Skip to content
Qualcomm Msm8952 vulnerabilities
-
qualcomm mdm9207 firmware, mdm9645 firmware, mdm9655 firmware +6 more +8 more
Write-what-where Condition in Primary Bootloader
CVE-2026-25262
Public exploit
6.9 Medium
-
qualcomm apq8009 firmware, apq8009w firmware, apq8052 firmware +157 more +159 more
Double free in Video
CVE-2022-40515
7.3 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +207 more +209 more
Memory Corruption in MODEM
CVE-2022-33213
7.5 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +199 more +201 more
Integer Overflow to Buffer Overflow in Modem
CVE-2022-25705
7.8 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +206 more +208 more
Use of Out-of-range Pointer Offset in MODEM
CVE-2022-25694
8.4 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +181 more +183 more
Information Exposure in Graphics
CVE-2022-22075
Fix available
6.2 Medium
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +199 more +201 more
Configuration weakness in modem
CVE-2022-33233
7.8 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8052 firmware +148 more +150 more
Integer Overflow to Buffer Overflow in Bluetooth HOST
CVE-2022-22088
Fix available
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 more
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK...
CVE-2022-25695
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +202 more +204 more
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command...
CVE-2022-25682
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +187 more +189 more
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon...
CVE-2022-25743
Fix available
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +199 more +201 more
Memory corruption in graphics due to buffer overflow while validating the user address in...
CVE-2022-25724
Fix available
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +116 more +118 more
Information disclosure in WLAN due to improper length check while processing authentication...
CVE-2022-25719
8.2 High
-
qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +140 more +142 more
Cryptographic issue in WLAN due to improper check on return value while authentication handshake...
CVE-2022-25718
9.1 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +179 more +181 more
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto,...
CVE-2022-25687
7.3 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +183 more +185 more
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon...
CVE-2022-25720
Fix available
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8052 firmware +108 more +110 more
Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto...
CVE-2022-25664
Fix available
6.2 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 more
Information disclosure through timing and power side-channels during mod exponentiation for RSA...
CVE-2021-1924
9.0 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +325 more +327 more
Buffer overflow occurs in trusted applications due to lack of length check of parameters in...
CVE-2021-1909
7.3 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +535 more +537 more
Possible memory corruption while processing EAPOL frames due to lack of validation of key length...
CVE-2020-11269
8.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +503 more +505 more
Out of bound memory access while playing music playbacks with crafted vorbis content due to...
CVE-2020-11170
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 more
Possible out of bound memory access in audio due to integer underflow while processing modified...
CVE-2020-3691
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +490 more +492 more
Possible memory out of bound issue during music playback when an incorrect bit stream content is...
CVE-2020-3686
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 more
Pointer variable which is freed is not cleared can result in memory corruption and leads to...
CVE-2020-3685
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +553 more +555 more
Out of bound reads might occur in while processing Service descriptor due to improper validation...
CVE-2020-11213
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w, apq8017 +158 more +160 more
Race condition in HAL layer while processing callback objects received from HIDL due to lack of...
CVE-2020-11152
6.4 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8017 +492 more +494 more
Out of bound memory access during music playback with modified content due to copying data...
CVE-2020-11143
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8017, apq8037 +447 more +449 more
Out of bound memory access during music playback with ALAC modified content due to improper...
CVE-2020-11140
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8017, apq8037 +410 more +412 more
Out of bound memory access while processing frames due to lack of check of invalid frames...
CVE-2020-11139
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +489 more +491 more
Uninitialized pointers accessed during music play back with incorrect bit stream due to an...
CVE-2020-11138
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +489 more +491 more
Integer multiplication overflow resulting in lower buffer size allocation than expected causes...
CVE-2020-11137
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009, apq8009w +504 more +506 more
Buffer Over-read in audio driver while using malloc management function due to not returning NULL...
CVE-2020-11136
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8052 firmware, apq8056 firmware +60 more +62 more
u'Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length'...
CVE-2020-11207
7.8 High
-
qualcomm, inc. snapdragon mobile, qualcomm mdm9640 firmware, mdm9650 firmware +5 more +7 more
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile...
CVE-2016-10442
9.8 Critical