ByteOS Network

Vulnerability Details :

CVE-2022-25680

Summary

Assigner-qualcomm

Assigner Org ID-2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At-02 Sep, 2022 | 11:31

Updated At-03 Aug, 2024 | 04:42

Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:qualcomm

Assigner Org ID:2cfc7d3e-20d3-47ac-8db7-1b7285aff15f

Published At:02 Sep, 2022 | 11:31

Updated At:03 Aug, 2024 | 04:42

▼CVE Numbering Authority (CNA)

Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto

Affected Products

Vendor

Qualcomm Technologies, Inc.

Product

Snapdragon Auto

Versions

Affected

MSM8996AU

Problem Types

Type	CWE ID	Description
text	N/A	Buffer Copy Without Checking Size of Input in Automotive Multimedia

Type: text

CWE ID: N/A

Description: Buffer Copy Without Checking Size of Input in Automotive Multimedia

Metrics

Version	Base score	Base severity	Vector
3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin	x_refsource_CONFIRM

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:02 Sep, 2022 | 12:15

Updated At:08 Sep, 2022 | 03:11

Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CPE Matches

Qualcomm Technologies, Inc.

>>msm8996au_firmware>>-

cpe:2.3:o:qualcomm:msm8996au_firmware:-:*:*:*:*:*:*:*

Qualcomm Technologies, Inc.

>>msm8996au>>-

cpe:2.3:h:qualcomm:msm8996au:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	nvd@nist.gov

CWE ID: CWE-120

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin	product-security@qualcomm.com	Vendor Advisory

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin

Source: product-security@qualcomm.com

Resource:

Vendor Advisory

Similar CVEs

1117Records found

CVE-2019-10566

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.79%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-04 Aug, 2024 | 22:24

Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8996AU, Nicobar, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS405, QCS605, SDA845, SDM670, SDM710, SDM845, SDX20, SM6150, SM8150, SM8250, SXR2130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10491

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.82%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Vendor-Qualcomm Technologies, Inc.

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd616_firmware sd_615_firmware sd616 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware ipq4019_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware ipq8074 sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 ipq8064 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_205_firmware ipq8064_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 ipq8074_firmware sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 ipq4019 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10620

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.01%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 22:31

Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, MSM8996AU, QCN7605, SDM439, SDX24, SM8150

Vendor-Qualcomm Technologies, Inc.

Product-apq8096au_firmware msm8996au sdx24_firmware sm8150 sm8150_firmware apq8096au sdm439_firmware msm8996au_firmware apq8098_firmware apq8098 qcn7605 qcn7605_firmware sdx24 sdm439 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-21640

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.50%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-26 Nov, 2024 | 18:56

Buffer Copy Without Checking Size of Input in Linux

Memory corruption in Linux when the file upload API is called with parameters having large buffer.

Vendor-Qualcomm Technologies, Inc.

Product-fastconnect_7800 wsa8830_firmware wcd9380_firmware wsa8830 wsa8835 snapdragon_8_gen_1 wsa8835_firmware wcd9380 fastconnect_7800_firmware fastconnect_6900 fastconnect_6900_firmware snapdragon_8_gen_1_firmware Snapdragon snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21664

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.49%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

Memory Corruption in Core Platform while printing the response buffer in log.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_8cx_gen3_firmware sa6150p_firmware qca8337 qca6431_firmware sdx65 wcn3950_firmware ipq5028_firmware sa8150p_firmware qca6595au_firmware sa6155 qca6335 qcs605_firmware sd_675_firmware wcn3998 qam8295p sd_8cx_gen2_firmware qcn6024_firmware qca8386_firmware wcn3950 sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware qsm8350 sm7315_firmware wcn7850 qca6574au_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware qca6420 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware qca6698aq sa4155p_firmware sa8155_firmware qca6430 sdx65m wcd9340 qcn6132 sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qcn6122 wcd9341 qca6431 qca6696_firmware sd870_firmware ipq9008_firmware sd_8cx sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sd660_firmware wcn7850_firmware sa8195p_firmware sa8295p_firmware wcn6750_firmware ipq5018_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p qca8084 qca6564au sdx55m_firmware wcn6856_firmware ipq9008 sd670_firmware qca6574 wcd9380 sdx50m_firmware sxr1230p sdx24_firmware qca6430_firmware qcn9012_firmware qcn9274_firmware wcd9335_firmware wcn3980 qca6335_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 qca6426_firmware qcn9024 ipq9574_firmware wcn3980_firmware sdx55m sa8295p qca6421_firmware wcn6740_firmware sd678_firmware qrb5165 wcn6851_firmware qcs603 sd670 qca6564a_firmware qcn9024_firmware sdx57m sd870 wsa8832 wcn6855 sa8540p sa6145p qca6595_firmware sa8145p qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p sd675 sdx70m ssg2115p_firmware qcs8155_firmware sa4155p ar8035_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sa8145p_firmware sxr2230p_firmware fsm10056 qca8082 qcn9072 qca8386 sd765g_firmware qca6420_firmware qca6390_firmware wcd9370 sd675_firmware ssg2115p qca6564 qca6426 wcn3990_firmware qrb5165n_firmware qcn9000_firmware ipq5018 qca9377 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware qam8295p_firmware qcn9011_firmware qca8082_firmware sa8155 sa9000p_firmware sdx55_firmware qca6595au qcn6023_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware sd778g sa6155p_firmware qca6310 qcn9274 qcs8155 wcn7851 qcs6490 sdxr2_5g qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sa8195p wsa8810_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 sdx65m_firmware qca6174a_firmware wcd9385 qca8085_firmware qcs6490_firmware sd_8cx_gen3 sdx70m_firmware ar8035 qca6390 wcd9375 aqt1000 qcn9100_firmware ipq5010_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wsa8815_firmware wsa8835_firmware qca6564a sa4150p wcn3990 qcn9000 sd_675 sd780g sd865_5g qca6595 sdx24 qcn9012 sd888 qcn6122_firmware wsa8835 sxr1230p_firmware sa8540p_firmware sd_8_gen1_5g sd888_5g ssg2125p_firmware qca6574a wcn6855_firmware qca6174a sm7325p qcn6132_firmware qca6310_firmware wcn6750 sa9000p qca6574_firmware sd855 sm7325p_firmware sxr2230p sdx57m_firmware sd765 qca6574a_firmware sd768g_firmware qrb5165m sd850_firmware sm7315 qca6391 aqt1000_firmware qcn9100 sdx65_firmware qcm6490_firmware sdx50m wsa8832_firmware qcn9070_firmware qcn9011 qca6574au sa8155p_firmware ipq9574 wcd9341_firmware wsa8810 wcn6856 qca6564_firmware sd768g wcn6740 qca6696 sd845_firmware sa6150p qcn9022_firmware qcn6024 qcn9022 sd845 qcn9072_firmware sm7250p qcn9074_firmware sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-21635

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.50%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-33085

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.88%

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables

Memory corruption in wearables while processing data from AON.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33092

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.88%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-40540

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 16.76%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 12:21

Buffer copy without checking the size of input in Linux Kernel

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14021

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:05

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w msm8909_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 sc8180x_firmware sdm710 qm215 sc7180_firmware mdm9607 sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 apq8096au sdm439_firmware rennell sc7180 sdm630_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8096au_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14041

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-1.23% / 78.33%

7 Day CHG~0.00%

Published-07 Feb, 2020 | 05:00

Updated-05 Aug, 2024 | 00:05

During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physical address information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 sm7150_firmware sm6150 msm8909w_firmware md9607 msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sda845_firmware apq8098 md9607_firmware mdm9206_firmware qcs605 sdm429_firmware mdm9650_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8953 sdm450 sdm845_firmware apq8098_firmware sdx20 qcm2150 sm8250_firmware sc8180x_firmware qcs405 sdm710 qm215 apq8017_firmware sdm710_firmware sa6155p mdm9207c_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware apq8053 saipan_firmware sm6150_firmware apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 saipan nicobar_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-38423

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.64%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:05

Updated-07 Nov, 2024 | 19:46

Buffer Copy Without Checking Size of Input in Graphics Linux

Memory corruption while processing GPU page table switch.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-33042

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.75%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host

Memory corruption when Alternative Frequency offset value is set to 255.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-33054

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.08% / 24.81%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision

Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.

Vendor-Qualcomm Technologies, Inc.

Product-qcm8550_firmware sdm429w_firmware wsa8845_firmware wsa8832 wsa8840 qcs8550_firmware wcd9370 snapdragon_8_gen_2_mobile_firmware wcd9385 wcd9395_firmware wcd9390_firmware fastconnect_6700 snapdragon_8_gen_2_mobile sg8275p wsa8832_firmware wcd9370_firmware wcd9395 sg8275p_firmware snapdragon_8\+_gen_2_mobile qcm6490_firmware wcn3660b wcn3620_firmware wcd9390 qcm6490 wsa8845h_firmware sm8550p_firmware qcm8550 qcs6490_firmware sdm429w wcn3660b_firmware wsa8835 wsa8840_firmware qcs5430 wsa8845h wcd9380_firmware qcm5430 qcm5430_firmware wsa8830 sm8550p wcn6755_firmware wcn3620 snapdragon_8_gen_3_mobile_firmware wcd9375_firmware fastconnect_6900 fastconnect_7800_firmware snapdragon_429_mobile sm8635 qcs5430_firmware sm8635_firmware wcd9385_firmware fastconnect_6900_firmware qcs8550 wcd9380 fastconnect_7800 snapdragon_8\+_gen_2_mobile_firmware wcd9375 wcn6755 wsa8845 fastconnect_6700_firmware video_collaboration_vc3_platform_firmware wsa8835_firmware snapdragon_429_mobile_firmware qcs6490 snapdragon_8_gen_3_mobile wsa8830_firmware video_collaboration_vc3_platform Snapdragon wcd9380_firmware qcm8550_firmware qcm6490_firmware wsa8832_firmware wsa8840_firmware sg8275p_firmware fastconnect_6900_firmware qcs8550_firmware sdm429w_firmware fastconnect_6700_firmware fastconnect_7800_firmware wcn6755_firmware wcd9395_firmware sm8635_firmware qcm5430_firmware qcs6490_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware wcd9370_firmware sm8550p_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware wcd9375_firmware wsa8845h_firmware snapdragon_8_gen_2_mobile_platform_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-33226

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 8.81%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking the size of input in Core

Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware qam8255p_firmware wcn3991 wcd9380_firmware wsa8830 wcn785x-5 sm8350-ac_firmware sm8150-ac wsa8835 wcd9380 qca6420_firmware qca6595au_firmware snapdragon_wear_4100\+_platform_firmware sm8350 snapdragon_wear_4100\+_platform wcn685x-5_firmware wcn685x-1 qca6430_firmware sm8450 wcn3980 wcn3998 wcd9385_firmware sd855 wcn3660b wsa8815 wcn3660b_firmware qca6574au_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcn785x-5_firmware wcn3980_firmware wcn3610_firmware qca6420 aqt1000_firmware qca6698aq sm8350_firmware wcn685x-5 qca6797aq_firmware qca6430 wcn785x-1_firmware qca6574au wsa8810_firmware wcd9341_firmware sm8450_firmware wsa8810 sa8255p_firmware sm8150-ac_firmware qca6698aq_firmware wcn3680b sm8350-ac wcn685x-1_firmware wcd9385 sm8150_firmware sa8255p wcd9341 qca6797aq aqt1000 wsa8830_firmware sd855_firmware sm8150 wcn785x-1 wsa8815_firmware wsa8835_firmware qam8255p wcn3610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-33230

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 8.23%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking the size of input in FM Host

Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware sm6375 wcn3991 wsa8830 sa6150p_firmware sa8145p_firmware sw5100p qca6554a snapdragon_w5\+_gen_1_wearable_platform qca6595 qca6564au wsa8835 qca6574 sa8150p_firmware qca6420_firmware qca6595au_firmware snapdragon_wear_4100\+_platform_firmware wcd9370 qca6574a snapdragon_wear_4100\+_platform qca6584au_firmware qca6430_firmware wcn3980 sm4375 wcn3998 qca6554a_firmware wcd9385_firmware qca6574_firmware sm6375_firmware wcn3660b sd855 wsa8815 wcn3660b_firmware qca6574a_firmware qca6574au_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcd9375_firmware wcn3980_firmware wcn3610_firmware qca6420 sm4350-ac snapdragon_w5\+_gen_1_wearable_platform_firmware aqt1000_firmware qca6564au_firmware qca6584au sa6155p_firmware wcn3988_firmware qca6430 qca6574au sa6145p_firmware sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sm4375_firmware sw5100 wsa8810 sa6155p sw5100p_firmware sa6145p wcn3680b wcd9385 sm8150_firmware wcd9341 qca6696_firmware qca6595_firmware sa8145p qca6696 sm4350 wcd9375 sm4350_firmware aqt1000 sa8150p wcd9370_firmware sm4350-ac_firmware sa6150p sa8155p wsa8830_firmware sd855_firmware sm8150 wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware wcn3610 Snapdragon aqt1000_firmware qca6564au_firmware sa6155p_firmware sa6150p_firmware sa8145p_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware wsa8810_firmware sa8150p_firmware wcd9341_firmware qca6420_firmware qca6595au_firmware sw5100p_firmware snapdragon_4_gen_1_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qca6584au_firmware qca6696_firmware qca6430_firmware qca6595_firmware qca6554a_firmware wcd9385_firmware snapdragon_855_mobile_platform_firmware qca6574_firmware wcd9370_firmware wsa8830_firmware sd855_firmware wsa8815_firmware wcn3660b_firmware wsa8835_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware sa8195p_firmware snapdragon_695_5g_mobile_platform_firmware wcn3680b_firmware sw5100_firmware wcd9375_firmware wcn3980_firmware wcn3610_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-33224

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 8.81%

7 Day CHG~0.00%

Published-06 Jun, 2023 | 07:38

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking the size of input in Core

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware qam8255p_firmware wcn3991 wsa8830 wcd9380_firmware sa6150p_firmware sa8145p_firmware sw5100p snapdragon_w5\+_gen_1_wearable_platform wcn785x-5 sm8350-ac_firmware sm8150-ac wsa8835 wcd9380 sa8150p_firmware qca6420_firmware qca6595au_firmware snapdragon_wear_4100\+_platform_firmware sm8350 snapdragon_wear_4100\+_platform wcn685x-5_firmware wcn685x-1 sm8450 qca6430_firmware wcn3980 wcn3998 wcd9385_firmware wcn3660b sd855 wsa8815 wcn3660b_firmware qca6574au_firmware wcn3680b_firmware qca6595au wcn3998_firmware wcn785x-5_firmware wcn3980_firmware wcn3610_firmware qca6420 snapdragon_w5\+_gen_1_wearable_platform_firmware aqt1000_firmware sa6155p_firmware qcs8155 qca6698aq sm8350_firmware wcn685x-5 wcn3988_firmware qca6430 qca6797aq_firmware wcn785x-1_firmware sa6145p_firmware qca6574au sa8155p_firmware sa8195p wsa8810_firmware wcd9341_firmware sm8450_firmware sw5100 wsa8810 sa8255p_firmware sa6155p sw5100p_firmware sm8150-ac_firmware qca6698aq_firmware sa6145p wcn3680b sm8350-ac wcn685x-1_firmware wcd9385 sm8150_firmware sa8255p wcd9341 qca6696_firmware sa8145p qca6696 qca6797aq aqt1000 sa8150p sa6150p sa8155p wsa8830_firmware sd855_firmware sm8150 wcn785x-1 wcn3988 wsa8815_firmware wsa8835_firmware sa8195p_firmware qcs8155_firmware sw5100_firmware qam8255p wcn3610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-33278

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 20.92%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking the size of input in HLOS

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware sd_8cx_gen3_firmware wsa8830 sd678 sa6150p_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware qca8337 qca6431_firmware snapdragon_4_gen_1_firmware sdx65 csra6620 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 csra6620_firmware sd_675_firmware sd675_firmware ssg2115p csra6640_firmware qcs6125_firmware qca6426 wcn3990_firmware wcn3998 wcd9385_firmware qam8295p sdxr2_5g_firmware qcn6024_firmware sd720g sm4125 wcd9326_firmware wcn3950 sd_8_gen1_5g_firmware qsm8350_firmware sd662 sd710_firmware qsm8350 sd460_firmware qam8295p_firmware sa8155 sa9000p_firmware sm7315_firmware qca6574au_firmware wcn7850 qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware sd680_firmware sd778g sa6155p_firmware wcn7851 qcs6490 sdxr2_5g qca6698aq qcs6125 sa4155p_firmware sa8155_firmware sd662_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware qca6421 sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcd9326 sa6155p sg4150p wcd9335 qca8081 wcn6851 wcn7851_firmware qca6698aq_firmware qcs4290_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware sd750g sd870_firmware sd_8cx_gen3 qca6390 ar8035 sd750g_firmware aqt1000 sa8150p sxr2150p_firmware sm6250_firmware wcd9375 wcn3910_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware snapdragon_4_gen_1 qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware sa8195p_firmware wsa8835_firmware sm8475 qcn7606_firmware sa8295p_firmware wcn6750_firmware sa4150p sg4150p_firmware qcm6125_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p wcn3990 sd_675 sw5100p sd780g sd865_5g qca6595 qcc5100 sdx55m_firmware wcn6856_firmware sd888 sd670_firmware qca6574 sxr1230p_firmware wsa8835 sd665_firmware sa8540p_firmware wcd9380 sd888_5g ssg2125p_firmware qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p sxr1230p qca6430_firmware wcd9335_firmware wcn3980 wcn6750 sa9000p qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sxr2230p wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware qca6574a_firmware sd695 sd768g_firmware qcn9024 wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m sdxr1_firmware sxr2150p qcc5100_firmware qca6421_firmware sa8295p aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd710 sd670 qcn9024_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 wsa8832 sa8540p sw5100p_firmware wcn6856 sa6145p sd695_firmware sdxr1 sd768g qca6595_firmware qcs405_firmware sa8145p wcn6740 qca6696 qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sa8155p csra6640 qcn6024 sd675 sm7250p sd720g_firmware ssg2115p_firmware sw5100_firmware sa4155p ar8035_firmware qcm2290 qcn7606 Snapdragon qcm2290_firmware wcn3991_firmware sd_8cx_gen3_firmware qca8337_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware qca6431_firmware sdx55m_firmware wcn6856_firmware snapdragon_4_gen_1_firmware sd670_firmware sxr1230p_firmware wcn3950_firmware sd665_firmware sa8540p_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sd730_firmware csra6620_firmware ssg2125p_firmware sd_675_firmware sd675_firmware sd690_5g_firmware sdx50m_firmware csra6640_firmware wcn6855_firmware qcs6125_firmware wcn3990_firmware qca6430_firmware wcd9335_firmware wcd9385_firmware sdxr2_5g_firmware qcn6024_firmware wcd9326_firmware qca6574_firmware sd_8_gen1_5g_firmware sm4125_firmware sm7325p_firmware qsm8350_firmware sd710_firmware sd460_firmware qam8295p_firmware qca6426_firmware sa9000p_firmware sm7315_firmware qca6574a_firmware qca6574au_firmware sd768g_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware sm7250p_firmware wcn3980_firmware sdxr1_firmware qca6436_firmware qcc5100_firmware qca6421_firmware aqt1000_firmware sd680_firmware wcn6740_firmware sa6155p_firmware sdx65_firmware sd678_firmware qcm6490_firmware wsa8832_firmware sa4155p_firmware sd480_firmware sa8155_firmware wcn6851_firmware sd662_firmware qcn7606_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware sd778g_firmware qcn9024_firmware wsa8810_firmware wcd9341_firmware qcm4290_firmware sd765_firmware sw5100p_firmware wcn7851_firmware qca6698aq_firmware qcs4290_firmware sd695_firmware qca6696_firmware qcs6490_firmware qca6595_firmware qcs405_firmware sd870_firmware qca6391_firmware sa4150p_firmware wcn3910_firmware sxr2150p_firmware sd750g_firmware wcn6750_firmware sd780g_firmware wcd9370_firmware sm6250_firmware sd888_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8835_firmware sd720g_firmware sa8195p_firmware ssg2115p_firmware sw5100_firmware sa8295p_firmware sg4150p_firmware ar8035_firmware qcm6125_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-33217

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 22.28%

7 Day CHG~0.00%

Published-17 Oct, 2022 | 00:00

Updated-14 May, 2025 | 16:15

Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-wcn6855 wsa8830 wcn6855_firmware sm8475 wcn7851_firmware wcn6856 wsa8830_firmware wcn7850_firmware wcn7850 wcn6856_firmware wsa8835 sd_8_gen1_5g_firmware wcd9380 wcn7851 wsa8835_firmware wcd9380_firmware Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-33232

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-9.3||CRITICAL

EPSS-0.06% / 18.96%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking size of input in Hypervisor

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware sd_8cx_gen3_firmware wcn3991_firmware wsa8830 sd678 qca8337 qca6431_firmware sdx65 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sa6155 qca6335 sd690_5g wcd9370 qcs605_firmware sd_675_firmware sd675_firmware ssg2115p qca6426 wcn3990_firmware qrb5165n_firmware qca9377 wcn3998 sd_8cx_firmware wcd9385_firmware qam8295p sd_8cx_gen2_firmware qcn6024_firmware sdxr2_5g_firmware wcd9326_firmware wcn3950 sd_8_gen1_5g_firmware qsm8350_firmware qsm8350 qam8295p_firmware qcn9011_firmware sa8155 sa9000p_firmware sm7315_firmware qca6574au_firmware sdx55_firmware wcn7850 qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware qrb5165n qca6564au_firmware sd778g sa6155p_firmware qca6310 sd_8cx_gen2 wcn7851 qcs6490 qrb5165_firmware qrb5165m_firmware sdxr2_5g qca6698aq sa8155_firmware wcn3988_firmware qca6430 sa6145p_firmware qca6421 sd778g_firmware wcd9340 wsa8810_firmware sd765g sd765_firmware qca6436 wcd9326 wcn6851 sa6155p qca8081 qcs603_firmware wcn7851_firmware qca6698aq_firmware qca6174a_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware sd750g sd870_firmware sd_8cx_gen3 sdx70m_firmware qca6390 ar8035 sd_8cx aqt1000 sa8150p sd750g_firmware sxr2150p_firmware wcd9375 wsa8830_firmware sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware wsa8835_firmware sm8475 qca6564a sa8295p_firmware wcn6750_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p wcn3990 sd_675 sd780g sd865_5g qca6595 qca6564au sdx24 sdx55m_firmware wcn6856_firmware qcn9012 sd888 sd670_firmware qca6574 sxr1230p_firmware wsa8835 sa8540p_firmware wcd9380 sd888_5g ssg2125p_firmware qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6174a sm7325p sxr1230p sdx24_firmware qca6310_firmware qca6430_firmware qcn9012_firmware wcn3980 wcn6750 qca6335_firmware sa9000p qca6574_firmware qcs605 wcd9340_firmware sd855 wsa8815 sm7325p_firmware wcn6850 sdx57m_firmware sd765 qca6426_firmware qca6574a_firmware sd768g_firmware qcn9024 qrb5165m sd850_firmware wcn3980_firmware sm7315 qca6391 sdx55m sxr2150p sa8295p qca6421_firmware aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware qcm6490_firmware sdx50m wsa8832_firmware qrb5165 wcn6851_firmware qcs603 qcn9011 qca6574au sa8155p_firmware sd670 qca6564a_firmware qcn9024_firmware sdx57m wcd9341_firmware wsa8810 sd870 wsa8832 wcn6855 sa8540p wcn6856 qsm8250 sa6145p sd768g qca6595_firmware wcn6740 qca6696 qca6391_firmware sd845_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p qcn6024 sd675 sd845 sdx70m sm7250p ssg2115p_firmware ar8035_firmware sd850 qsm8250_firmware Snapdragon qca9377_firmware sd_8cx_gen3_firmware wcn3991_firmware qca8337_firmware wcd9380_firmware qca6431_firmware sdx55m_firmware wcn6856_firmware sd670_firmware sxr1230p_firmware wcn3950_firmware sa8540p_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware ssg2125p_firmware qcs605_firmware sd_675_firmware sd675_firmware sd690_5g_firmware sdx50m_firmware wcn6855_firmware sdx24_firmware wcn3990_firmware qrb5165n_firmware qca6310_firmware qca6430_firmware qcn9012_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware qcn6024_firmware wcd9326_firmware qca6335_firmware qca6574_firmware sd_8_gen1_5g_firmware wcd9340_firmware sm7325p_firmware qsm8350_firmware sdx57m_firmware qam8295p_firmware qcn9011_firmware qca6426_firmware sa9000p_firmware sm7315_firmware qca6574a_firmware qca6574au_firmware sdx55_firmware sd768g_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware sm7250p_firmware sd850_firmware wcn3980_firmware qca6436_firmware qca6421_firmware aqt1000_firmware qca6564au_firmware wcn6740_firmware sa6155p_firmware sdx65_firmware sd678_firmware qrb5165_firmware qrb5165m_firmware qcm6490_firmware wsa8832_firmware wcn6851_firmware sa8155_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware sd778g_firmware qca6564a_firmware qcn9024_firmware wsa8810_firmware wcd9341_firmware sd765_firmware qcs603_firmware wcn7851_firmware qca6698aq_firmware qca6174a_firmware qca6696_firmware qcs6490_firmware qca6595_firmware sd870_firmware sdx70m_firmware qca6391_firmware sxr2150p_firmware sd750g_firmware wcn6750_firmware sd845_firmware sd780g_firmware wcd9370_firmware sd888_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8835_firmware ssg2115p_firmware sa8295p_firmware ar8035_firmware qsm8250_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-33277

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.96%

7 Day CHG~0.00%

Published-09 Feb, 2023 | 06:58

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking size of input in modem

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

Vendor-Qualcomm Technologies, Inc.

Product-sd_8cx_gen3_firmware qca2066 sa6150p_firmware sm6250p_firmware qcs610 ipq4028_firmware qca8337 ar9380 ipq8173_firmware qca6431_firmware wcd9360_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca6335 qca2062 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 qca6554a_firmware wcd9371_firmware qam8295p wcn3950 qcn6024_firmware sd720g sm4125 sd_8cx_gen2_firmware ipq8076a qca8386_firmware sd_8_gen1_5g_firmware qca8084_firmware qsm8350_firmware sd710_firmware qsm8350 sd460_firmware sm7315_firmware wcn7850 qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware qca6420 wcd9360 qcn9002 qca6438_firmware qca9986 sd680_firmware ipq8070_firmware ipq8065 ipq8078a_firmware qca6678aq_firmware wcn3999 sd_8cx_gen2 qrb5165_firmware ipq5028 qrb5165m_firmware ipq8072_firmware ipq4029_firmware qca6698aq qcs6125 sa8155_firmware sa4155p_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 wcd9340 qcn6132 sd765g sw5100 sd680 qca6436 wcn6851 sa6155p qcs603_firmware wcn7851_firmware qca6698aq_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca2066_firmware qca6696_firmware qca6431 wcd9371 sd870_firmware sd750g qca1062 ipq9008_firmware qcn5154_firmware wcn3910_firmware sxr2150p_firmware sd_8cx sa8150p wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware snapdragon_4_gen_1 sd712 sd855_firmware wcn3988 sd660_firmware qca6438 wcn7850_firmware sa8195p_firmware sm8475 qcn5022_firmware qcn7606_firmware wcn6750_firmware qca9898 sa8295p_firmware ipq4028 qca6428_firmware ipq5018_firmware qca9985_firmware wcn3991 ipq4018_firmware qca8337_firmware ssg2125p wcd9380_firmware ipq8072a qca9980_firmware sw5100p ipq8076a_firmware ipq8078 qca8084 qcn9001_firmware ipq8173 sdx55m_firmware qca6564au wcn6856_firmware ipq9008 qcn5164 sd670_firmware qca6574 csr8811_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware sdx50m_firmware sxr1230p qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn9274_firmware qcn5052_firmware wcd9335_firmware wcn3980 qca6335_firmware ipq6018_firmware qcm4325_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c pmp8074_firmware qcn6112 wcn3910 qca9986_firmware qca6426_firmware sd695 ipq6028 ipq8064 qca9984 pmp8074 qcn9024 ipq9574_firmware wcn3980_firmware sd730 sdx55m ipq8064_firmware qcc5100_firmware sa8295p qca6421_firmware qca2062_firmware wcn6740_firmware qca6678aq sd678_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 ipq8070 qca9994 qca9980 sd670 qcn9024_firmware ipq8174_firmware qcm4290_firmware sd480 sd870 wcn6855 qcn7605_firmware wsa8832 sw5100p_firmware qcs610_firmware qsm8250 sa6145p ipq6018 qca9886_firmware sd695_firmware sdxr1 ar8031 qca6595_firmware qcs405_firmware sa8145p qca6391_firmware sa4150p_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware qcn5021_firmware sa8155p csra6640 sd675 ssg2115p_firmware sa4155p sxr2150p ar8035_firmware qsm8250_firmware qcn7606 qcm2290 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qcn9070 sxr2230p_firmware sa8145p_firmware qca1062_firmware qcs2290_firmware sd7c_firmware csrb31024 snapdragon_4_gen_1_firmware csra6620 qca8082 qcn9072 qca8386 qca9992 qcs4290 sd765g_firmware qca6420_firmware ipq8069_firmware qca6390_firmware qca2064_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ssg2115p ipq8072 qcn5152_firmware qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware qcn7605 wcd9326_firmware ipq8074a qca2065 sd662 qcn5124_firmware qam8295p_firmware qcn6102_firmware qcn9011_firmware qca1064 sa8155 qcn6100_firmware qca8082_firmware qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware qca6310 qcn9274 ipq8174 wcn7851 sa515m_firmware qca9990 qcn9001 qcn5052 qcs6490 sdxr2_5g qcn6112_firmware sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware qca6421 qca8085 sd778g_firmware sm6250 sa8195p sd712_firmware wsa8810_firmware sd765_firmware wcd9326 wcd9335 sg4150p qca8081 qcn6023 ipq8071a ipq8071a_firmware qcs4290_firmware wcd9385 qca8085_firmware qcs6490_firmware qca2065_firmware sd_8cx_gen3 qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 ar8035 sm6250_firmware csr8811 qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware wsa8815_firmware qcm6490 wcn6850_firmware wsa8835_firmware qcx315 sa4150p sg4150p_firmware qcm6125_firmware qcm4325 qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g qca6554a sd865_5g qca6595 ar9380_firmware qcc5100 qcn9012 sd888 qcn6122_firmware ipq8065_firmware qcx315_firmware sxr1230p_firmware wsa8835 sd665_firmware sd888_5g sm6250p qcn5154 qca8075_firmware sc8180x ssg2125p_firmware ipq4018 qca6574a wcn6855_firmware qca9889 sm7325p qcn6132_firmware qcn9003_firmware qca9888 qca6310_firmware ipq8074 qca9994_firmware wcn6750 qcn9003 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 sd855 sm4125_firmware sm7325p_firmware sd665 sxr2230p ipq8076 sd765 qca6574a_firmware qcn5021 ipq8069 qcn5152 sd768g_firmware qrb5165m sd850_firmware sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware qcn6102 qcn9100 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware wsa8832_firmware sdx50m qcn9070_firmware sd480_firmware ipq6028_firmware ipq8072a_firmware qcn9011 sc8180x_firmware ipq8074_firmware qca6574au qca9889_firmware sd710 sa8155p_firmware qcn5122 ipq9574 wcd9341_firmware qcm6125 wsa8810 wcn6856 qcn5022 sd768g ipq6010_firmware qca1064_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn9002_firmware qcn6100 qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware ipq8071_firmware qcn9074_firmware qcs410_firmware sw5100_firmware ipq4029 sd850 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-49830

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.02% / 2.59%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:12

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while processing an IOCTL call to set mixer controls.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-49829

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 2.14%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:12

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera

Memory corruption can occur during context user dumps due to inadequate checks on buffer length.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30309

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.18%

7 Day CHG~0.00%

Published-11 Feb, 2022 | 10:40

Updated-03 Aug, 2024 | 22:32

Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware wcn3991 wsa8830 wcd9380_firmware wcn3990 qcs610 sd865_5g sdx55m_firmware mdm9650 wsa8835 wcn3950_firmware sd665_firmware wcd9380 sd765g_firmware qca6390_firmware qcs410 sd690_5g sd730_firmware wcd9370 qcs605_firmware sd690_5g_firmware qcs6125_firmware qca6174a wcn3990_firmware wcd9335_firmware qca9377 wcn3980 wcn3998 wcd9385_firmware wcn3950 wcd9326_firmware qcs605 wsa8815 wcn6850 sd665 mdm9650_firmware sd765 sd768g_firmware wcd9375_firmware sdx12_firmware wcn3998_firmware wcn3980_firmware sm7250p_firmware sd730 sdxr1_firmware qca6391 sdx55m qcs6125 wcn6851_firmware qcs603 wcn3988_firmware wsa8810_firmware sd765g wcd9341_firmware qcm6125 wsa8810 sd765_firmware sd870 wcd9326 wcd9335 wcn6851 qcs603_firmware qcs610_firmware qca6174a_firmware wcd9385 wcd9341 sdxr1 sd768g sd870_firmware qca6391_firmware qca6390 wcd9375 wcd9370_firmware wsa8830_firmware sd660 sd865_5g_firmware wcn3988 wcn6850_firmware wsa8815_firmware sd660_firmware wsa8835_firmware sm7250p sdx12 qcs410_firmware qcm6125_firmware Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30268

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.42%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:25

Updated-03 Aug, 2024 | 22:24

Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 qca9377_firmware mdm9640_firmware sm6250p_firmware qcs610 qca8337 wcd9360_firmware sdx65 wcn3950_firmware qcs2290 qca6595au_firmware mdm8215 qcs605_firmware sd_675_firmware mdm8615m_firmware sa415m wcn3998 wcn3950 mdm9628 sd720g mdm9206_firmware qsw8573_firmware sm6375_firmware wcn3660b sd460_firmware mdm8215m qca6574au_firmware wcd9375_firmware wcn3998_firmware qca8081_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 wcd9360 qca9367_firmware mdm8207 qca4004_firmware sd662_firmware mdm9615m qca6430 wcd9306_firmware wcd9340 qualcomm215_firmware sd765g fsm10056_firmware qca6436 wcn6851 qcs603_firmware mdm9250_firmware wcd9341 qca6696_firmware sd750g sd870_firmware mdm8215_firmware wcn3910_firmware sd_8cx mdm9207_firmware qca4004 wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn3610 mdm9640 sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w msm8996au_firmware wcd9330 qca6564au sdx55m_firmware wcn6856_firmware qet4101_firmware qca6574 wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6584_firmware mdm9650_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3980_firmware sd730 wcd9330_firmware sdx55m ar6003_firmware sd678_firmware wcn6851_firmware qcs603 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware sdxr1 apq8096au mdm8207_firmware mdm9205_firmware qca6391_firmware wcd9370_firmware sdx55 sd675 qet4101 ar8035_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcs2290_firmware fsm10056 sd7c_firmware csrb31024 mdm9628_firmware mdm9650 fsm10055_firmware qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 mdm9310_firmware sd675_firmware qca6426 qca6584au_firmware wcn3990_firmware sm8450 qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware mdm9615m_firmware wcn3615_firmware sd662 qca6584 wcn3680b_firmware sdx55_firmware qca6595au wcn3615 sm7250p_firmware wcn3610_firmware qca6436_firmware mdm9207 qca6564au_firmware qca6584au wcd9306 sm6225 sa515m_firmware sd429 sdxr2_5g qca9367 mdm9607_firmware sa415m_firmware wcn3988_firmware sd205 sd429_firmware sm6250 apq8017_firmware wsa8810_firmware sm8450_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 sm6250_firmware sda429w sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a ar6003 qcm2290_firmware wcn3990 sd_675 sd865_5g sdx24 sm8450p_firmware msm8909w_firmware qcx315_firmware msm8996au sdm429w_firmware wsa8835 sd665_firmware sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a mdm9615 mdm9205 sa515m qca6574_firmware sd855 sd665 sd765 qca6574a_firmware sd768g_firmware sd850_firmware sd460 qca6391 sdxr1_firmware mdm9310 aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware sdx20 sd480_firmware mdm9215 sm6225_firmware qca6574au mdm8215m_firmware mdm9607 sd205_firmware wcd9341_firmware wsa8810 sm8450p mdm9150 wcn6856 wcn3680b sd768g qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 mdm9615_firmware sm7250p sd720g_firmware sdx12 qcs410_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30298

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 10.94%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:26

Updated-03 Aug, 2024 | 22:32

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 wcn3991_firmware mdm9150_firmware wsa8830 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware qcs610 qcn9000 ipq8072a fsm10056 qca8337 ipq8076a_firmware sd865_5g sdx55m_firmware csra6620 fsm10055_firmware wsa8835 wcn3950_firmware sd665_firmware wcd9380 sd765g_firmware qca6595au_firmware qca6390_firmware qualcomm215 qcs410 wcd9370 csra6620_firmware csra6640_firmware qrb5165n_firmware qcn9000_firmware wcd9335_firmware wcn3980 wcn3998 wcd9385_firmware wcn3950 ipq8076a wcd9340_firmware wcn3660b wsa8815 wcn6850 sd665 ipq8074a sd662 sd460_firmware sd765 wcn3660b_firmware qca6574au_firmware sdx55_firmware sd768g_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3999_firmware sm7250p_firmware wcn3980_firmware wcn3610_firmware sd460 qca6391 sdx55m qrb5165n wcn3999 ar8031_firmware qrb5165_firmware qrb5165 wcn6851_firmware sd662_firmware ipq8072a_firmware qcs405 wcn3988_firmware qca6574au qcn9074 sd205 sa8155p_firmware sd205_firmware wcd9340 wsa8810_firmware qualcomm215_firmware sd765g wcd9341_firmware wsa8810 sd765_firmware fsm10056_firmware sd870 wcn6851 wcd9335 sd210_firmware qcs610_firmware mdm9150 wcd9385 wcd9341 sd768g ar8031 qca6696_firmware qcs405_firmware sd870_firmware qca6696 qca6391_firmware ar8035 qca6390 wcd9375 wcd9370_firmware sdx55 sa8155p wsa8830_firmware sda429w sd210 csra6640 sd865_5g_firmware wcn3620_firmware ipq8074a_firmware wcn3988 wcn6850_firmware wcn3620 wsa8815_firmware wsa8835_firmware sm7250p qcn9074_firmware qcs410_firmware ar8035_firmware wcn3610 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-45547

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.33%

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-13 Jan, 2025 | 21:51

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30318

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.08% / 25.53%

7 Day CHG~0.00%

Published-11 Feb, 2022 | 10:40

Updated-03 Aug, 2024 | 22:32

Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-fsm10055 qca9377_firmware sa6150p_firmware sm6250p_firmware qcs610 qca8337 wcd9360_firmware sdx65 wcn3950_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qcs6125_firmware sa415m wcn3998 wcn3950 mdm9628 sd720g mdm9206_firmware qsw8573_firmware sd_8_gen1_5g_firmware sm6375_firmware wcn3660b sd460_firmware sm7315_firmware qca6574au_firmware wcd9375_firmware wcn3998_firmware qca8081_firmware sa6155_firmware sdx12_firmware msm8909w apq8009w_firmware wcd9360 qca9367_firmware wcn3999 qrb5165_firmware qrb5165m_firmware qcs6125 sa8155_firmware sd662_firmware qcs405 qualcomm215_firmware sd765g fsm10056_firmware qca6436 wcn6851 sa6155p qcs603_firmware mdm9250_firmware qca6696_firmware sd750g sd870_firmware wcn3910_firmware sa8150p wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware sa8195p_firmware sm8475 wcn6750_firmware wcn3610 sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w msm8996au_firmware wcd9330 qca6564au sdx55m_firmware wcn6856_firmware qca6574 wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx24_firmware qcn9012_firmware sd439_firmware qsw8573 qcs605 wcn6850 wcn3910 qca6426_firmware wcn3660b_firmware sd730 wcd9330_firmware sdx55m wcn6740_firmware sd678_firmware ar8031_firmware qrb5165 wcn6851_firmware qcs603 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware sa6145p sdxr1 apq8096au ar8031 qcs405_firmware sa8145p qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware sa8155p csra6640 sd675 sd439 qcs8155_firmware ar8035_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 sa8145p_firmware qcs2290_firmware fsm10056 csrb31024 mdm9628_firmware csra6620 fsm10055_firmware qcs4290 mdm9250 sd765g_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 sd675_firmware qca6564 qca6426 qca6584au_firmware qrb5165n_firmware qca9377 sdw2500_firmware wcd9385_firmware sdxr2_5g_firmware sd662 qcn9011_firmware sa8155 sdx55_firmware qca6595au wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n qca6564au_firmware qca6584au sa6155p_firmware sd778g qcs8155 sm6225 sa515m_firmware qcs6490 sd429 sdxr2_5g qca9367 mdm9607_firmware sa415m_firmware wcn3988_firmware sa6145p_firmware sd205 sd429_firmware sd778g_firmware sm6250 sa8195p apq8017_firmware sd765_firmware qca8081 qca6174a_firmware qcs4290_firmware wcd9385 qcs6490_firmware ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 sm6250_firmware sda429w sd210 wcn3620_firmware sdx20_firmware qcm6490 sd888_5g_firmware wcn6850_firmware wcn3620 wsa8835_firmware apq8017 qcx315 qca6564a qcm6125_firmware qcm2290_firmware sd_675 sd780g sd865_5g sdx24 qcn9012 sd888 msm8909w_firmware qcx315_firmware msm8996au sdm429w_firmware wsa8835 sd665_firmware sd888_5g sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a sm7325p wcn6750 sa515m qca6574_firmware sd855 sm7325p_firmware sd665 sd765 qca6574a_firmware sd768g_firmware qrb5165m sm7315 sd460 qca6391 sdxr1_firmware aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware sdx20 sd480_firmware qcn9011 sm6225_firmware qca6574au sa8155p_firmware mdm9607 sd205_firmware qcm6125 mdm9150 wcn6856 qca6564_firmware sd768g wcn6740 qca6696 sa6150p sdw2500 apq8096au_firmware sm7250p sd720g_firmware sdx12 qcs410_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30308

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 29.12%

7 Day CHG~0.00%

Published-13 Jan, 2022 | 11:40

Updated-03 Aug, 2024 | 22:32

Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sm6250p_firmware qcs610 fsm10056 qca8337 sd7c_firmware csrb31024 wcd9360_firmware mdm9650 sdx65 wcn3950_firmware mdm9250 sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qca6426 wcn3990_firmware qca9377 sa415m wcn3998 wcd9385_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware wcd9326_firmware sd720g wcn3950 sd_8_gen1_5g_firmware sm6375_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware wcd9360 qca6564au_firmware sd_8cx_gen2 sa515m_firmware sdxr2_5g sa415m_firmware wcn3988_firmware qca6430 sm6250 wcd9340 wsa8810_firmware sd765g sd765_firmware fsm10056_firmware qca6436 wcd9326 wcd9335 wcn6851 qca8081 qcs603_firmware qca6174a_firmware mdm9250_firmware wcd9385 wcd9341 qca6696_firmware sd750g sd870_firmware qca6390 ar8035 sd750g_firmware aqt1000 wcd9375 sm6250_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sdx20_firmware wcn3988 wcn6850_firmware wsa8815_firmware sd660_firmware wsa8835_firmware qcx315 sm8475 qca6564a sm6375 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware wsa8835 qcx315_firmware sd665_firmware wcd9380 sm6250p qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6174a sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 sa515m qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 sd7c mdm9650_firmware sd765 qca6426_firmware qca6574a_firmware sd768g_firmware sd850_firmware wcn3980_firmware sd730 qca6391 sdx55m sdxr1_firmware aqt1000_firmware sdx65_firmware sd678_firmware csrb31024_firmware sdx20 sd480_firmware qcs603 wcn6851_firmware qca6574au qca6564a_firmware wcd9341_firmware sd480 sd870 wsa8810 wcn6855 qcs610_firmware mdm9150 wcn6856 sdxr1 sd768g qca6696 qca6391_firmware sd845_firmware wcd9370_firmware sdx55 sd675 sd845 sm7250p sd720g_firmware sdx12 qcs410_firmware ar8035_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30303

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.43%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:26

Updated-03 Aug, 2024 | 22:32

Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qca9377_firmware qca2066 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 ipq4028_firmware qcn5550 qca1023 qca8337 ar9380 ipq8173_firmware wcd9360_firmware qca9561_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca2062 qcn5064 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qca9987_firmware sa415m wcn3998 wcn3950 qcn6024_firmware sd720g ipq8076a mdm9206_firmware mdm9628 sm6375_firmware wcn3660b sd460_firmware sm7315_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware sdx12_firmware qca6420 wcd9360 qca6438_firmware qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware wcn3999 qrb5165_firmware ipq5028 qca7500 ipq8072_firmware ipq4029_firmware sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 sc8280xp_firmware wcd9340 qcn6132 sd765g qca6436 wcn6851 sa6155p qcs603_firmware mdm9250_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca2066_firmware qca6696_firmware sd870_firmware sd750g qca9988_firmware qcn5154_firmware wcn3910_firmware sd_8cx qcn5501_firmware sa8150p ar7420_firmware wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware sd855_firmware wcn3988 qca6438 sd660_firmware sa8195p_firmware qcn5121 qcn5022_firmware qcn7606_firmware wcn6750_firmware qca9898 ipq4028 wcn3610 mdm9640 qca6428_firmware ipq5018_firmware sm6375 qca9985_firmware wcn3991 ipq4018_firmware qca4531_firmware qca8337_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware wcd9330 msm8996au_firmware ipq8076a_firmware qca7550_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qca9558 qca6574 csr8811_firmware qca7520_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware ipq4019_firmware qca9379_firmware sdx24_firmware qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 ipq6018_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c pmp8074_firmware wcn3910 qca6584_firmware qca6320 mdm9650_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware qca9984 ipq6028 ipq8064 qcn9024 pmp8074 wcn3980_firmware sd730 qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware qca2062_firmware wcn6740_firmware qcn5064_firmware sd678_firmware apq8064au_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 ipq8070 qca9896 qcn5502 qca9994 qca9887_firmware qca9980 qcn9024_firmware ipq8174_firmware qca6564a_firmware qca9880 qcm4290_firmware sd480 sd870 wcn6855 qcn7605_firmware qcn5121_firmware qcs610_firmware sa6145p ipq6018 qca9886_firmware sdxr1 ar8031 qca1023_firmware apq8096au qcs405_firmware sa8145p qca6391_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware sc8280xp qcn5021_firmware sa8155p csra6640 sd675 qca9531_firmware qca9379 ar8035_firmware qcm2290 qcn7606 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qca9561 qcn9070 sa8145p_firmware qca7520 qcs2290_firmware sd7c_firmware csrb31024 qca9563_firmware mdm9628_firmware qca9378 mdm9650 csra6620 qca9987 qcn9072 qca9880_firmware qca9992 qcs4290 mdm9250 sd765g_firmware qca6420_firmware ipq8069_firmware apq8009_firmware qca2064_firmware qca6390_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6564 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 sm8450 qca4531 ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware qcn7605 wcd9326_firmware qca9563 ipq8074a qca2065 sd662 qcn5124_firmware sa8155 qca6320_firmware qca6584 qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware sm6225 ipq8174 sa515m_firmware qca9990 qcs6490 sdxr2_5g qcn5052 qca9367 qcn5501 mdm9607_firmware sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware qca7550 sm8450_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca2065_firmware qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 ar8035 sm6250_firmware csr8811 apq8064au ipq4019 qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware qcm6490 wcn6850_firmware wsa8835_firmware apq8017 qcx315 qca6564a qca9988 qca9882 qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g sd865_5g ar9380_firmware sdx24 sm8450p_firmware qcn9012 sd888 qca9558_firmware qca9896_firmware qcn6122_firmware ipq8065_firmware qcx315_firmware wsa8835 msm8996au sd665_firmware sd888_5g sm6250p qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware mdm9206 wcn6855_firmware qca9889 qca6174a sm7325p qcn6132_firmware qca9888 ipq8074 qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 qcn5502_firmware ar7420 sd855 sm7325p_firmware sd665 ipq8076 qca6175a sd765 qca9887 qca9378_firmware qca6574a_firmware qcn5021 ipq8069 qcn5152 sd768g_firmware sd850_firmware sm7315 apq8009 sd460 qca6391 sdxr1_firmware ipq6005 aqt1000_firmware qcn9100 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware qca9882_firmware qcn9070_firmware sdx20 sd480_firmware ipq6028_firmware ipq8072a_firmware sm6225_firmware qca9531 ipq8074_firmware qca6574au qca9889_firmware sa8155p_firmware mdm9607 qcn5122 wcd9341_firmware wsa8810 sm8450p wcn6856 qcn5022 qca6564_firmware sd768g ipq6010_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware sdx12 ipq8071_firmware qcs410_firmware qcn9074_firmware ipq4029 qca6175a_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-43055

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.57%

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-03 Mar, 2025 | 13:14

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Memory corruption while processing camera use case IOCTL call.

Vendor-Qualcomm Technologies, Inc.

Product-Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-1984

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.10% / 27.87%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 16:32

Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-wcn3991_firmware wsa8830 sd678 sm7250 sm6250p_firmware qcs610 qcs2290_firmware sm7250_firmware sd_636 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qcs2290 qca6390_firmware qca6335 msm8917 sd690_5g sd730_firmware sd_455_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qcs6125_firmware qca6426 sd632 wcn3998 wcd9371_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcn3615_firmware wcn3660b sd662 sd460_firmware qca6320_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware wcn3615 wcn3998_firmware wcn3610_firmware qca6420 qca6436_firmware apq8053_firmware qca6564au_firmware sd778g qca6310 qcs6490 sd429 sdxr2_5g qcs6125 sd662_firmware sdm630 wcn3988_firmware qca6430 sd205 sd429_firmware sm6250 sd778g_firmware apq8017_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 wcn6851 qcs603_firmware qcs4290_firmware wcd9385 qcs6490_firmware wcd9371 sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 apq8064au wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd210 sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8835_firmware apq8017 qca6564a wcn6750_firmware wcn3610 qcm6125_firmware qcm2290_firmware wcn3991 wcd9380_firmware sd_675 msm8996au_firmware sd780g sd865_5g qca6564au sdx55m_firmware wcn6856_firmware sd888 wsa8835 sd632_firmware msm8996au sd665_firmware wcd9380 sd888_5g sm6250p qualcomm215 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6310_firmware sm7325 qca6430_firmware wcn6750 sd439_firmware qca6335_firmware qcs605 sd855 sm4125_firmware wcn6850 sd665 wcn3910 qca6320 sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware sd460 qca6391 sd730 sdx55m sdxr1_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware apq8064au_firmware qcm4290 qcm6490_firmware sdx50m wcn3680_firmware sd480_firmware qcs603 wcn6851_firmware sd_455 qca6574au sd_636_firmware sd205_firmware qca6564a_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware wcn6856 wcn3680b sdxr1 sd768g apq8096au wcn6740 sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 apq8096au_firmware sd675 sd439 sd720g_firmware qcm2290 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-1983

Matching Score-10

Assigner-Qualcomm, Inc.

View Details

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.43%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 16:32

Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-3611

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.01%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 07:37

u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in APQ8098, Kamorta, MSM8998, QCS404, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SXR1130

CVE-2020-3701

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.67%

7 Day CHG~0.00%

Published-30 Jul, 2020 | 11:40

Updated-04 Aug, 2024 | 07:44

Use after free issue while processing error notification from camx driver due to not properly releasing the sequence data in Snapdragon Mobile in Saipan, SM8250, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-saipan_firmware sm8250 sxr2130_firmware saipan sxr2130 sm8250_firmware Snapdragon Mobile

CWE ID-CWE-416

Use After Free

CVE-2020-3640

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 07:37

u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in invalid state when a HLOS adversary calls the function with wrong input' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Bitra, Kamorta, QCS404, QCS610, Rennell, Saipan, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130

CWE ID-CWE-131

Incorrect Calculation of Buffer Size

CVE-2020-3684

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 2.92%

7 Day CHG~0.00%

Published-02 Nov, 2020 | 06:21

Updated-04 Aug, 2024 | 07:44

u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Agatti, APQ8009, APQ8098, Bitra, IPQ6018, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8998, Nicobar, QCA6390, QCS404, QCS405, QCS605, QCS610, Rennell, SA415M, SA515M, SA6155P, SA8155P, Saipan, SC7180, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware kamorta_firmware qcs610 sdm845 sdx24 qcs404_firmware mdm9650 sm7150_firmware sm6150 agatti_firmware sm7150 qca6390_firmware apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware qcs404 sdx24_firmware sdm636 sda845_firmware sa415m bitra apq8098 ipq6018_firmware mdm9205 mdm9206_firmware sa515m qcs605 bitra_firmware mdm9650_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 apq8009 agatti sda845 nicobar sdm850_firmware sa6155p_firmware sdm636_firmware sa515m_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 sa8155p_firmware sc7180_firmware sdm710 mdm9607 sdm710_firmware sa6155p qcs610_firmware mdm9150 msm8905 ipq6018 sm8150_firmware sxr2130_firmware qcs405_firmware rennell sc7180 sdm630_firmware mdm9205_firmware sda660_firmware rennell_firmware qca6390 sdx55 saipan_firmware sm6150_firmware sa8155p sm8250 msm8998 sm8150 sdx20_firmware sdm850 kamorta saipan nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CVE-2020-3648

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.01%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 07:37

u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W

Vendor-Qualcomm Technologies, Inc.

Product-msm8909w_firmware msm8909w Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2020-3630

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.01%

7 Day CHG~0.00%

Published-02 Jun, 2020 | 15:05

Updated-04 Aug, 2024 | 07:37

Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8917, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA415M, SA6155P, Saipan, SC8180X, SDA660, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-mdm9150_firmware kamorta_firmware qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sa415m apq8098 mdm9206_firmware qcs605 sdm429_firmware mdm9650_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware nicobar sa6155p_firmware msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 sdm710 qm215 mdm9607 sdm710_firmware sa6155p mdm9150 mdm9207c_firmware msm8996_firmware mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware apq8053 saipan_firmware sm6150_firmware apq8096au_firmware msm8917_firmware sm8250 msm8998 sm8150 sdx20_firmware kamorta msm8996 saipan nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2020-3613

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 28.52%

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:37

Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music in SM8150

Vendor-Qualcomm Technologies, Inc.

Product-sm8150 sm8150_firmware Snapdragon Compute, Snapdragon Mobile, Snapdragon Voice & Music

CWE ID-CWE-415

Double Free

CVE-2020-3635

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.01%

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:37

Stack based overflow If the maximum number of arguments allowed per request in perflock exceeds in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096AU, APQ8098, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, Saipan, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Vendor-Qualcomm Technologies, Inc.

Product-qcm2150_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdm439 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 msm8917 sdm670 sxr2130 qcs605_firmware sdm670_firmware sdm636 apq8098 qcs605 msm8937_firmware sdm429_firmware sxr1130_firmware sxr1130 msm8909w apq8053_firmware nicobar msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware msm8998_firmware qcm2150 msm8920_firmware sdm630 sdm660 sm8250_firmware sdm710 qm215 sdm710_firmware msm8937 sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware rennell sdm630_firmware rennell_firmware qm215_firmware msm8940 apq8053 apq8096au_firmware msm8953_firmware saipan_firmware msm8917_firmware sm6150_firmware msm8998 sm8150 sm8250 nicobar_firmware saipan sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-3636

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.01%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-04 Aug, 2024 | 07:37

u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated for the header' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, QCS610, Rennell, SC7180, SDX55, SM6150, SM7150, SM8250, SXR2130

CVE-2020-3676

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.13% / 33.13%

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-04 Aug, 2024 | 07:44

Possible memory corruption in perfservice due to improper validation array length taken from user application. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, Kamorta, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, Saipan, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2023-21642

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.05% / 15.45%

7 Day CHG~0.00%

Published-02 May, 2023 | 05:08

Updated-02 Aug, 2024 | 09:44

Improper Access Control in HAB Memory Management

Memory corruption in HAB Memory management due to broad system privileges via physical address.

CWE ID-CWE-284

Improper Access Control

CVE-2023-21637

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.03% / 6.50%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-02 Aug, 2024 | 09:44

Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

Memory corruption in Linux while calling system configuration APIs.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-22061

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 19.92%

7 Day CHG~0.00%

Published-02 Sep, 2022 | 11:31

Updated-03 Aug, 2024 | 03:00

Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile

Vendor-Qualcomm Technologies, Inc.

CVE-2020-11294

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-5.9||MEDIUM

EPSS-0.04% / 11.20%

7 Day CHG~0.00%

Published-07 May, 2021 | 09:10

Updated-04 Aug, 2024 | 11:28

Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qfs2580 qpm5679_firmware sa6150p_firmware qca8337 qca6431_firmware qfs2608_firmware qfs2530 qpm8870_firmware qpa8802 wcd9360_firmware qpm6585_firmware pm6125 qat3519 qbt2000_firmware qat5522_firmware wcn3950_firmware pm8150a qtc800h qdm5670 sa8150p_firmware qca6595au_firmware sdr8250_firmware qpa5581_firmware sa6155 pm7150l qpa8821 pm8998_firmware qcs605_firmware smr546_firmware qdm5671 wtr5975_firmware qpm4650_firmware qcs6125_firmware qat3518 qpa5580_firmware sdr425_firmware wcn3998 smr526_firmware wcn3950 qpa5460 pm640a_firmware qsw8573_firmware wcn3660b wgr7640_firmware qdm2305_firmware qpm5670_firmware qsw8574_firmware sd460_firmware qdm5652 qca6574au_firmware qpa4360_firmware qpm8870 wcd9375_firmware wcn3998_firmware qpm5679 qbt2000 sa6155_firmware wcd9360 pm6150a qpm6670_firmware sdr735g qpa5460_firmware pm8150b qdm3301_firmware qsm7250 qcs6125 sa8155_firmware sd662_firmware qat3522 pmr735a wcd9340 sdm830_firmware sd765g qualcomm215_firmware sdr660 qca6436 wcn6851 sa6155p qpa6560 qfs2630_firmware sdr865 qdm5620_firmware wcd9341 smr545 qdm4643_firmware qca6696_firmware qca6431 qln5020 sd870_firmware pmm855au_firmware sa8150p pm6350 qdm5621 qtc800s qpm5875_firmware wsa8830_firmware sd855_firmware qet6105 qdm5650 wcn3988 pm640p_firmware wtr3925 sa8195p_firmware smb1390 wcn6750_firmware qat5516_firmware pm6150l sd8885g pm855l_firmware wcn3610 qpa8686_firmware qpm6585 qtc410s wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware smb1355 qln4650 qpa8801 sdm429w sdr735g_firmware wgr7640 qat5568 qet5100 qdm5671_firmware qpa8801_firmware qca6564au pm8150l_firmware qat5533_firmware sdx55m_firmware qtm527_firmware pm8005_firmware sdxr25g qpa8673_firmware pm6150 qet4101_firmware smb1354_firmware qca6574 pm7250b qln4642_firmware qfs2630 qpa8842 wcd9380 smb1355_firmware pm7250b_firmware qualcomm215 qet4200aq_firmware pmk8350_firmware smb1381 sdr735 pm7250 wtr4905 smb1395 qpa8803 smr526 wtr5975 wcn3980 pmk8003 qtc801s_firmware qat3522_firmware sdxr25g_firmware qdm2301 qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 qdm5621_firmware qdm2301_firmware qca6426_firmware pm8350_firmware wcn3660b_firmware wcn3680 pm8009 wcn3980_firmware sdx55m qca6421_firmware pm8008 pm8350b_firmware qtm525_firmware qat3518_firmware qsw8574 pmi8998 wcn3680_firmware qpm5621_firmware pm855l qln1021aq_firmware wcn6851_firmware qdm5670_firmware qpa6560_firmware sd8655g qpa8802_firmware pm7150a_firmware pm8150b_firmware qpm5621 qpm6582 smr545_firmware pm8009_firmware qca6564a_firmware qfs2580_firmware qcm4290_firmware sd480 sd870 sd8885g_firmware pm670 pm8150l pmi8998_firmware sd210_firmware qdm5677 pm8005 sa6145p pm855_firmware pm215 qdm2302 pmm6155au pm855b_firmware qca6595_firmware qpm6582_firmware wtr2965 sa2150p qca6391_firmware pm640l_firmware wcd9370_firmware qln4650_firmware qat3516_firmware qpm5875 sdx55 qet5100m sd888_firmware sa8155p sd675 qet4101 qat3555_firmware qat3516 pm670l qpa8803_firmware qpm5658 pm855b ar8035_firmware qln1031 qpm5658_firmware qpm5870 pm8909 wcn3991_firmware wsa8830 qdm5652_firmware pmm8155au_firmware qet6110_firmware qln5030 pm6125_firmware qbt1500 qpa5581 pmi632 qpa2625_firmware pm8350bh_firmware pmr735b_firmware qbt1500_firmware qet5100_firmware qpm5870_firmware qpm4621 qet6100_firmware qcs4290 qet6100 pmm855au pm670l_firmware sdr660g sd765g_firmware qpa8686 qca6390_firmware smb1396 pm7150a wcd9370 sd675_firmware pm8350 qpa5461_firmware qpa4361_firmware pm8350c_firmware sdr425 qca6426 pmr525_firmware qca6584au_firmware wcn3990_firmware qpm5641 pmi632_firmware wcd9385_firmware qdm5650_firmware wcd9326_firmware qat5516 wcn3615_firmware pm7250_firmware qdm5620 qln1021aq sd662 qpa8821_firmware sdr660g_firmware pm8350bh pmk8002_firmware qsw6310_firmware pm3003a sa8155 qln1031_firmware qdm4650_firmware sdx55_firmware pmm6155au_firmware qat5533 wcn3615 qca6595au sm7250p_firmware wcn3610_firmware qca6436_firmware qsm7250_firmware qpm6670 smb1354 pm7150l_firmware qca6564au_firmware qca6584au qdm2305 sa6155p_firmware qpm8820 qpm4641 qat5515_firmware qln5020_firmware sa515m_firmware pm855 sd429 pm8250 smb1398 qdm4643 qfs2530_firmware wcn3988_firmware pmx55 qpm4641_firmware sd205 sd429_firmware pm8150c_firmware qca6421 qdm3301 qpa8842_firmware qat3519_firmware sa8195p sdr735_firmware sa6145p_firmware qpm5677 qat5515 wsa8810_firmware sd765_firmware wcd9326 qdm5677_firmware qet4200aq pm6350_firmware qcs4290_firmware wcd9385 qtc800h_firmware qdm2302_firmware qat3550_firmware pmm8155au qln5040_firmware qpm4630 qca6390 wcd9375 ar8035 qpa8673 pmm8195au qln5030_firmware qln4642 sda429w sd210 qpm5677_firmware wcn3620_firmware wsa8815_firmware wtr3925_firmware smr525_firmware pm8998 smb1396_firmware wcn6850_firmware qpm8820_firmware wcn3620 wsa8835_firmware qpm6621_firmware qca6564a smr546 qcm6125_firmware qet6110 qln5040 qpm8895 qpm5670 wcn3990 pmx55_firmware qtm527 qca6595 pmk8350 smb1398_firmware sd888 pm8350b qat5522 wsa8835 sdm429w_firmware pm8150c pmr735b sd665_firmware qpa4360 pmk8003_firmware sdr660_firmware pm8909_firmware qpa4361 qca6574a qpm4640_firmware smb1390_firmware qdm5679_firmware pm8350c smr525 qpm4640 wcn6750 pm6150l_firmware pmr525 pm8150a_firmware qet5100m_firmware qpm4650 qtm525 qca6574_firmware sa515m sa2150p_firmware qln1036aq_firmware sd855 sd665 pm6150a_firmware pm6150_firmware qca6175a sd765 pm640p qca6574a_firmware qpm4630_firmware sd768g_firmware sdr865_firmware qat3555 pm8250_firmware sd460 qca6391 qpa5461 pm215_firmware qpm8895_firmware wtr2965_firmware pm670_firmware qcm4290 pm640a qfs2608 sd480_firmware qln1036aq qtc801s smb1395_firmware qdm4650 qca6574au qpm5641_firmware sa8155p_firmware sd205_firmware qsw6310 qet6105_firmware pm8008_firmware sd8655g_firmware wcd9341_firmware qcm6125 qpm6621 wsa8810 qtc410s_firmware pmr735a_firmware qat5568_firmware pmw3100 wtr4905_firmware qat3550 qdm5679 sdr8250 sd768g pm3003a_firmware qca6696 qtc800s_firmware smb1381_firmware pmw3100_firmware qpa2625 pm640l pmk8002 sa6150p pmm8195au_firmware sm7250p sdm830 qpm4621_firmware qca6175a_firmware qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2020-11146

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.52%

7 Day CHG~0.00%

Published-21 Jan, 2021 | 09:41

Updated-04 Aug, 2024 | 11:28

Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Vendor-Qualcomm Technologies, Inc.

Product-qpm5579 qfs2580 qca8337 qdm5579 qdm2307 qfs2530 qpa8802 qln1030 pm6125 qat3519 pm8150a qtc800h qdm5670 sa6155 qca6335 pm7150l qpa8821 qln1020 apq8076 qdm5671 pmc1000h qat3518 sd8c wcn3998 wcn3950 sm4125 sd720g wcn3660b qca4020 qdm5652 sd6905g qpm8870 qpm5679 qbt2000 pm855p qca6420 pm6150a sdr735g wcn3999 pm8150b qsm7250 qcs405 qca6430 qat3522 pmr735a wcd9340 sd765g sdr660 qca6436 wcn6851 sa6155p qpa6560 msm8937 sdr865 wcd9341 pmi8952 smr545 qca6431 qln5020 wcd9371 sd750g qdm3302 sa8150p pm6350 qdm5621 qtc800s qdm5650 wcn3988 wtr3925 smb1390 pm6150l sd8885g qet4100 wcn3610 qpm6585 qtc410s wcn3991 smb1355 qln4650 qpa8801 sdm429w wgr7640 qat5568 qet5100 qca6564au sdxr25g pm6150 qca6574 pm7250b qfs2630 qpa8842 wcd9380 qualcomm215 qln4640 smb1381 sdr735 pm7250 wtr4905 smb1395 pm660l qpa8803 smr526 wtr5975 wcn3980 pmk8003 qdm2301 qsw8573 qcs605 wsa8815 wcn6850 wcn3910 qpm6375 smb1394 wcn3680 pm8009 qpa8675 sd730 sdx55m pm8008 qsw8574 pmi8998 pm855l sd8655g qpm5621 qpm6582 sd670 pm670 pm8150l qdm5677 pm8005 sa6145p pm215 qdm2302 pmm6155au sdxr1 ar8031 qpm5577 wtr2965 pm8150 qpm5875 sdx55 qet5100m sa8155p csra6640 pm8350bhs sd675 qet4101 pm8952 qat3516 pm670l qpm5658 qca9379 pm855b smb2351 qln1031 qpm5870 pm8909 wsa8830 pm660 qln5030 qpm6325 pm4125 qbt1500 qpa5581 pmi632 pm456 csra6620 qpm4621 qcs4290 qet6100 pmm855au sdr660g qpa8686 smb1396 pm7150a wcd9370 pm8350 qca6564 sdr425 qca6426 qpm5641 qpm5541 qat5516 wtr2955 qdm5620 qln1021aq sd662 smb1380 pm8350bh pm3003a sa8155 qat5533 wcn3615 qca6595au sm7350 qpm6670 smb1354 wcd9306 qca6584au qdm2305 qca6310 qpm8820 qpm4641 pm8937 qpm2630 pm855 sd429 pm8250 smb1398 qdm4643 pmx55 sd205 sdr675 qca6421 sm6250 qdm3301 sa8195p qpm5677 qat5515 qat3514 wcd9326 wcd9335 qet4200aq wcd9385 pmm8155au qpm4630 qca6390 wcd9375 ar8035 aqt1000 qpa8673 qdm2310 pmm8195au qln4642 sda429w sd210 pmi8937 pm8998 pmk7350 wcn3620 qca6564a smr546 qet6110 qln5040 qpm8895 qpm5670 wcn3990 qtm527 qca6595 pmk8350 qpm8830 pm8350b qat5522 wsa8835 pm8150c pmr735b sm6250p qpa4360 qpa4361 qca6574a qca6174a pm8350c smr525 qpm4640 wcn6750 pmr525 pm7350c qpm4650 qtm525 wtr6955 sd855 sd8cx sd665 qca6175a sd765 pm640p qat3555 sd460 qca6391 smb1351 qpa5461 qcm4290 pm640a sdr8150 qfs2608 pm8916 qln1036aq qtc801s qdm4650 pmd9655 qca6574au sd710 qsw6310 qpm6621 wsa8810 qdm2308 pmw3100 qat3550 wcn6856 qdm5679 wcn3680b sdr8250 sd768g wcn6740 qca6696 pm8004 pm640l pmk8002 qpa2625 sd845 sm7250p pm8956 pm6250 qpa5580 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2020-11127

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.43%

7 Day CHG~0.00%

Published-12 Nov, 2020 | 10:00

Updated-04 Aug, 2024 | 11:21

u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of security metadata while processing objects to be loaded' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in MDM9205, QCM4290, QCS405, QCS410, QCS4290, QCS610, QSM8250, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180X+SDX55, SC8180XP, SDA640, SDA845, SDA855, SDM1000, SDM640, SDM830, SDM845, SDM850, SDX24, SDX50M, SDX55, SDX55M, SM4125, SM4250, SM4250P, SM6115, SM6115P, SM6150, SM6150P, SM6250, SM6250P, SM6350, SM7125, SM7150, SM7150P, SM7225, SM7250, SM7250P, SM8150, SM8150P, SM8250, SXR2130, SXR2130P

Vendor-Qualcomm Technologies, Inc.

Product-sm6115_firmware sm7250 sa6150p_firmware sm6250p_firmware qcs610 sdm640 sdm845 sm7250_firmware sdx24 sdx55m_firmware sm6115p_firmware sm7150_firmware sm6150 qcs4290 sa8150p_firmware sm7150 sm6250p sa6155 qcs410 sda640_firmware sc8180x sxr2130 sdx50m_firmware sm6115 sm7150p sdx24_firmware sda845_firmware sa415m sm4250 sc8180xp sm4125 sm7225 sa515m sda855 mdm9205 sm6115p sm4125_firmware sa8155 sdx55_firmware sa6155_firmware sdm1000 sm7250p_firmware sxr2130p sda855_firmware sdx55m sm6150p_firmware sda845 sm6350 sm7125 sdm850_firmware sm4250p_firmware sa6155p_firmware sxr2130p_firmware sda640 sa515m_firmware qcm4290 sdx50m sa8155_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 sm6350_firmware sa6145p_firmware sc7180_firmware sm4250_firmware sm6250 sa8155p_firmware sa8195p sdm830_firmware qcm4290_firmware sa6155p qcs610_firmware qsm8250 sa6145p qcs4290_firmware sm8150_firmware sxr2130_firmware sm7150p_firmware sm4250p qcs405_firmware sc7180 mdm9205_firmware sc8180xp_firmware sa8150p sm7125_firmware sm6250_firmware sa6150p sdx55 sm6150_firmware sa8155p sm8250 sm8150p_firmware sm7225_firmware sm8150 sdm850 sdm1000_firmware sm7250p sdm830 sa8195p_firmware sdm640_firmware qcs410_firmware sm8150p sm6150p qsm8250_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2020-11284

Matching Score-8

Assigner-Qualcomm, Inc.

View Details

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 5.34%

7 Day CHG~0.00%

Published-07 May, 2021 | 09:10

Updated-04 Aug, 2024 | 11:28

Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Vendor-Qualcomm Technologies, Inc.

Product-qfs2580 qca6431_firmware qfs2530 wcd9360_firmware pm6125 qbt2000_firmware wcn3950_firmware pm8150a qtc800h sdr8250_firmware qcs2290 pm8998_firmware smr546_firmware wtr5975_firmware sd8c sdr425_firmware wcn3998 smr526_firmware wcn3950 sm4125 qpa5460 pm640a_firmware wgr7640_firmware qsw8574_firmware sd460_firmware qca6574au_firmware qpa4360_firmware wcd9375_firmware wcn3998_firmware qbt2000 pm855p qca6420 wcd9360 pm6150a whs9410_firmware sdr735g qpa5460_firmware wcn3999 pm8150b sd662_firmware qcs405 qca6430 qat3522 wcd9340 sdm830_firmware qca6436 sdr660 sa6155p qpa6560 sdr865 wcd9341 smr545 qca6431 sd870_firmware pmm855au_firmware wcn3910_firmware pm6350 qtc800s sd855_firmware qet6105 wcn3988 wtr3925 pm640p_firmware sa8195p_firmware smb1390 pm6150l sd8885g pm855l_firmware qtc410s wcd9380_firmware wcn3991 smb1355 sdr735g_firmware wgr7640 qet5100 pm8150l_firmware sdx55m_firmware pm8005_firmware sdxr25g pm6150 qet4101_firmware smb1354_firmware pm7250b wcd9380 smb1355_firmware pm7250b_firmware pmd9655_firmware smb1351_firmware pm855p_firmware sdr735 sdx24_firmware smr526 wtr5975 qca6430_firmware pmk8003 qtc801s_firmware wcn3980 qat3522_firmware sdxr25g_firmware wcd9340_firmware wsa8815 wcn3910 qca6426_firmware pm8350_firmware qca9984 pm8009 wcn3980_firmware sdx55m qca6421_firmware pm8008 qtm525_firmware qsw8574 pmi8998 pm855l qpa6560_firmware sd8655g pm8150b_firmware smr545_firmware pm8009_firmware pm4250_firmware qfs2580_firmware qcm4290_firmware sd480 sd870 sd8885g_firmware pm8150l pmi8998_firmware pm8005 pm855_firmware pm4250 pm855b_firmware qca6595_firmware qcs405_firmware wtr2965 pm640l_firmware qca6391_firmware wcd9370_firmware sdx55 sd675 qet4101 pm855b ar8035_firmware qcm2290 wcn3991_firmware pm6125_firmware pm4125 qbt1500 qcs2290_firmware pmi632 pmx24_firmware qbt1500_firmware qet5100_firmware qet6100_firmware qcs4290 qet6100 pmm855au sdr660g qca6420_firmware qca6390_firmware smb1396 wcd9370 sd675_firmware pm8350 sdr425 pmr525_firmware qca6426 wcn3990_firmware qca9984_firmware pmi632_firmware wcd9385_firmware whs9410 sd662 sdr660g_firmware pmk8002_firmware pm3003a sdx55_firmware wcn3999_firmware qca6436_firmware smb1354 sa6155p_firmware pm855 pm8250 qfs2530_firmware wcn3988_firmware pmx55 pm8150c_firmware qca6421 sdr735_firmware sa8195p wsa8810_firmware pm6350_firmware pm8004_firmware sdr8150_firmware qcs4290_firmware wcd9385 qtc800h_firmware qat3550_firmware pm4125_firmware ar8035 qca6390 wcd9375 aqt1000 pmm8195au wsa8815_firmware smb1396_firmware smr525_firmware pm8998 wtr3925_firmware smr546 pmx24 qcm2290_firmware wcn3990 pmx55_firmware qca6595 sdx24 pm8150c qpa4360 pmk8003_firmware sdr660_firmware smb1390_firmware smr525 pm6150l_firmware pmr525 pm8150a_firmware qtm525 sd855 sm4125_firmware sd8cx pm6150a_firmware pm6150_firmware pm640p sdr865_firmware pm8250_firmware sd460 qca6391 sd8cx_firmware smb1351 aqt1000_firmware sd8c_firmware wtr2965_firmware qcm4290 pm640a sdr8150 sd480_firmware qtc801s pmd9655 qca6574au qet6105_firmware pm8008_firmware sd8655g_firmware wcd9341_firmware wsa8810 qtc410s_firmware qat3550 sdr8250 pm3003a_firmware qtc800s_firmware pm8004 pm640l pmk8002 pmm8195au_firmware sdm830 Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-667

Improper Locking

CVE-2022-25680

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs