Skip to content
Qualcomm Mdm8215 vulnerabilities
-
qualcomm 315 5g iot firmware, 315 5g iot modem firmware, 9206 lte firmware +343 more +345 more
Buffer Over-read in WLAN Firmware
CVE-2024-33051
7.5 High
-
qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +317 more +319 more
Use of Out-of-range Pointer Offset in Audio
CVE-2023-33066
8.4 High
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +364 more +366 more
Buffer over-read in WLAN Firmware
CVE-2023-33080
7.5 High
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +261 more +263 more
Integer Overflow to Buffer Overflow in User Identity Module
CVE-2023-33018
7.8 High
-
qualcomm 315 5g iot modem firmware, 9206 lte modem firmware, 9207 lte modem firmware +236 more +238 more
Buffer Over-read in Data Modem
CVE-2023-24849
8.2 High
-
qualcomm 315 5g iot modem firmware, 9206 lte modem firmware, 9207 lte modem firmware +242 more +244 more
Buffer Over-read in Data Modem
CVE-2023-24848
8.2 High
-
qualcomm 9205 lte firmware, apq8017 firmware, apq8064au firmware +292 more +294 more
Improper Validation of Array Index in WLAN HAL
CVE-2023-28565
7.8 High
-
qualcomm apq8017 firmware, apq8064au firmware, apq8076 firmware +281 more +283 more
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL
CVE-2023-21628
8.4 High
-
qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +240 more +242 more
Improper authorization in Modem
CVE-2022-40521
7.5 High
-
qualcomm 315 5g iot modem firmware, 8953pro firmware, 9207 lte modem firmware +271 more +273 more
Stack-based buffer overflow in Modem
CVE-2022-33264
7.9 High
-
qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +351 more +353 more
Integer overflow or wraparound in WLAN
CVE-2022-40532
8.4 High
-
qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +223 more +225 more
Improper validation of array index in User Identity Module
CVE-2022-33302
6.8 Medium
-
qualcomm 315 5g iot modem firmware, 7wcn785x-1 firmware, 8905 firmware +269 more +271 more
Improper validation of array index in Modem
CVE-2022-33289
6.8 Medium
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +207 more +209 more
Memory Corruption in MODEM
CVE-2022-33213
7.5 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +206 more +208 more
Use of Out-of-range Pointer Offset in MODEM
CVE-2022-25694
8.4 High
-
qualcomm apq8009 firmware, apq8017 firmware, apq8076 firmware +236 more +238 more
Buffer copy without checking the size of input in WLAN HAL.
CVE-2022-25655
8.4 High
-
qualcomm apq8009 firmware, apq8017 firmware, apq8064au firmware +293 more +295 more
Buffer over-read in WLAN Firmware.
CVE-2022-40512
7.5 High
-
qualcomm apq8009 firmware, apq8017 firmware, apq8064au firmware +279 more +281 more
Buffer over-read in WLAN
CVE-2022-33286
7.5 High
-
qualcomm apq8009 firmware, apq8017 firmware, apq8064au firmware +276 more +278 more
Buffer over-read in WLAN
CVE-2022-33285
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +282 more +284 more
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming...
CVE-2022-33238
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +202 more +204 more
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command...
CVE-2022-25682
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +232 more +234 more
Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6...
CVE-2022-33239
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +274 more +276 more
Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in...
CVE-2022-25749
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +271 more +273 more
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in...
CVE-2022-25748
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +241 more +243 more
Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in...
CVE-2022-25736
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +140 more +142 more
Cryptographic issue in WLAN due to improper check on return value while authentication handshake...
CVE-2022-25718
9.1 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +183 more +185 more
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon...
CVE-2022-25720
Fix available
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon mobile, qualcomm apq8096au firmware, ar6003 firmware +26 more +28 more
Improper handling of multiple session supported by PVM backend can lead to use after free in...
CVE-2021-35115
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +153 more +155 more
Possible null pointer dereference in thread profile trap handler due to lack of thread ID...
CVE-2021-30270
7.3 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +135 more +137 more
Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ...
CVE-2021-30268
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 more
Possible information exposure and denial of service due to NAS not dropping messages when...
CVE-2021-30284
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +178 more +180 more
Possible heap overflow due to improper length check of domain while parsing the DNS response in...
CVE-2021-1975
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 more
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto,...
CVE-2021-1973
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +89 more +91 more
Accepting AMSDU frames with mismatched destination and source address can lead to information...
CVE-2020-11303
8.6 High
-
qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 more
Possible integer and heap overflow due to lack of input command size validation while handling...
CVE-2021-30261
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +256 more +258 more
Possible Integer overflow to buffer overflow issue can occur due to improper validation of input...
CVE-2021-30260
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +169 more +171 more
Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto,...
CVE-2021-1920
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 more
Possible buffer underflow due to lack of check for negative indices values when processing user...
CVE-2021-1916
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +265 more +267 more
Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead...
CVE-2020-11301
Fix available
EPSS 11.1%
9.1 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +275 more +277 more
Possible buffer overflow due to improper validation of device types during P2P search in...
CVE-2021-1972
Fix available
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +176 more +178 more
Denial of service in SAP case due to improper handling of connections when association is...
CVE-2021-1955
Fix available
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +175 more +177 more
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI...
CVE-2020-11292
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 more
Buffer overflow might occur while parsing unified command due to lack of check of input data...
CVE-2020-11235
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +501 more +503 more
Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE...
CVE-2020-11159
9.1 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 more
Memory corruption while processing crafted SDES packets due to improper length check in sdes...
CVE-2020-11279
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon mobile, qualcomm apq8009, apq8016 +84 more +86 more
Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can...
CVE-2020-11268
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 more
Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer...
CVE-2020-11251
8.2 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +474 more +476 more
Out of bound read occurs while processing crafted SDP due to lack of check of null string in...
CVE-2020-11191
8.2 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +406 more +408 more
Potential out of bound read exception when UE receives unusually large number of padding octets...
CVE-2020-11166
9.1 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +530 more +532 more
Arithmetic overflow can happen while processing NOA IE due to improper error handling in...
CVE-2020-11296
7.5 High
- Show olderLoading…