Skip to content
Qualcomm Qca6694 vulnerabilities
-
qualcomm apq8064au firmware, csr8811 firmware, immersive home 214 platform firmware +93 more +95 more
Incorrect Calculation of Buffer Size in SCE-Mink
CVE-2025-27074
8.8 High
-
qualcomm csr8811 firmware, immersive home 214 platform firmware, immersive home 216 platform firmware +63 more +65 more
Improper Input Validation in TZ Firmware
CVE-2025-27040
6.5 Medium
-
qualcomm 205 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +327 more +329 more
Buffer Over-read in MProc
CVE-2024-33056
8.4 High
-
qualcomm 9205 lte firmware, apq8017 firmware, apq8064au firmware +292 more +294 more
Improper Validation of Array Index in WLAN HAL
CVE-2023-28565
7.8 High
-
qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +346 more +348 more
Cryptographic issue in Core
CVE-2022-22076
7.1 High
-
qualcomm apq8009 firmware, apq8017 firmware, apq8064au firmware +279 more +281 more
Buffer over-read in WLAN
CVE-2022-33286
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +232 more +234 more
Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6...
CVE-2022-33239
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +236 more +238 more
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in...
CVE-2022-33237
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +274 more +276 more
Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in...
CVE-2022-25749
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8096au firmware, aqt1000 firmware +150 more +152 more
Information disclosure in WLAN due to improper validation of array index while parsing crafted...
CVE-2022-25690
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 more
Possible information exposure and denial of service due to NAS not dropping messages when...
CVE-2021-30284
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +202 more +204 more
Possible use after free due to improper memory validation when initializing new interface via...
CVE-2021-30266
6.7 Medium
-
qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +192 more +194 more
Possible use after free due improper validation of reference from call back to internal store...
CVE-2021-30264
6.7 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 more
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in...
CVE-2021-30255
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +161 more +163 more
Possible buffer overflow due to improper input validation in factory calibration and test DIAG...
CVE-2021-30254
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +178 more +180 more
Possible heap overflow due to improper length check of domain while parsing the DNS response in...
CVE-2021-1975
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 more
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto,...
CVE-2021-1973
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 more
Information disclosure through timing and power side-channels during mod exponentiation for RSA...
CVE-2021-1924
9.0 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +194 more +196 more
Possible stack overflow due to improper length check of TLV while copying the TLV to a local...
CVE-2021-30288
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 more
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto,...
CVE-2021-1959
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +217 more +219 more
Possible buffer over read due to lack of length check while parsing beacon IE response in...
CVE-2021-1980
Fix available
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 more
Possible integer and heap overflow due to lack of input command size validation while handling...
CVE-2021-30261
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +256 more +258 more
Possible Integer overflow to buffer overflow issue can occur due to improper validation of input...
CVE-2021-30260
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +119 more +121 more
Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon...
CVE-2021-1971
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +174 more +176 more
Possible null pointer dereference due to lack of validation check for passed pointer during key...
CVE-2021-1935
7.1 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +325 more +327 more
Buffer overflow occurs in trusted applications due to lack of length check of parameters in...
CVE-2021-1909
7.3 High
-
qualcomm, inc. snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +106 more +108 more
Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in...
CVE-2021-1928
4.6 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +169 more +171 more
Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto,...
CVE-2021-1920
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 more
Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in...
CVE-2021-1919
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 more
Possible buffer underflow due to lack of check for negative indices values when processing user...
CVE-2021-1916
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 more
Loop with unreachable exit condition may occur due to improper handling of unsupported input in...
CVE-2021-1914
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +216 more +218 more
Possible out of bound read due to lack of length check of data while parsing the beacon or probe...
CVE-2021-1948
Fix available
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8064au firmware, apq8096au firmware +213 more +215 more
Possible buffer over read issue due to improper length check on WPA IE string sent by peer in...
CVE-2021-1941
Fix available
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +245 more +247 more
A use after free can occur due to improper validation of P2P device address in PD Request frame...
CVE-2021-1976
Fix available
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +275 more +277 more
Possible buffer overflow due to improper validation of device types during P2P search in...
CVE-2021-1972
Fix available
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 more
Improper length check of public exponent in RSA import key function could cause memory corruption...
CVE-2021-1890
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 more
Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto,...
CVE-2021-1889
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +153 more +155 more
Memory corruption in key parsing and import function due to double freeing the same heap...
CVE-2021-1888
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 more
Incorrect handling of pointers in trusted application key import mechanism could cause memory...
CVE-2021-1886
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +186 more +188 more
Possible buffer over read due to improper validation of IE size while parsing beacon from peer...
CVE-2021-1964
Fix available
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +204 more +206 more
Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto,...
CVE-2021-1945
Fix available
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +175 more +177 more
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI...
CVE-2020-11292
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +424 more +426 more
Out of bound read will happen if EAPOL Key length is less than expected while processing NAN...
CVE-2020-11241
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +400 more +402 more
Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in...
CVE-2020-11238
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +536 more +538 more
Buffer overflow might occur while parsing unified command due to lack of check of input data...
CVE-2020-11235
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +501 more +503 more
Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE...
CVE-2020-11159
9.1 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +323 more +325 more
Possible stack out of bound write might happen due to time bitmap length and bit duration fields...
CVE-2020-11134
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +389 more +391 more
Possible out of bound read while WLAN frame parsing due to lack of check for body and header...
CVE-2020-11126
9.1 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +269 more +271 more
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length...
CVE-2020-11267
Fix available
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +402 more +404 more
Buffer overflow can occur due to improper validation of NDP application information length in...
CVE-2021-1915
7.8 High
- Show olderLoading…