ByteOS

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product

Versions

Affected

AQT1000, AR8035, CSRB31024, QCA6174A, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6564AU, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCA9377, QCM2290, QCM4290, QCM6125, QCM6490, QCS2290, QCS410, QCS4290, QCS603, QCS605, QCS610, QCS6125, QCS6490, SA415M, SA515M, SC8180X+SDX55, SD 675, SD 8 Gen1 5G, SD 8CX, SD 8cx Gen2, SD460, SD480, SD662, SD665, SD670, SD675, SD678, SD680, SD690 5G, SD695, SD710, SD712, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD7c, SD855, SD865 5G, SD870, SD888, SD888 5G, SDX24, SDX50M, SDX55, SDX55M, SDX65, SDXR1, SDXR2 5G, SM4125, SM6250, SM6250P, SM7250P, SM7315, SM7325P, SW5100, SW5100P, WCD9326, WCD9335, WCD9340, WCD9341, WCD9360, WCD9370, WCD9371, WCD9375, WCD9380, WCD9385, WCN3910, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, WCN3998, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WSA8810, WSA8815, WSA8830, WSA8835

Problem Types

Type	CWE ID	Description
text	N/A	Memory leak in Data Modem

Type: text

CWE ID: N/A

Description: Memory leak in Data Modem

Metrics

Version	Base score	Base severity	Vector
3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:14 Jun, 2022 | 10:15

Updated At:19 Apr, 2023 | 17:10

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 7.8

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:N/I:N/A:C

CPE Matches

cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*

>>aqt1000_firmware>>-

cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

>>aqt1000>>-

cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*

>>ar8035_firmware>>-

cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

>>ar8035>>-

cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*

>>csrb31024_firmware>>-

cpe:2.3:h:qualcomm:csrb31024:-:*:*:*:*:*:*:*

>>csrb31024>>-

cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*

>>qca6174a_firmware>>-

cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*

>>qca6174a>>-

cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*

>>qca6390_firmware>>-

cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*

>>qca6390>>-

cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*

>>qca6391_firmware>>-

cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*

>>qca6391>>-

cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*

>>qca6420_firmware>>-

cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*

>>qca6420>>-

cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*

>>qca6421_firmware>>-

cpe:2.3:h:qualcomm:qca6421:-:*:*:*:*:*:*:*

>>qca6421>>-

cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*

>>qca6426_firmware>>-

cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:*

>>qca6426>>-

cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*

>>qca6430_firmware>>-

cpe:2.3:h:qualcomm:qca6430:-:*:*:*:*:*:*:*

>>qca6430>>-

cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*

>>qca6431_firmware>>-

cpe:2.3:h:qualcomm:qca6431:-:*:*:*:*:*:*:*

>>qca6431>>-

cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*

>>qca6436_firmware>>-

cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:*

>>qca6436>>-

cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*

>>qca6564au_firmware>>-

cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*

>>qca6564au>>-

cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*

>>qca6574a_firmware>>-

cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*

>>qca6574a>>-

cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*

>>qca6574au_firmware>>-

cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

>>qca6574au>>-

cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*

>>qca6595au_firmware>>-

cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

>>qca6595au>>-

cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*

>>qca6696_firmware>>-

cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*

>>qca6696>>-

cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*

>>qca8081_firmware>>-

cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

>>qca8081>>-

cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*

>>qca8337_firmware>>-

cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*

>>qca8337>>-

cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*

>>qca9377_firmware>>-

cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*

>>qca9377>>-

cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*

>>qcm2290_firmware>>-

cpe:2.3:h:qualcomm:qcm2290:-:*:*:*:*:*:*:*

>>qcm2290>>-

cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*

>>qcm4290_firmware>>-

cpe:2.3:h:qualcomm:qcm4290:-:*:*:*:*:*:*:*

>>qcm4290>>-

cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*

>>qcm6125_firmware>>-

cpe:2.3:h:qualcomm:qcm6125:-:*:*:*:*:*:*:*

>>qcm6125>>-

cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*

>>qcm6490_firmware>>-

cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*

>>qcm6490>>-

cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*

>>qcs2290_firmware>>-

cpe:2.3:h:qualcomm:qcs2290:-:*:*:*:*:*:*:*

>>qcs2290>>-

Weaknesses

CWE ID	Type	Source
CWE-401	Primary	nvd@nist.gov

CWE ID: CWE-401

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

515Records found

CVE-2021-1954

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.39% / 60.45%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:31

Updated-03 Aug, 2024 | 16:25

Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Product-sa6150p_firmware ipq4028_firmware ar9380 ipq8173_firmware qca9561_firmware qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 sd_675_firmware qcs6125_firmware wcn3998 wcn3950 ipq8076a qcn6024_firmware sd720g sm7315_firmware qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware qca6420 apq8053_firmware ipq8070_firmware ipq8065 ipq8078a_firmware ipq5028 qca7500 ipq4029_firmware ipq8072_firmware qcs6125 sa8155_firmware ipq6010 ipq8068 qca6430 sd765g qca6436 wcn6851 sa6155p qca9888_firmware qcn6122 ipq8068_firmware wcd9341 qca6696_firmware sd870_firmware qcn5154_firmware wcn3910_firmware sa8150p wsa8830_firmware qca9992_firmware sd855_firmware sd865_5g_firmware wcn3988 sa8195p_firmware qca9898 qcn5022_firmware wcn6750_firmware ipq4028 ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware ipq8076a_firmware ipq8078 sdx55m_firmware ipq8173 wcn6856_firmware ipq4029 qcn5164 qca9558 qca6574 csr8811_firmware wcd9380 qcn5054_firmware ipq4019_firmware qcn5024 sdx50m_firmware qca8072_firmware qca9985 qca6430_firmware qcn5052_firmware qcn9012_firmware wcn3980 ipq6018_firmware wsa8815 wcn6850 pmp8074_firmware wcn3910 qca6426_firmware qca9984 ipq6028 ipq8064 qcn9024 pmp8074 wcn3980_firmware sd730 sdx55m ipq8064_firmware wcn6740_firmware msm8953 sd678_firmware ipq8078_firmware qcn5054 wcn6851_firmware ipq8070 qcn5502 qca9994 qca9887_firmware qca9980 qcn9024_firmware ipq8174_firmware qca9880 qcm4290_firmware sd870 ipq6018 sa6145p qca9886_firmware sa8145p qca6391_firmware qca4024 sd780g_firmware wcd9370_firmware sdx55 apq8053 qcn5021_firmware sa8155p sd675 qca9531_firmware qcn5024_firmware wcn3991_firmware qcn5500 wsa8830 sd678 qca9561 qcn9070 sa8145p_firmware qca9563_firmware qcn9072 qca9880_firmware qca9992 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6426 wcn3990_firmware qcn9000_firmware qca9984_firmware ipq5018 wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware qca9563 ipq8074a qcn5124_firmware qca9982 sa8155 wcn3680b_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3615 sm7250p_firmware qca6436_firmware ipq5010 sd778g sa6155p_firmware ipq8174 qca9990 sdxr2_5g qcn5052 wcn3988_firmware qcn9074 sa6145p_firmware sm6250 sd778g_firmware sa8195p wsa8810_firmware sd765_firmware wcd9326 qca8081 qca9982_firmware ipq8071a qcn6023 ipq8071a_firmware qcs4290_firmware wcd9385 qca6390 csr8811 qca9898_firmware aqt1000 ipq4019 wcd9375 sm6250_firmware msm8953_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qcm6125_firmware qca8072 wcn3990 qcn9000 sd_675 sd780g sd865_5g ar9380_firmware qcn9012 qca9558_firmware qca9896_firmware qcn6122_firmware ipq8065_firmware wsa8835 sd665_firmware sd888_5g qcn5154 qca8075_firmware ipq4018 qca6574a qca9889 sm7325p ipq8074 qca9888 qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware qca6574_firmware qca9886 qcn5502_firmware sd855 sm7325p_firmware sd665 ipq8076 sd765 qca9887 qca6574a_firmware qcn5021 qcn5152 sd768g_firmware sm7315 qca6391 aqt1000_firmware qcn9100 qcm4290 sdx50m qcn9070_firmware ipq6028_firmware ipq8072a_firmware qca9531 ipq8074_firmware qca6574au qca9889_firmware sa8155p_firmware qcn5122 wcd9341_firmware qcm6125 wsa8810 qcn5500_firmware wcn6856 qcn5022 wcn3680b ipq6010_firmware sd768g wcn6740 qca6696 sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9072_firmware sm7250p sd720g_firmware ipq8071_firmware qcn9074_firmware qca9896 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

CVE-2021-1936

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.25% / 47.89%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 16:25

Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Product-wcn3991_firmware wsa8830 sd678 sa6150p_firmware sm6250p_firmware sa8145p_firmware qcs610 sm7250 qcs2290_firmware sm7250_firmware qca6431_firmware sd_636 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 qca6335 msm8917 sd690_5g sd730_firmware sd_455_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qca6564 qcs6125_firmware qca6426 sd632 wcn3998 sdw2500_firmware wcd9371_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcn3615_firmware wcn3660b sd450_firmware sd662 sd460_firmware sa8155 qca6320_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3615 msm8909w wcn3998_firmware apq8009w_firmware qca6420 qca6436_firmware apq8053_firmware wcn3610_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 pm8937 qcs6490 sd429 sdxr2_5g qcs6125 sa8155_firmware sd662_firmware sdm630 wcn3988_firmware qca6430 sa6145p_firmware sd205 qca6421 sd429_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 wcn6851 sa6155p qcs603_firmware msm8937 qcs4290_firmware wcd9385 wcn3660_firmware pm8937_firmware qca6431 qca6696_firmware qcs6490_firmware wcd9371 sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 apq8064au sa8150p sm6250_firmware wcn3910_firmware msm8953_firmware wsa8830_firmware sda429w msm8917_firmware sd210 sd855_firmware sd865_5g_firmware wcn3620_firmware qcm6490 sd888_5g_firmware wcn3988 wcn3620 wcn6850_firmware wsa8835_firmware sa8195p_firmware apq8017 qca6564a wcn6750_firmware sd450 wcn3610 qcm6125_firmware qcm2290_firmware wcn3991 sda429w_firmware wcd9380_firmware sd_675 sdm429w msm8996au_firmware sd780g sd865_5g qca6595 qca6564au sdx55m_firmware wcn6856_firmware sd888 msm8909w_firmware qca6574 msm8996au sd632_firmware sdm429w_firmware sd665_firmware wsa8835 wcd9380 sd888_5g sm6250p qualcomm215 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6310_firmware sm7325 qca6430_firmware wcn6750 sd439_firmware qca6335_firmware qca6574_firmware qcs605 sd855 sm4125_firmware wcn6850 sd665 wcn3910 qca6320 msm8937_firmware sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware sd460 qca6391 sd730 sdx55m sdxr1_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware apq8064au_firmware qcm4290 qcm6490_firmware sdx50m wcn3680_firmware sd480_firmware qcs603 wcn6851_firmware sd_455 qca6574au sa8155p_firmware sd_636_firmware sd205_firmware qca6564a_firmware apq8009w qcm6125 qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware wcn6856 sa6145p wcn3680b qca6564_firmware sdxr1 sd768g apq8096au qca6595_firmware sa8145p wcn6740 qca6696 sdm630_firmware qca6391_firmware sd845_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sdw2500 apq8053 apq8096au_firmware sa8155p sd675 sd845 sdx55 sd439 sd720g_firmware wcn3660 qcm2290 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2024-33020

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.31% / 54.42%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-20 Nov, 2024 | 19:24

Buffer Over-read in WLAN HOST

Transient DOS while processing TID-to-link mapping IE elements.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-40538

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.19% / 41.04%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:39

Updated-03 Aug, 2024 | 12:21

Reachable assertion in Modem

Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.

CWE ID-CWE-617

Reachable Assertion

CVE-2024-33063

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.29% / 52.84%

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:26

Integer Overflow or Wraparound in WLAN Host Communication

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2022-40536

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.14% / 34.25%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:39

Updated-03 Aug, 2024 | 12:21

Improper authentication in Modem

Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.

CWE ID-CWE-285

Improper Authorization

CWE ID-CWE-287

Improper Authentication

CVE-2022-33251

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.19% / 41.04%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 08:01

Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem because of invalid network configuration.

Product-wcn3991_firmware wsa8830 sm7325-ae_firmware 315_5g_iot_modem_firmware qca8337 wcn785x-5 qca6431_firmware wcd9360_firmware sm7250-ac_firmware qca6595au_firmware qca6390_firmware snapdragon_x70_modem-rf_system sm8350 wcd9370 qca6426 wcn685x-1 sm7350-ab_firmware sm8450 sm4375 wcn3998 sm8250-ab wcd9385_firmware qcn6024_firmware sm6375_firmware sm7325-af sm7325-ae snapdragon_x55_5g_modem-rf_system qca6574au_firmware sdx55_firmware qca6595au wcn3998_firmware qca8081_firmware sm7325-af_firmware sm7250p_firmware wcd9375_firmware wcd9360 qca6436_firmware sm4350-ac snapdragon_auto_5g_modem-rf_firmware snapdragon_x65_5g_modem-rf_system_firmware snapdragon_x70_modem-rf_system_firmware qcs6490 qca6698aq qcs8550_firmware sm8250_firmware sm7250-ab_firmware sm8250-ac wcn3988_firmware 315_5g_iot_modem qca6421 sm7250-aa wsa8810_firmware sm4375_firmware sm8450_firmware qca6436 qca8081 qca6698aq_firmware wcn685x-1_firmware wcd9385 sm8150_firmware sxr2130_firmware wcd9341 qca6431 qca6696_firmware qcs6490_firmware qca6390 ar8035 sm4350_firmware wcd9375 sm8250-ac_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware sm7225_firmware snapdragon_7c\+_gen_3_compute_firmware qcm6490 sm8150 wcn3988 wsa8815_firmware wsa8835_firmware sm7350-ab sm8475 wcn6750_firmware wcn785x-1 sm6375 wcn3991 qca8337_firmware wcd9380_firmware sd865_5g sm8350-ac_firmware sm8150-ac wsa8835 snapdragon_7c\+_gen_3_compute snapdragon_auto_5g_modem-rf wcd9380 sxr2130 qca6574a wcn685x-5_firmware sm7325p sm7325 wcn6750 sm7225 sm7250-ab sd855 wsa8815 sm7325p_firmware sdx57m_firmware snapdragon_xr2_5g_platform_firmware qca6426_firmware qca6574a_firmware qcn9024 wcn785x-5_firmware snapdragon_x55_5g_modem-rf_system_firmware sm8250-ab_firmware qca6391 qca6421_firmware sm6350 sm8475_firmware wcn6740_firmware snapdragon_xr2_5g_platform snapdragon_x65_5g_modem-rf_system qcm6490_firmware sm8350_firmware wcn685x-5 sm6350_firmware wcn785x-1_firmware qca6574au qcn9024_firmware sdx57m wcd9341_firmware wsa8810 sm7250-aa_firmware sm7250-ac sm8150-ac_firmware sm8350-ac wcn6740 qca6696 qca6391_firmware qcs8550 sm4350 wcd9370_firmware sm4350-ac_firmware sdx55 sm8250 qcn6024 sm7250p ar8035_firmware sm7325_firmware Snapdragon

CWE ID-CWE-617

Reachable Assertion

CVE-2022-33270

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.28% / 51.37%

7 Day CHG+0.06%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Time-of-check time-of-use race condition in Modem

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.

Product-sm6375 wsa8830 sm7325-ae_firmware qca8337_firmware wcd9380_firmware qca8337 wcn785x-5 sm8350-ac_firmware wsa8835 snapdragon_auto_5g_modem-rf wcd9380 qca6595au_firmware snapdragon_x70_modem-rf_system sm8350 wcd9370 wcn685x-5_firmware sm7325p wcn685x-1 sm7325 sm8450 wcn6750 sm4375 wcn3998 wcd9385_firmware qcn6024_firmware sm6375_firmware wsa8815 sm7325p_firmware sdx57m_firmware sm7325-af sm7325-ae qcn9024 qca6595au wcn3998_firmware qca8081_firmware sm7325-af_firmware wcd9375_firmware wcn785x-5_firmware qca6391 sm4350-ac sd778g snapdragon_auto_5g_modem-rf_firmware snapdragon_x65_5g_modem-rf_system_firmware snapdragon_x70_modem-rf_system_firmware snapdragon_x65_5g_modem-rf_system qcs6490 qcm6490_firmware qca6698aq sm8350_firmware wcn685x-5 wcn3988_firmware wcn785x-1_firmware sd778g_firmware qcn9024_firmware wsa8810_firmware sdx57m sm4375_firmware sm8450_firmware wsa8810 qca8081 qca6698aq_firmware sm8350-ac wcn685x-1_firmware wcd9385 qca6696_firmware qcs6490_firmware qca6696 qca6391_firmware ar8035 sm4350_firmware wcd9375 sm4350 wcd9370_firmware sm4350-ac_firmware wsa8830_firmware qcn6024 qcm6490 wcn3988 wsa8815_firmware wsa8835_firmware wcn6750_firmware ar8035_firmware wcn785x-1 sm7325_firmware Snapdragon

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CVE-2022-33239

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.34% / 56.45%

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-wcd9380_firmware mdm9310 qcn9072_firmware msm8996au wcn3615_firmware qca6595au_firmware sd730 qca1062 qcn9000 apq8009 qcn7606_firmware ipq6028 qca6696 qca6421 mdm9607 qcn9070 wcn7850 qcn5122 qsm8250_firmware qca6564au wcn3660b qca6426_firmware qca4531_firmware sd720g ipq8078a sa6150p sd460 msm8996au_firmware qca9889_firmware qcn5124 wsa8830 wsa8815 qcn9003 ipq9008 qca6430 sd855 ipq9008_firmware qcs6490_firmware sd_8cx_gen3_firmware wcd9340 sdx55_firmware sd_8cx_firmware sxr2150p_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware qca8386_firmware sc8180x\+sdx55_firmware qcn5022_firmware sa4155p_firmware qca8386 mdm9650 qca8072 sd765g_firmware qca6574a qca8084_firmware sd865_5g_firmware apq8017_firmware qcm6125_firmware wcn6750 sa8295p_firmware sm7325p qcn5024 mdm8215 sd695_firmware qcc5100 sd_675 qcs405 qcn5024_firmware qca6595 qca6431_firmware csra6640 sd480_firmware mdm9215_firmware qca6430_firmware qca8081 sm7315_firmware sm7325p_firmware qca6584au sd870 ipq6018 qca9367 ipq5018_firmware qca6390_firmware qcn9024_firmware sc8180x\+sdx55 qcn9011_firmware sa6155_firmware wcn6855 qca6584_firmware qcx315_firmware ipq8070a ipq8072a wcn3910 ipq8070a_firmware sd870_firmware qcm6490_firmware sm6250 ipq8078_firmware qca6431 qca6595au wcd9370 sd888_firmware qcs4290_firmware wcn3980 qcn5152 qca2066 sm4125_firmware sm7315 qcn9022 sd765_firmware sd720g_firmware sd765g qca9888_firmware sdx55m qam8295p wcn6850_firmware qcn9002_firmware qcn9274 sm6250p wsa8810_firmware wsa8815_firmware wcn3991_firmware sa8150p wcn6740 ipq8078 qca6436 ipq8076a ipq8071a qca4024 qcn7605_firmware sa8155p wsa8810 qca6694_firmware qca2062_firmware qca2066_firmware sw5100p_firmware aqt1000_firmware qcn9012 wsa8835_firmware ipq8076 wcd9335_firmware sm7250p_firmware qcn5154_firmware apq8009_firmware qca6391 qcn9024 qcn5052_firmware csra6620 wcn3998_firmware mdm9310_firmware wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware ipq8074a qcn6023_firmware qcx315 qcc5100_firmware qca6554a_firmware qca8082_firmware qcm6125 ipq8174 qca4020_firmware qcn6122 sdx12 sd660 csrb31024_firmware sa4150p_firmware ipq8070 qcs610 qca6391_firmware wcd9326_firmware qcn9012_firmware sm7250p sa8155p_firmware csra6620_firmware wcn3610 sa6145p wcn3910_firmware qrb5165_firmware apq8017 qca8085_firmware wcd9375 sd750g_firmware qca6696_firmware ipq8076_firmware qca2064 sxr2150p sd865_5g mdm9215 qca2062 qca9377 sm6250p_firmware qcn9003_firmware wcn3990_firmware wcn3950_firmware wcn3988 sd778g wcd9371_firmware wcn3615 qca8085 ipq8071a_firmware sd750g sd768g_firmware mdm9615_firmware wcn7851 qcn9002 mdm9640_firmware qca6436_firmware sa8195p_firmware qca4020 qca9367_firmware ipq8074a_firmware qcn5021_firmware wcd9341_firmware ipq6000_firmware qcn6102 wcd9340_firmware qca6175a_firmware qca8082 sd_675_firmware qca6174a_firmware qca6564a_firmware qcn5021 sd855_firmware sd662_firmware qcn5054_firmware qca9889 sdx50m wcd9371 mdm9650_firmware qcs405_firmware qcn6024_firmware qcs6490 ipq5018 sdx55 sd460_firmware mdm9628 wcn3610_firmware sa6155 qcm4290_firmware qca1064 wcn3660b_firmware sm4375 sd820 sd665_firmware sdx20m_firmware wcd9360_firmware qrb5165m_firmware sa6145p_firmware qsm8350_firmware ipq5028_firmware sd768g wcn6740_firmware wcn6856 sm4125 qca6390 sdx50m_firmware qca6175a sa6155p ipq5010_firmware sa8150p_firmware sd480 wcd9330 wcn7851_firmware sa8145p_firmware sw5100 mdm8215_firmware qca4024_firmware wcn6850 csr8811 sa8145p sa415m wcn3950 ipq6018_firmware qca6584au_firmware qcn9100_firmware qcn5122_firmware qcn7605 qcm6490 qcn6024 qca6174a wcd9335 wcn3999 ipq8078a_firmware sd7c_firmware qca6595_firmware qrb5165n ipq6010 qca6421_firmware qrb5165 qca6574au_firmware sd662 qrb5165n_firmware mdm9250_firmware qca2065_firmware qam8295p_firmware qca6564_firmware sa8295p qcs610_firmware qcn9074 qca6174 qcm2290_firmware qcn5054 qcn9274_firmware wcd9380 ar8031 qcm4290 qcn6102_firmware qcn5052 sd660_firmware sd730_firmware mdm9628_firmware qca2064_firmware sd695 sd_8cx_gen3 qca6174_firmware wcd9375_firmware sd888 sa6150p_firmware ar8035_firmware ipq8070_firmware wcn6856_firmware qcn6132_firmware aqt1000 qcn5152_firmware qcn6100_firmware sdx12_firmware ar8035 qcn6112 wcn6855_firmware qca8072_firmware qsm8250 qca6420 wcd9360 sd780g_firmware qca4531 sdx65_firmware qcm2290 mdm9250 qcn9011 qcn5124_firmware sa515m sa515m_firmware qcn5164_firmware mdm9607_firmware wcn3990 ipq6028_firmware qcn6023 sd690_5g mdm9645_firmware qca8081_firmware qca1062_firmware wsa8835 wcn3998 ar8031_firmware csr8811_firmware qca8337_firmware qcn5164 qca8075_firmware qcs2290 qrb5165m qcn6122_firmware sd820_firmware qca1064_firmware sd7c ipq8072a_firmware sd678 wcd9385 qca6574au wcn7850_firmware qcn6112_firmware sdx65 wcd9385_firmware mdm9640 apq8096au wcn6750_firmware qcs410_firmware qcn9000_firmware ipq8173_firmware sd680 qcn9001_firmware sd888_5g qcn9070_firmware pmp8074 qca8075 pmp8074_firmware sd678_firmware qca9379 wcn3999_firmware qcs6125 sm4375_firmware ipq6010_firmware qsm8350 qca6574 wcn3991 sd_8cx csra6640_firmware qca6574_firmware sa415m_firmware ipq8076a_firmware qca6564a sdx20m sa8195p sd675_firmware qca6574a_firmware qca9888 qca6694 sd665 sa8155_firmware wsa8830_firmware sd888_5g_firmware ipq8174_firmware qca8337 sd_8_gen1_5g_firmware sm6250_firmware qcn6100 sdxr2_5g qcn6132 wcd9341 wcn3980_firmware qcs2290_firmware wcn6851_firmware wcd9326 sd680_firmware qca8084 qca9379_firmware sa6155p_firmware qcn9074_firmware sa4150p qcn5154 qca2065 qca9377_firmware mdm9645 apq8096au_firmware sw5100_firmware ipq8173 qcn9001 qca6584 qcn9072 sd780g qca6564au_firmware csrb31024 qca6426 sdx55m_firmware sd690_5g_firmware qcs6125_firmware qcn9100 qcn5022 sm8475 sa8155 ipq6000 sd765 qca6564 wcd9330_firmware ipq5010 wcn3988_firmware qcn9022_firmware qcs4290 qca6554a ipq5028 sa4155p qcn7606 sw5100p mdm9615 sd_8cx_gen2 qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2026-21381

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.6||HIGH

EPSS-0.03% / 10.00%

7 Day CHG~0.00%

Published-06 Apr, 2026 | 15:33

Updated-08 Apr, 2026 | 20:58

Buffer Over-read in WLAN Firmware

Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.

Product-qxm1095 sm7675p wsa8845h_firmware sxr2230p_firmware qca8337_firmware milos x2000092 netrani sm7635p_firmware qca6777aq_firmware pandeiro qca6787aq_firmware sc8380xp_firmware snapdragon_6_gen_1_mobile_platform_firmware qca6391_firmware qfw7114 sm8635_firmware xrv9209 snapdragon_ar1_gen_1_platform snapdragon_ar1\+_gen_1_platform snapdragon_x72_5g_modem-rf_system sc8380xp qln1083bd qpa1083bd_firmware wcn3988 fastconnect_6200 qcn6224_firmware wcn7860_firmware qcc2073_firmware x2000094_firmware wcd9385_firmware qca8081 snapdragon_6_gen_4_mobile_platform_firmware x2000092_firmware xg101039_firmware fastconnect_7800 sm6650p_firmware sm6650p wsa8832_firmware sm8750p_firmware wcd9375 sxr2350p g2_gen_1_firmware qpa1086bd_firmware sxr2250p wcd9370_firmware qxm1083 wcd9390_firmware fwa_gen_3_ultra qca8081_firmware wcd9395_firmware fastconnect_7800_firmware x2000090_firmware qcc710_firmware qfw7114_firmware wsa8845 milos_firmware wcd9380 cologne sm7635p snapdragon_8_elite_gen_5_firmware sar2130p snapdragon_ar1\+_gen_1_platform_firmware snapdragon_8_elite_firmware wcn6755_firmware snapdragon_x75_5g_modem-rf_system orne qca6797aq fastconnect_6900_firmware qxm1083_firmware snapdragon_7s_gen_3_mobile_platform_firmware cologne_firmware wcd9370 wcd9390 sm8635p_firmware wcn7861 xrv7209 qxm1086_firmware wcn7860 x2000077 wcd9375_firmware qpa1086bd sxr2250p_firmware x2000077_firmware x2000094 qca6787aq sar1165p ar8035_firmware wcd9378c qcc2076_firmware qcn9012_firmware fastconnect_6200_firmware wsa8835_firmware qca6698au x2000090 wcn6755 wcd9340 sar1165p_firmware qmp1000_firmware wcd9385 wsa8815 snapdragon_8_elite_gen_5 wsa8810 xg101002 wsa8845h qxm1095_firmware orne_firmware qpa1083bd sm7435_firmware snapdragon_8_gen_3_mobile_platform_firmware sm8750p wcn6450_firmware wcn6650_firmware sm7675_firmware snapdragon_7s_gen_3_mobile_platform x2000086 sm7435 xg101002_firmware qln1086bd sm8635p wcn7880 wsa8840 qfw7124_firmware qcn9012 qxm1096_firmware qcn9011 fastconnect_6900 xg101032 qca8337 qca6698au_firmware x2000086_firmware fwa_gen_3_ultra_firmware qcn9011_firmware wsa8815_firmware snapdragon_x72_5g_modem-rf_system_firmware palawan25_firmware wsa8830_firmware xrv9209_firmware snapdragon_ar1_gen_1_platform_firmware snapdragon_8_elite pandeiro_firmware qca6391 sxr2230p qln1083bd_firmware ar8035 qln1086bd_firmware qxm1093 snapdragon_6_gen_3_mobile_platform_firmware snapdragon_6_gen_3_mobile_platform snapdragon_8_gen_3_mobile_platform wcn6450 wcn3988_firmware qxm1086 wcd9380_firmware sxr2330p sar2130p_firmware wsa8840_firmware qcn6224 wsa8830 wcn7861_firmware snapdragon_6_gen_1_mobile_platform netrani_firmware qcc2073 sm8650q_firmware sm7675p_firmware snapdragon_6_gen_4_mobile_platform qxm1094_firmware qcc2076 qcs8550_firmware wcd9378c_firmware qfw7124 snapdragon_x75_5g_modem-rf_system_firmware wsa8835 palawan25 xrv7209_firmware wcn7881 g2_gen_1 qxm1094 sxr2330p_firmware qca6797aq_firmware sxr2350p_firmware wcn6650 qxm1093_firmware wcd9340_firmware wcn7881_firmware wsa8845_firmware xg101032_firmware wcd9378_firmware wcn7880_firmware wsa8832 xg101039 fastconnect_6700 qmp1000 sm8650q qcc710 sm8635 fastconnect_6700_firmware sm7675 wcd9378 qxm1096 wcd9395 qcn6274_firmware wsa8810_firmware qcs8550 qcn6274 qca6777aq Snapdragon

CWE ID-CWE-126

Buffer Over-read

CVE-2024-23358

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.42%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-03 Oct, 2025 | 18:37

Buffer Over-read in Multi Mode Call Processor

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem.

CWE ID-CWE-126

Buffer Over-read

CVE-2022-33290

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.26% / 49.44%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 14:56

Null pointer dereference in Bluetooth HOST

Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.

Product-qca9377_firmware mdm9150_firmware mdm9640_firmware msm8996au_firmware qca6595 qca6564au csrb31024 mdm9628_firmware wcd9360_firmware mdm9650 csra6620 qca6574 msm8996au mdm9250 qca6595au_firmware csra6620_firmware qca6574a mdm9206 csra6640_firmware qca6174a qca6584au_firmware qca6564a sd626 qca9377 sa415m wcn3998 wcd9335_firmware wcn3980 qam8295p wcd9326_firmware mdm9628 sa515m mdm9206_firmware qca6574_firmware wcn3660b wsa8815 qca6584_firmware qam8295p_firmware mdm9650_firmware qca6175a wcn3660b_firmware qca6574a_firmware qca6584 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcn3980_firmware wcd9360 sdx20m sa8295p qca6564au_firmware qca6584au qca9367_firmware sa515m_firmware ar8031_firmware csrb31024_firmware qca9367 sdx20 mdm9607_firmware sa415m_firmware qcs405 qca6574au qcn9074 mdm9607 qca6564a_firmware apq8017_firmware sd626_firmware sdx20m_firmware wcd9326 wcd9335 mdm9150 wcn3680b qca6174a_firmware mdm9250_firmware apq8096au qca6696_firmware ar8031 qca6595_firmware qcs405_firmware qca6696 sdx55 apq8096au_firmware csra6640 sdx20_firmware wsa8815_firmware apq8017 qcn9074_firmware sa8295p_firmware qca6175a_firmware mdm9640 Snapdragon

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2022-33309

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.46% / 64.49%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 08:01

Buiffer over-read in WLAN Firmware.

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.

Product-qcn5024_firmware wsa8830 qcn9070 sxr2230p_firmware ipq8173_firmware sdx65 qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 ipq8078a ipq5028_firmware ipq6000 ssg2115p qcn5152_firmware qcn9000_firmware ipq5018 wcd9385_firmware ipq8076a qca8386_firmware qcn6024_firmware sd_8_gen1_5g_firmware qca8084_firmware ipq8074a qcn5124_firmware qca8082_firmware wcn7850 qcn5164_firmware qcn5122_firmware qca8081_firmware qcn6023_firmware ipq5010 ipq8078a_firmware qcn9274 ipq8174 wcn7851 ipq5028 qcn5052 ipq6010 qcn9074 qca8085 sdx65m qcn6132 qca8081 wcn7851_firmware ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware wcd9385 qca8085_firmware qca9888_firmware qcn6122 ipq9008_firmware qcn5154_firmware csr8811 qcn9100_firmware wsa8830_firmware ipq5010_firmware ipq8074a_firmware wsa8835_firmware wcn7850_firmware sm8475 qcn5022_firmware ipq5018_firmware wcd9380_firmware ssg2125p qcn9000 ipq8072a ipq8076a_firmware ipq8078 qca8084 ipq8173 wcn6856_firmware ipq9008 qcn5164 qcn6122_firmware wsa8835 sxr1230p_firmware csr8811_firmware wcd9380 qcn5154 qca8075_firmware ssg2125p_firmware qcn5024 wcn6855_firmware qca9889 qcn6132_firmware sxr1230p qca9888 qcn5052_firmware qcn9274_firmware ipq8070a_firmware ipq6018_firmware ipq8076_firmware sxr2230p ipq8076 qcn5152 ipq6028 qcn9024 ipq9574_firmware qcn9100 sdx65_firmware ipq8078_firmware wsa8832_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qca9889_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware wsa8832 wcn6855 wcn6856 ipq6018 qcn5022 ipq6010_firmware qca4024 qca8075 qcn9022_firmware qcn6024 qcn9022 ipq8070a qcn9072_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-33286

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.36% / 58.18%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 14:57

Buffer over-read in WLAN

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware ipq4028_firmware qca1023 qca8337 ar9380 ipq8173_firmware qcn5124 mdm9645 wcn3950_firmware qca6595au_firmware sa6155 mdm8215 sd_455_firmware apq8076 qcs6125_firmware sa415m sm4375 wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware wcn3660b qsm8350_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca8081_firmware wcn3998_firmware qca6420 qcn9002 qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware sd_8cx_gen2 ipq8072_firmware qca0000 sa8155_firmware ipq8068 qca6430 wcd9340 sd765g sd680 wcn7851_firmware mdm9250_firmware qca9888_firmware qcn6122 qca6696_firmware wcd9371 sd870_firmware qca1062 qcn5154_firmware mdm8215_firmware sd_8cx sa8150p qca9992_firmware sd660 sd865_5g_firmware sd712 sd660_firmware sm8475 qcn5022_firmware qcn7606_firmware wcn6750_firmware qca6428_firmware qca9985_firmware wcn3991 ipq4018_firmware qca9980_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 sdx55m_firmware msm8976_firmware qca6574 sd670_firmware csr8811_firmware wcd9380 qcs410 qcn5024 sd690_5g_firmware qca9379_firmware sdx24_firmware qca9985 qcn9012_firmware qcn9274_firmware ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qcn6112 qca6584_firmware mdm9215_firmware sd695 ipq6028 ipq8064 sd835 pmp8074 ipq9574_firmware wcn3980_firmware sd730 qcc5100_firmware sa8295p qca2062_firmware wcn6740_firmware sd678_firmware apq8064au_firmware ipq8078_firmware qcn5054 qcs603 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware qcm4290_firmware wcn6855 qcn7605_firmware sw5100p_firmware qcs610_firmware sa6145p qca9886_firmware ar8031 qca1023_firmware sdm630_firmware sd820_firmware qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware csra6640 qca9379 sa4155p sxr2150p qcn7606 qsm8250_firmware wsa8830 qca1062_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qca8082 qca9992 qcs4290 mdm9250 qca6420_firmware apq8009_firmware qca2064_firmware sd690_5g mdm9310_firmware sd675_firmware ipq8072 qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9984_firmware qca9377 wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware ipq8074a qcn6102_firmware qcn9011_firmware sa8155 qca6584 qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware sm7250p_firmware wcn3610_firmware qrb5165n qca6584au sd778g ipq8174 wcn7851 qcn5052 qca9367 sdm630 mdm9607_firmware qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 qca6421 qca8085 sd778g_firmware sa8195p qca6694 sm4375_firmware wcd9326 wcd9335 qcn6023 qcs4290_firmware qca8085_firmware qcs6490_firmware qca6390 qca9898_firmware sd750g_firmware aqt1000 msm8976 wcd9375 sm6250_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware apq8017 qcx315 qcm6125_firmware sd780g sd865_5g qca6595 qcc5100 ipq8065_firmware qcx315_firmware sd665_firmware qcn5154 qca8075_firmware sc8180x mdm9206 wcn6855_firmware qcn6132_firmware qcn9003_firmware qca9888 qca6310_firmware ipq8070a_firmware mdm9615 qca6574_firmware qca9886 sm7325p_firmware sd665 qca6175a sd765 qca6574a_firmware qrb5165m sd850_firmware sm7315 apq8009 mdm9310 qcn6102 csrb31024_firmware qcm6490_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware sc8180x_firmware qca9889_firmware sd710 mdm9607 qcn5122 mdm9645_firmware sdx20m_firmware qcn5022 qca6564_firmware sd768g qca1064_firmware wcn6740 qca8075 apq8096au_firmware qcn6024 qcn9022 sd845 mdm9615_firmware qcn9002_firmware ipq6000_firmware sdx12 qcs410_firmware qca6175a_firmware sd_8cx_gen3_firmware qca2066 sa6150p_firmware qcs610 qca6431_firmware wcd9360_firmware sdx65 qca4024_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6335 qca2062 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qca6554a_firmware qam8295p sd_8cx_gen2_firmware ipq8076a mdm9628 qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware sd710_firmware qca4020 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware sa6155_firmware sdx12_firmware wcd9360 sdx20m qca6438_firmware sd680_firmware wcn3999 qrb5165_firmware ipq5028 qrb5165m_firmware ipq4029_firmware qcs6125 sa4155p_firmware ipq6010 sd662_firmware qcs405 qcn6132 sw5100 qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcd9341 ipq8068_firmware qca2066_firmware qca6431 sd750g ipq9008_firmware wcn3910_firmware sxr2150p_firmware wsa8830_firmware sd855_firmware wcn3988 qca6438 wcn7850_firmware sa8195p_firmware qca9898 sa8295p_firmware ipq4028 wcn3610 mdm9640 ipq5018_firmware qca8337_firmware wcd9380_firmware ipq8072a sw5100p msm8996au_firmware wcd9330 ipq8076a_firmware qca6564au wcn6856_firmware ipq9008 qcn5164 qcn5054_firmware sdx50m_firmware qca8072_firmware qca6174 qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 sd7c wcn3910 qca6320 mdm9650_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware qca9984 qcn9024 wcd9330_firmware sdx55m ipq8064_firmware qca6421_firmware sd821_firmware ar8031_firmware qrb5165 wcn6851_firmware ipq8070 sd_636_firmware qca6564a_firmware sd480 sd870 qsm8250 ipq6018 sd695_firmware sdxr1 apq8096au qca6595_firmware qcs405_firmware sa8145p qca2064 sd780g_firmware sd888_firmware sa8155p sd675 ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware sd678 qcn9070 sa8145p_firmware qcs2290_firmware sd7c_firmware csra6620 qcn9072 qca8386 sd765g_firmware ipq8069_firmware qca6390_firmware ipq6000 qca6174_firmware sd730_firmware wcd9370 qcn5152_firmware qca0000_firmware qca6584au_firmware apq8076_firmware qcn9000_firmware ipq5018 sd_8cx_firmware qcn7605 qca2065 sd662 qcn5124_firmware qam8295p_firmware qca1064 qcn6100_firmware qca8082_firmware qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware ipq5010 qca6564au_firmware sa6155p_firmware qca6310 qcn9274 qcn9001 qca9990 qcs6490 sa515m_firmware sdxr2_5g sd821 sa6145p_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware sd765_firmware qca8081 ipq8071a qca6174a_firmware ipq8071a_firmware wcd9385 qca2065_firmware sd_8cx_gen3 ar8035 csr8811 apq8064au qca6694_firmware qcn9100_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware qca6564a sa4150p qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 qca6554a ar9380_firmware sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 msm8996au sd888_5g sm6250p ipq4018 qca6574a qca9889 qca6174a sm7325p ipq8074 qca9994_firmware wcn6750 qcn9003 ipq8076_firmware sa515m sd855 sm4125_firmware ipq8076 qcn5021 ipq8069 qcn5152 sd768g_firmware sd460 qca6391 sdxr1_firmware aqt1000_firmware qcn9100 sdx65_firmware qcm4290 sdx50m sdx20 mdm9215 qcn9011 sd_455 ipq8074_firmware qca6574au sa8155p_firmware ipq9574 wcd9341_firmware qcm6125 wsa8810 wcn6856 wcn3680b sd835_firmware ipq6010_firmware qca6696 sd845_firmware sa6150p qcn9022_firmware qca9990_firmware ipq8070a qcn6100 qcn9072_firmware sm7250p sd720g_firmware ipq8071_firmware qcn9074_firmware sw5100_firmware ipq4029 sd850 Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-33238

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.26% / 49.35%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 14:15

Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-wcd9380_firmware qcn9072_firmware msm8996au wcn3615_firmware sd730 apq8009 ipq6028 qca6696 qca6421 qcn9070 wcn7850 qcn5122 qsm8250_firmware qca6564au sdx24 wcn3660b sd720g ipq8078a sd460 msm8996au_firmware sdx24_firmware qcn5124 qca6430 ipq9008_firmware qcs6490_firmware sd_8cx_gen3_firmware sd_8cx_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware sd712 qca8386 qca6574a sd865_5g_firmware apq8017_firmware sd835_firmware sa8295p_firmware sm7325p qcn5024 mdm8215 qcc5100 qcs405 qca6595 qca6431_firmware sd480_firmware apq8064au_firmware sm7315_firmware qca9367 qca6390_firmware sc8180x\+sdx55 qca6584_firmware ipq8070a sd870_firmware qcm6490_firmware ipq8078_firmware ipq4019 qca6595au sd821_firmware qcs4290_firmware wcn3980 qca2066 sm4125_firmware sm7315 qcn9022 sd765_firmware ipq8065_firmware qca9888_firmware sdx55m qam8295p wcn6850_firmware sm6250p wcn3991_firmware sa8150p wcn6740 ipq8078 qca6436 apq8064au ipq8069 ipq8071a qca4024 qca2062_firmware qca2066_firmware sw5100p_firmware qcn9012 wsa8835_firmware apq8009_firmware qca6391 qcn9024 qcn5052_firmware csra6620 wcn3998_firmware sd778g_firmware sd675 ipq8074a qcx315 qcc5100_firmware qca6554a_firmware qca9886_firmware qca7500_firmware ipq8071 qcn6122 sdx12 sd660 csrb31024_firmware sa4150p_firmware sdx20 ipq8070 qcs610 qcn9012_firmware sm7250p sa8155p_firmware csra6620_firmware wcn3610 sdx20_firmware wcn3910_firmware qrb5165_firmware sd750g_firmware qca6696_firmware qca2064 sxr2150p sd865_5g ipq8071_firmware qca9377 qcn9003_firmware wcn3990_firmware wcn3950_firmware wcn3988 wcn3615 qca8085 sd750g sd768g_firmware qcs605 mdm9615_firmware mdm9640_firmware qca4020 qca9367_firmware ipq8074a_firmware qcn5021_firmware qcn6102 ipq4018 wcd9340_firmware sd850 qca6175a_firmware sd_675_firmware sd855_firmware sd662_firmware qcn5054_firmware qca9889 sdx50m wcd9371 qca1023 mdm9628 wcn3610_firmware sa6155 qcm4290_firmware wcn3660b_firmware sm4375 sdx20m_firmware wcd9360_firmware qrb5165m_firmware qsm8350_firmware sd768g wcn6740_firmware wcn6856 sdx50m_firmware qca6175a sa6155p ipq8074_firmware sa8150p_firmware sd480 wcd9330 wcn7851_firmware mdm8215_firmware qca4024_firmware sa8145p wcn3950 ipq6018_firmware qcn5122_firmware qcn7605 ipq8078a_firmware wcn3680b_firmware ipq6010 qca6421_firmware qca6438_firmware qca6574au_firmware sd662 qrb5165n_firmware qca2065_firmware ipq4029_firmware qam8295p_firmware qca6564_firmware qcs610_firmware qcn5054 ar8031 qca6438 qcm4290 qcn6102_firmware qcn5052 sd660_firmware sd730_firmware qca6174_firmware sd888 qcn5550 qca0000 wcn6856_firmware qcn6132_firmware aqt1000 qcn5152_firmware qcs603 qca9985 ar8035 qca8072_firmware qsm8250 qca6420 wcd9360 qca4531 qca9898_firmware qcm2290 mdm9250 qcn9011 sa515m sd845_firmware qca6428_firmware sa515m_firmware qcn5550_firmware qca9994_firmware qcn5064 apq8076 ipq6028_firmware qcn6023 mdm9645_firmware qca8081_firmware qca9984 ipq8068 qca9898 qca8075_firmware qcn5164 qcs2290 qrb5165m ipq8068_firmware qca1064_firmware sd7c sd678 qca6574au wcd9385_firmware ipq9574_firmware apq8096au qcs410_firmware qcn9000_firmware ipq8173_firmware sd680 qcn9001_firmware qca9379 sm4375_firmware ipq6010_firmware sd_8cx qca9987 sa8195p qca6574a_firmware qca9888 sa8155_firmware wsa8830_firmware ipq8174_firmware sd_8_gen1_5g_firmware qcn6100 wcd9341 sd680_firmware qca9992_firmware qca2065 apq8096au_firmware qcn9001 qca6584 sd780g qca6335_firmware sdx55m_firmware qcs6125_firmware qcn9100 ipq8072_firmware sa8155 ipq6000 sd765 qca6564 wcd9330_firmware qcn9022_firmware qcs4290 ipq5028 sa4155p qca9369 qcn7606 sd845 qcs410 qca6428 mdm9310 qca6595au_firmware qca1062 qca6310 qcn9000 qcn7606_firmware ipq8074 mdm9607 qca6426_firmware qca4531_firmware sa6150p sd710_firmware qca9889_firmware wsa8830 ipq8072 wsa8815 qcn9003 ipq9008 wcn3680b sd855 wcd9340 qca0000_firmware sdx55_firmware sxr2150p_firmware qca8386_firmware sc8180x\+sdx55_firmware qcn5022_firmware sa4155p_firmware mdm9650 qca8072 sd765g_firmware qca8084_firmware qcm6125_firmware wcn6750 ipq4019_firmware sd695_firmware qca9994 qca6335 sd_675 qcn5024_firmware csra6640 mdm9215_firmware qca6430_firmware qca8081 sm7325p_firmware qca6584au sd870 ipq6018 ipq5018_firmware ipq9574 qcn9024_firmware ipq4028_firmware qcn9011_firmware sa6155_firmware wcn6855 qcx315_firmware ipq8072a wcn3910 ipq8070a_firmware qca9880_firmware sm6250 qca6431 wcd9370 sd888_firmware qcn5152 qca9992 sd720g_firmware sd765g qca9985_firmware sd670 qcn9002_firmware qcn9274 wsa8810_firmware wsa8815_firmware sd850_firmware ipq8076a qcn7605_firmware sa8155p sdxr1 wsa8810 aqt1000_firmware ipq8076 wcd9335_firmware sm7250p_firmware qcn5154_firmware ar9380_firmware mdm9310_firmware wcn6851 wcd9370_firmware qca6420_firmware qcn6023_firmware qca8082_firmware ipq4028 qcm6125 ipq8174 ipq8064_firmware qca4020_firmware qca6391_firmware wcd9326_firmware sa6145p apq8017 qca8085_firmware wcd9375 msm8976_firmware ipq8076_firmware mdm9215 qca2062 qca9980_firmware sm6250p_firmware sd778g wcd9371_firmware ipq8071a_firmware msm8976 qca9980 sd712_firmware wcn7851 qcn9002 qca6310_firmware sd710 qca6436_firmware sa8195p_firmware qcn5064_firmware wcd9341_firmware qca9886 sd821 ipq6000_firmware qca8082 qca6174a_firmware qca6564a_firmware qcn5021 mdm9650_firmware qcs405_firmware qcn6024_firmware qcs6490 ipq5018 sdx55 sd460_firmware qca9990 qca1064 sd820 sd665_firmware qca7500 sa6145p_firmware ipq5028_firmware sm4125 qca6390 ipq5010_firmware sa8145p_firmware sw5100 wcn6850 csr8811 sa415m qcs603_firmware qca6584au_firmware qca6320_firmware qcn9100_firmware qcm6490 qcn6024 qca6174a wcd9335 wcn3999 sd7c_firmware sd670_firmware sd835 qca6595_firmware qrb5165n qrb5165 mdm9250_firmware sa8295p qcn9074 qca6174 qcm2290_firmware qcn9274_firmware wcd9380 mdm9628_firmware qca2064_firmware sd695 ipq8064 qca9369_firmware sd_8cx_gen3 ipq8069_firmware wcd9375_firmware sa6150p_firmware ar8035_firmware ipq8070_firmware qca9880 qcn6100_firmware sdx12_firmware qcn6112 wcn6855_firmware sd780g_firmware qca1023_firmware sdx65_firmware qcn5124_firmware mdm9206 sdxr1_firmware qcn5164_firmware mdm9607_firmware wcn3990 apq8076_firmware sd690_5g qca1062_firmware wsa8835 wcn3998 ar8031_firmware csr8811_firmware qca8337_firmware mdm9206_firmware qcn6122_firmware sd820_firmware qca9990_firmware ipq8072a_firmware wcd9385 wcn7850_firmware qcn6112_firmware sdx65 ipq4029 mdm9640 wcn6750_firmware ipq8065 sd888_5g qcn9070_firmware pmp8074 qca8075 pmp8074_firmware sd678_firmware wcn3999_firmware qcs6125 qca9984_firmware qca6574 qsm8350 wcn3991 csra6640_firmware qca6574_firmware sa415m_firmware ipq8076a_firmware ar9380 qca6564a sdx20m sd675_firmware sd665 qca9987_firmware sd888_5g_firmware qca6320 qca8337 sm6250_firmware sdxr2_5g qcn6132 wcn3980_firmware qcs2290_firmware wcn6851_firmware ipq4018_firmware wcd9326 qca8084 qca9379_firmware sa6155p_firmware qcn9074_firmware sa4150p qcn5154 qca9377_firmware mdm9645 sw5100_firmware ipq8173 qcn9072 qca6564au_firmware csrb31024 qca6426 sd690_5g_firmware qcn5022 sm8475 qcs605_firmware ipq5010 wcn3988_firmware qca6554a sw5100p mdm9615 sd_8cx_gen2 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2024-23364

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.42%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-03 Oct, 2025 | 18:37

Buffer Over-read in WLAN Firmware

Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).

CWE ID-CWE-126

Buffer Over-read

CVE-2022-33299

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.26% / 49.44%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 14:54

Null pointer dereference in Bluetooth HOST

Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.

Product-qca9377_firmware mdm9150_firmware mdm9640_firmware msm8996au_firmware qca6595 qca6564au csrb31024 mdm9628_firmware wcd9360_firmware mdm9650 csra6620 qca6574 msm8996au mdm9250 qca6595au_firmware csra6620_firmware qca6574a mdm9206 csra6640_firmware qca6174a qca6584au_firmware sd626 qca9377 sa415m wcn3998 wcd9335_firmware wcn3980 wcd9326_firmware mdm9628 sa515m mdm9206_firmware qca6574_firmware wcn3660b wsa8815 qca6584_firmware mdm9650_firmware qca6175a wcn3660b_firmware qca6574a_firmware qca6584 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcn3980_firmware wcd9360 sdx20m qca6564au_firmware qca6584au qca9367_firmware sa515m_firmware ar8031_firmware csrb31024_firmware qca9367 sdx20 mdm9607_firmware sa415m_firmware qcs405 qca6574au qcn9074 mdm9607 qca6564a_firmware apq8017_firmware sd626_firmware sdx20m_firmware wcd9326 wcd9335 mdm9150 wcn3680b qca6174a_firmware mdm9250_firmware apq8096au qca6696_firmware ar8031 qca6595_firmware qcs405_firmware qca6696 sdx55 apq8096au_firmware csra6640 sdx20_firmware wsa8815_firmware apq8017 qcn9074_firmware qca6564a qca6175a_firmware mdm9640 Snapdragon

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2024-23352

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.88%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-26 Nov, 2024 | 15:49

Loop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call Processor

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2022-34144

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.19% / 40.66%

7 Day CHG+0.03%

Published-02 May, 2023 | 05:08

Updated-03 Aug, 2024 | 08:16

Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem during OSI decode scheduling.

Product-wsa8830 sm7325-ae_firmware 315_5g_iot_modem_firmware qca8337 wcn785x-5 wcd9360_firmware sm7250-ac_firmware wcn3950_firmware sm4450_firmware qca6595au_firmware qca6390_firmware snapdragon_x70_modem-rf_system sm8350 wcd9370 wcn685x-1 sm7350-ab_firmware sm8450 sm4375 wcn3998 sm8250-ab wcd9385_firmware wcn3950 qcn6024_firmware sm6375_firmware sm7325-af sm7315_firmware sm7325-ae snapdragon_x55_5g_modem-rf_system qca6574au_firmware sdx55_firmware qca6595au wcn3998_firmware qca8081_firmware sm7325-af_firmware sm7250p_firmware wcd9375_firmware wcd9360 sm4350-ac snapdragon_x65_5g_modem-rf_system_firmware snapdragon_x70_modem-rf_system_firmware qcs6490 qca6698aq sm8250_firmware sm7250-ab_firmware sm8250-ac wcn3988_firmware 315_5g_iot_modem sm7250-aa wsa8810_firmware sm4375_firmware sm8450_firmware qca8081 qca6698aq_firmware qcm4490 wcn685x-1_firmware wcd9385 wcd9341 qca6696_firmware qcs6490_firmware qca6390 ar8035 sm4350_firmware wcd9375 sm8250-ac_firmware wsa8830_firmware snapdragon_7c\+_gen_3_compute_firmware qcm6490 wcn3988 wsa8815_firmware wsa8835_firmware sm7350-ab sm8475 wcn6750_firmware wcn785x-1 sm6375 qca8337_firmware wcd9380_firmware snapdragon_auto_5g__modem-rf sm8350-ac_firmware sd888 wsa8835 snapdragon_7c\+_gen_3_compute wcd9380 qca6574a wcn685x-5_firmware sm7325p sm7325 wcn6750 sm7250-ab wsa8815 sm7325p_firmware sdx57m_firmware sm4450 qca6574a_firmware qcn9024 wcn785x-5_firmware sm7315 sm8250-ab_firmware qca6391 snapdragon_x55_5g_modem-rf_system_firmware sm6350 sm8475_firmware wcn6740_firmware qcm4490_firmware qcs4490_firmware snapdragon_x65_5g_modem-rf_system qcm6490_firmware wsa8832_firmware sm8350_firmware wcn685x-5 sm6350_firmware wcn785x-1_firmware qca6574au qcn9024_firmware sdx57m wcd9341_firmware wsa8810 sm7250-aa_firmware wsa8832 snapdragon_auto_5g__modem-rf_firmware sm7250-ac sm8350-ac qcs4490 wcn6740 qca6696 qca6391_firmware sm4350 wcd9370_firmware sm4350-ac_firmware sdx55 sd888_firmware sm8250 qcn6024 sm7250p ar8035_firmware sm7325_firmware Snapdragon

CWE ID-CWE-617

Reachable Assertion

CVE-2024-23363

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.42%

7 Day CHG~0.00%

Published-03 Jun, 2024 | 10:05

Updated-09 Jan, 2025 | 21:22

Buffer Over-read in WLAN Firmware

Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2024-21454

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.12% / 30.95%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:06

Updated-13 Jan, 2025 | 21:54

Integer Overflow to Buffer Overflow in Automotive Telematics

Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.

Product-c-v2x_9150_firmware auto_5g_modem-rf_firmware auto_4g_modem auto_5g_modem-rf c-v2x_9150 auto_4g_modem_firmware Snapdragon snapdragon_auto_4g_modem snapdragon_auto_5g_modem-rf c-v2x_9150

CWE ID-CWE-680

Integer Overflow to Buffer Overflow

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2024-21452

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.07% / 21.89%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:06

Updated-13 Jan, 2025 | 21:53

Improper Input Validation in Automotive Telematics

Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.

Product-snapdragon_auto_4g_modem_firmware c-v2x_9150_firmware snapdragon_auto_4g_modem qca6584au_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qca6698aq_firmware qca6698aq snapdragon_auto_5g_modem-rf_gen_2 snapdragon_auto_5g_modem-rf qca6584au c-v2x_9150 snapdragon_auto_5g_modem-rf_firmware Snapdragon snapdragon_auto_5g_modem-rf_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware qca6584au_firmware c-v2x_9150_firmware snapdragon_auto_4g_modem_firmware qca6698aq_firmware

CWE ID-CWE-20

Improper Input Validation

CVE-2024-21453

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.12% / 31.10%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:06

Updated-11 Aug, 2025 | 15:06

Improper Input Validation in Automotive Telematics

Transient DOS while decoding message of size that exceeds the available system memory.

CWE ID-CWE-20

Improper Input Validation

CVE-2024-21477

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.29% / 52.79%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-15 Jan, 2025 | 17:00

Buffer Over-read in WLAN Firmware

Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.

Product-Snapdragon qcn5024_firmware qam8255p_firmware qca8337_firmware qcf8000_firmware ipq8076a_firmware ipq8173_firmware qcn6224_firmware qca4024_firmware immersive_home_326_platform_firmware qcn6122_firmware qcn6402_firmware immersive_home_318_platform_firmware csr8811_firmware ipq5028_firmware qca6420_firmware qca6595au_firmware ipq9554_firmware qca8075_firmware qcn5152_firmware qca0000_firmware qcn6132_firmware qca6584au_firmware qcn9000_firmware qca6430_firmware qcn5052_firmware qcn9012_firmware qcc2076_firmware ipq8070a_firmware qca6554a_firmware qcn9274_firmware qfw7114_firmware qcn6024_firmware qca8386_firmware qcc2073_firmware immersive_home_316_platform_firmware ipq6018_firmware ipq8076_firmware qcm4325_firmware qca6574_firmware qca8084_firmware qcn5124_firmware qca8082_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware qcn6422_firmware qca8081_firmware qcn6023_firmware ipq9574_firmware immersive_home_3210_platform_firmware aqt1000_firmware qca6564au_firmware qcm8550_firmware ipq8078a_firmware qcn6274_firmware ipq5300_firmware ipq8078_firmware ipq9570_firmware qcn9070_firmware qcf8001_firmware fastconnect_6900_firmware qcs8550_firmware sc8380xp_firmware ipq6028_firmware ipq8072a_firmware qcn6112_firmware qca6797aq_firmware ipq5312_firmware qcn6432_firmware qca9889_firmware qcn9024_firmware ipq8174_firmware fastconnect_7800_firmware qcn6412_firmware ipq5332_firmware ipq5302_firmware qca6698aq_firmware qcn9013_firmware ipq8071a_firmware qam8650p_firmware qca8085_firmware qam8775p_firmware qca9888_firmware ipq6010_firmware qca6696_firmware qca6595_firmware ipq9008_firmware qca6391_firmware qcn5154_firmware immersive_home_214_platform_firmware qcc710_firmware qcn9100_firmware qcn9022_firmware ipq5010_firmware ipq8074a_firmware qcn9072_firmware ipq6000_firmware qcn9074_firmware fastconnect_6800_firmware qcn5022_firmware qfw7124_firmware immersive_home_216_platform_firmware ar8035_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2024-21479

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.23% / 45.62%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-26 Nov, 2024 | 15:47

Buffer Over-read in Audio

Transient DOS during music playback of ALAC content.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2018-11828

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.24% / 46.51%

7 Day CHG~0.00%

Published-26 Oct, 2018 | 13:00

Updated-05 Aug, 2024 | 08:17

When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52

Product-sd_652 sd_425_firmware sd_212_firmware sd_625_firmware sd_450 sd_425 sd_430_firmware sd_430 sd_625 sd_210 sd_212 sd_650 sd_205 sd_450_firmware sd_210_firmware sd_652_firmware sd_205_firmware sd_650_firmware Snapdragon Mobile

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2022-40535

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.36% / 58.18%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 12:21

Buffer Over-read in WLAN

Transient DOS due to buffer over-read in WLAN while sending a packet to device.

Product-qcn5024_firmware wcn3991_firmware wsa8830 qcn9070 ipq8173_firmware qca6431_firmware snapdragon_4_gen_1_firmware sdx65 qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 wcn3950_firmware ipq8078a qca6390_firmware wcd9370 qca6426 qcn9000_firmware wcn3998 wcd9385_firmware wcn3950 ipq8076a qca8386_firmware qcn6024_firmware sm4125 wcd9326_firmware qca8084_firmware ipq8074a sd662 qcn5124_firmware sd460_firmware qca8082_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware qcn6023_firmware wcn3998_firmware qca6436_firmware sd680_firmware ipq8078a_firmware qcn9274 ipq8174 sd662_firmware wcn3988_firmware qcn9074 qca6421 qca8085 sdx65m wsa8810_firmware sw5100 qca6436 sd680 wcd9326 wcd9335 wcn6851 qca8081 ipq8071a qcn6023 sdx65m_firmware ipq8071a_firmware wcd9385 qca8085_firmware qca9888_firmware qca6431 sd870_firmware ipq9008_firmware qcn5154_firmware qca6390 csr8811 wcd9375 wcn3910_firmware wsa8830_firmware sd865_5g_firmware snapdragon_4_gen_1 ipq8074a_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware wcn3991 wcd9380_firmware qcn9000 ipq8072a sw5100p ipq8076a_firmware sd865_5g ipq8078 qca8084 sdx55m_firmware ipq8173 ipq9008 qcn5164 wsa8835 csr8811_firmware wcd9380 qcn5154 qcn5024 qca9889 qca9888 wcd9335_firmware wcn3980 qcn9274_firmware ipq8070a_firmware ipq8076_firmware sm4125_firmware wsa8815 wcn6850 wcn3910 ipq8076 qca6426_firmware sd695 qcn9024 ipq9574_firmware wcn3980_firmware sd460 qca6391 sdx55m qca6421_firmware sdx65_firmware ipq8078_firmware qcn9070_firmware sd480_firmware wcn6851_firmware ipq8072a_firmware qca9889_firmware ipq9574 qcn9024_firmware ipq8174_firmware sd480 sd870 wsa8810 sw5100p_firmware sd695_firmware qca6391_firmware qca4024 wcd9370_firmware qcn6024 ipq8070a qcn9072_firmware sw5100_firmware qcn9074_firmware Snapdragon qcn5024_firmware wcn3991_firmware wcd9380_firmware ipq8076a_firmware ipq8173_firmware qca6431_firmware sdx55m_firmware snapdragon_4_gen_1_firmware qca4024_firmware wcn3950_firmware csr8811_firmware qca6390_firmware qcn9000_firmware wcd9335_firmware qcn9274_firmware ipq8070a_firmware wcd9385_firmware qcn6024_firmware ipq8076_firmware qca8386_firmware wcd9326_firmware sm4125_firmware qca8084_firmware qcn5124_firmware sd460_firmware qca6426_firmware qca8082_firmware qcn5164_firmware wcd9375_firmware ipq9574_firmware qca8081_firmware qcn6023_firmware wcn3980_firmware wcn3998_firmware qca6436_firmware qca6421_firmware sd680_firmware sdx65_firmware ipq8078a_firmware ipq8078_firmware qcn9070_firmware sd480_firmware wcn6851_firmware ipq8072a_firmware sd662_firmware wcn3988_firmware qca9889_firmware qcn9024_firmware ipq8174_firmware wsa8810_firmware sw5100p_firmware sdx65m_firmware ipq8071a_firmware qca8085_firmware qca9888_firmware sd695_firmware sd870_firmware ipq9008_firmware qca6391_firmware qcn5154_firmware wcn3910_firmware wcd9370_firmware wsa8830_firmware sd865_5g_firmware ipq8074a_firmware qcn9072_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware sw5100_firmware qcn9074_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-40502

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.36% / 58.18%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 12:21

Improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host.

Product-qcn5024_firmware wsa8830 qcn9070 sxr2230p_firmware qcs610 ipq8173_firmware qcn5124 qca4024_firmware qcn9072 wcn3950_firmware ipq8078a ipq5028_firmware qca6595au_firmware ipq6000 wcd9370 ssg2115p qcn5152_firmware qca6584au_firmware qcn9000_firmware ipq5018 qca6554a_firmware wcd9385_firmware qam8295p wcn3950 ipq8076a qcn6024_firmware sd_8_gen1_5g_firmware ipq8074a qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware wcn7850 qca6574au_firmware qcn5122_firmware qcn5164_firmware qca6595au qca8081_firmware qcn6023_firmware wcd9375_firmware qcn9002 ipq5010 qca6564au_firmware qca6584au sa6155p_firmware sd680_firmware ipq8078a_firmware qcn9274 ipq8174 qcn9001 wcn7851 ipq5028 qca6698aq qcn5052 ipq6010 qcn6112_firmware wcn3988_firmware qcn9074 sa8195p qcn6132 wsa8810_firmware sd680 sa6155p sg4150p qca8081 wcn7851_firmware qca6698aq_firmware ipq8071a qcn6023 ipq8071a_firmware wcd9385 qca9888_firmware qcn6122 wcd9341 qca6696_firmware ipq9008_firmware qcn5154_firmware csr8811 wcd9375 qcn9100_firmware wsa8830_firmware ipq5010_firmware ipq8074a_firmware wcn3988 wsa8815_firmware wcn7850_firmware wsa8835_firmware sa8195p_firmware sm8475 qcn5022_firmware sa8295p_firmware sa4150p sg4150p_firmware qca8072 ipq5018_firmware wcd9380_firmware ssg2125p qcn9000 ipq8072a qca6554a ipq8076a_firmware qca6595 ipq8078 qca6564au qcn9001_firmware ipq8173 wcn6856_firmware ipq9008 qcn5164 qcn6122_firmware qca6574 sxr1230p_firmware wsa8835 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5154 qca8075_firmware ssg2125p_firmware qca6574a qcn5024 wcn6855_firmware qca9889 qcn6132_firmware qcn9003_firmware sxr1230p qca9888 qca8072_firmware wcn3980 qcn5052_firmware qcn9274_firmware qcn9003 ipq8070a_firmware ipq6018_firmware ipq8076_firmware qca6574_firmware wsa8815 qcn6112 sxr2230p ipq8076 qca6574a_firmware qcn5152 ipq6028 qcn9024 ipq9574_firmware wcn3980_firmware sa8295p wcn6740_firmware qcn6102 qcn9100 ipq8078_firmware wsa8832_firmware qcn5054 qcn9070_firmware ipq6028_firmware ipq8072a_firmware qca6574au qca9889_firmware sa8155p_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware wcd9341_firmware wsa8810 wsa8832 wcn6855 qcs610_firmware wcn6856 ipq6018 qcn5022 ipq6010_firmware qca6595_firmware wcn6740 qca6696 sa4150p_firmware qca4024 wcd9370_firmware qca8075 qcn9022_firmware sa8155p qcn6024 qcn9022 ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware qcs410_firmware Snapdragon qcn5024_firmware ipq5018_firmware wcd9380_firmware sxr2230p_firmware ipq8076a_firmware ipq8173_firmware qcn9001_firmware wcn6856_firmware qca4024_firmware qcn6122_firmware sxr1230p_firmware wcn3950_firmware csr8811_firmware ipq5028_firmware qca6595au_firmware qcn5054_firmware qca8075_firmware ssg2125p_firmware wcn6855_firmware qcn5152_firmware qcn6132_firmware qcn9003_firmware qca6584au_firmware qca8072_firmware qcn9000_firmware qcn5052_firmware qcn9274_firmware ipq8070a_firmware qca6554a_firmware wcd9385_firmware qcn6024_firmware ipq8076_firmware ipq6018_firmware qca6574_firmware sd_8_gen1_5g_firmware qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware qca6574a_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware qcn6023_firmware ipq9574_firmware wcn3980_firmware wcn6740_firmware qca6564au_firmware sd680_firmware sa6155p_firmware ipq8078a_firmware ipq8078_firmware wsa8832_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn6112_firmware wcn3988_firmware qca9889_firmware sa8155p_firmware qcn9024_firmware ipq8174_firmware wsa8810_firmware wcd9341_firmware qcs610_firmware wcn7851_firmware qca6698aq_firmware ipq8071a_firmware qca9888_firmware ipq6010_firmware qca6696_firmware qca6595_firmware ipq9008_firmware qcn5154_firmware sa4150p_firmware wcd9370_firmware qcn9100_firmware qcn9022_firmware wsa8830_firmware qcn9002_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wsa8835_firmware wcn7850_firmware qcn9072_firmware ipq6000_firmware sa8195p_firmware ssg2115p_firmware qcn9074_firmware qcs410_firmware qcn5022_firmware sa8295p_firmware sg4150p_firmware

CWE ID-CWE-20

Improper Input Validation

CVE-2020-35553

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.12% / 31.13%

7 Day CHG~0.00%

Published-18 Dec, 2020 | 08:44

Updated-04 Aug, 2024 | 17:09

An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Qualcomm SM8250 chipsets) software. They allows attackers to cause a denial of service (unlock failure) by triggering a power-shortage incident that causes a false-positive attack detection. The Samsung ID is SVE-2020-19678 (December 2020).

Vendor-n/a Qualcomm Technologies, Inc.Google LLC

Product-android sm8250 n/a

CWE ID-CWE-920

Improper Restriction of Power Consumption

CVE-2022-33253

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.25% / 48.17%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 19:48

Buffer over-read in WLAN

Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.

Product-sd_8cx_gen3_firmware qca2066 sa6150p_firmware qca8337 ar9380 ipq8173_firmware qca6431_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware sc8180x\+sdx55 ipq8078a ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca2062 sa415m wcn3998 qca6554a_firmware qam8295p sd_8cx_gen2_firmware qcn6024_firmware ipq8076a qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 qcn9002 qca9986 ipq8070_firmware ipq8065 ipq8078a_firmware sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware sa8155_firmware ipq6010 ipq8068 qca6430 wcd9340 qcn6132 qca6436 wcn6851 sa6155p wcn7851_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca2066_firmware qca6696_firmware qca6431 sd870_firmware qca1062 ipq9008_firmware qcn5154_firmware sxr2150p_firmware sa8150p wsa8830_firmware qca9992_firmware sd865_5g_firmware wcn7850_firmware sa8195p_firmware sm8475 qcn5022_firmware wcn6750_firmware sa8295p_firmware ipq5018_firmware qca9985_firmware qca8337_firmware wcd9380_firmware ipq8072a qca9980_firmware ipq8076a_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 sdx55m_firmware qca6564au wcn6856_firmware ipq9008 qcn5164 qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcn5024 qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcn3980 ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qcn6112 qca9986_firmware qca6426_firmware qca9984 ipq6028 ipq8064 qcn9024 pmp8074 ipq9574_firmware wcn3980_firmware sdx55m ipq8064_firmware sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware ipq8070 qca9994 qca9980 qcn9024_firmware ipq8174_firmware sd870 wcn6855 qsm8250 sa6145p ipq6018 qca9886_firmware qca6595_firmware sa8145p qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware qcn5021_firmware sa8155p sxr2150p ar8035_firmware qsm8250_firmware qcn5024_firmware wsa8830 qcn9070 sa8145p_firmware qca1062_firmware csrb31024 qca8082 qcn9072 qca8386 qca9992 qca6420_firmware qca6390_firmware qca2064_firmware ipq6000 wcd9370 qcn5152_firmware qca6426 qca6584au_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq5018 wcd9385_firmware sdxr2_5g_firmware ipq8074a qca2065 qcn5124_firmware qam8295p_firmware qcn6102_firmware qcn9011_firmware qca1064 sa8155 qcn6100_firmware qca8082_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qcn9274 ipq8174 wcn7851 qcn9001 qca9990 qcs6490 qcn5052 sa515m_firmware sdxr2_5g qcn6112_firmware sa415m_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sa8195p wsa8810_firmware qca8081 qcn6023 ipq8071a ipq8071a_firmware wcd9385 qca8085_firmware qcs6490_firmware qca2065_firmware sd_8cx_gen3 qca6390 wcd9375 ar8035 aqt1000 csr8811 sc8180x\+sdx55_firmware qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware qcm6490 wcn6850_firmware wsa8835_firmware qcx315 sa4150p qca8072 qcn9000 sd780g qca6554a sd865_5g qca6595 ar9380_firmware qcn9012 sd888 qcn6122_firmware ipq8065_firmware qcx315_firmware wsa8835 sd888_5g qcn5154 qca8075_firmware qca6574a wcn6855_firmware qca9889 sm7325p qcn6132_firmware qcn9003_firmware qca9888 qca9994_firmware wcn6750 qcn9003 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 sm7325p_firmware ipq8076 qca6574a_firmware qcn5021 qcn5152 qrb5165m sm7315 qca6391 aqt1000_firmware qcn6102 qcn9100 sdx65_firmware csrb31024_firmware qcm6490_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn9011 qca6574au qca9889_firmware sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware wsa8810 wcn6856 qcn5022 ipq6010_firmware qca1064_firmware wcn6740 qca6696 sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware ipq6000_firmware qcn9074_firmware Snapdragon

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-33236

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.34% / 56.45%

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Product-wcd9380_firmware qcn9072_firmware qcn9000 qca8082 qcn5054_firmware qca9889 qcn6024_firmware ipq5018 ipq6028 qcn9070 wcn7850 qcn5122 qca6426_firmware ipq8078a qca9889_firmware ipq5028_firmware qcn5124 wsa8830 wcn6740_firmware wcn6856 wsa8815 qcn9003 qca6390 ipq9008 ipq5010_firmware wcn7851_firmware ipq9008_firmware qca4024_firmware wcn6850 csr8811 ipq6018_firmware qcn9100_firmware qca8386_firmware qcn5122_firmware qcn5022_firmware qcn6024 ipq8078a_firmware qca8386 qca8072 qca8084_firmware ipq6010 sd865_5g_firmware qcn5024 qcn9074 qcn9274_firmware qcn5054 wcd9380 qcn6102_firmware qcn5024_firmware qcn5052 qca8081 ar8035_firmware wcn6856_firmware qcn6132_firmware sd870 ipq6018 qcn5152_firmware ipq5018_firmware qcn6100_firmware qca6390_firmware ar8035 qcn6112 qcn9024_firmware wcn6855_firmware qca8072_firmware wcn6855 ipq8072a ipq8070a sdx65_firmware ipq8070a_firmware sd870_firmware qcn5124_firmware ipq8078_firmware qcn5164_firmware qcn5152 ipq6028_firmware qcn6023 qca8081_firmware qcn9022 wsa8835 qca9888_firmware wcn6850_firmware csr8811_firmware qcn9002_firmware qcn9274 wsa8810_firmware qca8337_firmware wsa8815_firmware qcn5164 qca8075_firmware qcn6122_firmware wcn6740 ipq8072a_firmware ipq8078 ipq8076a qca6436 wcn7850_firmware qcn6112_firmware sdx65 ipq8071a qca4024 wsa8810 qcn9000_firmware ipq8173_firmware qcn9001_firmware qcn9070_firmware qca8075 wsa8835_firmware ipq8076 qcn5154_firmware ipq6010_firmware qca6391 qcn9024 qcn5052_firmware wcn6851 ipq8076a_firmware qca9888 ipq8074a qcn6023_firmware wsa8830_firmware qca8082_firmware ipq8174_firmware qca8337 sd_8_gen1_5g_firmware qcn6100 ipq8174 qcn6122 qcn6132 wcn6851_firmware qca8084 qca6391_firmware qcn9074_firmware qcn5154 qca8085_firmware ipq8173 qcn9001 qcn9072 ipq8076_firmware sd865_5g qca6426 qcn9003_firmware qcn9100 qcn5022 sm8475 ipq8071a_firmware qca8085 ipq6000 ipq5010 wcn7851 qcn9002 qcn9022_firmware ipq5028 qca6436_firmware ipq8074a_firmware ipq6000_firmware qcn6102 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-33254

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.36% / 58.18%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 08:01

Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem while processing SIB1 Message.

Product-wcn3991_firmware wsa8830 qca8337 qca6431_firmware snapdragon_4_gen_1_firmware sdx65 sd765g_firmware qca6595au_firmware qca6390_firmware sd690_5g wcd9370 qca6426 wcn3998 wcd9385_firmware sdxr2_5g_firmware qcn6024_firmware sd_8_gen1_5g_firmware wcn7850 qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware qca6436_firmware sd778g sa515m_firmware qcs6490 wcn7851 sdxr2_5g wcn3988_firmware qca6421 sd778g_firmware wsa8810_firmware sd765g sd765_firmware qca6436 wcn6851 qca8081 wcn7851_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware sd750g sd870_firmware sdx70m_firmware qca6390 ar8035 sd750g_firmware aqt1000 wcd9375 wsa8830_firmware sd855_firmware sd865_5g_firmware snapdragon_4_gen_1 qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware qcx315 sm8475 wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware sd780g sd865_5g sdx55m_firmware wcn6856_firmware wsa8835 qcx315_firmware wcd9380 sd888_5g qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p wcn6750 sa515m sd855 wsa8815 sm7325p_firmware wcn6850 sdx57m_firmware sd765 qca6426_firmware qca6574a_firmware sd695 sd768g_firmware qcn9024 qca6391 sdx55m qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware qcm6490_firmware sdx50m sd480_firmware wcn6851_firmware qca6574au qcn9024_firmware sdx57m wcd9341_firmware sd480 sd870 wsa8810 wcn6855 wcn6856 sd695_firmware sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 qcn6024 sdx70m sm7250p ar8035_firmware Snapdragon wcn3991_firmware qca8337_firmware wcd9380_firmware qca6431_firmware sdx55m_firmware wcn6856_firmware snapdragon_4_gen_1_firmware qcx315_firmware sd765g_firmware qca6595au_firmware qca6390_firmware sd690_5g_firmware sdx50m_firmware wcn6855_firmware wcd9385_firmware sdxr2_5g_firmware qcn6024_firmware sd_8_gen1_5g_firmware sm7325p_firmware sdx57m_firmware qca6426_firmware qca6574a_firmware qca6574au_firmware sd768g_firmware sdx55_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sm7250p_firmware qca6436_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sa515m_firmware qcm6490_firmware sd480_firmware wcn6851_firmware wcn3988_firmware sd778g_firmware qcn9024_firmware wsa8810_firmware wcd9341_firmware sd765_firmware wcn7851_firmware sd695_firmware qca6696_firmware qcs6490_firmware sd870_firmware sdx70m_firmware qca6391_firmware sd750g_firmware sd780g_firmware wcd9370_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware sd888_5g_firmware wsa8835_firmware wcn6850_firmware wcn7850_firmware wcn6750_firmware ar8035_firmware

CWE ID-CWE-617

Reachable Assertion

CVE-2022-34145

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.47% / 64.60%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:16

Buffer over-read in WLAN Host

Transient DOS due to buffer over-read in WLAN Host while parsing frame information.

Product-qcn5024_firmware wsa8830 qcn9070 sa6150p_firmware sa8145p_firmware qcs610 ipq8173_firmware qcn5124 qca4024_firmware qcn9072 wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qca6595au_firmware ipq6000 wcd9370 qcn5152_firmware qca6584au_firmware qcn9000_firmware ipq5018 qca6554a_firmware qam8295p wcn3950 ipq8076a qcn6024_firmware sd_8_gen1_5g_firmware ipq8074a qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware wcn7850 qca6574au_firmware qcn5122_firmware qcn5164_firmware qca6595au qca8081_firmware qcn6023_firmware qcn9002 ipq5010 qca6564au_firmware qca6584au sa6155p_firmware ipq8078a_firmware qcn9274 qca6678aq_firmware ipq8174 qcn9001 wcn7851 ipq5028 qca6698aq qcn5052 ipq6010 qcn6112_firmware wcn3988_firmware qcn9074 sa6145p_firmware sa8195p qcn6132 wsa8810_firmware sw5100 sa6155p qca8081 wcn7851_firmware qca6698aq_firmware ipq8071a qcn6023 ipq8071a_firmware qca9888_firmware qcn6122 wcd9341 qca6696_firmware ipq9008_firmware qcn5154_firmware csr8811 sa8150p qcn9100_firmware wsa8830_firmware ipq5010_firmware ipq8074a_firmware wcn3988 wsa8815_firmware wcn7850_firmware wsa8835_firmware sa8195p_firmware sm8475 qcn5022_firmware sa8295p_firmware qca8072 ipq5018_firmware wcd9380_firmware qcn9000 ipq8072a sw5100p qca6554a ipq8076a_firmware qca6595 ipq8078 qca6564au qcc5100 ipq8173 qcn9001_firmware wcn6856_firmware ipq9008 qcn5164 qcn6122_firmware qca6574 wsa8835 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5154 qca8075_firmware qca6574a qcn5024 wcn6855_firmware qca9889 qcn6132_firmware qcn9003_firmware qca9888 qca8072_firmware wcn3980 qcn5052_firmware qcn9274_firmware qcn9003 ipq8070a_firmware ipq6018_firmware ipq8076_firmware qca6574_firmware wsa8815 qcn6112 ipq8076 qca6175a qca6574a_firmware qcn5152 ipq6028 qcn9024 ipq9574_firmware wcn3980_firmware qcc5100_firmware sa8295p qcn6102 qcn9100 qca6678aq ipq8078_firmware qcn5054 qcn9070_firmware ipq6028_firmware ipq8072a_firmware qca6574au qca9889_firmware sa8155p_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware wcd9341_firmware wsa8810 wcn6855 sw5100p_firmware qcs610_firmware wcn6856 ipq6018 qcn5022 sa6145p ipq6010_firmware qca6595_firmware sa8145p qca6696 qca4024 wcd9370_firmware sa6150p qca8075 qcn9022_firmware sa8155p qcn6024 qcn9022 ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware ipq6000_firmware sw5100_firmware qcn9074_firmware qcs410_firmware qca6175a_firmware Snapdragon qcn5024_firmware ipq5018_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware ipq8076a_firmware ipq8173_firmware qcn9001_firmware wcn6856_firmware qca4024_firmware qcn6122_firmware wcn3950_firmware csr8811_firmware ipq5028_firmware sa8150p_firmware qca6595au_firmware qcn5054_firmware qca8075_firmware wcn6855_firmware qcn5152_firmware qcn6132_firmware qcn9003_firmware qca6584au_firmware qca8072_firmware qcn9000_firmware qcn5052_firmware qcn9274_firmware ipq8070a_firmware qca6554a_firmware qcn6024_firmware ipq8076_firmware ipq6018_firmware qca6574_firmware sd_8_gen1_5g_firmware qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware qca6574a_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware qca8081_firmware qcn6023_firmware ipq9574_firmware wcn3980_firmware qcc5100_firmware qca6564au_firmware sa6155p_firmware ipq8078a_firmware qca6678aq_firmware ipq8078_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn6112_firmware wcn3988_firmware sa6145p_firmware qca9889_firmware sa8155p_firmware qcn9024_firmware ipq8174_firmware wsa8810_firmware wcd9341_firmware sw5100p_firmware qcs610_firmware wcn7851_firmware qca6698aq_firmware ipq8071a_firmware qca9888_firmware ipq6010_firmware qca6696_firmware qca6595_firmware ipq9008_firmware qcn5154_firmware wcd9370_firmware qcn9100_firmware qcn9022_firmware wsa8830_firmware qcn9002_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wsa8835_firmware wcn7850_firmware qcn9072_firmware ipq6000_firmware sa8195p_firmware sw5100_firmware qcn9074_firmware qcs410_firmware qcn5022_firmware sa8295p_firmware qca6175a_firmware

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-34146

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.47% / 64.60%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:16

Improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation.

Product-qcn5024_firmware wsa8830 qcn9070 sxr2230p_firmware qcs610 ipq8173_firmware qcn5124 qca4024_firmware qcn9072 wcn3950_firmware ipq8078a ipq5028_firmware qca6595au_firmware ipq6000 wcd9370 ssg2115p qcn5152_firmware qca6584au_firmware qcn9000_firmware ipq5018 qca6554a_firmware wcd9385_firmware qam8295p wcn3950 ipq8076a qcn6024_firmware sd_8_gen1_5g_firmware ipq8074a qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware wcn7850 qca6574au_firmware qcn5122_firmware qcn5164_firmware qca6595au qca8081_firmware qcn6023_firmware wcd9375_firmware qcn9002 ipq5010 qca6564au_firmware qca6584au sa6155p_firmware sd680_firmware ipq8078a_firmware qcn9274 ipq8174 qcn9001 wcn7851 ipq5028 qca6698aq qcn5052 ipq6010 qcn6112_firmware wcn3988_firmware qcn9074 sa8195p qcn6132 wsa8810_firmware sd680 sa6155p sg4150p qca8081 wcn7851_firmware qca6698aq_firmware ipq8071a qcn6023 ipq8071a_firmware wcd9385 qca9888_firmware qcn6122 wcd9341 qca6696_firmware ipq9008_firmware qcn5154_firmware csr8811 wcd9375 qcn9100_firmware wsa8830_firmware ipq5010_firmware ipq8074a_firmware wcn3988 wsa8815_firmware wcn7850_firmware wsa8835_firmware sa8195p_firmware sm8475 qcn5022_firmware sa8295p_firmware sa4150p sg4150p_firmware qcm4325 qca8072 ipq5018_firmware wcd9380_firmware ssg2125p qcn9000 ipq8072a qca6554a ipq8076a_firmware qca6595 ipq8078 qca6564au qcn9001_firmware ipq8173 wcn6856_firmware ipq9008 qcn5164 qcn6122_firmware qca6574 sxr1230p_firmware wsa8835 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5154 qca8075_firmware ssg2125p_firmware qca6574a qcn5024 wcn6855_firmware qca9889 qcn6132_firmware qcn9003_firmware sxr1230p qca9888 qca8072_firmware wcn3980 qcn5052_firmware qcn9274_firmware qcn9003 ipq8070a_firmware ipq6018_firmware ipq8076_firmware qcm4325_firmware qca6574_firmware wsa8815 qcn6112 sxr2230p ipq8076 qca6574a_firmware qcn5152 ipq6028 qcn9024 ipq9574_firmware wcn3980_firmware sa8295p wcn6740_firmware qcn6102 qcn9100 ipq8078_firmware wsa8832_firmware qcn5054 qcn9070_firmware ipq6028_firmware ipq8072a_firmware qca6574au qca9889_firmware sa8155p_firmware ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware wcd9341_firmware wsa8810 wsa8832 wcn6855 qcs610_firmware wcn6856 ipq6018 qcn5022 ipq6010_firmware qca6595_firmware wcn6740 qca6696 sa4150p_firmware qca4024 wcd9370_firmware qca8075 qcn9022_firmware sa8155p qcn6024 qcn9022 ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware qcs410_firmware Snapdragon qcn5024_firmware ipq5018_firmware wcd9380_firmware sxr2230p_firmware ipq8076a_firmware ipq8173_firmware qcn9001_firmware wcn6856_firmware qca4024_firmware qcn6122_firmware sxr1230p_firmware wcn3950_firmware csr8811_firmware ipq5028_firmware qca6595au_firmware qcn5054_firmware qca8075_firmware ssg2125p_firmware wcn6855_firmware qcn5152_firmware qcn6132_firmware qcn9003_firmware qca6584au_firmware qca8072_firmware qcn9000_firmware qcn5052_firmware qcn9274_firmware ipq8070a_firmware qca6554a_firmware wcd9385_firmware qcn6024_firmware ipq8076_firmware ipq6018_firmware qcm4325_firmware qca6574_firmware sd_8_gen1_5g_firmware qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware qca6574a_firmware qca6574au_firmware qcn5122_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware qcn6023_firmware ipq9574_firmware wcn3980_firmware wcn6740_firmware qca6564au_firmware sd680_firmware sa6155p_firmware ipq8078a_firmware ipq8078_firmware wsa8832_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qcn6112_firmware wcn3988_firmware qca9889_firmware sa8155p_firmware qcn9024_firmware ipq8174_firmware wsa8810_firmware wcd9341_firmware qcs610_firmware wcn7851_firmware qca6698aq_firmware ipq8071a_firmware qca9888_firmware ipq6010_firmware qca6696_firmware qca6595_firmware ipq9008_firmware qcn5154_firmware sa4150p_firmware wcd9370_firmware qcn9100_firmware qcn9022_firmware wsa8830_firmware qcn9002_firmware ipq5010_firmware ipq8074a_firmware wsa8815_firmware wsa8835_firmware wcn7850_firmware qcn9072_firmware ipq6000_firmware sa8195p_firmware ssg2115p_firmware qcn9074_firmware qcs410_firmware qcn5022_firmware sa8295p_firmware sg4150p_firmware

CWE ID-CWE-20

Improper Input Validation

CVE-2022-33250

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.36% / 58.18%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 08:01

Reachable assertion in Modem

Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.

Product-wcn3991_firmware wsa8830 qca8337 qca6431_firmware snapdragon_4_gen_1_firmware wcd9360_firmware sdx65 sd765g_firmware qca6595au_firmware qca6390_firmware sd690_5g wcd9370 qca6426 wcn3998 wcd9385_firmware sdxr2_5g_firmware qcn6024_firmware sd_8_gen1_5g_firmware sm7315_firmware wcn7850 qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware wcd9360 qca6436_firmware sd778g sa515m_firmware qcs6490 wcn7851 sdxr2_5g wcn3988_firmware qca6421 sd778g_firmware wsa8810_firmware sd765g sd765_firmware qca6436 wcn6851 qca8081 wcn7851_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware sd750g sd870_firmware sdx70m_firmware qca6390 ar8035 sd750g_firmware wcd9375 wsa8830_firmware sd855_firmware sd865_5g_firmware snapdragon_4_gen_1 qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware qcx315 sm8475 wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware sd780g sd865_5g sdx55m_firmware wcn6856_firmware sd888 wsa8835 qcx315_firmware wcd9380 sd888_5g qca6574a sd690_5g_firmware wcn6855_firmware sm7325p wcn6750 sa515m sd855 wsa8815 sm7325p_firmware wcn6850 sdx57m_firmware sd765 qca6426_firmware qca6574a_firmware sd695 sd768g_firmware qcn9024 sm7315 qca6391 sdx55m qca6421_firmware wcn6740_firmware sdx65_firmware qcm6490_firmware sd480_firmware wcn6851_firmware qca6574au qcn9024_firmware sdx57m wcd9341_firmware sd480 sd870 wsa8810 wcn6855 wcn6856 sd695_firmware sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware qcn6024 sdx70m sm7250p ar8035_firmware Snapdragon wcn3991_firmware qca8337_firmware wcd9380_firmware qca6431_firmware sdx55m_firmware wcn6856_firmware snapdragon_4_gen_1_firmware wcd9360_firmware qcx315_firmware sd765g_firmware qca6595au_firmware qca6390_firmware sd690_5g_firmware wcn6855_firmware wcd9385_firmware sdxr2_5g_firmware qcn6024_firmware sd_8_gen1_5g_firmware sm7325p_firmware sdx57m_firmware qca6426_firmware sm7315_firmware qca6574a_firmware qca6574au_firmware sd768g_firmware sdx55_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sm7250p_firmware qca6436_firmware qca6421_firmware wcn6740_firmware sdx65_firmware sa515m_firmware qcm6490_firmware sd480_firmware wcn6851_firmware wcn3988_firmware sd778g_firmware qcn9024_firmware wsa8810_firmware wcd9341_firmware sd765_firmware wcn7851_firmware sd695_firmware qca6696_firmware qcs6490_firmware sd870_firmware sdx70m_firmware qca6391_firmware sd750g_firmware sd780g_firmware wcd9370_firmware sd888_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware sd888_5g_firmware wsa8835_firmware wcn6850_firmware wcn7850_firmware wcn6750_firmware ar8035_firmware

CWE ID-CWE-617

Reachable Assertion

CVE-2022-33304

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.36% / 58.27%

7 Day CHG~0.00%

Published-02 May, 2023 | 05:08

Updated-03 Aug, 2024 | 08:01

NULL pointers dereference in Modem

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2022-33237

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.26% / 49.35%

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-wcd9380_firmware qcn9072_firmware qca6595au_firmware qca1062 qca6310 sd730 qcn9000 qcn7606_firmware ipq8074 ipq6028 qca6696 qca6421 mdm9607 qcn9070 wcn7850 qcn5122 qsm8250_firmware qca6564au qca6426_firmware sd720g ipq8078a sa6150p sd460 sd710_firmware qca9889_firmware qcn5124 wsa8830 ipq8072 wsa8815 qcn9003 ipq9008 qca6430 sd855 ipq9008_firmware qcs6490_firmware sd_8cx_gen3_firmware wcd9340 qca0000_firmware sdx55_firmware sd_8cx_firmware sxr2150p_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware qca8386_firmware sc8180x\+sdx55_firmware qcn5022_firmware sa4155p_firmware sd712 qca8386 qca8072 sd765g_firmware qca6574a qca8084_firmware sd865_5g_firmware qcm6125_firmware wcn6750 sa8295p_firmware sm7325p qcn5024 sd695_firmware qcc5100 qca9994 qca6335 sd_675 qcs405 qcn5024_firmware qca6595 qca6431_firmware csra6640 sd480_firmware qca6430_firmware qca8081 sm7315_firmware sm7325p_firmware qca6584au sd870 ipq6018 qca9367 ipq5018_firmware qca6390_firmware qcn9024_firmware sc8180x\+sdx55 ipq4028_firmware qcn9011_firmware sa6155_firmware wcn6855 qcx315_firmware ipq8072a ipq8070a wcn3910 ipq8070a_firmware sd870_firmware qcm6490_firmware sm6250 ipq8078_firmware qca6431 qca6595au wcd9370 sd888_firmware qcs4290_firmware wcn3980 qcn5152 qca2066 sm4125_firmware qca9992 sm7315 qcn9022 sd765_firmware sd720g_firmware sd765g sd670 qca9888_firmware sdx55m qam8295p wcn6850_firmware qcn9002_firmware qcn9274 sm6250p wsa8810_firmware wsa8815_firmware wcn3991_firmware sa8150p sd850_firmware wcn6740 ipq8078 qca6436 ipq8076a ipq8069 ipq8071a qca4024 qcn7605_firmware sa8155p sdxr1 wsa8810 qca6694_firmware qca2062_firmware qca2066_firmware sw5100p_firmware aqt1000_firmware qcn9012 wsa8835_firmware ipq8076 wcd9335_firmware sm7250p_firmware qcn5154_firmware qca6391 ar9380_firmware qcn9024 qcn5052_firmware csra6620 wcn3998_firmware wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware ipq8074a qcn6023_firmware qcx315 qcc5100_firmware qca6554a_firmware qca8082_firmware ipq4028 qcm6125 ipq8174 ipq8071 ipq8064_firmware qcn6122 sd660 csrb31024_firmware sa4150p_firmware ipq8070 qcs610 qca6391_firmware wcd9326_firmware qcn9012_firmware sm7250p sa8155p_firmware csra6620_firmware sa6145p wcn3910_firmware qrb5165_firmware qca8085_firmware wcd9375 sd750g_firmware qca6696_firmware ipq8076_firmware qca2064 sxr2150p sd865_5g qca2062 ipq8071_firmware qca9377 sm6250p_firmware qca9980_firmware qcn9003_firmware wcn3990_firmware wcn3950_firmware wcn3988 sd778g wcd9371_firmware ipq8071a_firmware qca8085 sd750g qca9980 sd768g_firmware qcs605 sd712_firmware wcn7851 qcn9002 qca6310_firmware sd710 qca6436_firmware sa8195p_firmware qcn5021_firmware qca9367_firmware ipq8074a_firmware wcd9341_firmware ipq6000_firmware qcn6102 ipq4018 wcd9340_firmware sd850 qca8082 sd_675_firmware qca6174a_firmware qcn5021 sd855_firmware sd662_firmware qcn5054_firmware qca9889 sdx50m wcd9371 qcs405_firmware qcn6024_firmware qcs6490 ipq5018 sdx55 sd460_firmware mdm9628 sa6155 qca9990 qcm4290_firmware qca1064 sm4375 sd665_firmware sdx20m_firmware wcd9360_firmware qrb5165m_firmware sa6145p_firmware qsm8350_firmware ipq5028_firmware sd768g wcn6740_firmware wcn6856 sm4125 qca6390 sdx50m_firmware ipq5010_firmware sa6155p ipq8074_firmware sa8150p_firmware sd480 wcd9330 wcn7851_firmware sa8145p_firmware sw5100 qca4024_firmware wcn6850 csr8811 sa8145p sa415m wcn3950 qcs603_firmware ipq6018_firmware qca6584au_firmware qcn9100_firmware qcn5122_firmware qcn7605 qcm6490 qcn6024 qca6174a wcd9335 wcn3999 ipq8078a_firmware sd7c_firmware sd670_firmware qca6595_firmware qrb5165n ipq6010 qca6421_firmware qca6438_firmware qrb5165 qca6574au_firmware sd662 qrb5165n_firmware qca2065_firmware ipq4029_firmware qam8295p_firmware sa8295p qcs610_firmware qcn9074 qcm2290_firmware qcn9274_firmware qcn5054 wcd9380 ar8031 qca6438 qcm4290 qcn6102_firmware qcn5052 sd660_firmware sd730_firmware mdm9628_firmware qca2064_firmware sd695 ipq8064 sd_8cx_gen3 ipq8069_firmware wcd9375_firmware sa6150p_firmware sd888 ar8035_firmware ipq8070_firmware qca0000 wcn6856_firmware qcn6132_firmware aqt1000 qcn5152_firmware qcs603 qcn6100_firmware ar8035 qcn6112 wcn6855_firmware qca8072_firmware qsm8250 qca6420 wcd9360 sd780g_firmware qca9898_firmware sdx65_firmware qcm2290 qcn9011 qcn5124_firmware sa515m sd845_firmware qca6428_firmware mdm9206 sa515m_firmware sdxr1_firmware qcn5164_firmware qca9994_firmware mdm9607_firmware wcn3990 ipq6028_firmware qcn6023 sd690_5g qca8081_firmware qca9984 qca1062_firmware wsa8835 wcn3998 ar8031_firmware csr8811_firmware qca8337_firmware qca9898 qca8075_firmware qcn5164 qcs2290 qrb5165m mdm9206_firmware qcn6122_firmware qca9990_firmware qca1064_firmware sd7c ipq8072a_firmware sd678 wcd9385 qca6574au wcn7850_firmware qcn6112_firmware sdx65 wcd9385_firmware ipq4029 wcn6750_firmware qcs410_firmware qcn9000_firmware ipq8173_firmware sd680 qcn9001_firmware sd888_5g qcn9070_firmware pmp8074 qca8075 pmp8074_firmware sd678_firmware wcn3999_firmware qcs6125 sm4375_firmware ipq6010_firmware qca9984_firmware qca6574 qsm8350 wcn3991 sd_8cx csra6640_firmware qca6574_firmware sa415m_firmware ipq8076a_firmware ar9380 sdx20m sa8195p sd675_firmware qca6574a_firmware qca9888 qca6694 sd665 sa8155_firmware wsa8830_firmware sd888_5g_firmware ipq8174_firmware qca8337 sd_8_gen1_5g_firmware sm6250_firmware qcn6100 sdxr2_5g qcn6132 wcd9341 wcn3980_firmware qcs2290_firmware wcn6851_firmware ipq4018_firmware wcd9326 sd680_firmware qca8084 sa6155p_firmware qcn9074_firmware qca9992_firmware sa4150p qcn5154 qca2065 qca9377_firmware sw5100_firmware ipq8173 qcn9001 qcn9072 sd780g qca6564au_firmware csrb31024 qca6426 qca6335_firmware sdx55m_firmware qcs6125_firmware qcn9100 sd690_5g_firmware qcn5022 sm8475 ipq8072_firmware sa8155 ipq6000 sd765 qcs605_firmware wcd9330_firmware ipq5010 wcn3988_firmware qcn9022_firmware qcs4290 qca6554a ipq5028 sa4155p qcn7606 sw5100p sd_8cx_gen2 sd845 qcs410 qca6428 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-33285

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.46% / 64.49%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 15:00

Buffer over-read in WLAN

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware ipq4028_firmware qca8337 ar9380 ipq8173_firmware qcn5124 mdm9645 wcn3950_firmware qca6595au_firmware sa6155 mdm8215 sd_455_firmware apq8076 qcs6125_firmware sa415m sm4375 wcn3998 wcd9371_firmware wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware wcn3660b qsm8350_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca8081_firmware wcn3998_firmware qca6420 qcn9002 qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware sd_8cx_gen2 ipq8072_firmware sa8155_firmware ipq8068 qca6430 wcd9340 sd765g sd680 wcn7851_firmware mdm9250_firmware qca9888_firmware qcn6122 qca6696_firmware wcd9371 sd870_firmware qca1062 qcn5154_firmware mdm8215_firmware sd_8cx sa8150p qca9992_firmware sd660 sd865_5g_firmware sd712 sd660_firmware sm8475 qcn5022_firmware qcn7606_firmware wcn6750_firmware qca6428_firmware qca9985_firmware wcn3991 ipq4018_firmware qca4531_firmware qca9980_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 sdx55m_firmware msm8976_firmware qca6574 sd670_firmware csr8811_firmware wcd9380 qcs410 qcn5024 sd690_5g_firmware qca9379_firmware sdx24_firmware qca9985 qcn9012_firmware qcn9274_firmware ipq6018_firmware wcd9340_firmware wsa8815 wcn6850 pmp8074_firmware qcn6112 qca6584_firmware mdm9215_firmware sd695 ipq6028 ipq8064 sd835 pmp8074 ipq9574_firmware wcn3980_firmware sd730 qcc5100_firmware sa8295p qca2062_firmware wcn6740_firmware sd678_firmware apq8064au_firmware ipq8078_firmware qcn5054 qcs603 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware qcm4290_firmware wcn6855 qcn7605_firmware sw5100p_firmware qcs610_firmware sa6145p qca9886_firmware ar8031 sdm630_firmware sd820_firmware qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware sdx55 qcn5021_firmware csra6640 qca9379 sxr2150p qcn7606 qsm8250_firmware wsa8830 qca1062_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 qca8082 qca9992 qcs4290 mdm9250 qca6420_firmware apq8009_firmware qca2064_firmware sd690_5g mdm9310_firmware sd675_firmware ipq8072 qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qca9984_firmware qca9377 qca4531 wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware ipq8074a qcn6102_firmware qcn9011_firmware sa8155 qca6584 qcn5122_firmware sdx55_firmware wcn3615 qcn6023_firmware sm7250p_firmware wcn3610_firmware qrb5165n qca6584au sd778g ipq8174 wcn7851 qcn5052 qca9367 sdm630 mdm9607_firmware qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 qca6421 qca8085 sd778g_firmware sa8195p sm4375_firmware wcd9326 wcd9335 qcn6023 qcs4290_firmware qca8085_firmware qcs6490_firmware qca6390 qca9898_firmware sd750g_firmware aqt1000 msm8976 wcd9375 sm6250_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware apq8017 qcx315 qcm6125_firmware sd780g sd865_5g qca6595 qcc5100 ipq8065_firmware qcx315_firmware sd665_firmware qcn5154 qca8075_firmware sc8180x mdm9206 wcn6855_firmware qcn6132_firmware qcn9003_firmware qca9888 qca6310_firmware ipq8070a_firmware mdm9615 qca6574_firmware qca9886 sm7325p_firmware sd665 qca6175a sd765 qca6574a_firmware qrb5165m sd850_firmware sm7315 apq8009 mdm9310 qcn6102 csrb31024_firmware qcm6490_firmware qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware sc8180x_firmware qca9889_firmware sd710 mdm9607 qcn5122 mdm9645_firmware sdx20m_firmware qcn5022 qca6564_firmware sd768g qca1064_firmware wcn6740 qca8075 apq8096au_firmware qcn6024 qcn9022 sd845 mdm9615_firmware qcn9002_firmware ipq6000_firmware sdx12 qcs410_firmware qca6175a_firmware sd_8cx_gen3_firmware qca2066 sa6150p_firmware qcs610 qca6431_firmware wcd9360_firmware sdx65 qca4024_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6335 qca2062 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qca6554a_firmware qam8295p sd_8cx_gen2_firmware ipq8076a mdm9628 qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware sd710_firmware qca4020 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware sa6155_firmware sdx12_firmware wcd9360 sdx20m qca6438_firmware sd680_firmware wcn3999 qrb5165_firmware ipq5028 qrb5165m_firmware ipq4029_firmware qcs6125 ipq6010 sd662_firmware qcs405 qcn6132 sw5100 qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcd9341 ipq8068_firmware qca2066_firmware qca6431 sd750g ipq9008_firmware wcn3910_firmware sxr2150p_firmware wsa8830_firmware sd855_firmware wcn3988 qca6438 wcn7850_firmware sa8195p_firmware qca9898 sa8295p_firmware ipq4028 wcn3610 mdm9640 ipq5018_firmware qca8337_firmware wcd9380_firmware ipq8072a sw5100p msm8996au_firmware wcd9330 ipq8076a_firmware qca6564au wcn6856_firmware ipq9008 qcn5164 qcn5054_firmware sdx50m_firmware qca8072_firmware qca6174 qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 sd7c wcn3910 qca6320 mdm9650_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware qca9984 qcn9024 wcd9330_firmware sdx55m ipq8064_firmware qca6421_firmware sd821_firmware ar8031_firmware qrb5165 wcn6851_firmware ipq8070 sd_636_firmware qca6564a_firmware sd480 sd870 qsm8250 ipq6018 sd695_firmware sdxr1 apq8096au qca6595_firmware qcs405_firmware sa8145p qca2064 sd780g_firmware sd888_firmware sa8155p sd675 ar8035_firmware qcm2290 qcn5024_firmware wcn3991_firmware sd678 qcn9070 sa8145p_firmware qcs2290_firmware sd7c_firmware csra6620 qcn9072 qca8386 sd765g_firmware ipq8069_firmware qca6390_firmware ipq6000 qca6174_firmware sd730_firmware wcd9370 qcn5152_firmware qca6584au_firmware apq8076_firmware qcn9000_firmware ipq5018 sd_8cx_firmware qcn7605 qca2065 sd662 qcn5124_firmware qam8295p_firmware qca1064 qcn6100_firmware qca8082_firmware qca6320_firmware wcn3680b_firmware qca6595au wcn3999_firmware qca6436_firmware ipq5010 qca6564au_firmware sa6155p_firmware qca6310 qcn9274 qcn9001 qca9990 qcs6490 sa515m_firmware sdxr2_5g sd821 sa6145p_firmware sm6250 sd712_firmware apq8017_firmware wsa8810_firmware sd765_firmware qca8081 ipq8071a qca6174a_firmware ipq8071a_firmware wcd9385 qca2065_firmware sd_8cx_gen3 ar8035 csr8811 apq8064au qcn9100_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware qca6564a sa4150p qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 qca6554a ar9380_firmware sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 msm8996au sd888_5g sm6250p ipq4018 qca6574a qca9889 qca6174a sm7325p ipq8074 qca9994_firmware wcn6750 qcn9003 ipq8076_firmware sa515m sd855 sm4125_firmware ipq8076 qcn5021 ipq8069 qcn5152 sd768g_firmware sd460 qca6391 sdxr1_firmware aqt1000_firmware qcn9100 sdx65_firmware qcm4290 sdx50m sdx20 mdm9215 qcn9011 sd_455 ipq8074_firmware qca6574au sa8155p_firmware ipq9574 wcd9341_firmware qcm6125 wsa8810 wcn6856 wcn3680b sd835_firmware ipq6010_firmware qca6696 sd845_firmware sa6150p qcn9022_firmware qca9990_firmware ipq8070a qcn6100 qcn9072_firmware sm7250p sd720g_firmware ipq8071_firmware qcn9074_firmware sw5100_firmware ipq4029 sd850 Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-33223

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.26% / 49.44%

7 Day CHG-0.10%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Null pointer dereference in Modem

Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2022-33306

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.36% / 58.18%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Buffer over-read in WLAN

Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.

Product-sd_8cx_gen3_firmware qca2066 qca8337 ar9380 ipq8173_firmware sdx65 qcn5124 qca4024_firmware ipq8078a ipq5028_firmware qca6595au_firmware qca2062 qca6554a_firmware qam8295p ipq8076a qca8386_firmware qcn6024_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 wcn7850 qca6574au_firmware qcn5164_firmware wcd9375_firmware qca8081_firmware qcn9002 qca9986 ipq8065 ipq8078a_firmware qca6678aq_firmware ipq5028 qca6698aq ipq6010 ipq8068 qcn6132 qca6436 wcn6851 wcn7851_firmware qca6698aq_firmware qca9888_firmware qcn6122 ipq8068_firmware qca2066_firmware wcd9341 qca6696_firmware sd870_firmware ipq9008_firmware qcn5154_firmware wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware sd660_firmware wcn7850_firmware sm8475 qcn5022_firmware sa8295p_firmware wcn6750_firmware ipq5018_firmware qca9985_firmware qca8337_firmware wcd9380_firmware ssg2125p ipq8072a qca9980_firmware ipq8076a_firmware ipq8078 qca6564au qca8084 ipq8173 qcn9001_firmware sdx55m_firmware ipq9008 wcn6856_firmware qcn5164 qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcn5024 sxr1230p qca8072_firmware qca9985 wcd9335_firmware qcn5052_firmware qcn9274_firmware wcn3980 ipq6018_firmware wsa8815 wcn6850 qcn6112 qca9986_firmware qca6426_firmware qca9984 ipq6028 ipq8064 qcn9024 ipq9574_firmware wcn3980_firmware sdx55m ipq8064_firmware sa8295p qca2062_firmware wcn6740_firmware qca6678aq ipq8078_firmware qcn5054 wcn6851_firmware qca9994 qca9980 qcn9024_firmware ipq8174_firmware sd870 wsa8832 wcn6855 ipq6018 qca9886_firmware qca6595_firmware qca6391_firmware qca2064 qca4024 sd780g_firmware wcd9370_firmware sd888_firmware ssg2115p_firmware ar8035_firmware qcn5024_firmware wsa8830 qcn9070 sxr2230p_firmware qca8082 qcn9072 qca8386 qca9992 qca6390_firmware qca2064_firmware ipq6000 wcd9370 ssg2115p qcn5152_firmware qca6426 qca6584au_firmware wcn3990_firmware qcn9000_firmware qca9984_firmware ipq5018 wcd9385_firmware sdxr2_5g_firmware ipq8074a qca2065 qcn5124_firmware qam8295p_firmware qcn6100_firmware qcn6102_firmware qca8082_firmware qcn5122_firmware qca6595au qcn6023_firmware qca6436_firmware ipq5010 qca6564au_firmware qca6584au qcn9274 ipq8174 qca9990 qcn9001 qcs6490 sdxr2_5g qcn5052 wcn7851 qcn6112_firmware qcn9074 qca8085 wsa8810_firmware wcd9335 qca8081 ipq8071a qcn6023 ipq8071a_firmware wcd9385 qca8085_firmware qca2065_firmware qcs6490_firmware sd_8cx_gen3 ar8035 csr8811 qca6390 wcd9375 qcn9100_firmware ipq5010_firmware ipq8074a_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qca8072 wcn3990 qcn9000 sd780g qca6554a sd865_5g qca6595 ar9380_firmware sd888 qcn6122_firmware ipq8065_firmware sxr1230p_firmware wsa8835 sd888_5g qcn5154 qca8075_firmware ssg2125p_firmware qca6574a wcn6855_firmware qca9889 qcn6132_firmware qcn9003_firmware qca9888 qca9994_firmware wcn6750 qcn9003 ipq8070a_firmware ipq8076_firmware qca6574_firmware qca9886 sxr2230p ipq8076 qca6574a_firmware qcn5152 qca6391 qcn6102 qcn9100 sdx65_firmware qcm6490_firmware wsa8832_firmware qcn9070_firmware ipq6028_firmware ipq8072a_firmware qca6574au qca9889_firmware ipq9574 qcn5122 wcd9341_firmware wsa8810 wcn6856 qcn5022 ipq6010_firmware wcn6740 qca6696 qca8075 qcn9022_firmware qcn6024 qcn9022 qca9990_firmware ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware ipq6000_firmware qcn9074_firmware Snapdragon

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-33244

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.36% / 58.18%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 08:01

Reachable assertion in Modem

Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout

Product-wcn3991_firmware wcn3991 wsa8830 qca8337_firmware wcd9380_firmware sd780g qca8337 wcn6856_firmware snapdragon_4_gen_1_firmware sdx65 wsa8835 wcd9380 sd888_5g wcd9370 wcn6855_firmware sm7325p wcn6750 wcn3998 wcd9385_firmware qcn6024_firmware sa515m sd_8_gen1_5g_firmware wsa8815 sm7325p_firmware wcn6850 sdx57m_firmware wcn7850 sd695 qcn9024 wcd9375_firmware qca8081_firmware wcn3998_firmware qca6391 wcn6740_firmware sd778g sdx65_firmware sa515m_firmware qcs6490 wcn7851 qcm6490_firmware sd480_firmware wcn6851_firmware wcn3988_firmware sd778g_firmware qcn9024_firmware wsa8810_firmware sdx57m sd480 wsa8810 wcn6855 wcn6851 qca8081 wcn7851_firmware wcn6856 wcd9385 sd695_firmware qcs6490_firmware wcn6740 sdx70m_firmware qca6391_firmware ar8035 wcd9375 sd780g_firmware wcd9370_firmware wsa8830_firmware qcn6024 sdx70m snapdragon_4_gen_1 qcm6490 sd888_5g_firmware wsa8835_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware sm8475 wcn6750_firmware ar8035_firmware Snapdragon wcn6740_firmware wcn3991_firmware qca8337_firmware wcd9380_firmware sdx65_firmware sa515m_firmware qcm6490_firmware sd480_firmware wcn6851_firmware wcn6856_firmware snapdragon_4_gen_1_firmware wcn3988_firmware sd778g_firmware qcn9024_firmware wsa8810_firmware wcn7851_firmware wcn6855_firmware sd695_firmware qcs6490_firmware sdx70m_firmware qca6391_firmware wcd9385_firmware qcn6024_firmware sd780g_firmware wcd9370_firmware sd_8_gen1_5g_firmware sm7325p_firmware wsa8830_firmware sdx57m_firmware wsa8815_firmware sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8835_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware wcn6750_firmware ar8035_firmware

CWE ID-CWE-617

Reachable Assertion

CVE-2022-33272

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.36% / 58.18%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 08:01

Reachable assertion in Modem

Transient DOS in modem due to reachable assertion.

Product-wcn3991_firmware wcn3991 wsa8830 qca8337_firmware wcd9380_firmware sd780g qca8337 sd865_5g sdx55m_firmware wcn6856_firmware snapdragon_4_gen_1_firmware sdx65 wsa8835 qcx315_firmware wcd9380 sd765g_firmware sd888_5g qca6390_firmware wcd9370 wcn6855_firmware sm7325p wcn6750 wcn3998 wcd9385_firmware qcn6024_firmware sd_8_gen1_5g_firmware wsa8815 sm7325p_firmware wcn6850 sdx57m_firmware sd765 wcn7850 sd695 sd768g_firmware sdx55_firmware qcn9024 wcd9375_firmware qca8081_firmware wcn3998_firmware sm7250p_firmware qca6391 sdx55m wcn6740_firmware sd778g sdx65_firmware wcn7851 qcs6490 qcm6490_firmware sd480_firmware wcn6851_firmware wcn3988_firmware sd778g_firmware qcn9024_firmware wsa8810_firmware sd765g sdx57m wcd9341_firmware sd480 sd765_firmware sd870 wsa8810 wcn6851 wcn6855 qca8081 wcn7851_firmware wcn6856 wcd9385 wcd9341 sd695_firmware sd768g qcs6490_firmware sd870_firmware wcn6740 sdx70m_firmware qca6391_firmware qca6390 ar8035 wcd9375 sd780g_firmware wcd9370_firmware sdx55 wsa8830_firmware qcn6024 sdx70m sd865_5g_firmware snapdragon_4_gen_1 qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sm7250p qcx315 sm8475 wcn6750_firmware ar8035_firmware Snapdragon

CWE ID-CWE-617

Reachable Assertion

CVE-2021-1907

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.33% / 55.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 05:30

Updated-03 Aug, 2024 | 16:25

Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-wcn3991_firmware wsa8830 sa6150p_firmware sa8145p_firmware csrb31024 sd_636 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6595au_firmware qca6390_firmware sa6155 wcd9370 qcs6125_firmware qca6426 qca6584au_firmware wcn3990_firmware sa415m wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware wcn3615_firmware sd710_firmware sa8155 sm7315_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3615 sm7250p_firmware wcn3998_firmware apq8053_firmware qca6436_firmware qca6564au_firmware qca6584au sa6155p_firmware sd778g sa515m_firmware sdxr2_5g qcs6125 sa8155_firmware sdm630 sa415m_firmware wcn3988_firmware sa6145p_firmware sd778g_firmware wcd9340 sa8195p wsa8810_firmware sd765g sd765_firmware qca6436 wcd9326 wcd9335 sa6155p wcn6851 qcs4290_firmware wcd9385 wcd9341 qca6696_firmware sd870_firmware qca6390 wcd9375 wcn3910_firmware sa8150p msm8953_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware sd660_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qca6564a wcn6750_firmware qcm6125_firmware wcn3991 wcd9380_firmware wcn3990 sd780g sd865_5g qca6595 qca6564au sdx55m_firmware wcn6856_firmware sd888 sd670_firmware qca6574 wsa8835 sd665_firmware wcd9380 sd888_5g qca6574a wcn6855_firmware sm7325p wcd9335_firmware wcn3980 wcn6750 sa515m qca6574_firmware wcd9340_firmware sd855 wsa8815 sm7325p_firmware sd665 wcn3910 wcn6850 qca6175a sd765 qca6426_firmware qca6574a_firmware sd768g_firmware sd835 wcn3980_firmware sm7315 qca6391 sdx55m wcn6740_firmware msm8953 qcm4290 csrb31024_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd710 sd_636_firmware sd670 qca6564a_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 wcn6856 sa6145p wcn3680b sd835_firmware sd768g qca6595_firmware sa8145p wcn6740 qca6696 sdm630_firmware qca6391_firmware sd845_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sdx55 apq8053 sa8155p sd845 sm7250p qca6175a_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-40521

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.14% / 33.92%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 12:21

Improper authorization in Modem

Transient DOS due to improper authorization in Modem

CWE ID-CWE-285

Improper Authorization

CWE ID-CWE-287

Improper Authentication

CVE-2022-40513

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.26% / 49.35%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 12:21

Uncontrolled resource consumption in WLAN Firmware.

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state.

Product-qcn5024_firmware ipq5018_firmware wsa8830 wcd9380_firmware qcn9070 ssg2125p qcn9000 ipq8072a ipq8076a_firmware ipq8173_firmware ipq8078 qca8084 ipq8173 qcn5164 qcn5124 qca4024_firmware qca8082 qcn9072 qca8386 qcn6122_firmware wsa8835 sxr1230p_firmware csr8811_firmware ipq8078a ipq5028_firmware wcd9380 ipq6000 qcn5154 qca8075_firmware ssg2125p_firmware qcn5024 ssg2115p qcn5152_firmware qca9889 qcn6132_firmware sxr1230p qca9888 qcn9000_firmware ipq5018 qcn5052_firmware qcn9274_firmware ipq8070a_firmware wcd9385_firmware ipq8076a qca8386_firmware qcn6024_firmware ipq6018_firmware ipq8076_firmware sd_8_gen1_5g_firmware qca8084_firmware ipq8074a ipq8076 qcn5124_firmware qca8082_firmware wcn7850 qcn5152 qcn5164_firmware qcn5122_firmware ipq6028 qcn9024 qca8081_firmware qcn6023_firmware ipq9574_firmware ipq5010 qcn9100 ipq8078a_firmware qcn9274 ipq8174 wcn7851 ipq5028 ipq8078_firmware qcn5052 wsa8832_firmware qcn9070_firmware ipq6010 ipq6028_firmware ipq8072a_firmware qcn9074 qca9889_firmware qca8085 ipq9574 qcn5122 qcn9024_firmware ipq8174_firmware qcn6132 wsa8832 qca8081 wcn7851_firmware ipq8071a qcn6023 ipq6018 qcn5022 ipq8071a_firmware wcd9385 qca8085_firmware qca9888_firmware qcn6122 ipq6010_firmware qcn5154_firmware csr8811 qca4024 qcn9100_firmware qca8075 qcn9022_firmware wsa8830_firmware qcn6024 qcn9022 ipq8070a ipq5010_firmware ipq8074a_firmware qcn9072_firmware wsa8835_firmware wcn7850_firmware ipq6000_firmware ssg2115p_firmware qcn9074_firmware sm8475 qcn5022_firmware Snapdragon

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2022-40504

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.20% / 41.91%

7 Day CHG+0.03%

Published-02 May, 2023 | 07:30

Updated-03 Aug, 2024 | 12:21

Reachable assertion in Modem

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

CWE ID-CWE-617

Reachable Assertion

CVE-2024-53027

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.31% / 54.42%

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN Host

Transient DOS may occur while processing the country IE.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-23385

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.18% / 39.68%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-07 Nov, 2024 | 20:05

Reachable Assertion in Modem

Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.

CWE ID-CWE-617

Reachable Assertion

CVE-2024-23353

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.30% / 53.39%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-26 Nov, 2024 | 15:41

Buffer Over-read in Multi Mode Call Processor

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2020-11270

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.24% / 47.81%

7 Day CHG~0.00%

Published-22 Feb, 2021 | 06:25

Updated-04 Aug, 2024 | 11:28

Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking