ByteOS

Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product

Versions

Affected

AR8035, QCA6391, QCA8081, QCA8337, QCA9984, QCM2290, QCM4290, QCM6490, QCS2290, QCS405, QCS4290, QCS6490, SD 8 Gen1 5G, SD460, SD480, SD662, SD680, SD690 5G, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD888, SD888 5G, SDX57M, SDX65, SM6375, SM7250P, SM7315, SM7325P, SW5100, SW5100P, WCD9370, WCD9375, WCD9380, WCD9385, WCN3910, WCN3950, WCN3980, WCN3988, WCN3991, WCN3998, WCN3999, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WSA8810, WSA8815, WSA8830, WSA8835

Problem Types

Type	CWE ID	Description
text	N/A	Key Management Errors in Key Provisioning

Type: text

CWE ID: N/A

Description: Key Management Errors in Key Provisioning

Metrics

Version	Base score	Base severity	Vector
3.1	9.0	CRITICAL	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Version: 3.1

Base score: 9.0

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:14 Jun, 2022 | 10:15

Updated At:08 Aug, 2023 | 14:22

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Secondary	3.1	9.0	CRITICAL	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Primary	2.0	4.9	MEDIUM	AV:L/AC:L/Au:N/C:C/I:N/A:N

Type: Primary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 9.0

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Type: Primary

Version: 2.0

Base score: 4.9

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:C/I:N/A:N

CPE Matches

cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*

>>ar8035_firmware>>-

cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

>>ar8035>>-

cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*

>>qca6391_firmware>>-

cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*

>>qca6391>>-

cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*

>>qca8081_firmware>>-

cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

>>qca8081>>-

cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*

>>qca8337_firmware>>-

cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*

>>qca8337>>-

cpe:2.3:o:qualcomm:qca9984_firmware:-:*:*:*:*:*:*:*

>>qca9984_firmware>>-

cpe:2.3:h:qualcomm:qca9984:-:*:*:*:*:*:*:*

>>qca9984>>-

cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*

>>qcm2290_firmware>>-

cpe:2.3:h:qualcomm:qcm2290:-:*:*:*:*:*:*:*

>>qcm2290>>-

cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*

>>qcm4290_firmware>>-

cpe:2.3:h:qualcomm:qcm4290:-:*:*:*:*:*:*:*

>>qcm4290>>-

cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*

>>qcm6490_firmware>>-

cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*

>>qcm6490>>-

cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*

>>qcs2290_firmware>>-

cpe:2.3:h:qualcomm:qcs2290:-:*:*:*:*:*:*:*

>>qcs2290>>-

cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*

>>qcs405_firmware>>-

cpe:2.3:h:qualcomm:qcs405:-:*:*:*:*:*:*:*

>>qcs405>>-

cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*

>>qcs4290_firmware>>-

cpe:2.3:h:qualcomm:qcs4290:-:*:*:*:*:*:*:*

>>qcs4290>>-

cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*

>>qcs6490_firmware>>-

cpe:2.3:h:qualcomm:qcs6490:-:*:*:*:*:*:*:*

>>qcs6490>>-

cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*

>>sd_8_gen1_5g_firmware>>-

cpe:2.3:h:qualcomm:sm8475:-:*:*:*:*:*:*:*

>>sm8475>>-

cpe:2.3:o:qualcomm:sd460_firmware:-:*:*:*:*:*:*:*

>>sd460_firmware>>-

cpe:2.3:h:qualcomm:sd460:-:*:*:*:*:*:*:*

>>sd460>>-

cpe:2.3:o:qualcomm:sd480_firmware:-:*:*:*:*:*:*:*

>>sd480_firmware>>-

cpe:2.3:h:qualcomm:sd480:-:*:*:*:*:*:*:*

>>sd480>>-

cpe:2.3:o:qualcomm:sd662_firmware:-:*:*:*:*:*:*:*

>>sd662_firmware>>-

cpe:2.3:h:qualcomm:sd662:-:*:*:*:*:*:*:*

>>sd662>>-

cpe:2.3:o:qualcomm:sd680_firmware:-:*:*:*:*:*:*:*

>>sd680_firmware>>-

cpe:2.3:h:qualcomm:sd680:-:*:*:*:*:*:*:*

>>sd680>>-

cpe:2.3:o:qualcomm:sd690_5g_firmware:-:*:*:*:*:*:*:*

>>sd690_5g_firmware>>-

cpe:2.3:h:qualcomm:sd690_5g:-:*:*:*:*:*:*:*

>>sd690_5g>>-

cpe:2.3:o:qualcomm:sd750g_firmware:-:*:*:*:*:*:*:*

>>sd750g_firmware>>-

cpe:2.3:h:qualcomm:sd750g:-:*:*:*:*:*:*:*

>>sd750g>>-

cpe:2.3:o:qualcomm:sd765_firmware:-:*:*:*:*:*:*:*

>>sd765_firmware>>-

cpe:2.3:h:qualcomm:sd765:-:*:*:*:*:*:*:*

>>sd765>>-

cpe:2.3:o:qualcomm:sd765g_firmware:-:*:*:*:*:*:*:*

>>sd765g_firmware>>-

cpe:2.3:h:qualcomm:sd765g:-:*:*:*:*:*:*:*

>>sd765g>>-

cpe:2.3:o:qualcomm:sd768g_firmware:-:*:*:*:*:*:*:*

>>sd768g_firmware>>-

cpe:2.3:h:qualcomm:sd768g:-:*:*:*:*:*:*:*

>>sd768g>>-

cpe:2.3:o:qualcomm:sd778g_firmware:-:*:*:*:*:*:*:*

>>sd778g_firmware>>-

cpe:2.3:h:qualcomm:sd778g:-:*:*:*:*:*:*:*

>>sd778g>>-

cpe:2.3:o:qualcomm:sd780g_firmware:-:*:*:*:*:*:*:*

>>sd780g_firmware>>-

cpe:2.3:h:qualcomm:sd780g:-:*:*:*:*:*:*:*

>>sd780g>>-

cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*

>>sd888_firmware>>-

cpe:2.3:h:qualcomm:sd888:-:*:*:*:*:*:*:*

>>sd888>>-

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

94Records found

CVE-2021-1929

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.2||MEDIUM

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 11:25

Updated-03 Aug, 2024 | 16:25

Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product-wcn3991_firmware wsa8830 sd678 sa6150p_firmware sm7250 sa8145p_firmware qcs610 qcs2290_firmware sm7250_firmware qca6431_firmware qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sd730_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qcs6125_firmware qca6426 wcn3990_firmware wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware sd720g wcn3615_firmware wcn3660b sd662 sd460_firmware sa8155 qca6574au_firmware sdx55_firmware qca6595au wcd9375_firmware wcn3615 wcn3998_firmware wcn3610_firmware qca6420 qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware sdxr2_5g qcs6125 sa8155_firmware sd662_firmware wcn3988_firmware qca6430 sa6145p_firmware sd205 qca6421 sd778g_firmware sm6250 wcd9340 sa8195p sdm830_firmware wsa8810_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 wcd9326 wcn6851 sa6155p qcs603_firmware qcs4290_firmware wcd9385 wcd9341 qca6431 qca6696_firmware sd870_firmware qca6390 wcd9375 wcn3910_firmware aqt1000 sa8150p sm6250_firmware wsa8830_firmware sda429w sd210 sd855_firmware sd865_5g_firmware wcn3620_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wcn3620 wsa8815_firmware wsa8835_firmware sa8195p_firmware qca6564a wcn6750_firmware wcn3610 qcm6125_firmware qcm2290_firmware wcn3991 sda429w_firmware wcd9380_firmware wcn3990 sd_675 msm8996au_firmware sd780g sd865_5g qca6595 qca6564au sdx55m_firmware wcn6856_firmware wsa8835 msm8996au sd665_firmware wcd9380 sd888_5g qualcomm215 qca6574a sdx50m_firmware sm7325 qca6430_firmware wcn3980 wcn6750 qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 wcn3910 sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware wcn3980_firmware sd460 qca6391 sd730 sdx55m qca6421_firmware aqt1000_firmware wcn6740_firmware sd678_firmware qcm4290 sdx50m wcn3680_firmware sd480_firmware qcs603 wcn6851_firmware qca6574au sa8155p_firmware sd205_firmware qca6564a_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wsa8810 sd210_firmware qcs610_firmware wcn6856 sa6145p sd768g apq8096au qca6595_firmware sa8145p wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sa6150p sdx55 apq8096au_firmware sa8155p sd675 sdm830 sd720g_firmware qcm2290 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CVE-2023-28566

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.06% / 17.36%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN HAL

Information disclosure in WLAN HAL while handling the WMI state info command.

CWE ID-CWE-126

Buffer Over-read

CVE-2024-23366

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.02% / 3.89%

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-10 Jan, 2025 | 17:20

Buffer Over-read in Automotive Autonomy

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2021-35079

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.2||MEDIUM

EPSS-0.03% / 5.21%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:50

Updated-04 Aug, 2024 | 00:33

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-wcn3991_firmware wcn3991 wsa8830 wcd9380_firmware wcn3990 sd780g sd865_5g sdx55m_firmware wcn6856_firmware wsa8810 wsa8835 qcs4290 wcn3950_firmware wcd9380 sd765g_firmware sd888_5g qca6420_firmware qca6390_firmware qualcomm215 sd690_5g wcd9370 qcs605_firmware sd690_5g_firmware wcn6855_firmware sm7325p qca6426 wcn3990_firmware qca6430_firmware wcn3980 wcn6750 wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware wcn3615_firmware qcs605 wcn3660b sd855 wsa8815 sm7325p_firmware sd662 wcn6850 sd460_firmware sd765 qca6426_firmware wcn3660b_firmware wcn3680 sd695 wcn3680b_firmware sdx55_firmware sd768g_firmware wcd9375_firmware wcn3615 wcn3998_firmware wcn3980_firmware sm7250p_firmware sd460 qca6391 qca6420 apq8053_firmware qca6436_firmware sdx55m aqt1000_firmware sd680_firmware sd778g wcn6740_firmware msm8953 qcm4290 wcn3680_firmware sdxr2_5g sd480_firmware qcs603 wcn6851_firmware sd662_firmware wcn3988_firmware qca6430 sd778g_firmware wsa8810_firmware qualcomm215_firmware sd765g wcd9341_firmware qcm4290_firmware sd765_firmware sd480 qca6436 sd680 wcd9326 wcn6851 sd870 wcn6855 qcs603_firmware wcn6856 wcn3680b qcs4290_firmware wcd9385 wcd9341 sd695_firmware sd768g sd750g sd870_firmware wcn6740 qca6391_firmware qca6390 wcd9375 sd750g_firmware aqt1000 wcd9370_firmware sd780g_firmware sdx55 msm8953_firmware apq8053 wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware sm7250p wcn6750_firmware Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-281

Improper Preservation of Permissions

CVE-2021-30338

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.04% / 10.19%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:10

Updated-03 Aug, 2024 | 22:32

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Compute

Product-sdxr1_firmware sd850_firmware sd850 sdxr1 Snapdragon Compute

CWE ID-CWE-20

Improper Input Validation

CVE-2021-30345

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.10% / 27.52%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:11

Updated-03 Aug, 2024 | 22:32

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CVE-2018-13885

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 09:14

Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9650, MDM9655, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SDA660, SDM439, SDM630, SDM660, SDX20, SM7150, SXR1130

Product-sd_850 mdm9150_firmware mdm9635m_firmware sd_632 sd_675 sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sm7150_firmware sd_450_firmware sd_845_firmware sm7150 qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_625_firmware sd_450 mdm9635m mdm9615 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sxr1130 sd_205_firmware sd_212 sd_427_firmware sd_712 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 sd_625 qm215 mdm9607 sd_210 sd_636_firmware mdm9625_firmware sd_439_firmware mdm9150 sd_429_firmware sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware mdm9625 qm215_firmware sd_427 sd_430 sd_670 sd_435_firmware mdm9615_firmware sd_710 sdx20_firmware sd_205 sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2021-30346

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.10% / 27.52%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:11

Updated-03 Aug, 2024 | 22:32

CVE-2021-30278

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:25

Updated-03 Aug, 2024 | 22:24

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product-fsm10055 qca9377_firmware mdm9150_firmware wcn3991_firmware sd678 qcn9070 sa6150p_firmware sa8145p_firmware qcs610 sm6250p_firmware wsa8830 qcs2290_firmware fsm10056 qca8337 sd7c_firmware csrb31024 csra6620 fsm10055_firmware qcn9072 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qcs2290 qca6595au_firmware qca6390_firmware sa6155 ipq6000 sd690_5g sd730_firmware csra6620_firmware wcd9370 sd_675_firmware sd675_firmware csra6640_firmware qcn5152_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 sa415m sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 qcn6024_firmware sd720g sm6375_firmware sd662 sd460_firmware sa8155 qca6574au_firmware qcn5122_firmware sdx55_firmware qca6595au qca8081_firmware qcn6023_firmware sa6155_firmware sm7250p_firmware wcd9375_firmware wcn3999_firmware qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware wcd9306 sm6225 wcn3999 sa515m_firmware qcs6490 qrb5165_firmware sdxr2_5g qcn5052 sa8155_firmware ipq6010 qca4004_firmware sd662_firmware sa415m_firmware qcs405 wcn3988_firmware qcn9074 sa6145p_firmware sm6250 sd778g_firmware wcd9306_firmware wcd9340 sa8195p sd765g sd765_firmware fsm10056_firmware qca6436 wcn6851 wcd9335 sa6155p qca8081 qcn6023 qca6174a_firmware qcs4290_firmware wcd9385 qca6696_firmware qcs6490_firmware sd750g sd870_firmware ar8035 csr8811 qca6390 sd_8cx sa8150p sd750g_firmware sm6250_firmware wcd9375 wcn3910_firmware qca4004 wsa8830_firmware sd660 sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 sd660_firmware wcn6850_firmware wsa8835_firmware sa8195p_firmware qcn5121 qcx315 qcn5022_firmware qca6564a wcn6750_firmware qca8072 qcm2290_firmware sm6375 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 qcn9000 sd_675 sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware wsa8835 qca6574 qcx315_firmware sd665_firmware csr8811_firmware wcd9380 sd888_5g sd850 sm6250p qcs410 qca8075_firmware qca6574a sd690_5g_firmware ipq6005_firmware wcn6855_firmware qca6174a sm7325p sdx24_firmware qca8072_firmware wcd9335_firmware qcn5052_firmware wcn3980 wcn6750 ipq6018_firmware mdm9205 sa515m qca6574_firmware wcd9340_firmware sm7325p_firmware sd665 sd7c wcn3910 wcn6850 sd765 qca6426_firmware qca6574a_firmware qca9984 ipq6028 qcn5021 qcn5152 qcn9024 sd768g_firmware sd850_firmware wcn3980_firmware sd460 qca6391 sd730 sdx55m ipq6005 sd678_firmware ar8031_firmware csrb31024_firmware qcm4290 qcm6490_firmware qcn9070_firmware qrb5165 sd480_firmware wcn6851_firmware ipq6028_firmware sm6225_firmware qca6574au sa8155p_firmware qcn5122 qca6564a_firmware qcn9024_firmware qcm4290_firmware sd480 sd870 qcn5121_firmware wcn6855 qcs610_firmware mdm9150 wcn6856 qsm8250 ipq6018 qcn5022 sa6145p qca6564_firmware ipq6010_firmware ar8031 sd768g qcs405_firmware sa8145p qca6696 mdm9205_firmware qca6391_firmware wcd9370_firmware sa6150p sdx55 qca8075 qcn5021_firmware qcn9022_firmware csra6640 qcn6024 qcn9022 sa8155p sd675 qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware qcn9074_firmware qcs410_firmware ar8035_firmware qcm2290 qsm8250_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-20

Improper Input Validation

CVE-2018-11820

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.05% / 15.43%

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 08:17

Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 800, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware mdm9206 sd_652 sd_425_firmware sd_800_firmware sd_625_firmware ipq8074 sd_450 sd_8cx_firmware sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sd_652_firmware qca8081_firmware sxr1130 sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_412 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware sdm630 sd_625 ipq8074_firmware sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_800 sd_439_firmware qca8081 mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_412_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 sd_427 sd_670 sd_435_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CVE-2018-11864

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.05% / 15.43%

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 08:24

Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in versions IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCA8081, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware ipq8074 sd_450 sd_8cx_firmware sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_652_firmware qca8081_firmware sxr1130 sd_205_firmware sd_212 sd_650_firmware sd_427_firmware sd_712 sd_412 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 sd_625 ipq8074_firmware sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qca8081 mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_412_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 sd_427 sd_670 sd_435_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-20

Improper Input Validation

CVE-2018-11971

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-04 Apr, 2019 | 15:09

Updated-05 Aug, 2024 | 08:24

Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2018-12004

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 08:24

Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 615/16/SD 415, SD 636, SD 712 / SD 710 / SD 670, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM630, SDM660, SXR1130

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2018-11922

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.07% / 21.60%

7 Day CHG+0.01%

Published-26 Nov, 2024 | 08:55

Updated-09 Jan, 2025 | 20:43

Configurations in Android Build

Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.

CVE-2018-11958

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-04 Apr, 2019 | 15:09

Updated-05 Aug, 2024 | 08:24

Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9650, MDM9655, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016

CVE-2018-11976

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-24 May, 2019 | 16:44

Updated-05 Aug, 2024 | 08:24

ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 mdm9150_firmware sd_632 sd_820a msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware ipq8074 sd_450 sd_8cx_firmware sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sd_652_firmware qca8081_firmware sxr1130 msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_412 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware sdm630 sd_625 ipq8074_firmware qm215 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qca8081 mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_412_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 qm215_firmware sd_427 sd_670 sd_435_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2023-43528

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.04% / 11.43%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in Audio

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

CVE-2023-43527

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.05% / 13.84%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in Video

Information disclosure while parsing dts header atom in Video.

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

CVE-2018-11275

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 12.81%

7 Day CHG~0.00%

Published-18 Sep, 2018 | 18:00

Updated-05 Aug, 2024 | 08:01

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when flashing image using FastbootLib if size is not divisible by block size, information leak occurs.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2020-11221

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-17 Mar, 2021 | 06:00

Updated-04 Aug, 2024 | 11:28

Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product-qfe3100 qfe2080fc_firmware qca9377_firmware qfs2580 qpm5679_firmware mdm9640_firmware sm6250p_firmware pmd9607_firmware qfe4455fc_firmware qca8337 qfs2530 qpm8870_firmware qln1030 pm6125 qat5522_firmware mdm9645 wcn3950_firmware pm8150a qdm5670 qca6595au_firmware qpm5541_firmware pm7150l qcc1110_firmware pm8998_firmware qpa8821 sd_455_firmware wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sm4125 sd720g mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware qfe4320 qsw8574_firmware sd460_firmware mdm9230_firmware smb2351_firmware pm8953_firmware qpa4360_firmware wcn3998_firmware qfe2520_firmware apq8009w_firmware pm855p apq8053_firmware qca6420 pm6150a wtr4605_firmware qca9367_firmware mdm8207 pm660_firmware pm8150b sa8155_firmware qca4004_firmware qfe2101 qca6430 qat3522 qfe4455fc pmr735a wcd9306_firmware wcd9340 sd765g sdr660 qfe1045_firmware qfe3345 msm8209_firmware sdr865 mdm9250_firmware qdm5620_firmware smb1358 qca6696_firmware qln5020 wcd9371 sd870_firmware pmm855au_firmware sd_8cx wtr3950 qfe3340 qdm5621 qtc800s qca4004 qat3514_firmware mdm9330_firmware sd660 sd865_5g_firmware sd712 pm640p_firmware sd660_firmware wcn6750_firmware qat5516_firmware pm6150l sd450 pm855l_firmware qtc410s wcn3991 qfe3335_firmware qpa8801 sdm429w pm8150l_firmware qat5533_firmware sdx55m_firmware qpa8673_firmware pm6150 smb1354_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware qpa8842 sdr052_firmware pmm8996au wcd9380 qualcomm215 qln4640 qcs410 qpm5579_firmware smb1380_firmware qfe4309_firmware smb1381 pm855p_firmware qfe3100_firmware pm7250 qca9379_firmware wtr4905 qpa8803 sdx24_firmware sd439_firmware pmd9645 qdm2301 wcd9340_firmware wsa8815 wcn6850 qfe2101_firmware qca6584_firmware qdm2301_firmware msm8937_firmware qdm5621_firmware qpm6375 sd_8c_firmware sd835 wcn3980_firmware sd730 qfe3320_firmware pm660l_firmware pm6250_firmware pm8008 qtm525_firmware pme605_firmware pme605 sd678_firmware qpm5621_firmware qln1021aq_firmware qcs603 rsw8577 qpa6560_firmware qpa8802_firmware qln4640_firmware qfe4308_firmware qpm5621 qpm6582 sd670 pm8009_firmware apq8009w qfe4303 qfs2580_firmware qcm4290_firmware pm8150l pmi8998_firmware qcs610_firmware apq8084_firmware sdr105 pm660a_firmware pm215 pm4250 qpm5577 mdm8207_firmware sdm630_firmware wtr2965 mdm9205_firmware qca6391_firmware sa2150p pmx20_firmware sd820_firmware pm8150 pmi8937_firmware wcd9370_firmware qat3516_firmware sdx55 apq8053 qat3555_firmware pmi8994 qpa8803_firmware wcn3660 qca9379 pm855b smb2351 qln1031 pm8909 mdm9150_firmware qfe1040 pm660 qet6110_firmware qpm6325 pm6125_firmware qbt1500 qfe1040_firmware csrb31024 mdm9628_firmware qfe2340_firmware mdm9650 sd_636 pmx24_firmware qbt1500_firmware pmk8001 qcs4290 pmm855au mdm9250 qca6420_firmware pmd9635_firmware apq8009_firmware pm7150a sd675_firmware qpa4361_firmware qca6426 wcn3990_firmware qca9377 qpa5373_firmware sdw2500_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware whs9410 rgr7640au_firmware wtr2955 pm7250_firmware sdr845_firmware qdm5620 qln1021aq smb1380 pmk8002_firmware qsw6310_firmware sa8155 qca6584 qln1031_firmware sdx55_firmware qat5533 wcn3615 sm7250p_firmware wcn3610_firmware pm8940 mdm9207 qsm7250_firmware pm7150l_firmware wcd9306 qca6584au msm8208 qat5515_firmware pm855 qpm8830_firmware sd429 pm8250 qca9367 qfe2082fc_firmware sdm630 mdm9607_firmware mdm9655_firmware msm8976sg qfs2530_firmware pmx55 sa415m_firmware wcn3988_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware pm8953 qat5515 qca6694 qpm5677 qat3514 wcd9326 wcd9335 pm8004_firmware sdr8150_firmware qcs4290_firmware pm439 qtc800h_firmware qca6390 wcd9375 aqt1000 msm8976 sm6250_firmware qln4642 msm8917_firmware qpm5677_firmware sdx20_firmware wsa8815_firmware wtr3925_firmware pmi8937 pm8998 sdw3100 smr525_firmware qpm8820_firmware qfe4301_firmware apq8017 qln1020_firmware mdm9630_firmware qcm6125_firmware pmx55_firmware wtr2955_firmware qbt1000_firmware qfe4373fc_firmware sd865_5g qca6595 pm8150_firmware qpm8830 pmm8996au_firmware qat5522 pm8150c sd665_firmware qpa4360 sc8180x qpa4361 mdm9206 qpm5577_firmware qdm5679_firmware smr525 qca6310_firmware qfe4305_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware wtr3950_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware sd765 pmx20 pmd9607 qca6574a_firmware qat3555 sd850_firmware apq8009 qfe2082fc wtr2965_firmware pm670_firmware csrb31024_firmware qln1036aq qtc801s pmi8940_firmware sc8180x_firmware qfe3320 sd710 mdm9607 mdm9645_firmware pm8008_firmware qln1035bd_firmware pmr735a_firmware pmw3100 pmx50 qfe3345_firmware sdr8250 sd768g qln1030_firmware pmw3100_firmware pm8004 pm640l msm8940 pmk8002 apq8096au_firmware sdw2500 sd845 smb1357 pmd9655au_firmware qca617_firmware qcs410_firmware mdm9330 qpa5580 qpm5579 qfe2550 qcs610 pmi8996 qfe1045 qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware pm855a_firmware qtc800h sdr8250_firmware qcs2290 qca6335 msm8917 qln1020 qcs605_firmware sd_675_firmware wtr3905 qdm5671 pmc1000h qpm4650_firmware qat3518 sd632 sdr425_firmware smr526_firmware mdm9628 pm640a_firmware qpa5460 wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qca4020 qdm5652 qca6574au_firmware mdm9630 qpm8870 wcd9375_firmware qpm5679 qbt2000 msm8909w wcd9360 pmx50_firmware qpa8675_firmware whs9410_firmware qpa5460_firmware pm8940_firmware qdm3301_firmware pm8996 qsm7250 qcs6125 sd662_firmware qcc1110 smb1360 qualcomm215_firmware qfe3440fc qdm2308_firmware rsw8577_firmware pm439_firmware qca4020_firmware qca6436 wcn6851 qcs603_firmware qpa6560 msm8937 sdr675_firmware wcn3660_firmware wcd9341 pmi8952 mdm9655 pm8937_firmware qca6431 qet4100_firmware qfe4320_firmware wcn3910_firmware mdm9207_firmware sd855_firmware qdm5650 wcn3988 wtr3925 qfe2080fc sdr052 smb1390 sdw3100_firmware msm8208_firmware qet4100 wcn3610 msm8608 mdm9640 qpa8686_firmware qpm6585 qca8337_firmware sda429w_firmware wcd9380_firmware smb1355 qln4650 qtc800t_firmware wcd9330 msm8996au_firmware wgr7640 csr6030 qet5100 qdm5671_firmware qpa8801_firmware qca6564au qtm527_firmware pm8005_firmware msm8940_firmware qet4101_firmware pm7250b qln4642_firmware pmk8001_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware mdm9230 pm8996_firmware qet4200aq_firmware sdx50m_firmware smb1395 smb358s pm660l smb358s_firmware ar8151 smr526 wtr5975 qca6430_firmware wcd9335_firmware qtc801s_firmware wcn3980 qat3522_firmware qca6335_firmware qsw8573 qcs605 qbt1000 wcn3910 qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 qpa8675 sdr051_firmware wcd9330_firmware sdx55m qca6421_firmware wtr3905_firmware qfe4373fc msm8953 qat3518_firmware pmi8998 qfe2520 qsw8574 sd821_firmware wcn3680_firmware qca617 pm855l wcn6851_firmware qdm5670_firmware pmd9635 pm7150a_firmware pm8150b_firmware qfe4302 sd_636_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware qca6694au_firmware pm4250_firmware msm8976sg_firmware sdr105_firmware pmd9645_firmware sd870 pm670 sd210_firmware qdm5677 pm8005 pm855_firmware qdm2302 sdxr1 pm855b_firmware apq8096au qca6595_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware pmi8996_firmware qln4650_firmware qet5100m sa8155p sd675 wtr4605 sd439 qet4101 pm8952 qat3516 pm670l qpm5658 ar8035_firmware qcm2290 qpm5658_firmware wcn3991_firmware qdm5652_firmware qfe4465fc sd678 sdr051 qln5030 qcs2290_firmware pm4125 pmi632 qpa2625_firmware pm456 qfe2081fc_firmware smb1360_firmware qet5100_firmware qpa5373 pm670l_firmware sdr660g qfe2340 sd765g_firmware qpa8686 smb1358_firmware qca6390_firmware sd730_firmware wcd9370 sdr425 pmr525_firmware qca6584au_firmware qfe3340_firmware ar8151_firmware pmi632_firmware sd_8cx_firmware qpm5541 qat5516 smb358_firmware sd662 qpa8821_firmware qfe4308 sdr660g_firmware apq8037 pm3003a qca6320_firmware wcn3680b_firmware qca6595au qca6436_firmware qtc800t smb1354 qca6564au_firmware qdm2305 qca6310 qpm8820 pm8937 qpm2630 qfe2081fc qln5020_firmware sa515m_firmware sdxr2_5g apq8084 sd821 sdr675 sm6250 sd712_firmware apq8017_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware qln5040_firmware pm4125_firmware ar8035 qpa8673 qca6694_firmware qdm2310 qfe2550_firmware msm8953_firmware qln5030_firmware qca6694au pm8952_firmware sda429w sd210 wcn3620_firmware qfe4302_firmware sd820 wcn6850_firmware wcn3620 smb358 csr6030_firmware qca6564a pmx24 qet6110 pmi8952_firmware qcm2290_firmware qln5040 qpm8895 sdr845 qpm5670 wcn3990 sd_675 qtm527 qfe3440fc_firmware sdx24 pmi8994_firmware qdm2307_firmware msm8909w_firmware msm8996au sdm429w_firmware qfe1035 pmi8940 sm6250p rgr7640au qln1035bd pm855a sdr660_firmware pm8909_firmware qca6574a pm8916_firmware smb1390_firmware qca6174a qfe4303_firmware wcn6750 pm8956_firmware qet5100m_firmware qpm4650 mdm9205 qtm525 sa515m sa2150p_firmware wtr6955 qfe3335 sd855 sm4125_firmware qfe4305 wtr6955_firmware pm640p sd768g_firmware sdr865_firmware msm8209 qfe4465fc_firmware pm8250_firmware sd460 qca6391 sdxr1_firmware smb1351 smb1357_firmware aqt1000_firmware pm215_firmware msm8920 qpm8895_firmware pm660a qpa4340 qfe1035_firmware qcm4290 sdx50m pm640a sdr8150 sdx20 pm8916 pmd9655au msm8920_firmware smb1395_firmware sd_455 pmd9655 qca6574au sa8155p_firmware sd205_firmware qsw6310 wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware qpm2630_firmware smb231_firmware qdm2308 wtr4905_firmware qat3550 mdm9150 qdm5679 sd_8c wcn3680b sd835_firmware pm3003a_firmware qca6696 qfe4301 qtc800s_firmware smb1381_firmware sd845_firmware msm8608_firmware qpa2625 apq8037_firmware sm7250p sd720g_firmware pm8956 sd850 pm6250 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2025-27072

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.01% / 0.81%

7 Day CHG~0.00%

Published-06 Aug, 2025 | 07:26

Updated-18 Aug, 2025 | 18:27

Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks

Information disclosure while processing a packet at EAVB BE side with invalid header length.

Product-qam8295p_firmware sa8255p_firmware qca6698aq sa8770p_firmware qca6688aq_firmware sa8770p srv1m sa8155p qca6688aq qam8255p sa6155_firmware sa7775p_firmware qam8620p qca6574a srv1h_firmware sa8150p sa8650p qamsrv1m_firmware sa6150p_firmware sa8620p sa8155p_firmware sa7775p qam8255p_firmware sa9000p qca6696 sa8145p_firmware sa6145p qam8775p srv1h sa6150p sa8195p sa9000p_firmware qamsrv1h qca6696_firmware srv1l qca6574au_firmware qca6698aq_firmware sa8540p sa8540p_firmware sa8650p_firmware srv1m_firmware qam8650p qamsrv1h_firmware sa6145p_firmware qam8650p_firmware qca6574au sa8155 srv1l_firmware qca6574a_firmware qca6595_firmware sa6155 qam8775p_firmware qca6595au sa8775p sa8255p sa6155p_firmware qca6595au_firmware sa8150p_firmware sa8145p qam8295p sa7255p sa8295p sa8295p_firmware qam8620p_firmware sa7255p_firmware qca6595 sa8195p_firmware sa8155_firmware qamsrv1m sa8620p_firmware sa6155p sa8775p_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2018-11845

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.05% / 15.43%

7 Day CHG~0.00%

Published-25 Feb, 2019 | 23:00

Updated-05 Aug, 2024 | 08:17

Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in versions MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCS605, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130.

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 mdm9650 sd_636 snapdragon_high_med_2016_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sd_410 sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_652 sd_425_firmware sd_625_firmware sd_450 sd_8cx_firmware sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sd_652_firmware sxr1130 sd_205_firmware sd_212 sd_650_firmware sd_427_firmware sd_712 sd_412 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_710_firmware sdm630 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_412_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 sd_427 sd_670 sd_435_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2013-4739

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4.9||MEDIUM

EPSS-0.09% / 26.65%

7 Day CHG~0.00%

Published-03 Feb, 2014 | 02:00

Updated-11 Apr, 2025 | 00:51

The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to obtain sensitive information from kernel stack memory via (1) a crafted MSM_MCR_IOCTL_EVT_GET ioctl call, related to drivers/media/platform/msm/camera_v1/mercury/msm_mercury_sync.c, or (2) a crafted MSM_JPEG_IOCTL_EVT_GET ioctl call, related to drivers/media/platform/msm/camera_v2/jpeg_10/msm_jpeg_sync.c.

Vendor-codeaurora n/a Qualcomm Technologies, Inc.

Product-quic_mobile_station_modem_kernel android-msm n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2021-1930

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 11.27%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 11:25

Updated-03 Aug, 2024 | 16:25

Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-qca9377_firmware wcn3991_firmware wsa8830 sd678 sa6150p_firmware sm6250p_firmware sa8145p_firmware qcs610 sm7250 qcs2290_firmware sm7250_firmware qca6431_firmware sd7c_firmware csrb31024 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qcs6125_firmware qca6426 qca6584au_firmware wcn3990_firmware qca9377 sa415m wcn3998 wcd9371_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcd9326_firmware qsm8350_firmware sd662 sd710_firmware qsm8350 sd460_firmware sa8155 qca6574au_firmware sdx55_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3998_firmware qca6420 qca6436_firmware qca6564au_firmware qca6584au sa6155p_firmware sd778g qrb5165_firmware sdxr2_5g qcs6125 sa8155_firmware sd662_firmware sa415m_firmware wcn3988_firmware qca6430 sa6145p_firmware qca6421 sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765g sd765_firmware qca6436 wcd9326 wcn6851 sa6155p qca6174a_firmware qcs4290_firmware wcd9385 wcd9341 qca6431 qca6696_firmware wcd9371 sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sa8150p wcn3910_firmware sm6250_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware wcn6750_firmware qcm6125_firmware qcm2290_firmware wcn3991 wcd9380_firmware wcn3990 sd_675 sd780g sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 wsa8835 sd665_firmware wcd9380 sd888_5g sm6250p qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6174a sdx24_firmware sm7325 qca6430_firmware wcn3980 wcn6750 qca6574_firmware sd855 sm4125_firmware wcn6850 sd665 sd7c wcn3910 wsa8815 sd765 qca6426_firmware qca6574a_firmware sd768g_firmware wcn3980_firmware sd460 qca6391 sd730 sdx55m qca6421_firmware aqt1000_firmware wcn6740_firmware sd678_firmware qcm4290 csrb31024_firmware sdx50m qrb5165 sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd710 sd670 wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 qcs610_firmware wcn6856 qsm8250 sa6145p sd768g sa8145p wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sa6150p sdx55 sa8155p sd675 sd720g_firmware qcs410_firmware qcm2290 qsm8250_firmware sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-125

Out-of-bounds Read

CVE-2025-21472

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.01% / 0.81%

7 Day CHG~0.00%

Published-06 Aug, 2025 | 07:25

Updated-18 Aug, 2025 | 18:27

Leftover Debug Code in Secure Element

Information disclosure while capturing logs as eSE debug messages are logged.

CWE ID-CWE-489

Active Debug Code

CVE-2021-1968

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.2||MEDIUM

EPSS-0.02% / 2.97%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 00:00

Updated-03 Aug, 2024 | 16:25

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-fsm10055 wcn3991_firmware mdm9150_firmware wcn3991 sd678 sa6150p_firmware qca8337_firmware sa8145p_firmware qcs610 sda429w_firmware wcd9380_firmware sd_675 fsm10056 qca8337 qca6595 sdx55m_firmware csra6620 fsm10055_firmware qca6574 wcn3950_firmware sd665_firmware wcd9380 sa8150p_firmware qca6420_firmware qca6595au_firmware sa6155 qcs410 wcd9370 csra6620_firmware sd_675_firmware sd675_firmware qca6574a csra6640_firmware qcs6125_firmware qca6584au_firmware qca6430_firmware wcd9335_firmware wcn3980 wcn3998 sd_8cx_firmware wcn3950 sd720g qca6574_firmware wcd9340_firmware wcn3660b sd855 wsa8815 sd665 sd_8c_firmware wcn3660b_firmware sa8155 qca6574a_firmware qca6574au_firmware sdx55_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3998_firmware wcn3999_firmware wcn3980_firmware wcn3610_firmware qca6420 qca6391 sdx55m aqt1000_firmware qca6584au sa6155p_firmware wcn3999 sd678_firmware ar8031_firmware qcs6125 sa8155_firmware qcs405 qca6430 wcn3988_firmware qca6574au sa6145p_firmware sa8155p_firmware sm6250 wcd9340 sa8195p wsa8810_firmware wcd9341_firmware qcm6125 wsa8810 fsm10056_firmware wcd9335 sa6155p qcs610_firmware mdm9150 sd_8c sa6145p wcd9341 ar8031 qca6696_firmware qca6595_firmware qcs405_firmware sa8145p qca6696 qca6391_firmware ar8035 wcd9375 sd_8cx aqt1000 sa8150p wcd9370_firmware sm6250_firmware sa6150p sdx55 sa8155p csra6640 sda429w sd675 sd855_firmware wcn3620_firmware wcn3988 wsa8815_firmware wcn3620 sd720g_firmware sa8195p_firmware qcs410_firmware ar8035_firmware wcn3610 qcm6125_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-20

Improper Input Validation

CVE-2025-21431

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.01% / 1.40%

7 Day CHG-0.00%

Published-07 Apr, 2025 | 10:15

Updated-19 Aug, 2025 | 16:59

Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform

Information disclosure may be there when a guest VM is connected.

Product-sa7775p sa8620p srv1h_firmware sa7255p qca6595au_firmware sa8540p_firmware qamsrv1m_firmware sa6145p_firmware sa8255p sa6155p_firmware sa8195p qca6698aq sa8295p sa8145p_firmware sa8155_firmware sa8295p_firmware sa8150p sa8775p sa6150p_firmware qam8295p_firmware qam8620p qca6574au_firmware sa8145p qamsrv1m sa6155_firmware sa8540p sa8770p sa6150p srv1m_firmware qca6696 qamsrv1h_firmware qca6574au sa8775p_firmware qca6595_firmware qca6688aq_firmware qam8295p sa6155 srv1l_firmware qca6696_firmware sa8770p_firmware sa6155p sa8155 qca6595au qca6574a_firmware srv1h qca6688aq sa6145p qca6574a qamsrv1h qca6595 qam8775p qam8255p qam8650p_firmware sa8255p_firmware qam8620p_firmware sa9000p sa7255p_firmware sa8620p_firmware srv1l sa8650p sa8155p_firmware sa9000p_firmware sa8155p qam8775p_firmware sa8650p_firmware qam8255p_firmware sa7775p_firmware qca6698aq_firmware sa8150p_firmware srv1m qam8650p sa8195p_firmware Snapdragon

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CVE-2021-1924

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9||CRITICAL

EPSS-0.04% / 12.67%

7 Day CHG~0.00%

Published-12 Nov, 2021 | 06:15

Updated-03 Aug, 2024 | 16:25

Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-qca9377_firmware sm7250 mdm9640_firmware sm6250p_firmware ipq4028_firmware qca8337 ar9380 ipq8173_firmware qcn5124 fsm9950 mdm9645 wcn3950_firmware sc8180x\+sdx55 qca6595au_firmware sa6155 sd_455_firmware apq8076 fsm9905_firmware qcs6125_firmware msm8108 sa415m wcd9371_firmware msm8108_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware qsw8573_firmware sm6375_firmware wcn3660b sd450_firmware qsm8350_firmware qsm8350 sd460_firmware mdm9230_firmware wcn7850 ipq8062 qca8081_firmware apq8009w_firmware ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware mdm8207 ipq8072_firmware sa8155_firmware qca4004_firmware ipq8068 wcd9306_firmware sdm830_firmware mdm9625_firmware sd765g ar3012_firmware wcn7851_firmware apq8052 msm8209_firmware mdm9250_firmware qca9888_firmware qcn6122 qca6696_firmware wcd9371 sd870_firmware qcn5154_firmware sd_8cx sa8150p ar7420_firmware qca4004 mdm9330_firmware qca9992_firmware sd865_5g_firmware sd712 qcn5121 qcn5022_firmware wcn6750_firmware sd450 qca6428_firmware sm6375 qca9985_firmware wcn3991 ipq4018_firmware qca9980_firmware sdm429w ipq8078 sdx55m_firmware ipq8173 msm8976_firmware qca6574 sd632_firmware csr8811_firmware wcd9380 qualcomm215 qcs410 qcn5024 sd690_5g_firmware qca9379_firmware sdx24_firmware qca9985 qcn9012_firmware sd439_firmware ipq6018_firmware qca9890_firmware wcn6850 pmp8074_firmware msm8956_firmware qca6584_firmware msm8937_firmware sd_8c_firmware ipq6028 ipq8064 pmp8074 qca1990 sd730 wcn6740_firmware mdm9225 qcn5064_firmware sd678_firmware apq8064au_firmware mdm9225m ipq8078_firmware qca9890 qca6234 qcn5054 qcs603 fsm9900_firmware qca9994 qca6164_firmware qca9980 qcn9024_firmware ipq8174_firmware apq8009w sdx57m qcm4290_firmware wcn6855 qcs610_firmware apq8084_firmware sa6145p qca9886_firmware ar8031 mdm8207_firmware qca6164 sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware csra6640 wcn3660 qca9379 qca6234_firmware qsm8250_firmware mdm9150_firmware wsa8830 qca9561 fsm9915_firmware csrb31024 mdm9628_firmware mdm9650 fsm9916_firmware sd_636 fsm10055_firmware qca9992 qcs4290 mdm9250 pmd9635_firmware apq8009_firmware sd690_5g fsm9915 msm8916_firmware sd675_firmware ipq8072 qca6564 qca6426 qrb5165n_firmware qca9984_firmware qca9377 fsm9905 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 ipq8074a qca9982 mdm8635m sa8155 qca6584 qcn5122_firmware sdx55_firmware qcn6023_firmware wcn3610_firmware qrb5165n mdm9207 wcd9306 qca6584au sd778g qfe1952 msm8208 sm6225 ipq8174 sd429 wcn7851 msm8962 qca9367 qcn5052 mdm9235m_firmware sdm630 mdm9607_firmware mdm9655_firmware msm8976sg sa415m_firmware wcn3988_firmware qcn9074 sd205 sd429_firmware qca6421 sd778g_firmware sa8195p qca6694 qca7550 wcn3660a qca9982_firmware qcn6023 qcs4290_firmware qcs6490_firmware mdm8635m_firmware mdm9625 qca6390 qca9898_firmware sd750g_firmware wcd9375 msm8956 msm8976 sc8180x\+sdx55_firmware sm6250_firmware apq8056 msm8917_firmware ipq5010_firmware ipq8074a_firmware mdm9625m sd888_5g_firmware sdx20_firmware msm8916 apq8017 qcx315 mdm9235m mdm9630_firmware qcm6125_firmware qca9882 sd780g sd865_5g qca6595 ipq8065_firmware qcx315_firmware qca10901 sd665_firmware qcn5154 qca8075_firmware ipq6005_firmware mdm9206 wcn6855_firmware qca9888 qca6310_firmware sm7325 ipq8070a_firmware qca6574_firmware qca9886 sd665 qca6175a sd765 wtr3925l qca6574a_firmware sd850_firmware wcn3660a_firmware apq8009 csrb31024_firmware qcm6490_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware mdm9626_firmware qca9531 qca9889_firmware mdm9607 qcn5122 mdm9645_firmware sdx20m_firmware qcn5022 qca6564_firmware sd768g wcn6740 sdw2500 msm8940 qca8075 apq8096au_firmware qcn6024 qcn9022 msm8962_firmware sdm830 ipq6000_firmware sdx12 qcs410_firmware mdm9330 qca6175a_firmware sm7325_firmware ipq8062_firmware fsm10055 sa6150p_firmware qcs610 qcn5550 fsm9955_firmware qca6431_firmware wcd9360_firmware qca9561_firmware qca4024_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6335 msm8917 qcn5064 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware fsm9916 qca9987_firmware sd632 ipq8076a mdm9628 qca4020 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 mdm9630 wcd9375_firmware sa6155_firmware sdx12_firmware msm8909w wcd9360 qca10901_firmware sdx20m qca6438_firmware whs9410_firmware wcn3999 qrb5165_firmware ipq5028 qca7500 ipq4029_firmware qcs6125 apq8056_firmware apq8016_firmware ipq6010 apq8062_firmware sd662_firmware qcs405 sc8280xp_firmware qca1990_firmware qualcomm215_firmware fsm10056_firmware qca4020_firmware qca6436 fsm9910_firmware qcn3018_firmware sa6155p wcn6851 qcs603_firmware msm8937 ipq8066_firmware wcn3660_firmware ipq8068_firmware mdm9655 pm8937_firmware qca6431 sd750g wcn3910_firmware mdm9207_firmware qfe1922 wsa8830_firmware wcn3988 qca6438 wcn7850_firmware sa8195p_firmware msm8208_firmware qca9898 ipq4028 wcn3610 mdm9640 msm8608 ipq5018_firmware ar9580_firmware qca8337_firmware sda429w_firmware wcd9380_firmware ipq8072a qca7500_firmware wcd9330 msm8996au_firmware csr6030 ipq8076a_firmware qca7550_firmware mdm9225m_firmware qca6564au wcn6856_firmware qcn5164 msm8940_firmware qca9558 qca7520_firmware mdm9230 qcn5054_firmware ipq4019_firmware sdx50m_firmware ipq8066 qca8072_firmware qca6174 qcn5052_firmware qca6335_firmware qsw8573 qcs605 sd7c mdm9225_firmware qca6320 wcn3910 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 qca9984 qcn9024 qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware qca6421_firmware sd821_firmware ar8031_firmware wcn3680_firmware qrb5165 wcn6851_firmware ipq8070 pmd9635 qca9887_firmware wtr3925l_firmware sd_636_firmware qca6564a_firmware qca6694au_firmware qca9880 msm8976sg_firmware sd480 sd870 qcn5121_firmware ar3012 sd210_firmware qsm8250 ipq6018 qcn3018 sdxr1 apq8096au qca6595_firmware qcs405_firmware sa8145p ar9580 sd780g_firmware sc8280xp sa8155p sd675 sd439 qca9531_firmware ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware sd678 qcn9070 sa8145p_firmware qca7520 qcs2290_firmware fsm10056 sm7250_firmware sd7c_firmware csra6620 qca9987 qfe1100_firmware qcn9072 qca9880_firmware sd765g_firmware ipq8069_firmware qca6390_firmware ipq6000 qca6174_firmware sd730_firmware wcd9370 qcn5152_firmware qca6584au_firmware apq8076_firmware qcn9000_firmware ipq5018 sd_8cx_firmware fsm9950_firmware sd662 qcn5124_firmware qfe1952_firmware apq8037 qca6320_firmware qca6595au wcn3999_firmware qca6436_firmware ipq5010 qca6564au_firmware sa6155p_firmware qca6310 pm8937 sa515m_firmware qca9990 qcs6490 sdxr2_5g apq8084 sd821 apq8062 sa6145p_firmware sm6250 sd712_firmware apq8017_firmware qfe1100 sd765_firmware qca8081 ipq8071a qca6174a_firmware ipq8071a_firmware wcd9385 ar8035 csr8811 apq8064au ipq4019 qca6694_firmware qcn9100_firmware qca6694au msm8952 sda429w sd210 wcn3620_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 csr6030_firmware qca6564a qca8072 qcm2290_firmware mdm9635m_firmware qcn9000 sd_675 mdm9625m_firmware ar9380_firmware sdx24 qcn9012 qca9558_firmware msm8952_firmware msm8909w_firmware qcn6122_firmware msm8996au sdm429w_firmware wsa8835 sd888_5g sm6250p ipq4018 qca6574a qca9889 qca6174a ipq8074 qca9994_firmware wcn6750 mdm9635m apq8052_firmware fsm9910 ipq8076_firmware mdm9205 sa515m ar7420 sm4125_firmware ipq8076 qfe1922_firmware sdx57m_firmware qca9887 qcn5021 ipq8069 qcn5152 sd768g_firmware msm8209 sd460 qca6391 sdxr1_firmware ipq6005 msm8920 qcn9100 mdm9626 qcm4290 sdx50m qca9882_firmware sdx20 msm8920_firmware sd_455 sm6225_firmware ipq8074_firmware qca6574au sa8155p_firmware sd205_firmware qcm6125 mdm9150 wcn6856 sd_8c ipq6010_firmware qca6696 fsm9955 apq8016 msm8608_firmware sa6150p qcn9022_firmware fsm9900 qca9990_firmware apq8037_firmware ipq8070a qcn9072_firmware sd720g_firmware ipq8071_firmware qcn9074_firmware ipq4029 sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-203

Observable Discrepancy

CVE-2021-1969

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.2||MEDIUM

EPSS-0.03% / 8.47%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 00:00

Updated-03 Aug, 2024 | 16:25

CWE ID-CWE-20

Improper Input Validation

CVE-2017-8252

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 10.75%

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 16:27

Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCA8081, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24, SM7150, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 mdm9150_firmware sd_632 mdm9635m_firmware mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 qc_215_firmware sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sm7150_firmware sd_615_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_650 sd_450_firmware sd_845_firmware sm7150 sd_410 sd_820a_firmware qcs605_firmware sd_675_firmware ipq4019_firmware mdm9206 sd_652 sd_425_firmware sdx24_firmware sd_625_firmware ipq8074 sd_450 mdm9635m sd_8cx_firmware mdm9615 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware qc_215 sd_835 sda660 sxr1130_firmware sd_210_firmware sd_415_firmware sd_652_firmware qca8081_firmware sxr1130 msm8909w sd_616_firmware sd_205_firmware sd_415 sd_212 sd_650_firmware sd_427_firmware sd_712 sd_855 sd_412 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 mdm9655_firmware sd_615 sd_710_firmware sdm630 sd_625 ipq8074_firmware sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qca8081 mdm9150 sd_429_firmware snapdragon_high_med_2016 sd_212_firmware sd_850_firmware mdm9655 sdm439_firmware sd_412_firmware sd_712_firmware sd_855_firmware sdm630_firmware sda660_firmware sd_8cx sd_430 ipq4019 sd_427 sd_670 sd_435_firmware mdm9615_firmware sdx20_firmware sd_710 sd_410_firmware sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-285

Improper Authorization

CVE-2022-40523

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.04% / 10.88%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 12:21

Information exposure in Kernel

Information disclosure in Kernel due to indirect branch misprediction.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE ID-CWE-668

Exposure of Resource to Wrong Sphere

CVE-2022-40525

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.1||HIGH

EPSS-0.04% / 10.88%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 12:21

Information Exposure in Linux Networking Firmware

Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE ID-CWE-668

Exposure of Resource to Wrong Sphere

CVE-2023-33078

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.1||MEDIUM

EPSS-0.03% / 6.76%

7 Day CHG~0.00%

Published-04 Mar, 2024 | 10:48

Updated-10 Jan, 2025 | 17:47

Buffer Over-read in DSP Services

Information Disclosure while processing IOCTL request in FastRPC.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2023-33111

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.05% / 13.77%

7 Day CHG+0.01%

Published-01 Apr, 2024 | 15:05

Updated-11 Aug, 2025 | 15:06

Improper Validation of Array Index in Audio

Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2022-33273

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.03% / 6.72%

7 Day CHG~0.00%

Published-02 May, 2023 | 07:30

Updated-03 Aug, 2024 | 08:01

Buffer over-read in Trusted Execution Environment

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

Product-qca9377_firmware wsa8830 sxr2230p_firmware snapdragon_x24_lte_modem_firmware qca8337 wcn785x-5 qca6431_firmware sm7250-ac_firmware wcn3950_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sa6155 qca6335 sm8350 sdm670 wcd9370 qcs605_firmware sd_675_firmware sd675_firmware ssg2115p qca6426 wcn685x-1 wcn3990_firmware sm8450 qca9377 sm8250-ab wcn3998 sd_8cx_firmware wcd9385_firmware qam8295p wcn3950 wcd9326_firmware sd_8_gen1_5g_firmware qsm8350_firmware qsm8350 qam8295p_firmware sa8155 sa9000p_firmware snapdragon_x55_5g_modem-rf_system qca6574au_firmware sdx55_firmware sda\/sdm845_firmware qca6595au wcn3998_firmware qca8081_firmware sa6155_firmware sm7250p_firmware wcd9375_firmware qca6420 qca6436_firmware qca6564au_firmware sa6155p_firmware qca6310 snapdragon_x65_5g_modem-rf_system_firmware sa8155_firmware sm8250_firmware sm7250-ab_firmware sm8250-ac qca6430 sa6145p_firmware qca6421 sm7250-aa wcd9340 snapdragon_8cx_compute_platform wsa8810_firmware sm8450_firmware qca6436 snapdragon_ar2_gen_1_platform_firmware wcd9326 sa6155p qca8081 qcs603_firmware qca6174a_firmware wcn685x-1_firmware wcd9385 sm8150_firmware sxr2130_firmware wcd9341 qca6431 qca6696_firmware qca6390 ar8035 sda\/sdm845 aqt1000 sa8150p sd_8cx wcd9375 sm6150_firmware sm8250-ac_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware sm8150 sdm850 wsa8815_firmware wsa8835_firmware sa8295p_firmware qca6564a wcn785x-1 qca8337_firmware wcd9380_firmware ssg2125p wcn3990 sd_675 snapdragon_8cx_gen_2_5g_compute_platform sdm845 sd865_5g qca6595 qca6564au sm8350-ac_firmware sm8150-ac snapdragon_8c_compute_platform sm6150 sd670_firmware qca6574 sxr1230p_firmware wsa8835 sa8540p_firmware sd_8_gen1_5g wcd9380 ssg2125p_firmware sxr2130 qca6574a wcn685x-5_firmware qca6174a sdm670_firmware sxr1230p qca6310_firmware qca6430_firmware wcn3980 qca6335_firmware sa9000p qca6574_firmware sm7250-ab qcs605 sd855 sm6150-ac_firmware wcd9340_firmware wsa8815 sxr2230p sdx57m_firmware snapdragon_xr2_5g_platform_firmware qca6426_firmware qca6574a_firmware wcn785x-5_firmware snapdragon_x55_5g_modem-rf_system_firmware sm8250-ab_firmware qca6391 wcn3980_firmware snapdragon_8cx_gen_3_compute_platform_firmware snapdragon_x50_5g_modem-rf_system_firmware sa8295p qca6421_firmware aqt1000_firmware sdm850_firmware snapdragon_8cx_compute_platform_firmware snapdragon_xr2_5g_platform snapdragon_x65_5g_modem-rf_system wsa8832_firmware sm8350_firmware qcs603 wcn685x-5 wcn785x-1_firmware qca6574au sa8155p_firmware sd670 qca6564a_firmware sdx57m wcd9341_firmware wsa8810 sm7250-aa_firmware snapdragon_x24_lte_modem wsa8832 sa8540p sm7250-ac snapdragon_8cx_gen_3_compute_platform sm8150-ac_firmware snapdragon_ar2_gen_1_platform sa6145p snapdragon_8c_compute_platform_firmware sm8350-ac qca6595_firmware qca6696 qca6391_firmware wcd9370_firmware sm6150-ac sdx55 snapdragon_x50_5g_modem-rf_system sa8155p sd675 sm8250 sm7250p ssg2115p_firmware snapdragon_8cx_gen_2_5g_compute_platform_firmware ar8035_firmware sdm845_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-33297

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.03% / 7.51%

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Buffer overread in Linux Sensors

Information disclosure due to buffer overread in Linux sensors

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-33220

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.1||MEDIUM

EPSS-0.02% / 3.07%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:23

Updated-03 Aug, 2024 | 08:01

Buffer over-read in Automotive multimedia

Information disclosure in Automotive multimedia due to buffer over-read.

Product-wsa8830 wcd9380_firmware sa6150p_firmware sa8145p_firmware sw5100p sd865_5g qcc5100 sdx55m_firmware wcn6856_firmware wsa8835 sd_8_gen1_5g wcd9380 sa8150p_firmware sd888_5g qca6420_firmware qca6595au_firmware qca6390_firmware wcn6855_firmware qca6426 qca6430_firmware wcn3980 wcn3998 wcd9385_firmware qam8295p sdxr2_5g_firmware sd_8_gen1_5g_firmware sd855 wsa8815 wcn6850 qam8295p_firmware qca6426_firmware wcn7850 qca6574au_firmware qca6595au wcn3998_firmware wcn3980_firmware qca6391 sdx55m qca6420 qca6436_firmware sa8295p qcc5100_firmware aqt1000_firmware sa6155p_firmware wcn7851 sdxr2_5g wcn6851_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 sd870 qca6436 wcn6851 wcn6855 sa6155p sw5100p_firmware wcn7851_firmware wcn6856 sa6145p wcd9385 wcd9341 qca6696_firmware sa8145p sd870_firmware qca6696 qca6391_firmware qca6390 aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware sa8295p_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-33221

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.03% / 6.32%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Buffer over-read in Trusted Execution Environment

Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2023-28563

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.05% / 16.80%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in IOE Firmware

Information disclosure in IOE Firmware while handling WMI command.

CWE ID-CWE-126

Buffer Over-read

CVE-2023-28554

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.06% / 17.36%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in Qualcomm IPC

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.

CWE ID-CWE-126

Buffer Over-read

CVE-2024-43063

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.02% / 3.89%

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-10 Jan, 2025 | 15:37

Buffer Over-read in Automotive Autonomy

information disclosure while invoking the mailbox read API.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2023-28571

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.03% / 5.82%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN HOST

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

Product-qca6431 qca6678aq_firmware qcs410_firmware sa6150p_firmware sd865_5g sw5100p wsa8845_firmware snapdragon_auto_4g_modem_firmware qcc2076_firmware qca6595 qcs610_firmware wcd9335 sxr2130_firmware wcd9370 qca6678aq qca6696 wcd9340_firmware wcd9341_firmware sm8250-ab_firmware qca6320 8998 snapdragon_w5\+_gen_1_wearable_platform_firmware wcd9395_firmware qca6390 qcc2073_firmware qca6426 qca6564au qcn9074 wsa8815_firmware sa8195p_firmware sm8250-ab qca6426_firmware wcd9395 snapdragon_auto_4g_modem qca6574au_firmware wcn785x-5 qam8295p wcd9341 qca6574au wcd9390 wcn785x-5_firmware wcn3950 wsa8810_firmware snapdragon_xr2_5g_platform wsa8845h_firmware qca6797aq_firmware qca6554a sa8295p_firmware sd835_firmware csrb31024_firmware video_collaboration_vc1_platform_firmware qca6584au qca6320_firmware sw5100_firmware wcn685x-5 qca6310_firmware qca6595_firmware sm8250-ac s820a video_collaboration_vc1_platform sm8250_firmware wcd9385_firmware qca6421 snapdragon_x55_5g_modem-rf_system qca6310 qam8255p_firmware wcd9380 sa6145p_firmware qam8255p snapdragon_xr2_5g_platform_firmware sa8150p snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 msm8996au_firmware sa6155p qca6421_firmware snapdragon_auto_5g_modem-rf_firmware qca6564au_firmware wsa8810 snapdragon_8\+_gen_2_mobile_platform sw5100 qca6595au video_collaboration_vc3_platform sa6155p_firmware wsa8840 qam8295p_firmware qca6390_firmware qca6431_firmware sd835 wcn3990_firmware qca6175a_firmware qca6564a_firmware qca6436_firmware qca6698aq_firmware 8998_firmware wcd9385 mdm9650_firmware snapdragon_8_gen_2_mobile_platform sa8255p wcd9390_firmware sm8250-ac_firmware apq8064au_firmware wcd9370_firmware csrb31024 mdm9650 snapdragon_auto_5g_modem-rf snapdragon_x55_5g_modem-rf_system_firmware qcc2076 qca6554a_firmware qca6574a sxr2130 sa8195p 8098_firmware wcd9340 sm8550p_firmware wcn3988 qca6584au_firmware wcd9335_firmware wcn3980_firmware qca6436 qca6574 wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware sw5100p_firmware sm8250 qca6696_firmware wsa8845h wcd9380_firmware sa6150p qca6574_firmware qcs410 sa8155p_firmware wsa8815 qca6564a sa8155p wsa8830 qca6797aq sm8550p sa6145p qcn9074_firmware sa8255p_firmware wcn785x-1_firmware qca6574a_firmware qcc2073 msm8996au qca6175a qca6391 wcn785x-1 apq8064au qca6698aq wcn3950_firmware snapdragon_8_gen_2_mobile_platform_firmware sa8295p 8098 wcn685x-1 sa8145p_firmware sd865_5g_firmware wcn685x-5_firmware sa8150p_firmware s820a_firmware snapdragon_w5\+_gen_1_wearable_platform wcn3988_firmware video_collaboration_vc3_platform_firmware sa8145p wcn3990 wsa8835_firmware wcn3980 wsa8830_firmware wcn685x-1_firmware qcs610 Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

CVE-2023-28569

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.1||MEDIUM

EPSS-0.05% / 16.80%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN HAL

Information disclosure in WLAN HAL while handling command through WMI interfaces.

CWE ID-CWE-126

Buffer Over-read

CVE-2020-3687

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 8.63%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 07:44

Local privilege escalation in admin services in Windows environment can occur due to an arbitrary read issue.

Product-qualcomm unspecified

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2020-3679

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 17.48%

7 Day CHG~0.00%

Published-09 Sep, 2020 | 06:25

Updated-04 Aug, 2024 | 07:44

u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code is still mapped at known address including code segments' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Bitra, Kamorta, Nicobar, QCS404, QCS610, Rennell, SA6155P, SA8155P, Saipan, SC7180, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

CVE-2022-25664

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.2||MEDIUM

EPSS-0.17% / 38.48%

7 Day CHG~0.00%

Published-12 Oct, 2022 | 00:00

Updated-15 May, 2025 | 19:15

Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product-qcs605 msm8208_firmware wcn6855_firmware mdm9650 msm8953_firmware msm8956 qca6391_firmware sd888_5g_firmware qcs8155 sd429 wcn3620 msm8209_firmware qca6574_firmware sdx50m_firmware sw5100_firmware sd205_firmware qca6430 sa8155 sd210 wcn7850_firmware sd855_firmware sd820_firmware sdxr1 wcn3990 qca6174a_firmware wsa8835_firmware qca6696_firmware qca8337 qcs410 sa6145p msm8108 qca6431_firmware wcn6855 qam8295p wsa8830 qca6696 sm8475 sa6155p qca6420 wcn3998_firmware apq8009_firmware sdx55 qca6390_firmware sdx55_firmware apq8056 qca6574a_firmware wcd9385_firmware sa8195p_firmware apq8053_firmware apq8052_firmware wcn3950_firmware qcs605_firmware sdxr2_5g_firmware msm8108_firmware qca6436_firmware wsa8815_firmware msm8952 apq8076_firmware qcs410_firmware sd660_firmware sd660 qcs6125 sa6145p_firmware wcd9335 qca6430_firmware sd835 wcd9370_firmware aqt1000 qca6391 wcn3680_firmware sa8295p qca6174a qcs610_firmware sa8295p_firmware sdxr1_firmware wsa8835 sa8195p sd821_firmware wcn6851_firmware qualcomm215 wcn3980_firmware sdm429w qca6574a qcs610 qca6564a qca6595au wcn3615_firmware wcn6851 wcn6850_firmware sd865_5g wcd9340_firmware sd865_5g_firmware apq8096au_firmware qca6564au_firmware wcn3660b_firmware wsa8830_firmware wcd9341 wcn3660b qsm8250_firmware sd845_firmware wcn3998 wcn6856_firmware qca6574au mdm9150_firmware msm8996au_firmware wcn3990_firmware sdx55m msm8608_firmware qcm6125_firmware wcd9341_firmware msm8956_firmware qcc5100 wcn3615 qca6420_firmware qca6564au wcd9335_firmware wsa8815 sd205 wcn3620_firmware wcd9326 msm8996au sw5100p_firmware sda429w wcn6856 qca6564a_firmware wcn7850 mdm9150 sda429w_firmware sd821 sd_8_gen1_5g_firmware qca6426 msm8953 wcd9380 qca6320_firmware wcn3988 qca6564 apq8053 qcm6125 sa8155p_firmware qca6320 qca8337_firmware sd870_firmware apq8056_firmware wcd9326_firmware wcn3988_firmware qca6574 qualcomm215_firmware sd870 wcn7851_firmware qca6426_firmware apq8052 sd845 msm8976_firmware sa6150p_firmware sd429_firmware qam8295p_firmware qca6564_firmware sw5100 wcn3680b qcs6125_firmware wcn3610_firmware qca6335 wcn6850 wsa8810 sd855 sa8145p msm8952_firmware apq8096au qca6310_firmware qcc5100_firmware msm8209 wcd9380_firmware sd835_firmware sa8145p_firmware sd888_5g sa8155_firmware msm8976sg qca6335_firmware qca6390 qca6421 msm8208 apq8076 msm8976 sa6155 sa6150p qca6595au_firmware qcs8155_firmware wcn3610 sd210_firmware wsa8810_firmware qca6310 qsm8250 sdx55m_firmware wcd9370 sa8150p_firmware wcn3680 wcn7851 apq8009 sd820 wcd9340 qca6436 wcd9385 sa6155p_firmware sa8150p wcn3950 sw5100p sdxr2_5g sdm429w_firmware sa6155_firmware aqt1000_firmware sdx50m qca6431 msm8976sg_firmware wcn3680b_firmware wcn3980 mdm9650_firmware msm8608 qca6574au_firmware sa8155p qca6421_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-459

Incomplete Cleanup

CVE-2022-25722

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6||MEDIUM

EPSS-0.03% / 7.02%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 20:17

Information Exposure in DSP Services

Information exposure in DSP services due to improper handling of freeing memory

Product-qcn5024_firmware qcn9070 ipq4028_firmware ar9380 ipq8173_firmware mdm9650 qcn5124 qca4024_firmware qcn9072 qca9880_firmware qca9992 ipq8078a ipq5028_firmware qcn5152_firmware wcn3990_firmware qcn9000_firmware qca9984_firmware ipq5018 ipq8076a qcn6024_firmware ipq8074a qcn5124_firmware qca6320_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware qca8081_firmware qcn6023_firmware wcn3610_firmware ipq5010 qca9986 ipq8070_firmware qca6310 ipq8065 ipq8078a_firmware ipq8174 qca9990 ipq5028 qca7500 ipq4029_firmware qcn5052 ipq6010 ipq8068 qcn9074 sd205 wcd9340 qcn6132 wsa8810_firmware qualcomm215_firmware wcd9335 qca8081 ipq8071a qcn6023 ipq8071a_firmware qca9888_firmware qcn6122 ipq8068_firmware wcd9341 qcn5154_firmware qca9898_firmware csr8811 ipq4019 qcn9100_firmware sd210 qca9992_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware qca9898 qcn5022_firmware ipq4028 wcn3610 ipq5018_firmware qca9985_firmware ipq4018_firmware wcn3990 qcn9000 ipq8072a qca7500_firmware qca9980_firmware ipq8076a_firmware ar9380_firmware ipq8078 ipq8173 qcn9012 qcn5164 qcn6122_firmware ipq8065_firmware csr8811_firmware qualcomm215 qcn5154 qca8075_firmware ipq4019_firmware ipq4018 qcn5024 qca9889 qcn6132_firmware qca9888 qca6310_firmware qca9985 qca9994_firmware qcn5052_firmware qcn9012_firmware wcd9335_firmware ipq8070a_firmware ipq6018_firmware ipq8076_firmware qca9886 wcd9340_firmware wsa8815 qca6320 ipq8076 mdm9650_firmware qca9986_firmware qca9984 ipq6028 ipq8064 qcn5152 qcn9024 sd835 ipq8064_firmware qcn9100 ipq8078_firmware qcn9070_firmware ipq8070 ipq6028_firmware ipq8072a_firmware qca9994 qca6574au qca9889_firmware qca9980 qcn5122 qcn9024_firmware ipq8174_firmware sd205_firmware qca9880 wcd9341_firmware wsa8810 sd210_firmware ipq6018 qcn5022 sd835_firmware qca9886_firmware ipq6010_firmware apq8096au qca4024 qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9072_firmware qcn9074_firmware ipq4029 Snapdragon

CWE ID-CWE-416

Use After Free

CVE-2022-25653

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.05% / 13.21%

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 04:42

Information disclosure in video due to buffer over-read while processing avi file in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables