CVE-2021-35122 | ByteOS Network

Vulnerability Details :

CVE-2021-35122

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-02 Sep, 2022 | 11:30

Updated At-04 Aug, 2024 | 00:33

Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:02 Sep, 2022 | 11:30

Updated At:04 Aug, 2024 | 00:33

▼CVE Numbering Authority (CNA)

Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Versions

Affected

AQT1000, AR8035, QCA6390, QCA6391, QCA6420, QCA6421, QCA6426, QCA6430, QCA6431, QCA6436, QCA6574A, QCA6574AU, QCA6595AU, QCA6696, QCA8081, QCA8337, QCM2290, QCM4290, QCM6490, QCS2290, QCS410, QCS4290, QCS610, QCS6490, QRB5165, QRB5165M, QRB5165N, QSM8350, SA515M, SA8540P, SA9000P, SD 675, SD 8CX, SD 8cx Gen2, SD 8cx Gen3, SD429, SD460, SD480, SD662, SD675, SD678, SD680, SD690 5G, SD695, SD720G, SD730, SD750G, SD765, SD765G, SD768G, SD778G, SD780G, SD7c, SD855, SD865 5G, SD870, SD888, SD888 5G, SDM429W, SDX50M, SDX55, SDX55M, SDX65, SDXR2 5G, SM4125, SM6250, SM6250P, SM7250P, SM7315, SM7325P, SW5100, SW5100P, WCD9340, WCD9341, WCD9360, WCD9370, WCD9371, WCD9375, WCD9380, WCD9385, WCN3620, WCN3660B, WCN3910, WCN3950, WCN3980, WCN3988, WCN3990, WCN3991, WCN3998, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WCN7850, WCN7851, WSA8810, WSA8815, WSA8830, WSA8835

Problem Types

Type	CWE ID	Description
text	N/A	Improper Input Validation in Core

Type: text

CWE ID: N/A

Description: Improper Input Validation in Core

Metrics

Version	Base score	Base severity	Vector
3.1	9.3	CRITICAL	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Version: 3.1

Base score: 9.3

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

Source:product-security@qualcomm.com

Published At:02 Sep, 2022 | 12:15

Updated At:08 Sep, 2022 | 20:20

Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	9.3	CRITICAL	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 9.3

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CPE Matches

Qualcomm Technologies, Inc.

>>aqt1000_firmware>>-

cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>ar8035_firmware>>-

cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6390_firmware>>-

cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6391_firmware>>-

cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6420_firmware>>-

cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6421_firmware>>-

cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6421:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6426_firmware>>-

cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6430_firmware>>-

cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6430:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6431_firmware>>-

cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6431:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6436_firmware>>-

cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6574a_firmware>>-

cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6574au_firmware>>-

cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6595au_firmware>>-

cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca6696_firmware>>-

cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca8081_firmware>>-

cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qca8337_firmware>>-

cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcm2290_firmware>>-

cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcm2290:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcm4290_firmware>>-

cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcm4290:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcm6490_firmware>>-

cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcm6490:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs2290_firmware>>-

cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs2290:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs410_firmware>>-

cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs410:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs4290_firmware>>-

cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs4290:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs610_firmware>>-

cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs610:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qcs6490_firmware>>-

cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qcs6490:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>qrb5165_firmware>>-

cpe:2.3:o:qualcomm:qrb5165_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

cpe:2.3:h:qualcomm:qrb5165:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

1268Records found

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-11 Aug, 2025 | 15:06

Use After Free in Automotive Android OS

Memory corruption may occur while accessing a variable during extended back to back tests.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware qca6678aq_firmware qcm8550_firmware sdm429w_firmware sw5100p wsa8832 wsa8845_firmware qca6595 srv1l wcd9335 srv1m qca6678aq qca8081_firmware wcd9370 ar8035_firmware qca6696 qam8620p_firmware wsa8830_firmware wcd9340_firmware wcd9341_firmware wcd9395_firmware qcc710_firmware snapdragon_685_4g_mobile wsa8832_firmware sa8195p_firmware qca8337_firmware qca8337 qdu1110 wcd9395 qca6574au_firmware qam8295p wcd9341 qca6574au qru1032 vision_intelligence_400_firmware sa8620p_firmware wcd9390 wcn3950 wsa8810_firmware wsa8845h_firmware sa9000p_firmware srv1h qca6797aq_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware wcn3660b_firmware sa8295p_firmware sa8770p qca6584au qcn6274_firmware qcc710 qru1062_firmware sw5100_firmware sa8540p qru1062 qfw7114_firmware qca6595_firmware qcs7230 fastconnect_6900 fastconnect_7800_firmware snapdragon_w5\+_gen_1_wearable_firmware snapdragon_x72_5g qru1032_firmware qep8111 sa7255p qfw7114 wcd9385_firmware fastconnect_6900_firmware qam8255p_firmware wcd9380 qam8255p sxr2230p snapdragon_680_4g_mobile wsa8845 sa6155p snapdragon_429_mobile_firmware wsa8810 qam8650p qdu1000_firmware video_collaboration_vc5_platform_firmware sa9000p srv1h_firmware sw5100 qca6595au sxr2250p_firmware qdu1010 snapdragon_662_mobile_firmware sa6155p_firmware snapdragon_685_4g_mobile_firmware wsa8840 qca6688aq qam8295p_firmware srv1m_firmware qcs8550_firmware qdu1210_firmware wcn3990_firmware snapdragon_8_gen_2_mobile_firmware qfw7124_firmware qca6698aq_firmware wcd9385 snapdragon_x35_5g_firmware snapdragon_680_4g_mobile_firmware sa8255p qcs7230_firmware wcd9390_firmware snapdragon_460_mobile snapdragon_8_gen_2_mobile qep8111_firmware wcd9370_firmware qdx1011_firmware qdu1110_firmware qdu1000 sa7255p_firmware qca6574a snapdragon_8\+_gen_2_mobile qru1052 wcn3620_firmware wcn3660b qca6174a sa8195p wcd9340 qcs8250_firmware qdu1210 qamsrv1m snapdragon_auto_5g_modem-rf_gen_2 qca6174a_firmware sa8540p_firmware qam8650p_firmware video_collaboration_vc5_platform sm8550p_firmware sxr2250p qcm8550 wcn3988 snapdragon_662_mobile sdm429w qam8620p qca6584au_firmware qcn6274 qca6574 qfw7124 sa8775p snapdragon_w5\+_gen_1_wearable qca6595au_firmware qca6391_firmware sxr2230p_firmware wsa8835 wsa8840_firmware qdu1010_firmware sw5100p_firmware sa8775p_firmware qamsrv1h qca6696_firmware wsa8845h wcd9380_firmware qca6574_firmware sa8155p_firmware qca8081 sg4150p sa8155p wcd9335_firmware wsa8830 qam8775p qca6797aq sm8550p snapdragon_x35_5g qcm4325_firmware sa8620p sa8255p_firmware snapdragon_x75_5g ar8035 qca6574a_firmware qamsrv1m_firmware sa8650p_firmware wcn3620 qcm4325 snapdragon_x72_5g_firmware wcd9375_firmware sa7775p qca6391 snapdragon_x75_5g_firmware srv1l_firmware qcn6224 snapdragon_429_mobile qca6698aq sa7775p_firmware sg4150p_firmware qru1052_firmware sa8770p_firmware sa8295p wcn3950_firmware qcs8550 fastconnect_7800 sa8650p qam8775p_firmware snapdragon_8\+_gen_2_mobile_firmware qca6688aq_firmware qdx1011 wcd9375 wcn3988_firmware qamsrv1h_firmware wcn3990 vision_intelligence_400 wsa8835_firmware qcs8250 qdx1010 snapdragon_460_mobile_firmware qcn6224_firmware Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.3||MEDIUM

EPSS-0.01% / 1.65%

||

7 Day CHG~0.00%

Published-08 Jul, 2025 | 12:48

Updated-11 Aug, 2025 | 15:06

Improper Validation of Array Index in Automotive Autonomy

Memory corruption while operating the mailbox in Automotive.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware qcm8550_firmware robotics_rb3 sa6150p_firmware sd865_5g qca6595 sm8735 wcd9370 qca8081_firmware snapdragon_670_mobile qca6696 qam8620p_firmware wcn7880_firmware wcd9340_firmware sa8530p wcd9341_firmware sxr2330p_firmware wcd9395_firmware wcn7881_firmware wcn7750 qcc710_firmware qca6426 fastconnect_6700 snapdragon_x50_5g_modem-rf_firmware wsa8832_firmware qca8337 qdu1110 qca6426_firmware wcd9395 sc8180xp-aaab qca6574au_firmware snapdragon_x72_5g_modem-rf qam8295p wcd9341 qca6574au wcd9390 snapdragon_888\+_5g_mobile_firmware sa8620p_firmware wsa8810_firmware wsa8845h_firmware sc8180xp-acaf sa9000p_firmware srv1h snapdragon_850_mobile_compute qcs9100 sdx80m fastconnect_6800_firmware qcs5430 wcn7860 qcm5430 qcm5430_firmware sa8770p snapdragon_678_mobile_firmware ssg2115p qcc710 snapdragon_x32_5g_modem-rf_firmware snapdragon_xr2_5g_firmware sa8540p qsm8350_firmware fastconnect_6900 qru1032_firmware qep8111 sa7255p qfw7114 wcd9385_firmware qca6421 qca6310 qam8255p_firmware sa8155_firmware snapdragon_x65_5g_modem-rf qca6335 wsa8845 sa6155p qca6421_firmware sc8180x-ad qca6564au_firmware wsa8810 qam8650p qdu1000_firmware sa9000p srv1h_firmware snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile sxr2250p_firmware qdu1010 wcd9326_firmware sa6155p_firmware snapdragon_845_mobile_firmware wsa8840 snapdragon_ar1_gen_1 srv1m_firmware snapdragon_x35_5g_modem-rf_firmware qcs8550_firmware qca6698au qdu1210_firmware snapdragon_8_gen_2_mobile_firmware snapdragon_x55_5g_modem-rf qfw7124_firmware qca6436_firmware sm8750p qcn9012 snapdragon_x55_5g_modem-rf_firmware snapdragon_x62_5g_modem-rf_firmware qmp1000 snapdragon_8_gen_2_mobile qca6420 wcd9370_firmware qdu1110_firmware qdu1000 sa7255p_firmware snapdragon_x72_5g_modem-rf_firmware qca6574a snapdragon_8\+_gen_2_mobile qca6174a sa8195p wcd9340 qdu1210 snapdragon_auto_5g_modem-rf_gen_2 qca6335_firmware qcm6490 sa8540p_firmware sxr2250p sm8550p_firmware qcm8550 wcn3988 snapdragon_765_5g_mobile_firmware qcn9274 vision_intelligence_300_firmware sa8775p qca6574 sxr2230p_firmware sd675_firmware snapdragon_855_mobile_firmware qca6698au_firmware qca6430_firmware qcn9011 sa8775p_firmware qamsrv1h sdx57m wsa8845h wcd9326 sa6150p sa8155p_firmware qca6564a sa8155p snapdragon_765g_5g_mobile_firmware wsa8830 sm8550p sa6145p snapdragon_768g_5g_mobile_firmware sa8255p_firmware ar8035 qamsrv1m_firmware wcn7750_firmware sa8650p_firmware sa6155 srv1l_firmware qcs9100_firmware snapdragon_865\+_5g_mobile_firmware qcn6224 qcs615 ssg2125p_firmware wcn3950_firmware qca6698aq sa7775p_firmware sa8530p_firmware fastconnect_6200 sd670 sa8145p_firmware sc8180x-acaf_firmware wcd9378 qdx1011 sa8150p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 robotics_rb3_firmware snapdragon_x75_5g_modem-rf_firmware sd670_firmware snapdragon_8_gen_3_mobile snapdragon_855_mobile qcs6490 sc8180xp-acaf_firmware fastconnect_6200_firmware wsa8830_firmware qcn6224_firmware qca6431 qca6678aq_firmware wsa8845_firmware wsa8832 wcd9378_firmware srv1l sdx57m_firmware sxr2130_firmware srv1m qca6678aq snapdragon_860_mobile_firmware snapdragon_x35_5g_modem-rf ar8035_firmware sc8180xp-aaab_firmware wcn7860_firmware sc8380xp snapdragon_x62_5g_modem-rf qca6564au sm4635 sc8180xp-ad sc8280xp-abbb wsa8815_firmware sa8195p_firmware qca8337_firmware sg8275p_firmware qca9377_firmware qcm6490_firmware sm7250p_firmware sm4635_firmware vision_intelligence_400_firmware qru1032 wcn3950 snapdragon_870_5g_mobile_firmware sm8750 snapdragon_auto_5g_modem-rf_gen_2_firmware qca6797aq_firmware sa8295p_firmware snapdragon_870_5g_mobile sd_675_firmware snapdragon_678_mobile sc8180x-acaf sm7250p sa8155 sd_8cx_firmware sc8180x-ad_firmware qca6584au qcn6274_firmware qcn9011_firmware qru1062_firmware snapdragon_850_mobile_compute_firmware snapdragon_675_mobile_firmware snapdragon_768g_5g_mobile sc8380xp_firmware qru1062 qca6310_firmware snapdragon_845_mobile snapdragon_8_gen_3_mobile_firmware fastconnect_6800 qfw7114_firmware qca6595_firmware fastconnect_7800_firmware snapdragon_675_mobile snapdragon_865_5g_mobile_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware qam8255p sxr2230p sa6155_firmware qmp1000_firmware snapdragon_xr2_5g wcn7880 sa8150p sxr2330p snapdragon_x24_lte_modem sc8180x-aaab sxr1230p sc8180x-aaab_firmware wcn7881 video_collaboration_vc3_platform aqt1000 qca6688aq qam8295p_firmware sd855 qca6431_firmware wcn3990_firmware qca6698aq_firmware qca6564a_firmware wcd9385 snapdragon_888\+_5g_mobile qsm8350 snapdragon_8_gen_1_mobile sa8255p sxr1230p_firmware wcd9390_firmware snapdragon_865\+_5g_mobile qep8111_firmware qcs615_firmware qca6430 snapdragon_855\+_mobile sg8275p snapdragon_765_5g_mobile qdx1011_firmware snapdragon_860_mobile sc8180xp-ad_firmware sm8750_firmware sdx55_firmware ssg2125p qru1052 sxr2130 snapdragon_x65_5g_modem-rf_firmware qamsrv1m qca6174a_firmware wcn7861_firmware wcn7861 snapdragon_x50_5g_modem-rf qam8650p_firmware snapdragon_670_mobile_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware qam8620p wcn3980_firmware sd855_firmware qca6436 qca6584au_firmware qcn6274 snapdragon_x24_lte_modem_firmware wsa8835 qca6391_firmware wsa8840_firmware qfw7124 qca6595au_firmware qdu1010_firmware qcs8300_firmware qca6696_firmware qcs8300 wcd9380_firmware qca6574_firmware qca8081 wsa8815 sd_8_gen1_5g snapdragon_ar2_gen_1_firmware qam8775p qca9377 qca6797aq snapdragon_x75_5g_modem-rf sa8620p qca6574a_firmware sdx55 snapdragon_865_5g_mobile snapdragon_855\+_mobile_firmware sd675 wcd9375_firmware sd_8_gen1_5g_firmware sa7775p qca6391 snapdragon_ar1_gen_1_firmware qcn9274_firmware qcn9012_firmware qcs5430_firmware snapdragon_x32_5g_modem-rf qru1052_firmware sa8770p_firmware sa8295p qcs8550 sc8280xp-abbb_firmware sm8735_firmware fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware sm8750p_firmware wcd9375 snapdragon_8\+_gen_2_mobile_firmware qca6688aq_firmware vision_intelligence_300 snapdragon_ar2_gen_1 snapdragon_765g_5g_mobile wcn3988_firmware qamsrv1h_firmware sa8145p sd_675 vision_intelligence_400 sdx80m_firmware wsa8835_firmware ssg2115p_firmware sd_8cx wcn3980 qdx1010 snapdragon_8_gen_1_mobile_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.01% / 1.73%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-07 Mar, 2025 | 11:47

Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform

Memory corruption may occur in keyboard virtual device due to guest VM interaction.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-07 Mar, 2025 | 11:47

Untrusted Pointer Dereference in DSP_Services

Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.

Vendor-Qualcomm Technologies, Inc.

Product-wcd9380_firmware sc8380xp sc8380xp_firmware fastconnect_6900 fastconnect_6900_firmware fastconnect_7800_firmware wsa8840_firmware wcd9385_firmware fastconnect_7800 wsa8845h_firmware wcd9380 wsa8845h wsa8845_firmware wsa8840 wcd9385 wsa8845 Snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-822

Untrusted Pointer Dereference

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.76%

||

7 Day CHG~0.00%

Published-03 Jun, 2025 | 05:52

Updated-04 Jun, 2025 | 14:54

Improper Access Control in Core

Memory corruption may occur while attaching VM when the HLOS retains access to VM.

Vendor-Qualcomm Technologies, Inc.

Product-Snapdragon

CWE ID-CWE-284

Improper Access Control

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:01

Improper Validation of Array Index in Camera

Memory corruption in Camera due to unusually high number of nodes passed to AXI port.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.66%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:02

Use of Out-of-range Pointer Offset in WLAN Windows Host

Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.58%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-11 Aug, 2025 | 15:06

Detection of Error Condition Without Action in Hypervisor

Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.

Vendor-Qualcomm Technologies, Inc.

Product-qdx1010_firmware qcm8550_firmware robotics_rb3 sd865_5g qca6595 sm8735 wcd9370 qca8081_firmware snapdragon_670_mobile qca6696 qam8620p_firmware wcn7880_firmware wcd9340_firmware wcd9341_firmware sxr2330p_firmware wcd9395_firmware wcn7881_firmware wcn7750 qcc710_firmware qca6426 fastconnect_6700 snapdragon_x50_5g_modem-rf_firmware wsa8832_firmware qca8337 qdu1110 wcd9395 qca6426_firmware sc8180xp-aaab qca6574au_firmware snapdragon_x72_5g_modem-rf qam8295p wcd9341 wcd9390 qca6574au snapdragon_888\+_5g_mobile_firmware sa8620p_firmware wsa8810_firmware wsa8845h_firmware sa9000p_firmware sc8180xp-acaf srv1h snapdragon_850_mobile_compute qcs9100 sdx80m fastconnect_6800_firmware qcs5430 wcn7860 qcm5430 qcm5430_firmware sa8770p snapdragon_678_mobile_firmware ssg2115p qcc710 snapdragon_x32_5g_modem-rf_firmware snapdragon_xr2_5g_firmware sa8540p qsm8350_firmware fastconnect_6900 qru1032_firmware qep8111 sa7255p qfw7114 wcd9385_firmware qca6421 qca6310 qam8255p_firmware sa8155_firmware snapdragon_x65_5g_modem-rf qca6335 wsa8845 sa6155p qca6421_firmware sc8180x-ad qca6564au_firmware wsa8810 qam8650p qdu1000_firmware sa9000p srv1h_firmware snapdragon_888_5g_mobile_firmware qca6595au snapdragon_888_5g_mobile qdu1010 wcd9326_firmware sa6155p_firmware snapdragon_845_mobile_firmware wsa8840 snapdragon_ar1_gen_1 srv1m_firmware snapdragon_x35_5g_modem-rf_firmware qcs8550_firmware qdu1210_firmware snapdragon_x55_5g_modem-rf qfw7124_firmware qca6436_firmware sm8750p snapdragon_x55_5g_modem-rf_firmware snapdragon_x62_5g_modem-rf_firmware qmp1000 qca6420 wcd9370_firmware qdu1110_firmware qdu1000 sa7255p_firmware snapdragon_x72_5g_modem-rf_firmware qca6574a qca6174a wcd9340 qdu1210 snapdragon_auto_5g_modem-rf_gen_2 qca6335_firmware qcm6490 sa8540p_firmware qcm8550 snapdragon_765_5g_mobile_firmware qcn9274 vision_intelligence_300_firmware sa8775p qca6574 sd675_firmware snapdragon_855_mobile_firmware qca6430_firmware sa8775p_firmware qamsrv1h sdx57m wsa8845h wcd9326 sa8155p_firmware qca6564a sa8155p snapdragon_765g_5g_mobile_firmware wsa8830 sa6145p snapdragon_768g_5g_mobile_firmware sa8255p_firmware ar8035 qamsrv1m_firmware wcn7750_firmware sa8650p_firmware sa6155 srv1l_firmware qcs9100_firmware snapdragon_865\+_5g_mobile_firmware qcn6224 ssg2125p_firmware wcn3950_firmware qca6698aq sa7775p_firmware fastconnect_6200 sd670 wcd9378 sc8180x-acaf_firmware qdx1011 sa8150p_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wcn3990 robotics_rb3_firmware snapdragon_x75_5g_modem-rf_firmware sd670_firmware snapdragon_8_gen_3_mobile snapdragon_855_mobile qcs6490 sc8180xp-acaf_firmware fastconnect_6200_firmware wsa8830_firmware qcn6224_firmware qca6431 qca6678aq_firmware wsa8845_firmware wsa8832 wcd9378_firmware srv1l sdx57m_firmware sxr2130_firmware srv1m qca6678aq snapdragon_860_mobile_firmware snapdragon_x35_5g_modem-rf ar8035_firmware sc8180xp-aaab_firmware wcn7860_firmware sc8380xp snapdragon_x62_5g_modem-rf qca6564au sc8180xp-ad sc8280xp-abbb wsa8815_firmware qca8337_firmware qca9377_firmware qcm6490_firmware sm7250p_firmware vision_intelligence_400_firmware qru1032 wcn3950 snapdragon_870_5g_mobile_firmware sm8750 snapdragon_auto_5g_modem-rf_gen_2_firmware qca6797aq_firmware sa8295p_firmware snapdragon_870_5g_mobile sd_675_firmware snapdragon_678_mobile sm7250p sc8180x-acaf sa8155 sd_8cx_firmware sc8180x-ad_firmware qca6584au qcn6274_firmware qru1062_firmware snapdragon_850_mobile_compute_firmware snapdragon_675_mobile_firmware snapdragon_768g_5g_mobile sc8380xp_firmware qru1062 qca6310_firmware snapdragon_845_mobile snapdragon_8_gen_3_mobile_firmware fastconnect_6800 qfw7114_firmware qca6595_firmware fastconnect_7800_firmware snapdragon_675_mobile snapdragon_865_5g_mobile_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware qam8255p sa6155_firmware qmp1000_firmware snapdragon_xr2_5g wcn7880 sa8150p sxr2330p snapdragon_x24_lte_modem sc8180x-aaab sxr1230p sc8180x-aaab_firmware wcn7881 video_collaboration_vc3_platform aqt1000 qca6688aq qam8295p_firmware sd855 qca6431_firmware wcn3990_firmware qca6698aq_firmware wcd9385 qca6564a_firmware snapdragon_888\+_5g_mobile qsm8350 snapdragon_8_gen_1_mobile sa8255p sxr1230p_firmware wcd9390_firmware snapdragon_865\+_5g_mobile qep8111_firmware qca6430 snapdragon_855\+_mobile snapdragon_765_5g_mobile qdx1011_firmware snapdragon_860_mobile sc8180xp-ad_firmware sm8750_firmware sdx55_firmware ssg2125p qru1052 sxr2130 snapdragon_x65_5g_modem-rf_firmware qamsrv1m wcn7861_firmware qca6174a_firmware wcn7861 snapdragon_x50_5g_modem-rf qam8650p_firmware snapdragon_670_mobile_firmware qca6420_firmware aqt1000_firmware qcs6490_firmware wcn3980_firmware qam8620p sd855_firmware qca6436 qca6584au_firmware qcn6274 snapdragon_x24_lte_modem_firmware wsa8835 qca6391_firmware wsa8840_firmware qfw7124 qca6595au_firmware qdu1010_firmware qcs8300_firmware qca6696_firmware qcs8300 wcd9380_firmware qca6574_firmware qca8081 wsa8815 sd_8_gen1_5g snapdragon_ar2_gen_1_firmware qam8775p qca9377 qca6797aq snapdragon_x75_5g_modem-rf sa8620p qca6574a_firmware sdx55 snapdragon_865_5g_mobile snapdragon_855\+_mobile_firmware sd675 wcd9375_firmware sd_8_gen1_5g_firmware sa7775p qca6391 snapdragon_ar1_gen_1_firmware qcn9274_firmware qcs5430_firmware snapdragon_x32_5g_modem-rf qru1052_firmware sa8770p_firmware sa8295p qcs8550 sm8735_firmware sc8280xp-abbb_firmware fastconnect_7800 sa8650p qam8775p_firmware sd865_5g_firmware sm8750p_firmware wcd9375 qca6688aq_firmware vision_intelligence_300 snapdragon_ar2_gen_1 snapdragon_765g_5g_mobile qamsrv1h_firmware sd_675 vision_intelligence_400 sdx80m_firmware wsa8835_firmware ssg2115p_firmware sd_8cx wcn3980 qdx1010 snapdragon_8_gen_1_mobile_firmware Snapdragon

CWE ID-CWE-390

Detection of Error Condition Without Action

CWE ID-CWE-755

Improper Handling of Exceptional Conditions

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:01

Improper Validation of Array Index in Camera

Memory corruption can occur in the camera when an invalid CID is used.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware sa7255p snapdragon_ar2_gen_1 wcn7860 qamsrv1m wcn7881_firmware qcs8550_firmware wcn7881 sa7775p_firmware sa8775p ssg2125p_firmware qam8775p sa8650p_firmware wcn3950_firmware sm8750 wcn6650 sa8255p wcd9370_firmware wcn3950 video_collaboration_vc3_platform_firmware sxr2230p wsa8845_firmware qcm8550_firmware snapdragon_8\+_gen_2_mobile wcn6755_firmware sxr2230p_firmware sm7635_firmware sd_8_gen1_5g_firmware wsa8845h ssg2115p_firmware wcn6450_firmware qcm8550 sa8650p sa8770p_firmware talynplus wcn3988 qca6698aq_firmware wcn7880_firmware wcd9395_firmware qamsrv1m_firmware sa8775p_firmware sm7635 talynplus_firmware wsa8835_firmware fastconnect_6900 wcn3988_firmware qcm4490 wcd9375_firmware wcd9385_firmware qam8650p_firmware wsa8810 snapdragon_8_gen_3_mobile_firmware qam8255p_firmware wcd9375 sa8620p_firmware sm6650 sa7255p_firmware qca6595_firmware sg8275p qamsrv1h wcn6740 wcd9380 video_collaboration_vc3_platform qamsrv1h_firmware wsa8832_firmware wcn7861_firmware snapdragon_4_gen_2_mobile wsa8830_firmware wcn6755 snapdragon_8_gen_2_mobile_firmware qca6595au_firmware qcs6490_firmware wcd9385 sa8255p_firmware wsa8840_firmware qca6595au qam8255p sxr2250p_firmware wsa8840 srv1h sm8550p_firmware sm7675 qca6595 wsa8845h_firmware qam8650p wsa8845 snapdragon_ar2_gen_1_firmware wcn6650_firmware sxr1230p_firmware sxr2330p wcd9380_firmware wcn6450 srv1m qam8775p_firmware sm8635p snapdragon_ar1_gen_1 sm8635p_firmware qcs4490 wcd9370 wcd9378 sm7675_firmware qcs4490_firmware sm8750p sa9000p snapdragon_4_gen_2_mobile_firmware wsa8835 sm8750p_firmware ssg2125p qca6678aq fastconnect_7800 qca6797aq_firmware snapdragon_8_gen_1_mobile snapdragon_8_gen_2_mobile wcn7880 wcd9378_firmware qca6797aq qcm4490_firmware sm7675p qcs8550 sxr2250p sm6650_firmware fastconnect_6700 snapdragon_8_gen_1_mobile_firmware sd_8_gen1_5g sm7675p_firmware snapdragon_ar1_gen_1_firmware wsa8810_firmware srv1m_firmware wsa8832 fastconnect_6700_firmware wcd9390_firmware sm8635 ssg2115p sm8635_firmware snapdragon_8_gen_3_mobile wsa8815 sxr1230p wcn7861 sa8620p sm8750_firmware wsa8830 wsa8815_firmware snapdragon_8\+_gen_2_mobile_firmware snapdragon_8\+_gen_1_mobile_firmware sa8770p wcn7860_firmware sg8275p_firmware srv1h_firmware qca6678aq_firmware qca6698aq fastconnect_6900_firmware qcs6490 sa9000p_firmware sm8550p snapdragon_8\+_gen_1_mobile wcd9390 sa7775p wcd9395 wcn6740_firmware sxr2330p_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:02

Improper Validation of Array Index in Graphics_Linux

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware sm4635 wsa8840 wcn7860 sm7675 wsa8845h_firmware wcn7881_firmware video_collaboration_vc1_platform_firmware wsa8845 qcm6125 wcn7881 wcn6650_firmware wcd9380_firmware sxr2330p wcn6450 qca6391_firmware wcn3950_firmware qca6391 sm8750 sm8635p wcn6650 video_collaboration_vc5_platform wcn3980 wcd9370_firmware sm8635p_firmware snapdragon_480_5g_mobile wcn3950 snapdragon_w5\+_gen_1_wearable sw5100 wsa8845_firmware wcd9370 qcs7230_firmware wcd9378 sw5100p_firmware sm7675_firmware wcn6755_firmware video_collaboration_vc5_platform_firmware sm7635_firmware sm8750p wsa8835 sm8750p_firmware wsa8845h snapdragon_480_5g_mobile_firmware fastconnect_7800 wcn6450_firmware snapdragon_4_gen_1_mobile qcs8250_firmware snapdragon_695_5g_mobile wcn7880_firmware wcn3988 wcn7880 wcd9395_firmware sm4635_firmware qcm6125_firmware wcd9378_firmware qcs6125 sm7635 qcs7230 sm7675p sw5100_firmware wcn3988_firmware sm6650_firmware qcs8250 wcd9375_firmware sm7675p_firmware wsa8810_firmware wcd9385_firmware wsa8810 wsa8832 wcd9390_firmware sm8635 snapdragon_695_5g_mobile_firmware snapdragon_8_gen_3_mobile_firmware wcd9375 sm8635_firmware snapdragon_8_gen_3_mobile sm6650 wsa8815 qcs6125_firmware snapdragon_w5\+_gen_1_wearable_firmware fastconnect_6200_firmware wcn7861 sm8750_firmware wcd9380 wsa8830 snapdragon_480\+_5g_mobile_firmware snapdragon_480\+_5g_mobile wsa8815_firmware wsa8832_firmware wcn7861_firmware wcn7860_firmware sw5100p fastconnect_6200 wsa8830_firmware wcn6755 wcn3980_firmware video_collaboration_vc1_platform snapdragon_4_gen_1_mobile_firmware wcd9390 wcd9385 wsa8840_firmware wcd9395 wsa8835_firmware sxr2330p_firmware Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.25%

||

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 18:42

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, QCA8081, QCS605, QM215, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, Snapdragon_High_Med_2016, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware apq8096_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 mdm9650 sdm429 msm8940_firmware snapdragon_high_med_2016_firmware msm8976_firmware msm8996au apq8009_firmware msm8917 sdm670 qcs605_firmware mdm9206 sdm670_firmware ipq8074 sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 msm8909_firmware apq8053_firmware sda845 sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware sdm660 msm8920_firmware sdm630 mdm9607_firmware ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qca8081 mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 msm8909 apq8096au sdm439_firmware sdm630_firmware sda660_firmware qm215_firmware msm8976 msm8953_firmware msm8940 apq8053 apq8096au_firmware msm8917_firmware msm8998 sdm850 apq8017 msm8996 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.81%

||

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 18:49

Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9607, MDM9650, MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_710_firmware sdm630 sd_625 sd_210 mdm9607 sd_636_firmware sd_820_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_427 sd_430 sd_670 sd_435_firmware sd_710 sdx20_firmware sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.94%

||

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN HOST

Memory Corruption in WLAN HOST while fetching TX status information.

Vendor-Qualcomm Technologies, Inc.

Product-robotics_rb3 qcs410_firmware sa6150p_firmware sd865_5g sw5100p sxr1120 qca6595 qcs610_firmware snapdragon_8\+_gen_1 wcd9335 wcd9370 qca8081_firmware snapdragon_730g qca6696 wcd9340_firmware wcd9341_firmware qcn6024 qca6426 snapdragon_auto_4g wcn6740_firmware snapdragon_720g_firmware fastconnect_6700 snapdragon_695_5g sa4150p snapdragon_888_5g wsa8832_firmware qca8337 qca6426_firmware snapdragon_4_gen_2_firmware qca6574au_firmware qca6564_firmware qam8295p wcd9341 qca6574au 315_5g_iot_firmware sd730_firmware wsa8810_firmware csra6640 snapdragon_690_5g snapdragon_778g\+_5g_firmware snapdragon_865\+_5g snapdragon_765_5g sd730 qca6554a fastconnect_6800_firmware snapdragon_x24_firmware snapdragon_865\+_5g_firmware snapdragon_855\+\/860 sd835_firmware qcn6024_firmware sdx20m snapdragon_x65_5g snapdragon_636_firmware video_collaboration_vc1_platform_firmware sa4155p snapdragon_888\+_5g_firmware qcm6125_firmware c-v2x_9150 snapdragon_x50_5g snapdragon_xr2_5g_firmware snapdragon_xr1_firmware sxr1120_firmware snapdragon_710 snapdragon_730 snapdragon_765g_5g_firmware snapdragon_660_firmware snapdragon_4_gen_2 fastconnect_6900 video_collaboration_vc1_platform wcd9385_firmware qca6421 qca6310 qam8255p_firmware snapdragon_778g_5g snapdragon_670 snapdragon_678_firmware sa8155_firmware wcd9360 qca6335 snapdragon_x5_firmware snapdragon_732g_firmware snapdragon_662_firmware snapdragon_x50_5g_firmware snapdragon_x24 mdm9250 sa6155p qca6421_firmware qcm6125 qca6564au_firmware wsa8810 video_collaboration_vc5_platform_firmware snapdragon_670_firmware snapdragon_855_firmware snapdragon_678 qca6595au sm7315_firmware snapdragon_865_5g_firmware wcd9326_firmware sa6155p_firmware snapdragon_730g_firmware sd835 snapdragon_835 qca6436_firmware qcn9012 mdm9650_firmware wcd9371_firmware wcn3910_firmware snapdragon_675_firmware sm4125_firmware snapdragon_680_4g qca6420 wcn3910 apq8064au_firmware wcd9370_firmware csrb31024 qca9367 mdm9250_firmware snapdragon_480\+_5g_firmware snapdragon_765_5g_firmware qca6574a qca6174a qca6584_firmware snapdragon_695_5g_firmware snapdragon_750g_5g_firmware wcd9340 qcs8250_firmware qcm2290 sa8195p qca6335_firmware qcm6490 snapdragon_x55_5g_firmware wcn3988 qcn9024 qca6574 sd675_firmware qca6430_firmware qcn9011 smart_audio_400 qcn9024_firmware snapdragon_820_firmware sa6150p wcd9326 qcs410 qcm2290_firmware sa8155p_firmware qca6564a sa8155p wsa8830 snapdragon_870_5g_firmware sa6145p snapdragon_x65_5g_firmware qcn9074_firmware sa8255p_firmware snapdragon_888\+_5g snapdragon_720g ar8035 msm8996au qca6564 sa6155 qrb5165m_firmware apq8064au snapdragon_782g qca6698aq wcn3950_firmware sm6250 qrb5165n fastconnect_6200 sd670 sm7325p_firmware sa8145p_firmware wcd9360_firmware snapdragon_630 sa8150p_firmware snapdragon_835_firmware fastconnect_6700_firmware snapdragon_768g_5g video_collaboration_vc3_platform_firmware wcn3990 robotics_rb3_firmware snapdragon_778g_5g_firmware snapdragon_780g_5g sd670_firmware qcs6490 qcs8250 snapdragon_778g\+_5g fastconnect_6200_firmware ar8031_firmware wsa8830_firmware qca6431 sd660_firmware snapdragon_7c\+_gen_3 wsa8832 sxr2130_firmware ar8035_firmware qrb5165m snapdragon_680_4g_firmware qca6320 sa4150p_firmware sd888_firmware snapdragon_845_firmware snapdragon_630_firmware qca6564au qcs6125_firmware snapdragon_460 snapdragon_636 sm6250p_firmware qcn9074 wsa8815_firmware snapdragon_865_5g sa8195p_firmware qca8337_firmware snapdragon_665_firmware snapdragon_auto_4g_firmware qcm4290 snapdragon_480_5g_firmware snapdragon_4_gen_1_firmware ar8031 snapdragon_685_4g qca9377_firmware qcm6490_firmware snapdragon_xr2\+_gen_1 snapdragon_w5\+_gen_1 snapdragon_665 sm7250p_firmware sm4125 vision_intelligence_400_firmware wcn3950 qcs6125 flight_rb5_5g snapdragon_690_5g_firmware qca6797aq_firmware sa8295p_firmware smart_audio_400_firmware sd_675_firmware snapdragon_460_firmware sa4155p_firmware snapdragon_auto_5g_firmware sm7250p csrb31024_firmware sa8155 sm6250_firmware snapdragon_768g_5g_firmware snapdragon_x20 snapdragon_710_firmware qca6584au sd888 qca6320_firmware qcn9011_firmware sw5100_firmware wcn6740 snapdragon_732g qca6310_firmware fastconnect_6800 snapdragon_662 qca6595_firmware fastconnect_7800_firmware wcd9371 snapdragon_855\+\/860_firmware fastconnect_6900_firmware robotics_rb5_firmware wcd9380 sa6145p_firmware qam8255p sa6155_firmware snapdragon_xr2_5g sa8150p snapdragon_888_5g_firmware snapdragon_765g_5g msm8996au_firmware snapdragon_x5 sw5100 video_collaboration_vc3_platform aqt1000 c-v2x_9150_firmware qam8295p_firmware sd855 qca6431_firmware snapdragon_8_gen_1_firmware wcn3990_firmware sm7315 qca6175a_firmware snapdragon_750g_5g qca6698aq_firmware qcs2290 qca6564a_firmware sdx20m_firmware wcd9385 qcs2290_firmware snapdragon_xr2\+_gen_1_firmware qca9367_firmware snapdragon_8_gen_1 sa8255p qcs4290 qca6430 sm6250p snapdragon_782g_firmware snapdragon_855 mdm9650 sdx55_firmware snapdragon_x55_5g flight_rb5_5g_firmware qca6554a_firmware sxr2130 snapdragon_4_gen_1 snapdragon_870_5g csra6640_firmware robotics_rb5 snapdragon_480\+_5g qca6174a_firmware snapdragon_685_4g_firmware sm7325p snapdragon_845 video_collaboration_vc5_platform qca6420_firmware aqt1000_firmware qcs6490_firmware snapdragon_480_5g sd855_firmware wcd9335_firmware qrb5165n_firmware qca6436 wcn3980_firmware qca6584au_firmware wsa8835 qca6595au_firmware qca6391_firmware sw5100p_firmware qca6696_firmware qcs4290_firmware wcd9380_firmware snapdragon_x20_firmware qca6574_firmware csra6620 qca8081 sd660 mdm9628 wsa8815 sd_8_gen1_5g snapdragon_ar2_gen_1_firmware qca9377 snapdragon_auto_5g qca6797aq mdm9628_firmware snapdragon_730_firmware snapdragon_660 qca6574a_firmware sdx55 qcm4290_firmware snapdragon_820 snapdragon_8\+_gen_1_firmware sd675 qca6175a sd_8_gen1_5g_firmware wcd9375_firmware snapdragon_7c\+_gen_3_firmware qca6391 snapdragon_w5\+_gen_1_firmware qcn9012_firmware qca6584 snapdragon_780g_5g_firmware csra6620_firmware sa8295p snapdragon_675 fastconnect_7800 sd865_5g_firmware snapdragon_xr1 wcd9375 snapdragon_ar2_gen_1 wcn3988_firmware 315_5g_iot sa8145p sd_675 vision_intelligence_400 wsa8835_firmware wcn3980 qcs610 Snapdragon qam8255p_firmware qca9377_firmware snapdragon_662_mobile_platform_firmware sa6150p_firmware sm6250p_firmware sa8145p_firmware 315_5g_iot_modem_firmware qcs2290_firmware snapdragon_x24_lte_modem_firmware qca6431_firmware mdm9628_firmware snapdragon_820_automotive_platform_firmware wcd9360_firmware flight_rb5_5g_platform_firmware snapdragon_x20_lte_modem_firmware wcn3950_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware sd730_firmware snapdragon_auto_4g_modem_firmware csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware snapdragon_460_mobile_platform_firmware qcs6125_firmware snapdragon_480_5g_mobile_platform_firmware qca6584au_firmware wcn3990_firmware qrb5165n_firmware qca6554a_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9371_firmware wcd9385_firmware qcn6024_firmware wcd9326_firmware sd_8_gen1_5g_firmware snapdragon_660_mobile_platform_firmware qam8295p_firmware qcn9011_firmware sm7315_firmware qca6320_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware sdx55_firmware snapdragon_835_mobile_pc_platform_firmware wcd9375_firmware qca8081_firmware sa6155_firmware sm7250p_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware snapdragon_auto_5g_modem-rf_firmware sa6155p_firmware qca9367_firmware snapdragon_x65_5g_modem-rf_system_firmware smart_audio_400_platform_firmware snapdragon_x5_lte_modem_firmware qrb5165m_firmware sa4155p_firmware sa8155_firmware robotics_rb3_platform_firmware wcn3988_firmware sa6145p_firmware fastconnect_6700_firmware wsa8810_firmware snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware qca6698aq_firmware qca6174a_firmware mdm9250_firmware qcs4290_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware snapdragon_665_mobile_platform_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware sm6250_firmware vision_intelligence_400_platform_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wsa8835_firmware sd660_firmware snapdragon_636_mobile_platform_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sxr1120_firmware sa8295p_firmware snapdragon_750g_5g_mobile_platform_firmware qcm6125_firmware snapdragon_675_mobile_platform_firmware qcm2290_firmware qualcomm_video_collaboration_vc1_platform_firmware robotics_rb5_platform_firmware qca8337_firmware wcd9380_firmware snapdragon_778g_5g_mobile_platform_firmware msm8996au_firmware snapdragon_670_mobile_platform_firmware sd670_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_4_gen_2_mobile_platform_firmware c-v2x_9150_firmware qca6310_firmware qca6430_firmware qcn9012_firmware wcd9335_firmware qca6335_firmware qca6574_firmware wcd9340_firmware sm4125_firmware sm7325p_firmware qca6584_firmware mdm9650_firmware snapdragon_630_mobile_platform_firmware snapdragon_xr2_5g_platform_firmware qca6426_firmware qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware ar8031_firmware apq8064au_firmware csrb31024_firmware qcm6490_firmware wsa8832_firmware fastconnect_6900_firmware qca6797aq_firmware sa8155p_firmware qca6564a_firmware qcn9024_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware sdx20m_firmware sw5100p_firmware qcs610_firmware snapdragon_8_gen_1_mobile_platform_firmware sd835_firmware qca6564_firmware qca6595_firmware qca6391_firmware snapdragon_710_mobile_platform_firmware sa4150p_firmware wcd9370_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware sw5100_firmware qcn9074_firmware qcs410_firmware snapdragon_720g_mobile_platform_firmware qca6175a_firmware ar8035_firmware snapdragon_xr1_platform_firmware

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-126

Buffer Over-read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.34%

||

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-13 Jan, 2025 | 21:50

Buffer Over-read in WLAN Windows Host

Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-125

Out-of-bounds Read

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-12 Feb, 2025 | 20:51

Use of Out-of-range Pointer Offset in Display

Memory corruption may occour while generating test pattern due to negative indexing of display ID.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.02% / 2.58%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:31

Updated-09 May, 2025 | 19:17

Out-of-bounds Write in Camera Driver

Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.02% / 2.58%

||

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:12

Use After Free in Secure Processor

Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_8_gen_3_mobile snapdragon_8_gen_3_mobile_firmware wcd9390_firmware fastconnect_7800_firmware wcd9395 wsa8840 wsa8845h wsa8845_firmware wsa8840_firmware wsa8845 wcd9395_firmware wsa8845h_firmware wcd9390 fastconnect_7800 Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 16:01

Untrusted Pointer Dereference in Automotive Android OS

Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800_firmware qep8111 sa7255p snapdragon_x35_5g_modem-rf wcn7860 qamsrv1m qdu1210 qcn6224_firmware qam8295p_firmware wcn7881_firmware qcs8550_firmware qru1052_firmware wcn7881 qdu1010_firmware sa7775p_firmware sa8775p qca6574au_firmware qam8775p sa8195p sa8650p_firmware qcn6274_firmware qca6391 qca6584au sm8750 wcn3950_firmware vision_intelligence_400 qca6688aq_firmware qdu1110 wcn6650 qdu1210_firmware sa8255p snapdragon_480_5g_mobile wcn3950 snapdragon_w5\+_gen_1_wearable sw5100 wsa8845_firmware qcc710_firmware qru1052 qdu1000_firmware qca6574_firmware qcm8550_firmware snapdragon_8\+_gen_2_mobile sw5100p_firmware ar8035 wcn6755_firmware qep8111_firmware video_collaboration_vc5_platform_firmware sm7635_firmware srv1l_firmware qru1032 wsa8845h qca6574 sa6155p_firmware wcn6450_firmware snapdragon_4_gen_1_mobile qcm8550 snapdragon_680_4g_mobile wcd9341 sa8650p sa8770p_firmware wcn3988 wcn7880_firmware qca6698aq_firmware wcd9395_firmware qamsrv1m_firmware sa8775p_firmware wcn3990_firmware qcs6125 sm7635 snapdragon_680_4g_mobile_firmware fastconnect_6900 qca6688aq wcn3988_firmware qca6574a wcd9335 qcs8250 wcd9375_firmware wcd9385_firmware qam8650p_firmware wsa8810 qdx1011 snapdragon_8_gen_3_mobile_firmware qam8255p_firmware sa8295p wcd9375 snapdragon_685_4g_mobile_firmware sa8620p_firmware sm6650 snapdragon_w5\+_gen_1_wearable_firmware sa7255p_firmware qca6595_firmware qdu1000 fastconnect_6200_firmware qamsrv1h sa6155p snapdragon_x75_5g_modem-rf_firmware wcd9380 snapdragon_480\+_5g_mobile_firmware snapdragon_480\+_5g_mobile qamsrv1h_firmware sa8155p wcn7861_firmware wsa8832_firmware sw5100p wsa8830_firmware wcn6755 qca8081 sg4150p snapdragon_8_gen_2_mobile_firmware qca6595au_firmware qdu1110_firmware qcn6224 wcd9385 sa8255p_firmware wsa8840_firmware qca6595au qfw7124_firmware qam8255p sm4635 wsa8840 srv1h qam8620p sm8550p_firmware qfw7124 ar8035_firmware qca6696 sa8195p_firmware sg4150p_firmware sa8155p_firmware qca6595 sm7675 snapdragon_460_mobile qca8337 wsa8845h_firmware qdx1010_firmware qam8650p qca8337_firmware video_collaboration_vc1_platform_firmware wsa8845 qcm6125 wcn6650_firmware wcd9380_firmware vision_intelligence_400_firmware wcn6450 qca6391_firmware snapdragon_662_mobile_firmware qca6174a_firmware srv1m qdx1010 qdu1010 qru1062 qam8775p_firmware sm8635p video_collaboration_vc5_platform wcn3980 sm8635p_firmware snapdragon_685_4g_mobile wcd9370 wcd9340_firmware qcs7230_firmware wcd9378 sm7675_firmware sa8295p_firmware qcm4325_firmware sm8750p sa9000p wsa8835 sm8750p_firmware qca8081_firmware qca6678aq fastconnect_7800 qca6797aq_firmware snapdragon_480_5g_mobile_firmware snapdragon_x75_5g_modem-rf wcd9341_firmware wcd9340 qam8295p qcs8250_firmware snapdragon_695_5g_mobile snapdragon_8_gen_2_mobile qca6174a wcn7880 qam8620p_firmware sm4635_firmware qcm6125_firmware wcd9378_firmware wcd9335_firmware qca6574au qca6797aq qcs7230 qcs8550 sm7675p sw5100_firmware sm6650_firmware snapdragon_auto_5g_modem-rf_gen_2 qca6584au_firmware wcn3990 qca6696_firmware sm7675p_firmware snapdragon_x72_5g_modem-rf_firmware qdx1011_firmware wsa8810_firmware qru1032_firmware srv1m_firmware wsa8832 wcd9390_firmware qcn6274 sm8635 qcc710 snapdragon_695_5g_mobile_firmware sm8635_firmware snapdragon_8_gen_3_mobile wsa8815 qcs6125_firmware snapdragon_662_mobile snapdragon_x72_5g_modem-rf qru1062_firmware wcn7861 qca6574a_firmware sa8620p sm8750_firmware wsa8830 wsa8815_firmware srv1l snapdragon_8\+_gen_2_mobile_firmware wcn7860_firmware sa8770p fastconnect_6200 srv1h_firmware wcn3980_firmware snapdragon_x35_5g_modem-rf_firmware qca6678aq_firmware qca6698aq video_collaboration_vc1_platform snapdragon_4_gen_1_mobile_firmware fastconnect_6900_firmware qcm4325 snapdragon_460_mobile_firmware sa9000p_firmware qfw7114 sm8550p wcd9390 sa7775p wcd9395 qfw7114_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware wsa8835_firmware wcd9370_firmware Snapdragon

CWE ID-CWE-822

Untrusted Pointer Dereference

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-05 Mar, 2025 | 04:55

Use After Free in DSP Service

Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.

Vendor-Qualcomm Technologies, Inc.

Product-Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 5.84%

||

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to read board data.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8845_firmware qcc2076_firmware wsa8840 wcd9370 sc8180xp-aaab_firmware wcd9340_firmware wcd9385 sc8380xp wcd9341_firmware qca1064 qcn7606 snapdragon_7c_compute_platform_firmware qcn7605_firmware snapdragon_7c\+_gen_3_compute_firmware qcc2073_firmware fastconnect_6700 qca1064_firmware qca6420 sc8180xp-ad sc8280xp-abbb snapdragon_7c_gen_2_compute_platform_firmware qca6430 wsa8815_firmware wcd9370_firmware sc8180xp-ad_firmware qcn7605 qcc2076 qcm6490_firmware sc8180xp-aaab qcn7606_firmware qca6595au wcd9340 wcd9341 qcm6490 wsa8810_firmware wsa8845h_firmware qca2062 qca6420_firmware aqt1000_firmware qcs6490_firmware sc8180xp-acaf qca2064_firmware snapdragon_7c\+_gen_3_compute wsa8835 qca6595au_firmware qca6391_firmware wsa8840_firmware qca2066_firmware qca6430_firmware fastconnect_6800_firmware qcs5430 wsa8845h wcd9380_firmware qcm5430 sm6250_firmware sc8180x-ad_firmware qcm5430_firmware sc8180x-acaf wsa8815 wsa8830 sc8180x\+sdx55_firmware qca2062_firmware qcc2073 sc8380xp_firmware qca2065 fastconnect_6800 qca1062 fastconnect_7800_firmware fastconnect_6900 wcd9375_firmware qca6391 qcs5430_firmware sc8180x\+sdx55 snapdragon_7c_gen_2_compute_platform wcd9385_firmware sm6250 fastconnect_6900_firmware wcd9380 qca1062_firmware fastconnect_6200 sc8280xp-abbb_firmware fastconnect_7800 sc8180x-acaf_firmware wcd9375 snapdragon_7c_compute_platform wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware qca2064 sc8180x-ad sc8180x-aaab wsa8810 sc8180x-aaab_firmware wsa8835_firmware qca2066 qcs6490 sc8180xp-acaf_firmware fastconnect_6200_firmware qca2065_firmware wsa8830_firmware video_collaboration_vc3_platform aqt1000 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.59% / 68.19%

||

7 Day CHG~0.00%

Published-13 Apr, 2013 | 01:00

Updated-27 Aug, 2025 | 20:32

Known KEV||Action Due Date - 2022-10-06||Apply updates per vendor instructions.

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program.

Vendor-n/a Motorola Mobility LLC. (Lenovo Group Limited)Linux Kernel Organization, Inc Qualcomm Technologies, Inc.

Product-msm8960 linux_kernel razr_m razr_hd atrix_hd android n/a Kernel

CWE ID-CWE-190

Integer Overflow or Wraparound

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-03 Mar, 2025 | 12:28

Use After Free in Audio

Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.

Vendor-Qualcomm Technologies, Inc.

Product-Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-03 Mar, 2025 | 13:10

Use After Free in Automotive Multimedia

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

Vendor-Qualcomm Technologies, Inc.

Product-Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.59%

||

7 Day CHG-0.01%

Published-07 Apr, 2025 | 10:15

Updated-20 Aug, 2025 | 21:01

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.

Vendor-Qualcomm Technologies, Inc.

Product-sw5100p wsa8832_firmware sa8195p snapdragon_xr2_5g_platform video_collaboration_vc1_platform wsa8810_firmware wsa8835 sxr2130 qcs610_firmware qam8295p qca6696 fastconnect_7800 sdx55_firmware wcn3660b qca6391 wsa8830 sa8155p wsa8832 sw5100 sa8155p_firmware fastconnect_6800 sa6150p_firmware wcn3988_firmware snapdragon_865_5g_mobile_platform_firmware qca6426_firmware video_collaboration_vc1_platform_firmware wsa8835_firmware snapdragon_x55_5g_modem-rf_system_firmware sa8295p_firmware sd865_5g_firmware wcn3660b_firmware sa6155p_firmware sa6145p qcs410_firmware wcd9385 qca6696_firmware sa8530p wcd9385_firmware wcn3680b_firmware snapdragon_xr2_5g_platform_firmware video_collaboration_vc3_platform_firmware c-v2x_9150_firmware sxr2250p wcn3680b sdm429w qca6426 sa8145p qcs610 wcn3950_firmware sa6150p qca6436 sxr2230p_firmware sa8530p_firmware wcd9370_firmware sxr2250p_firmware snapdragon_865_5g_mobile_platform wcd9370 qca6574au_firmware wsa8815 sdm429w_firmware sa8295p wcd9341 qsm8250_firmware sa6145p_firmware wsa8810 qca6436_firmware snapdragon_870_5g_mobile_platform_\(sm8250-ac\)snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)_firmware wcd9380 sxr2130_firmware c-v2x_9150 fastconnect_6800_firmware wsa8815_firmware fastconnect_6900_firmware snapdragon_8_gen_1_mobile_platform_firmware sw5100p_firmware qca6391_firmware sa8540p_firmware snapdragon_429_mobile_platform_firmware sa8150p_firmware qcn9074 video_collaboration_vc3_platform sw5100_firmware wcn3980_firmware sd865_5g snapdragon_870_5g_mobile_platform_\(sm8250-ac\)_firmware qam8295p_firmware fastconnect_7800_firmware snapdragon_429_mobile_platform snapdragon_w5\+_gen_1_wearable_platform_firmware wcn3620 snapdragon_w5\+_gen_1_wearable_platform wcn3980 sa8145p_firmware qca6574au wcn3988 snapdragon_8_gen_1_mobile_platform qcn9074_firmware sa8150p fastconnect_6900 wcn3620_firmware qsm8250 snapdragon_865\+_5g_mobile_platform_\(sm8250-ab\)sa9000p sxr2230p sdx55 wcd9341_firmware sa9000p_firmware sa8195p_firmware sa6155p snapdragon_x55_5g_modem-rf_system wcn3950 wcd9380_firmware qcs410 wsa8830_firmware sa8540p Snapdragon

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.05%

||

7 Day CHG-0.01%

Published-07 Apr, 2025 | 10:15

Updated-20 Aug, 2025 | 21:12

Incorrect Type Conversion or Cast in Multimedia Frameworks

Memory corruption while processing IOCTL calls.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800 fastconnect_6900_firmware snapdragon_8_gen_1_mobile_platform_firmware fastconnect_7800_firmware wsa8830 wcd9380_firmware wsa8835 snapdragon_8_gen_1_mobile_platform wsa8835_firmware fastconnect_6900 wsa8830_firmware wcd9380 Snapdragon

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.59%

||

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:27

Stack-based Buffer Overflow in Performance

Memory corruption when invalid input is passed to invoke GPU Headroom API call.

Vendor-Qualcomm Technologies, Inc.

Product-snapdragon_662_mobile_platform_firmware wsa8830 wcd9380_firmware sm4635_firmware wcn3990 sdm429w wcd9378_firmware qcm8550 wsa8840 wsa8835 sdm429w_firmware wcn3950_firmware snapdragon_8\+_gen_2_mobile_platform_firmware wcd9380 wcn6755_firmware snapdragon_480_5g_mobile_platform snapdragon_4_gen_1_mobile_platform_firmware wcd9370 sm8635_firmware snapdragon_460_mobile_platform_firmware snapdragon_480\+_5g_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn7880 wcn3990_firmware snapdragon_8_gen_2_mobile_platform wcd9335_firmware wcd9385_firmware wsa8845 wcn3950 wcn7881_firmware fastconnect_6200 qcm4325_firmware wcn3660b wsa8815 snapdragon_460_mobile_platform wsa8845_firmware snapdragon_4_gen_1_mobile_platform wcn3660b_firmware snapdragon_429_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware sm8750p fastconnect_6200_firmware wcd9375_firmware snapdragon_8_gen_3_mobile_platform wsa8845h_firmware snapdragon_429_mobile_platform snapdragon_680_4g_mobile_platform_firmware wcn7860 fastconnect_7800 qcm8550_firmware wcn7881 wcn7861_firmware wsa8840_firmware wsa8832_firmware sm4635 fastconnect_6900 fastconnect_6900_firmware sm8635 wcn3988_firmware wcn7880_firmware wsa8810_firmware wcd9341_firmware vision_intelligence_400_platform fastconnect_7800_firmware snapdragon_8\+_gen_2_mobile_platform wsa8845h wcn6755 wcd9395_firmware wcd9335 sg4150p sm8750_firmware sm8750p_firmware wsa8810 wsa8832 sm8550p snapdragon_680_4g_mobile_platform sm8750 wcd9385 wcd9341 wcn7860_firmware wcd9395 wcn7861 wcd9375 wcd9370_firmware sm8550p_firmware wcd9390 vision_intelligence_400_platform_firmware snapdragon_8_gen_3_mobile_platform_firmware snapdragon_662_mobile_platform snapdragon_685_4g_mobile_platform wsa8830_firmware wcd9390_firmware wcn3620_firmware wcn3988 wsa8815_firmware wsa8835_firmware wcn3620 snapdragon_695_5g_mobile_platform snapdragon_685_4g_mobile_platform_firmware wcd9378 sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware snapdragon_480\+_5g_mobile_platform qcm4325 Snapdragon snapdragon_662_mobile_platform_firmware wcd9380_firmware qcm8550_firmware sm4635_firmware wcd9378_firmware wcn7861_firmware wsa8832_firmware wsa8840_firmware fastconnect_6900_firmware wcn3988_firmware wcn7880_firmware sdm429w_firmware wcn3950_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware wcn6755_firmware wcd9395_firmware sm8750_firmware sm8750p_firmware snapdragon_4_gen_1_mobile_platform_firmware sm8635_firmware snapdragon_460_mobile_platform_firmware snapdragon_8_gen_2_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware wcn3990_firmware wcn7860_firmware wcd9335_firmware wcd9385_firmware wcn7881_firmware qcm4325_firmware wcd9370_firmware sm8550p_firmware snapdragon_8_gen_3_mobile_platform_firmware vision_intelligence_400_platform_firmware wcd9390_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware wsa8815_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_6200_firmware snapdragon_695_5g_mobile_platform_firmware wcd9375_firmware wsa8845h_firmware sg4150p_firmware snapdragon_680_4g_mobile_platform_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 14.19%

||

7 Day CHG~0.00%

Published-09 Jun, 2021 | 06:20

Updated-04 Aug, 2024 | 11:28

Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware sm6250p_firmware qcs610 qca6431_firmware wcd9360_firmware mdm9645 wcn3950_firmware sc8180x\+sdx55 qca6595au_firmware qca6335 msm8917 mdm8215 sd_455_firmware qcs605_firmware sd_675_firmware qcs6125_firmware mdm8615m_firmware sd632 msm8108 sa415m wcn3998 wcd9371_firmware msm8108_firmware wcn3950 sd720g mdm9628 mdm9206_firmware qsw8573_firmware wcn3660b sd450_firmware sd710_firmware mdm9230_firmware mdm8215m qca6574au_firmware mdm9630 wcd9375_firmware wcn3998_firmware msm8909w apq8009w_firmware qca6420 apq8053_firmware wcd9360 qca9367_firmware whs9410_firmware mdm8207 qcs6125 sa8155_firmware qca4004_firmware mdm9615m qca6430 wcd9306_firmware wcd9340 mdm9625_firmware sd765g qca1990_firmware qualcomm215_firmware qca6436 wcn6851 qcs603_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware wcd9341 mdm9655 qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g mdm8215_firmware wcn3910_firmware sd_8cx mdm9207_firmware qca4004 wsa8830_firmware mdm9330_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware msm8208_firmware sd450 wcn3610 mdm9640 msm8608 wcn3991 sda429w_firmware wcd9380_firmware sdm429w wcd9330 msm8996au_firmware csr6030 qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware qet4101_firmware msm8976_firmware qca6574 sd632_firmware sd670_firmware wcd9380 qualcomm215 mdm9230 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qca6174 qca6430_firmware wcd9335_firmware sd439_firmware wcn3980 qca6335_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware sd_8c_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd835 qca1990 wcn3980_firmware sd730 wcd9330_firmware sdx55m qca6421_firmware ar6003_firmware msm8953 sd821_firmware sd678_firmware wcn3680_firmware wcn6851_firmware qcs603 sd670 sd_636_firmware qca6564a_firmware apq8009w qca6694au_firmware msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware apq8084_firmware sdxr1 apq8096au mdm8207_firmware sdm630_firmware mdm9205_firmware qca6391_firmware sd820_firmware wcd9370_firmware sdx55 apq8053 sa8155p sd675 sd439 qet4101 wcn3660 qca9379 wcn3991_firmware mdm9150_firmware wsa8830 sd678 csrb31024 mdm9628_firmware mdm9650 sd_636 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g qca6174_firmware sd730_firmware mdm9310_firmware wcd9370 sd675_firmware qca6426 qca6584au_firmware wcn3990_firmware qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware whs9410 wcd9326_firmware mdm9615m_firmware wcn3615_firmware apq8037 sa8155 qca6320_firmware qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au sm7250p_firmware wcn3610_firmware qca6436_firmware mdm9207 wcd9306 qca6584au qca6564au_firmware qca6310 msm8208 sa515m_firmware sd429 sdxr2_5g qca9367 apq8084 sdm630 mdm9607_firmware sd821 mdm9655_firmware msm8976sg sa415m_firmware wcn3988_firmware sd205 sd429_firmware qca6421 sm6250 sd712_firmware apq8017_firmware wsa8810_firmware qca6694 sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m mdm9625 qca6390 wcd9375 sd750g_firmware aqt1000 msm8976 qca6694_firmware sm6250_firmware sc8180x\+sdx55_firmware msm8953_firmware qca6694au sda429w msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 ar6003 csr6030_firmware qca6564a mdm9630_firmware qcm6125_firmware mdm9635m_firmware wcn3990 sd_675 sd865_5g sdx24 msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a qca6310_firmware mdm9635m mdm9615 mdm9205 sa515m qca6574_firmware sd855 sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sd850_firmware apq8009 qca6391 sdxr1_firmware mdm9310 aqt1000_firmware msm8920 qcm4290 csrb31024_firmware sdx50m sdx20 sd480_firmware msm8920_firmware mdm9215 sd_455 qca6574au sd710 mdm8215m_firmware mdm9607 sa8155p_firmware sd205_firmware mdm9645_firmware wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 sd_8c wcn3680b sd835_firmware sd768g qca6696 sd845_firmware msm8608_firmware sdw2500 msm8940 apq8096au_firmware sd845 mdm9615_firmware apq8037_firmware sm7250p sd720g_firmware qcs410_firmware mdm9330 sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.36% / 57.40%

||

7 Day CHG-0.11%

Published-07 Oct, 2024 | 12:59

Updated-11 Aug, 2025 | 15:06

Known KEV||Action Due Date - 2024-10-29||Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

Use After Free in DSP Service

Memory corruption while maintaining memory maps of HLOS memory.

Vendor-Qualcomm Technologies, Inc.

Product-sw5100p qcs410_firmware sa6150p_firmware sd660_firmware sd865_5g qca6595 qcs610_firmware wcd9335 sxr2130_firmware wcd9370 qca6696 wcd9341_firmware sa4150p_firmware qca6426 fastconnect_6700 snapdragon_685_4g_mobile sa4150p wsa8815_firmware sa8195p_firmware qca6426_firmware qca6574au_firmware qam8295p wcd9341 qca6574au snapdragon_888\+_5g_mobile_firmware wcn3950 wsa8810_firmware snapdragon_870_5g_mobile_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware fastconnect_6800_firmware sa8295p_firmware snapdragon_870_5g_mobile sa4155p_firmware video_collaboration_vc1_platform_firmware sa4155p qca6584au snapdragon_xr2_5g_firmware sw5100_firmware fastconnect_6800 qca6595_firmware fastconnect_7800_firmware fastconnect_6900 video_collaboration_vc1_platform snapdragon_865_5g_mobile_firmware wcd9385_firmware fastconnect_6900_firmware wcd9380 sa6145p_firmware snapdragon_xr2_5g sa8150p snapdragon_680_4g_mobile sa6155p snapdragon_auto_5g_modem-rf_firmware wsa8810 sw5100 snapdragon_888_5g_mobile_firmware video_collaboration_vc3_platform qca6595au snapdragon_888_5g_mobile sa6155p_firmware snapdragon_685_4g_mobile_firmware qca6688aq qam8295p_firmware wcn3990_firmware snapdragon_660_mobile snapdragon_x55_5g_modem-rf qca6698aq_firmware qca6436_firmware snapdragon_888\+_5g_mobile wcd9385 snapdragon_8_gen_1_mobile snapdragon_x55_5g_modem-rf_firmware snapdragon_680_4g_mobile_firmware snapdragon_865\+_5g_mobile wcd9370_firmware snapdragon_auto_5g_modem-rf sxr2130 qca6174a sa8195p snapdragon_auto_5g_modem-rf_gen_2 qca6174a_firmware wcn3988 qcs6490_firmware qca6584au_firmware wcd9335_firmware wcn3980_firmware qca6436 wsa8835 qca6595au_firmware qca6391_firmware qcs610 sw5100p_firmware qca6696_firmware wcd9380_firmware sa6150p qcs410 sa8155p_firmware wsa8815 sd660 sg4150p sa8155p wsa8830 sa6145p snapdragon_865_5g_mobile wcd9375_firmware qca6391 snapdragon_865\+_5g_mobile_firmware qca6698aq sg4150p_firmware wcn3950_firmware sa8295p fastconnect_7800 sa8145p_firmware sd865_5g_firmware snapdragon_660_mobile_firmware qca6688aq_firmware wcd9375 sa8150p_firmware wcn3988_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware sa8145p wcn3990 wsa8835_firmware qcs6490 wcn3980 wsa8830_firmware snapdragon_8_gen_1_mobile_firmware Snapdragon qca6688aq_firmware qualcomm_video_collaboration_vc1_platform_firmware qca6574au_firmware sa4155p_firmware sd660_firmware wcd9380_firmware snapdragon_8_gen_1_mobile_platform_firmware sa6145p_firmware qca6584au_firmware sa6150p_firmware qca6391_firmware qualcomm_video_collaboration_vc3_platform_firmware qam8295p_firmware sa8155p_firmware snapdragon_auto_5g_modem-rf_firmware qcs410_firmware sa6155p_firmware qca6698aq_firmware wsa8835_firmware fastconnect_6700_firmware snapdragon_888_5g_mobile_platform_firmware qca6436_firmware wsa8810_firmware snapdragon_870_5g_mobile_platform_firmware qcs6490_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware sg4150p_firmware fastconnect_7800_firmware sa8150p_firmware snapdragon_865_5g_mobile_platform_firmware wcn3990_firmware sw5100_firmware sa8295p_firmware wcn3980_firmware snapdragon_865\+_5g_firmware wcn3950_firmware wsa8815_firmware sxr2130_firmware qcs610_firmware snapdragon_xr2_5g_platform_firmware wcd9341_firmware wcd9375_firmware wcd9385_firmware snapdragon_680_4g_mobile_platform_firmware sw5100p_firmware qca6696_firmware wcd9335_firmware snapdragon_660_mobile_platform_firmware wcn3988_firmware snapdragon_888\+_5g_mobile_platform_firmware sa8145p_firmware wcd9370_firmware fastconnect_6900_firmware sm6225-ad_firmware qca6174a_firmware snapdragon_x55_5g_modem-rf_system_firmware wsa8830_firmware sd865_5g_firmware fastconnect_6800_firmware sa8195p_firmware qca6595au_firmware sa4150p_firmware qca6426_firmware qca6595_firmware Multiple Chipsets

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.59%

||

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:28

Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware qca2066 wsa8830 wcd9380_firmware qca1062_firmware sdm429w snapdragon_8cx_gen_2_5g_compute_platform fastconnect_6800 snapdragon_8c_compute_platform wsa8840 wsa8835 sdm429w_firmware snapdragon_7c\+_gen_3_compute wcd9380 qca6420_firmware qca6595au_firmware fastconnect_6700 video_collaboration_vc3_platform qca2064_firmware qca2062 qca6174_firmware wcd9370 sc8180x qcm5430_firmware qca6174a video_collaboration_vc3_platform_firmware qca6174 qca9377 qca6430_firmware qcc2076_firmware qcn7605 wcd9385_firmware wsa8845 qcc2073_firmware fastconnect_6200 wcd9340_firmware wcn3660b wsa8815 qca2065 wsa8845_firmware qca1064 wcn3660b_firmware snapdragon_429_mobile_platform_firmware sc8380xp fastconnect_6200_firmware sdx55_firmware qca6595au wcd9375_firmware wsa8845h_firmware qca6391 snapdragon_429_mobile_platform qca6420 snapdragon_8cx_gen_3_compute_platform_firmware fastconnect_7800 aqt1000_firmware qca2062_firmware snapdragon_8cx_compute_platform_firmware qcs6490 qcm6490_firmware wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware sc8180x_firmware qca6164_firmware qca6430 fastconnect_6700_firmware snapdragon_8cx_compute_platform wcd9340 wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware wsa8810 wsa8845h qcn7605_firmware snapdragon_8cx_gen_3_compute_platform qcm5430 snapdragon_8c_compute_platform_firmware qcs5430 qca6174a_firmware wcd9385 wcd9341 qca2066_firmware qca2065_firmware qcs6490_firmware qca1064_firmware qca6164 qca1062 qcs5430_firmware qca6391_firmware wcd9375 qca2064 aqt1000 wcd9370_firmware sdx55 wsa8830_firmware qcc2076 wcn3620_firmware snapdragon_7c\+_gen_3_compute_firmware qcm6490 wsa8815_firmware wsa8835_firmware wcn3620 snapdragon_8cx_gen_2_5g_compute_platform_firmware fastconnect_6800_firmware qcn7606_firmware qcc2073 qcn7606 Snapdragon aqt1000_firmware qca2062_firmware qca9377_firmware wcd9380_firmware qca1062_firmware qcm6490_firmware wsa8840_firmware fastconnect_6900_firmware sc8380xp_firmware qca6164_firmware sdm429w_firmware fastconnect_6700_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware qca6420_firmware qca6595au_firmware qcn7605_firmware qca2064_firmware qca6174_firmware qcm5430_firmware qca6174a_firmware qca2066_firmware qca2065_firmware qca6430_firmware qca1064_firmware qcc2076_firmware qcs5430_firmware qcs6490_firmware qualcomm_video_collaboration_vc3_platform_firmware qca6391_firmware wcd9385_firmware qcc2073_firmware wcd9370_firmware wcd9340_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware wsa8815_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_6200_firmware wcd9375_firmware wsa8845h_firmware fastconnect_6800_firmware qcn7606_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-11 Aug, 2025 | 15:06

Use After Free in MProc

Memory corruption while processing command in Glink linux.

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w_firmware qcs410_firmware sa6150p_firmware sd865_5g immersive_home_214 qcn9000_firmware ipq9574 qcn6102_firmware sw5100p qcn9022 qcs610_firmware ipq6028_firmware wcd9370 qca8081_firmware snapdragon_429_firmware qca8072 qca6696 wcd9340_firmware wcd9341_firmware ipq5028_firmware qcn6024 qcc710_firmware ipq8076 qca6426 qcn6422_firmware ipq6018_firmware qcn6023 qcn5124_firmware snapdragon_888_5g qca8337 qca6426_firmware ipq6000 ipq9048 ipq8078a qca6574au_firmware ipq8078a_firmware qam8295p wcd9341 ipq5312 qca6574au wsa8810_firmware snapdragon_429 qcn9100_firmware snapdragon_865\+_5g wcn3660b_firmware qcn5122 fsm20055 fastconnect_6800_firmware snapdragon_865\+_5g_firmware qcn6024_firmware snapdragon_x65_5g video_collaboration_vc1_platform_firmware snapdragon_888\+_5g_firmware c-v2x_9150 qcn9000 qcc710 qcn6132_firmware snapdragon_xr2_5g_firmware qsm8250_firmware qcn5054 qcn6402 fastconnect_6900 snapdragon_w5\+_gen_1_wearable_firmware qcn6432 video_collaboration_vc1_platform immersive_home_326_firmware ipq5332_firmware qcn5052 fsm10056_firmware snapdragon_x72_5g qfw7114 wcd9385_firmware ipq9574_firmware ipq8074a_firmware ipq8076a qcn5164 sa6155p qcn6100_firmware qcn9160 csr8811_firmware wsa8810 qca8075 qcn5021 qsm8250 qca8085 qcn6100 snapdragon_865_5g_firmware sa6155p_firmware qfw7124_firmware qca6436_firmware qcn9012 qcn9070 ipq8070a_firmware qcn5021_firmware qcf8001 qca8084 sdx65m wcd9370_firmware qca9367 wcn3660b ipq9570 wcn3620_firmware sa8195p qca6174a wcd9340 snapdragon_auto_5g_modem-rf_gen_2 ipq5302 qcn6122_firmware qcn5154_firmware ipq9048_firmware snapdragon_x55_5g_firmware wcn3988 fsm20055_firmware qcn5122_firmware qcn9274 qcn9024 pmp8074 ipq8076a_firmware ipq9570_firmware qcn6412_firmware qcn9024_firmware qca8082 sa6150p qcs410 sa8155p_firmware sa8155p qca8072_firmware wsa8830 snapdragon_870_5g_firmware ipq5312_firmware qcf8000_firmware sa6145p snapdragon_x65_5g_firmware qcn9074_firmware ipq8174 immersive_home_318_firmware qcn6122 ipq8174_firmware snapdragon_888\+_5g snapdragon_x75_5g ar8035 ipq8072a immersive_home_216_firmware wcn3620 snapdragon_x72_5g_firmware immersive_home_316 qcf8000sfp_firmware qcn6224 ipq8071a qcn6112 qca6698aq qxm8083 wcn3950_firmware wcn3680b sa8145p_firmware sa8150p_firmware video_collaboration_vc3_platform_firmware qcn6023_firmware qcn5164_firmware ipq8078 qcn5152_firmware ipq9554_firmware wsa8830_firmware qcn9072 qcn6224_firmware qca8386_firmware qca8082_firmware immersive_home_216 sxr2130_firmware qcn6432_firmware ar8035_firmware qcn5022_firmware qca4024_firmware qca0000_firmware fsm20056 ipq9008 ipq9554 ipq9008_firmware qcn9074 ipq5300_firmware wsa8815_firmware snapdragon_865_5g sa8195p_firmware qca8337_firmware qcn5054_firmware qca9888 ipq5332 qca9377_firmware ipq8173 ipq8072a_firmware ipq6010_firmware wcn3950 qcn6112_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware ipq5028 qca8085_firmware qcn9070_firmware qcf8001_firmware sa8295p_firmware qcn9022_firmware ipq5010_firmware qcn6132 ipq6018 qcn9160_firmware qcn6102 qcn6274_firmware qca6584au fsm10056 sw5100_firmware fsm20056_firmware qfw7114_firmware fastconnect_6800 qca4024 fastconnect_7800_firmware qcn6422 immersive_home_214_firmware qxm8083_firmware ipq5302_firmware ipq5300 ipq8070a fastconnect_6900_firmware wcd9380 sa6145p_firmware snapdragon_xr2_5g sa8150p immersive_home_3210 qca8075_firmware snapdragon_888_5g_firmware qcf8000 qcn5052_firmware ipq6010 sdx65m_firmware video_collaboration_vc3_platform sw5100 c-v2x_9150_firmware qam8295p_firmware qcn6402_firmware snapdragon_8_gen_1_firmware qca6698aq_firmware wcd9385 qca9367_firmware qca8084_firmware snapdragon_8_gen_1 qcn5024 sdx55_firmware immersive_home_326 snapdragon_x55_5g ipq8071a_firmware sxr2130 ipq6028 snapdragon_870_5g qcn9100 qca6174a_firmware sdm429w ipq8076_firmware wcn3980_firmware qcn6274 qca6436 qfw7124 snapdragon_w5\+_gen_1_wearable wsa8835 qca6584au_firmware qca6391_firmware qca0000 sw5100p_firmware qca6696_firmware wcd9380_firmware qca8081 wsa8815 qcn5124 qca9377 qcn5152 qcn6412 sdx55 qcn9072_firmware qca9888_firmware ipq8074a immersive_home_3210_firmware qca9889 qcn5024_firmware qca8386 qca6391 snapdragon_x75_5g_firmware immersive_home_318 ipq5010 qcn9274_firmware qcn9012_firmware ipq8173_firmware sa8295p ipq6000_firmware fastconnect_7800 sd865_5g_firmware pmp8074_firmware ipq8078_firmware qca9889_firmware wcn3988_firmware immersive_home_316_firmware qcn5154 sa8145p wsa8835_firmware csr8811 qcn5022 wcn3980 wcn3680b_firmware qcf8000sfp qcs610 Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.59%

||

7 Day CHG~0.00%

Published-02 Dec, 2024 | 10:18

Updated-12 Dec, 2024 | 15:29

Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800 qca2062_firmware qca2066 wcd9380_firmware sdm429w wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware wsa8840 sdm429w_firmware fastconnect_6700_firmware snapdragon_7c\+_gen_3_compute wcd9380 fastconnect_7800_firmware wsa8845h fastconnect_6700 qca2064_firmware qca2062 wcd9385 qca2066_firmware qca2065_firmware qcc2076_firmware wcd9385_firmware wsa8845 snapdragon_429_mobile_platform qcc2073_firmware qca2064 wcn3660b qca2065 qcc2076 wsa8845_firmware wcn3620_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3660b_firmware sc8380xp snapdragon_429_mobile_platform_firmware wcn3620 wsa8845h_firmware qcc2073 Snapdragon qca2062_firmware wcd9380_firmware qca2066_firmware qca2065_firmware qcc2076_firmware wsa8840_firmware wcd9385_firmware fastconnect_6900_firmware qcc2073_firmware sc8380xp_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wsa8845h_firmware qca2064_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.69%

||

7 Day CHG~0.00%

Published-07 May, 2021 | 09:10

Updated-04 Aug, 2024 | 11:28

Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Vendor-Qualcomm Technologies, Inc.

Product-qfs2580 qca9377_firmware qpm5679_firmware sm6250p_firmware qca8337 qfs2608_firmware qfs2530 qpm8870_firmware qpa8688 pm6125 qat5522_firmware wcn3950_firmware pm8150a sc8180x\+sdx55 qdm5670 qca6595au_firmware qpm5541_firmware qpa5581_firmware sa6155 pm7150l qpa8821 pm8998_firmware wtr5975_firmware qcs6125_firmware pm456_firmware qpa5580_firmware sa415m wcn3998 wcd9371_firmware wcn3950 sm4125 sd720g qsw8573_firmware qsm8350_firmware qsw8574_firmware qsm8350 sd460_firmware smb2351_firmware sd6905g qpa4360_firmware wcn3998_firmware pm855p qca6420 pm6150a qpm6670_firmware pm660_firmware pm8150b sa8155_firmware qca4004_firmware qca6430 qat3522 pmr735a wcd9306_firmware wcd9340 sd765g sdr660 qfs2630_firmware sdr865 qdm5620_firmware smr545 qca6696_firmware qln5020 wcd9371 sd870_firmware pmm855au_firmware sa8150p pm6350 qdm5621 qtc800s qca4004 qet6105 sd712 pm640p_firmware wcn6750_firmware qat5516_firmware pm6150l sd8885g pm855l_firmware qtc410s wcn3991 qpa8801 pm8150l_firmware qat5533_firmware sdx55m_firmware sdxr25g qpa8673_firmware pm6150 smb1354_firmware sd670_firmware qca6574 qfs2630 qpa8842 sdr052_firmware wcd9380 qcs410 qpm5579_firmware smb1380_firmware pmk8350_firmware smb1381 pm855p_firmware pm7250 qpa8803 sdx24_firmware sdxr25g_firmware qdm2301 wcd9340_firmware wsa8815 wcn6850 qdm5621_firmware qdm2301_firmware qpm6375 wcn3980_firmware sd730 pm660l_firmware pm6250_firmware pm8008 pm8350b_firmware qtm525_firmware pme605_firmware pme605 sd678_firmware qpm5621_firmware qln1021aq_firmware qcs603 qpa6560_firmware qpa8802_firmware qln4640_firmware qpm5621 qpm6582 sd670 pm8009_firmware qfs2580_firmware qcm4290_firmware wcn6855 pm8150l pmi8998_firmware qcs610_firmware sa6145p sdr105 pm4250 ar8031 qpm5577 wtr2965 mdm9205_firmware qca6391_firmware sa2150p pm8150 wcd9370_firmware qat3516_firmware sdx55 csra6640 qat3555_firmware qpa8803_firmware pm855b smb2351 qln1031 qsm8250_firmware qpm5870 wsa8830 pm660 qet6110_firmware qpm6325 pm6125_firmware qbt1500 qpa5581 csrb31024 pmx24_firmware fsm10055_firmware qbt1500_firmware qpm5870_firmware qcs4290 qet6100 pmm855au qca6420_firmware smb1396 pm7150a sd675_firmware pm8350 qca6564 qpa4361_firmware pm8350c_firmware qpa5461_firmware qca6426 wcn3990_firmware qca9377 qpm5641 wcd9385_firmware qdm5650_firmware wcd9326_firmware pm7250_firmware qdm5620 qln1021aq smb1380 pmk8002_firmware qsw6310_firmware sa8155 qln1031_firmware qdm4650_firmware sdx55_firmware pmm6155au_firmware qat5533 sm7250p_firmware qsm7250_firmware qpm6670 pm7150l_firmware wcd9306 qca6584au qpm4641 qat5515_firmware pm855 qpm8830_firmware pm8250 qdm4643 qfs2530_firmware sa415m_firmware pmx55 qpm4641_firmware wcn3988_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware qpm5677 qat5515 wcd9326 wcd9335 pm6350_firmware pm8004_firmware sdr8150_firmware qcs4290_firmware qtc800h_firmware qpm5620 qpm4630 qca6390 wcd9375 sd750g_firmware aqt1000 sc8180x\+sdx55_firmware pmm8195au sm6250_firmware qln4642 qpm5677_firmware wsa8815_firmware wtr3925_firmware smr525_firmware pm8998 qpm8820_firmware qpm6621_firmware pm670a_firmware qcm6125_firmware pmx55_firmware qca6595 pm8150_firmware smb1398_firmware qpm8830 qat5522 pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware qpa4361 qpm4640_firmware wcn6855_firmware qpm5577_firmware qdm5679_firmware pm8350c smr525 qca6310_firmware pm6150l_firmware pmr525 pm8150a_firmware qca6574_firmware qln1036aq_firmware sd665 pm6150a_firmware pm6150_firmware qca6175a sd765 qca6574a_firmware qpm4630_firmware qat3555 sd850_firmware qpa5461 sd8c_firmware wtr2965_firmware pm670_firmware csrb31024_firmware qfs2608 sd480_firmware qln1036aq qtc801s qpm5641_firmware sd710 pm8008_firmware qpm6621 pmr735a_firmware pmx50 qca6564_firmware sdr8250 sd768g pm8004 pm640l pmk8002 sd845 qcs410_firmware qca6175a_firmware qpa5580 qpm5579 fsm10055 sa6150p_firmware qcs610 qpm5620_firmware qdm2307 qca6431_firmware qpa8802 wcd9360_firmware qpm6585_firmware qat3519 qbt2000_firmware qtc800h sa8150p_firmware qcs2290 sdr8250_firmware qca6335 csra6620_firmware qcs605_firmware smr546_firmware qdm5671 csra6640_firmware pmc1000h qpm4650_firmware qat3518 sd8c sdr425_firmware smr526_firmware pm640a_firmware wgr7640_firmware qdm2305_firmware qpm5670_firmware sd710_firmware qdm5652 qca6574au_firmware qpm8870 wcd9375_firmware qpm5679 qbt2000 sa6155_firmware wcd9360 pmx50_firmware qpa8675_firmware sdr735g wcn3999 qdm3301_firmware qsm7250 qcs6125 sd662_firmware qcs405 qdm2308_firmware fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware qpa6560 sdr675_firmware wcd9341 qdm4643_firmware qca6431 qet4100_firmware sd750g wcn3910_firmware qpm5657 qpm5875_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 wtr3925 sdr052 sa8195p_firmware smb1390 qet4100 qpa8686_firmware qpm6585 qca8337_firmware wcd9380_firmware smb1355 qln4650 sdr735g_firmware wgr7640 qat5568 qet5100 qdm5671_firmware qpa8801_firmware qca6564au qtm527_firmware wcn6856_firmware pm8005_firmware qet4101_firmware pm7250b qln4642_firmware smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware qet4200aq_firmware sdx50m_firmware sdr735 smb1395 pm660l smr526 wtr5975 qca6430_firmware pmk8003 qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 qca6335_firmware qsw8573 qcs605 sd7c wcn3910 qca6426_firmware pm8350_firmware pm8009 qpa8675 sdr051_firmware sdx55m pm670a qca6421_firmware qat3518_firmware qsw8574 pmi8998 sd6905g_firmware ar8031_firmware pm855l wcn6851_firmware qdm5670_firmware sd8655g pm7150a_firmware pm8150b_firmware smr545_firmware pmc1000h_firmware qca6564a_firmware qdm2310_firmware pm4250_firmware sdr105_firmware sd480 sd870 sd8885g_firmware pm670 qdm5677 pm8005 qsm8250 pm855_firmware qdm2302 pmm6155au sdxr1 pm855b_firmware qca6595_firmware qcs405_firmware qpm6582_firmware qpm6375_firmware pm640l_firmware qln4650_firmware qpm5875 qet5100m sd888_firmware sa8155p sd675 qet4101 qat3516 pm670l qpm5658 ar8035_firmware qcm2290 qpm5658_firmware wcn3991_firmware qdm5652_firmware pmm8155au_firmware sd678 sdr051 qln5030 qcs2290_firmware pm4125 fsm10056 pmi632 qpa2625_firmware pm456 sd7c_firmware pm8350bh_firmware csra6620 pmr735b_firmware qet5100_firmware qpm4621 qet6100_firmware pm670l_firmware sdr660g sd765g_firmware qpa8686 qca6390_firmware sd730_firmware wcd9370 sdr425 pmr525_firmware qca6584au_firmware pmi632_firmware qpm5541 qat5516 sd662 qpa8821_firmware sdr660g_firmware pm8350bh pm3003a qca6595au wcn3999_firmware qca6436_firmware smb1354 qca6564au_firmware qdm2305 sa6155p_firmware qca6310 qpm8820 qln5020_firmware sa515m_firmware smb1398 sa6145p_firmware sdr675 sm6250 sd712_firmware wsa8810_firmware smb231 sd765_firmware qdm5677_firmware qet4200aq qca6174a_firmware wcd9385 qpm6325_firmware qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware pm4125_firmware ar8035 qpa8673 qdm2310 qln5030_firmware smb1396_firmware wcn6850_firmware wsa8835_firmware qca6564a smr546 pmx24 qet6110 qln5040 qcm2290_firmware qpm8895 qpm5670 wcn3990 qtm527 pmk8350 sdx24 sd888 pm8350b qdm2307_firmware wsa8835 qpm5657_firmware sm6250p sdr660_firmware qca6574a smb1390_firmware qca6174a qpm4640 wcn6750 qet5100m_firmware qpm4650 mdm9205 qtm525 sa515m sa2150p_firmware sd855 sm4125_firmware sd8cx pm640p sd768g_firmware sdr865_firmware pm8250_firmware pm6250 sd460 qca6391 sd8cx_firmware sdxr1_firmware smb1351 aqt1000_firmware qpm8895_firmware qcm4290 sdx50m pm640a sdr8150 smb1395_firmware qdm4650 pmd9655 qca6574au sa8155p_firmware qsw6310 qet6105_firmware sd8655g_firmware wcd9341_firmware qcm6125 wsa8810 qtc410s_firmware smb231_firmware qat5568_firmware qdm2308 qat3550 wcn6856 qdm5679 pm3003a_firmware qca6696 qtc800s_firmware smb1381_firmware sd845_firmware qpa2625 sa6150p qpa8688_firmware pmm8195au_firmware sm7250p sd720g_firmware qpm4621_firmware sd850 qln4640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.76%

||

7 Day CHG~0.00%

Published-12 Nov, 2020 | 10:00

Updated-04 Aug, 2024 | 11:21

u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QCS4290, QM215, QSM8350, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SC8180X, SC8180XP, SDX55, SDX55M, SM4250, SM4250P, SM6115, SM6115P, SM6125, SM6250, SM6350, SM7125, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SM8350, SM8350P, SXR2130, SXR2130P

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.50%

||

7 Day CHG~0.00%

Published-07 Apr, 2025 | 10:15

Updated-07 Apr, 2025 | 18:57

Use After Free in HLOS

Memory corruption while handling file descriptor during listener registration/de-registration.

Vendor-Qualcomm Technologies, Inc.

Product-Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-03 Mar, 2025 | 12:27

Use After Free in Camera Linux

Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.

Vendor-Qualcomm Technologies, Inc.

Product-Snapdragon

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.79%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-03 Mar, 2025 | 13:08

Use of Out-of-range Pointer Offset in Automotive Audio

Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.

Vendor-Qualcomm Technologies, Inc.

Product-Snapdragon

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.58%

||

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-03 Mar, 2025 | 13:14

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Memory corruption while processing camera use case IOCTL call.

Vendor-Qualcomm Technologies, Inc.

Product-Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 7.69%

||

7 Day CHG~0.00%

Published-07 Apr, 2021 | 07:55

Updated-04 Aug, 2024 | 11:28

User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-pm660 wcn3990 sd636 qca6595 qca6564au qet4101_firmware pm855a_firmware wcn3950_firmware pmm855au sd455 qtc800h smb1351_firmware qca6595au_firmware qpa4360 pm855a qet4200aq_firmware sdr660_firmware qca6574a pm660l wcn3990_firmware wcn3980 wcd9335_firmware qat3522_firmware qpa4340_firmware wcn3950 qpa5460 wcd9340_firmware qln1036aq_firmware qln1021aq qca6574a_firmware qln1031_firmware qca6574au_firmware qpa4360_firmware qca6595au wcn3980_firmware smb1351 pm660l_firmware qca6564au_firmware qpa5460_firmware pm660_firmware pm660a qpa4340 qln1021aq_firmware rsw8577 qln1036aq sdm630 qca6574au qat3522 qca6564a_firmware wcd9340 wcd9341_firmware rsw8577_firmware qat3514 sdr660 wcd9335 qet4200aq qat3550 pm660a_firmware qln1031 wcd9341 qtc800h_firmware qca6595_firmware qet4100_firmware sdm630_firmware qat3550_firmware qtc800s_firmware pmm855au_firmware qet4100 qtc800s qat3514_firmware sd660 qet4101 sd455_firmware sd660_firmware qca6564a sd636_firmware Snapdragon Industrial IOT, Snapdragon Mobile

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.39%

||

7 Day CHG~0.00%

Published-22 Feb, 2021 | 06:25

Updated-04 Aug, 2024 | 11:28

Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware qdm5652_firmware qpm5679_firmware sdr051 qet6110_firmware qln5030 qca8337 qpa2625_firmware csrb31024 qpa8802 qpm6585_firmware qat3519 pmx24_firmware qbt2000_firmware qet5100_firmware qat5522_firmware sd765g_firmware qdm5670 qpa8686 qca6595au_firmware pm7150l qpa8821 pm7150a qdm5671 qat3518 qca6584au_firmware qpa5580_firmware sa415m wcn3998 smr526_firmware wcd9385_firmware qdm5650_firmware pm7250_firmware qdm2305_firmware qdm5620 qln1021aq qpa8821_firmware qpm5670_firmware pmk8002_firmware qdm5652 qca6574au_firmware qln1031_firmware sdx55_firmware qat5533 qca6595au qpm5679 qbt2000 wcn3998_firmware sm7250p_firmware pm855p pm7150l_firmware pmx50_firmware qca6564au_firmware qca6584au qdm2305 qat5515_firmware qln5020_firmware pm855 qdm3301_firmware qpm8830_firmware sa415m_firmware pmx55 qpa8842_firmware qdm3301 qat3519_firmware wsa8810_firmware qpm5677 qat5515 sd765g sd765_firmware qdm5677_firmware qpa6560 pm8004_firmware sdr865 sdr8150_firmware qdm5620_firmware wcd9385 wcd9341 qca6696_firmware qln5020 qln5040_firmware aqt1000 qpa8673 qdm5621 qln5030_firmware qln4642 qpm5677_firmware qdm5650 wsa8815_firmware smr525_firmware sdr052 smb1390 pmx24 pm855l_firmware qet6110 qln5040 qpa8686_firmware qpm8895 qpm6585 wcn3991 qca8337_firmware qpm5670 wcd9380_firmware smb1355 qln4650 qpa8801 pmx55_firmware qtm527 qet5100 qdm5671_firmware qpa8801_firmware qca6564au qat5533_firmware qtm527_firmware qpm8830 qpa8673_firmware qat5522 qet4101_firmware pm7250b qln4642_firmware qpa8842 sdr052_firmware wcd9380 smb1355_firmware pm7250b_firmware qca6574a pm855p_firmware sdx50m_firmware smb1390_firmware pm7250 qdm5679_firmware smr525 qpa8803 smr526 qtc801s_firmware qdm2301 qtm525 qln1036aq_firmware wsa8815 qdm5621_firmware qdm2301_firmware sd765 qca6574a_firmware sd768g_firmware sdr865_firmware qat3555 sdr051_firmware qca6391 aqt1000_firmware pm8008 qpm8895_firmware qat3518_firmware qtm525_firmware csrb31024_firmware sdx50m sdr8150 qpm5621_firmware pm855l qln1021aq_firmware qdm5670_firmware qln1036aq qtc801s qpa6560_firmware qpa8802_firmware pm7150a_firmware qca6574au qpm5621 qpm6582 pm8008_firmware wcd9341_firmware wsa8810 pmx50 qdm5677 qdm5679 pm855_firmware pm855b_firmware sd768g qpm6582_firmware qca6696 qca6391_firmware qln4650_firmware qat3516_firmware pm8004 pmk8002 qpa2625 sdx55 qet4101 qat3555_firmware qat3516 sm7250p qpa8803_firmware qpm5658 pm855b qln1031 qpm5658_firmware qpa5580 Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 25.04%

||

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-04 Aug, 2024 | 00:33

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware sd_8cx_gen3_firmware wsa8830 sd678 sm6250p_firmware qcs610 qcs2290_firmware qca8337 qca6431_firmware sd7c_firmware wcd9360_firmware sdx65 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 sd_675_firmware sd675_firmware qca6426 wcn3990_firmware qrb5165n_firmware wcn3998 wcd9371_firmware wcd9385_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware sm4125 sd720g wcd9326_firmware wcn3950 wcn3660b qsm8350_firmware sd662 sd710_firmware qsm8350 sd460_firmware sa8155 sa9000p_firmware sm7315_firmware qca6574au_firmware sdx55_firmware wcn7850 qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware wcd9360 qrb5165n sd680_firmware sd778g sa6155p_firmware sd_8cx_gen2 sa515m_firmware qcs6490 qrb5165_firmware qrb5165m_firmware sd429 sdxr2_5g wcn7851 sa8155_firmware sd662_firmware wcn3988_firmware qca6430 sd429_firmware qca6421 sd778g_firmware sm6250 wcd9340 sa8195p wsa8810_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcd9326 sa6155p wcn6851 qca8081 wcn7851_firmware qcs4290_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware wcd9371 sd750g sd870_firmware sd_8cx_gen3 qca6390 ar8035 sd750g_firmware aqt1000 wcd9375 wcn3910_firmware sm6250_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware qcm6490 sd888_5g_firmware wcn3988 wcn3620 wcn6850_firmware wcn7850_firmware sa8195p_firmware wsa8815_firmware wsa8835_firmware wcn6750_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sdm429w sd780g sw5100p sd865_5g sdx55m_firmware wcn6856_firmware sd888 sd670_firmware qca6574 wsa8835 sdm429w_firmware sd665_firmware sa8540p_firmware wcd9380 sd888_5g sm6250p qcs410 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p qca6430_firmware wcn3980 wcn6750 sa515m sa9000p qca6574_firmware wcd9340_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd7c wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 sd768g_firmware qrb5165m wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware qcm4290 qcm6490_firmware sdx50m qrb5165 sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd710 sd670 wcd9341_firmware qcm4290_firmware sd480 sd870 wcn6855 wsa8810 sa8540p sw5100p_firmware qcs610_firmware wcn6856 sd695_firmware sd768g wcn6740 qca6696 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sm7250p sd720g_firmware sw5100_firmware qcs410_firmware ar8035_firmware qcm2290 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-1284

Improper Validation of Specified Quantity in Input

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 30.17%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:11

Updated-04 Aug, 2024 | 00:33

Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-ipq5018_firmware sd_8cx_gen3_firmware qca2066 wsa8830 qcn9070 qca8337_firmware wcd9380_firmware qcn9000 qca8337 wcn6856_firmware qcn9012 sd888 sdx65 qcn9072 qcn6122_firmware wsa8835 wcd9380 ipq5028_firmware sd888_5g qca2064_firmware qca2062 wcd9370 wcn6855_firmware qcn6132_firmware qcn9000_firmware qcn9012_firmware ipq5018 wcn6750 wcd9385_firmware qcn6024_firmware sd_8_gen1_5g_firmware wcn6850 qca2065 qcn6112 qcn6100_firmware qcn6102_firmware qcn9024 wcd9375_firmware qca8081_firmware qcn6023_firmware qca6391 ipq5010 qca2062_firmware qcn6102 qcn9100 sdx65_firmware qcs6490 qcm6490_firmware ipq5028 qcn9070_firmware wcn6851_firmware qcn6112_firmware qcn9074 qcn9024_firmware qcn6132 wcn6855 wcn6851 qca8081 wcn6856 qcn6023 wcd9385 qcn6122 qcc710 qca2066_firmware qca2065_firmware qcs6490_firmware sd_8cx_gen3 qca6391_firmware ar8035 wcd9375 qca2064 wcd9370_firmware sd888_firmware qcc710_firmware qcn9100_firmware qcn9022_firmware wsa8830_firmware qcn6024 qcn9022 ipq5010_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8835_firmware qcn6100 qcn9072_firmware qcn9074_firmware sm8475 wcn6750_firmware ar8035_firmware Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.30%

||

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-16 Nov, 2024 | 04:55

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8830 wcd9380_firmware snapdragon_8c_compute_platform_\(sc8180x-ad\)_\"poipu_lite\"sdm429w snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\,_ab\)_firmware snapdragon_8cx_compute_platform_\(sc8180x-aa\,_ab\)snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"_firmware fastconnect_6800 snapdragon_8cx_compute_platform_\(sc8180xp-ac\,_af\)_\"poipu_pro\"wsa8840 wsa8835 sdm429w_firmware snapdragon_7c\+_gen_3_compute sc8180x\+sdx55 wcd9380 qca6420_firmware fastconnect_6700 video_collaboration_vc3_platform wcd9370 snapdragon_8c_compute_platform_\(sc8180xp-ad\)_\"poipu_lite\"qcm5430_firmware video_collaboration_vc3_platform_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\,_af\)_\"poipu_pro\"_firmware qca6430_firmware snapdragon_8cx_compute_platform_\(sc8180x-aa\,_ab\)_firmware wcd9385_firmware wsa8845 snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)fastconnect_6200 wcd9340_firmware wcn3660b wsa8815 wsa8845_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\,_af\)_\"poipu_pro\"wcn3660b_firmware snapdragon_429_mobile_platform_firmware sc8380xp fastconnect_6200_firmware wsa8845h_firmware wcd9375_firmware qca6391 qca6420 snapdragon_429_mobile_platform fastconnect_7800 snapdragon_7c_compute_platform_firmware aqt1000_firmware qcs6490 qcm6490_firmware wsa8840_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\,_ab\)fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware snapdragon_8cx_compute_platform_\(sc8180xp-ac\,_af\)_\"poipu_pro\"_firmware qca6430 sm6250 wcd9340 fastconnect_6700_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware wsa8810 wsa8845h qcm5430 qcs5430 wcd9385 wcd9341 snapdragon_8c_compute_platform_\(sc8180x-ad\)_\"poipu_lite\"_firmware snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"qcs6490_firmware qcs5430_firmware qca6391_firmware wcd9375 wcd9370_firmware aqt1000 snapdragon_8c_compute_platform_\(sc8180xp-ad\)_\"poipu_lite\"_firmware sm6250_firmware sc8180x\+sdx55_firmware wsa8830_firmware wcn3620_firmware snapdragon_7c\+_gen_3_compute_firmware wsa8815_firmware qcm6490 wsa8835_firmware wcn3620 snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)_firmware fastconnect_6800_firmware snapdragon_7c_compute_platform Snapdragon aqt1000_firmware wcd9380_firmware qcm6490_firmware wsa8840_firmware fastconnect_6900_firmware sc8380xp_firmware sdm429w_firmware fastconnect_6700_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware qca6420_firmware qcm5430_firmware qca6430_firmware qcs6490_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware qca6391_firmware wcd9385_firmware wcd9370_firmware wcd9340_firmware sm6250_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware wsa8815_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_6200_firmware wcd9375_firmware wsa8845h_firmware fastconnect_6800_firmware

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.04% / 12.54%

||

7 Day CHG~0.00%

Published-01 Apr, 2022 | 04:40

Updated-04 Aug, 2024 | 00:33

Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-416

Use After Free

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.61%

||

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-07 Nov, 2024 | 19:45

Integer Overflow to Buffer Overflow in Audio

Memory corruption while processing voice packet with arbitrary data received from ADSP.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9640_firmware qca8337 qfw7124 sg8275p_firmware qam8775p qamsrv1m snapdragon_888_5g_mobile_platform wcn3950_firmware wcn6755_firmware qca6595au_firmware sa6155 snapdragon_480_5g_mobile_platform video_collaboration_vc3_platform snapdragon_460_mobile_platform_firmware qcs6125_firmware qcm5430_firmware snapdragon_480_5g_mobile_platform_firmware msm8108 wcd9371_firmware msm8108_firmware wcn3950 sm4125 wcn3660b snapdragon_660_mobile_platform_firmware snapdragon_460_mobile_platform sm7315_firmware snapdragon_429_mobile_platform_firmware snapdragon_695_5g_mobile_platform_firmware snapdragon_636_mobile_platform qca8081_firmware qca6420 snapdragon_auto_5g_modem-rf_firmware qca9367_firmware sa8155_firmware robotics_rb3_platform_firmware sm8635 qca6430 snapdragon_678_mobile_platform_firmware snapdragon_630_mobile_platform sa7775p_firmware wcd9340 vision_intelligence_200_platform_firmware snapdragon_765_5g_mobile_platform_firmware snapdragon_690_5g_mobile_platform qca6698aq_firmware msm8209_firmware mdm9250_firmware snapdragon_wear_2500_platform qca6696_firmware wcd9371 sa8150p sd865_5g_firmware sd660 sd660_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware snapdragon_730_mobile_platform_firmware snapdragon_750g_5g_mobile_platform_firmware sa8770p snapdragon_675_mobile_platform_firmware snapdragon_778g_5g_mobile_platform_firmware sdm429w qcm8550 snapdragon_670_mobile_platform_firmware sd670_firmware qca6574 snapdragon_7c\+_gen_3_compute wcd9380 snapdragon_x72_5g_modem-rf_system_firmware qcs410 snapdragon_210_processor video_collaboration_vc3_platform_firmware c-v2x_9150_firmware sd626 qcn9012_firmware wsa8845 qcm4325_firmware wcd9340_firmware wsa8815 snapdragon_865\+_5g_mobile_platform qca6584_firmware snapdragon_630_mobile_platform_firmware qcs8250 sd835 wcn3980_firmware sd730 sa8295p wcn6740_firmware qca6678aq apq8064au_firmware sa8650p_firmware snapdragon_x75_5g_modem-rf_system_firmware fastconnect_6900 fastconnect_6900_firmware snapdragon_660_mobile_platform srv1l sd670 smart_audio_200_platform_firmware snapdragon_8\+_gen_2_mobile_platform qcm4290_firmware sw5100p_firmware qcs610_firmware qamsrv1m_firmware sa6145p qcm5430 ar8031 snapdragon_750g_5g_mobile_platform qcs5430_firmware sa2150p qca6391_firmware sa4150p_firmware wcd9370_firmware sm8550p_firmware sdx55 csra6640 snapdragon_695_5g_mobile_platform video_collaboration_vc1_platform srv1m snapdragon_x20_lte_modem snapdragon_1200_wearable_platform qfw7124_firmware qam8620p_firmware qam8255p sa4155p snapdragon_480\+_5g_mobile_platform qsm8250_firmware wsa8830 snapdragon_x24_lte_modem_firmware qam8650p csrb31024 mdm9628_firmware snapdragon_865_5g_mobile_platform mdm9650 flight_rb5_5g_platform flight_rb5_5g_platform_firmware qcn6224_firmware snapdragon_x20_lte_modem_firmware qcs4290 srv1l_firmware mdm9250 qca6420_firmware snapdragon_auto_4g_modem_firmware sd675_firmware qca6564 qca6426 wcn3990_firmware qrb5165n_firmware snapdragon_8_gen_2_mobile_platform qca9377 wcd9385_firmware wcd9326_firmware fastconnect_6200 wcn3615_firmware qamsrv1h_firmware qcn9011_firmware sa8155 snapdragon_x55_5g_modem-rf_system qca6584 snapdragon_835_mobile_pc_platform_firmware snapdragon_208_processor_firmware sdx55_firmware sa7255p wsa8845h_firmware wcn3615 snapdragon_8_gen_3_mobile_platform qfw7114 sm7250p_firmware wcn3610_firmware qrb5165n qca6584au snapdragon_870_5g_mobile_platform qcm8550_firmware snapdragon_x72_5g_modem-rf_system snapdragon_208_processor snapdragon_439_mobile_platform sm4635 qca9367 9206_lte_modem snapdragon_wear_3100_platform wcn3988_firmware 315_5g_iot_modem qcn9074 srv1h qca6421 fastconnect_6700_firmware sa8195p sxr1120 snapdragon_626_mobile_platform_firmware qcn6224 wcd9395_firmware wcd9335 wcd9326 snapdragon_x75_5g_modem-rf_system snapdragon_auto_5g_modem-rf_gen_2 snapdragon_888\+_5g_mobile_platform qcs4290_firmware sa8770p_firmware sxr2130_firmware qcs6490_firmware wcd9375 aqt1000 snapdragon_210_processor_firmware sm6250_firmware snapdragon_662_mobile_platform snapdragon_685_4g_mobile_platform wsa8815_firmware snapdragon_636_mobile_platform_firmware video_collaboration_vc5_platform_firmware apq8017 sxr1120_firmware snapdragon_8_gen_2_mobile_platform_firmware snapdragon_x5_lte_modem qcm6125_firmware snapdragon_855\+\/860_mobile_platform_firmware robotics_rb5_platform_firmware wcd9378_firmware sd865_5g qca6595 sa8530p_firmware snapdragon_8\+_gen_2_mobile_platform_firmware sa8540p_firmware qcn6274 sxr2130 smart_audio_400_platform qca6310_firmware sa8650p sa9000p qca6574_firmware sm7325p_firmware snapdragon_xr2_5g_platform_firmware 205_mobile_platform_firmware sa8775p snapdragon_730g_mobile_platform qca6574a_firmware qrb5165m snapdragon_x55_5g_modem-rf_system_firmware sm7315 snapdragon_865\+_5g_mobile_platform_firmware snapdragon_x35_5g_modem-rf_system_firmware snapdragon_690_5g_mobile_platform_firmware qcn6274_firmware snapdragon_auto_4g_modem snapdragon_632_mobile_platform_firmware qcm6490_firmware csrb31024_firmware wsa8832_firmware snapdragon_xr1_platform qcm2150 qcs8250_firmware sdx20m_firmware snapdragon_765g_5g_mobile_platform_firmware sm8550p qca6564_firmware wcn6740 snapdragon_732g_mobile_platform qcs8550 snapdragon_x50_5g_modem-rf_system snapdragon_8_gen_3_mobile_platform_firmware qcs410_firmware wcd9378 qam8255p_firmware sa6150p_firmware qcs610 315_5g_iot_modem_firmware qca6431_firmware snapdragon_778g\+_5g_mobile_platform wcd9360_firmware snapdragon_870_5g_mobile_platform_firmware snapdragon_820_automotive_platform_firmware vision_intelligence_100_platform_firmware wsa8840 snapdragon_wear_2100_platform_firmware snapdragon_212_mobile_platform sa8150p_firmware qcs2290 qca6335 csra6620_firmware sd_675_firmware csra6640_firmware qep8111_firmware qam8295p mdm9628 qca6688aq qca6574au_firmware wcd9375_firmware snapdragon_778g\+_5g_mobile_platform_firmware sa6155_firmware msm8909w wcd9360 snapdragon_xr2\+_gen_1_platform snapdragon_782g_mobile_platform_firmware sdx20m qca6678aq_firmware smart_audio_400_platform_firmware qrb5165m_firmware wsa8840_firmware sa4155p_firmware qcs6125 qca6698aq snapdragon_765g_5g_mobile_platform robotics_rb3_platform snapdragon_720g_mobile_platform sd626_firmware sw5100 snapdragon_780g_5g_mobile_platform wcn6755 qca6436 sa6155p snapdragon_auto_5g_modem-rf_gen_2_firmware wcd9341 sa8255p qam8775p_firmware qca6431 snapdragon_x12_lte_modem qca6797aq wcn3910_firmware snapdragon_855_mobile_platform_firmware robotics_rb5_platform qcc710_firmware wsa8830_firmware sd855_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3988 snapdragon_780g_5g_mobile_platform_firmware snapdragon_685_4g_mobile_platform_firmware sa8195p_firmware sa8295p_firmware wcn3610 msm8608 mdm9640 wcd9380_firmware qca8337_firmware wcd9330 sw5100p msm8996au_firmware snapdragon_w5\+_gen_1_wearable_platform qca6564au snapdragon_782g_mobile_platform fastconnect_6700 sm8635_firmware sg8275p wcn3980 wcd9335_firmware sm6370_firmware qfw7114_firmware qca6430_firmware qca6174 snapdragon_732g_mobile_platform_firmware qca6335_firmware wcn3910 qca6320 mdm9650_firmware snapdragon_4_gen_1_mobile_platform qca6426_firmware wcn3680 wcn3660b_firmware snapdragon_670_mobile_platform snapdragon_xr2\+_gen_1_platform_firmware wcd9330_firmware snapdragon_x50_5g_modem-rf_system_firmware snapdragon_820_automotive_platform qca6421_firmware smart_audio_200_platform vision_intelligence_100_platform snapdragon_xr2_5g_platform 215_mobile_platform wcn3680_firmware ar8031_firmware qca6797aq_firmware 9206_lte_modem_firmware qca6564a_firmware sa7255p_firmware sa8620p wsa8832 snapdragon_x24_lte_modem sa8540p smart_display_200_platform_firmware qsm8250 snapdragon_730_mobile_platform qcc710 qca6595_firmware wcd9395 sa8145p snapdragon_888\+_5g_mobile_platform_firmware 205_mobile_platform snapdragon_710_mobile_platform_firmware sd888_firmware sd675 sa8155p snapdragon_720g_mobile_platform_firmware qep8111 snapdragon_855_mobile_platform qcm2290 snapdragon_632_mobile_platform snapdragon_625_mobile_platform_firmware ar8035_firmware snapdragon_wear_2100_platform snapdragon_662_mobile_platform_firmware sa8145p_firmware qcs2290_firmware csra6620 smart_display_200_platform snapdragon_888_5g_mobile_platform_firmware sd730_firmware qca6174_firmware wcd9370 snapdragon_480\+_5g_mobile_platform_firmware qca6584au_firmware qamsrv1h sa8530p snapdragon_1200_wearable_platform_firmware qam8295p_firmware vision_intelligence_200_platform sa9000p_firmware qca6320_firmware wcn3680b_firmware snapdragon_778g_5g_mobile_platform snapdragon_212_mobile_platform_firmware qca6595au snapdragon_425_mobile_platform snapdragon_429_mobile_platform qca6436_firmware snapdragon_680_4g_mobile_platform_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware qca6564au_firmware sa8620p_firmware sa6155p_firmware qca6310 sa8775p_firmware snapdragon_x5_lte_modem_firmware qcs6490 video_collaboration_vc5_platform snapdragon_625_mobile_platform qcs8550_firmware vision_intelligence_300_platform_firmware sa6145p_firmware sm6250 c-v2x_9150 apq8017_firmware wsa8810_firmware vision_intelligence_400_platform wsa8845h sa8255p_firmware sg4150p qcs7230 qca8081 snapdragon_x35_5g_modem-rf_system sa7775p qcs5430 qca6174a_firmware qam8620p wcd9385 snapdragon_x12_lte_modem_firmware ar8035 apq8064au wcd9390 vision_intelligence_400_platform_firmware snapdragon_768g_5g_mobile_platform_firmware wcn3620_firmware qcm6490 wsa8835_firmware wcn3620 qca6564a sg4150p_firmware sa4150p qca6688aq_firmware qcm4325 qcm2290_firmware snapdragon_626_mobile_platform snapdragon_845_mobile_platform qcm2150_firmware sm4635_firmware wcn3990 sd_675 fastconnect_6800 snapdragon_835_mobile_pc_platform qcs7230_firmware qcn9012 sd888 wsa8835 msm8909w_firmware msm8996au sdm429w_firmware snapdragon_auto_5g_modem-rf snapdragon_678_mobile_platform snapdragon_855\+\/860_mobile_platform snapdragon_4_gen_1_mobile_platform_firmware snapdragon_425_mobile_platform_firmware qca6574a qca6174a sm7325p sa2150p_firmware sm4125_firmware sd855 wsa8845_firmware snapdragon_439_mobile_platform_firmware fastconnect_6200_firmware msm8209 vision_intelligence_300_platform qca6391 snapdragon_710_mobile_platform fastconnect_7800 aqt1000_firmware snapdragon_845_mobile_platform_firmware qcm4290 srv1h_firmware qcn9011 video_collaboration_vc1_platform_firmware qca6574au sa8155p_firmware wcd9341_firmware qcm6125 wsa8810 fastconnect_7800_firmware snapdragon_730g_mobile_platform_firmware snapdragon_680_4g_mobile_platform sm6370 srv1m_firmware wcn3680b sd835_firmware qam8650p_firmware snapdragon_675_mobile_platform snapdragon_wear_2500_platform_firmware qca6696 215_mobile_platform_firmware msm8608_firmware sa6150p wcd9390_firmware snapdragon_768g_5g_mobile_platform snapdragon_765_5g_mobile_platform sm7250p snapdragon_wear_3100_platform_firmware sw5100_firmware qcn9074_firmware snapdragon_xr1_platform_firmware Snapdragon qam8255p_firmware qca9377_firmware snapdragon_662_mobile_platform_firmware mdm9640_firmware sa6150p_firmware sa8145p_firmware 315_5g_iot_modem_firmware qcs2290_firmware snapdragon_x24_lte_modem_firmware sg8275p_firmware qca6431_firmware mdm9628_firmware snapdragon_820_automotive_platform_firmware wcd9360_firmware flight_rb5_5g_platform_firmware qcn6224_firmware snapdragon_wear_2100_platform_firmware snapdragon_x20_lte_modem_firmware wcn3950_firmware srv1l_firmware snapdragon_888_5g_mobile_platform_firmware sa8150p_firmware wcn6755_firmware qca6420_firmware qca6595au_firmware snapdragon_xr1_platform_firmware qca6174_firmware sd730_firmware snapdragon_auto_4g_modem_firmware csra6620_firmware sd_675_firmware sd675_firmware csra6640_firmware qcm5430_firmware qcs6125_firmware snapdragon_460_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qca6584au_firmware qep8111_firmware qrb5165n_firmware wcn3990_firmware qualcomm_video_collaboration_vc3_platform_firmware msm8108_firmware wcd9371_firmware wcd9385_firmware wcd9326_firmware wcn3615_firmware qamsrv1h_firmware snapdragon_1200_wearable_platform_firmware snapdragon_660_mobile_platform_firmware qam8295p_firmware qcn9011_firmware sa9000p_firmware qca6320_firmware sm7315_firmware qca6574au_firmware sdx55_firmware snapdragon_208_processor_firmware snapdragon_212_mobile_platform_firmware snapdragon_429_mobile_platform_firmware qca8081_firmware sa6155_firmware snapdragon_695_5g_mobile_platform_firmware sm7250p_firmware snapdragon_835_mobile_pc_platform_firmware wcd9375_firmware wcn3610_firmware qca6436_firmware snapdragon_680_4g_mobile_platform_firmware qca6564au_firmware sa8620p_firmware sa6155p_firmware qca9367_firmware snapdragon_auto_5g_modem-rf_firmware qcm8550_firmware qca6678aq_firmware smart_audio_400_platform_firmware sa8775p_firmware snapdragon_x5_lte_modem_firmware qrb5165m_firmware wsa8840_firmware sa4155p_firmware wsa8845h_firmware sa8155_firmware robotics_rb3_platform_firmware qcs8550_firmware vision_intelligence_300_platform_firmware wcn3988_firmware sa6145p_firmware sa7775p_firmware fastconnect_6700_firmware apq8017_firmware sd626_firmware snapdragon_626_mobile_platform_firmware wsa8810_firmware wcd9395_firmware sa8255p_firmware qca6698aq_firmware msm8209_firmware qca6174a_firmware mdm9250_firmware qcs4290_firmware qualcomm_205_mobile_platform_firmware qam8775p_firmware sa8770p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware sxr2130_firmware qca6696_firmware qcs6490_firmware snapdragon_x12_lte_modem_firmware wcn3910_firmware snapdragon_855_mobile_platform_firmware snapdragon_210_processor_firmware sm6250_firmware qcc710_firmware vision_intelligence_400_platform_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware wsa8815_firmware wsa8835_firmware sd660_firmware snapdragon_636_mobile_platform_firmware snapdragon_780g_5g_mobile_platform_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware fastconnect_6800_firmware sxr1120_firmware sa8295p_firmware sg4150p_firmware snapdragon_8_gen_2_mobile_platform_firmware qca6688aq_firmware qcm6125_firmware snapdragon_675_mobile_platform_firmware qcm2290_firmware snapdragon_750g_5g_mobile_platform_firmware qualcomm_video_collaboration_vc1_platform_firmware robotics_rb5_platform_firmware qca8337_firmware qcm2150_firmware sm4635_firmware snapdragon_778g_5g_mobile_platform_firmware wcd9380_firmware msm8996au_firmware wcd9378_firmware qcs7230_firmware snapdragon_670_mobile_platform_firmware sa8530p_firmware msm8909w_firmware sd670_firmware sdm429w_firmware sa8540p_firmware snapdragon_x72_5g_modem-rf_system_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_425_mobile_platform_firmware sm8635_firmware c-v2x_9150_firmware qca6310_firmware qca6430_firmware qcn9012_firmware qfw7114_firmware sm6370_firmware wcd9335_firmware qca6335_firmware qcm4325_firmware qca6574_firmware sa2150p_firmware wcd9340_firmware sm4125_firmware wcn3680b_firmware sm7325p_firmware qca6584_firmware wsa8845_firmware mdm9650_firmware snapdragon_630_mobile_platform_firmware snapdragon_439_mobile_platform_firmware qca6426_firmware snapdragon_xr2_5g_platform_firmware wcn3660b_firmware qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware wcd9330_firmware snapdragon_x50_5g_modem-rf_system_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware snapdragon_x35_5g_modem-rf_system_firmware snapdragon_690_5g_mobile_platform_firmware snapdragon_845_mobile_platform_firmware qcn6274_firmware snapdragon_632_mobile_platform_firmware apq8064au_firmware ar8031_firmware csrb31024_firmware qcm6490_firmware sa8650p_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn3680_firmware wsa8832_firmware fastconnect_6900_firmware srv1h_firmware 9206_lte_modem_firmware qca6797aq_firmware sa8155p_firmware smart_audio_200_platform_firmware qca6564a_firmware sa7255p_firmware qcs8250_firmware wcd9341_firmware fastconnect_7800_firmware qcm4290_firmware sdx20m_firmware sw5100p_firmware qcs610_firmware qamsrv1m_firmware srv1m_firmware qualcomm_215_mobile_platform_firmware sd835_firmware qam8650p_firmware qca6564_firmware snapdragon_wear_2500_platform_firmware qca6595_firmware qcs5430_firmware qca6391_firmware snapdragon_710_mobile_platform_firmware sa4150p_firmware msm8608_firmware sm8550p_firmware wcd9370_firmware qualcomm_video_collaboration_vc5_platform_firmware sd888_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware snapdragon_wear_3100_platform_firmware sw5100_firmware qcn9074_firmware qam8620p_firmware qcs410_firmware qfw7124_firmware snapdragon_720g_mobile_platform_firmware ar8035_firmware qsm8250_firmware snapdragon_625_mobile_platform_firmware

CWE ID-CWE-680

Integer Overflow to Buffer Overflow

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.61%

||

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-16 Nov, 2024 | 04:55

Buffer Copy Without Checking Size of Input in WLAN Windows Host

Memory corruption while station LL statistic handling.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800 wsa8830 wcd9380_firmware sdm429w qcs6490 qcm6490_firmware wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware qcc2073 wsa8840 wsa8835 sdm429w_firmware fastconnect_6700_firmware wcd9380 fastconnect_7800_firmware wsa8845h fastconnect_6700 video_collaboration_vc3_platform snapdragon_8cx_gen_3_compute_platform wcd9370 qcm5430 qcs5430 qcm5430_firmware wcd9385 video_collaboration_vc3_platform_firmware qcs6490_firmware qcc2076_firmware qcs5430_firmware wcd9385_firmware wsa8845 qcc2073_firmware wcd9375 wcd9370_firmware wcn3660b wsa8830_firmware qcc2076 wsa8845_firmware wcn3620_firmware qcm6490 wcn3660b_firmware wsa8835_firmware wcn3620 snapdragon_429_mobile_platform_firmware sc8380xp wsa8845h_firmware wcd9375_firmware snapdragon_429_mobile_platform snapdragon_8cx_gen_3_compute_platform_firmware Snapdragon qcm5430_firmware wcd9380_firmware qcs6490_firmware qcm6490_firmware qcc2076_firmware wsa8840_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware fastconnect_6900_firmware qcc2073_firmware wcd9370_firmware sc8380xp_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wcd9375_firmware wsa8845h_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.10% / 28.53%

||

7 Day CHG~0.00%

Published-01 Apr, 2022 | 04:40

Updated-04 Aug, 2024 | 00:33

Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware fsm10055 sa6150p_firmware sm6250p_firmware qcs610 qca8337 wcd9360_firmware sdx65 wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 wcn3950 sd720g mdm9628 mdm9206_firmware qsw8573_firmware sd_8_gen1_5g_firmware sm6375_firmware wcn3660b sd460_firmware sm7315_firmware qca6574au_firmware wcd9375_firmware wcn3998_firmware qca8081_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware wcd9360 apq8053_firmware qca9367_firmware wcn3999 qrb5165_firmware qrb5165m_firmware sa4155p_firmware qcs6125 sa8155_firmware sd662_firmware qcs405 wcd9340 sd765g qualcomm215_firmware sw5100 fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware mdm9250_firmware wcd9341 qca6696_firmware sd870_firmware sd750g wcn3910_firmware sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware sa8195p_firmware sm8475 wcn6750_firmware wcn3610 sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 qca6564au sdx55m_firmware wcn6856_firmware qet4101_firmware qca6574 wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx24_firmware qcn9012_firmware wcd9335_firmware wcn3980 sd439_firmware qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 qca6584_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3980_firmware sd730 wcd9330_firmware sdx55m wcn6740_firmware msm8953 sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware qsm8250 sa6145p sdxr1 ar8031 apq8096au qcs405_firmware sa8145p qca6391_firmware sa4150p_firmware wcd9370_firmware sd780g_firmware sdx55 sd888_firmware apq8053 sa8155p csra6640 sd675 sd439 qet4101 qcs8155_firmware sa4155p ar8035_firmware qcm2290 qsm8250_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware fsm10056 csrb31024 mdm9628_firmware mdm9650 csra6620 fsm10055_firmware qcs4290 mdm9250 sd765g_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 qcn9011_firmware sa8155 qca6584 wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware qca6584au sd778g sa6155p_firmware qcs8155 sm6225 sa515m_firmware sd429 qcs6490 sdxr2_5g qca9367 mdm9607_firmware sa415m_firmware wcn3988_firmware sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 sm6250_firmware msm8953_firmware sda429w sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a sa4150p qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g sdx24 qcn9012 sd888 msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p wcn6750 sa515m qca6574_firmware sd855 sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware qrb5165m sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx20 sd480_firmware qcn9011 sm6225_firmware qca6574au sa8155p_firmware mdm9607 sd205_firmware wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 wcn3680b qca6564_firmware sd768g wcn6740 qca6696 sdw2500 sa6150p apq8096au_firmware sm7250p sd720g_firmware sdx12 sw5100_firmware qcs410_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.09% / 27.25%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 10:11

Updated-04 Aug, 2024 | 00:33

Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connectivity, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn6855_firmware wsa8830_firmware wcd9380_firmware wsa8830 wsa8835 wcn6856 wsa8835_firmware wcd9380 wcn6855 sm8475 wcn6856_firmware sd_8_gen1_5g_firmware Snapdragon Connectivity, Snapdragon Mobile

CWE ID-CWE-704

Incorrect Type Conversion or Cast

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.15% / 35.56%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:50

Updated-04 Aug, 2024 | 00:33

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware mdm9150_firmware wsa8830 mdm9640_firmware qcs2290_firmware mdm9628_firmware mdm9650 qcs4290 wcn3950_firmware mdm9250 qcs2290 apq8009_firmware msm8917 wcd9370 sd632 wcn3990_firmware msm8108 qca9377 wcn3998 sdw2500_firmware msm8108_firmware wcn3950 sm4125 mdm9628 wcd9326_firmware mdm9206_firmware wcn3615_firmware wcn3660b sd450_firmware sd662 sd460_firmware apq8037 qca6320_firmware qca6584 qca6574au_firmware wcn3680b_firmware wcd9375_firmware sdx12_firmware wcn3615 wcn3998_firmware msm8909w apq8009w_firmware wcn3610_firmware apq8053_firmware qca6564au_firmware sd680_firmware qca6310 msm8208 qca9367_firmware sd429 qca9367 sd662_firmware mdm9607_firmware sd821 wcn3988_firmware sd429_firmware wcd9340 apq8017_firmware wsa8810_firmware qualcomm215_firmware sw5100 sd680 wcd9326 wcd9335 msm8937 msm8209_firmware qca6174a_firmware mdm9250_firmware qcs4290_firmware wcd9341 wcn3660_firmware wcn3910_firmware wcd9375 msm8953_firmware wsa8830_firmware msm8917_firmware sd210 wcn3620_firmware sd820 wcn3988 wsa8815_firmware wsa8835_firmware wcn3620 apq8017 msm8208_firmware qca6564a sd450 wcn3610 msm8608 qcm2290_firmware mdm9640 wcn3990 sdm429w msm8996au_firmware sw5100p wcd9330 qca6564au msm8940_firmware msm8909w_firmware qca6574 msm8996au sd632_firmware sdm429w_firmware wsa8835 qualcomm215 qca6574a mdm9206 qca9379_firmware qca6174a qca6310_firmware wcd9335_firmware wcn3980 sd439_firmware qca6574_firmware wcd9340_firmware sm4125_firmware wsa8815 wcn3910 qca6320 qca6584_firmware msm8937_firmware mdm9650_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd835 msm8209 wcn3980_firmware apq8009 sd460 wcd9330_firmware msm8920 msm8953 sd821_firmware qcm4290 wcn3680_firmware msm8920_firmware qca6574au mdm9607 qca6564a_firmware apq8009w wcd9341_firmware qcm4290_firmware wsa8810 sw5100p_firmware sd210_firmware mdm9150 wcn3680b sd835_firmware apq8096au sd820_firmware msm8608_firmware wcd9370_firmware sdw2500 msm8940 apq8053 apq8096au_firmware apq8037_firmware sd439 sdx12 sw5100_firmware wcn3660 qca9379 qcm2290 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.30%

||

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-16 Nov, 2024 | 04:55

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.

Vendor-Qualcomm Technologies, Inc.

Product-wsa8830 wcd9380_firmware snapdragon_8c_compute_platform_\(sc8180x-ad\)_\"poipu_lite\"sdm429w snapdragon_8cx_compute_platform_\(sc8180x-aa\,_ab\)snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\,_ab\)_firmware snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"_firmware fastconnect_6800 snapdragon_8cx_compute_platform_\(sc8180xp-ac\,_af\)_\"poipu_pro\"wsa8840 wsa8835 sdm429w_firmware snapdragon_7c\+_gen_3_compute sc8180x\+sdx55 wcd9380 qca6420_firmware fastconnect_6700 video_collaboration_vc3_platform wcd9370 snapdragon_8c_compute_platform_\(sc8180xp-ad\)_\"poipu_lite\"qcm5430_firmware video_collaboration_vc3_platform_firmware qca6430_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\,_af\)_\"poipu_pro\"_firmware snapdragon_8cx_compute_platform_\(sc8180x-aa\,_ab\)_firmware wcd9385_firmware wsa8845 snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)fastconnect_6200 wcd9340_firmware wcn3660b wsa8815 wsa8845_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\,_af\)_\"poipu_pro\"wcn3660b_firmware snapdragon_429_mobile_platform_firmware sc8380xp fastconnect_6200_firmware wcd9375_firmware wsa8845h_firmware qca6391 snapdragon_429_mobile_platform qca6420 fastconnect_7800 aqt1000_firmware snapdragon_7c_compute_platform_firmware qcs6490 qcm6490_firmware wsa8840_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\,_ab\)fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware snapdragon_8cx_compute_platform_\(sc8180xp-ac\,_af\)_\"poipu_pro\"_firmware qca6430 sm6250 fastconnect_6700_firmware wcd9340 wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware wsa8810 wsa8845h qcm5430 qcs5430 wcd9385 wcd9341 snapdragon_8c_compute_platform_\(sc8180x-ad\)_\"poipu_lite\"_firmware snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"qcs6490_firmware qcs5430_firmware qca6391_firmware wcd9375 snapdragon_8c_compute_platform_\(sc8180xp-ad\)_\"poipu_lite\"_firmware aqt1000 wcd9370_firmware sc8180x\+sdx55_firmware sm6250_firmware wsa8830_firmware wcn3620_firmware snapdragon_7c\+_gen_3_compute_firmware qcm6490 wsa8815_firmware wsa8835_firmware wcn3620 snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)_firmware fastconnect_6800_firmware snapdragon_7c_compute_platform Snapdragon aqt1000_firmware wcd9380_firmware qcm6490_firmware wsa8840_firmware fastconnect_6900_firmware sc8380xp_firmware sdm429w_firmware fastconnect_6700_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware qca6420_firmware qcm5430_firmware qca6430_firmware qcs6490_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware qca6391_firmware wcd9385_firmware wcd9370_firmware wcd9340_firmware sm6250_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware wsa8815_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_6200_firmware wcd9375_firmware wsa8845h_firmware fastconnect_6800_firmware

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.18% / 39.69%

||

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:51

Updated-04 Aug, 2024 | 00:33

Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wcn3991 wsa8830 wcd9380_firmware sd780g sd865_5g qca6431_firmware sdx55m_firmware wcn6856_firmware sd888 wsa8835 sa8540p_firmware wcd9380 sd765g_firmware sd888_5g qca6420_firmware qca6390_firmware sd690_5g wcd9370 sd690_5g_firmware wcn6855_firmware sm7325p qca6426 qrb5165n_firmware qca6430_firmware wcn6750 wcn3998 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware sa9000p wcd9340_firmware wsa8815 sm7325p_firmware qsm8350_firmware wcn6850 qsm8350 sd765 qca6426_firmware sa9000p_firmware sm7315_firmware wcn7850 sd768g_firmware wcd9375_firmware wcn3998_firmware qrb5165m sm7315 sm7250p_firmware qca6391 sdx55m qca6420 qca6436_firmware qrb5165n qca6421_firmware aqt1000_firmware wcn6740_firmware sd778g sd_8cx_gen2 wcn7851 qcs6490 qrb5165_firmware qrb5165m_firmware sdxr2_5g qcm6490_firmware qrb5165 wcn6851_firmware wcn3988_firmware qca6430 qca6421 sd778g_firmware wcd9340 wsa8810_firmware sd765g wcd9341_firmware wsa8810 sd765_firmware sd870 qca6436 wcn6851 wcn6855 sa8540p wcn7851_firmware wcn6856 wcd9385 wcd9341 sd768g qca6431 qcs6490_firmware sd750g sd870_firmware wcn6740 qca6391_firmware qca6390 wcd9375 sd_8cx aqt1000 sd750g_firmware sd780g_firmware wcd9370_firmware sd888_firmware wsa8830_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sm7250p wcn6750_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition