ByteOS

Snapdragon Auto, Snapdragon Mobile

Product

Versions

Affected

APQ8096AU, AR6003, MDM8215, MDM8215M, MDM8615M, MDM9215, MDM9310, MDM9615, MDM9615M, MSM8996AU, QCA6564A, QCA6564AU, QCA6574A, QCA6574AU, QCA6584AU, QCA6696, SA6145P, SA6150P, SA6155P, SA8145P, SA8150P, SA8155P, SA8195P, SA8540P, SA9000P, SDX55, SDX55M, WCD9341

Problem Types

Type	CWE ID	Description
text	N/A	Use After Free in Automotive Multimedia

Type: text

CWE ID: N/A

Description: Use After Free in Automotive Multimedia

Metrics

Version	Base score	Base severity	Vector
3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:01 Apr, 2022 | 05:15

Updated At:09 Apr, 2022 | 00:30

Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 4.6

Base severity: MEDIUM

Vector:

AV:L/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

>>apq8096au_firmware>>-

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

>>apq8096au>>-

cpe:2.3:o:qualcomm:ar6003_firmware:-:*:*:*:*:*:*:*

>>ar6003_firmware>>-

cpe:2.3:h:qualcomm:ar6003:-:*:*:*:*:*:*:*

>>ar6003>>-

cpe:2.3:o:qualcomm:mdm8215_firmware:-:*:*:*:*:*:*:*

>>mdm8215_firmware>>-

cpe:2.3:h:qualcomm:mdm8215:-:*:*:*:*:*:*:*

>>mdm8215>>-

cpe:2.3:o:qualcomm:mdm8215m_firmware:-:*:*:*:*:*:*:*

>>mdm8215m_firmware>>-

cpe:2.3:h:qualcomm:mdm8215m:-:*:*:*:*:*:*:*

>>mdm8215m>>-

cpe:2.3:o:qualcomm:mdm8615m_firmware:-:*:*:*:*:*:*:*

>>mdm8615m_firmware>>-

cpe:2.3:h:qualcomm:mdm8615m:-:*:*:*:*:*:*:*

>>mdm8615m>>-

cpe:2.3:o:qualcomm:mdm9215_firmware:-:*:*:*:*:*:*:*

>>mdm9215_firmware>>-

cpe:2.3:h:qualcomm:mdm9215:-:*:*:*:*:*:*:*

>>mdm9215>>-

cpe:2.3:o:qualcomm:mdm9310_firmware:-:*:*:*:*:*:*:*

>>mdm9310_firmware>>-

cpe:2.3:h:qualcomm:mdm9310:-:*:*:*:*:*:*:*

>>mdm9310>>-

cpe:2.3:o:qualcomm:mdm9615_firmware:-:*:*:*:*:*:*:*

>>mdm9615_firmware>>-

cpe:2.3:h:qualcomm:mdm9615:-:*:*:*:*:*:*:*

>>mdm9615>>-

cpe:2.3:o:qualcomm:mdm9615m_firmware:-:*:*:*:*:*:*:*

>>mdm9615m_firmware>>-

cpe:2.3:h:qualcomm:mdm9615m:-:*:*:*:*:*:*:*

>>mdm9615m>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

>>msm8996au_firmware>>-

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

>>msm8996au>>-

cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*

>>qca6564a_firmware>>-

cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*

>>qca6564a>>-

cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*

>>qca6564au_firmware>>-

cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*

>>qca6564au>>-

cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*

>>qca6574a_firmware>>-

cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*

>>qca6574a>>-

cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*

>>qca6574au_firmware>>-

cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

>>qca6574au>>-

cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*

>>qca6584au_firmware>>-

cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*

>>qca6584au>>-

cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*

>>qca6696_firmware>>-

cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*

>>qca6696>>-

cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*

>>sa6145p_firmware>>-

cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*

>>sa6145p>>-

cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*

>>sa6150p_firmware>>-

cpe:2.3:h:qualcomm:sa6150p:-:*:*:*:*:*:*:*

>>sa6150p>>-

cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*

>>sa6155p_firmware>>-

cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*

>>sa6155p>>-

cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*

>>sa8145p_firmware>>-

cpe:2.3:h:qualcomm:sa8145p:-:*:*:*:*:*:*:*

>>sa8145p>>-

cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*

>>sa8150p_firmware>>-

cpe:2.3:h:qualcomm:sa8150p:-:*:*:*:*:*:*:*

>>sa8150p>>-

cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*

>>sa8155p_firmware>>-

cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*

>>sa8155p>>-

cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*

>>sa8195p_firmware>>-

cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*

>>sa8195p>>-

cpe:2.3:o:qualcomm:sa8540p_firmware:-:*:*:*:*:*:*:*

>>sa8540p_firmware>>-

cpe:2.3:h:qualcomm:sa8540p:-:*:*:*:*:*:*:*

>>sa8540p>>-

cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*

>>sa9000p_firmware>>-

cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*

>>sa9000p>>-

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov

CWE ID: CWE-416

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

2166Records found

CVE-2018-11934

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.82%

7 Day CHG~0.00%

Published-14 Jun, 2019 | 17:02

Updated-05 Aug, 2024 | 08:24

Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS605, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

Product-qca9377_firmware sd_850 mdm9150_firmware mdm9640_firmware sd_820a msm8996au_firmware sd_670_firmware sdx24 mdm9650 sd_636 msm8996au sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware mdm9206 qca9379_firmware qca6174a sd_425_firmware sdx24_firmware sd_625_firmware sd_450 qca9377 sd_845 mdm9206_firmware qcs605 mdm9640 mdm9650_firmware qca6574au_firmware sda660 sd_210_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 qca6574au sd_210 mdm9607 sd_636_firmware mdm9150 qca6174a_firmware sd_212_firmware sd_850_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sd_205 qca9379 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22082

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.12% / 32.22%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-03 Aug, 2024 | 03:00

Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qca9377_firmware sm6250p_firmware qcs610 sdx65 wcn3950_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware sd632 wcn3998 wcd9371_firmware wcn3950 sm4125 mdm9628 sd720g mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware qca4020 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware sa6155_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware sm7450_firmware sd680_firmware qca9367_firmware wcn3999 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 qualcomm215_firmware sd765g sw5100 qca4020_firmware qca6436 sd680 sa6155p wcn6851 qcs603_firmware wcn7851_firmware msm8937 mdm9250_firmware wcn3660_firmware wcd9341 pm8937_firmware qca6696_firmware wcd9371 sd750g sd870_firmware wcn3910_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 wcn6750_firmware sd450 wcn3610 wcn3991 wcd9380_firmware sdm429w msm8996au_firmware sw5100p wcd9330 qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 msm8937_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m sm8475_firmware wcn6740_firmware msm8953 sd678_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware qcs603 sd_636_firmware sd670 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 wsa8832 sw5100p_firmware qcs610_firmware sa6145p sdxr1 apq8096au ar8031 qcs405_firmware sdm630_firmware sd820_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 wcn3660 sm8475p_firmware qca9379 qcm2290 wcn3991_firmware wsa8830 sd678 qcs2290_firmware mdm9628_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 wcn3990_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware qca6595au wcn3615 wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 pm8937 wcn7851 qcs6490 sd429 sdxr2_5g qca9367 sdm630 mdm9607_firmware wcn3988_firmware sa6145p_firmware sd429_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 sm6250_firmware msm8953_firmware msm8917_firmware wcn3620_firmware sd820 qcm6490 sd888_5g_firmware wsa8835_firmware sdx20_firmware wcn3620 wcn6850_firmware wsa8815_firmware sm7450 apq8017 qca6564a qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sd888 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd765 qca6574a_firmware sd768g_firmware sm7315 apq8009 qca6391 sd460 sdxr1_firmware aqt1000_firmware sdx65_firmware mdm9626 qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sdx20 sd480_firmware mdm9626_firmware qca6574au sa8155p_firmware sd710 mdm9607 wcd9341_firmware wsa8810 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-22098

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.07% / 22.28%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon Auto

Product-apq8096au_firmware apq8096au Snapdragon Auto

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2022-22094

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 22.48%

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 03:00

memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Product-wcn3991_firmware wcn3991 wsa8830 wcd9380_firmware sd780g sd865_5g qca6431_firmware sdx55m_firmware wcn6856_firmware sd888 wsa8835 wcd9380 sd765g_firmware sd888_5g qca6420_firmware qca6390_firmware wcd9370 wcn6855_firmware sm8475p_firmware sm7325p qca6426 qrb5165n_firmware qca6430_firmware wcn6750 wcn3998 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware sd_8_gen1_5g_firmware wcd9340_firmware wsa8815 sm7325p_firmware qsm8350_firmware wcn6850 qsm8350 sd765 qca6426_firmware sm7315_firmware wcn7850 sd768g_firmware wcd9375_firmware wcn3998_firmware qrb5165m sm7315 sm7250p_firmware qca6391 sdx55m qca6420 qca6436_firmware qrb5165n qca6421_firmware sm8475_firmware sm7450_firmware aqt1000_firmware sd778g wcn6740_firmware sd_8cx_gen2 wcn7851 qcs6490 qrb5165_firmware qrb5165m_firmware sdxr2_5g qcm6490_firmware wsa8832_firmware qrb5165 wcn6851_firmware qca6430 qca6421 sd778g_firmware wcd9340 wsa8810_firmware sd765g wcd9341_firmware wsa8810 sd765_firmware sd870 qca6436 wcn6851 wsa8832 wcn6855 wcn7851_firmware wcn6856 wcd9385 wcd9341 sd768g qca6431 qcs6490_firmware sd870_firmware wcn6740 qca6391_firmware qca6390 wcd9375 sd_8cx aqt1000 sd780g_firmware wcd9370_firmware sd888_firmware wsa8830_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sm7250p sm7450 sm8475 wcn6750_firmware sm8475p Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CVE-2024-33038

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.75%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Untrusted Pointer Dereference in Computer Vision

Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.

Product-qcm8550_firmware wsa8845_firmware wsa8832 wsa8840 qcs8550_firmware snapdragon_8\+_gen_1 wcd9370 snapdragon_8_gen_1_firmware wcd9385 wcd9395_firmware qcs4490_firmware snapdragon_8_gen_1 wcn6740_firmware sxr1230p_firmware wcd9390_firmware fastconnect_6700 snapdragon_8_gen_3 wsa8815_firmware wsa8832_firmware sg8275p wcd9370_firmware wcd9395 snapdragon_8_gen_2 snapdragon_4_gen_2_firmware ssg2125p sg8275p_firmware qcm6490_firmware qcm4490 talynplus qcm4490_firmware wcd9390 qcm6490 wcn3950 wsa8810_firmware wsa8845h_firmware sm8550p_firmware qcm8550 wcn3988 qcs6490_firmware talynplus_firmware wsa8835 wsa8840_firmware snapdragon_8\+_gen_2 qcs5430 wsa8845h wcd9380_firmware qcm5430 wsa8815 qcm5430_firmware sd_8_gen1_5g wsa8830 snapdragon_ar2_gen_1_firmware sm8550p ssg2115p wcn6755_firmware wcn6740 snapdragon_8\+_gen_1_firmware sd_8_gen1_5g_firmware fastconnect_6900 fastconnect_7800_firmware snapdragon_4_gen_2 snapdragon_8_gen_3_firmware snapdragon_8_gen_2_firmware wcd9375_firmware sm8635 qcs5430_firmware ssg2125p_firmware sm8635_firmware wcd9385_firmware wcn3950_firmware fastconnect_6900_firmware wcd9380 qcs8550 fastconnect_7800 qcs4490 wcn6755 wcd9375 snapdragon_8\+_gen_2_firmware wsa8845 snapdragon_ar2_gen_1 wcn3988_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wsa8835_firmware sxr1230p wsa8810 ssg2115p_firmware qcs6490 wsa8830_firmware video_collaboration_vc3_platform Snapdragon wcn6740_firmware talynplus_firmware wcd9380_firmware qcm4490_firmware qcm8550_firmware qcs4490_firmware qcm6490_firmware wsa8832_firmware wsa8840_firmware sg8275p_firmware fastconnect_6900_firmware qcs8550_firmware wcn3988_firmware sxr1230p_firmware fastconnect_6700_firmware wcn3950_firmware wsa8810_firmware fastconnect_7800_firmware wcn6755_firmware snapdragon_ar2_gen_1_platform_firmware wcd9395_firmware snapdragon_8_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware sm8635_firmware qcm5430_firmware qcs6490_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware wcd9370_firmware sm8550p_firmware sd_8_gen1_5g_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8845_firmware wsa8815_firmware wsa8835_firmware ssg2115p_firmware wcd9375_firmware wsa8845h_firmware snapdragon_8_gen_2_mobile_platform_firmware

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-822

Untrusted Pointer Dereference

CVE-2024-33027

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 6.59%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-20 Nov, 2024 | 14:38

Improper Access Control in Graphics Linux

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.

CWE ID-CWE-284

Improper Access Control

CVE-2024-38413

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.03% / 8.34%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:58

Improper Input Validation in Computer Vision

Memory corruption while processing frame packets.

Product-fastconnect_7800_firmware wsa8840 snapdragon_8_gen_3_mobile_firmware wsa8845_firmware wsa8845h_firmware wsa8845 snapdragon_8_gen_3_mobile wcd9395_firmware wcd9390 wsa8840_firmware wsa8845h wcd9395 fastconnect_7800 wcd9390_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33021

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.29%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-20 Nov, 2024 | 19:28

Use of Uninitialized Variable in Automotive GPU

Memory corruption while processing IOCTL call to set metainfo.

CWE ID-CWE-457

Use of Uninitialized Variable

CWE ID-CWE-908

Use of Uninitialized Resource

CVE-2024-33056

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 7.62%

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:25

Buffer Over-read in MProc

Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

CVE-2024-33045

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 10.75%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Return of Stack Variable Address in Buses

Memory corruption when BTFM client sends new messages over Slimbus to ADSP.

CWE ID-CWE-562

Return of Stack Variable Address

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33047

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 10.75%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in Display

Memory corruption when the captureRead QDCM command is invoked from user-space.

Product-sdm429w_firmware qcs5430 wsa8845_firmware snapdragon_7c\+_gen_3 wsa8840 wsa8845h wcd9380_firmware wcd9370 qcm5430 qcm5430_firmware snapdragon_429_firmware wsa8830 wcd9385 sc8380xp snapdragon_8cx_gen_3_firmware sc8380xp_firmware fastconnect_6700 wcn3620 wcd9375_firmware fastconnect_6900 fastconnect_7800_firmware snapdragon_7c\+_gen_3_firmware wcd9370_firmware qcs5430_firmware wcd9385_firmware fastconnect_6900_firmware snapdragon_8cx_gen_3 wcd9380 qcm6490_firmware wcn3660b wcn3620_firmware fastconnect_7800 wcd9375 qcm6490 wsa8845 fastconnect_6700_firmware wsa8845h_firmware snapdragon_429 video_collaboration_vc3_platform_firmware qcs6490_firmware wsa8835_firmware sdm429w qcs6490 wcn3660b_firmware wsa8835 wsa8840_firmware wsa8830_firmware video_collaboration_vc3_platform Snapdragon qcm5430_firmware wcd9380_firmware qcs6490_firmware qcm6490_firmware qcs5430_firmware wsa8840_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware fastconnect_6900_firmware wcd9370_firmware sc8380xp_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wcd9375_firmware wsa8845h_firmware

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

CVE-2022-22081

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 27.05%

7 Day CHG~0.00%

Published-16 Sep, 2022 | 05:25

Updated-03 Aug, 2024 | 03:00

Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2024-38423

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.64%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:05

Updated-07 Nov, 2024 | 19:46

Buffer Copy Without Checking Size of Input in Graphics Linux

Memory corruption while processing GPU page table switch.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-33022

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.29%

7 Day CHG~0.00%

Published-05 Aug, 2024 | 14:21

Updated-20 Nov, 2024 | 19:30

Integer Overflow or Wraparound in Automotive GPU

Memory corruption while allocating memory in HGSL driver.

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2023-24852

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.52%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Improper Authentication in Core

Memory Corruption in Core due to secure memory access by user while loading modem image.

CWE ID-CWE-287

Improper Authentication

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-24844

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 5.72%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-27 Feb, 2025 | 20:48

Improper Access Control in Core

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.

Product-wsa8830 qca8337_firmware wcd9380_firmware qca8337 sg8275p_firmware qru1032 qcm8550 qdu1010_firmware qru1052 ar8035_firmware qdx1011 qdu1000 wsa8840 wsa8835 qdu1110_firmware wcn3950_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wcd9380 fastconnect_6700 snapdragon_x70_modem-rf_system wcd9370 snapdragon_4_gen_2_mobile_platform_firmware qdu1110 sg8275p snapdragon_8_gen_2_mobile_platform qru1062 wcd9385_firmware wsa8845 wcn3950 qcn6024_firmware wsa8815 qru1032_firmware wsa8845_firmware snapdragon_4_gen_2_mobile_platform qcn9024 wsa8845h_firmware qca8081_firmware fastconnect_7800 snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qcm4490_firmware qcs4490_firmware snapdragon_x70_modem-rf_system_firmware snapdragon_x65_5g_modem-rf_system wsa8840_firmware wsa8832_firmware fastconnect_6900 fastconnect_6900_firmware qcs8550_firmware wcn3988_firmware qru1062_firmware qdu1010 qdx1011_firmware fastconnect_6700_firmware qcn9024_firmware wsa8810_firmware fastconnect_7800_firmware snapdragon_8\+_gen_2_mobile_platform wsa8810 wsa8845h wsa8832 wcd9395_firmware qdx1010_firmware qdu1000_firmware qca8081 sm8550p qcm4490 wcd9385 qcs4490 wcd9395 qcs8550 ar8035 qru1052_firmware wcd9370_firmware sm8550p_firmware qdx1010 wcd9390 wcd9390_firmware wsa8830_firmware qcn6024 qdu1210 wcn3988 wsa8815_firmware wsa8835_firmware qdu1210_firmware snapdragon_8_gen_2_mobile_platform_firmware Snapdragon

CWE ID-CWE-284

Improper Access Control

CVE-2023-24851

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.65%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN HOST

Memory Corruption in WLAN HOST while parsing QMI response message from firmware.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-38420

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.8||HIGH

EPSS-0.04% / 9.48%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:56

Improper Input Validation in Hypervisor

Memory corruption while configuring a Hypervisor based input virtual device.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33065

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.29%

7 Day CHG~0.00%

Published-07 Oct, 2024 | 12:58

Updated-11 Aug, 2025 | 15:06

Improper Input Validation in Camera

Memory corruption while taking snapshot when an offset variable is set by camera driver.

CWE ID-CWE-20

Improper Input Validation

CVE-2022-22059

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.11% / 29.38%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Product-wcn3991_firmware wsa8830 sd678 qcs610 qcs2290_firmware sd_636 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware msm8917 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 sd632 wcn3990_firmware wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware sd720g wcn3615_firmware sd_8_gen1_5g_firmware wcn3660b sd662 sd460_firmware wcn7850 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcd9375_firmware wcn3615 wcn3998_firmware sm7250p_firmware qca6420 qca6436_firmware apq8053_firmware sm7450_firmware sd680_firmware sd778g sa6155p_firmware wcn7851 sd429 sdxr2_5g sd662_firmware sdm630 wcn3988_firmware qca6430 sd429_firmware sm6250 sd778g_firmware wcd9340 sa8195p apq8017_firmware wsa8810_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 sd680 wcd9326 sa6155p wcd9335 wcn6851 wcn7851_firmware qcs4290_firmware wcd9385 wcd9341 qca6696_firmware sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware sd660_firmware wcn7850_firmware wsa8815_firmware sa8195p_firmware sm7450 wsa8835_firmware apq8017 sm8475 wcn6750_firmware qcm2290_firmware wcn3991 wcd9380_firmware wcn3990 sd_675 sd780g sd865_5g sdx55m_firmware wcn6856_firmware wsa8835 qca6574 sd632_firmware wcd9380 sd888_5g qualcomm215 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p qca6430_firmware wcd9335_firmware wcn3980 sd439_firmware wcn6750 qca6574_firmware wcd9340_firmware sd855 wsa8815 sm7325p_firmware wcn6850 wcn3910 sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware sd835 wcn3980_firmware sd460 qca6391 sd730 sdx55m sm8475_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware qcm4290 sdx50m wcn3680_firmware wsa8832_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd_636_firmware wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 wsa8832 qcs610_firmware wcn6856 wcn3680b sd835_firmware sd768g wcn6740 qca6696 sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 apq8053 sa8155p sd675 sd439 sm7250p sd720g_firmware sm8475p_firmware qcm2290 sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-125

Out-of-bounds Read

CVE-2023-24850

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.79%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Improper Validation of Array Index in HLOS

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2023-24853

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 6.79%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-27 Feb, 2025 | 20:48

Improper Input Validation in HLOS

Memory Corruption in HLOS while registering for key provisioning notify.

Product-qam8255p_firmware snapdragon_8_gen_1_mobile_platform wsa8830 sa6150p_firmware sa8145p_firmware sxr2230p_firmware fsm10056 qca8337 qam8650p qfw7124 sg8275p_firmware qca6431_firmware qam8775p qru1052 snapdragon_865_5g_mobile_platform snapdragon_888_5g_mobile_platform qcn6224_firmware sc8280xp-bb_firmware sm7250-ac_firmware wsa8840 wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6595au_firmware sa6155 wcd9370 ssg2115p qca6564 qca6426 sc8280xp-ab qdu1110 snapdragon_8_gen_2_mobile_platform sm8250-ab qamsrv1h wcd9385_firmware qam8295p wcn3950 fastconnect_6200 qamsrv1h_firmware sd_8_gen1_5g_firmware qsm8350_firmware qsm8350 qam8295p_firmware sa8155 sa9000p_firmware snapdragon_x55_5g_modem-rf_system qca6574au_firmware snapdragon_4_gen_2_mobile_platform qca6595au qca8081_firmware sa6155_firmware qfw7114 sm7250p_firmware wsa8845h_firmware qca6436_firmware qca6564au_firmware sa6155p_firmware snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware qcs8155 wsa8840_firmware qca6698aq sa4155p_firmware sa8155_firmware qcs8550_firmware sm7250-ab_firmware sm8250-ac wcn3988_firmware qru1062_firmware sa6145p_firmware srv1h qca6421 sm7250-aa snapdragon_8\+_gen_1_mobile_platform fastconnect_6700_firmware sa8195p wcd9340 wsa8810_firmware qcn6224 fsm10056_firmware qca6436 snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware sa6155p snapdragon_x75_5g_modem-rf_system qdu1000_firmware qca8081 wcd9395_firmware wsa8845h qca6698aq_firmware qcm4490 wcd9385 sxr2130_firmware qam8775p_firmware sa8255p qca6431 qca6696_firmware qca6797aq ar8035 qru1052_firmware sa8150p wcd9390 qcc710_firmware sm8250-ac_firmware wsa8830_firmware sd865_5g_firmware wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware qca6564a sa8295p_firmware sa4150p snapdragon_8_gen_2_mobile_platform_firmware qca8337_firmware wcd9380_firmware ssg2125p sd865_5g fastconnect_6800 qca6595 qru1032 qca6564au qcm8550 sm8350-ac_firmware qdu1010_firmware qdx1011 qdu1000 wsa8835 qca6574 sxr1230p_firmware qdu1110_firmware sa8540p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware sa4155p qcn6274 sd_8_gen1_5g wcd9380 fastconnect_6700 snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware qca6574a sxr2130 sxr1230p sg8275p qfw7114_firmware qru1062 wsa8845 sa8650p sa9000p qca6574_firmware sm7250-ab wcd9340_firmware wsa8815 sxr2230p qru1032_firmware snapdragon_xr2_5g_platform_firmware wsa8845_firmware qca6426_firmware qca6574a_firmware fastconnect_6200_firmware snapdragon_x55_5g_modem-rf_system_firmware sm8250-ab_firmware qca6391 sa8295p qca6421_firmware fastconnect_7800 sc8280xp-ab_firmware qcm4490_firmware qcn6274_firmware qcs4490_firmware snapdragon_xr2_5g_platform snapdragon_x65_5g_modem-rf_system sa8650p_firmware wsa8832_firmware fastconnect_6900 snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900_firmware srv1h_firmware qca6797aq_firmware qdu1010 qca6574au sa8155p_firmware qdx1011_firmware qca6564a_firmware fastconnect_7800_firmware snapdragon_8\+_gen_2_mobile_platform sm7250-aa_firmware wsa8810 wsa8832 qdx1010_firmware sa8540p sm7250-ac sm8550p snapdragon_8_gen_1_mobile_platform_firmware snapdragon_ar2_gen_1_platform sa6145p sm8350-ac qam8650p_firmware qca6564_firmware qcc710 qcs4490 qca6595_firmware sa8145p sc8280xp-bb qca6696 wcd9395 qca6391_firmware qcs8550 sa4150p_firmware wcd9370_firmware sm8550p_firmware qdx1010 sa6150p wcd9390_firmware sa8155p qdu1210 sm7250p snapdragon_8\+_gen_1_mobile_platform_firmware ssg2115p_firmware qcs8155_firmware qfw7124_firmware qam8255p qdu1210_firmware ar8035_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-22667

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 15.42%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Integer Overflow or Wraparound in Audio

Memory Corruption in Audio while allocating the ion buffer during the music playback.

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2023-22387

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.42%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in Qualcomm IPC

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CVE-2023-22384

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 3.59%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-27 Feb, 2025 | 20:48

Buffer Copy Without Checking Size of Input in VR Service

Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-22386

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.42%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN HOST

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-22666

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.49%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:15

Updated-02 Aug, 2024 | 10:13

Integer Overflow or Wraparound in Audio

Memory Corruption in Audio while playing amrwbplus clips with modified content.

Product-qca9377_firmware sa6150p_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sd632 msm8108 sa415m sm4375 wcn3998 wcd9371_firmware msm8108_firmware qam8295p wcn3950 sm4125 sd720g mdm9628 sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware qca4020 sm7315_firmware qca6574au_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware sdx12_firmware qca6420 wcd9360 sd680_firmware wcn3999 qrb5165_firmware qrb5165m_firmware qca6698aq qcs6125 sa4155p_firmware sa8155_firmware sd662_firmware qcs405 qca6430 wcd9340 sd626_firmware sd765g sd680 qca4020_firmware qca6436 wcn6851 sa6155p qca6698aq_firmware msm8209_firmware wcn3660_firmware wcd9341 qca6431 qca6696_firmware wcd9371 sd870_firmware sd750g wcn3910_firmware sxr2150p_firmware sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware sa8195p_firmware msm8208_firmware wcn6750_firmware sa8295p_firmware sd450 wcn3610 msm8608 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w msm8996au_firmware sd625_firmware qca6564au sdx55m_firmware wcn6856_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qcn9012_firmware sd626 qca6430_firmware sd439_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 sdx55m sa8295p qca6421_firmware wcn6740_firmware sd678_firmware ar8031_firmware wcn3680_firmware qrb5165 wcn6851_firmware sd670 sd_636_firmware qca6564a_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware qsm8250 sa6145p sd695_firmware sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware sa8145p sdm630_firmware qca6391_firmware sa4150p_firmware wcd9370_firmware qm215_firmware sd780g_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sd439 wcn3660 qca9379 sa4155p sxr2150p ar8035_firmware qsm8250_firmware qcm2290 wcn3991_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware csrb31024 mdm9628_firmware sd_636 csra6620 qcs4290 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware sd625 qca6564 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qca9377 wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 qam8295p_firmware qcn9011_firmware sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware qca6584au sd778g sa6155p_firmware msm8208 qca6310 sa515m_firmware sd429 qcs6490 sdxr2_5g sdm630 sa415m_firmware wcn3988_firmware qcn9074 sd205 qm215 qca6421 sd429_firmware sd778g_firmware sa6145p_firmware sa8195p sm6250 apq8017_firmware wsa8810_firmware sm4375_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 sm6250_firmware sda429w msm8917_firmware sd210 wcn3620_firmware wsa8815_firmware sd888_5g_firmware qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a sa4150p qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qca6595 sdx24 qcn9012 sd888 wsa8835 qcx315_firmware msm8996au sdm429w_firmware sd665_firmware sd_8_gen1_5g sd888_5g sm6250p qca6574a wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 sa515m qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 qrb5165m sm7315 apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m sd480_firmware qcn9011 qca6574au sd710 sa8155p_firmware sd205_firmware wcd9341_firmware qcm6125 wsa8810 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sa6150p apq8096au_firmware sd845 sm7250p sd720g_firmware sdx12 qcn9074_firmware qcs410_firmware Snapdragon

CWE ID-CWE-190

Integer Overflow or Wraparound

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21662

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.49%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Memory corruption in Core Platform while printing the response buffer in log.

Product-qca9377_firmware sd_8cx_gen3_firmware sa6150p_firmware qca8337 qca6431_firmware sdx65 wcn3950_firmware ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 qcs605_firmware sd_675_firmware wcn3998 qam8295p sd_8cx_gen2_firmware qcn6024_firmware qca8386_firmware wcn3950 sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware qca6420 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware qca6698aq sa4155p_firmware sa8155_firmware qca6430 sdx65m wcd9340 qcn6132 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qcn6122 wcd9341 qca6431 qca6696_firmware sd870_firmware ipq9008_firmware sd_8cx sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd660_firmware wcn7850_firmware sa8195p_firmware sa8295p_firmware wcn6750_firmware ipq5018_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p qca8084 qca6564au sdx55m_firmware wcn6856_firmware ipq9008 sd670_firmware qca6574 wcd9380 sdx50m_firmware sxr1230p sdx24_firmware qca6430_firmware qcn9012_firmware qcn9274_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 qca6426_firmware qcn9024 ipq9574_firmware wcn3980_firmware sdx55m sa8295p qca6421_firmware wcn6740_firmware sd678_firmware qrb5165 wcn6851_firmware qcs603 sd670 qca6564a_firmware qcn9024_firmware sdx57m sd870 wsa8832 wcn6855 sa8540p sa6145p qca6595_firmware sa8145p qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sdx70m ssg2115p_firmware qcs8155_firmware sa4155p ar8035_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sa8145p_firmware fsm10056 qca8082 qcn9072 qca8386 sd765g_firmware qca6420_firmware qca6390_firmware wcd9370 sd675_firmware ssg2115p qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware ipq5018 qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware qam8295p_firmware qcn9011_firmware qca8082_firmware sa8155 sa9000p_firmware sdx55_firmware qca6595au qcn6023_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware sd778g sa6155p_firmware qca6310 qcn9274 qcs8155 wcn7851 qcs6490 sdxr2_5g qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 sdx65m_firmware qca6174a_firmware wcd9385 qca8085_firmware qcs6490_firmware sd_8cx_gen3 sdx70m_firmware ar8035 qca6390 wcd9375 aqt1000 qcn9100_firmware ipq5010_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qca6564a sa4150p wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 sxr1230p_firmware sa8540p_firmware sd_8_gen1_5g sd888_5g ssg2125p_firmware qca6574a wcn6855_firmware qca6174a sm7325p qcn6132_firmware qca6310_firmware wcn6750 sa9000p qca6574_firmware sd855 sm7325p_firmware sdx57m_firmware sd765 qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware sm7315 qca6391 aqt1000_firmware qcn9100 sdx65_firmware qcm6490_firmware sdx50m wsa8832_firmware qcn9070_firmware qcn9011 qca6574au sa8155p_firmware ipq9574 wcd9341_firmware wsa8810 wcn6856 qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sa6150p qcn9022_firmware qcn6024 qcn9022 sd845 qcn9072_firmware sm7250p qcn9074_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-21637

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.50%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Memory corruption in Linux while calling system configuration APIs.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21657

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.60%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:39

Updated-02 Aug, 2024 | 09:44

Improper Input Validation in Audio

Memoru corruption in Audio when ADSP sends input during record use case.

CWE ID-CWE-20

Improper Input Validation

CVE-2023-21638

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 8.11%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Incorrect Type Conversion or Cast in Video

Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CVE-2023-21649

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 8.23%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-02 Aug, 2024 | 09:44

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Memory corruption in WLAN while running doDriverCmd for an unspecific command.

Product-wcn3991_firmware wsa8830 sa6150p_firmware sa8145p_firmware qcs610 qca8337 qca6431_firmware mdm9628_firmware mdm9650 wcn3950_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware wcd9370 qca6426 qca6584au_firmware sm4375 wcn3998 qca6554a_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 mdm9628 wcn3660b qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3610_firmware qca6420 qca6436_firmware qca6564au_firmware qca6584au sa6155p_firmware sdxr2_5g wcn3988_firmware qca6430 qcn9074 sa6145p_firmware qca6421 sa8195p wsa8810_firmware sm4375_firmware sw5100 qca6436 wcn6851 sa6155p wcd9385 wcd9341 qca6431 qca6696_firmware sd870_firmware qca6390 wcd9375 aqt1000 sa8150p wsa8830_firmware sda429w sd855_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qca6564a wcn3610 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sw5100p qca6554a sd865_5g qca6595 qca6564au qcc5100 sdx55m_firmware wsa8835 qca6574 wcd9380 qcs410 qca6574a qca6430_firmware wcn3980 qca6574_firmware sd855 wsa8815 wcn6850 mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 wcn3980_firmware qca6391 sdx55m qcc5100_firmware qca6421_firmware aqt1000_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware qca6564a_firmware wcd9341_firmware sd480 sd870 wsa8810 sw5100p_firmware qcs610_firmware sa6145p wcn3680b sd695_firmware apq8096au qca6595_firmware sa8145p qca6696 qca6391_firmware wcd9370_firmware sa6150p sdx55 apq8096au_firmware sa8155p sw5100_firmware qcn9074_firmware qcs410_firmware Snapdragon wcn3991_firmware qca8337_firmware sda429w_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware qca6431_firmware sdx55m_firmware mdm9628_firmware wcn3950_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware qca6584au_firmware qca6430_firmware qca6554a_firmware wcd9385_firmware sdxr2_5g_firmware qca6574_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware wcn3998_firmware wcn3980_firmware wcn3610_firmware qca6436_firmware qcc5100_firmware qca6421_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware sd480_firmware wcn6851_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware qca6564a_firmware wsa8810_firmware wcd9341_firmware sm4375_firmware sw5100p_firmware qcs610_firmware sd695_firmware qca6696_firmware qca6595_firmware sd870_firmware qca6391_firmware wcd9370_firmware apq8096au_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware qcn9074_firmware qcs410_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21636

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 3.84%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:23

Updated-02 Aug, 2024 | 09:44

Improper Validation of Array Index in Linux

Memory Corruption due to improper validation of array index in Linux while updating adn record.

Product-wcn3991_firmware wcn3991 wsa8830 sda429w_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware sw5100p sd865_5g qcc5100 sdx55m_firmware wcd9360_firmware wsa8835 wcd9380 sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware wcd9370 qca6574a qca6426 qca6430_firmware wcn3980 sm4375 wcn3998 wcd9385_firmware sdxr2_5g_firmware sa515m wcn3660b sd855 wsa8815 wcn6850 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3980_firmware qca6391 wcn3610_firmware wcd9360 qca6420 qca6436_firmware sdx55m qcc5100_firmware aqt1000_firmware sa6155p_firmware sa515m_firmware sdxr2_5g sd480_firmware wcn6851_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sm4375_firmware sw5100 sd480 sd870 qca6436 wcn6851 wsa8810 sa6155p sw5100p_firmware sa6145p wcn3680b wcd9385 wcd9341 sd695_firmware qca6696_firmware sa8145p sd870_firmware qca6696 qca6391_firmware qca6390 wcd9375 wcd9370_firmware aqt1000 sa8150p sa6150p sdx55 sa8155p wsa8830_firmware sda429w sd855_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware wcn3610 Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2023-21671

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.06% / 19.37%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Improper Input Validation in Core

Memory Corruption in Core during syscall for Sectools Fuse comparison feature.

Product-snapdragon_780g_5g_mobile_platform sm7315_firmware snapdragon_782g_mobile_platform wcd9380_firmware wcd9370 snapdragon_888\+_5g_mobile_platform_sm7315 snapdragon_778g\+_5g_mobile_platform wsa8830 snapdragon_780g_5g_mobile_platform_firmware snapdragon_888_5g_mobile_platform wcd9385 sd888 qsm8350 sd888_firmware snapdragon_7c\+_gen_3_compute_firmware wcn6740 wcn6740_firmware fastconnect_6700 snapdragon_778g\+_5g_mobile_platform_firmware qsm8350_firmware wcd9375_firmware fastconnect_6900 qca6391 wcd9370_firmware snapdragon_778g_5g_mobile_platform_firmware snapdragon_782g_mobile_platform_firmware wcd9385_firmware fastconnect_6900_firmware wcd9380 qcm6490_firmware sm7325p_firmware snapdragon_888_5g_mobile_platform_firmware wcd9375 sm7325p qcm6490 snapdragon_778g_5g_mobile_platform fastconnect_6700_firmware video_collaboration_vc3_platform_firmware snapdragon_888\+_5g_mobile_platform__firmware qcs6490_firmware wsa8835_firmware qcs6490 snapdragon_7c\+_gen_3_compute wsa8835 qca6391_firmware wsa8830_firmware video_collaboration_vc3_platform Snapdragon

CWE ID-CWE-20

Improper Input Validation

CVE-2023-21641

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.03% / 7.50%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-24 Oct, 2024 | 19:31

Permissions, Privileges, and Access Controls in Display

An app with non-privileged access can change global system brightness and cause undesired system behavior.

CWE ID-CWE-264

Not Available

CVE-2023-21633

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.50%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux

Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21663

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 3.48%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-02 Aug, 2024 | 09:44

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display

Memory Corruption while accessing metadata in Display.

Product-sda429w_firmware wcd9380_firmware sa6150p_firmware wsa8830 sa8145p_firmware sw5100p qcc5100 wcn6856_firmware wsa8835 sd_8_gen1_5g wcd9380 sa8150p_firmware sd888_5g qca6420_firmware wcn6855_firmware qca6430_firmware wcn3980 wcn3998 wcd9385_firmware sd_8_gen1_5g_firmware sd855 wcn3660b wcn6850 wsa8815 wcn3660b_firmware wcn7850 qca6574au_firmware wcn3680b_firmware wcn3998_firmware wcn3980_firmware wcn3610_firmware qca6420 qcc5100_firmware aqt1000_firmware sa6155p_firmware wcn7851 wcn6851_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 wcn6855 wcn6851 sa6155p sw5100p_firmware wcn7851_firmware wcn6856 sa6145p wcn3680b wcd9385 wcd9341 qca6696_firmware sa8145p qca6696 aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sda429w sd855_firmware wsa8815_firmware wcn3988 wsa8835_firmware sd888_5g_firmware wcn6850_firmware wcn7850_firmware sa8195p_firmware sw5100_firmware wcn3610 Snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21665

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.07% / 22.03%

7 Day CHG~0.00%

Published-02 May, 2023 | 05:08

Updated-02 Aug, 2024 | 09:44

Incorrect Type Conversion or Cast in Graphics

Memory corruption in Graphics while importing a file.

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CVE-2023-21643

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.1||CRITICAL

EPSS-0.07% / 21.09%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-02 Aug, 2024 | 09:44

Untrusted Pointer Dereference in Automotive

Memory corruption due to untrusted pointer dereference in automotive during system call.

CWE ID-CWE-822

Untrusted Pointer Dereference

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33052

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.75%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption when user provides data for FM HCI command control operations.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21634

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.11%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-02 Aug, 2024 | 09:44

Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

Product-snapdragon_855\+\/860_mobile_platform_firmware wsa8830 wcd9380_firmware sa6150p_firmware wcn3990 sa8145p_firmware sw5100p sd865_5g fastconnect_6800 snapdragon_w5\+_gen_1_wearable_platform snapdragon_835_mobile_pc_platform snapdragon_870_5g_mobile_platform_firmware snapdragon_865_5g_mobile_platform wsa8835 wcd9380 sa8150p_firmware qca6420_firmware qca6595au_firmware snapdragon_wear_4100\+_platform_firmware snapdragon_855\+\/860_mobile_platform sxr2130 snapdragon_wear_4100\+_platform qca6426 wcn3990_firmware qca6310_firmware qca6430_firmware wcd9335_firmware wcn3980 fastconnect_6200 wcd9340_firmware wcn3660b sd855 wsa8815 qca6320 snapdragon_865\+_5g_mobile_platform snapdragon_xr2_5g_platform_firmware qca6426_firmware wcn3660b_firmware qca6320_firmware snapdragon_x55_5g_modem-rf_system qca6574au_firmware snapdragon_835_mobile_pc_platform_firmware wcn3680b_firmware fastconnect_6200_firmware qca6595au sd835 wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware aqt1000_firmware sa6155p_firmware qca6310 snapdragon_865\+_5g_mobile_platform_firmware snapdragon_870_5g_mobile_platform snapdragon_xr2_5g_platform fastconnect_6900 fastconnect_6900_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware wcd9340 sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 qca6436 wcd9335 sa6155p sw5100p_firmware sa6145p wcn3680b sd835_firmware sxr2130_firmware wcd9341 qca6696_firmware sa8145p qca6696 qca6391_firmware snapdragon_855_mobile_platform_firmware aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware sw5100_firmware fastconnect_6800_firmware snapdragon_855_mobile_platform wcn3610 Snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21632

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.49%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:39

Updated-02 Aug, 2024 | 09:44

Stack-based Buffer Overflow in Automotive GPU

Memory corruption in Automotive GPU while querying a gsl memory node.

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33035

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 16.98%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-05 Sep, 2024 | 03:56

Integer Overflow or Wraparound in Display

Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2023-21655

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 3.59%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:23

Updated-02 Aug, 2024 | 09:44

Integer Overflow or Wraparound in Display

Memory corruption in Audio while validating and mapping metadata.

Product-sa6155p_firmware sda429w_firmware wcd9380_firmware sa6150p_firmware wsa8830 sa8145p_firmware sw5100p wcn7851 wcn6851_firmware qcc5100 wcn6856_firmware wcn3988_firmware qca6574au sa6145p_firmware sa8155p_firmware wsa8835 sa8195p sd_8_gen1_5g wcd9380 sa8150p_firmware sd888_5g sw5100 wcn6855 wcn6851 sa6155p sw5100p_firmware wcn7851_firmware wcn6856 sa6145p wcn3680b wcn6855_firmware wcd9385 qca6696_firmware wcn3980 sa8145p qca6696 qca6391_firmware wcd9385_firmware sa8150p sd_8_gen1_5g_firmware sa6150p wcn3660b wcn6850 sa8155p wsa8830_firmware sda429w wcn3988 sd888_5g_firmware wcn3660b_firmware wcn6850_firmware wcn7850_firmware qca6574au_firmware sa8195p_firmware wcn3680b_firmware wcn7850 sw5100_firmware wsa8835_firmware wcn3980_firmware qca6391 wcn3610_firmware wcn3610 qcc5100_firmware Snapdragon wcn6855_firmware sa6155p_firmware sda429w_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware qca6696_firmware qca6391_firmware wcd9385_firmware wcn6851_firmware wcn6856_firmware sd_8_gen1_5g_firmware wcn3988_firmware wsa8830_firmware sa6145p_firmware sa8155p_firmware sd888_5g_firmware wcn3660b_firmware wcn6850_firmware wcn7850_firmware sa8150p_firmware qca6574au_firmware sa8195p_firmware wcn3680b_firmware wsa8835_firmware sw5100_firmware wcn3980_firmware sw5100p_firmware wcn3610_firmware wcn7851_firmware qcc5100_firmware

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2023-21627

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 7.05%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-02 Aug, 2024 | 09:44

Incorrect Type Conversion or Cast in Trusted Execution Environment

Memory corruption in Trusted Execution Environment while calling service API with invalid address.

Product-wsa8830 sda429w_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware sw5100p sd865_5g qcc5100 sdx55m_firmware wcn6856_firmware wsa8835 sd_8_gen1_5g wcd9380 sa8150p_firmware sd888_5g qca6420_firmware qca6595au_firmware qca6390_firmware wcn6855_firmware qca6426 qca6430_firmware wcn3980 wcn3998 wcd9385_firmware sdxr2_5g_firmware sd_8_gen1_5g_firmware wcn3660b sd855 wsa8815 wcn6850 qca6426_firmware wcn3660b_firmware wcn7850 qca6574au_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcn3980_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware sdx55m qcc5100_firmware aqt1000_firmware sa6155p_firmware qcs8155 wcn7851 sdxr2_5g wcn6851_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 sd870 qca6436 wcn6851 wcn6855 sa6155p sw5100p_firmware wcn7851_firmware wcn6856 sa6145p wcn3680b wcd9385 wcd9341 qca6696_firmware sa8145p sd870_firmware qca6696 qca6391_firmware qca6390 aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sda429w sd855_firmware sd865_5g_firmware wcn3988 sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qcs8155_firmware sw5100_firmware wcn3610 Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-704

Incorrect Type Conversion or Cast

CVE-2023-21664

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.49%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Memory Corruption in Core Platform while printing the response buffer in log.

Product-qca9377_firmware sd_8cx_gen3_firmware sa6150p_firmware qca8337 qca6431_firmware sdx65 wcn3950_firmware ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 qcs605_firmware sd_675_firmware wcn3998 qam8295p sd_8cx_gen2_firmware qcn6024_firmware qca8386_firmware wcn3950 sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware qca6420 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware qca6698aq sa4155p_firmware sa8155_firmware qca6430 sdx65m wcd9340 qcn6132 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qcn6122 wcd9341 qca6431 qca6696_firmware sd870_firmware ipq9008_firmware sd_8cx sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd660_firmware wcn7850_firmware sa8195p_firmware sa8295p_firmware wcn6750_firmware ipq5018_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p qca8084 qca6564au sdx55m_firmware wcn6856_firmware ipq9008 sd670_firmware qca6574 wcd9380 sdx50m_firmware sxr1230p sdx24_firmware qca6430_firmware qcn9012_firmware qcn9274_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 qca6426_firmware qcn9024 ipq9574_firmware wcn3980_firmware sdx55m sa8295p qca6421_firmware wcn6740_firmware sd678_firmware qrb5165 wcn6851_firmware qcs603 sd670 qca6564a_firmware qcn9024_firmware sdx57m sd870 wsa8832 wcn6855 sa8540p sa6145p qca6595_firmware sa8145p qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sdx70m ssg2115p_firmware qcs8155_firmware sa4155p ar8035_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sa8145p_firmware sxr2230p_firmware fsm10056 qca8082 qcn9072 qca8386 sd765g_firmware qca6420_firmware qca6390_firmware wcd9370 sd675_firmware ssg2115p qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware ipq5018 qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware qam8295p_firmware qcn9011_firmware qca8082_firmware sa8155 sa9000p_firmware sdx55_firmware qca6595au qcn6023_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware sd778g sa6155p_firmware qca6310 qcn9274 qcs8155 wcn7851 qcs6490 sdxr2_5g qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 sdx65m_firmware qca6174a_firmware wcd9385 qca8085_firmware qcs6490_firmware sd_8cx_gen3 sdx70m_firmware ar8035 qca6390 wcd9375 aqt1000 qcn9100_firmware ipq5010_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qca6564a sa4150p wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 sxr1230p_firmware sa8540p_firmware sd_8_gen1_5g sd888_5g ssg2125p_firmware qca6574a wcn6855_firmware qca6174a sm7325p qcn6132_firmware qca6310_firmware wcn6750 sa9000p qca6574_firmware sd855 sm7325p_firmware sxr2230p sdx57m_firmware sd765 qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware sm7315 qca6391 aqt1000_firmware qcn9100 sdx65_firmware qcm6490_firmware sdx50m wsa8832_firmware qcn9070_firmware qcn9011 qca6574au sa8155p_firmware ipq9574 wcd9341_firmware wsa8810 wcn6856 qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sa6150p qcn9022_firmware qcn6024 qcn9022 sd845 qcn9072_firmware sm7250p qcn9074_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21628

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.49%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:39

Updated-02 Aug, 2024 | 09:44

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL

Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21642

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 15.45%

7 Day CHG~0.00%

Published-02 May, 2023 | 05:08

Updated-02 Aug, 2024 | 09:44

Improper Access Control in HAB Memory Management

Memory corruption in HAB Memory management due to broad system privileges via physical address.

CWE ID-CWE-284

Improper Access Control

CVE-2023-21630

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.96%

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Integer Overflow in Multimedia Framework

Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.

Product-wsa8830 sm7325-ae_firmware wcd9380_firmware sw5100p wcn785x-5 sm8350-ac_firmware sd888 wsa8835 qca6574 wcn3950_firmware wcd9380 qca6595au_firmware sm8350 wcd9370 qca6574a wcn685x-5_firmware sm7325p sm7350-ab_firmware wcn685x-1 sm7325 sm8450 wcn3980 wcn6750 wcd9385_firmware wcn3950 qca6574_firmware sm7325p_firmware sm7325-af sm7315_firmware sm7325-ae qca6574a_firmware qca6574au_firmware qca6595au sm6225-ad sm7325-af_firmware wcd9375_firmware wcn3980_firmware sm7315 wcn785x-5_firmware qca6391 sm8475_firmware wcn6740_firmware sd680_firmware sd778g sa6155p_firmware sm6225-ad_firmware sm8350_firmware wcn685x-5 wcn3988_firmware qca6574au wcn785x-1_firmware sa8155p_firmware sd778g_firmware sa8195p wsa8810_firmware sm8450_firmware sw5100 wsa8810 sd680 sa6155p sg4150p sw5100p_firmware sm8350-ac wcn685x-1_firmware wcd9385 qca6696_firmware wcn6740 qca6696 qca6391_firmware wcd9375 wcd9370_firmware sd888_firmware sa8155p wsa8830_firmware wcn3988 wsa8835_firmware sa8195p_firmware sm7350-ab sw5100_firmware sm8475 wcn6750_firmware sg4150p_firmware wcn785x-1 sm7325_firmware Snapdragon wcn6740_firmware sa6155p_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware fastconnect_6900_firmware wcn3988_firmware sa8155p_firmware sd778g_firmware fastconnect_6700_firmware wcn3950_firmware wsa8810_firmware snapdragon_888_5g_mobile_platform_firmware fastconnect_7800_firmware qca6595au_firmware sw5100p_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6696_firmware qca6391_firmware wcd9385_firmware wcd9370_firmware qca6574_firmware sd_8_gen1_5g_firmware sd888_firmware sm7325p_firmware wsa8830_firmware sm7315_firmware qca6574a_firmware snapdragon_780g_5g_mobile_platform_firmware qca6574au_firmware sa8195p_firmware wsa8835_firmware sw5100_firmware wcd9375_firmware wcn3980_firmware sg4150p_firmware snapdragon_680_4g_mobile_platform_firmware

CWE ID-CWE-191

Integer Underflow (Wrap or Wraparound)

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2023-21670

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.57%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:39

Updated-07 Jan, 2025 | 19:33

Improper Access control in GPU Subsystem

Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.