Skip to contentQualcomm Msm8996 vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +178 more +180 morePossible heap overflow due to improper length check of domain while parsing the DNS response in...CVE-2021-19759.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 moreA FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto,...CVE-2021-19737.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 moreInformation disclosure through timing and power side-channels during mod exponentiation for RSA...CVE-2021-19249.0 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +84 more +86 morePossible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in...CVE-2021-303107.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +87 more +89 morePossible out of bound read due to improper validation of packet length while handling data...CVE-2021-302978.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +89 more +91 morePossible memory corruption due to lack of validation of client data used for memory allocation in...CVE-2021-302928.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +88 more +90 morePossible memory corruption due to lack of validation of client data used for memory allocation in...CVE-2021-302918.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +194 more +196 morePossible stack overflow due to improper length check of TLV while copying the TLV to a local...CVE-2021-302888.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +95 more +97 morePossible buffer overflow due to improper size calculation of payload received in VR service in...CVE-2021-302588.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +93 more +95 morePossible buffer over read due to lack of data length check in QVR Service configuration in...CVE-2021-19858.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +93 more +95 morePossible buffer overflow due to improper validation of index value while processing the plugin...CVE-2021-19848.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +93 more +95 morePossible buffer overflow due to improper handling of negative data length while processing write...CVE-2021-19838.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 morePossible memory corruption due to lack of bound check of input index in Snapdragon Auto,...CVE-2021-19597.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +137 more +139 morePossible integer overflow due to improper check of batch count value while sanitizer is enabled...CVE-2021-19498.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +120 more +122 moreNull pointer dereference can occur due to lack of null check for user provided input in...CVE-2021-19367.5 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +89 more +91 moreAccepting AMSDU frames with mismatched destination and source address can lead to information...CVE-2020-113038.6 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +217 more +219 morePossible buffer over read due to lack of length check while parsing beacon IE response in...CVE-2021-1980Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +126 more +128 morePossible buffer over read due to improper validation of frame length while processing AEAD...CVE-2021-1977Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 morePossible integer and heap overflow due to lack of input command size validation while handling...CVE-2021-302618.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +256 more +258 morePossible Integer overflow to buffer overflow issue can occur due to improper validation of input...CVE-2021-302608.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +174 more +176 morePossible null pointer dereference due to lack of validation check for passed pointer during key...CVE-2021-19357.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +325 more +327 moreBuffer overflow occurs in trusted applications due to lack of length check of parameters in...CVE-2021-19097.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8096au firmware, aqt1000 firmware +91 more +93 moreLack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto,...CVE-2021-19296.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +169 more +171 moreInteger underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto,...CVE-2021-19209.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 moreInteger underflow can occur when the RTCP length is lesser than than the actual blocks present in...CVE-2021-19199.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 morePossible buffer underflow due to lack of check for negative indices values when processing user...CVE-2021-19169.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 moreLoop with unreachable exit condition may occur due to improper handling of unsupported input in...CVE-2021-19147.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +265 more +267 moreImproper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead...CVE-2020-11301Fix availableEPSS 11.1%9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8064au firmware +124 more +126 moreImproper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to...CVE-2020-11264Fix availableEPSS 13.2%9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8096au firmware +110 more +112 morePossible use-after-free due to lack of validation for the rule count in filter table in IPA...CVE-2021-1963Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +111 more +113 morePossible buffer overflow due to lack of offset length check while updating the buffer value in...CVE-2021-1961Public exploitFix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +216 more +218 morePossible out of bound read due to lack of length check of data while parsing the beacon or probe...CVE-2021-1948Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064au firmware, apq8096au firmware +213 more +215 morePossible buffer over read issue due to improper length check on WPA IE string sent by peer in...CVE-2021-1941Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +245 more +247 moreA use after free can occur due to improper validation of P2P device address in PD Request frame...CVE-2021-1976Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +275 more +277 morePossible buffer overflow due to improper validation of device types during P2P search in...CVE-2021-1972Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +173 more +175 moreChild process can leak information from parent process due to numeric pids are getting compared...CVE-2021-1904Fix available6.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 moreImproper length check of public exponent in RSA import key function could cause memory corruption...CVE-2021-18908.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 morePossible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto,...CVE-2021-18898.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +153 more +155 moreMemory corruption in key parsing and import function due to double freeing the same heap...CVE-2021-18888.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 moreIncorrect handling of pointers in trusted application key import mechanism could cause memory...CVE-2021-18868.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +119 more +121 moreBuffer overflow in modem due to improper array index check before copying into it in Snapdragon...CVE-2020-113079.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +176 more +178 moreDenial of service in SAP case due to improper handling of connections when association is...CVE-2021-1955Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +204 more +206 morePossible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto,...CVE-2021-1945Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +88 more +90 morePossible use after free in Display due to race condition while creating an external display in...CVE-2021-19008.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +175 more +177 morePossible buffer overflow in voice service due to lack of input validation of parameters in QMI...CVE-2020-112927.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +424 more +426 moreOut of bound read will happen if EAPOL Key length is less than expected while processing NAN...CVE-2020-112417.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 moreBuffer overflow might occur while parsing unified command due to lack of check of input data...CVE-2020-112357.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8064au firmware +224 more +226 moreOut-of-bounds memory access can occur while calculating alignment requirements for a negative...CVE-2020-111617.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +501 more +503 moreBuffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE...CVE-2020-111599.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +269 more +271 moreStack out-of-bounds write occurs while setting up a cipher device if the provided IV length...CVE-2020-11267Fix available8.4 High
- Show moreLoading…