Skip to contentQualcomm Apq8098 Firmware vulnerabilities
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreImproper Validation of Syntactic Correctness of Input in DisplayCVE-2026-24091Fix available7.2 High
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreStack-based Buffer Overflow in DisplayCVE-2026-24085Fix available7.2 High
- qualcomm 5g fixed wireless access platform firmware, 9206 lte modem firmware, 9207 lte modem firmware +204 more +206 moreMissing Cryptographic Step in Data ModemCVE-2025-473837.2 High
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +236 more +238 moreInteger Overflow or Wraparound in GraphicsCVE-2026-21385In KEVPublic exploitFix available7.8 High
- qualcomm, inc. snapdragon mobile, snapdragon compute, snapdragon auto, snapdragon iot, snapdragon connectivity, snapdragon voice & music, qualcomm apq8097 firmware, apq8098 firmware +77 more +79 moreBuffer overflow in sahara protocol while processing commands leads to overwrite of secure...CVE-2021-30327Public exploit7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8052 firmware, apq8056 firmware +60 more +62 moreu'Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length'...CVE-2020-112077.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, msm8998 firmware +52 more +54 moreu'Possible buffer overflow in Fastrpc while handling received parameters due to lack of...CVE-2020-112067.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 moreu'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number...CVE-2020-111969.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 moreu'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned...CVE-2020-111939.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +59 more +61 moreu'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to...CVE-2020-111689.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +79 more +81 moreu'Buffer over read in boot due to size check ignored before copying GUID attribute from request...CVE-2020-111327.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +113 more +115 moreu'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to...CVE-2020-111235.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +21 more +23 moreu'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule...CVE-2020-36967.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +15 more +17 moreu'Use out of range pointer issue can occur due to incorrect buffer range check during the...CVE-2020-36937.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +43 more +45 moreu'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents...CVE-2020-36847.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +38 more +40 moreu'Buffer overflow can happen as part of SIP message packet processing while storing values in...CVE-2020-36739.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +51 more +53 moreu'Potential out of bounds read while processing downlink NAS transport message due to improper...CVE-2020-36709.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 moreu'Remote code execution can happen by sending a carefully crafted POST query when Device...CVE-2020-3657EPSS 26.6%9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +39 more +41 moreu'Buffer overflow occurs while processing SIP message packet due to lack of check of index...CVE-2020-36549.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8096au firmware +28 more +30 moreu'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue...CVE-2020-111647.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +49 more +51 moreu'Array index underflow issue in adsp driver due to improper check of channel id before used as...CVE-2020-11174Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +48 more +50 moreu'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport...CVE-2020-36349.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, kamorta firmware +25 more +27 moreu'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon...CVE-2020-111357.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq5018 firmware +28 more +30 moreu'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset'...CVE-2020-36699.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq5018 firmware +28 more +30 moreu'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating...CVE-2020-36679.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 moreu'Out of bounds memory access during memory copy while processing Host command' in Snapdragon...CVE-2020-36667.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +40 more +42 moreu'Information disclosure issue occurs as in current logic Secure Touch session is released...CVE-2020-36445.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 moreu'Information disclosure issue can occur due to partial secure display-touch session tear-down'...CVE-2020-36435.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +59 more +61 moreu'A potential buffer overflow exists due to integer overflow when parsing handler options due to...CVE-2020-36247.8 High
- qualcomm apq8009, apq8017, apq8053 +128 more +130 moreu'Channel name string which has been read from shared memory is potentially subjected to string...CVE-2020-36227.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 moreu'Lack of check to ensure that the TX read index & RX write index that are read from shared...CVE-2020-36215.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 moreu'Lack of check of integer overflow while doing a round up operation for data read from shared...CVE-2020-36205.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 moreu'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to...CVE-2020-36197.0 High
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, kamorta firmware +13 more +15 moreu'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access...CVE-2020-36117.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +38 more +40 moreu'Possible out of bound access while copying the mask file content into the buffer without...CVE-2020-111287.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon mobile, qualcomm apq8098 firmware, bitra firmware +8 more +10 moreu'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary...CVE-2020-111225.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreu'Information disclosure issue occurs as in current logic as secure touch is released without...CVE-2019-141155.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +68 more +70 moreu'Heap overflow in diag command handler due to lack of check of packet length received from user'...CVE-2019-140747.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +35 more +37 moreu'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in...CVE-2019-140657.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 moreu'Accessing an uninitialized data structure could result in partially copying of contents and...CVE-2019-140529.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +62 more +64 moreu'Lack of check for integer overflow for round up and addition operations result into memory...CVE-2019-139997.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 moreu'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less...CVE-2019-139987.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 moreu'Lack of integer overflow check for addition of fragment size and remaining size that are read...CVE-2019-139957.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 moreu'Lack of check that the current received data fragment size of a particular packet that are read...CVE-2019-139947.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, bitra firmware +34 more +36 moreu'Memory can be potentially corrupted if random index is allowed to manipulate TLB entries in...CVE-2019-106287.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 moreu'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of...CVE-2019-106157.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +67 more +69 moreu'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access...CVE-2019-10527Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8096au firmware, apq8098 firmware +20 more +22 moreu'Calling thread may free the data buffer pointer that was passed to the callback and later when...CVE-2020-11120Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +52 more +54 moreu'Information exposure issues while processing IE header due to improper check of beacon IE frame...CVE-2020-11118Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +47 more +49 moreu'Possible out of bound write while processing association response received from host due to...CVE-2020-11116Fix available9.8 Critical
- Show olderLoading…