm9205 sa515m qca6574_firmware sd855 sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 qca6391 sdxr1_firmware mdm9310 aqt1000_firmware msm8920 qcm4290 csrb31024_firmware sdx50m sdx20 sd480_firmware msm8920_firmware mdm9215 sd_455 qca6574au sd710 mdm8215m_firmware mdm9607 sa8155p_firmware sd205_firmware mdm9645_firmware wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 sd_8c wcn3680b sd835_firmware sd768g qca6696 sd845_firmware msm8608_firmware sdw2500 msm8940 apq8096au_firmware sd845 mdm9615_firmware apq8037_firmware sm7250p sd720g_firmware qcs410_firmware mdm9330 sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-11154

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.8||HIGH

EPSS-0.19% / 40.58%

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 11:28

u'Buffer overflow while processing a crafted PDU data packet in bluetooth due to lack of check of buffer size before copying' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-11155

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.8||HIGH

EPSS-0.19% / 40.58%

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 11:28

u'Buffer overflow while processing PDU packet in bluetooth due to lack of check of buffer length before copying into it.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, QCA6390, QCN7605, QCN7606, SA415M, SA515M, SA6155P, SA8155P, SC8180X, SDX55

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-11207

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.54% / 66.53%

7 Day CHG~0.00%

Published-12 Nov, 2020 | 10:00

Updated-04 Aug, 2024 | 11:28

Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8052, APQ8056, APQ8076, APQ8096, APQ8096SG, APQ8098, MDM9655, MSM8952, MSM8956, MSM8976, MSM8976SG, MSM8996, MSM8996SG, MSM8998, QCM4290, QCM6125, QCS410, QCS4290, QCS610, QCS6125, QSM8250, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SDA640, SDA660, SDA845, SDA855, SDM640, SDM660, SDM830, SDM845, SDM850, SDX50M, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P

Product-sm6115_firmware sm7250 sa6150p_firmware sm6250p_firmware apq8096_firmware qcs610 sm6125 sdm640 sdm845 sm7250_firmware apq8096 sdx55m_firmware sm6115p_firmware sm7150_firmware msm8952_firmware sm6150 msm8976_firmware qcs4290 sa8150p_firmware sm7150 sm6250p sa6155 qcs410 sda640_firmware sxr2130 apq8076 sdx50m_firmware qcs6125_firmware sm6115 sm7150p apq8076_firmware sdm660_firmware sda845_firmware apq8052_firmware apq8098 sm4250 sm7225 sda855 sm6115p msm8956_firmware sa8155 sda660 sdx55_firmware sa6155_firmware sda855_firmware sm7250p_firmware sxr2130p sdx55m sm6150p_firmware sda845 sm6350 sm7125 sdm850_firmware sm4250p_firmware sa6155p_firmware sxr2130p_firmware qsm8250_firmware sda640 qcm4290 apq8098_firmware sdx50m msm8996sg qcs6125 msm8998_firmware apq8056_firmware sa8155_firmware sdm660 sm8250_firmware mdm9655_firmware msm8976sg sm6350_firmware msm8996sg_firmware sa6145p_firmware sc7180_firmware sm4250_firmware sm6250 sa8155p_firmware sa8195p sdm830_firmware msm8976sg_firmware qcm6125 qcm4290_firmware sa6155p qcs610_firmware apq8052 msm8996_firmware qsm8250 sa6145p qcs4290_firmware sm8150_firmware sxr2130_firmware sm7150p_firmware sm4250p mdm9655 sc7180 sda660_firmware msm8976 msm8956 sa8150p sm6250_firmware sm7125_firmware sa6150p sm6150_firmware msm8952 apq8056 sdx55 sa8155p msm8998 sm7225_firmware sm8150 sdm850 sm8250 sm8150p_firmware sm7250p sdm830 sa8195p_firmware sdm640_firmware msm8996 qcs410_firmware sm6125_firmware sm8150p sm6150p qcm6125_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-28547

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 19.00%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:05

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in SPS Applications

Memory corruption in SPS Application while requesting for public key in sorter TA.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28560

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.65%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy Without Checking Size of Input in WLAN HAL

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21639

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.52%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Buffer Copy Without Checking the Size of Input in Audio

Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

Product-aqt1000_firmware snapdragon_w5\+_gen_1 sa6155p_firmware wsa8830 sw5100p sa4155p_firmware snapdragon_855\+\/860_firmware wcn3988_firmware qca6430 snapdragon_855 sa8155p_firmware wsa8835 sa8195p wsa8810_firmware wcd9341_firmware qca6420_firmware sw5100 wsa8810 sa6155p sw5100p_firmware snapdragon_855_firmware wcd9341 snapdragon_855\+\/860 qca6430_firmware wcn3980 sa4150p_firmware fastconnect_6200 aqt1000 sd855 wsa8815 sa8155p wsa8830_firmware sd855_firmware wcn3988 wsa8815_firmware wsa8835_firmware fastconnect_6200_firmware sa8195p_firmware sw5100_firmware wcn3980_firmware sa4155p qca6420 sa4150p snapdragon_w5\+_gen_1_firmware Snapdragon aqt1000_firmware sa6155p_firmware qca6430_firmware sa4155p_firmware sa4150p_firmware snapdragon_855_mobile_platform_firmware wcn3988_firmware wsa8830_firmware sa8155p_firmware sd855_firmware wsa8815_firmware wsa8835_firmware wsa8810_firmware fastconnect_6200_firmware wcd9341_firmware sa8195p_firmware qca6420_firmware sw5100_firmware wcn3980_firmware sw5100p_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2321

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:49

Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ4019, IPQ8074, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS404, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX24, SM6150, SM7150, SM8150, Snapdragon_High_Med_2016, SXR1130, SXR2130

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdx24 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware sm7150_firmware snapdragon_high_med_2016_firmware sm6150 msm8909w_firmware msm8996au sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware ipq4019_firmware mdm9206 sdm670_firmware qcs404 sdx24_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9205 mdm9206_firmware msm8939 qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware msm8939_firmware qca8081 mdm9150 msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware sdm630_firmware mdm9205_firmware sda660_firmware qm215_firmware ipq4019 msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware msm8998 sm8150 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-2333

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.88%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 18:49

Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_210 mdm9607 sd_636_firmware sd_820_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-21664

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.49%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Memory Corruption in Core Platform while printing the response buffer in log.

Product-qca9377_firmware sd_8cx_gen3_firmware sa6150p_firmware qca8337 qca6431_firmware sdx65 wcn3950_firmware ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 qcs605_firmware sd_675_firmware wcn3998 qam8295p sd_8cx_gen2_firmware qcn6024_firmware qca8386_firmware wcn3950 sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware qca6420 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware qca6698aq sa4155p_firmware sa8155_firmware qca6430 sdx65m wcd9340 qcn6132 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qcn6122 wcd9341 qca6431 qca6696_firmware sd870_firmware ipq9008_firmware sd_8cx sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd660_firmware wcn7850_firmware sa8195p_firmware sa8295p_firmware wcn6750_firmware ipq5018_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p qca8084 qca6564au sdx55m_firmware wcn6856_firmware ipq9008 sd670_firmware qca6574 wcd9380 sdx50m_firmware sxr1230p sdx24_firmware qca6430_firmware qcn9012_firmware qcn9274_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 qca6426_firmware qcn9024 ipq9574_firmware wcn3980_firmware sdx55m sa8295p qca6421_firmware wcn6740_firmware sd678_firmware qrb5165 wcn6851_firmware qcs603 sd670 qca6564a_firmware qcn9024_firmware sdx57m sd870 wsa8832 wcn6855 sa8540p sa6145p qca6595_firmware sa8145p qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sdx70m ssg2115p_firmware qcs8155_firmware sa4155p ar8035_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sa8145p_firmware sxr2230p_firmware fsm10056 qca8082 qcn9072 qca8386 sd765g_firmware qca6420_firmware qca6390_firmware wcd9370 sd675_firmware ssg2115p qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware ipq5018 qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware qam8295p_firmware qcn9011_firmware qca8082_firmware sa8155 sa9000p_firmware sdx55_firmware qca6595au qcn6023_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware sd778g sa6155p_firmware qca6310 qcn9274 qcs8155 wcn7851 qcs6490 sdxr2_5g qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 sdx65m_firmware qca6174a_firmware wcd9385 qca8085_firmware qcs6490_firmware sd_8cx_gen3 sdx70m_firmware ar8035 qca6390 wcd9375 aqt1000 qcn9100_firmware ipq5010_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qca6564a sa4150p wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 sxr1230p_firmware sa8540p_firmware sd_8_gen1_5g sd888_5g ssg2125p_firmware qca6574a wcn6855_firmware qca6174a sm7325p qcn6132_firmware qca6310_firmware wcn6750 sa9000p qca6574_firmware sd855 sm7325p_firmware sxr2230p sdx57m_firmware sd765 qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware sm7315 qca6391 aqt1000_firmware qcn9100 sdx65_firmware qcm6490_firmware sdx50m wsa8832_firmware qcn9070_firmware qcn9011 qca6574au sa8155p_firmware ipq9574 wcd9341_firmware wsa8810 wcn6856 qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sa6150p qcn9022_firmware qcn6024 qcn9022 sd845 qcn9072_firmware sm7250p qcn9074_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2311

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.14%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-04 Aug, 2024 | 18:49

Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996, MSM8996AU, MSM8998, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCS605, SA6155P, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130

Product-qca9377_firmware apq8096_firmware mdm9640_firmware msm8996au_firmware sdm845 apq8096 sdx24 mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 qcs605_firmware mdm9206 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 mdm9206_firmware qca6574_firmware qca9886 qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware sa6155p qca8081 mdm9207c_firmware msm8996_firmware mdm9207c qca6174a_firmware qca9886_firmware sm8150_firmware apq8096au sdm630_firmware sda660_firmware apq8053 sm6150_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-21649

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 8.26%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-02 Aug, 2024 | 09:44

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Memory corruption in WLAN while running doDriverCmd for an unspecific command.

Product-wcn3991_firmware wsa8830 sa6150p_firmware sa8145p_firmware qcs610 qca8337 qca6431_firmware mdm9628_firmware mdm9650 wcn3950_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware wcd9370 qca6426 qca6584au_firmware sm4375 wcn3998 qca6554a_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 mdm9628 wcn3660b qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3610_firmware qca6420 qca6436_firmware qca6564au_firmware qca6584au sa6155p_firmware sdxr2_5g wcn3988_firmware qca6430 qcn9074 sa6145p_firmware qca6421 sa8195p wsa8810_firmware sm4375_firmware sw5100 qca6436 wcn6851 sa6155p wcd9385 wcd9341 qca6431 qca6696_firmware sd870_firmware qca6390 wcd9375 aqt1000 sa8150p wsa8830_firmware sda429w sd855_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qca6564a wcn3610 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sw5100p qca6554a sd865_5g qca6595 qca6564au qcc5100 sdx55m_firmware wsa8835 qca6574 wcd9380 qcs410 qca6574a qca6430_firmware wcn3980 qca6574_firmware sd855 wsa8815 wcn6850 mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 wcn3980_firmware qca6391 sdx55m qcc5100_firmware qca6421_firmware aqt1000_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware qca6564a_firmware wcd9341_firmware sd480 sd870 wsa8810 sw5100p_firmware qcs610_firmware sa6145p wcn3680b sd695_firmware apq8096au qca6595_firmware sa8145p qca6696 qca6391_firmware wcd9370_firmware sa6150p sdx55 apq8096au_firmware sa8155p sw5100_firmware qcn9074_firmware qcs410_firmware Snapdragon wcn3991_firmware qca8337_firmware sda429w_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware qca6431_firmware sdx55m_firmware mdm9628_firmware wcn3950_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware qca6584au_firmware qca6430_firmware qca6554a_firmware wcd9385_firmware sdxr2_5g_firmware qca6574_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware wcn3998_firmware wcn3980_firmware wcn3610_firmware qca6436_firmware qcc5100_firmware qca6421_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware sd480_firmware wcn6851_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware qca6564a_firmware wsa8810_firmware wcd9341_firmware sm4375_firmware sw5100p_firmware qcs610_firmware sd695_firmware qca6696_firmware qca6595_firmware sd870_firmware qca6391_firmware wcd9370_firmware apq8096au_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware qcn9074_firmware qcs410_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-2341

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.88%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 18:49

Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14110

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.14%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS404, QCS405, QCS605, Rennell, SA6155P, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130, SXR2130

Product-qca9377_firmware apq8096_firmware mdm9640_firmware qca4531_firmware msm8996au_firmware sdm845 apq8096 sdx24 qcs404_firmware mdm9650 sm7150_firmware sm6150 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca6564 qca9379_firmware qca6174a sdm670_firmware qcs404 sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 qca4531 apq8098 qcn7605 ipq6018_firmware mdm9206_firmware qcs605 qca9886 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware apq8064 sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 sc7180_firmware mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p qca8081 mdm9207c_firmware msm8996_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware qca6564_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sc7180 sdm630_firmware sda660_firmware rennell_firmware apq8053 sm6150_firmware apq8096au_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14021

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:05

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w msm8909_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 sc8180x_firmware sdm710 qm215 sc7180_firmware mdm9607 sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 apq8096au sdm439_firmware rennell sc7180 sdm630_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8096au_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14026

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.46%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6574, QCA6574AU, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS404, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-qca9377_firmware apq8096_firmware mdm9640_firmware msm8996au_firmware sdm845 apq8096 sdx24 qcs404_firmware mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca9379_firmware qca6174a sdm670_firmware qcs404 sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 qcn7605 ipq6018_firmware mdm9206_firmware qca6574_firmware qca9886 qcs605 mdm9650_firmware qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p qca8081 mdm9207c_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware apq8053 sm6150_firmware apq8096au_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14098

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.36% / 57.14%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:12

Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096, APQ8096AU, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, QCA9886, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130, SXR2130

Product-qca9377_firmware apq8096_firmware mdm9640_firmware qca4531_firmware msm8996au_firmware sdm845 apq8096 sdx24 mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca6564 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware qca6584au_firmware ipq8074 sdm636 qca9377 qca4531 ipq6018_firmware mdm9206_firmware qca6574_firmware qca9886 qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware sxr1130 apq8009 apq8053_firmware nicobar qca6584au sa6155p_firmware sdm636_firmware apq8064 sdm845_firmware sdx20 sdm660 sdm630 mdm9607_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware sa6155p mdm9207c_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware qca6564_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware apq8053 sm6150_firmware apq8096au_firmware sm8150 sdx20_firmware apq8017 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14031

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.43% / 61.54%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Buffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS405, QCS605, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-qca9377_firmware apq8096_firmware mdm9640_firmware qca4531_firmware msm8996au_firmware sdm845 apq8096 sdx24 mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca6564 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 qca4531 apq8098 qcn7605 ipq6018_firmware mdm9206_firmware qca6574_firmware qca9886 qcs605 qca6584_firmware mdm9650_firmware qca6584 qca6574au_firmware sda660 sxr1130_firmware apq8064_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware apq8064 sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p qca8081 mdm9207c_firmware msm8996_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware qca6564_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware sdm630_firmware sda660_firmware apq8053 sm6150_firmware apq8096au_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14099

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.00%

7 Day CHG~0.00%

Published-30 Jul, 2020 | 11:40

Updated-05 Aug, 2024 | 00:12

Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8053, MDM9206, MDM9207C, MDM9607, MSM8909W, MSM8917, MSM8953, Nicobar, QCM2150, QCS405, QCS605, QM215, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-13992

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.75%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-05 Aug, 2024 | 00:05

u'Out of bound memory access if stack push and pop operation are performed without doing a bound check on stack top' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Bitra, IPQ6018, IPQ8074, MDM9205, Nicobar, QCA8081, QCN7605, QCS404, QCS405, QCS605, QCS610, Rennell, SA415M, SA6155P, Saipan, SC7180, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-sdm850_firmware sa6155p_firmware qcs610 sdm845 sdx20 sdx24 qcs404_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 sm7150_firmware ipq8074_firmware sdm710 sc7180_firmware sm6150 sdm710_firmware sm7150 qcn7605_firmware sa6155p sdm670 qca8081 qcs610_firmware qcs605_firmware sc8180x sxr2130 ipq6018 sdm670_firmware qcs404 sdx24_firmware sm8150_firmware ipq8074 sxr2130_firmware qcs405_firmware rennell sa415m sc7180 bitra sda845_firmware mdm9205_firmware qcn7605 rennell_firmware ipq6018_firmware mdm9205 qcs605 sdx55 saipan_firmware sm6150_firmware sm8250 bitra_firmware sm8150 sdx20_firmware sdm850 sxr1130_firmware sdx55_firmware qca8081_firmware nicobar_firmware saipan sxr1130 sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14041

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-1.23% / 78.34%

7 Day CHG~0.00%

Published-07 Feb, 2020 | 05:00

Updated-05 Aug, 2024 | 00:05

During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physical address information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 sm7150_firmware sm6150 msm8909w_firmware md9607 msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sda845_firmware apq8098 md9607_firmware mdm9206_firmware qcs605 sdm429_firmware mdm9650_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8953 sdm450 sdm845_firmware apq8098_firmware sdx20 qcm2150 sm8250_firmware sc8180x_firmware qcs405 sdm710 qm215 apq8017_firmware sdm710_firmware sa6155p mdm9207c_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware apq8053 saipan_firmware sm6150_firmware apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 saipan nicobar_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-35089

Matching Score-6

Assigner-Qualcomm, Inc.

Matching Score-6

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.10% / 27.89%

7 Day CHG~0.00%

Published-01 Apr, 2022 | 04:40

Updated-04 Aug, 2024 | 00:33

Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto

Product-qca6574au sa8155p sa8155p_firmware qca6696_firmware qca6574au_firmware qca6696 Snapdragon Auto

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14027

Matching Score-6

Assigner-Qualcomm, Inc.