ByteOS

Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Product

Versions

Affected

APQ8096AU, MDM9650, QCA6174A, QCA6574AU, QCS603, QCS605, Qualcomm215, SD429, SD820, SDM429W, WCD9326, WCD9335, WCD9341, WCN3615, WCN3620, WCN3660B, WCN3680, WCN3980, WCN3990, WSA8810, WSA8815

Problem Types

Type	CWE ID	Description
text	N/A	Improper Input Validation in Kernel

Type: text

CWE ID: N/A

Description: Improper Input Validation in Kernel

Metrics

Version	Base score	Base severity	Vector
3.1	6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 6.7

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:16 Sep, 2022 | 06:15

Updated At:08 Aug, 2023 | 14:21

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 6.7

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 6.7

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CPE Matches

cpe:2.3:o:qualcomm:apq8096au_firmware:-:*:*:*:*:*:*:*

>>apq8096au_firmware>>-

cpe:2.3:h:qualcomm:apq8096au:-:*:*:*:*:*:*:*

>>apq8096au>>-

cpe:2.3:o:qualcomm:mdm9650_firmware:-:*:*:*:*:*:*:*

>>mdm9650_firmware>>-

cpe:2.3:h:qualcomm:mdm9650:-:*:*:*:*:*:*:*

>>mdm9650>>-

cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*

>>qca6174a_firmware>>-

cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*

>>qca6174a>>-

cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*

>>qca6574au_firmware>>-

cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

>>qca6574au>>-

cpe:2.3:o:qualcomm:qcs603_firmware:-:*:*:*:*:*:*:*

>>qcs603_firmware>>-

cpe:2.3:h:qualcomm:qcs603:-:*:*:*:*:*:*:*

>>qcs603>>-

cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*

>>qcs605_firmware>>-

cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*

>>qcs605>>-

cpe:2.3:o:qualcomm:qualcomm215_firmware:-:*:*:*:*:*:*:*

>>qualcomm215_firmware>>-

cpe:2.3:h:qualcomm:qualcomm215:-:*:*:*:*:*:*:*

>>qualcomm215>>-

cpe:2.3:o:qualcomm:sd429_firmware:-:*:*:*:*:*:*:*

>>sd429_firmware>>-

cpe:2.3:h:qualcomm:sd429:-:*:*:*:*:*:*:*

>>sd429>>-

cpe:2.3:o:qualcomm:sd820_firmware:-:*:*:*:*:*:*:*

>>sd820_firmware>>-

cpe:2.3:h:qualcomm:sd820:-:*:*:*:*:*:*:*

>>sd820>>-

cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*

>>sdm429w_firmware>>-

cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*

>>sdm429w>>-

cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*

>>wcd9326_firmware>>-

cpe:2.3:h:qualcomm:wcd9326:-:*:*:*:*:*:*:*

>>wcd9326>>-

cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*

>>wcd9335_firmware>>-

cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:*

>>wcd9335>>-

cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*

>>wcd9341_firmware>>-

cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:*

>>wcd9341>>-

cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*

>>wcn3615_firmware>>-

cpe:2.3:h:qualcomm:wcn3615:-:*:*:*:*:*:*:*

>>wcn3615>>-

cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*

>>wcn3620_firmware>>-

cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*

>>wcn3620>>-

cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*

>>wcn3660b_firmware>>-

cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*

>>wcn3660b>>-

cpe:2.3:o:qualcomm:wcn3680_firmware:-:*:*:*:*:*:*:*

>>wcn3680_firmware>>-

cpe:2.3:h:qualcomm:wcn3680:-:*:*:*:*:*:*:*

>>wcn3680>>-

cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*

>>wcn3980_firmware>>-

cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

>>wcn3980>>-

cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*

>>wcn3990_firmware>>-

cpe:2.3:h:qualcomm:wcn3990:-:*:*:*:*:*:*:*

>>wcn3990>>-

cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*

>>wsa8810_firmware>>-

cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*

>>wsa8810>>-

cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*

>>wsa8815_firmware>>-

cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*

>>wsa8815>>-

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletin	product-security@qualcomm.com	Patch Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletin

Source: product-security@qualcomm.com

Resource:

Patch

Vendor Advisory

Similar CVEs

1002Records found

CVE-2023-33067

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 5.83%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in Audio

Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CVE-2023-33038

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.69%

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-14 Nov, 2024 | 19:30

Integer Overflow or Wraparound in Radio Interface Layer

Memory corruption while receiving a message in Bus Socket Transport Server.

CWE ID-CWE-190

Integer Overflow or Wraparound

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28580

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 13.04%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN Host

Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache.

Product-sw5100p qcs410_firmware sa6150p_firmware sa6155p_firmware qam8295p_firmware qcs610_firmware wcd9370 qca8081_firmware ar8035_firmware qca6696 wsa8830_firmware wcd9340_firmware qfw7124_firmware wcd9341_firmware qcc710_firmware wsa8815_firmware sa8195p_firmware wcd9370_firmware qca8337_firmware qca8337 wcn3660b qca6574au_firmware sa8195p qca6595au wcd9340 qam8295p wcd9341 qca6574au wcn3950 wsa8810_firmware wcn3988 wcn3980_firmware qcn6274 wcn3660b_firmware qfw7124 snapdragon_x75_5g_modem-rf_system wsa8835 qca6595au_firmware qca6391_firmware sw5100p_firmware sa8295p_firmware qca6696_firmware wcd9380_firmware sa6150p qcs410 sa8155p_firmware qca8081 wsa8815 video_collaboration_vc1_platform_firmware sa8155p wcn3680b_firmware wsa8830 qcn6274_firmware sa6145p qcc710 sw5100_firmware ar8035 qfw7114_firmware fastconnect_6900 fastconnect_7800_firmware qca6391 video_collaboration_vc1_platform qcn6224 qfw7114 wcn3950_firmware fastconnect_6900_firmware sa8295p snapdragon_8_gen_1_mobile_platform wcd9380 sa6145p_firmware fastconnect_7800 sa8145p_firmware wcn3680b sa8150p snapdragon_8_gen_1_mobile_platform_firmware sa8150p_firmware wcn3988_firmware sa6155p video_collaboration_vc3_platform_firmware sa8145p wsa8835_firmware wsa8810 snapdragon_x75_5g_modem-rf_system_firmware wcn3980 sw5100 video_collaboration_vc3_platform qcn6224_firmware qcs610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28570

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.38%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Copy without Checking Size of Input in Audio

Memory corruption while processing audio effects.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-22383

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.38%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Use After Free in Camera

Memory Corruption in camera while installing a fd for a particular DMA buffer.

Product-sw5100p qcs410_firmware sa6150p_firmware sd865_5g snapdragon_865_5g_mobile_platform_firmware qcs8155_firmware c-v2x_9150_firmware sa6155p_firmware qam8295p_firmware sd855 qcs610_firmware sxr2130_firmware wcd9370 wsa8830_firmware qca6696 snapdragon_870_5g_mobile_platform_firmware qca6436_firmware wcd9341_firmware snapdragon_wear_4100\+_platform_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware wcn3610_firmware qca6426 snapdragon_855\+\/860_mobile_platform_firmware fastconnect_6700 wcn3610 qca6420 snapdragon_865\+_5g_mobile_platform_firmware qcn9074 qca6430 wsa8815_firmware sa8195p_firmware wcd9370_firmware qca8337_firmware sdx55_firmware qca8337 qca6426_firmware snapdragon_x55_5g_modem-rf_system_firmware wcn3660b sxr2130 qca6574au_firmware sa8195p qam8295p wcd9341 qca6574au snapdragon_855_mobile_platform wcn3950 wsa8810_firmware snapdragon_xr2_5g_platform snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware wcn3988 qcs6490_firmware sd855_firmware wcn3980_firmware wcn3660b_firmware qca6436 wsa8835 qca6391_firmware qca6430_firmware snapdragon_870_5g_mobile_platform sw5100p_firmware fastconnect_6800_firmware sa8295p_firmware qca6696_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware sa6150p qcs410 sa8155p_firmware wsa8815 wcn3680b_firmware video_collaboration_vc1_platform_firmware sa8155p wsa8830 c-v2x_9150 sa6145p qcn9074_firmware sw5100_firmware sdx55 qsm8250_firmware fastconnect_6800 fastconnect_6900 qca6391 video_collaboration_vc1_platform wcn3950_firmware snapdragon_x55_5g_modem-rf_system fastconnect_6900_firmware sa8295p wcd9380 sa6145p_firmware fastconnect_6200 wcn3680b sa8145p_firmware snapdragon_xr2_5g_platform_firmware sd865_5g_firmware sa8150p qcs8155 sa8150p_firmware snapdragon_855\+\/860_mobile_platform snapdragon_w5\+_gen_1_wearable_platform wcn3988_firmware sa6155p fastconnect_6700_firmware video_collaboration_vc3_platform_firmware sa8145p snapdragon_wear_4100\+_platform wsa8835_firmware wsa8810 qcs6490 wcn3980 snapdragon_865\+_5g_mobile_platform qsm8250 fastconnect_6200_firmware sw5100 video_collaboration_vc3_platform aqt1000 qcs610 Snapdragon

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21648

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.22%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-02 Aug, 2024 | 09:44

Integer Overflow to Buffer Overflow in RIL

Memory corruption in RIL while trying to send apdu packet.

CWE ID-CWE-680

Integer Overflow to Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21639

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 10.27%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Buffer Copy Without Checking the Size of Input in Audio

Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

Product-aqt1000_firmware snapdragon_w5\+_gen_1 sa6155p_firmware wsa8830 sw5100p sa4155p_firmware snapdragon_855\+\/860_firmware wcn3988_firmware qca6430 snapdragon_855 sa8155p_firmware wsa8835 sa8195p wsa8810_firmware wcd9341_firmware qca6420_firmware sw5100 wsa8810 sa6155p sw5100p_firmware snapdragon_855_firmware wcd9341 snapdragon_855\+\/860 qca6430_firmware wcn3980 sa4150p_firmware fastconnect_6200 aqt1000 sd855 wsa8815 sa8155p wsa8830_firmware sd855_firmware wcn3988 wsa8815_firmware wsa8835_firmware fastconnect_6200_firmware sa8195p_firmware sw5100_firmware wcn3980_firmware sa4155p qca6420 sa4150p snapdragon_w5\+_gen_1_firmware Snapdragon aqt1000_firmware sa6155p_firmware qca6430_firmware sa4155p_firmware sa4150p_firmware snapdragon_855_mobile_platform_firmware wcn3988_firmware wsa8830_firmware sa8155p_firmware sd855_firmware wsa8815_firmware wsa8835_firmware wsa8810_firmware fastconnect_6200_firmware wcd9341_firmware sa8195p_firmware qca6420_firmware sw5100_firmware wcn3980_firmware sw5100p_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21633

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 10.27%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux

Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21649

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.49%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-02 Aug, 2024 | 09:44

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Memory corruption in WLAN while running doDriverCmd for an unspecific command.

Product-wcn3991_firmware wsa8830 sa6150p_firmware sa8145p_firmware qcs610 qca8337 qca6431_firmware mdm9628_firmware mdm9650 wcn3950_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware wcd9370 qca6426 qca6584au_firmware sm4375 wcn3998 qca6554a_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 mdm9628 wcn3660b qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3610_firmware qca6420 qca6436_firmware qca6564au_firmware qca6584au sa6155p_firmware sdxr2_5g wcn3988_firmware qca6430 qcn9074 sa6145p_firmware qca6421 sa8195p wsa8810_firmware sm4375_firmware sw5100 qca6436 wcn6851 sa6155p wcd9385 wcd9341 qca6431 qca6696_firmware sd870_firmware qca6390 wcd9375 aqt1000 sa8150p wsa8830_firmware sda429w sd855_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware qca6564a wcn3610 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sw5100p qca6554a sd865_5g qca6595 qca6564au qcc5100 sdx55m_firmware wsa8835 qca6574 wcd9380 qcs410 qca6574a qca6430_firmware wcn3980 qca6574_firmware sd855 wsa8815 wcn6850 mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware sd695 wcn3980_firmware qca6391 sdx55m qcc5100_firmware qca6421_firmware aqt1000_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware qca6564a_firmware wcd9341_firmware sd480 sd870 wsa8810 sw5100p_firmware qcs610_firmware sa6145p wcn3680b sd695_firmware apq8096au qca6595_firmware sa8145p qca6696 qca6391_firmware wcd9370_firmware sa6150p sdx55 apq8096au_firmware sa8155p sw5100_firmware qcn9074_firmware qcs410_firmware Snapdragon wcn3991_firmware qca8337_firmware sda429w_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware qca6431_firmware sdx55m_firmware mdm9628_firmware wcn3950_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware qca6584au_firmware qca6430_firmware qca6554a_firmware wcd9385_firmware sdxr2_5g_firmware qca6574_firmware mdm9650_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware wcn3998_firmware wcn3980_firmware wcn3610_firmware qca6436_firmware qcc5100_firmware qca6421_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware sd480_firmware wcn6851_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware qca6564a_firmware wsa8810_firmware wcd9341_firmware sm4375_firmware sw5100p_firmware qcs610_firmware sd695_firmware qca6696_firmware qca6595_firmware sd870_firmware qca6391_firmware wcd9370_firmware apq8096au_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware qcn9074_firmware qcs410_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21640

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 10.27%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-26 Nov, 2024 | 18:56

Buffer Copy Without Checking Size of Input in Linux

Memory corruption in Linux when the file upload API is called with parameters having large buffer.

Product-fastconnect_7800 wsa8830_firmware wcd9380_firmware wsa8830 wsa8835 snapdragon_8_gen_1 wsa8835_firmware wcd9380 fastconnect_7800_firmware fastconnect_6900 fastconnect_6900_firmware snapdragon_8_gen_1_firmware Snapdragon snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21663

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 5.63%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-02 Aug, 2024 | 09:44

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display

Memory Corruption while accessing metadata in Display.

Product-sda429w_firmware wcd9380_firmware sa6150p_firmware wsa8830 sa8145p_firmware sw5100p qcc5100 wcn6856_firmware wsa8835 sd_8_gen1_5g wcd9380 sa8150p_firmware sd888_5g qca6420_firmware wcn6855_firmware qca6430_firmware wcn3980 wcn3998 wcd9385_firmware sd_8_gen1_5g_firmware sd855 wcn3660b wcn6850 wsa8815 wcn3660b_firmware wcn7850 qca6574au_firmware wcn3680b_firmware wcn3998_firmware wcn3980_firmware wcn3610_firmware qca6420 qcc5100_firmware aqt1000_firmware sa6155p_firmware wcn7851 wcn6851_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 wcn6855 wcn6851 sa6155p sw5100p_firmware wcn7851_firmware wcn6856 sa6145p wcn3680b wcd9385 wcd9341 qca6696_firmware sa8145p qca6696 aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sda429w sd855_firmware wsa8815_firmware wcn3988 wsa8835_firmware sd888_5g_firmware wcn6850_firmware wcn7850_firmware sa8195p_firmware sw5100_firmware wcn3610 Snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21654

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 5.63%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:23

Updated-02 Aug, 2024 | 09:44

Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Memory corruption in Audio during playback session with audio effects enabled.

Product-mdm9150_firmware wsa8830 sda429w_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware qcs610 sw5100p msm8996au_firmware sd865_5g qca6564au qcc5100 sdx55m_firmware mdm9628_firmware wsa8835 msm8996au wcn3950_firmware wcd9380 sa8150p_firmware qca6420_firmware qca6390_firmware qcs410 wcd9370 qca6574a qca6426 qca6564a qca6430_firmware wcn3980 sa415m wcn3998 qam8295p sdxr2_5g_firmware wcn3950 mdm9628 wcn3660b sd855 wsa8815 wcn6850 qam8295p_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcn3998_firmware wcn3980_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware sdx55m sa8295p qcc5100_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware sdxr2_5g wcn6851_firmware sa415m_firmware wcn3988_firmware qca6430 qca6574au qcn9074 sa6145p_firmware sa8155p_firmware qca6564a_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 sd870 qca6436 wcn6851 sa6155p sw5100p_firmware qcs610_firmware mdm9150 qsm8250 sa6145p wcn3680b wcd9341 apq8096au qca6696_firmware sa8145p sd870_firmware qca6696 qca6391_firmware qca6390 wcd9370_firmware aqt1000 sa8150p sa6150p sdx55 apq8096au_firmware wsa8830_firmware sda429w sa8155p sd855_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware qcn9074_firmware qcs410_firmware sa8295p_firmware wcn3610 qsm8250_firmware Snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21635

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 10.27%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21637

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 10.27%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Memory corruption in Linux while calling system configuration APIs.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-35118

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 10.74%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:40

Updated-04 Aug, 2024 | 00:33

An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-wcn3991_firmware mdm9150_firmware wsa8830 qcs610 qcs2290_firmware qca8337 sdx65 csra6620 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g wcd9370 csra6620_firmware qcs605_firmware csra6640_firmware qcs6125_firmware qca6426 wcn3990_firmware qrb5165n_firmware wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 wcd9326_firmware wcn3615_firmware sd_8_gen1_5g_firmware wcn3660b sd662 sd460_firmware sa8155 wcn7850 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au sa6155_firmware wcd9375_firmware wcn3615 sm7250p_firmware wcn3998_firmware wcn3999_firmware qca6420 qca6436_firmware apq8053_firmware qrb5165n sm7450_firmware sd680_firmware sa6155p_firmware wcn3999 sa515m_firmware qcs6490 qrb5165_firmware qrb5165m_firmware sd429 sdxr2_5g qcs6125 wcn7851 sa8155_firmware sd662_firmware qcs405 qca6430 wcn3988_firmware sd429_firmware wsa8810_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 sd680 wcd9326 sa6155p wcd9335 wcn6851 qcs603_firmware wcn7851_firmware qcs4290_firmware wcd9385 wcd9341 qcs6490_firmware sd750g sd870_firmware qca6390 ar8035 sd750g_firmware aqt1000 wcd9375 wcn3910_firmware msm8953_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3620_firmware qcm6490 sd888_5g_firmware wcn3988 wcn3620 wcn6850_firmware wcn7850_firmware wsa8815_firmware sm7450 wsa8835_firmware sm8475 wcn6750_firmware qcm6125_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sdm429w sd780g sd865_5g sdx55m_firmware wcn6856_firmware wsa8835 qca6574 sdm429w_firmware wcd9380 sd888_5g qualcomm215 qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6430_firmware wcd9335_firmware wcn3980 wcn6750 sa515m qca6574_firmware qcs605 sd855 sm4125_firmware wcn6850 wsa8815 wcn3910 sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware qrb5165m wcn3980_firmware sd460 qca6391 sdx55m sm8475_firmware aqt1000_firmware wcn6740_firmware msm8953 sdx65_firmware ar8031_firmware qcm4290 qcm6490_firmware wcn3680_firmware wsa8832_firmware qrb5165 sd480_firmware qcs603 wcn6851_firmware qca6574au sa8155p_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 wsa8832 qcs610_firmware mdm9150 wcn6856 wcn3680b sd768g ar8031 qcs405_firmware wcn6740 qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 apq8053 sa8155p csra6640 sm7250p qcs410_firmware sm8475p_firmware ar8035_firmware qcm2290 sm8475p Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-30265

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.06% / 17.21%

7 Day CHG~0.00%

Published-12 Nov, 2021 | 06:15

Updated-03 Aug, 2024 | 22:24

Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-fsm10055 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa6150p_firmware sm7250 sa8145p_firmware qcs610 fsm10056 qca8337 sm7250_firmware sdx65 csra6620 fsm10055_firmware wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 csra6620_firmware qcs605_firmware sd_675_firmware sd675_firmware csra6640_firmware qcs6125_firmware qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware wcn3998 wcd9385_firmware sdxr2_5g_firmware wcn3950 wcd9326_firmware wcn3615_firmware wcn3660b sd662 sd460_firmware sa8155 qca6574au_firmware sdx55_firmware wcn3680b_firmware qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware wcn3615 wcn3998_firmware wcn3610_firmware qca6420 qca6436_firmware apq8053_firmware qrb5165n qca6584au sa6155p_firmware wcn3999 qrb5165_firmware sdxr2_5g qcs6125 sa8155_firmware sd662_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware sd205 wcd9340 sa8195p wsa8810_firmware qualcomm215_firmware sd765g sd765_firmware fsm10056_firmware qca6436 wcd9326 wcd9335 sa6155p wcn6851 qca8081 qcs603_firmware wcd9385 wcd9341 qca6696_firmware sd870_firmware ar8035 qca6390 wcd9375 aqt1000 sa8150p msm8953_firmware wsa8830_firmware sda429w sd210 sd855_firmware sd865_5g_firmware wcn3620_firmware wcn3988 wcn6850_firmware wsa8815_firmware wcn3620 wsa8835_firmware sa8195p_firmware wcn3610 qcm6125_firmware wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware wcn3990 sd_675 sd865_5g qca6595 sdx55m_firmware wcn6856_firmware wsa8835 qca6574 sd665_firmware wcd9380 wcn3999_firmware qualcomm215 qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6430_firmware wcd9335_firmware wcn3980 qca6574_firmware qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware wcn3980_firmware sd460 qca6391 sd730 sdx55m aqt1000_firmware msm8953 sdx65_firmware sd678_firmware ar8031_firmware wcn3680_firmware qrb5165 wcn6851_firmware qcs603 qca6574au sa8155p_firmware sd205_firmware wcd9341_firmware qcm6125 wsa8810 sd870 wcn6855 sd210_firmware qcs610_firmware mdm9150 wcn6856 sa6145p wcn3680b sd768g ar8031 qca6595_firmware qcs405_firmware sa8145p qca6696 qca6391_firmware wcd9370_firmware sa6150p sdx55 apq8053 sa8155p csra6640 sd675 qcs410_firmware ar8035_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33041

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.05% / 15.04%

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-11 Aug, 2025 | 15:06

Use of Out-of-range Pointer Offset in Computer Vision

Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,

Product-qcm8550_firmware sa6150p_firmware wsa8845_firmware wsa8832 sa6155p_firmware wsa8840 qam8295p_firmware qcs8550_firmware qca6696 snapdragon_8_gen_2_mobile_firmware wcd9385 wcd9395_firmware sxr1230p_firmware wcd9390_firmware snapdragon_8_gen_2_mobile sg8275p wsa8832_firmware sa8195p_firmware wcd9395 ssg2125p sg8275p_firmware snapdragon_8\+_gen_2_mobile qca6574au_firmware sa8195p qam8295p qca6574au wcd9390 wsa8845h_firmware sm8550p_firmware qcm8550 qcs6490_firmware wsa8835 wsa8840_firmware sa8295p_firmware qca6696_firmware wsa8845h wcd9380_firmware sa6150p sa8155p_firmware sa8155p wsa8830 sm8550p sa6145p ssg2115p snapdragon_8_gen_3_mobile_firmware fastconnect_7800_firmware fastconnect_6900 ssg2125p_firmware wcd9385_firmware fastconnect_6900_firmware sa8295p qcs8550 sa6145p_firmware wcd9380 fastconnect_7800 sa8145p_firmware sa8150p snapdragon_8\+_gen_2_mobile_firmware sa8150p_firmware wsa8845 sa6155p video_collaboration_vc3_platform_firmware sa8145p wsa8835_firmware ssg2115p_firmware sxr1230p qcs6490 snapdragon_8_gen_3_mobile wsa8830_firmware video_collaboration_vc3_platform Snapdragon

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CVE-2024-23374

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.06% / 18.94%

7 Day CHG~0.00%

Published-07 Oct, 2024 | 12:58

Updated-16 Oct, 2024 | 20:26

Stack-based Buffer Overflow in Power Management IC

Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.

Product-fastconnect_7800 qca9377_firmware snapdragon_8_gen_1_mobile_platform sa6155p_firmware wsa8830 wcd9380_firmware sa6150p_firmware qca9367_firmware sa8145p_firmware qca6584au sw5100p qca6698aq snapdragon_w5\+_gen_1_wearable_platform qca9367 fastconnect_6900 fastconnect_6900_firmware wcn3988_firmware qca6574au sa8155p_firmware wsa8835 sa6145p_firmware sa8195p wcd9380 sa8150p_firmware fastconnect_7800_firmware sw5100 sa6155p sw5100p_firmware snapdragon_8_gen_1_mobile_platform_firmware snapdragon_auto_5g_modem-rf_gen_2 qca6698aq_firmware sa6145p qca6174a_firmware qca6174a snapdragon_auto_5g_modem-rf_gen_2_firmware qca6584au_firmware qca6696_firmware wcn3980 qca9377 sa8145p qca6696 sa8150p sa6150p sa8155p wsa8830_firmware wcn3988 wsa8835_firmware qca6574au_firmware sa8195p_firmware sw5100_firmware wcn3980_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware Snapdragon qca9377_firmware qca6174a_firmware sa6155p_firmware qca9367_firmware wcd9380_firmware sa6150p_firmware snapdragon_auto_5g_modem-rf_gen_2_firmware sa8145p_firmware qca6584au_firmware qca6696_firmware fastconnect_6900_firmware wcn3988_firmware wsa8830_firmware sa6145p_firmware sa8155p_firmware wsa8835_firmware sa8150p_firmware fastconnect_7800_firmware qca6574au_firmware sa8195p_firmware sw5100_firmware wcn3980_firmware sw5100p_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-33267

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.43%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 08:01

Improper restriction of operations within the bounds of memory buffer in Linux

Memory corruption in Linux while sending DRM request.

Product-wcn3991_firmware wcn3991 wcd9380_firmware sa6150p_firmware sa8145p_firmware qcs610 sdm429w sd865_5g qca6564au sm8150-ac sdm429 sdm429w_firmware wcn3950_firmware wcd9380 sa8150p_firmware qca6420_firmware snapdragon_wear_4100\+_platform_firmware qca6390_firmware qcs410 wcd9370 sxr2130 qca6574a snapdragon_wear_4100\+_platform wcn685x-5_firmware qca6564 qca6426 wcn685x-1 qca6430_firmware wcn3980 sm8250-ab wcn3998 wcn3950 wcn3660b sd855 wsa8815 sdm429_firmware snapdragon_xr2_5g_platform_firmware qca6426_firmware wcn3660b_firmware sa8155 snapdragon_x55_5g_modem-rf_system qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcn3998_firmware wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware sm8250-ab_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware snapdragon_x50_5g_modem-rf_system_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware snapdragon_xr2_5g_platform sa8155_firmware wcn685x-5 sm8250_firmware sm8250-ac qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware wsa8810 qca6436 sa6155p qcs610_firmware sm8150-ac_firmware qsm8250 sa6145p wcn3680b wcn685x-1_firmware qca6564_firmware sm8150_firmware sxr2130_firmware wcd9341 qca6696_firmware sa8145p qca6696 qca6391_firmware qca6390 wcd9370_firmware aqt1000 sa8150p sa6150p sdx55 snapdragon_x50_5g_modem-rf_system sa8155p sm8250-ac_firmware sm8250 sd855_firmware sd865_5g_firmware sm8150 wcn3620_firmware wsa8815_firmware wcn3620 sa8195p_firmware qcs410_firmware wcn3610 qsm8250_firmware Snapdragon aqt1000_firmware qca6564au_firmware sa6155p_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware fastconnect_6900_firmware sa8155_firmware sa6145p_firmware sa8155p_firmware sdm429w_firmware wcn3950_firmware wsa8810_firmware sa8150p_firmware wcd9341_firmware qca6420_firmware qcs610_firmware qca6564_firmware sxr2130_firmware qca6696_firmware qca6430_firmware qca6391_firmware snapdragon_855_mobile_platform_firmware wcd9370_firmware sd855_firmware sd865_5g_firmware snapdragon_xr2_5g_platform_firmware wcn3620_firmware qca6426_firmware wcn3660b_firmware wsa8815_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware sa8195p_firmware sdx55_firmware snapdragon_429_mobile_platform_firmware snapdragon_865_5g_mobile_platform_firmware wcn3680b_firmware fastconnect_6800_firmware qcs410_firmware snapdragon_x55_5g_modem-rf_system_firmware wcn3980_firmware wcn3610_firmware qca6436_firmware snapdragon_x50_5g_modem-rf_system_firmware qsm8250_firmware

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-22384

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 5.83%

7 Day CHG~0.00%

Published-03 Oct, 2023 | 05:00

Updated-27 Feb, 2025 | 20:48

Buffer Copy Without Checking Size of Input in VR Service

Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).

Product-sa6145p sa6155p_firmware sa6150p_firmware sa8145p_firmware qca6696_firmware sa8145p qca6696 sa8150p sa6150p qca6574au sa8155p sa6145p_firmware sa8155p_firmware sa8195p qca6574au_firmware sa8150p_firmware sa8195p_firmware sa6155p Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21634

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.38%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-02 Aug, 2024 | 09:44

Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer

Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.

Product-snapdragon_855\+\/860_mobile_platform_firmware wsa8830 wcd9380_firmware sa6150p_firmware wcn3990 sa8145p_firmware sw5100p sd865_5g fastconnect_6800 snapdragon_w5\+_gen_1_wearable_platform snapdragon_835_mobile_pc_platform snapdragon_870_5g_mobile_platform_firmware snapdragon_865_5g_mobile_platform wsa8835 wcd9380 sa8150p_firmware qca6420_firmware qca6595au_firmware snapdragon_wear_4100\+_platform_firmware snapdragon_855\+\/860_mobile_platform sxr2130 snapdragon_wear_4100\+_platform qca6426 wcn3990_firmware qca6310_firmware qca6430_firmware wcd9335_firmware wcn3980 fastconnect_6200 wcd9340_firmware wcn3660b sd855 wsa8815 qca6320 snapdragon_865\+_5g_mobile_platform snapdragon_xr2_5g_platform_firmware qca6426_firmware wcn3660b_firmware qca6320_firmware snapdragon_x55_5g_modem-rf_system qca6574au_firmware snapdragon_835_mobile_pc_platform_firmware wcn3680b_firmware fastconnect_6200_firmware qca6595au sd835 wcn3980_firmware snapdragon_x55_5g_modem-rf_system_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware aqt1000_firmware sa6155p_firmware qca6310 snapdragon_865\+_5g_mobile_platform_firmware snapdragon_870_5g_mobile_platform snapdragon_xr2_5g_platform fastconnect_6900 fastconnect_6900_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware wcd9340 sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 qca6436 wcd9335 sa6155p sw5100p_firmware sa6145p wcn3680b sd835_firmware sxr2130_firmware wcd9341 qca6696_firmware sa8145p qca6696 qca6391_firmware snapdragon_855_mobile_platform_firmware aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sd855_firmware sd865_5g_firmware wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware snapdragon_865_5g_mobile_platform_firmware sw5100_firmware fastconnect_6800_firmware snapdragon_855_mobile_platform wcn3610 Snapdragon

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21650

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.22%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:14

Updated-02 Aug, 2024 | 09:44

Improper Validation of Array Index in GPS HLOS Driver

Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

Product-wsa8830 sda429w_firmware sa6150p_firmware wcd9380_firmware sa8145p_firmware qcs610 sw5100p sd865_5g qca6564au qcc5100 csrb31024 sdx55m_firmware wsa8835 wcn3950_firmware wcd9380 sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware qcs410 wcd9370 qca6574a qca6564 qca6426 qca6430_firmware wcn3980 sa415m wcn3998 qam8295p sdxr2_5g_firmware wcn3950 wcn3660b sd855 wsa8815 wcn6850 qam8295p_firmware qca6426_firmware wcn3660b_firmware qca6574a_firmware qca6574au_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcn3980_firmware qca6391 wcn3610_firmware qca6420 qca6436_firmware sdx55m sa8295p qcc5100_firmware aqt1000_firmware qca6564au_firmware sa6155p_firmware csrb31024_firmware sdxr2_5g wcn6851_firmware sa415m_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sw5100 wsa8810 sd870 qca6436 wcn6851 sa6155p sw5100p_firmware qcs610_firmware sa6145p wcn3680b qca6564_firmware wcd9341 qca6696_firmware sa8145p sd870_firmware qca6696 qca6391_firmware qca6390 wcd9370_firmware aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sda429w sd855_firmware sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware qcs410_firmware sa8295p_firmware wcn3610 Snapdragon

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-43524

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.69%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-15 Jan, 2025 | 16:51

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption when the bandpass filter order received from AHAL is not within the expected range.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-43521

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 8.86%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-11 Aug, 2025 | 15:06

Use After Free in HLOS

Memory corruption when multiple listeners are being registered with the same file descriptor.

CWE ID-CWE-416

Use After Free

CVE-2023-43526

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.69%

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-15 Jan, 2025 | 16:52

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while querying module parameters from Listen Sound model client in kernel from user space.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-43543

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.19%

7 Day CHG~0.00%

Published-03 Jun, 2024 | 10:05

Updated-27 Jan, 2025 | 19:40

Use After Free in Audio

Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.

CWE ID-CWE-416

Use After Free

CVE-2022-25666

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.10% / 27.55%

7 Day CHG~0.00%

Published-19 Oct, 2022 | 00:00

Updated-09 May, 2025 | 15:15

Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-wcd9340_firmware sd210_firmware sw5100p qcn6024 wcd9385_firmware wcn3988_firmware qcs610 qam8295p_firmware sd210 qcn5124 qcn5024 qsm8250_firmware ipq8072a_firmware apq8096au_firmware ipq5028 sd_8_gen1_5g_firmware ipq8068 wcd9385 wcn7850_firmware ipq5028_firmware sdx55m_firmware wcd9340 sd845 ipq8074a_firmware mdm9150_firmware qca9886 qcn6122 qca9980 sw5100p_firmware wcn7850 sdx55m sdm429w wcn6851_firmware sa8155 ipq4028_firmware qca6574_firmware qca6595au ipq8071a_firmware qcs8155 wcn3680b sa8150p wcn3660b qca8337_firmware qca9994_firmware ipq6010 wcn7851_firmware wsa8835 pmp8074 wcn3990_firmware ipq8071a sdm429w_firmware qca6320_firmware sa8195p sa6150p qcn5122_firmware ipq8076_firmware ipq8174_firmware sd865_5g ipq8064 ipq5018 qca6574a sd429_firmware qca6310_firmware sdxr2_5g wcn3990 wsa8810_firmware wcd9335_firmware wcn3998_firmware qca7500_firmware ipq6010_firmware wsa8815 qca6436_firmware sd888_5g sa6155p sa8155p sdx55 qca6335 qca6564a ar9380 qca6564a_firmware qcn9074 wcn3660b_firmware qca6391_firmware ipq8072a qca9889_firmware qca6696_firmware wcn6855 qcn5154_firmware ipq5010_firmware ipq8173_firmware qcn5021_firmware sd845_firmware qca9888_firmware csr8811 qca9984 sd205 sm8475 qca4024_firmware qca8081 aqt1000_firmware wcn3620 qcn5164_firmware wcn7851 qcn6024_firmware sa8155_firmware qca8075 qcn6122_firmware qcn5024_firmware sa8145p_firmware ipq4029 wcd9380_firmware ipq5010 qca4024 ipq8070_firmware qcn6023_firmware qcn9022_firmware msm8996au_firmware qca9889 wcd9370 sa6155 apq8096au ipq4019 qca6574au qcn9070 sa6145p qcc5100_firmware wsa8815_firmware ipq8078a qcn9000_firmware qcn5054 wcn3950_firmware sdxr2_5g_firmware ipq8174 sd870 sw5100 qcn5124_firmware qcn9070_firmware qca8081_firmware qca6426_firmware sa8150p_firmware sd870_firmware wcn3950 sa6155_firmware wcd9380 qca9886_firmware mdm9150 ipq4029_firmware qcs610_firmware ipq6018 qcn9024_firmware qcn9100 qca6420_firmware qca9888 sa515m_firmware qcn9022 qcn5022_firmware pmp8074_firmware wcd9341 qca9880_firmware qca7500 mdm9650_firmware qcn5021 qca9992 qca6426 qca6335_firmware ipq8078 wsa8835_firmware qca6390 sd205_firmware wcn3980 qca6696 wcn6856_firmware qca9898 qcn9000 qca9980_firmware qsm8250 ipq8070 mdm9650 qca9990 qcn9072 sa6150p_firmware wcn3620_firmware qcn5052_firmware qca9994 qcc5100 sa8295p qca6420 qca8337 qcn5122 ipq8078a_firmware ipq8076a_firmware ipq8070a_firmware ipq8065 qcn5154 ipq8076a ipq8076 qca9992_firmware qca6430 qualcomm215_firmware wsa8810 sd865_5g_firmware csr8811_firmware wcd9341_firmware wcn6850 ipq4018 ipq5018_firmware qca6574a_firmware qca6595au_firmware ipq8173 sda429w qca9898_firmware sa8295p_firmware qca6390_firmware qcn5152_firmware qca6564au_firmware sw5100_firmware qca9985 qca6574 wcn3610 wcn3610_firmware qcn5054_firmware wcn3998 wcd9335 ipq8068_firmware qca9880 qca6430_firmware qca6436 aqt1000 qca8072_firmware qcn6023 ipq6028 sa515m sd855_firmware sd855 wcn6856 qcn9024 qcs410_firmware qcn5164 ipq4028 qam8295p qcn9012 wcn6855_firmware ipq6018_firmware sd429 qcn9012_firmware sd835_firmware ipq8074a qca9985_firmware qcs410 qca6391 ipq4019_firmware qcs8155_firmware qcn5052 sd835 sa6155p_firmware qca9984_firmware qca8075_firmware sa8195p_firmware qca6574au_firmware wcd9370_firmware sa8155p_firmware qcn5152 sd888_5g_firmware qca6310 qcn9074_firmware sda429w_firmware wsa8830 qca6564 qcn5022 msm8996au wcn3980_firmware ipq8065_firmware ipq6028_firmware qca6320 qca8072 wcn6850_firmware qca6564_firmware qcn9072_firmware wcn6851 qca9990_firmware ipq8078_firmware ar9380_firmware qca6564au qcn9100_firmware wsa8830_firmware wcn3680b_firmware wcn3988 sdx55_firmware qualcomm215 ipq8070a sa8145p ipq8064_firmware qcn6132_firmware ipq4018_firmware qcn6132 sa6145p_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-416

Use After Free

CVE-2022-25717

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.56%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 04:56

Updated-09 Apr, 2025 | 19:53

Use-After-Free Issue in Display

Memory corruption in display due to double free while allocating frame buffer memory

Product-mdm9150_firmware qca8337_firmware sda429w_firmware wcn3990 qcs610 sdm429w msm8996au_firmware qca8337 qca6564au mdm9650 msm8996au sdm429w_firmware wcn3950_firmware mdm9250 qca6420_firmware qualcomm215 qcs410 wcd9370 qca6574a wcn3990_firmware qca6430_firmware wcd9335_firmware wcn3980 wcn3998 wcn3950 wcd9326_firmware sa515m wcd9340_firmware wcn3660b sd855 wsa8815 mdm9650_firmware wcn3660b_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware sd835 wcn3998_firmware wcn3980_firmware sdxr1_firmware wcn3610_firmware qca6420 qca6391 aqt1000_firmware qca6564au_firmware qcs8155 sa515m_firmware sd429 qca6430 qca6574au qcn9074 sd205 sd429_firmware sa8155p_firmware sd205_firmware wcd9340 qca6564a_firmware wsa8810_firmware qualcomm215_firmware wcd9341_firmware wsa8810 wcd9326 wcd9335 sd210_firmware qcs610_firmware mdm9150 wcn3680b sd835_firmware mdm9250_firmware wcd9341 sdxr1 apq8096au qca6391_firmware wcd9370_firmware aqt1000 sdx55 apq8096au_firmware sa8155p sda429w sd210 sd855_firmware wcn3620_firmware wsa8815_firmware wcn3620 qcs8155_firmware qcn9074_firmware qcs410_firmware qca6564a wcn3610 Snapdragon

CWE ID-CWE-415

Double Free

CVE-2022-25711

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.40%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product-wcd9380_firmware wcd9340_firmware qca6595au_firmware qualcomm215_firmware wsa8835 mdm9150_firmware sdx55m sd855_firmware wcn3998 wcn6850_firmware sdx55 wsa8810_firmware qca8337_firmware wsa8815_firmware sa8150p qca6696 wcn3610_firmware wcn7850 qca6436 qca6426_firmware wcn3660b qca6574au wcn7850_firmware wcn3660b_firmware sa6150p qcs410_firmware sd205_firmware sa8155p wsa8810 sa6145p_firmware sd210 wcd9341_firmware wsa8830 sw5100p_firmware wcn6856 wsa8815 qca6390 sda429w_firmware wcn3680b aqt1000_firmware sa6155p wsa8835_firmware sa8150p_firmware qca6430 sa8145p_firmware sw5100 sd855 wcn7851_firmware qca6391 wcn3998_firmware wcd9340 wcn6850 sa8145p wcn6851 sdx55_firmware wcn3950 wcd9370_firmware sdxr2_5g_firmware qca6420_firmware sa8195p sda429w qcc5100_firmware sd210_firmware wsa8830_firmware qca8337 sd_8_gen1_5g_firmware wcn3680b_firmware sdxr2_5g sd865_5g_firmware wcd9341 wcn3980_firmware qca6574au_firmware wcn6851_firmware qcs610 qcs610_firmware qualcomm215 sa6155p_firmware qca6391_firmware qcn9074_firmware qcn9074 sd205 sa8155p_firmware qcc5100 wcd9380 sa6145p wcn3610 sw5100_firmware qca6430_firmware sa6150p_firmware qca6696_firmware sd865_5g wcn6856_firmware sd870 qca6426 sdx55m_firmware aqt1000 sm8475 wcn3950_firmware wcn3988 mdm9150 qca6390_firmware wcn6855_firmware qca6420 wcn6855 wcn3988_firmware wcn7851 qcs8155_firmware sd870_firmware qcs8155 sw5100p qca6436_firmware sa8195p_firmware qca6595au wcd9370 qcs410 wcn3980 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2022-25721

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.56%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 05:02

Updated-09 Apr, 2025 | 20:18

Incorrect Type Conversion in Video driver

Memory corruption in video driver due to type confusion error during video playback

Product-mdm9150_firmware qca8337_firmware sda429w_firmware sa6150p_firmware wcn3990 sa8145p_firmware qcs610 sdm429w qca8337 qca6564au sdm429w_firmware wcn3950_firmware sa8150p_firmware qca6420_firmware qualcomm215 qcs410 wcd9370 qca6574a qca6564 wcn3990_firmware qca6430_firmware wcn3980 wcn3998 wcn3950 wcd9326_firmware wcd9340_firmware wcn3660b sd855 wsa8815 wcn3660b_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcn3998_firmware wcn3980_firmware sdxr1_firmware wcn3610_firmware qca6420 qca6391 aqt1000_firmware qca6564au_firmware sa6155p_firmware qcs8155 sd429 qca6430 qca6574au qcn9074 sa6145p_firmware sd205 sd429_firmware sa8155p_firmware sd205_firmware wcd9340 sa8195p wsa8810_firmware qualcomm215_firmware wcd9341_firmware wsa8810 wcd9326 sa6155p sd210_firmware qcs610_firmware mdm9150 sa6145p wcn3680b qca6564_firmware wcd9341 sdxr1 qca6696_firmware sa8145p qca6696 qca6391_firmware wcd9370_firmware aqt1000 sa8150p sa6150p sdx55 sa8155p sda429w sd210 sd855_firmware wcn3620_firmware wsa8815_firmware wcn3620 sa8195p_firmware qcs8155_firmware qcn9074_firmware qcs410_firmware wcn3610 Snapdragon

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2022-25677

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.09% / 24.84%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-wcd9380_firmware qcn9072_firmware msm8996au qca6310 qca6595au_firmware qcn9000 qualcomm215_firmware sd429_firmware sd730 ipq6028 qcn9070 qcn5122 qsm8250_firmware qca6564au qca6426_firmware wcn3660b sd720g ipq8078a sd205_firmware msm8996au_firmware qca9889_firmware qcn5124 wsa8815 ipq9008 wcn3680b qca6430 wcn3620_firmware sd855 ipq9008_firmware wcd9340 sdx55_firmware sdxr2_5g_firmware qcn5022_firmware mdm9650 qca8072 qca6574a sd865_5g_firmware sdm429w_firmware sd835_firmware qcn5024 ipq4019_firmware qca9994 qca6335 sd_675 qcn5024_firmware qca6595 qca6430_firmware qca8081 sd870 ipq6018 mdm9150 ipq5018_firmware ipq9574 qca6390_firmware qcn9024_firmware ipq4028_firmware ipq8072a ipq8070a ipq8070a_firmware qca9880_firmware sd870_firmware sm6250 qcs8155 ipq8078_firmware ipq4019 qca6595au wcd9370 wcn3980 qcn5152 qca9992 qcn9022 sd720g_firmware ipq8065_firmware qca9985_firmware mdm9150_firmware qca9888_firmware sdx55m wcn6850_firmware qcn9274 wsa8810_firmware wsa8815_firmware wcn3991_firmware ipq8078 ipq8076a qca6436 ipq8071a qca4024 sa8155p wsa8810 aqt1000_firmware qcn9012 ipq8076 wcd9335_firmware qcn5154_firmware ar9380_firmware qca6391 qcn9024 qcn5052_firmware wcn3998_firmware wcn6851 wcd9370_firmware sd675 qca6420_firmware ipq8074a qcn6023_firmware sd210_firmware ipq4028 qca9886_firmware qca7500_firmware ipq8174 ipq8064_firmware qcn6122 sdm429w ipq8070 qcs610 qualcomm215 qca6391_firmware sd205 qcn9012_firmware sa8155p_firmware sa6145p wcn3610 wcd9375 ipq8076_firmware qca9980_firmware sd865_5g wcn3990_firmware wcn3950_firmware wcn3988 ipq8071a_firmware qca9980 qca6310_firmware qcs8155_firmware qca6436_firmware qcn5021_firmware wcd9341_firmware ipq8074a_firmware qca9886 ipq6000_firmware qcn6102 ipq4018 wcd9340_firmware sd_675_firmware qca6564a_firmware qcn5021 sd855_firmware qcn5054_firmware mdm9650_firmware qca9889 sdx50m qcn6024_firmware sdx55 ipq5018 wcn3610_firmware qca9990 wcn3660b_firmware qca7500 sa6145p_firmware ipq5028_firmware qca6390 sda429w_firmware sdx50m_firmware ipq5010_firmware sa6155p qca4024_firmware wcn6850 csr8811 wcn3950 ipq6018_firmware qca6320_firmware qcn9100_firmware qcn5122_firmware qcn6024 wcd9335 ipq8078a_firmware sd835 wcn3680b_firmware qca6595_firmware ipq6010 qca6574au_firmware ipq4029_firmware qca6564_firmware qcs610_firmware qcn9074 qcn9274_firmware qcn5054 wcd9380 qcn6102_firmware qcn5052 sd730_firmware ipq8064 wcd9375_firmware ipq8070_firmware qca9880 qcn6132_firmware aqt1000 qcn5152_firmware qcn6100_firmware qca9985 qcn6112 qca8072_firmware qsm8250 qca6420 qca9898_firmware qcn5124_firmware sa515m sd845_firmware sa515m_firmware qcn5164_firmware qca9994_firmware wcn3990 sd429 ipq6028_firmware qcn6023 qca8081_firmware qca9984 ipq8068 wcn3998 csr8811_firmware qca8337_firmware qca9898 qca8075_firmware qcn5164 qcn6122_firmware qca9990_firmware ipq8068_firmware ipq8072a_firmware sd678 qca6574au qcn6112_firmware ipq4029 ipq9574_firmware apq8096au qcs410_firmware qcn9000_firmware sd210 ipq8173_firmware ipq8065 qcn9070_firmware pmp8074 qca8075 pmp8074_firmware sd678_firmware ipq6010_firmware qca9984_firmware wcn3991 ipq8076a_firmware ar9380 qca6564a sd675_firmware qca6574a_firmware qca9888 sda429w qca6320 ipq8174_firmware qca8337 sm6250_firmware qcn6100 sdxr2_5g qcn6132 wcd9341 wcn3980_firmware wcn6851_firmware ipq4018_firmware sa6155p_firmware qcn9074_firmware qca9992_firmware qcn5154 apq8096au_firmware ipq8173 qcn9072 qca6564au_firmware qca6426 qca6335_firmware sdx55m_firmware qcn9100 qcn5022 ipq6000 wcn3620 qca6564 ipq5010 wcn3988_firmware qcn9022_firmware ipq5028 sd845 qcs410 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-416

Use After Free

CVE-2022-25712

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.10% / 26.35%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

Product-wcd9380_firmware wcd9340_firmware qca6310 qualcomm215_firmware wsa8835 mdm9150_firmware sdx55m sd855_firmware wcn3998 wcn6850_firmware wsa8810_firmware wsa8815_firmware wcn3610_firmware qca6436 qca6426_firmware wcn3660b wcn3660b_firmware sd710_firmware qcs410_firmware sd205_firmware wsa8810 sdxr1 sd210 wcd9341_firmware wsa8830 sw5100p_firmware wsa8815 qca6390 sda429w_firmware wcn3680b aqt1000_firmware wsa8835_firmware qca6430 sw5100 sd855 qca6391 wcn3998_firmware wcd9340 wcn6850 wcn6851 wcn3950 wcd9370_firmware sdxr2_5g_firmware qca6420_firmware sda429w qcc5100_firmware sd210_firmware wsa8830_firmware wcn3680b_firmware sdxr2_5g sd865_5g_firmware wcd9341 wcn3980_firmware wcn6851_firmware wcd9326 qcs610 qcs610_firmware qualcomm215 qca6391_firmware sd205 wcd9326_firmware qcc5100 wcd9380 wcn3610 qca6335 sw5100_firmware qca6430_firmware sd865_5g qca6426 sd870 qca6335_firmware sdx55m_firmware aqt1000 wcn3990_firmware wcn3950_firmware wcn3988 mdm9150 qca6390_firmware qca6420 wcn3988_firmware qca6310_firmware sd710 sd870_firmware sw5100p sd845_firmware sdxr1_firmware qca6436_firmware sd845 wcd9370 qcs410 wcn3990 wcn3980 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-25716

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 8.71%

7 Day CHG~0.00%

Published-06 Jan, 2023 | 04:56

Updated-09 Apr, 2025 | 19:56

Time-of-check Time-of-use Race Condition in Multimedia Framework

Memory corruption in Multimedia Framework due to unsafe access to the data members

Product-wcn6850 wsa8830_firmware wcd9380_firmware wcd9385 wsa8830 wsa8835 sd888_5g_firmware wcn6850_firmware wsa8835_firmware wcd9380 sd888_5g wcd9385_firmware wcn6851 wcn6851_firmware Snapdragon

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CVE-2020-11150

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 10.84%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qpm5579 qfs2580 qca8337 qdm5579 qdm2307 qfs2530 qpa8802 pm6125 qat3519 pm8150a qtc800h qdm5670 sa6155 pm7150l qpa8821 qdm5671 pmc1000h qat3518 sd8c wcn3998 wcn3950 wcn3660b qca4020 qdm5652 sd6905g qpm8870 qpm5679 qbt2000 pm855p qca6420 pm6150a sdr735g wcn3999 pm8150b qsm7250 qcs405 qca6430 qat3522 pmr735a wcd9340 sd765g qca6436 sdr660 wcn6851 sa6155p qpa6560 sdr865 wcd9341 smr545 qca6431 qln5020 sd750g qdm3302 sa8150p pm6350 qdm5621 qdm5650 wcn3988 wtr3925 smb1390 pm6150l sd8885g wcn3610 qpm6585 qtc410s wcn3991 smb1355 qln4650 qpa8801 sdm429w wgr7640 qat5568 qet5100 qca6564au sdxr25g pm6150 pm7250b qca6574 qfs2630 qpa8842 wcd9380 qualcomm215 smb1381 sdr735 pm7250 smb1395 pm660l wtr4905 qpa8803 smr526 wcn3980 pmk8003 qdm2301 qsw8573 qcs605 wsa8815 wcn6850 qpm6375 smb1394 wcn3680 pm8009 sdx55m pm670a pm8008 qsw8574 pme605 pm855l qcs603 sd8655g qpm5621 qpm6582 pm670 pm8150l qdm5677 pm8005 sa6145p pm215 qdm2302 pmm6155au sdxr1 ar8031 qpm5577 wtr2965 pm8150 qpm5875 qet5100m sdx55 sa8155p csra6640 pm8350bhs sd675 qet4101 qat3516 pm670l qpm5658 qca9379 pm855b smb2351 qln1031 qpm5870 pm8909 wsa8830 pm660 qln5030 qpm6325 qbt1500 pmi632 qpa5581 csra6620 qpm4621 qcs4290 qet6100 pmm855au sdr660g qpa8686 smb1396 pm7150a wcd9370 pm8350 qca6564 sdr425 qca6426 qca9377 qpm5641 qpm5541 qat5516 qdm5620 qln1021aq sd662 pm8350bh pm3003a sa8155 qat5533 qca6595au wcn3615 sm7350 qpm6670 smb1354 qca6584au qdm2305 qpm8820 qpm4641 pm855 pm8250 smb1398 qdm4643 pmx55 sd205 qca6421 qdm3301 sa8195p qpm5677 qat5515 qat3514 wcd9326 wcd9335 qet4200aq wcd9385 pmm8155au qpm4630 ar8035 qca6390 wcd9375 aqt1000 qpa8673 qdm2310 pmm8195au qln4642 sda429w sd210 wcn3620 pmk7350 qca6564a smr546 pmx24 qet6110 qln5040 qpm8895 qpm5670 wcn3990 qtm527 qca6595 pmk8350 sdx24 qpm8830 pm8350b qat5522 wsa8835 pm8150c pmr735b qpa4360 qca6574a qpa4361 qca6174a pm8350c smr525 qpm4640 wcn6750 pmr525 pm7350c qpm4650 qtm525 sd855 sd8cx sd665 qca6175a sd765 pm640p qat3555 sd460 qca6391 smb1351 qpa5461 qcm4290 pm640a sdr8150 qfs2608 pm8916 qln1036aq qtc801s qdm4650 pmd9655 qca6574au qsw6310 qpm6621 wsa8810 qdm2308 qat3550 wcn6856 qdm5679 wcn3680b sdr8250 sd768g wcn6740 qca6696 qpa2625 pm640l pmk8002 sm7250p qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2020-11148

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.29%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback instance is deleted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Product-qfs2580 qpm5870 qfe2550 wsa8830 pm660 qln5030 qbt1500 qdm5579 pmi632 qpa5581 qdm2307 qfs2530 qpa8802 pm6125 qat3519 qpa5373 qpm4621 qet6100 sdr660g pmm855au pm8150a qtc800h qdm5670 qpa8686 msm8917 pm7150l qpa8821 pm7150a smb1396 wcd9370 pm8350 qdm5671 qca6426 qat3518 sd632 qpm5641 wcn3998 wcn3950 qat5516 wtr2955 wcn3660b qdm5620 qfe4320 qfe4308 pm8350bh pm3003a sa8155 qdm5652 sd6905g qat5533 qca6595au qpm5679 qbt2000 qpm8870 wcn3615 sm7350 pm6150a qpm6670 qdm2305 qpm8820 sdr735g pm8937 qpm4641 pm8150b pm855 qsm7250 sd429 pm8250 smb1398 qdm4643 qfe2101 smb1360 pmx55 qat3522 pmr735a qca6421 qdm3301 sa8195p pm8953 qat5515 qpm5677 sd765g qat3514 qca6436 sdr660 sa6155p wcd9326 wcn6851 qpa6560 sdr865 smb1358 wcd9341 wcd9385 pm439 pmi8952 qca6431 smr545 qln5020 sd750g qdm3302 qpm4630 qca6390 wcd9375 qpa8673 sa8150p pm6350 pmm8195au qdm2310 qdm5621 qfe3340 qln4642 sda429w qdm5650 wcn3988 wtr3925 pmi8937 wcn3620 pmk7350 smb1390 apq8017 smr546 pm6150l sd8885g wcn3610 qet6110 qln5040 qpm8895 qpm6585 qtc410s qpm5670 wcn3991 wcn3990 smb1355 qln4650 qpa8801 sdm429w wgr7640 qat5568 qet5100 qca6595 pmk8350 qpm8830 sdxr25g pm6150 pm8350b qat5522 wsa8835 pm7250b pm8150c pmr735b qfs2630 qpa8842 wcd9380 qualcomm215 qpa4360 smb1381 qca6574a qpa4361 sdr735 pm7250 smb1395 pm660l pm8350c qpa8803 smr525 smr526 qpm4640 pmk8003 wcn3980 pmr525 qdm2301 pm7350c qpm4650 qsw8573 qtm525 qcs605 sd855 wsa8815 wcn6850 sd665 qfe4305 sd765 smb1394 wcn3680 pm640p qfe4309 qat3555 pm8009 smb1351 qca6391 sdx55m qpa5461 qfe4373fc pm8008 msm8953 qsw8574 qfe2520 pm640a qfs2608 pm855l pm8916 qtc801s qdm4650 sd8655g qfe4302 qca6574au qpm5621 qpm6582 qsw6310 qfe4303 qpm6621 wsa8810 pm670 pm8150l qdm2308 qat3550 qdm5677 wcn6856 qdm5679 wcn3680b pm215 qdm2302 sdxr1 sdr8250 sd768g wcn6740 qca6696 qfe4301 wtr2965 qpm5875 qet5100m pm640l pmk8002 apq8053 qpa2625 sd675 pm8350bhs sdx55 sd439 qet4101 qat3516 pm670l sm7250p qpm5658 pm855b qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-416

Use After Free

CVE-2020-11231

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.05% / 14.51%

7 Day CHG~0.00%

Published-07 Apr, 2021 | 07:55

Updated-04 Aug, 2024 | 11:28

Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-qfs2580 qfe2550 qpm5679_firmware qcs610 qdm5579 qdm2307 qca6431_firmware qfs2608_firmware qfs2530 qpm8870_firmware qpa8802 qpm6585_firmware pm6125 qat3519 qbt2000_firmware qat5522_firmware wcn3950_firmware pm8150a qtc800h qdm5670 sdr8250_firmware qpa5581_firmware msm8917 pm7150l qpa8821 smr546_firmware qdm5671 qpm4650_firmware qcs6125_firmware qat3518 sd632 qpa5580_firmware wcn3998 smr526_firmware wcn3950 qsw8573_firmware wcn3660b wgr7640_firmware qdm2305_firmware qfe4320 qpm5670_firmware qsw8574_firmware pm8953_firmware qdm5652 qpa4360_firmware qpm8870 wcd9375_firmware wcn3998_firmware qpm5679 qbt2000 apq8053_firmware qpm6670_firmware sdr735g pm8150b qdm3301_firmware qsm7250 qcs6125 qfe2101 qat3522 pmr735a sd765g qualcomm215_firmware qdm2308_firmware sdr660 pm439_firmware qca6436 wcn6851 qpa6560 qfs2630_firmware sdr865 qdm5620_firmware smb1358 wcd9341 pmi8952 smr545 qdm4643_firmware pm8937_firmware qca6431 qln5020 sm7350_firmware sd870_firmware qfe4320_firmware qdm3302 qdm5621 qpm5875_firmware qat3514_firmware wsa8830_firmware sd855_firmware qdm5650 wcn3988 wtr3925 smb1390 qat5516_firmware pm6150l sd8885g pm855l_firmware qpa8686_firmware qpm6585 wcn3991 wcd9380_firmware smb1355 qln4650 qpa8801 sdr735g_firmware pm8350bhs_firmware wgr7640 qat5568 qet5100 qdm5671_firmware qpa8801_firmware pm8150l_firmware qat5533_firmware sdx55m_firmware wcn6856_firmware sdxr25g qpa8673_firmware pm6150 qet4101_firmware sd632_firmware pm7250b qln4642_firmware qfs2630 qpa8842 wcd9380 smb1355_firmware pm7250b_firmware qualcomm215 qfe4309_firmware pmk8350_firmware smb1381 sdr735 pm7250 smb1395 qpa8803 smr526 wcn3980 qtc801s_firmware sd439_firmware qat3522_firmware sdxr25g_firmware pm7350c_firmware qdm2301 qsw8573 wsa8815 wcn6850 qfe2101_firmware qdm5621_firmware qdm2301_firmware smb1394 qca6426_firmware pm8350_firmware wcn3660b_firmware wcn3680 qfe4309 pm8009 wcn3980_firmware sdx55m qca6421_firmware wcn6740_firmware qfe4373fc pm8008 pm8350b_firmware qtm525_firmware msm8953 qat3518_firmware qsw8574 wcn3680_firmware qpm5621_firmware pm855l wcn6851_firmware qdm5670_firmware qpa6560_firmware sd8655g qpa8802_firmware pm7150a_firmware pm8150b_firmware qfe4308_firmware qfe4302 qpm5621 qpm6582 smr545_firmware pm8009_firmware qdm2310_firmware qfe4303 qfs2580_firmware qcm4290_firmware sd870 sd8885g_firmware pm8150l qcs610_firmware qdm5677 pm855_firmware pm215 qdm2302 pm855b_firmware qpm6582_firmware wtr2965 qca6391_firmware pmi8937_firmware wcd9370_firmware qat3516_firmware qln4650_firmware sdx55 qpm5875 qet5100m apq8053 pm8350bhs sd439 qet4101 qat3555_firmware qat3516 qpa8803_firmware qpm5658 pm855b qpm5658_firmware qpm5870 wcn3991_firmware qdm5652_firmware wsa8830 qet6110_firmware qdm5579_firmware qln5030 pm6125_firmware qbt1500 qpa5581 pmi632 qpa2625_firmware pm8350bh_firmware pmr735b_firmware qbt1500_firmware qet5100_firmware qpm5870_firmware qpm4621 qet6100_firmware qcs4290 qet6100 sd765g_firmware qpa8686 smb1358_firmware smb1394_firmware qca6390_firmware smb1396 pm7150a wcd9370 pm8350 qpa5461_firmware qpa4361_firmware pm8350c_firmware pmr525_firmware qca6426 wcn3990_firmware qpm5641 pmi632_firmware wcd9385_firmware qdm5650_firmware wcd9326_firmware qat5516 wcn3615_firmware wtr2955 pm7250_firmware qdm5620 qpa8821_firmware qfe4308 pm8350bh pmk8002_firmware qsw6310_firmware pm3003a qdm4650_firmware sdx55_firmware wcn3680b_firmware qat5533 wcn3615 sm7250p_firmware qca6436_firmware sm7350 qsm7250_firmware qpm6670 pm7150l_firmware qdm2305 qpm8820 qpm4641 pm8937 qat5515_firmware qln5020_firmware pm855 qpm8830_firmware sd429 pm8250 smb1398 qdm4643 qfs2530_firmware wcn3988_firmware pmx55 qpm4641_firmware sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sdr735_firmware apq8017_firmware wsa8810_firmware pm8953 qat5515 qpm5677 sd765_firmware qat3514 wcd9326 qdm5677_firmware sdr8150_firmware qcs4290_firmware wcd9385 pm439 qtc800h_firmware qdm2302_firmware pmk7350_firmware qln5040_firmware qpm4630 qca6390 wcd9375 aqt1000 qpa8673 qdm2310 qfe2550_firmware msm8953_firmware qln5030_firmware qln4642 msm8917_firmware qpm5677_firmware qfe4302_firmware wsa8815_firmware wtr3925_firmware pmi8937 smr525_firmware pmk7350 smb1396_firmware qpm8820_firmware wcn6850_firmware wsa8835_firmware qfe4301_firmware apq8017 qpm6621_firmware smr546 qcm6125_firmware qet6110 pmi8952_firmware qln5040 qpm8895 qpm5670 wcn3990 pmx55_firmware wtr2955_firmware qfe4373fc_firmware pmk8350 smb1398_firmware qpm8830 qdm3302_firmware pm8350b qat5522 qdm2307_firmware wsa8835 pm8150c pmr735b sd665_firmware qpa4360 sdr660_firmware qpa4361 qpm4640_firmware smb1390_firmware qdm5679_firmware pm8350c smr525 qfe4305_firmware qfe4303_firmware qpm4640 pm6150l_firmware pmr525 pm7350c pm8150a_firmware qet5100m_firmware qpm4650 qtm525 sd855 sd665 qfe4305 pm6150_firmware sd765 qpm4630_firmware sd768g_firmware sdr865_firmware qat3555 pm8250_firmware qca6391 qpa5461 aqt1000_firmware pm215_firmware qpm8895_firmware wtr2965_firmware qcm4290 sdr8150 qfs2608 qtc801s smb1395_firmware qdm4650 qpm5641_firmware qsw6310 pm8008_firmware sd8655g_firmware wcd9341_firmware qcm6125 qpm6621 wsa8810 pmr735a_firmware qat5568_firmware qdm2308 wcn6856 qdm5679 wcn3680b sdr8250 sd768g pm3003a_firmware wcn6740 qfe4301 smb1381_firmware qpa2625 pmk8002 sm7250p qpm4621_firmware qpa5580 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-415

Double Free

CVE-2020-11160

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.05% / 14.51%

7 Day CHG~0.00%

Published-09 Jun, 2021 | 05:00

Updated-04 Aug, 2024 | 11:28

Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qpm5579 qfs2580 qcs610 qca8337 qfs2530 qln1030 pm6125 qat3519 qbt2000_firmware wcn3950_firmware pm8150a qtc800h sdr8250_firmware qca6595au_firmware qpm5541_firmware csra6620_firmware csra6640_firmware pmc1000h wtr5975_firmware sdr425_firmware wcn3998 smr526_firmware wcn3950 pm640a_firmware qsw8573_firmware wcn3660b wgr7640_firmware qsw8574_firmware sd460_firmware qca4020 smb2351_firmware qca6574au_firmware qpa4360_firmware wcd9375_firmware wcn3998_firmware qbt2000 pm855p qca6420 wcn3999 pm8150b sa8155_firmware sd662_firmware qcs405 qca6430 qat3522 wcd9340 qualcomm215_firmware qca4020_firmware sdr660 wcn6851 sa6155p qpa6560 sdr865 wcd9341 qca6696_firmware qet4100_firmware pmm855au_firmware sd_8cx sd855_firmware sd865_5g_firmware wcn3988 wtr3925 pm640p_firmware smb1390 pm6150l pm855l_firmware qet4100 wcn3610 qtc410s qca8337_firmware sda429w_firmware wcd9380_firmware smb1355 sdm429w wgr7640 qca6564au pm8150l_firmware qtm527_firmware sdx55m_firmware qpa8673_firmware pm6150 qet4101_firmware smb1354_firmware qca6574 pmm8996au wcd9380 smb1355_firmware smb1351_firmware pmd9655_firmware qualcomm215 qcs410 qpm5579_firmware smb1381 pm855p_firmware qca9379_firmware smr526 wtr5975 qca6430_firmware wcd9335_firmware qtc801s_firmware wcn3980 qat3522_firmware qdm2301 qsw8573 wcd9340_firmware wsa8815 wcn6850 qpm6375 qdm2301_firmware mdm9650_firmware sd_8c_firmware qca6426_firmware wcn3660b_firmware wcn3680 pm8009 wcn3980_firmware sdx55m pm8008 qtm525_firmware qsw8574 ar8031_firmware wcn3680_firmware pm855l wcn6851_firmware qpa6560_firmware pm8150b_firmware pmc1000h_firmware qca6564a_firmware pm8009_firmware qfs2580_firmware pm8150l qcs610_firmware pm855_firmware sa6145p pm215 qdm2302 pmm6155au pm855b_firmware apq8096au ar8031 qcs405_firmware qpm5577 qpm6375_firmware wtr2965 pm640l_firmware qca6391_firmware pm8150 wcd9370_firmware sdx55 sa8155p csra6640 sd675 qet4101 qat3555_firmware qca9379 pm855b smb2351 ar8035_firmware pmm8155au_firmware qpm6325 pm6125_firmware qbt1500 pmi632 mdm9650 csra6620 qbt1500_firmware pmm855au qca6420_firmware qca6390_firmware wcd9370 sd675_firmware qpa4361_firmware sdr425 pmr525_firmware qca6426 qca6584au_firmware pmi632_firmware sd_8cx_firmware wcd9385_firmware qpm5541 wcd9326_firmware wcn3615_firmware sd662 pmk8002_firmware pm3003a qsw6310_firmware sa8155 wcn3680b_firmware sdx55_firmware pmm6155au_firmware qca6595au wcn3615 wcn3999_firmware wcn3610_firmware smb1354 qca6564au_firmware qca6584au sa6155p_firmware pm855 pm8250 qfs2530_firmware wcn3988_firmware pmx55 sa6145p_firmware pm8150c_firmware qat3519_firmware wsa8810_firmware wcd9326 wcd9335 qca6174a_firmware sdr8150_firmware wcd9385 qpm6325_firmware qtc800h_firmware qdm2302_firmware qat3550_firmware pmm8155au ar8035 qca6390 wcd9375 aqt1000 qpa8673 sda429w wcn3620_firmware wsa8815_firmware wcn6850_firmware smr525_firmware wcn3620 wtr3925_firmware qca6564a pmx55_firmware qtm527 sd865_5g pm8150_firmware pmm8996au_firmware sdm429w_firmware pm8150c sd665_firmware qpa4360 sdr660_firmware qca6574a qpa4361 qpm5577_firmware pm8916_firmware smb1390_firmware qca6174a smr525 pm6150l_firmware pmr525 pm8150a_firmware qtm525 qca6574_firmware sd855 sd665 pm6150_firmware pm640p qca6574a_firmware sdr865_firmware qat3555 pm8250_firmware sd460 qca6391 smb1351 aqt1000_firmware pm215_firmware wtr2965_firmware pm640a sdr8150 pm8916 qtc801s pmd9655 qca6574au sa8155p_firmware qsw6310 pm8008_firmware wcd9341_firmware wsa8810 qtc410s_firmware qat3550 sd_8c wcn3680b sdr8250 pm3003a_firmware qln1030_firmware qca6696 smb1381_firmware pm640l pmk8002 apq8096au_firmware qcs410_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2020-11147

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.05% / 15.06%

7 Day CHG~0.00%

Published-22 Feb, 2021 | 06:25

Updated-04 Aug, 2024 | 11:28

Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

Product-qfs2580 qpm5679_firmware qpm5620_firmware qdm5579 qdm2307 qfs2608_firmware qfs2530 qpm8870_firmware qpa8802 qpm6585_firmware pm6125 qat3519 qbt2000_firmware qat5522_firmware wcn3950_firmware pm8150a qtc800h qdm5670 qpa5581_firmware pm7150l qpa8821 smr546_firmware sd_675_firmware qdm5671 qpm4650_firmware qat3518 pm456_firmware qpa5580_firmware sdr425_firmware wcn3998 smr526_firmware wcn3950 sd720g wgr7640_firmware qpm5670_firmware sd710_firmware sd460_firmware qdm5652 qpa4360_firmware qpm8870 wcd9375_firmware wcn3998_firmware qpm5679 qbt2000 pm855p qca6420 pm6150a qpm6670_firmware pmx50_firmware sdr735g pm660_firmware pm8150b qdm3301_firmware qsm7250 sd662_firmware qca6430 qat3522 pmr735a sd765g rsw8577_firmware qdm2308_firmware sdr660 wcn6851 qpa6560 qfs2630_firmware sdr675_firmware sdr865 qdm5620_firmware wcd9341 sm7350_firmware smr545 qdm4643_firmware qln5020 qet4100_firmware sd750g qdm3302 qpm5657 pm6350 qdm5621 qtc800s qpm5875_firmware qat3514_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware qdm5650 wcn3988 wtr3925 sd660_firmware sdr052 smb1390 qat5516_firmware pm6150l pm855l_firmware qet4100 qpa8686_firmware qpm6585 wcn3991 wcd9380_firmware smb1355 qln4650 qpa8801 sdr735g_firmware pm8350bhs_firmware wgr7640 qat5568 qet5100 qdm5671_firmware qpa8801_firmware pm8150l_firmware qat5533_firmware sdx55m_firmware wcn6856_firmware qpa8673_firmware pm6150 qet4101_firmware smb1354_firmware sd670_firmware pm7250b qln4642_firmware qfs2630 qpa8842 sdr052_firmware wcd9380 smb1355_firmware pm7250b_firmware smb1351_firmware pmk8350_firmware smb1381 pm855p_firmware sd690_5g_firmware sdx50m_firmware sdr735 pm7250 smb1395 pm660l qpa8803 smr526 qca6430_firmware pmk8003 qtc801s_firmware wcd9335_firmware qat3522_firmware wcn3980 pm7350c_firmware wsa8815 wcn6850 qdm5621_firmware smb1394 pm8350_firmware pm8009 wcn3980_firmware sd730 sdr051_firmware pm660l_firmware sdx55m pm6250_firmware wcn6740_firmware pm8008 pm8350b_firmware qtm525_firmware qat3518_firmware qpm5621_firmware pm855l wcn6851_firmware rsw8577 qdm5670_firmware qpa6560_firmware qpa8802_firmware pm7150a_firmware pm8150b_firmware qpm5621 sd670 smr545_firmware pm8009_firmware qdm2310_firmware qfs2580_firmware pm8150l qdm5677 pm855_firmware pm660a_firmware pm855b_firmware wtr2965 qca6391_firmware wcd9370_firmware qln4650_firmware qat3516_firmware qpm5875 sdx55 qet5100m sd675 pm8350bhs qet4101 qat3555_firmware qat3516 qpa8803_firmware qpm5658 pm855b qpm5658_firmware qpm5870 wcn3991_firmware qdm5652_firmware wsa8830 sdr051 pm660 qet6110_firmware qdm5579_firmware qln5030 pm6125_firmware qbt1500 qpa5581 pmi632 qpa2625_firmware pm456 pm8350bh_firmware pmr735b_firmware qbt1500_firmware qet5100_firmware qpm5870_firmware qpm4621 qet6100_firmware qet6100 sd765g_firmware qpa8686 qca6420_firmware smb1394_firmware qca6390_firmware sd690_5g smb1396 pm7150a sd730_firmware wcd9370 sd675_firmware pm8350 qpa5461_firmware sdr425 pm8350c_firmware pmr525_firmware wcn3990_firmware qpm5641 pmi632_firmware wcd9385_firmware qdm5650_firmware qpa4340_firmware wcd9326_firmware qat5516 pm7250_firmware qdm5620 sd662 qpa8821_firmware pm8350bh pmk8002_firmware pm3003a qdm4650_firmware sdx55_firmware qat5533 sm7250p_firmware sm7350 qsm7250_firmware qpm6670 smb1354 pm7150l_firmware qpm8820 qpm4641 qat5515_firmware qln5020_firmware pm855 pm8250 smb1398 qdm4643 qfs2530_firmware wcn3988_firmware pmx55 qpm4641_firmware sdr675 pm8150c_firmware qpa8842_firmware qdm3301 sdr735_firmware qat3519_firmware sm6250 wsa8810_firmware qpm5677 qat5515 sd765_firmware qat3514 wcd9326 wcd9335 qdm5677_firmware pm6350_firmware pm8004_firmware sdr8150_firmware wcd9385 qtc800h_firmware pmk7350_firmware qpm5620 qat3550_firmware qln5040_firmware qpm4630 qca6390 wcd9375 sd750g_firmware aqt1000 qpa8673 sm6250_firmware qdm2310 qln5030_firmware qln4642 qpm5677_firmware wsa8815_firmware sd888_5g_firmware smr525_firmware wtr3925_firmware pmk7350 smb1396_firmware qpm8820_firmware wcn6850_firmware wsa8835_firmware qpm6621_firmware smr546 qet6110 qln5040 qpm8895 qpm5670 wcn3990 sd_675 pmx55_firmware sd865_5g pmk8350 smb1398_firmware qdm3302_firmware pm8350b qat5522 qdm2307_firmware wsa8835 pm8150c pmr735b qpm5657_firmware sd888_5g qpa4360 pmk8003_firmware sdr660_firmware qpm4640_firmware smb1390_firmware qdm5679_firmware pm8350c smr525 qpm4640 pm6150l_firmware pmr525 pm7350c pm8150a_firmware qet5100m_firmware qpm4650 qtm525 sd855 pm6150a_firmware pm6150_firmware sd765 qpm4630_firmware sd768g_firmware sdr865_firmware qat3555 pm8250_firmware sd460 qca6391 smb1351 qpa5461 aqt1000_firmware qpm8895_firmware wtr2965_firmware pm660a qpa4340 sdx50m sdr8150 qfs2608 qtc801s smb1395_firmware qdm4650 qpm5641_firmware sd710 pm8008_firmware wcd9341_firmware qpm6621 wsa8810 pmr735a_firmware qat5568_firmware qdm2308 pmx50 qat3550 wcn6856 qdm5679 sd768g pm3003a_firmware wcn6740 qtc800s_firmware smb1381_firmware pm8004 pmk8002 qpa2625 sm7250p sd720g_firmware qpm4621_firmware pm6250 qpa5580 Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-416

Use After Free

CVE-2023-33068

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 5.63%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Audio

Memory corruption in Audio while processing IIR config data from AFE calibration block.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33077

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 5.83%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in HLOS

Memory corruption in HLOS while converting from authorization token to HIDL vector.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33024

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.38%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-25 Feb, 2026 | 16:51

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer

Memory corruption while sending SMS from AP firmware.

Product-wcn3991_firmware wsa8830 sa6150p_firmware 8998 sa8145p_firmware qca8337 8098 qfw7124 wcn785x-5 qcn6224_firmware sa8150p_firmware qca6420_firmware qca6595au_firmware qca6390_firmware qca6426 wcn685x-1 wcn3990_firmware sm8250-ab wcn3998 qam8295p wcn3660b qam8295p_firmware 8998_firmware qca6320_firmware snapdragon_x55_5g_modem-rf_system qca6574au_firmware wcn3680b_firmware qca6595au wcn3998_firmware qca8081_firmware qfw7114 wcn3610_firmware qca6420 qca6436_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware snapdragon_auto_5g_modem-rf_firmware sa6155p_firmware qca6310 qca6698aq sa4155p_firmware sm8250_firmware sm8250-ac wcn3988_firmware qca6430 sa6145p_firmware wcd9340 sa8195p wsa8810_firmware qcn6224 sw5100 qca6436 snapdragon_x75_5g_modem-rf_system sa6155p wcd9335 qca8081 qca6698aq_firmware wcn685x-1_firmware sm8150_firmware sxr2130_firmware wcd9341 qca6696_firmware qca6390 ar8035 aqt1000 sa8150p qcc710_firmware sm8250-ac_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware sm8150 wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware sa8295p_firmware sa4150p wcn785x-1 wcn3610 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sw5100p sd865_5g snapdragon_w5\+_gen_1_wearable_platform sm8150-ac wsa8835 snapdragon_auto_5g_modem-rf qcn6274 wcd9380 snapdragon_wear_4100\+_platform_firmware sxr2130 snapdragon_wear_4100\+_platform wcn685x-5_firmware qca6310_firmware qca6430_firmware wcd9335_firmware qfw7114_firmware wcn3980 wcd9340_firmware sd855 wsa8815 qca6320 snapdragon_xr2_5g_platform_firmware qca6426_firmware wcn3660b_firmware sd835 wcn785x-5_firmware snapdragon_x55_5g_modem-rf_system_firmware sm8250-ab_firmware qca6391 wcn3980_firmware sa8295p aqt1000_firmware qcn6274_firmware snapdragon_xr2_5g_platform snapdragon_x75_5g_modem-rf_system_firmware 8098_firmware wcn685x-5 wcn785x-1_firmware qca6574au sa8155p_firmware wcd9341_firmware wsa8810 sw5100p_firmware sm8150-ac_firmware sa6145p wcn3680b sd835_firmware qcc710 sa8145p qca6696 qca6391_firmware sa4150p_firmware sa6150p sa8155p sm8250 sw5100_firmware qfw7124_firmware sa4155p ar8035_firmware Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33069

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 5.83%

7 Day CHG~0.00%

Published-06 Feb, 2024 | 05:47

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Audio

Memory corruption in Audio while processing the calibration data returned from ACDB loader.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-11183

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 11.51%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code as that service in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-qfe3100 pm8909 qfe2550 qfe4465fc sdr051 pm660 pmi8996 qbt1500 pmi632 qln1030 mdm9650 qpa5373 pmk8001 pmm855au mdm9250 qtc800h msm8917 wtr3905 qca9377 qpa5460 wtr2955 wcn3660b qln1021aq qfe4320 smb1380 qfe4308 apq8037 qca6595au wcn3615 msm8909w qtc800t pm8940 sdx20m qca6310 pm8937 qfe2081fc pm8996 qca9367 sd821 sdm630 qcc1110 qfe2101 smb1360 qat3522 qfe4455fc wcd9340 pm8953 smb231 qfe3440fc qat3514 sdr660 wcd9326 wcd9335 qet4200aq msm8937 smb1358 wcd9341 pm439 pmi8952 mdm9655 smb1350 wtr3950 qtc800s sd660 sd820 sd712 wtr3925 pmi8937 pm8998 qfe2080fc sdr052 sdw3100 wcn3620 apq8017 qca6564a sd450 qet4100 wcn3990 smb1355 wcd9330 wgr7640 sd636 qet5100 qca6595 qca6564au msm8996au pmi8940 pmm8996au rgr7640au qualcomm215 qln1035bd qpa4360 pm855a qca6574a mdm9206 qca6174a pm660l wtr4905 ar8151 wtr5975 wcn3980 qsw8573 wsa8815 qbt1000 qfe4305 qca6320 wcn3680 pmx20 pmd9607 qfe4309 sd835 apq8009 smb1351 qfe4373fc qfe2082fc msm8920 msm8953 pmi8998 pm660a qpa4340 sdx50m sdx20 pm8916 qln1036aq qtc801s rsw8577 pmd9655 qfe4302 qca6574au sd710 apq8009w qfe4303 wsa8810 qat3550 pm8005 wcn3680b pm215 apq8096au wtr2965 qfe4301 pm8004 sdw2500 msm8940 apq8053 sd439 qet4101 pmi8994 sdm830 smb1357 qca9379 qln1031 Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-28575

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.78%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:15

Updated-02 Aug, 2024 | 13:43

Multiple Type Confusion Vulnerability

The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handle is passed to it.

CWE ID-CWE-823

Use of Out-of-range Pointer Offset

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2023-28579

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.69%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in WLAN Host

Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length.

Product-sw5100p qcs410_firmware sa6150p_firmware sa6155p_firmware qam8295p_firmware qcs610_firmware wcd9370 qca6696 wcd9341_firmware wsa8815_firmware sa8195p_firmware wcd9370_firmware wcn3660b qca6574au_firmware sa8195p qca6595au qam8295p wcd9341 qca6574au wcn3950 wsa8810_firmware wcn3988 wcn3980_firmware wcn3660b_firmware wsa8835 qca6595au_firmware qca6391_firmware sw5100p_firmware sa8295p_firmware qca6696_firmware wcd9380_firmware sa6150p qcs410 sa8155p_firmware wcn3680b_firmware wsa8815 video_collaboration_vc1_platform_firmware sa8155p wsa8830 sa6145p sw5100_firmware fastconnect_7800_firmware fastconnect_6900 qca6391 video_collaboration_vc1_platform wcn3950_firmware fastconnect_6900_firmware sa8295p snapdragon_8_gen_1_mobile_platform wcd9380 sa6145p_firmware fastconnect_7800 sa8145p_firmware wcn3680b sa8150p snapdragon_8_gen_1_mobile_platform_firmware sw5100 sa8150p_firmware wcn3988_firmware sa6155p video_collaboration_vc3_platform_firmware sa8145p wsa8835_firmware wsa8810 wcn3980 wsa8830_firmware video_collaboration_vc3_platform qcs610 Snapdragon snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-28577

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 10.13%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:15

Updated-02 Aug, 2024 | 13:43

Multiple Dmabuf Kernel Address UAF Vulnerability

In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.