Qualcomm Ar6003 vulnerabilities

• qualcomm 9206 lte modem firmware, apq8016 firmware, apq8017 firmware +12 more +14 more Use After Free in Video CVE-2018-11816 7.8 HighNovember 26, 2024
• qualcomm 9206 lte modem firmware, apq8017 firmware, ar6003 firmware +3 more +5 more Use After Free in WLAN CVE-2017-18153 6.8 MediumNovember 26, 2024
• qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +242 more +244 more Improper Authentication in Multi-Mode Call Processor CVE-2023-43551 9.1 CriticalJune 3, 2024
• qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +317 more +319 more Use of Out-of-range Pointer Offset in Audio CVE-2023-33066 8.4 HighMarch 4, 2024
• qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +261 more +263 more Integer Overflow to Buffer Overflow in User Identity Module CVE-2023-33018 7.8 HighDecember 5, 2023
• qualcomm 315 5g iot modem firmware, 9206 lte modem firmware, 9207 lte modem firmware +236 more +238 more Buffer Over-read in Data Modem CVE-2023-24849 8.2 HighOctober 3, 2023
• qualcomm 315 5g iot modem firmware, 9206 lte modem firmware, 9207 lte modem firmware +242 more +244 more Buffer Over-read in Data Modem CVE-2023-24848 8.2 HighOctober 3, 2023
• qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +240 more +242 more Improper authorization in Modem CVE-2022-40521 7.5 HighJune 6, 2023
• qualcomm 315 5g iot modem firmware, 8953pro firmware, 9207 lte modem firmware +271 more +273 more Stack-based buffer overflow in Modem CVE-2022-33264 7.9 HighJune 6, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +223 more +225 more Improper validation of array index in User Identity Module CVE-2022-33302 6.8 MediumApril 4, 2023
• qualcomm 315 5g iot modem firmware, 7wcn785x-1 firmware, 8905 firmware +269 more +271 more Improper validation of array index in Modem CVE-2022-33289 6.8 MediumApril 4, 2023
• qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +207 more +209 more Memory Corruption in MODEM CVE-2022-33213 7.5 HighMarch 7, 2023
• qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +206 more +208 more Use of Out-of-range Pointer Offset in MODEM CVE-2022-25694 8.4 HighMarch 7, 2023
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +202 more +204 more Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command... CVE-2022-25682 8.4 HighDecember 13, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +183 more +185 more Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon... CVE-2022-25720 Fix available 9.8 CriticalOctober 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +145 more +147 more Improper authorization of a replayed LTE security mode command can lead to a denial of service in... CVE-2021-30344 7.5 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon mobile, qualcomm apq8096au firmware, ar6003 firmware +26 more +28 more Improper handling of multiple session supported by PVM backend can lead to use after free in... CVE-2021-35115 8.4 HighApril 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm ar6003 firmware, ar8035 firmware +74 more +76 more Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto,... CVE-2021-30293 7.5 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8096au firmware +72 more +74 more Possible assertion due to improper handling of IPV6 packet with invalid length in destination... CVE-2021-30273 7.5 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +153 more +155 more Possible null pointer dereference in thread profile trap handler due to lack of thread ID... CVE-2021-30270 7.3 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +135 more +137 more Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ... CVE-2021-30268 7.8 HighJanuary 3, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 more Possible information exposure and denial of service due to NAS not dropping messages when... CVE-2021-30284 7.5 HighNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +178 more +180 more Possible heap overflow due to improper length check of domain while parsing the DNS response in... CVE-2021-1975 9.8 CriticalNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 more A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto,... CVE-2021-1973 7.8 HighNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 more Possible integer and heap overflow due to lack of input command size validation while handling... CVE-2021-30261 8.4 HighSeptember 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +169 more +171 more Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto,... CVE-2021-1920 9.8 CriticalSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 more Possible buffer underflow due to lack of check for negative indices values when processing user... CVE-2021-1916 9.8 CriticalSeptember 8, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +275 more +277 more Possible buffer overflow due to improper validation of device types during P2P search in... CVE-2021-1972 Fix available 9.8 CriticalAugust 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +176 more +178 more Denial of service in SAP case due to improper handling of connections when association is... CVE-2021-1955 Fix available 7.5 HighJuly 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +175 more +177 more Possible buffer overflow in voice service due to lack of input validation of parameters in QMI... CVE-2020-11292 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 more Memory corruption while processing crafted SDES packets due to improper length check in sdes... CVE-2020-11279 7.5 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon mobile, qualcomm apq8009, apq8016 +84 more +86 more Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can... CVE-2020-11268 7.5 HighMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer... CVE-2020-11251 8.2 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +474 more +476 more Out of bound read occurs while processing crafted SDP due to lack of check of null string in... CVE-2020-11191 8.2 HighApril 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +383 more +385 more Buffer over-read can happen while parsing received SDP values due to lack of NULL termination... CVE-2020-11171 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 more Potential out of bound read exception when UE receives unusually large number of padding octets... CVE-2020-11166 9.1 CriticalMarch 17, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +405 more +407 more User can overwrite Security Code NV item without knowing current SPC due to improper validation... CVE-2020-11177 8.8 HighFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +503 more +505 more Out of bound memory access while playing music playbacks with crafted vorbis content due to... CVE-2020-11170 9.8 CriticalFebruary 22, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009, apq8009w +423 more +425 more Improper access control when using mmap with the kgsl driver with a special offset value that can... CVE-2020-11282 Fix available 7.8 HighFebruary 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 more Possible out of bound memory access in audio due to integer underflow while processing modified... CVE-2020-3691 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +490 more +492 more Possible memory out of bound issue during music playback when an incorrect bit stream content is... CVE-2020-3686 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 more Pointer variable which is freed is not cleared can result in memory corruption and leads to... CVE-2020-3685 7.5 HighJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009, apq8009w +411 more +413 more Divide by zero issue can happen while updating delta extension header due to improper validation... CVE-2020-11145 7.5 HighJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009, apq8009w +412 more +414 more Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check... CVE-2020-11144 9.1 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8017 +492 more +494 more Out of bound memory access during music playback with modified content due to copying data... CVE-2020-11143 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +489 more +491 more Uninitialized pointers accessed during music play back with incorrect bit stream due to an... CVE-2020-11138 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +489 more +491 more Integer multiplication overflow resulting in lower buffer size allocation than expected causes... CVE-2020-11137 9.8 CriticalJanuary 21, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 more Buffer Over-read in audio driver while using malloc management function due to not returning NULL... CVE-2020-11136 9.8 CriticalJanuary 21, 2021