Skip to content
Qualcomm Rennell vulnerabilities
-
qualcomm 215 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +317 more +319 more
Incorrect Calculation of Buffer Size in HLOS
CVE-2025-27053
7.8 High
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +247 more +249 more
Buffer Copy Without Checking Size of Input in HLOS
CVE-2025-21481
7.8 High
-
qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +43 more +45 more
Time-of-check Time-of-use (TOCTOU) Race Condition in Display
CVE-2025-27076
7.8 High
-
qualcomm fastconnect 6200 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +14 more +16 more
Buffer Over-read in Camera
CVE-2025-27068
7.8 High
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +370 more +372 more
Reachable Assertion in WLAN Firmware
CVE-2025-27066
7.5 High
-
qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +347 more +349 more
Out-of-bounds Read in Core
CVE-2025-21465
6.5 Medium
-
qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +340 more +342 more
Out-of-bounds Read in Core
CVE-2025-21464
6.5 Medium
-
qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +47 more +49 more
Out-of-bounds Read in Windows WLAN Host
CVE-2025-21441
7.8 High
-
qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +47 more +49 more
Out-of-bounds Read in Windows WLAN Host
CVE-2025-21440
7.8 High
-
qualcomm fastconnect 6200 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +41 more +43 more
Out-of-bounds Read in Windows WLAN Host
CVE-2025-21438
7.8 High
-
qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +43 more +45 more
Improper Validation of Array Index in Display
CVE-2025-21423
7.8 High
-
qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +43 more +45 more
Buffer Over-read in Display
CVE-2025-21421
7.8 High
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +233 more +235 more
Cryptographic Issues in BT Controller
CVE-2024-38408
8.2 High
-
qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +42 more +44 more
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
CVE-2024-38407
7.8 High
-
qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +42 more +44 more
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
CVE-2024-38406
7.8 High
-
qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +43 more +45 more
Improper Input Validation in Camera
CVE-2024-33065
8.4 High
-
qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +331 more +333 more
Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage
CVE-2024-33016
6.8 Medium
-
qualcomm 205 mobile platform firmware, 215 mobile platform firmware, 315 5g iot modem firmware +247 more +249 more
Buffer Over-read in Multi Mode Call Processor
CVE-2024-23353
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +44 more +46 more
u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0)...
CVE-2020-3704
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8076 firmware +39 more +41 more
u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode...
CVE-2020-3703
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm agatti firmware, kamorta firmware +15 more +17 more
u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack...
CVE-2020-3692
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, bitra firmware +27 more +29 more
u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the...
CVE-2020-3690
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +43 more +45 more
u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents...
CVE-2020-3684
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +38 more +40 more
u'Buffer overflow can happen as part of SIP message packet processing while storing values in...
CVE-2020-3673
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +51 more +53 more
u'Potential out of bounds read while processing downlink NAS transport message due to improper...
CVE-2020-3670
9.1 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +39 more +41 more
u'Buffer overflow occurs while processing SIP message packet due to lack of check of index...
CVE-2020-3654
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm agatti firmware, bitra firmware +14 more +16 more
u'An Unaligned address or size can propagate to the database due to improper page permissions and...
CVE-2020-3638
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8096au firmware +28 more +30 more
u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue...
CVE-2020-11164
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8053 firmware +31 more +33 more
u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver...
CVE-2020-11173
Fix available
7.0 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +38 more +40 more
u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events...
CVE-2020-11162
Fix available
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +46 more +48 more
u'Out of bound access can happen in MHI command process due to lack of check of channel id value...
CVE-2020-11125
Fix available
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm bitra firmware, kamorta firmware +15 more +17 more
u'During execution after Address Space Layout Randomization is turned on for QTEE, part of code...
CVE-2020-3679
5.5 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +48 more +50 more
u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport...
CVE-2020-3634
9.1 Critical
-
qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm kamorta firmware, nicobar firmware +14 more +16 more
u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely...
CVE-2020-3617
7.1 High
-
qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, kamorta firmware +25 more +27 more
u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon...
CVE-2020-11135
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq5018 firmware, ipq6018 firmware +17 more +19 more
u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as...
CVE-2020-3675
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq5018 firmware +28 more +30 more
u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset'...
CVE-2020-3669
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, ipq8074 firmware +21 more +23 more
u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than...
CVE-2020-3668
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq5018 firmware +28 more +30 more
u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating...
CVE-2020-3667
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +40 more +42 more
u'Information disclosure issue occurs as in current logic Secure Touch session is released...
CVE-2020-3644
5.5 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 more
u'Information disclosure issue can occur due to partial secure display-touch session tear-down'...
CVE-2020-3643
5.5 Medium
-
qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm bitra firmware, kamorta firmware +10 more +12 more
u'Resizing the usage table header before passing all the checks leads to the function exiting...
CVE-2020-3640
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, qcs404 firmware +8 more +10 more
u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated...
CVE-2020-3636
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm bitra firmware, kamorta firmware +8 more +10 more
u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption...
CVE-2020-3629
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +59 more +61 more
u'A potential buffer overflow exists due to integer overflow when parsing handler options due to...
CVE-2020-3624
7.8 High
-
qualcomm apq8009, apq8017, apq8053 +128 more +130 more
u'Channel name string which has been read from shared memory is potentially subjected to string...
CVE-2020-3622
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 more
u'Lack of check to ensure that the TX read index & RX write index that are read from shared...
CVE-2020-3621
5.5 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 more
u'Lack of check of integer overflow while doing a round up operation for data read from shared...
CVE-2020-3620
5.5 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 more
u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to...
CVE-2020-3619
7.0 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8096au firmware +38 more +40 more
u'Possible out of bound access while copying the mask file content into the buffer without...
CVE-2020-11128
7.8 High
- Show olderLoading…