Qualcomm Pm8937 vulnerabilities

• qualcomm 215 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +317 more +319 more Incorrect Calculation of Buffer Size in HLOS CVE-2025-27053 7.8 HighOctober 9, 2025
• qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +285 more +287 more Cryptographic Issues in Core CVE-2025-21482 7.1 HighSeptember 24, 2025
• qualcomm 215 mobile firmware, apq8017 firmware, apq8037 firmware +273 more +275 more NULL Pointer Dereference in SPS-HLOS CVE-2025-21433 6.2 MediumJuly 8, 2025
• qualcomm 205 mobile platform firmware, 215 mobile platform firmware, apq8017 firmware +89 more +91 more Improper Input Validation in Video Analytics and Processing CVE-2024-43052 7.8 HighDecember 2, 2024
• qualcomm 215 mobile platform firmware, apq8017 firmware, apq8037 firmware +240 more +242 more NULL Pointer Dereference in HLOS CVE-2024-23357 6.2 MediumAugust 5, 2024
• qualcomm 215 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +311 more +313 more Double Free in HLOS CVE-2024-21461 8.4 HighJuly 1, 2024
• qualcomm 215 mobile firmware, 315 5g iot firmware, 315 5g iot modem firmware +344 more +346 more Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications CVE-2023-33023 8.4 HighApril 1, 2024
• qualcomm 215 mobile firmware, 315 5g iot firmware, 315 5g iot modem firmware +360 more +362 more Buffer Copy Without Checking Size of Input in SPS Applications CVE-2023-28547 8.4 HighApril 1, 2024
• qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +317 more +319 more Use of Out-of-range Pointer Offset in Audio CVE-2023-33066 8.4 HighMarch 4, 2024
• qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +262 more +264 more Use of Out-of-range Pointer Offset in Audio CVE-2023-33033 8.4 HighJanuary 2, 2024
• qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +296 more +298 more Buffer Copy without Checking Size of Input in HLOS CVE-2023-33030 9.3 CriticalJanuary 2, 2024
• qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, apq8017 firmware +278 more +280 more Buffer Copy Without Checking Size of Input in SPS Applications CVE-2023-28546 7.8 HighDecember 5, 2023
• qualcomm apq5053-aa firmware, apq8017 firmware, apq8037 firmware +204 more +206 more Improper Validation of Array Index in HLOS CVE-2023-24850 7.8 HighOctober 3, 2023
• qualcomm apq8009 firmware, apq8017 firmware, apq8037 firmware +183 more +185 more Improper Authentication in HLOS. CVE-2023-21626 7.1 HighAugust 8, 2023
• qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +203 more +205 more Buffer copy without checking size of input in Audio. CVE-2022-40510 9.8 CriticalAugust 8, 2023
• qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +346 more +348 more Cryptographic issue in Core CVE-2022-22076 7.1 HighJune 6, 2023
• qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +351 more +353 more Integer overflow or wraparound in WLAN CVE-2022-40532 8.4 HighApril 4, 2023
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +116 more +118 more Information disclosure in WLAN due to improper length check while processing authentication... CVE-2022-25719 8.2 HighOctober 19, 2022
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +140 more +142 more Cryptographic issue in WLAN due to improper check on return value while authentication handshake... CVE-2022-25718 9.1 CriticalOctober 19, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +152 more +154 more Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon... CVE-2022-22074 8.4 HighSeptember 16, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 more Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto,... CVE-2022-25668 7.3 HighSeptember 2, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +152 more +154 more Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in... CVE-2022-25659 7.3 HighSeptember 2, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +197 more +199 more An out-of-bounds read can occur while parsing a server certificate due to improper length check... CVE-2022-22062 8.2 HighSeptember 2, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +166 more +168 more A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto,... CVE-2021-35135 6.2 MediumSeptember 2, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +124 more +126 more Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto,... CVE-2022-25670 Fix available 7.5 HighSeptember 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +77 more +79 more Memory corruption due to use after free issue in kernel while processing ION handles in... CVE-2022-22058 Fix available 8.4 HighJuly 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +111 more +113 more APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s... CVE-2021-35116 7.7 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 more memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in... CVE-2022-22087 7.3 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 more Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto,... CVE-2022-22085 8.4 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +151 more +153 more Memory corruption when extracting qcp audio file due to lack of check on data length in... CVE-2022-22084 8.4 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +149 more +151 more Denial of service due to memory corruption while extracting ape header from clips in Snapdragon... CVE-2022-22083 7.5 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +151 more +153 more Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel... CVE-2022-22082 8.4 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 more Buffer overflow can occur due to improper validation of NDP application information length in... CVE-2022-22072 Fix available 7.8 HighMay 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +160 more +162 more Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto... CVE-2022-22064 Fix available 7.5 HighMay 1, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 more Information disclosure through timing and power side-channels during mod exponentiation for RSA... CVE-2021-1924 9.0 CriticalNovember 12, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +120 more +122 more Null pointer dereference can occur due to lack of null check for user provided input in... CVE-2021-1936 7.5 HighOctober 20, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +174 more +176 more Possible null pointer dereference due to lack of validation check for passed pointer during key... CVE-2021-1935 7.1 HighSeptember 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +325 more +327 more Buffer overflow occurs in trusted applications due to lack of length check of parameters in... CVE-2021-1909 7.3 HighSeptember 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 more Improper length check of public exponent in RSA import key function could cause memory corruption... CVE-2021-1890 8.4 HighJuly 13, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 more Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto,... CVE-2021-1889 8.4 HighJuly 13, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +153 more +155 more Memory corruption in key parsing and import function due to double freeing the same heap... CVE-2021-1888 8.4 HighJuly 13, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 more Incorrect handling of pointers in trusted application key import mechanism could cause memory... CVE-2021-1886 8.4 HighJuly 13, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +119 more +121 more Buffer overflow in modem due to improper array index check before copying into it in Snapdragon... CVE-2020-11307 9.8 CriticalJuly 13, 2021
• qualcomm, inc. snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +234 more +236 more An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute,... CVE-2020-11260 8.4 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 more Buffer overflow might occur while parsing unified command due to lack of check of input data... CVE-2020-11235 7.8 HighJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +501 more +503 more Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE... CVE-2020-11159 9.1 CriticalJune 9, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +269 more +271 more Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length... CVE-2020-11267 Fix available 8.4 HighJune 1, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +371 more +373 more Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon... CVE-2021-1910 7.3 HighMay 7, 2021
• qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm apq8009w firmware, apq8017 firmware +412 more +414 more Possible integer overflow due to improper length check while flashing an image in Snapdragon... CVE-2021-1895 6.8 MediumMay 7, 2021
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8017 firmware, apq8037 firmware +337 more +339 more Out of bound read can happen in Widevine TA while copying data to buffer from user data due to... CVE-2020-11293 5.1 MediumMay 7, 2021
• Show olderLoading…