Skip to contentQualcomm Sa2150p Firmware vulnerabilities
- qualcomm 5g fixed wireless access platform firmware, 9205 lte modem firmware, 9205s modem firmware +164 more +166 moreMissing Authorization in CoreCVE-2026-252677.8 High
- qualcomm 5g fixed wireless access platform firmware, 9205 lte modem firmware, 9205s modem firmware +164 more +166 moreOut of Bounds write in Linux CameraCVE-2026-252636.6 Medium
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreImproper Validation of Syntactic Correctness of Input in DisplayCVE-2026-24091Fix available7.2 High
- qualcomm 5g fixed wireless access platform firmware, c-v2x 9150 firmware, cq7790 firmware +234 more +236 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverCVE-2025-596106.4 Medium
- qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 moreStack-based Buffer Overflow in DisplayCVE-2026-24085Fix available7.2 High
- qualcomm 215 mobile firmware, 5g fixed wireless access firmware, ar8031 firmware +186 more +188 moreBuffer Copy Without Checking Size of Input in Automotive AudioCVE-2025-474046.5 Medium
- qualcomm 5g fixed wireless access platform firmware, ar8031 firmware, ar8035 firmware +176 more +178 moreUse After Free in Automotive AudioCVE-2025-473797.8 High
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +237 more +239 moreUse After Free in HLOSCVE-2025-473336.6 Medium
- qualcomm ar8031 firmware, ar8035 firmware, c-v2x 9150 firmware +221 more +223 moreBuffer Over-read in VideoCVE-2025-473305.5 Medium
- qualcomm 9206 lte modem firmware, apq8017 firmware, aqt1000 firmware +211 more +213 moreOut-of-bounds Write in AudioCVE-2025-473207.8 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +297 more +299 moreOut-of-bounds Write in DisplayCVE-2025-270547.8 High
- qualcomm 215 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +317 more +319 moreIncorrect Calculation of Buffer Size in HLOSCVE-2025-270537.8 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +285 more +287 moreCryptographic Issues in CoreCVE-2025-214827.1 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +247 more +249 moreBuffer Copy Without Checking Size of Input in HLOSCVE-2025-214817.8 High
- qualcomm 315 5g iot modem firmware, apq8064au firmware, ar8035 firmware +151 more +153 moreImproper Access Control in Automotive MultimediaCVE-2025-270627.8 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +347 more +349 moreOut-of-bounds Read in CoreCVE-2025-214656.5 Medium
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, aqt1000 firmware +340 more +342 moreOut-of-bounds Read in CoreCVE-2025-214646.5 Medium
- qualcomm 315 5g iot firmware, aqt1000 firmware, ar8031 firmware +342 more +344 moreOut-of-bounds Write in VideoCVE-2025-27061Fix available7.8 High
- qualcomm 215 mobile firmware, 315 5g iot modem firmware, aqt1000 firmware +342 more +344 moreIncorrect Calculation of Buffer Size in VideoCVE-2025-27042Fix available7.8 High
- qualcomm 205 mobile firmware, 215 mobile firmware, 315 5g iot modem firmware +264 more +266 moreUse After Free in GPS HLOS DriverCVE-2025-21453Fix available7.8 High
- qualcomm 9206 lte modem firmware, apq8017 firmware, ar8031 firmware +67 more +69 moreBuffer Over-read in WLAN HostCVE-2025-214287.5 High
- qualcomm 315 5g iot modem firmware, apq8017 firmware, apq8064au firmware +223 more +225 moreBuffer Over-read in WLAN HostCVE-2025-21430Fix available7.5 High
- qualcomm 9206 lte modem firmware, apq8017 firmware, apq8064au firmware +180 more +182 moreBuffer Over-read in WLAN HostCVE-2025-21429Fix available7.5 High
- qualcomm 215 firmware, 315 5g iot modem firmware, aqt1000 firmware +237 more +239 moreUse After Free in NPUCVE-2025-21424Fix available7.8 High
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +242 more +244 moreImproper Authorization in SPS-HLOSCVE-2024-430515.5 Medium
- qualcomm 215 firmware, 315 5g iot modem firmware, aqt1000 firmware +249 more +251 moreImproper Validation of Array Index in AudioCVE-2024-53014Fix available7.8 High
- qualcomm 205 mobile platform firmware, 315 5g iot modem firmware, 9205 lte modem firmware +327 more +329 moreBuffer Over-read in MProcCVE-2024-330568.4 High
- qualcomm 205 mobile platform firmware, 215 mobile platform firmware, 315 5g iot modem firmware +266 more +268 moreInteger Overflow to Buffer Overflow in AudioCVE-2024-38422Fix available7.8 High
- qualcomm, inc. snapdragon mobile, snapdragon compute, snapdragon auto, snapdragon iot, snapdragon connectivity, snapdragon voice & music, qualcomm apq8097 firmware, apq8098 firmware +77 more +79 moreBuffer overflow in sahara protocol while processing commands leads to overwrite of secure...CVE-2021-30327Public exploit7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +405 more +407 morePossible denial of service scenario due to improper handling of group management action frame in...CVE-2021-19257.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +402 more +404 moreBuffer overflow can occur due to improper validation of NDP application information length in...CVE-2021-19157.8 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, qualcomm apq8009w firmware, apq8017 firmware +412 more +414 morePossible integer overflow due to improper length check while flashing an image in Snapdragon...CVE-2021-18956.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, pm215 firmware +242 more +244 moreOut of bound write in logger due to prefix size is not validated while prepended to logging...CVE-2020-112945.9 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8017 firmware, apq8037 firmware +337 more +339 moreOut of bound read can happen in Widevine TA while copying data to buffer from user data due to...CVE-2020-112935.1 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +494 more +496 moreOut of bound write can occur in TZ command handler due to lack of validation of command ID in...CVE-2020-112897.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +316 more +318 moreOut of bound write can occur in playready while processing command due to lack of input...CVE-2020-112887.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +455 more +457 morePossible use after free due to lack of null check while memory is being freed in FastRPC driver...CVE-2021-1927Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreImproper handling of address deregistration on failure can lead to new GPU address allocation...CVE-2021-1906In KEVFix available6.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +395 more +397 morePossible use after free due to improper handling of memory mapping of multiple processes...CVE-2021-1905In KEVFix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +412 more +414 moreA possible use-after-free occurrence in audio driver can happen when pointers are not properly...CVE-2021-1891Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +308 more +310 moreTrustzone initialization code will disable xPU`s when memory dumps are enabled and lead to...CVE-2020-112527.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +335 more +337 moreWhen sending a socket event message to a user application, invalid information will be passed if...CVE-2020-11234Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreOut of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size...CVE-2020-112279.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreOut of bound memory read in Data modem while unpacking data due to lack of offset length check in...CVE-2020-112267.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +272 more +274 moreBuffer over read while processing MT SMS with maximum length due to improper length check in...CVE-2020-112229.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreUsage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information...CVE-2020-112215.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +272 more +274 moreDenial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data...CVE-2020-112187.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreHLOS to access EL3 stack canary by just mapping imem region due to Improper access control and...CVE-2020-111995.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +367 more +369 moreOut of bound write while parsing SDP string due to missing check on null termination in...CVE-2020-111929.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +399 more +401 moreBuffer over-read can happen while parsing received SDP values due to lack of NULL termination...CVE-2020-111909.1 Critical
- Show olderLoading…