ByteOS

Product

Snapdragon

Platforms

Snapdragon Mobile
Snapdragon Wearables

Default Status

unaffected

Versions

Affected

SD 8 Gen1 5G
SD888 5G
SW5100
SW5100P
WCD9380
WCD9385
WCN3980
WCN3988
WCN6850
WCN6851
WCN6855
WCN6856
WCN7850
WCN7851
WSA8830
WSA8835

Problem Types

Type	CWE ID	Description
CWE	CWE-120	CWE-120 Buffer Copy Without Checking Size of Input ('Classic Buffer Overflow')

Type: CWE

CWE ID: CWE-120

Description: CWE-120 Buffer Copy Without Checking Size of Input ('Classic Buffer Overflow')

Metrics

Version	Base score	Base severity	Vector
3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin	N/A
https://security.netapp.com/advisory/ntap-20230616-0001/	N/A
https://bugzilla.suse.com/show_bug.cgi?id=1209597	N/A

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin

Resource: N/A

Hyperlink: https://security.netapp.com/advisory/ntap-20230616-0001/

Resource: N/A

Hyperlink: https://bugzilla.suse.com/show_bug.cgi?id=1209597

Resource: N/A

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin	x_transferred
https://security.netapp.com/advisory/ntap-20230616-0001/	x_transferred
https://bugzilla.suse.com/show_bug.cgi?id=1209597	x_transferred

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin

Resource:

x_transferred

Hyperlink: https://security.netapp.com/advisory/ntap-20230616-0001/

Resource:

x_transferred

Hyperlink: https://bugzilla.suse.com/show_bug.cgi?id=1209597

Resource:

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@qualcomm.com

Published At:10 Mar, 2023 | 21:15

Updated At:12 Apr, 2024 | 17:16

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 8.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CPE Matches

cpe:2.3:h:qualcomm:sm8475:-:*:*:*:*:*:*:*

>>sm8475>>-

cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*

>>sd_8_gen1_5g_firmware>>-

cpe:2.3:h:qualcomm:sd888_5g:-:*:*:*:*:*:*:*

>>sd888_5g>>-

cpe:2.3:o:qualcomm:sd888_5g_firmware:-:*:*:*:*:*:*:*

>>sd888_5g_firmware>>-

cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*

>>sw5100>>-

cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*

>>sw5100_firmware>>-

cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*

>>sw5100p>>-

cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*

>>sw5100p_firmware>>-

cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

>>wcd9380>>-

cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*

>>wcd9380_firmware>>-

cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*

>>wcd9385>>-

cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*

>>wcd9385_firmware>>-

cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

>>wcn3980>>-

cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*

>>wcn3980_firmware>>-

cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*

>>wcn3988>>-

cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*

>>wcn3988_firmware>>-

cpe:2.3:h:qualcomm:wcn6850:-:*:*:*:*:*:*:*

>>wcn6850>>-

cpe:2.3:o:qualcomm:wcn6850_firmware:-:*:*:*:*:*:*:*

>>wcn6850_firmware>>-

cpe:2.3:h:qualcomm:wcn6851:-:*:*:*:*:*:*:*

>>wcn6851>>-

cpe:2.3:o:qualcomm:wcn6851_firmware:-:*:*:*:*:*:*:*

>>wcn6851_firmware>>-

cpe:2.3:h:qualcomm:wcn6855:-:*:*:*:*:*:*:*

>>wcn6855>>-

cpe:2.3:o:qualcomm:wcn6855_firmware:-:*:*:*:*:*:*:*

>>wcn6855_firmware>>-

cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:*

>>wcn6856>>-

cpe:2.3:o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:*

>>wcn6856_firmware>>-

cpe:2.3:h:qualcomm:wcn7850:-:*:*:*:*:*:*:*

>>wcn7850>>-

cpe:2.3:o:qualcomm:wcn7850_firmware:-:*:*:*:*:*:*:*

>>wcn7850_firmware>>-

cpe:2.3:h:qualcomm:wcn7851:-:*:*:*:*:*:*:*

>>wcn7851>>-

cpe:2.3:o:qualcomm:wcn7851_firmware:-:*:*:*:*:*:*:*

>>wcn7851_firmware>>-

cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

>>wsa8830>>-

cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*

>>wsa8830_firmware>>-

cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*

>>wsa8835>>-

cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*

>>wsa8835_firmware>>-

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	nvd@nist.gov
CWE-120	Secondary	product-security@qualcomm.com

CWE ID: CWE-120

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-120

Type: Secondary

Source: product-security@qualcomm.com

References

Hyperlink	Source	Resource
https://bugzilla.suse.com/show_bug.cgi?id=1209597	product-security@qualcomm.com	N/A
https://security.netapp.com/advisory/ntap-20230616-0001/	product-security@qualcomm.com	N/A
https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin	product-security@qualcomm.com	Patch Vendor Advisory

Hyperlink: https://bugzilla.suse.com/show_bug.cgi?id=1209597

Source: product-security@qualcomm.com

Resource: N/A

Hyperlink: https://security.netapp.com/advisory/ntap-20230616-0001/

Source: product-security@qualcomm.com

Resource: N/A

Hyperlink: https://www.qualcomm.com/company/product-security/bulletins/march-2023-bulletin

Source: product-security@qualcomm.com

Resource:

Patch

Vendor Advisory

Similar CVEs

1117Records found

CVE-2023-33092

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.06% / 18.88%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:04

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input in Bluetooth HOST

Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2023-33085

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.88%

7 Day CHG~0.00%

Published-02 Jan, 2024 | 05:38

Updated-11 Aug, 2025 | 15:06

Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables

Memory corruption in wearables while processing data from AON.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14026

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.43%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ6018, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, MSM8998, Nicobar, QCA6174A, QCA6574, QCA6574AU, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS404, QCS405, QCS605, Rennell, SA6155P, SC8180X, SDA660, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-qca9377_firmware apq8096_firmware mdm9640_firmware msm8996au_firmware sdm845 apq8096 sdx24 qcs404_firmware mdm9650 sm7150_firmware sm6150 qca6574 msm8996au sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 qca9379_firmware qca6174a sdm670_firmware qcs404 sdx24_firmware qca6584au_firmware ipq8074 sdm636 sda845_firmware qca9377 apq8098 qcn7605 ipq6018_firmware mdm9206_firmware qca6574_firmware qca9886 qcs605 mdm9650_firmware qca6574au_firmware sda660 sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 nicobar sdm850_firmware qca6584au sa6155p_firmware sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware sdm660 sdm630 mdm9607_firmware sm8250_firmware sc8180x_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p qca8081 mdm9207c_firmware ipq6018 mdm9207c qca6174a_firmware qca9886_firmware sm8150_firmware sxr2130_firmware apq8096au qcs405_firmware rennell sdm630_firmware sda660_firmware rennell_firmware apq8053 sm6150_firmware apq8096au_firmware sm8250 msm8998 sm8150 sdx20_firmware sdm850 apq8017 nicobar_firmware qca9379 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-13992

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-08 Sep, 2020 | 09:31

Updated-05 Aug, 2024 | 00:05

u'Out of bound memory access if stack push and pop operation are performed without doing a bound check on stack top' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in Bitra, IPQ6018, IPQ8074, MDM9205, Nicobar, QCA8081, QCN7605, QCS404, QCS405, QCS605, QCS610, Rennell, SA415M, SA6155P, Saipan, SC7180, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-sdm850_firmware sa6155p_firmware qcs610 sdm845 sdx20 sdx24 qcs404_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 sm7150_firmware ipq8074_firmware sdm710 sc7180_firmware sm6150 sdm710_firmware sm7150 qcn7605_firmware sa6155p sdm670 qca8081 qcs610_firmware qcs605_firmware sc8180x sxr2130 ipq6018 sdm670_firmware qcs404 sdx24_firmware sm8150_firmware ipq8074 sxr2130_firmware qcs405_firmware rennell sa415m sc7180 bitra sda845_firmware mdm9205_firmware qcn7605 rennell_firmware ipq6018_firmware mdm9205 qcs605 sdx55 saipan_firmware sm6150_firmware sm8250 bitra_firmware sm8150 sdx20_firmware sdm850 sxr1130_firmware sdx55_firmware qca8081_firmware nicobar_firmware saipan sxr1130 sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14021

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:05

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8096AU, APQ8098, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, MSM8998, Nicobar, QCM2150, QCS605, QM215, Rennell, SC7180, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

Product-mdm9150_firmware qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sdm429w_firmware sm7150 msm8917 sdm670 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware apq8098 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w msm8909_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sdm660 sc8180x_firmware sdm710 qm215 sc7180_firmware mdm9607 sdm710_firmware mdm9150 msm8937 msm8905 sm8150_firmware msm8909 apq8096au sdm439_firmware rennell sc7180 sdm630_firmware sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware msm8940 sm6150_firmware apq8096au_firmware msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14041

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-1.23% / 78.33%

7 Day CHG~0.00%

Published-07 Feb, 2020 | 05:00

Updated-05 Aug, 2024 | 00:05

During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer with physical address information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, Nicobar, QCM2150, QCS405, QCS605, QM215, Rennell, SA6155P, Saipan, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-qcm2150_firmware mdm9640_firmware sdm429w msm8996au_firmware sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 sm7150_firmware sm6150 msm8909w_firmware md9607 msm8996au sdm429w_firmware sm7150 apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware sdx24_firmware sda845_firmware apq8098 md9607_firmware mdm9206_firmware qcs605 sdm429_firmware mdm9650_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware sxr1130 msm8909w apq8009 apq8053_firmware sda845 nicobar sa6155p_firmware msm8953 sdm450 sdm845_firmware apq8098_firmware sdx20 qcm2150 sm8250_firmware sc8180x_firmware qcs405 sdm710 qm215 apq8017_firmware sdm710_firmware sa6155p mdm9207c_firmware msm8905 mdm9207c sm8150_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sda660_firmware rennell_firmware qm215_firmware sdx55 msm8953_firmware apq8053 saipan_firmware sm6150_firmware apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 saipan nicobar_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14068

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8053, APQ8096AU, MDM9607, MSM8905, MSM8909W, Nicobar, QCS405, QCS605, Rennell, Saipan, SDM429W, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14135

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.43%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-05 Aug, 2024 | 00:12

Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4010, QCA6174A, QCA6574AU, QCA6584AU, QCA8081, QCA9377, QCA9379, QCA9886, QCN7605, QCS405, QCS605, SA6155P, Saipan, SDA845, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX24, SM6150, SM7150, SM8150, SXR1130

Product-qca9377_firmware mdm9640_firmware msm8996au_firmware sdm845 sdx24 mdm9650 sm7150_firmware sm6150 msm8996au sm7150 qca4010_firmware apq8009_firmware sdm670 qcs605_firmware mdm9206 qca9379_firmware qca6174a sdm670_firmware sdx24_firmware qca6584au_firmware ipq8074 sda845_firmware qca9377 qcn7605 mdm9206_firmware qcs605 qca9886 mdm9640 mdm9650_firmware qca6574au_firmware sxr1130_firmware qca8081_firmware sxr1130 apq8009 apq8053_firmware sda845 sdm850_firmware qca6584au sa6155p_firmware sdx20 sdm660 mdm9607_firmware qcs405 ipq8074_firmware qca6574au sdm710 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware qca4010 sa6155p qca8081 mdm9207c_firmware mdm9207c qca6174a_firmware qca9886_firmware sm8150_firmware apq8096au qcs405_firmware apq8053 apq8096au_firmware saipan_firmware sm6150_firmware sm8150 sdx20_firmware sdm850 apq8017 saipan qca9379 sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-190

Integer Overflow or Wraparound

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14030

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-05 Mar, 2020 | 08:56

Updated-05 Aug, 2024 | 00:05

The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, Rennell, SC8180X, SDM845, SDM850, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-14076

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.79%

7 Day CHG~0.00%

Published-22 Jun, 2020 | 07:10

Updated-05 Aug, 2024 | 00:12

Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8998, Nicobar, QCS404, QCS405, QCS605, Rennell, SA415M, SC7180, SC8180X, SDA845, SDM670, SDM710, SDM845, SDM850, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-kamorta_firmware mdm9150_firmware sdm845 sdx24 qcs404_firmware mdm9650 sm7150_firmware sm6150 sm7150 apq8009_firmware sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware qcs404 sdx24_firmware sda845_firmware sa415m apq8098 mdm9205 mdm9206_firmware qcs605 mdm9650_firmware msm8905_firmware sxr1130_firmware sdx55_firmware sxr1130 apq8009 msm8909_firmware sda845 nicobar sdm850_firmware apq8098_firmware msm8998_firmware mdm9607_firmware sm8250_firmware sc8180x_firmware sa415m_firmware qcs405 sdm710 sc7180_firmware mdm9607 sdm710_firmware mdm9150 msm8905 sm8150_firmware msm8909 sxr2130_firmware qcs405_firmware rennell sc7180 mdm9205_firmware rennell_firmware sdx55 sm6150_firmware sm8250 msm8998 sm8150 sdm850 kamorta nicobar_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10606

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.73%

7 Day CHG~0.00%

Published-21 Jan, 2020 | 06:30

Updated-04 Aug, 2024 | 22:24

Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, QCS605, SDX24

Product-msm8920 sdx24_firmware msm8937 sdx24 msm8920_firmware qcs605 mdm9607_firmware msm8940 msm8940_firmware msm8909w_firmware mdm9607 msm8917_firmware msm8937_firmware msm8917 msm8909w qcs605_firmware Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10598

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.23%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop further will not cause an overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053, APQ8096AU, MDM9607, MSM8996AU, QCA6574AU, QCN7605, QCS605, SDA660, SDA845, SDM630, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10491

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 11.82%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd616_firmware sd_615_firmware sd616 msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware ipq4019_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware ipq8074 sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 ipq8064 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_205_firmware ipq8064_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 ipq8074_firmware sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 ipq4019 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10620

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.01%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 22:31

Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8096AU, APQ8098, MSM8996AU, QCN7605, SDM439, SDX24, SM8150

Product-apq8096au_firmware msm8996au sdx24_firmware sm8150 sm8150_firmware apq8096au sdm439_firmware msm8996au_firmware apq8098_firmware apq8098 qcn7605 qcn7605_firmware sdx24 sdm439 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10496

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.84%

7 Day CHG~0.00%

Published-06 Nov, 2019 | 17:11

Updated-04 Aug, 2024 | 22:24

Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130

Product-sd_850 sd_632 sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdm439 sd_636 snapdragon_high_med_2016_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware sd_425_firmware sd_665 sd_625_firmware sd_450 sd_8cx_firmware sd_845 qcs605 sd_632_firmware sd_835_firmware sd_835 sda660 sxr1130_firmware sd_210_firmware sxr1130 msm8909w sd_665_firmware sd_205_firmware sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sd_425 sdm660 sd_430_firmware sd_710_firmware sd_435 sdm630 sd_625 sd_210 sd_820_firmware sd_636_firmware sd_439_firmware qualcomm_215_firmware sd_429_firmware sd_730 snapdragon_high_med_2016 sd_212_firmware sd_850_firmware sdm439_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_8cx sd_427 sd_430 sd_670 sd_435_firmware sd_710 sd_205 sdm660_firmware sd_855_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10571

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.01%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 08:30

Updated-04 Aug, 2024 | 22:24

Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996AU, Nicobar, QCN7605, QCS405, QCS605, QM215, SA6155P, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDX20, SDX24, SM6150, SM7150, SM8150, SM8250, SXR2130

Product-sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 mdm9650 sdm429 msm8940_firmware sm7150_firmware sm6150 msm8909w_firmware msm8996au sm7150 msm8917 sdm670 sxr2130 qcs605_firmware mdm9206 sdm670_firmware sdx24_firmware sdm636 sda845_firmware apq8098 qcn7605 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware sda660 msm8909w msm8909_firmware apq8053_firmware sda845 nicobar sa6155p_firmware msm8920 msm8953 sdm450 sdm636_firmware apq8098_firmware sdx20 sdm660 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware qcs405 sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware sa6155p msm8937 mdm9207c_firmware mdm9207c sm8150_firmware msm8909 sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware msm8953_firmware msm8940 sm6150_firmware apq8053 apq8096au_firmware msm8917_firmware sm8250 sm8150 sdx20_firmware apq8017 nicobar_firmware sdm660_firmware sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10556

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.79%

7 Day CHG~0.00%

Published-16 Apr, 2020 | 10:46

Updated-04 Aug, 2024 | 22:24

Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some cases in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096AU, MSM8909W, MSM8917, MSM8953, Nicobar, QCN7605, QCS405, QCS605, QM215, Rennell, Saipan, SC8180X, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM632, SDM670, SDM710, SDM845, SDX24, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130

Product-msm8953 sdm450 sdm429w sdm632_firmware sdm845 sdm450_firmware sdm632 sdx24 sdm439 sm8250_firmware sc8180x_firmware sdm429 qcs405 sm7150_firmware sdm710 msm8909w_firmware qm215 sm6150 sdm429w_firmware sdm710_firmware apq8009 sm7150 apq8009_firmware qcn7605_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x sdm670_firmware sm8150_firmware sdx24_firmware sxr2130_firmware apq8096au sdm439_firmware qcs405_firmware rennell sda845_firmware qcn7605 rennell_firmware qm215_firmware qcs605 sdx55 msm8953_firmware apq8053 apq8096au_firmware saipan_firmware sm6150_firmware msm8917_firmware sdm429_firmware sm8250 sm8150 sxr1130_firmware sdx55_firmware nicobar_firmware msm8909w saipan sxr1130 apq8053_firmware sda845 nicobar sdm845_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10498

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.79%

7 Day CHG~0.00%

Published-30 Sep, 2019 | 15:40

Updated-04 Aug, 2024 | 22:24

Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24

Product-sd_850 mdm9150_firmware sd_632 mdm9640_firmware sd_820a sd_675 msm8996au_firmware sd_439 sd_670_firmware sd_429 sdx24 sdm439 mdm9650 sd_636 sd_615_firmware msm8909w_firmware msm8996au sd_820 sd_450_firmware sd_845_firmware sd_820a_firmware qcs605_firmware sd_675_firmware mdm9206 sd_425_firmware sd_665 sdx24_firmware sd_625_firmware sd_450 sd_845 mdm9206_firmware qcs605 sd_632_firmware sd_835_firmware mdm9650_firmware sd_835 sda660 sd_210_firmware sd_415_firmware msm8909w sd_665_firmware sd_616_firmware sd_205_firmware sd_415 sd_212 sd_427_firmware sd_712 sd_855 sd_730_firmware qualcomm_215 sdx20 sd_616 sd_425 sdm660 sd_430_firmware mdm9607_firmware sd_435 sd_615 sd_710_firmware sdm630 qcs405 sd_625 sd_820_firmware sd_210 mdm9607 sd_636_firmware sd_439_firmware qualcomm_215_firmware mdm9150 sd_429_firmware sd_730 sd_212_firmware sd_850_firmware sd_855_firmware sdm439_firmware qcs405_firmware sd_712_firmware sdm630_firmware sda660_firmware sd_430 sd_427 sd_670 sd_435_firmware sdx20_firmware sd_710 sd_205 sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-10607

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.23%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-04 Aug, 2024 | 22:24

Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, IPQ4019, IPQ8064, IPQ8074, MDM9206, MDM9207C, MDM9607, MDM9615, MDM9640, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8939, MSM8940, MSM8996, MSM8996AU, QCA4531, QCA8081, QCA9531, QCA9558, QCA9886, QCA9980, QCN7605, QCS605, SDA660, SDX20, SDX24, SDX55, SM8150, SXR1130

Product-qca4531_firmware mdm9640_firmware qca9980_firmware msm8996au_firmware sdx24 mdm9650 msm8940_firmware qca9558_firmware qca9558 msm8909w_firmware msm8996au apq8009_firmware msm8917 qcs605_firmware ipq4019_firmware mdm9206 sdx24_firmware ipq8074 qca4531 apq8098 qcn7605 mdm9615 mdm9206_firmware msm8939 qcs605 qca9886 msm8937_firmware mdm9650_firmware msm8905_firmware sda660 sdx55_firmware ipq8064 sxr1130_firmware apq8064_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware ipq8064_firmware msm8920 apq8064 apq8098_firmware sdx20 msm8920_firmware mdm9607_firmware qca9531 ipq8074_firmware mdm9607 qca9980 apq8017_firmware msm8939_firmware qcn7605_firmware qca8081 msm8937 mdm9207c_firmware msm8996_firmware msm8905 mdm9207c qca9886_firmware sm8150_firmware msm8909 apq8096au sda660_firmware ipq4019 sdx55 msm8940 apq8053 apq8096au_firmware msm8917_firmware mdm9615_firmware sm8150 sdx20_firmware qca9531_firmware apq8017 msm8996 mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-25712

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 8.81%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

Product-wcd9380_firmware wcd9340_firmware qca6310 qualcomm215_firmware wsa8835 mdm9150_firmware sdx55m sd855_firmware wcn3998 wcn6850_firmware wsa8810_firmware wsa8815_firmware wcn3610_firmware qca6436 qca6426_firmware wcn3660b wcn3660b_firmware sd710_firmware qcs410_firmware sd205_firmware wsa8810 sdxr1 sd210 wcd9341_firmware wsa8830 sw5100p_firmware wsa8815 qca6390 sda429w_firmware wcn3680b aqt1000_firmware wsa8835_firmware qca6430 sw5100 sd855 qca6391 wcn3998_firmware wcd9340 wcn6850 wcn6851 wcn3950 wcd9370_firmware sdxr2_5g_firmware qca6420_firmware sda429w qcc5100_firmware sd210_firmware wsa8830_firmware wcn3680b_firmware sdxr2_5g sd865_5g_firmware wcd9341 wcn3980_firmware wcn6851_firmware wcd9326 qcs610 qcs610_firmware qualcomm215 qca6391_firmware sd205 wcd9326_firmware qcc5100 wcd9380 wcn3610 qca6335 sw5100_firmware qca6430_firmware sd865_5g qca6426 sd870 qca6335_firmware sdx55m_firmware aqt1000 wcn3990_firmware wcn3950_firmware wcn3988 mdm9150 qca6390_firmware qca6420 wcn3988_firmware qca6310_firmware sd710 sd870_firmware sw5100p sd845_firmware sdxr1_firmware qca6436_firmware sd845 wcd9370 qcs410 wcn3990 wcn3980 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2018-13916

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.09% / 27.23%

7 Day CHG~0.00%

Published-21 Nov, 2019 | 14:38

Updated-05 Aug, 2024 | 09:14

Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve thread data. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU, APQ8098, IPQ8074, MDM9150, MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8976, MSM8996, MSM8996AU, MSM8998, Nicobar, QCA8081, QCM2150, QCN7605, QCS404, QCS405, QCS605, QM215, SC8180X, SDA660, SDA845, SDM429, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SDX20, SDX55, SM8150, SM8250, Snapdragon_High_Med_2016, SXR1130, SXR2130

Product-mdm9150_firmware mdm9635m_firmware apq8096_firmware mdm9640_firmware qcm2150_firmware sdm632_firmware msm8996au_firmware sdm845 sdm450_firmware sdm632 apq8096 sdm439 qcs404_firmware mdm9650 sdm429 msm8940_firmware snapdragon_high_med_2016_firmware msm8909w_firmware msm8976_firmware msm8996au apq8009_firmware msm8917 sdm670 sxr2130 qcs605_firmware sc8180x mdm9206 sdm670_firmware qcs404 ipq8074 sdm636 sda845_firmware mdm9635m apq8098 qcn7605 mdm9206_firmware qcs605 msm8937_firmware mdm9650_firmware sdm429_firmware msm8905_firmware sda660 sdx55_firmware sxr1130_firmware qca8081_firmware sxr1130 msm8909w apq8009 msm8909_firmware apq8053_firmware sda845 nicobar sdm850_firmware msm8920 msm8953 sdm450 sdm636_firmware sdm845_firmware apq8098_firmware sdx20 msm8998_firmware qcm2150 msm8920_firmware sdm630 mdm9607_firmware sm8250_firmware mdm9655_firmware sdm660 sc8180x_firmware qcs405 ipq8074_firmware sdm710 qm215 mdm9607 apq8017_firmware sdm710_firmware qcn7605_firmware qca8081 mdm9150 msm8937 msm8996_firmware msm8905 snapdragon_high_med_2016 sm8150_firmware msm8909 sxr2130_firmware mdm9655 apq8096au sdm439_firmware qcs405_firmware sdm630_firmware sda660_firmware qm215_firmware msm8976 sdx55 msm8953_firmware msm8940 apq8053 apq8096au_firmware sm8250 msm8917_firmware msm8998 sm8150 sdx20_firmware sdm850 apq8017 msm8996 nicobar_firmware sdm660_firmware mdm9640 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2018-11980

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.12% / 31.76%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 05:25

Updated-05 Aug, 2024 | 08:24

When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen in both cds_is_mmie_valid and qdf_nbuf_trim_tail in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8937, MSM8996AU, MSM8998, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCN7605, QCS605, SDM630, SDM636, SDM660, SDX20, SDX24, SDX55, SM6150, SM7150, SM8150, SXR1130

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30268

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 10.42%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:25

Updated-03 Aug, 2024 | 22:24

Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Product-fsm10055 qca9377_firmware mdm9640_firmware sm6250p_firmware qcs610 qca8337 wcd9360_firmware sdx65 wcn3950_firmware qcs2290 qca6595au_firmware mdm8215 qcs605_firmware sd_675_firmware mdm8615m_firmware sa415m wcn3998 wcn3950 mdm9628 sd720g mdm9206_firmware qsw8573_firmware sm6375_firmware wcn3660b sd460_firmware mdm8215m qca6574au_firmware wcd9375_firmware wcn3998_firmware qca8081_firmware sdx12_firmware msm8909w apq8009w_firmware qca6420 wcd9360 qca9367_firmware mdm8207 qca4004_firmware sd662_firmware mdm9615m qca6430 wcd9306_firmware wcd9340 qualcomm215_firmware sd765g fsm10056_firmware qca6436 wcn6851 qcs603_firmware mdm9250_firmware wcd9341 qca6696_firmware sd750g sd870_firmware mdm8215_firmware wcn3910_firmware sd_8cx mdm9207_firmware qca4004 wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware wcn3988 sd660_firmware wcn3610 mdm9640 sm6375 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware sdm429w msm8996au_firmware wcd9330 qca6564au sdx55m_firmware wcn6856_firmware qet4101_firmware qca6574 wcd9380 qualcomm215 qcs410 sd690_5g_firmware sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 qsw8573 qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c wcn3910 qca6584_firmware mdm9650_firmware mdm9215_firmware qca6426_firmware wcn3660b_firmware wcn3980_firmware sd730 wcd9330_firmware sdx55m ar6003_firmware sd678_firmware wcn6851_firmware qcs603 qca6564a_firmware apq8009w qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware sdxr1 apq8096au mdm8207_firmware mdm9205_firmware qca6391_firmware wcd9370_firmware sdx55 sd675 qet4101 ar8035_firmware qcm2290 wcn3991_firmware mdm9150_firmware wsa8830 sd678 qcs2290_firmware fsm10056 sd7c_firmware csrb31024 mdm9628_firmware mdm9650 fsm10055_firmware qcs4290 mdm9250 sd765g_firmware qca6420_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 mdm9310_firmware sd675_firmware qca6426 qca6584au_firmware wcn3990_firmware sm8450 qca9377 sdw2500_firmware sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware wcd9326_firmware mdm9615m_firmware wcn3615_firmware sd662 qca6584 wcn3680b_firmware sdx55_firmware qca6595au wcn3615 sm7250p_firmware wcn3610_firmware qca6436_firmware mdm9207 qca6564au_firmware qca6584au wcd9306 sm6225 sa515m_firmware sd429 sdxr2_5g qca9367 mdm9607_firmware sa415m_firmware wcn3988_firmware sd205 sd429_firmware sm6250 apq8017_firmware wsa8810_firmware sm8450_firmware sd765_firmware wcd9326 wcd9335 qca8081 qca6174a_firmware qcs4290_firmware wcd9385 mdm8615m ar8035 qca6390 sd750g_firmware aqt1000 wcd9375 sm6250_firmware sda429w sd210 wcn3620_firmware sdx20_firmware wsa8815_firmware wcn6850_firmware wsa8835_firmware wcn3620 apq8017 qcx315 qca6564a ar6003 qcm2290_firmware wcn3990 sd_675 sd865_5g sdx24 sm8450p_firmware msm8909w_firmware qcx315_firmware msm8996au sdm429w_firmware wsa8835 sd665_firmware sm6250p qca6574a mdm9206 wcn6855_firmware qca6174a mdm9615 mdm9205 sa515m qca6574_firmware sd855 sd665 sd765 qca6574a_firmware sd768g_firmware sd850_firmware sd460 qca6391 sdxr1_firmware mdm9310 aqt1000_firmware sdx65_firmware qcm4290 csrb31024_firmware sdx20 sd480_firmware mdm9215 sm6225_firmware qca6574au mdm8215m_firmware mdm9607 sd205_firmware wcd9341_firmware wsa8810 sm8450p mdm9150 wcn6856 wcn3680b sd768g qca6696 sd845_firmware sdw2500 apq8096au_firmware sd845 mdm9615_firmware sm7250p sd720g_firmware sdx12 qcs410_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30303

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.43%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:26

Updated-03 Aug, 2024 | 22:32

Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

Product-qca9377_firmware qca2066 mdm9640_firmware sm6250p_firmware sa6150p_firmware qcs610 ipq4028_firmware qcn5550 qca1023 qca8337 ar9380 ipq8173_firmware wcd9360_firmware qca9561_firmware sdx65 qcn5124 qca4024_firmware wcn3950_firmware ipq8078a ipq5028_firmware sa8150p_firmware qcs2290 qca6595au_firmware sa6155 qca2062 qcn5064 csra6620_firmware qcs605_firmware sd_675_firmware csra6640_firmware qca9987_firmware sa415m wcn3998 wcn3950 qcn6024_firmware sd720g ipq8076a mdm9206_firmware mdm9628 sm6375_firmware wcn3660b sd460_firmware sm7315_firmware qca6428 qca6574au_firmware qcn5164_firmware ipq8071 wcd9375_firmware qca8081_firmware wcn3998_firmware sa6155_firmware sdx12_firmware qca6420 wcd9360 qca6438_firmware qca9986 ipq8070_firmware qca9367_firmware ipq8065 ipq8078a_firmware wcn3999 qrb5165_firmware ipq5028 qca7500 ipq8072_firmware ipq4029_firmware sa8155_firmware ipq6010 sd662_firmware ipq8068 qcs405 qca6430 sc8280xp_firmware wcd9340 qcn6132 sd765g qca6436 wcn6851 sa6155p qcs603_firmware mdm9250_firmware qca9888_firmware qcn6122 wcd9341 ipq8068_firmware qca2066_firmware qca6696_firmware sd870_firmware sd750g qca9988_firmware qcn5154_firmware wcn3910_firmware sd_8cx qcn5501_firmware sa8150p ar7420_firmware wsa8830_firmware qca9992_firmware sd660 sd865_5g_firmware sd855_firmware wcn3988 qca6438 sd660_firmware sa8195p_firmware qcn5121 qcn5022_firmware qcn7606_firmware wcn6750_firmware qca9898 ipq4028 wcn3610 mdm9640 qca6428_firmware ipq5018_firmware sm6375 qca9985_firmware wcn3991 ipq4018_firmware qca4531_firmware qca8337_firmware wcd9380_firmware ipq8072a qca7500_firmware qca9980_firmware wcd9330 msm8996au_firmware ipq8076a_firmware qca7550_firmware ipq8078 qca6564au sdx55m_firmware ipq8173 wcn6856_firmware qcn5164 qca9558 qca6574 csr8811_firmware qca7520_firmware wcd9380 qcn5054_firmware qcs410 qcn5024 sd690_5g_firmware ipq4019_firmware qca9379_firmware sdx24_firmware qca8072_firmware qca9985 qcn9012_firmware qca6430_firmware qcn5052_firmware wcd9335_firmware wcn3980 ipq6018_firmware qcs605 wcd9340_firmware wsa8815 wcn6850 sd7c pmp8074_firmware wcn3910 qca6584_firmware qca6320 mdm9650_firmware qca9986_firmware qca6426_firmware wcn3660b_firmware qca9984 ipq6028 ipq8064 qcn9024 pmp8074 wcn3980_firmware sd730 qcn5550_firmware wcd9330_firmware sdx55m ipq8064_firmware qca2062_firmware wcn6740_firmware qcn5064_firmware sd678_firmware apq8064au_firmware ar8031_firmware ipq8078_firmware qcn5054 qrb5165 wcn6851_firmware qcs603 ipq8070 qca9896 qcn5502 qca9994 qca9887_firmware qca9980 qcn9024_firmware ipq8174_firmware qca6564a_firmware qca9880 qcm4290_firmware sd480 sd870 wcn6855 qcn7605_firmware qcn5121_firmware qcs610_firmware sa6145p ipq6018 qca9886_firmware sdxr1 ar8031 qca1023_firmware apq8096au qcs405_firmware sa8145p qca6391_firmware qca4024 wcd9370_firmware qca2064 sd780g_firmware sdx55 sd888_firmware sc8280xp qcn5021_firmware sa8155p csra6640 sd675 qca9531_firmware qca9379 ar8035_firmware qcm2290 qcn7606 qcn5024_firmware wcn3991_firmware wsa8830 sd678 qca9561 qcn9070 sa8145p_firmware qca7520 qcs2290_firmware sd7c_firmware csrb31024 qca9563_firmware mdm9628_firmware qca9378 mdm9650 csra6620 qca9987 qcn9072 qca9880_firmware qca9992 qcs4290 mdm9250 sd765g_firmware qca6420_firmware ipq8069_firmware apq8009_firmware qca2064_firmware qca6390_firmware sd690_5g ipq6000 sd730_firmware wcd9370 sd675_firmware ipq8072 qcn5152_firmware qca6564 qca6426 qca6584au_firmware wcn3990_firmware qrb5165n_firmware qcn9000_firmware qca9984_firmware qca9377 sm8450 qca4531 ipq5018 sd_8cx_firmware wcd9385_firmware sdxr2_5g_firmware qcn7605 wcd9326_firmware qca9563 ipq8074a qca2065 sd662 qcn5124_firmware sa8155 qca6320_firmware qca6584 qcn5122_firmware sdx55_firmware qca6595au qcn6023_firmware wcn3999_firmware sm7250p_firmware wcn3610_firmware qca6436_firmware qrb5165n ipq5010 qca6564au_firmware qca6584au sd778g sa6155p_firmware sm6225 ipq8174 sa515m_firmware qca9990 qcs6490 sdxr2_5g qcn5052 qca9367 qcn5501 mdm9607_firmware sa415m_firmware wcn3988_firmware qcn9074 sa6145p_firmware sm6250 sd778g_firmware sa8195p apq8017_firmware wsa8810_firmware qca7550 sm8450_firmware sd765_firmware wcd9326 wcd9335 qca8081 qcn6023 ipq8071a qca6174a_firmware ipq8071a_firmware qcs4290_firmware wcd9385 qcs6490_firmware qca2065_firmware qca6390 qca9898_firmware sd750g_firmware aqt1000 wcd9375 ar8035 sm6250_firmware csr8811 apq8064au ipq4019 qcn9100_firmware ipq5010_firmware ipq8074a_firmware sd888_5g_firmware sdx20_firmware wsa8815_firmware qcm6490 wcn6850_firmware wsa8835_firmware apq8017 qcx315 qca6564a qca9988 qca9882 qca8072 qcm2290_firmware wcn3990 qcn9000 sd_675 sd780g sd865_5g ar9380_firmware sdx24 sm8450p_firmware qcn9012 sd888 qca9558_firmware qca9896_firmware qcn6122_firmware ipq8065_firmware qcx315_firmware wsa8835 msm8996au sd665_firmware sd888_5g sm6250p qcn5154 qca8075_firmware ipq4018 qca6574a ipq6005_firmware mdm9206 wcn6855_firmware qca9889 qca6174a sm7325p qcn6132_firmware qca9888 ipq8074 qca9994_firmware wcn6750 ipq8070a_firmware ipq8076_firmware sa515m qca6574_firmware qca9886 qcn5502_firmware ar7420 sd855 sm7325p_firmware sd665 ipq8076 qca6175a sd765 qca9887 qca9378_firmware qca6574a_firmware qcn5021 ipq8069 qcn5152 sd768g_firmware sd850_firmware sm7315 apq8009 sd460 qca6391 sdxr1_firmware ipq6005 aqt1000_firmware qcn9100 sdx65_firmware qcm4290 csrb31024_firmware qcm6490_firmware qca9882_firmware qcn9070_firmware sdx20 sd480_firmware ipq6028_firmware ipq8072a_firmware sm6225_firmware qca9531 ipq8074_firmware qca6574au qca9889_firmware sa8155p_firmware mdm9607 qcn5122 wcd9341_firmware wsa8810 sm8450p wcn6856 qcn5022 qca6564_firmware sd768g ipq6010_firmware wcn6740 qca6696 sd845_firmware sa6150p qca8075 qcn9022_firmware apq8096au_firmware qcn6024 qcn9022 sd845 qca9990_firmware ipq8070a qcn9072_firmware sm7250p ipq6000_firmware sd720g_firmware sdx12 ipq8071_firmware qcs410_firmware qcn9074_firmware ipq4029 qca6175a_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-33278

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 20.92%

7 Day CHG~0.00%

Published-07 Mar, 2023 | 04:43

Updated-03 Aug, 2024 | 08:01

Buffer copy without checking the size of input in HLOS

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

Product-wcn3991_firmware sd_8cx_gen3_firmware wsa8830 sd678 sa6150p_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware qca8337 qca6431_firmware snapdragon_4_gen_1_firmware sdx65 csra6620 qcs4290 wcn3950_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qcs2290 qca6390_firmware sa6155 sd690_5g sd730_firmware wcd9370 csra6620_firmware sd_675_firmware sd675_firmware ssg2115p csra6640_firmware qcs6125_firmware qca6426 wcn3990_firmware wcn3998 wcd9385_firmware qam8295p sdxr2_5g_firmware qcn6024_firmware sd720g sm4125 wcd9326_firmware wcn3950 sd_8_gen1_5g_firmware qsm8350_firmware sd662 sd710_firmware qsm8350 sd460_firmware qam8295p_firmware sa8155 sa9000p_firmware sm7315_firmware qca6574au_firmware wcn7850 qca6595au qca8081_firmware sa6155_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware sd680_firmware sd778g sa6155p_firmware wcn7851 qcs6490 sdxr2_5g qca6698aq qcs6125 sa4155p_firmware sa8155_firmware sd662_firmware qcs405 qca6430 wcn3988_firmware sa6145p_firmware qca6421 sd778g_firmware sm6250 sa8195p wsa8810_firmware sd765g sw5100 sd765_firmware qca6436 sd680 wcd9326 sa6155p sg4150p wcd9335 qca8081 wcn6851 wcn7851_firmware qca6698aq_firmware qcs4290_firmware wcd9385 wcd9341 qca6431 qca6696_firmware qcs6490_firmware sd750g sd870_firmware sd_8cx_gen3 qca6390 ar8035 sd750g_firmware aqt1000 sa8150p sxr2150p_firmware sm6250_firmware wcd9375 wcn3910_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware snapdragon_4_gen_1 qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wcn7850_firmware wsa8815_firmware sa8195p_firmware wsa8835_firmware sm8475 qcn7606_firmware sa8295p_firmware wcn6750_firmware sa4150p sg4150p_firmware qcm6125_firmware qcm2290_firmware wcn3991 qca8337_firmware wcd9380_firmware ssg2125p wcn3990 sd_675 sw5100p sd780g sd865_5g qca6595 qcc5100 sdx55m_firmware wcn6856_firmware sd888 sd670_firmware qca6574 sxr1230p_firmware wsa8835 sd665_firmware sa8540p_firmware wcd9380 sd888_5g ssg2125p_firmware qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware sm7325p sxr1230p qca6430_firmware wcd9335_firmware wcn3980 wcn6750 sa9000p qca6574_firmware sd855 sm4125_firmware sm7325p_firmware sd665 sxr2230p wcn3910 wcn6850 wsa8815 sd765 qca6426_firmware qca6574a_firmware sd695 sd768g_firmware qcn9024 wcn3980_firmware sm7315 sd460 qca6391 sd730 sdx55m sdxr1_firmware sxr2150p qcc5100_firmware qca6421_firmware sa8295p aqt1000_firmware wcn6740_firmware sdx65_firmware sd678_firmware qcm4290 qcm6490_firmware sdx50m wsa8832_firmware sd480_firmware wcn6851_firmware qca6574au sa8155p_firmware sd710 sd670 qcn9024_firmware wcd9341_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 wsa8810 wsa8832 sa8540p sw5100p_firmware wcn6856 sa6145p sd695_firmware sdxr1 sd768g qca6595_firmware qcs405_firmware sa8145p wcn6740 qca6696 qca6391_firmware sa4150p_firmware sd780g_firmware wcd9370_firmware sa6150p sd888_firmware sa8155p csra6640 qcn6024 sd675 sm7250p sd720g_firmware ssg2115p_firmware sw5100_firmware sa4155p ar8035_firmware qcm2290 qcn7606 Snapdragon qcm2290_firmware wcn3991_firmware sd_8cx_gen3_firmware qca8337_firmware wcd9380_firmware sa6150p_firmware sa8145p_firmware sxr2230p_firmware qcs2290_firmware qca6431_firmware sdx55m_firmware wcn6856_firmware snapdragon_4_gen_1_firmware sd670_firmware sxr1230p_firmware wcn3950_firmware sd665_firmware sa8540p_firmware sa8150p_firmware sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sd730_firmware csra6620_firmware ssg2125p_firmware sd_675_firmware sd675_firmware sd690_5g_firmware sdx50m_firmware csra6640_firmware wcn6855_firmware qcs6125_firmware wcn3990_firmware qca6430_firmware wcd9335_firmware wcd9385_firmware sdxr2_5g_firmware qcn6024_firmware wcd9326_firmware qca6574_firmware sd_8_gen1_5g_firmware sm4125_firmware sm7325p_firmware qsm8350_firmware sd710_firmware sd460_firmware qam8295p_firmware qca6426_firmware sa9000p_firmware sm7315_firmware qca6574a_firmware qca6574au_firmware sd768g_firmware wcd9375_firmware qca8081_firmware sa6155_firmware wcn3998_firmware sm7250p_firmware wcn3980_firmware sdxr1_firmware qca6436_firmware qcc5100_firmware qca6421_firmware aqt1000_firmware sd680_firmware wcn6740_firmware sa6155p_firmware sdx65_firmware sd678_firmware qcm6490_firmware wsa8832_firmware sa4155p_firmware sd480_firmware sa8155_firmware wcn6851_firmware sd662_firmware qcn7606_firmware wcn3988_firmware sa6145p_firmware sa8155p_firmware sd778g_firmware qcn9024_firmware wsa8810_firmware wcd9341_firmware qcm4290_firmware sd765_firmware sw5100p_firmware wcn7851_firmware qca6698aq_firmware qcs4290_firmware sd695_firmware qca6696_firmware qcs6490_firmware qca6595_firmware qcs405_firmware sd870_firmware qca6391_firmware sa4150p_firmware wcn3910_firmware sxr2150p_firmware sd750g_firmware wcn6750_firmware sd780g_firmware wcd9370_firmware sm6250_firmware sd888_firmware wsa8830_firmware sd855_firmware sd865_5g_firmware wsa8815_firmware sd888_5g_firmware wcn6850_firmware wcn7850_firmware wsa8835_firmware sd720g_firmware sa8195p_firmware ssg2115p_firmware sw5100_firmware sa8295p_firmware sg4150p_firmware ar8035_firmware qcm6125_firmware

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-49830

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.02% / 2.59%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:12

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while processing an IOCTL call to set mixer controls.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-49829

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.02% / 2.14%

7 Day CHG~0.00%

Published-06 May, 2025 | 08:32

Updated-09 May, 2025 | 19:12

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera

Memory corruption can occur during context user dumps due to inadequate checks on buffer length.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30298

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 10.94%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 07:26

Updated-03 Aug, 2024 | 22:32

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Product-fsm10055 wcn3991_firmware mdm9150_firmware wsa8830 wcn3991 qca8337_firmware sda429w_firmware wcd9380_firmware qcs610 qcn9000 ipq8072a fsm10056 qca8337 ipq8076a_firmware sd865_5g sdx55m_firmware csra6620 fsm10055_firmware wsa8835 wcn3950_firmware sd665_firmware wcd9380 sd765g_firmware qca6595au_firmware qca6390_firmware qualcomm215 qcs410 wcd9370 csra6620_firmware csra6640_firmware qrb5165n_firmware qcn9000_firmware wcd9335_firmware wcn3980 wcn3998 wcd9385_firmware wcn3950 ipq8076a wcd9340_firmware wcn3660b wsa8815 wcn6850 sd665 ipq8074a sd662 sd460_firmware sd765 wcn3660b_firmware qca6574au_firmware sdx55_firmware sd768g_firmware qca6595au wcd9375_firmware wcn3998_firmware wcn3999_firmware sm7250p_firmware wcn3980_firmware wcn3610_firmware sd460 qca6391 sdx55m qrb5165n wcn3999 ar8031_firmware qrb5165_firmware qrb5165 wcn6851_firmware sd662_firmware ipq8072a_firmware qcs405 wcn3988_firmware qca6574au qcn9074 sd205 sa8155p_firmware sd205_firmware wcd9340 wsa8810_firmware qualcomm215_firmware sd765g wcd9341_firmware wsa8810 sd765_firmware fsm10056_firmware sd870 wcn6851 wcd9335 sd210_firmware qcs610_firmware mdm9150 wcd9385 wcd9341 sd768g ar8031 qca6696_firmware qcs405_firmware sd870_firmware qca6696 qca6391_firmware ar8035 qca6390 wcd9375 wcd9370_firmware sdx55 sa8155p wsa8830_firmware sda429w sd210 csra6640 sd865_5g_firmware wcn3620_firmware ipq8074a_firmware wcn3988 wcn6850_firmware wcn3620 wsa8815_firmware wsa8835_firmware sm7250p qcn9074_firmware qcs410_firmware ar8035_firmware wcn3610 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-45547

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.33%

7 Day CHG~0.00%

Published-06 Jan, 2025 | 10:33

Updated-13 Jan, 2025 | 21:51

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-30308

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 29.12%

7 Day CHG~0.00%

Published-13 Jan, 2022 | 11:40

Updated-03 Aug, 2024 | 22:32

Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Product-qca9377_firmware wcn3991_firmware mdm9150_firmware wsa8830 sd678 sm6250p_firmware qcs610 fsm10056 qca8337 sd7c_firmware csrb31024 wcd9360_firmware mdm9650 sdx65 wcn3950_firmware mdm9250 sd765g_firmware qca6420_firmware qca6595au_firmware qca6390_firmware sd690_5g sd730_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qca6426 wcn3990_firmware qca9377 sa415m wcn3998 wcd9385_firmware sdxr2_5g_firmware sd_8cx_gen2_firmware wcd9326_firmware sd720g wcn3950 sd_8_gen1_5g_firmware sm6375_firmware qca6574au_firmware sdx55_firmware qca6595au qca8081_firmware sdx12_firmware wcd9375_firmware sm7250p_firmware wcn3998_firmware qca6420 qca6436_firmware wcd9360 qca6564au_firmware sd_8cx_gen2 sa515m_firmware sdxr2_5g sa415m_firmware wcn3988_firmware qca6430 sm6250 wcd9340 wsa8810_firmware sd765g sd765_firmware fsm10056_firmware qca6436 wcd9326 wcd9335 wcn6851 qca8081 qcs603_firmware qca6174a_firmware mdm9250_firmware wcd9385 wcd9341 qca6696_firmware sd750g sd870_firmware qca6390 ar8035 sd750g_firmware aqt1000 wcd9375 sm6250_firmware wsa8830_firmware sd855_firmware sd660 sd865_5g_firmware sdx20_firmware wcn3988 wcn6850_firmware wsa8815_firmware sd660_firmware wsa8835_firmware qcx315 sm8475 qca6564a sm6375 wcn3991 qca8337_firmware wcd9380_firmware wcn3990 sd_675 sd865_5g qca6564au sdx24 sdx55m_firmware wcn6856_firmware wsa8835 qcx315_firmware sd665_firmware wcd9380 sm6250p qcs410 qca6574a sd690_5g_firmware wcn6855_firmware qca6174a sdx24_firmware qca6430_firmware wcd9335_firmware wcn3980 sa515m qcs605 wcd9340_firmware sd855 wsa8815 wcn6850 sd665 sd7c mdm9650_firmware sd765 qca6426_firmware qca6574a_firmware sd768g_firmware sd850_firmware wcn3980_firmware sd730 qca6391 sdx55m sdxr1_firmware aqt1000_firmware sdx65_firmware sd678_firmware csrb31024_firmware sdx20 sd480_firmware qcs603 wcn6851_firmware qca6574au qca6564a_firmware wcd9341_firmware sd480 sd870 wsa8810 wcn6855 qcs610_firmware mdm9150 wcn6856 sdxr1 sd768g qca6696 qca6391_firmware sd845_firmware wcd9370_firmware sdx55 sd675 sd845 sm7250p sd720g_firmware sdx12 qcs410_firmware ar8035_firmware sd850 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-43055

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.57%

7 Day CHG~0.00%

Published-03 Mar, 2025 | 10:07

Updated-03 Mar, 2025 | 13:14

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux

Memory corruption while processing camera use case IOCTL call.

Product-Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-1984

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.10% / 27.87%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 16:32

Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

Product-wcn3991_firmware wsa8830 sd678 sm7250 sm6250p_firmware qcs610 qcs2290_firmware sm7250_firmware sd_636 qcs4290 wcn3950_firmware sd765g_firmware qca6420_firmware qcs2290 qca6390_firmware qca6335 msm8917 sd690_5g sd730_firmware sd_455_firmware wcd9370 qcs605_firmware sd_675_firmware sd675_firmware qcs6125_firmware qca6426 sd632 wcn3998 wcd9371_firmware wcd9385_firmware sdxr2_5g_firmware wcn3950 sm4125 sd720g wcn3615_firmware wcn3660b sd662 sd460_firmware qca6320_firmware qca6574au_firmware sdx55_firmware wcn3680b_firmware wcd9375_firmware wcn3615 wcn3998_firmware wcn3610_firmware qca6420 qca6436_firmware apq8053_firmware qca6564au_firmware sd778g qca6310 qcs6490 sd429 sdxr2_5g qcs6125 sd662_firmware sdm630 wcn3988_firmware qca6430 sd205 sd429_firmware sm6250 sd778g_firmware apq8017_firmware qualcomm215_firmware sd765g sd765_firmware qca6436 wcn6851 qcs603_firmware qcs4290_firmware wcd9385 qcs6490_firmware wcd9371 sd750g sd870_firmware qca6390 wcd9375 sd750g_firmware aqt1000 apq8064au wcn3910_firmware sm6250_firmware msm8953_firmware wsa8830_firmware msm8917_firmware sd210 sd855_firmware sd865_5g_firmware qcm6490 sd888_5g_firmware wcn3988 wcn6850_firmware wsa8835_firmware apq8017 qca6564a wcn6750_firmware wcn3610 qcm6125_firmware qcm2290_firmware wcn3991 wcd9380_firmware sd_675 msm8996au_firmware sd780g sd865_5g qca6564au sdx55m_firmware wcn6856_firmware sd888 wsa8835 sd632_firmware msm8996au sd665_firmware wcd9380 sd888_5g sm6250p qualcomm215 qca6574a sd690_5g_firmware sdx50m_firmware wcn6855_firmware qca6310_firmware sm7325 qca6430_firmware wcn6750 sd439_firmware qca6335_firmware qcs605 sd855 sm4125_firmware wcn6850 sd665 wcn3910 qca6320 sd765 qca6426_firmware wcn3660b_firmware wcn3680 qca6574a_firmware sd768g_firmware sd460 qca6391 sd730 sdx55m sdxr1_firmware aqt1000_firmware wcn6740_firmware msm8953 sd678_firmware apq8064au_firmware qcm4290 qcm6490_firmware sdx50m wcn3680_firmware sd480_firmware qcs603 wcn6851_firmware sd_455 qca6574au sd_636_firmware sd205_firmware qca6564a_firmware qcm6125 qcm4290_firmware sd480 sd870 wcn6855 sd210_firmware qcs610_firmware wcn6856 wcn3680b sdxr1 sd768g apq8096au wcn6740 sdm630_firmware qca6391_firmware sd780g_firmware wcd9370_firmware sdx55 sd888_firmware apq8053 apq8096au_firmware sd675 sd439 sd720g_firmware qcm2290 sm7325_firmware Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-1983

Matching Score-10

Assigner-Qualcomm, Inc.

Matching Score-10

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.43%

7 Day CHG~0.00%

Published-20 Oct, 2021 | 06:31

Updated-03 Aug, 2024 | 16:32

Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-38399

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-8.4||HIGH

EPSS-0.03% / 8.29%

7 Day CHG~0.00%

Published-07 Oct, 2024 | 12:58

Updated-16 Oct, 2024 | 18:17

Use After Free in Graphics

Memory corruption while processing user packets to generate page faults.

Product-qam8255p_firmware snapdragon_8_gen_1_mobile_platform wsa8830 wcd9380_firmware qam8650p qca6595 qam8775p qamsrv1m wsa8835 wcn3950_firmware wcd9380 snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware qca6595au_firmware snapdragon_685_4g_mobile_platform_\(sm6225-ad\)wcd9370 qamsrv1h qam8295p wcn3950 sa8650p qamsrv1h_firmware sa9000p qca6688aq qam8295p_firmware sa9000p_firmware sa8775p qca6574au_firmware sa7255p wcd9375_firmware qca6595au snapdragon_680_4g_mobile_platform_firmware sa8295p fastconnect_7800 sa8620p_firmware sa6155p_firmware sa8775p_firmware sa8650p_firmware qca6698aq fastconnect_6900 srv1h_firmware fastconnect_6900_firmware qca6797aq_firmware qca6574au srv1h sa8155p_firmware sa7775p_firmware sa8195p sa7255p_firmware wsa8810_firmware fastconnect_7800_firmware wsa8810 sa8620p sa8255p_firmware sg4150p sa6155p snapdragon_8_gen_1_mobile_platform_firmware snapdragon_680_4g_mobile_platform qca6698aq_firmware srv1m_firmware sa7775p qamsrv1m_firmware qam8650p_firmware sa8770p_firmware sa8255p qam8775p_firmware qca6696_firmware qca6595_firmware qca6696 qca6797aq wcd9375 wcd9370_firmware sa8155p wsa8830_firmware wsa8835_firmware srv1m sa8195p_firmware sa8295p_firmware qam8255p sg4150p_firmware sa8770p qca6688aq_firmware Snapdragon qam8255p_firmware sa8620p_firmware sa6155p_firmware wcd9380_firmware sa8775p_firmware sa8650p_firmware fastconnect_6900_firmware srv1h_firmware qca6797aq_firmware sa8155p_firmware sa7775p_firmware sa7255p_firmware wcn3950_firmware wsa8810_firmware fastconnect_7800_firmware qca6595au_firmware sa8255p_firmware snapdragon_8_gen_1_mobile_platform_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware qam8650p_firmware sa8770p_firmware qam8775p_firmware qca6696_firmware qca6595_firmware qamsrv1h_firmware wcd9370_firmware wsa8830_firmware qam8295p_firmware sa9000p_firmware wsa8835_firmware qca6574au_firmware sa8195p_firmware wcd9375_firmware sa8295p_firmware sg4150p_firmware snapdragon_680_4g_mobile_platform_firmware qca6688aq_firmware

CWE ID-CWE-416

Use After Free

CVE-2024-38418

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.01% / 1.75%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:57

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux

Memory corruption while parsing the memory map info in IOCTL calls.

Product-fastconnect_7800_firmware qca6426 sdm429w qca6696 sd865_5g csrb31024 qcs610 sa8155p_firmware qam8295p_firmware sd865_5g_firmware c-v2x_9150_firmware sa8195p_firmware sa8145p_firmware qcn9074_firmware wcn3620_firmware video_collaboration_vc1_platform_firmware wcn3680b wcd9380_firmware snapdragon_auto_4g_modem qca6574au_firmware qsm8250_firmware qca6391_firmware sa8195p snapdragon_auto_4g_modem_firmware wcn3950_firmware qca6391 wcn3660b sdm429w_firmware c-v2x_9150 wcn3980 wcn3950 video_collaboration_vc3_platform_firmware snapdragon_w5\+_gen_1_wearable sw5100 sxr2230p wcd9370 sa8540p_firmware snapdragon_x55_5g_modem-rf sw5100p_firmware sa8295p_firmware snapdragon_865\+_5g_mobile sa8150p_firmware sxr2230p_firmware snapdragon_429_mobile_firmware wsa8835 sa9000p sxr2130 csrb31024_firmware qsm8250 qca6426_firmware qcn9074 fastconnect_7800 sa6155p_firmware wcd9341_firmware snapdragon_8_gen_1_mobile qca6564au_firmware snapdragon_870_5g_mobile snapdragon_865_5g_mobile_firmware qam8295p snapdragon_xr2_5g_firmware wcd9341 wcn3988 snapdragon_x55_5g_modem-rf_firmware snapdragon_865_5g_mobile qca6574au sa8150p sa6150p_firmware fastconnect_6900 snapdragon_xr2_5g wcn3988_firmware sw5100_firmware sxr2250p fastconnect_6800 snapdragon_429_mobile qcs410_firmware sa8530p_firmware qca6696_firmware snapdragon_8_gen_1_mobile_firmware wsa8810_firmware wcd9385_firmware sa6150p wcn3680b_firmware wsa8810 wsa8832 sa8295p sa6145p_firmware qcs610_firmware sa6145p snapdragon_870_5g_mobile_firmware wsa8815 snapdragon_w5\+_gen_1_wearable_firmware qcs410 sdx55 sdx55_firmware sa6155p snapdragon_865\+_5g_mobile_firmware wcd9380 video_collaboration_vc3_platform wsa8830 qca6436_firmware wsa8815_firmware sa8155p wsa8832_firmware sa8145p sw5100p sa8530p wsa8830_firmware wcn3620 wcn3980_firmware qca6564au sxr2130_firmware video_collaboration_vc1_platform qca6436 fastconnect_6900_firmware sa8540p qca6595au_firmware sa9000p_firmware fastconnect_6800_firmware wcd9385 qca6595au wcn3660b_firmware wsa8835_firmware sxr2250p_firmware wcd9370_firmware Snapdragon

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CVE-2024-38402

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.13%

7 Day CHG~0.00%

Published-02 Sep, 2024 | 10:22

Updated-11 Aug, 2025 | 15:06

Use After Free in DSP Services

Memory corruption while processing IOCTL call for getting group info.

CWE ID-CWE-416

Use After Free

CVE-2024-38406

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.29%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-16 Nov, 2024 | 04:55

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver.

Product-wsa8830 wcd9380_firmware snapdragon_8c_compute_platform_\(sc8180x-ad\)_\"poipu_lite\"sdm429w snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\,_ab\)_firmware snapdragon_8cx_compute_platform_\(sc8180x-aa\,_ab\)snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"_firmware fastconnect_6800 snapdragon_8cx_compute_platform_\(sc8180xp-ac\,_af\)_\"poipu_pro\"wsa8840 wsa8835 sdm429w_firmware snapdragon_7c\+_gen_3_compute sc8180x\+sdx55 wcd9380 qca6420_firmware fastconnect_6700 video_collaboration_vc3_platform wcd9370 snapdragon_8c_compute_platform_\(sc8180xp-ad\)_\"poipu_lite\"qcm5430_firmware video_collaboration_vc3_platform_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\,_af\)_\"poipu_pro\"_firmware qca6430_firmware snapdragon_8cx_compute_platform_\(sc8180x-aa\,_ab\)_firmware wcd9385_firmware wsa8845 snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)fastconnect_6200 wcd9340_firmware wcn3660b wsa8815 wsa8845_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\,_af\)_\"poipu_pro\"wcn3660b_firmware snapdragon_429_mobile_platform_firmware sc8380xp fastconnect_6200_firmware wsa8845h_firmware wcd9375_firmware qca6391 qca6420 snapdragon_429_mobile_platform fastconnect_7800 snapdragon_7c_compute_platform_firmware aqt1000_firmware qcs6490 qcm6490_firmware wsa8840_firmware snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\,_ab\)fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware snapdragon_8cx_compute_platform_\(sc8180xp-ac\,_af\)_\"poipu_pro\"_firmware qca6430 sm6250 wcd9340 fastconnect_6700_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware wsa8810 wsa8845h qcm5430 qcs5430 wcd9385 wcd9341 snapdragon_8c_compute_platform_\(sc8180x-ad\)_\"poipu_lite\"_firmware snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"qcs6490_firmware qcs5430_firmware qca6391_firmware wcd9375 wcd9370_firmware aqt1000 snapdragon_8c_compute_platform_\(sc8180xp-ad\)_\"poipu_lite\"_firmware sm6250_firmware sc8180x\+sdx55_firmware wsa8830_firmware wcn3620_firmware snapdragon_7c\+_gen_3_compute_firmware wsa8815_firmware qcm6490 wsa8835_firmware wcn3620 snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)_firmware fastconnect_6800_firmware snapdragon_7c_compute_platform Snapdragon aqt1000_firmware wcd9380_firmware qcm6490_firmware wsa8840_firmware fastconnect_6900_firmware sc8380xp_firmware sdm429w_firmware fastconnect_6700_firmware wsa8810_firmware wcd9341_firmware fastconnect_7800_firmware qca6420_firmware qcm5430_firmware qca6430_firmware qcs6490_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware qca6391_firmware wcd9385_firmware wcd9370_firmware wcd9340_firmware sm6250_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware wsa8815_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_6200_firmware wcd9375_firmware wsa8845h_firmware fastconnect_6800_firmware

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CVE-2024-38407

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.29%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-16 Nov, 2024 | 04:55

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.

CWE ID-CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CVE-2024-38412

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-6.6||MEDIUM

EPSS-0.02% / 4.42%

7 Day CHG~0.00%

Published-03 Feb, 2025 | 16:51

Updated-05 Feb, 2025 | 13:58

Use After Free in Computer Vision

Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.

Product-fastconnect_7800_firmware wsa8840 snapdragon_8_gen_3_mobile_firmware wsa8845_firmware wsa8845h_firmware wsa8845 snapdragon_8_gen_3_mobile wcd9395_firmware wcd9390 wsa8840_firmware wsa8845h wcd9395 fastconnect_7800 wcd9390_firmware Snapdragon

CWE ID-CWE-416

Use After Free

CVE-2024-38422

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.64%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-07 Nov, 2024 | 19:45

Integer Overflow to Buffer Overflow in Audio

Memory corruption while processing voice packet with arbitrary data received from ADSP.

CWE ID-CWE-680

Integer Overflow to Buffer Overflow

CVE-2024-38410

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.64%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-16 Nov, 2024 | 04:55

Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

Product-fastconnect_7800 wsa8830 wcd9380_firmware sdm429w qcs6490 qcm6490_firmware wsa8840_firmware fastconnect_6900 fastconnect_6900_firmware sc8380xp_firmware qcc2073 wsa8840 wsa8835 sdm429w_firmware fastconnect_6700_firmware wcd9380 fastconnect_7800_firmware wsa8845h fastconnect_6700 video_collaboration_vc3_platform snapdragon_8cx_gen_3_compute_platform wcd9370 qcm5430 qcs5430 qcm5430_firmware wcd9385 video_collaboration_vc3_platform_firmware qcs6490_firmware qcc2076_firmware qcs5430_firmware wcd9385_firmware wsa8845 qcc2073_firmware wcd9375 wcd9370_firmware wcn3660b wsa8830_firmware qcc2076 wsa8845_firmware wcn3620_firmware qcm6490 wcn3660b_firmware wsa8835_firmware wcn3620 snapdragon_429_mobile_platform_firmware sc8380xp wsa8845h_firmware wcd9375_firmware snapdragon_429_mobile_platform snapdragon_8cx_gen_3_compute_platform_firmware Snapdragon qcm5430_firmware wcd9380_firmware qcs6490_firmware qcm6490_firmware qcc2076_firmware wsa8840_firmware qcs5430_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware fastconnect_6900_firmware qcc2073_firmware wcd9370_firmware sc8380xp_firmware wsa8830_firmware wsa8845_firmware wcn3620_firmware sdm429w_firmware fastconnect_6700_firmware wcn3660b_firmware wsa8835_firmware snapdragon_429_mobile_platform_firmware fastconnect_7800_firmware wcd9375_firmware wsa8845h_firmware

CWE ID-CWE-121

Stack-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-38421

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 7.64%

7 Day CHG~0.00%

Published-04 Nov, 2024 | 10:04

Updated-07 Nov, 2024 | 19:44

Use After Free in Graphics Linux

Memory corruption while processing GPU commands.

Product-qam8255p_firmware wsa8830 qam8650p qam8775p qamsrv1m wsa8840 wcn3950_firmware srv1l_firmware wcn6755_firmware qca6595au_firmware snapdragon_480_5g_mobile_platform video_collaboration_vc3_platform wcd9370 qcs6125_firmware snapdragon_480\+_5g_mobile_platform_firmware snapdragon_480_5g_mobile_platform_firmware qamsrv1h wcd9385_firmware qam8295p wcn7881_firmware wcn3950 fastconnect_6200 qamsrv1h_firmware qca6688aq qam8295p_firmware sa9000p_firmware snapdragon_695_5g_mobile_platform_firmware qca6574au_firmware sa7255p wsa8845h_firmware wcd9375_firmware snapdragon_8_gen_3_mobile_platform qca6595au wcn7860 snapdragon_w5\+_gen_1_wearable_platform_firmware sa8620p_firmware sa6155p_firmware wcn7881 qca6678aq_firmware sa8775p_firmware qcs6490 wsa8840_firmware qca6698aq sm4635 qcs6125 video_collaboration_vc5_platform sm8635 wcn3988_firmware wcn7880_firmware srv1h sa7775p_firmware sa8195p wsa8810_firmware sw5100 wsa8845h wcn6755 wcd9395_firmware sa8255p_firmware sm8750p_firmware sm8750_firmware sa6155p qcs7230 qca6698aq_firmware sa7775p qam8620p wcd9385 sa8770p_firmware sa8255p qam8775p_firmware qca6696_firmware qcs6490_firmware qca6797aq wcd9375 wcd9390 wsa8830_firmware wsa8815_firmware wcn3988 wsa8835_firmware sa8195p_firmware video_collaboration_vc5_platform_firmware sa8295p_firmware wcn7880 sa8770p qcm6125_firmware qca6688aq_firmware sm4635_firmware sw5100p wcd9378_firmware snapdragon_w5\+_gen_1_wearable_platform qca6595 qcs7230_firmware wsa8835 qca6574 snapdragon_4_gen_1_mobile_platform_firmware sm8635_firmware qca6574a video_collaboration_vc3_platform_firmware wcn3980 wsa8845 sa8650p sa9000p qca6574_firmware wsa8815 wsa8845_firmware snapdragon_4_gen_1_mobile_platform qcs8250 sm8750p sa8775p qca6574a_firmware fastconnect_6200_firmware wcn3980_firmware qca6391 sa8295p fastconnect_7800 qca6678aq wcn7861_firmware wsa8832_firmware sa8650p_firmware srv1h_firmware video_collaboration_vc1_platform_firmware qca6797aq_firmware qca6574au sa8155p_firmware srv1l sa7255p_firmware qcs8250_firmware qcm6125 wsa8810 sa8620p wsa8832 fastconnect_7800_firmware sw5100p_firmware srv1m_firmware qamsrv1m_firmware sm8750 qam8650p_firmware wcn7860_firmware qca6595_firmware wcn7861 wcd9395 qca6696 qca6391_firmware wcd9370_firmware wcd9390_firmware snapdragon_8_gen_3_mobile_platform_firmware sa8155p snapdragon_695_5g_mobile_platform video_collaboration_vc1_platform srv1m sw5100_firmware qam8620p_firmware wcd9378 qam8255p snapdragon_480\+_5g_mobile_platform Snapdragon qam8255p_firmware qualcomm_video_collaboration_vc1_platform_firmware sm4635_firmware wcd9378_firmware qcs7230_firmware wcn3950_firmware srv1l_firmware wcn6755_firmware qca6595au_firmware snapdragon_4_gen_1_mobile_platform_firmware sm8635_firmware qcs6125_firmware snapdragon_480_5g_mobile_platform_firmware qualcomm_video_collaboration_vc3_platform_firmware wcd9385_firmware wcn7881_firmware qamsrv1h_firmware qca6574_firmware wsa8845_firmware qam8295p_firmware sa9000p_firmware qca6574a_firmware fastconnect_6200_firmware qca6574au_firmware snapdragon_695_5g_mobile_platform_firmware wcd9375_firmware wsa8845h_firmware wcn3980_firmware sa8620p_firmware sa6155p_firmware qca6678aq_firmware sa8775p_firmware wcn7861_firmware sa8650p_firmware wsa8832_firmware wsa8840_firmware srv1h_firmware qca6797aq_firmware wcn3988_firmware wcn7880_firmware sa8155p_firmware sa7775p_firmware sa7255p_firmware wsa8810_firmware qcs8250_firmware fastconnect_7800_firmware wcd9395_firmware sa8255p_firmware sm8750_firmware sm8750p_firmware sw5100p_firmware qca6698aq_firmware qamsrv1m_firmware srv1m_firmware qam8650p_firmware sa8770p_firmware qam8775p_firmware qca6696_firmware qca6595_firmware qcs6490_firmware wcn7860_firmware qca6391_firmware wcd9370_firmware qualcomm_video_collaboration_vc5_platform_firmware snapdragon_8_gen_3_mobile_platform_firmware wcd9390_firmware wsa8830_firmware wsa8815_firmware wsa8835_firmware sa8195p_firmware sw5100_firmware qam8620p_firmware sa8295p_firmware qca6688aq_firmware qcm6125_firmware

CWE ID-CWE-416

Use After Free

CVE-2023-28574

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-9||CRITICAL

EPSS-0.04% / 13.20%

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-02 Aug, 2024 | 13:43

Improper Input Validation in Core

Memory corruption in core services when Diag handler receives a command to configure event listeners.

Product-qam8255p_firmware wsa8830 sxr2230p_firmware qca8337 qam8650p qfw7124 sg8275p_firmware wcn785x-5 qam8775p qru1052 qcn6224_firmware wsa8840 wcn3950_firmware qca6595au_firmware snapdragon_x70_modem-rf_system wcd9370 ssg2115p qdu1110 wcn685x-1 wcn3990_firmware snapdragon_8_gen_2_mobile_platform qamsrv1h wcd9385_firmware wcn3950 qcn6024_firmware qamsrv1h_firmware sa9000p_firmware qca6320_firmware snapdragon_835_mobile_pc_platform_firmware snapdragon_4_gen_2_mobile_platform qca6595au qca8081_firmware wsa8845h_firmware qfw7114 qca6310 snapdragon_x65_5g_modem-rf_system_firmware qcm8550_firmware snapdragon_x70_modem-rf_system_firmware wsa8840_firmware qca6698aq qcs8550_firmware sc8380xp_firmware wcn3988_firmware qru1062_firmware srv1h wcd9340 wsa8810_firmware qcn6224 wsa8845h snapdragon_ar2_gen_1_platform_firmware sa8255p_firmware snapdragon_x75_5g_modem-rf_system wcd9335 qdu1000_firmware qca8081 wcd9395_firmware qca6698aq_firmware qcm4490 wcn685x-1_firmware wcd9385 wcd9341 qam8775p_firmware sa8255p qca6696_firmware qca6797aq ar8035 qru1052_firmware wcd9390 qcc710_firmware wsa8830_firmware wcn3988 wsa8815_firmware wsa8835_firmware wcn6750_firmware snapdragon_8_gen_2_mobile_platform_firmware wcn785x-1 qca8337_firmware wcd9380_firmware ssg2125p wcn3990 qca6595 qru1032 qcm8550 snapdragon_835_mobile_pc_platform qdu1010_firmware qdx1011 qdu1000 wsa8835 sxr1230p_firmware qdu1110_firmware snapdragon_8\+_gen_2_mobile_platform_firmware qcn6274 wcd9380 snapdragon_4_gen_2_mobile_platform_firmware ssg2125p_firmware wcn685x-5_firmware sxr1230p sg8275p qca6310_firmware wcn6750 wcd9335_firmware qfw7114_firmware qru1062 wsa8845 sa8650p sa9000p wcd9340_firmware wsa8815 sxr2230p qca6320 qru1032_firmware wsa8845_firmware sc8380xp sd835 qcn9024 wcn785x-5_firmware qcm4490_firmware qcn6274_firmware qcs4490_firmware snapdragon_x65_5g_modem-rf_system sa8650p_firmware wsa8832_firmware snapdragon_x75_5g_modem-rf_system_firmware srv1h_firmware wcn685x-5 qca6797aq_firmware qdu1010 wcn785x-1_firmware qdx1011_firmware qcn9024_firmware wcd9341_firmware snapdragon_8\+_gen_2_mobile_platform wsa8810 wsa8832 qdx1010_firmware sm8550p snapdragon_ar2_gen_1_platform sd835_firmware qam8650p_firmware qcc710 qcs4490 qca6595_firmware wcd9395 qca6696 qcs8550 wcd9370_firmware sm8550p_firmware qdx1010 wcd9390_firmware qcn6024 qdu1210 ssg2115p_firmware qfw7124_firmware qam8255p qdu1210_firmware ar8035_firmware Snapdragon

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28550

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.88%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance

Memory corruption in MPP performance while accessing DSM watermark using external memory address.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28565

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.49%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:01

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command streams through WMI interfaces.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28551

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.88%

7 Day CHG~0.00%

Published-05 Dec, 2023 | 03:03

Updated-11 Aug, 2025 | 15:06

Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS

Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28548

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 4.65%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:02

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.

CWE ID-CWE-129

Improper Validation of Array Index

CVE-2023-28558

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 6.79%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-02 Aug, 2024 | 13:43

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN handler while processing PhyID in Tx status handler.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28567

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 16.49%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 06:24

Updated-27 Feb, 2025 | 21:01

Improper Validation of Array Index in WLAN HAL

Memory corruption in WLAN HAL while handling command through WMI interfaces.

CWE ID-CWE-129

Improper Validation of Array Index

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-28542

Matching Score-8

Assigner-Qualcomm, Inc.

Matching Score-8

Assigner-Qualcomm, Inc.

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.96%

7 Day CHG~0.00%

Published-04 Jul, 2023 | 04:46

Updated-11 Aug, 2025 | 15:06

Buffer Over-read in WLAN HOST

Memory Corruption in WLAN HOST while fetching TX status information.