Skip to contentQualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 moreBuffer overflow can occur due to improper validation of NDP application information length in...CVE-2022-22072Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreu'Information exposure issues while processing IE header due to improper check of beacon IE frame...CVE-2020-11118Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +47 more +49 moreu'Possible out of bound write while processing association response received from host due to...CVE-2020-11116Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +46 more +48 moreu'Buffer over read occurs while processing information element from beacon due to lack of check...CVE-2020-11115Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 morePossible out of bound access while processing assoc response from host due to improper length...CVE-2020-3699Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreOut of bound write while QoS DSCP mapping due to improper input validation for data received from...CVE-2020-3698Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +35 more +37 morePossibility of double free of the drawobj that is added to the drawqueue array of the context...CVE-2020-36107.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +38 more +40 moreActive command timeout since WM status change cmd is not removed from active queue if peer sends...CVE-2020-36517.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +29 more +31 moreMissing length check before copying the data from kernel space to userspace through the copy...CVE-2019-105567.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +30 more +32 moreWhen issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under...CVE-2019-105477.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +16 more +18 moreUse after free issue occurs If the real device interface goes down and a route lookup is...CVE-2019-106037.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +28 more +30 moreOut of bound write in WLAN driver due to NULL character not properly placed after SSID name in...CVE-2019-105269.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, mdm9640 firmware +4 more +6 morePossible double free issue in WLAN due to lack of checking memory free condition. in Snapdragon...CVE-2018-118387.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8017 firmware, apq8053 firmware +19 more +21 moreStage-2 fault will occur while writing to an ION system allocation which has been assigned to non...CVE-2019-140497.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm qcs605 firmware, sdm439 firmware +1 more +3 moreOut of bound access while allocating memory for an array in camera due to improper validation of...CVE-2019-140467.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 moreWhile transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data...CVE-2019-105587.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8017 firmware, apq8053 firmware +35 more +37 moreImproper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon...CVE-2019-22747.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +24 more +26 morePossible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of...CVE-2019-105647.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +45 more +47 morePotential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from...CVE-2019-105367.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +39 more +41 moreSnapshot of IB can lead to invalid address access due to missing check for size in the related...CVE-2019-105717.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +38 more +40 moreBuffer overflow can occur due to usage of wrong datatype and missing length check before copying...CVE-2019-105557.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8017 firmware, apq8053 firmware +24 more +26 moreBuffer overflow can occur in wlan module if supported rates or extended rates element length is...CVE-2019-105667.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8096au firmware +11 more +13 moreImproper validation for loop variable received from firmware can lead to out of bound access in...CVE-2019-105355.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, mdm9206 firmware +11 more +13 moreDouble free issue can happen when sensor power settings is freed by some thread while another...CVE-2019-105659.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq8074 firmware, mdm9206 firmware +47 more +49 morePossible buffer overflow issue due to lack of length check when parsing the extended cap IE...CVE-2019-105399.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9206 firmware, mdm9607 firmware +28 more +30 moreMetadata verification and partial hash system calls by bootloader may corrupt parallel hashing...CVE-2018-139097.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreOut-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon...CVE-2018-138989.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +23 more +25 moreImproper authentication in locked memory region can lead to unprivilged access to the memory in...CVE-2018-120137.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +19 more +21 moreWhile updating blacklisting region shared buffered memory region is not validated against newly...CVE-2018-120127.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9206 firmware, mdm9607 firmware +23 more +25 moreSecure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute...CVE-2018-120045.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm mdm9150 firmware, mdm9206 firmware +34 more +36 moreImproper buffer length validation in WLAN function can lead to a potential integer oveflow issue...CVE-2018-119247.8 High