ByteOS

Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

Product

Versions

Affected

APQ8009, APQ8017, APQ8053, APQ8096AU, AR8031, CSRA6620, CSRA6640, CSRB31024, MDM9150, MDM9250, MDM9607, MDM9626, MDM9628, MDM9640, MDM9650, QCA4020, QCA6174A, QCA6564A, QCA6564AU, QCA6574, QCA6574A, QCA6574AU, QCA6584, QCA6595, QCA6595AU, QCA6696, QCA9367, QCA9377, QCA9379, QCS405, SA415M, SA515M, SA6155, SA6155P, SA8155, SA8155P, SA8195P, SD820, SDX20, SDX55, WCD9326, WCD9335, WCD9360, WCN3610, WCN3615, WCN3660B, WCN3680B, WCN3980, WCN3998, WCN3999, WSA8810, WSA8815

Problem Types

Type	CWE ID	Description
text	N/A	Integer Overflow or Wraparound in Automotive Connectivity

Type: text

CWE ID: N/A

Description: Integer Overflow or Wraparound in Automotive Connectivity

Metrics

Version	Base score	Base severity	Vector
3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:14 Jun, 2022 | 10:15

Updated At:22 Jun, 2022 | 15:21

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:o:qualcomm:apq8009_firmware:-:*:*:*:*:*:*:*

>>apq8009_firmware>>-

cpe:2.3:h:qualcomm:apq8009:-:*:*:*:*:*:*:*

>>apq8009>>-

cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*

>>apq8017_firmware>>-

cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*

>>apq8017>>-

cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*

>>apq8053_firmware>>-

cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*

>>apq8053>>-

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

>>apq8096au_firmware>>-

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

>>apq8096au>>-

cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*

>>ar8031_firmware>>-

cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*

>>ar8031>>-

cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*

>>csra6620_firmware>>-

cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:*

>>csra6620>>-

cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*

>>csra6640_firmware>>-

cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:*

>>csra6640>>-

cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*

>>csrb31024_firmware>>-

cpe:2.3:h:qualcomm:csrb31024:-:*:*:*:*:*:*:*

>>csrb31024>>-

cpe:2.3:o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*

>>mdm9150_firmware>>-

cpe:2.3:h:qualcomm:mdm9150:-:*:*:*:*:*:*:*

>>mdm9150>>-

cpe:2.3:o:qualcomm:mdm9250_firmware:-:*:*:*:*:*:*:*

>>mdm9250_firmware>>-

cpe:2.3:h:qualcomm:mdm9250:-:*:*:*:*:*:*:*

>>mdm9250>>-

cpe:2.3:o:qualcomm:mdm9607_firmware:-:*:*:*:*:*:*:*

>>mdm9607_firmware>>-

cpe:2.3:h:qualcomm:mdm9607:-:*:*:*:*:*:*:*

>>mdm9607>>-

cpe:2.3:o:qualcomm:mdm9626_firmware:-:*:*:*:*:*:*:*

>>mdm9626_firmware>>-

cpe:2.3:h:qualcomm:mdm9626:-:*:*:*:*:*:*:*

>>mdm9626>>-

cpe:2.3:o:qualcomm:mdm9628_firmware:-:*:*:*:*:*:*:*

>>mdm9628_firmware>>-

cpe:2.3:h:qualcomm:mdm9628:-:*:*:*:*:*:*:*

>>mdm9628>>-

cpe:2.3:o:qualcomm:mdm9640_firmware:-:*:*:*:*:*:*:*

>>mdm9640_firmware>>-

cpe:2.3:h:qualcomm:mdm9640:-:*:*:*:*:*:*:*

>>mdm9640>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

>>mdm9650_firmware>>-

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

>>mdm9650>>-

cpe:2.3:o:qualcomm:qca4020_firmware:-:*:*:*:*:*:*:*

>>qca4020_firmware>>-

cpe:2.3:h:qualcomm:qca4020:-:*:*:*:*:*:*:*

>>qca4020>>-

cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*

>>qca6174a_firmware>>-

cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*

>>qca6174a>>-

cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*

>>qca6564a_firmware>>-

cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*

>>qca6564a>>-

cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*

>>qca6564au_firmware>>-

cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*

>>qca6564au>>-

cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*

>>qca6574_firmware>>-

cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*

>>qca6574>>-

cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*

>>qca6574a_firmware>>-

cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*

>>qca6574a>>-

cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*

>>qca6574au_firmware>>-

cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

>>qca6574au>>-

cpe:2.3:o:qualcomm:qca6584_firmware:-:*:*:*:*:*:*:*

>>qca6584_firmware>>-

cpe:2.3:h:qualcomm:qca6584:-:*:*:*:*:*:*:*

>>qca6584>>-

cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*

>>qca6595_firmware>>-

cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*

>>qca6595>>-

cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*

>>qca6595au_firmware>>-

cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

>>qca6595au>>-

Weaknesses

CWE ID	Type	Source
CWE-190	Primary	nvd@nist.gov

CWE ID: CWE-190

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

947Records found

CVE-2023-24855

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.21% / 43.89%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in Modem

Memory corruption in Modem while processing security related configuration before AS Security Exchange.

Product-qcm8550_firmware wsa8845_firmware wsa8832 wsa8840 sdx57m_firmware qcs8550_firmware wcd9370 qca8081_firmware ar8035_firmware wsa8830_firmware wcd9340_firmware snapdragon_888_5g_mobile_platform qfw7124_firmware wcd9385 wcd9395_firmware snapdragon_8\+_gen_1_mobile_platform qcn6024 qcs4490_firmware snapdragon_8_gen_2_mobile_platform snapdragon_7c\+_gen_3_compute_firmware qcc710_firmware wcn6740_firmware wcd9390_firmware fastconnect_6700 sm7325-af_firmware wsa8815_firmware sm7325-ae_firmware wsa8832_firmware sg8275p qca8337_firmware wcd9370_firmware qca8337 snapdragon_x70_modem-rf_system_firmware wcd9395 sg8275p_firmware qcm6490_firmware sm7325-ae qcm4490 sm8350-ac_firmware wcd9340 qcm4490_firmware wcd9390 sm7325p qcm6490 wcn3950 wsa8810_firmware wsa8845h_firmware sm8550p_firmware qcm8550 wcn3988 qcs6490_firmware snapdragon_x65_5g_modem-rf_system qcn9024 snapdragon_x65_5g_modem-rf_system_firmware qcn6274 snapdragon_7c\+_gen_3_compute snapdragon_480_5g_mobile_platform_firmware qfw7124 sm7325-af snapdragon_x75_5g_modem-rf_system wsa8835 qca6391_firmware wsa8840_firmware snapdragon_780g_5g_mobile_platform sdx57m qcn9024_firmware wsa8845h qcn6024_firmware wcd9380_firmware fastconnect_6200_firmware snapdragon_4_gen_2_mobile_platform_firmware snapdragon_695_5g_mobile_platform qca8081 snapdragon_4_gen_1_mobile_platform_firmware wsa8815 wsa8830 snapdragon_780g_5g_mobile_platform_firmware sm8550p qcn6274_firmware snapdragon_8\+_gen_1_mobile_platform_firmware qcc710 snapdragon_4_gen_2_mobile_platform ar8035 wcn6740 snapdragon_695_5g_mobile_platform_firmware qfw7114_firmware wcd9375_firmware fastconnect_7800_firmware fastconnect_6900 qca6391 snapdragon_x70_modem-rf_system qcn6224 snapdragon_778g_5g_mobile_platform_firmware qfw7114 wcn3950_firmware wcd9385_firmware snapdragon_480_5g_mobile_platform snapdragon_8_gen_2_mobile_platform_firmware fastconnect_6900_firmware snapdragon_8_gen_1_mobile_platform wcd9380 qcs8550 fastconnect_6200 fastconnect_7800 sm7325p_firmware snapdragon_888_5g_mobile_platform_firmware snapdragon_4_gen_1_mobile_platform qcs4490 snapdragon_8_gen_1_mobile_platform_firmware wcd9375 snapdragon_778g_5g_mobile_platform snapdragon_8\+_gen_2_mobile_platform_firmware wsa8845 wcn3988_firmware fastconnect_6700_firmware video_collaboration_vc3_platform_firmware sm4350-ac_firmware wsa8835_firmware wsa8810 snapdragon_x75_5g_modem-rf_system_firmware qcs6490 snapdragon_8\+_gen_2_mobile_platform sm4350-ac sm8350-ac video_collaboration_vc3_platform qcn6224_firmware Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CVE-2016-10388

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.50%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application.

CVE-2016-10496

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.54%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:14

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 210/SD 212/SD 205, SD 410/12, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, and SD 810, A NULL pointer dereference can occur during an SSL handshake.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2016-10431

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 20:11

CWE ID-CWE-20

Improper Input Validation

CVE-2016-10441

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.18%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:40

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, improper offset validation leads to buffer overflow in video parser.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-10392

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.33%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory.

Product-android Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2023-22385

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.2||HIGH

EPSS-0.13% / 32.60%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in Data Modem

Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

CWE ID-CWE-126

Buffer Over-read

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-22388

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.16% / 37.87%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in Multi-mode Call Processor

Memory Corruption in Multi-mode Call Processor while processing bit mask API.

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CVE-2016-10486

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 17:14

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9640, MDM9645, SD 210/SD 212/SD 205, SD 450, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, and SD 820A, PD failure reason string from user PD is used directly in root PD, so if the buffer parameter is non-NULL terminated in Diag F3 APIs, a buffer overread occurs.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-10444

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.37%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 03:43

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 820, SD 820A, and SD 835, SMMU Access Control Policy was updated to block HLOS from accessing BLSP and BAM resources.

CWE ID-CWE-284

Improper Access Control

CVE-2023-21631

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.5||HIGH

EPSS-0.07% / 22.94%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Improper Input Validation in Modem

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

CWE ID-CWE-20

Improper Input Validation

CVE-2017-14916

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.30%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly validated.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-14910

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.27% / 49.77%

7 Day CHG~0.00%

Published-23 Feb, 2018 | 23:00

Updated-17 Sep, 2024 | 00:06

In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 835, and SD 845, a buffer overread is possible if there are no newlines in an input file.

CWE ID-CWE-125

Out-of-bounds Read

CVE-2016-10382

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.13% / 33.80%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient.

CWE ID-CWE-284

Improper Access Control

CVE-2016-10458

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 20:02

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, SDX20, and Snapdragon_High_Med_2016, the 'proper' solution for this will be to ensure that any users of qsee_log in the bootchain (before Linux boots) unallocate their buffers and clear the qsee_log pointer. Until support for that is implemented in TZ and the bootloader, enable tz_log to avoid potential scribbling. This solution will prevent the linux kernel memory corruption.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-10343

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.50%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-10344

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.13% / 33.32%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2015-9066

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 47.77%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT procedure.

Product-android Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9171

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:21

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, if OEMCrypto_Dash_InstallEncapKeybox() is called with keyBoxLength set to a value higher than TZ_WV_MAX_DATA_LEN (20k), a buffer over-read occurs.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9188

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:32

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, and SD 850, in Secure DEMUX command handler, when parameter validation fails, an error code is written into a response buffer without checking that response buffer length, passed from HLOS, which may result in memory corruption.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-14913

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.74% / 72.05%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-16 Sep, 2024 | 17:27

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, SD 625, SD 650/52, SD 835, SD 845, DDR address input validation is being improperly truncated.

Product-mdm9206 sd_625 sd_652 sd_835_firmware sd_625_firmware sd_650 sd_835 sd_845_firmware sd_652_firmware sd_845 mdm9206_firmware sd_650_firmware Snapdragon IoT, Snapdragon Mobile

CWE ID-CWE-20

Improper Input Validation

CVE-2017-14915

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.87% / 74.29%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-17 Sep, 2024 | 02:47

In Android before 2018-01-05 on Qualcomm Snapdragon Mobile SD 625, SD 650/52, SD 835, accessing SPCOM functions with a compromised client structure can result in a Use After Free condition.

Product-sd_652 sd_625 sd_835_firmware sd_625_firmware sd_650 sd_835 sd_652_firmware sd_650_firmware Snapdragon Mobile

CWE ID-CWE-416

Use After Free

CVE-2017-14914

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.30%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, handles in the global client structure can become stale.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

CVE-2017-14911

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.96% / 82.75%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-17 Sep, 2024 | 02:48

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 625, SD 650/52, SD 820, SD 835, it is possible for the XBL loader to skip the authentication of device config.

CWE ID-CWE-287

Improper Authentication

CVE-2017-14909

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.30%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a count value that is read from a file is not properly validated.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

CVE-2017-14906

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.58% / 68.10%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-16 Sep, 2024 | 16:42

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, PKCS7 padding is not supported by the crypto storage APIs.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Snapdragon IoT, Snapdragon Mobile

CVE-2017-14907

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.07% / 20.71%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, cryptographic strength is reduced while deriving disk encryption key.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CVE-2017-14908

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.30%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the SafeSwitch test application does not properly validate the number of blocks to verify.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-20

Improper Input Validation

CVE-2017-14917

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.11% / 29.30%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message passing interface are not properly validated.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9200

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.63%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 01:42

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, and SD 835, in some TrustZone API functions, untrusted pointers can be dereferenced.

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2015-9146

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 22:08

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, SD 400, SD 800, SD 835, SD 845, SD 850, and SDX20, when QDI read, write, or ioctl are called, the passed-in pointer is not properly validated before accessing it for the delayed response.

CWE ID-CWE-20

Improper Input Validation

CVE-2015-9179

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.18%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 22:30

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8974, lack of length checking in OEMCrypto_DeriveKeysFromSessionKey() could lead to a buffer overflow vulnerability.

Product-msm8974_firmware msm8974 Snapdragon Mobile

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-9151

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 16:12

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, userspace-provided pointer arguments are not validated.

Product-mdm9635m_firmware sd_800_firmware mdm9625_firmware mdm9635m sd_800 sd_400 mdm9625 sd_400_firmware Snapdragon Mobile

CWE ID-CWE-20

Improper Input Validation

CVE-2017-11005

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 32.34%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during a deinitialization path.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2017-11010

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.58% / 68.10%

7 Day CHG~0.00%

Published-30 Mar, 2018 | 15:00

Updated-17 Sep, 2024 | 03:59

In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 625, SD 650/52, SD 835, access control left a configuration space unprotected.

Vendor-Qualcomm Technologies, Inc.Google LLC

Product-android Snapdragon IoT, Snapdragon Mobile

CVE-2017-11006

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 32.34%

7 Day CHG~0.00%

Published-05 Dec, 2017 | 19:00

Updated-20 Apr, 2025 | 01:37

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition can occur during positioning.

Product-android Android for MSM, Firefox OS for MSM, QRD Android

CWE ID-CWE-416

Use After Free

CVE-2022-40515

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.07% / 22.15%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 12:21

Double free in Video

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.

Product-qca9377_firmware sa6150p_firmware qcs610 wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware qca6335 csra6620_firmware qcs605_firmware apq8076 sd_675_firmware csra6640_firmware qcs6125_firmware msm8108 wcn3998 msm8108_firmware wcn3950 sm4125 sd720g mdm9628 mdm9206_firmware sd_8_gen1_5g_firmware wcn3660b sd710_firmware sd460_firmware sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware wcn3998_firmware msm8909w apq8009w_firmware qca6420 sdx20m sd680_firmware qca9367_firmware qcs6125 apq8056_firmware sd662_firmware qcs405 qca6430 wcd9340 sd626_firmware sd765g qualcomm215_firmware sw5100 sd680 qca6436 wcn6851 sa6155p wcn7851_firmware apq8052 msm8209_firmware mdm9250_firmware wcd9341 qca6696_firmware sd870_firmware sd750g wcn3910_firmware sxr2150p_firmware sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware sm8475 msm8208_firmware qcn7606_firmware wcn6750_firmware wcn3610 msm8608 wcn3991 sda429w_firmware wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 sd625_firmware qca6564au sdx55m_firmware wcn6856_firmware msm8976_firmware qca6574 sd670_firmware wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx50m_firmware sd626 qca6430_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 wcn3910 msm8956_firmware qca6320 mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 sd835 wcn3980_firmware sd730 wcd9330_firmware sdx55m qcc5100_firmware wcn6740_firmware sd821_firmware sd678_firmware apq8064au_firmware ar8031_firmware wcn3680_firmware wcn6851_firmware sd670 qca6564a_firmware apq8009w msm8976sg_firmware qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware sa6145p sd695_firmware sdxr1 ar8031 apq8096au qcs405_firmware sa8145p sd820_firmware qca6391_firmware wcd9370_firmware sd780g_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sxr2150p qcm2290 qcn7606 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware mdm9628_firmware snapdragon_4_gen_1_firmware mdm9650 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware sd625 qca6564 qca6426 wcn3990_firmware apq8076_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 qca6320_firmware wcn3680b_firmware sdx55_firmware wcn3615 qca6595au sm7250p_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd778g sa6155p_firmware qca6310 msm8208 wcn7851 sd429 qcs6490 sdxr2_5g qca9367 sd821 mdm9607_firmware msm8976sg wcn3988_firmware qcn9074 sd205 sd429_firmware sa6145p_firmware sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca6390 wcd9375 sd750g_firmware aqt1000 msm8956 msm8976 sm6250_firmware apq8064au msm8952 apq8056 sda429w sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 qca6564a qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qcc5100 sd888 msm8952_firmware msm8909w_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd888_5g qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 apq8052_firmware qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 sm7315 apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware qcm4290 qcm6490_firmware sdx50m sdx20 sd480_firmware qca6574au sd710 sa8155p_firmware mdm9607 sd205_firmware wcd9341_firmware sdx20m_firmware qcm6125 wsa8810 mdm9150 wcn6856 wcn3680b sd835_firmware qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sdw2500 sa6150p apq8096au_firmware sd845 sm7250p sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware Snapdragon qca9377_firmware wcn3991_firmware mdm9150_firmware sa6150p_firmware sa8145p_firmware qcs2290_firmware mdm9628_firmware snapdragon_4_gen_1_firmware wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware apq8009_firmware sd730_firmware csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware csra6640_firmware qcs6125_firmware apq8076_firmware wcn3990_firmware sdw2500_firmware msm8108_firmware sdxr2_5g_firmware wcd9385_firmware wcd9326_firmware wcn3615_firmware mdm9206_firmware sd_8_gen1_5g_firmware sd710_firmware sd460_firmware sm7315_firmware qca6320_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware wcn3998_firmware sm7250p_firmware apq8009w_firmware wcn3610_firmware qca6436_firmware qca6564au_firmware sd680_firmware sa6155p_firmware qca9367_firmware apq8056_firmware sd662_firmware mdm9607_firmware wcn3988_firmware sa6145p_firmware sd429_firmware sd778g_firmware sd626_firmware wsa8810_firmware qualcomm215_firmware sd765_firmware wcn7851_firmware msm8209_firmware qca6174a_firmware mdm9250_firmware qcs4290_firmware qca6696_firmware qcs6490_firmware sd870_firmware wcn3910_firmware sxr2150p_firmware sd750g_firmware sm6250_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware wcn6850_firmware sd660_firmware wcn7850_firmware wsa8835_firmware sa8195p_firmware msm8208_firmware qcn7606_firmware wcn6750_firmware qcm6125_firmware qcm2290_firmware sda429w_firmware wcd9380_firmware msm8996au_firmware sd625_firmware sdx55m_firmware wcn6856_firmware msm8952_firmware msm8909w_firmware msm8976_firmware sd670_firmware sdm429w_firmware sd665_firmware sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6310_firmware qca6430_firmware wcd9335_firmware apq8052_firmware qca6335_firmware qca6574_firmware wcd9340_firmware sm4125_firmware sm7325p_firmware msm8956_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware sd768g_firmware wcn3980_firmware sdxr1_firmware wcd9330_firmware qcc5100_firmware aqt1000_firmware wcn6740_firmware sd821_firmware sd678_firmware apq8064au_firmware ar8031_firmware qcm6490_firmware wcn3680_firmware sd480_firmware wcn6851_firmware sa8155p_firmware sd205_firmware qca6564a_firmware msm8976sg_firmware wcd9341_firmware sdx20m_firmware qcm4290_firmware sw5100p_firmware sd210_firmware qcs610_firmware sd835_firmware qca6564_firmware sd695_firmware qcs405_firmware sd820_firmware qca6391_firmware sd845_firmware msm8608_firmware sd780g_firmware wcd9370_firmware sd888_firmware apq8096au_firmware sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware

CWE ID-CWE-415

Double Free

CVE-2022-40510

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 32.30%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-03 Aug, 2024 | 12:21

Buffer copy without checking size of input in Audio.

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

Product-qca9377_firmware sd_8cx_gen3_firmware mdm9640_firmware sm6250p_firmware qcs610 qca8337 qca6431_firmware wcd9360_firmware sdx65 wcn3950_firmware sc8180x\+sdx55 sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 msm8917 sd_455_firmware csra6620_firmware qcs605_firmware apq8076 sd_675_firmware csra6640_firmware qcs6125_firmware sd632 msm8108 sa415m sm4375 wcn3998 wcd9371_firmware msm8108_firmware qam8295p wcn3950 qcn6024_firmware sd720g sm4125 mdm9206_firmware sd_8cx_gen2_firmware mdm9628 sd_8_gen1_5g_firmware wcn3660b sd450_firmware sd710_firmware sd460_firmware qca4020 wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 wcd9360 sd680_firmware qca9367_firmware mdm8207 wcn3999 sd_8cx_gen2 qrb5165_firmware qrb5165m_firmware qcs6125 sa8155_firmware sd662_firmware qcs405 qca6430 wcd9306_firmware wcd9340 sd626_firmware sd765g sw5100 sd680 qca4020_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware msm8937 msm8209_firmware mdm9250_firmware wcn3660_firmware wcd9341 pm8937_firmware qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g wcn3910_firmware sxr2150p_firmware sd_8cx sa8150p mdm9207_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd712 wcn3988 sd660_firmware wcn7850_firmware sa8195p_firmware msm8208_firmware wcn6750_firmware sa8295p_firmware sd450 wcn3610 msm8608 mdm9640 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w sw5100p msm8996au_firmware wcd9330 sd625_firmware qca6564au sdx55m_firmware wcn6856_firmware msm8940_firmware sd670_firmware qca6574 sd632_firmware wcd9380 qcs410 sd690_5g_firmware sdx50m_firmware qca9379_firmware sdx24_firmware qcn9012_firmware sd626 qca6430_firmware sd439_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6320 msm8937_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware wcn3680 sd695 qca9984 sd835 qcn9024 wcn3980_firmware sd730 wcd9330_firmware sdx55m qcc5100_firmware sa8295p qca6421_firmware wcn6740_firmware sd678_firmware apq8064au_firmware ar8031_firmware wcn3680_firmware qrb5165 wcn6851_firmware qcs603 sd670 sd_636_firmware qcn9024_firmware qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 sw5100p_firmware sd210_firmware qcs610_firmware qsm8250 sa6145p sd695_firmware sdxr1 ar8031 apq8096au qca6595_firmware qcs405_firmware mdm8207_firmware sdm630_firmware sd820_firmware qca6391_firmware wcd9370_firmware qm215_firmware sd780g_firmware sdx55 sa8155p csra6640 sd675 sd439 wcn3660 qca9379 sxr2150p ar8035_firmware qsm8250_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcs2290_firmware sd7c_firmware csrb31024 mdm9628_firmware mdm9650 sd_636 csra6620 qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware apq8009_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware sd625 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware apq8076_firmware qca9984_firmware qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware wcn3615_firmware sd662 qam8295p_firmware apq8037 qcn9011_firmware sa8155 qca6320_firmware wcn3680b_firmware sdx55_firmware wcn3615 qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n mdm9207 wcd9306 qca6584au sd778g qca6564au_firmware msm8208 sa6155p_firmware qca6310 pm8937 wcn7851 sd429 sa515m_firmware qcs6490 sdxr2_5g qca9367 sdm630 mdm9607_firmware sa415m_firmware wcn3988_firmware qcn9074 sd205 qm215 qca6421 sd429_firmware sd778g_firmware sa6145p_firmware sa8195p sm6250 sd712_firmware apq8017_firmware wsa8810_firmware sm4375_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware sd_8cx_gen3 qca6390 wcd9375 sd750g_firmware aqt1000 ar8035 apq8064au sc8180x\+sdx55_firmware sm6250_firmware sda429w msm8917_firmware sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware sd820 qcm6490 wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a qcm6125_firmware qcm2290_firmware wcn3990 sd_675 sd780g sd865_5g qca6595 qcc5100 sdx24 qcn9012 msm8909w_firmware qcx315_firmware wsa8835 msm8996au sdm429w_firmware sd665_firmware sd_8_gen1_5g sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p qca6310_firmware wcn6750 sa515m qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware msm8209 qrb5165m sd850_firmware apq8009 sd460 qca6391 sdxr1_firmware aqt1000_firmware msm8920 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx50m sdx20 sd480_firmware msm8920_firmware qcn9011 sd_455 qca6574au sd710 sa8155p_firmware mdm9607 sd205_firmware wcd9341_firmware qcm6125 wsa8810 mdm9150 wcn6856 wcn3680b sd835_firmware sd768g wcn6740 qca6696 sd845_firmware msm8608_firmware sdw2500 msm8940 apq8096au_firmware qcn6024 sd845 apq8037_firmware sm7250p sd720g_firmware sdx12 sw5100_firmware qcs410_firmware qcn9074_firmware sd850 Snapdragon qca9377_firmware sd_8cx_gen3_firmware mdm9150_firmware wcn3991_firmware mdm9640_firmware sm6250p_firmware qcs2290_firmware qca6431_firmware sd7c_firmware mdm9628_firmware wcd9360_firmware wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware apq8009_firmware sd730_firmware sd_455_firmware csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware csra6640_firmware qcs6125_firmware qca6584au_firmware apq8076_firmware qrb5165n_firmware wcn3990_firmware qca9984_firmware sdw2500_firmware sd_8cx_firmware msm8108_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware qcn6024_firmware wcd9326_firmware wcd9371_firmware mdm9206_firmware wcd9385_firmware sd_8_gen1_5g_firmware wcn3615_firmware sd450_firmware sd710_firmware sd460_firmware qam8295p_firmware qcn9011_firmware qca6320_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware qca8081_firmware sa6155_firmware sdx12_firmware sm7250p_firmware wcn3998_firmware apq8009w_firmware wcn3610_firmware qca6436_firmware wcn3999_firmware qca6564au_firmware sd680_firmware sa6155p_firmware qca9367_firmware sa515m_firmware qrb5165_firmware qrb5165m_firmware sa8155_firmware sd662_firmware mdm9607_firmware sa415m_firmware wcn3988_firmware sa6145p_firmware sd429_firmware wcd9306_firmware sd712_firmware sd778g_firmware apq8017_firmware sd626_firmware wsa8810_firmware qualcomm215_firmware sm4375_firmware sd765_firmware qca4020_firmware qcs603_firmware wcn7851_firmware msm8209_firmware qca6174a_firmware mdm9250_firmware qcs4290_firmware wcn3660_firmware pm8937_firmware qca6696_firmware qcs6490_firmware sd870_firmware wcn3910_firmware sxr2150p_firmware sd750g_firmware sm6250_firmware mdm9207_firmware wsa8830_firmware msm8917_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware sdx20_firmware wsa8815_firmware sd888_5g_firmware wcn6850_firmware sd660_firmware wcn7850_firmware wsa8835_firmware sa8195p_firmware msm8208_firmware sa8295p_firmware wcn6750_firmware qcm6125_firmware qcm2290_firmware qca8337_firmware sda429w_firmware wcd9380_firmware msm8996au_firmware sd625_firmware sdx55m_firmware wcn6856_firmware msm8940_firmware msm8909w_firmware qcx315_firmware sd632_firmware sd670_firmware sdm429w_firmware sd665_firmware sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca9379_firmware sdx24_firmware qca6310_firmware qca6430_firmware qcn9012_firmware wcd9335_firmware sd439_firmware qca6335_firmware qca6574_firmware wcd9340_firmware sm4125_firmware sm7325p_firmware msm8937_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware sd768g_firmware sd850_firmware wcn3980_firmware sdxr1_firmware wcd9330_firmware qcc5100_firmware qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware apq8064au_firmware ar8031_firmware csrb31024_firmware qcm6490_firmware wcn3680_firmware sd480_firmware wcn6851_firmware msm8920_firmware sa8155p_firmware sd_636_firmware sd205_firmware qca6564a_firmware qcn9024_firmware wcd9341_firmware qcm4290_firmware sw5100p_firmware sd210_firmware qcs610_firmware sd835_firmware sd695_firmware qcs405_firmware qca6595_firmware mdm8207_firmware sdm630_firmware sd820_firmware qca6391_firmware sd845_firmware msm8608_firmware sd780g_firmware wcd9370_firmware apq8096au_firmware apq8037_firmware sd720g_firmware sw5100_firmware qcn9074_firmware qcs410_firmware ar8035_firmware qsm8250_firmware

CWE ID-CWE-457

Use of Uninitialized Variable

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-5872

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 36.50%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated.

CWE ID-CWE-20

Improper Input Validation

CVE-2024-21480

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.10% / 27.95%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while playing audio file having large-sized input buffer.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-21473

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.19% / 40.89%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:06

Updated-13 Jan, 2025 | 21:54

Improper Input Validation in WIN SON

Memory corruption while redirecting log file to any file location with any file name.

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-33265

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.11% / 29.81%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 15:15

Information exposure in Powerline Communication Firmware

Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device.

Product-qca7500_firmware qca7520_firmware qca7550 qca7520 qca7500 qca7550_firmware Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-33211

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 31.97%

7 Day CHG~0.00%

Published-04 Apr, 2023 | 04:46

Updated-03 Aug, 2024 | 08:01

Improper Input Validation in MODEM

memory corruption in modem due to improper check while calculating size of serialized CoAP message

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-131

Incorrect Calculation of Buffer Size

CVE-2024-21463

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.08% / 25.15%

7 Day CHG~0.00%

Published-01 Apr, 2024 | 15:06

Updated-13 Jan, 2025 | 21:54

Buffer Copy Without Checking Size of Input in Audio

Memory corruption while processing Codec2 during v13k decoder pitch synthesis.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-33234

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.3||HIGH

EPSS-0.10% / 29.11%

7 Day CHG~0.00%

Published-15 Nov, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product-wcd9380_firmware wcd9340_firmware qca6595au_firmware qca6310 sd429_firmware sd730 qcn7606_firmware sd_675_firmware sd855_firmware sd662_firmware wcd9371 sdx50m qcs6490 sdx55 sd460_firmware qca6696 qca6421 sa6155 qsm8250_firmware qca6564au qca6426_firmware qcm4290_firmware wcn3660b sd720g sm4375 wcn3660b_firmware sa6150p sd460 sd665_firmware sd710_firmware sa6145p_firmware wsa8830 sd768g sm4125 wcn6740_firmware wcn6856 qca6390 wsa8815 sdx50m_firmware sa6155p sa8150p_firmware sd480 qca6430 sa8145p_firmware wcn3620_firmware sd855 qcs6490_firmware wcd9340 wcn6850 sa8145p sdx55_firmware wcn3950 sxr2150p_firmware sdxr2_5g_firmware qcm6490 wcd9335 sd670_firmware sd765g_firmware qca6574a qca6595_firmware sd865_5g_firmware qca6421_firmware qcm6125_firmware qca6574au_firmware sd662 sdm429w_firmware qca6564_firmware wcn6750 qcs610_firmware sm7325p sd695_firmware qcm2290_firmware wcd9380 sd_675 qca6335 qcm4290 qca6595 qca6431_firmware sd695 sd730_firmware sd480_firmware qca6430_firmware sa6150p_firmware sd888 wcd9375_firmware sm7315_firmware sm7325p_firmware wcn6856_firmware sd870 aqt1000 qca6390_firmware wcn6855_firmware qsm8250 qca6420 sa6155_firmware sd780g_firmware wcn6855 qcm2290 wcn3910 sd870_firmware qcm6490_firmware sm6250 sd845_firmware sdxr1_firmware qca6431 qca6595au wcd9370 sd888_firmware qcs4290_firmware wcn3990 wcn3980 sd429 sm4125_firmware sd690_5g sm7315 sd765_firmware sd720g_firmware sd765g sd670 wsa8835 sdx55m wcn3998 wcn6850_firmware sm6250p wsa8810_firmware wsa8815_firmware wcn3991_firmware sa8150p qcs2290 wcn6740 wcd9385 qca6436 sd678 qca6574au wcd9385_firmware wcn6750_firmware qcs410_firmware sa8155p sdxr1 wsa8810 sd680 sd888_5g aqt1000_firmware wsa8835_firmware sd678_firmware wcd9335_firmware qcs6125 sm4375_firmware sm7250p_firmware qca6391 wcn3991 qca6574 wcn3998_firmware qca6574_firmware wcn6851 sd778g_firmware wcd9370_firmware sd675 qca6420_firmware sa8195p qca6574a_firmware sd675_firmware sd665 sa8155_firmware sd888_5g_firmware wsa8830_firmware qcm6125 sm6250_firmware sdxr2_5g wcd9341 wcn3980_firmware qcs2290_firmware wcn6851_firmware sdm429w wcd9326 qcs610 sa6155p_firmware sd680_firmware qca6391_firmware wcd9326_firmware sm7250p sa8155p_firmware sa6145p wcn3910_firmware wcd9375 sd750g_firmware qca6696_firmware sm6250p_firmware sxr2150p sd865_5g sd780g qca6564au_firmware qca6426 qca6335_firmware sd690_5g_firmware qcs6125_firmware sdx55m_firmware sd778g wcn3950_firmware wcd9371_firmware wcn3988 wcn3990_firmware sa8155 sd750g wcn3620 sd765 sd768g_firmware qcs605_firmware qca6564 qcs605 wcn3988_firmware qca6310_firmware qcs4290 sd710 qcn7606 qca6436_firmware sa8195p_firmware sd845 wcd9341_firmware qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-10384

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.25% / 48.33%

7 Day CHG~0.00%

Published-18 Aug, 2017 | 18:00

Updated-20 Apr, 2025 | 01:37

In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctl.

Product-android Snapdragon Mobile, Snapdragon Wear

CWE ID-CWE-20

Improper Input Validation

CVE-2016-10471

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 18:49

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, and SD 820A, an unsigned RTIC health report susceptible to tampering by malware executing in the context of the HLOS may be requested.

Product-sd_652 sd_425_firmware sd_820a sd_625_firmware sd_450 sd_425 sd_430_firmware sd_430 sd_625 sd_820_firmware sd_820 sd_650 sd_450_firmware sd_652_firmware sd_820a_firmware sd_650_firmware Snapdragon Automobile, Snapdragon Mobile

CVE-2016-10425

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.23% / 46.18%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 03:58

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, and SD 835, if GPT listener response is passed a large buffer offset, a buffer overflow occurs.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-10476

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.22% / 44.32%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-16 Sep, 2024 | 23:26

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, missing array index checks on app index in function qcril_uim_clear_encrypted_pin results in accessing addresses outside the bounds of the buffer when app index is too large.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-10442

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.18% / 39.37%

7 Day CHG~0.00%

Published-18 Apr, 2018 | 14:00

Updated-17 Sep, 2024 | 02:02

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640, SDM630, MSM8976, MSM8937, SDM845, MSM8976, and MSM8952, when running module or kernel code with improper access control allowing writing to arbitrary regions of memory, the user may utilize this vector to alter module executable code.