Skip to contentQualcomm Sd778g Firmware vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 moreLoop with unreachable exit condition may occur due to improper handling of unsupported input in...CVE-2021-19147.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +265 more +267 moreImproper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead...CVE-2020-11301Fix availableEPSS 11.1%9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8064au firmware +124 more +126 moreImproper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to...CVE-2020-11264Fix availableEPSS 13.2%9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qca6174a firmware, qca6574 firmware +39 more +41 morePotential null pointer dereference in KGSL GPU auxiliary command due to improper validation of...CVE-2021-30294Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qca6174a firmware, qca6574 firmware +39 more +41 morePossible null pointer dereference due to race condition between timeline fence signal and time...CVE-2021-30290Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +188 more +190 morePossible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and...CVE-2021-1974Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8096au firmware +110 more +112 morePossible use-after-free due to lack of validation for the rule count in filter table in IPA...CVE-2021-1963Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +111 more +113 morePossible buffer overflow due to lack of offset length check while updating the buffer value in...CVE-2021-1961Public exploitFix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon mobile, snapdragon wearables, qualcomm qca6574a firmware, qca6574au firmware +36 more +38 moreA race condition in fastrpc kernel driver for dynamic process creation can lead to use after free...CVE-2021-1958Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +216 more +218 morePossible out of bound read due to lack of length check of data while parsing the beacon or probe...CVE-2021-1948Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +245 more +247 moreA use after free can occur due to improper validation of P2P device address in PD Request frame...CVE-2021-1976Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +275 more +277 morePossible buffer overflow due to improper validation of device types during P2P search in...CVE-2021-1972Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +106 more +108 moreNull pointer dereference occurs due to improper validation when the preemption feature enablement...CVE-2021-1939Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +173 more +175 moreChild process can leak information from parent process due to numeric pids are getting compared...CVE-2021-1904Fix available6.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +203 more +205 moreImproper handling of received malformed FTMR request frame can lead to reachable assertion while...CVE-2021-19537.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +205 more +207 morePossible assertion due to improper verification while creating and deleting the peer in...CVE-2021-19387.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 moreImproper length check of public exponent in RSA import key function could cause memory corruption...CVE-2021-18908.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 morePossible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto,...CVE-2021-18898.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +153 more +155 moreMemory corruption in key parsing and import function due to double freeing the same heap...CVE-2021-18888.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 moreIncorrect handling of pointers in trusted application key import mechanism could cause memory...CVE-2021-18868.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +119 more +121 moreBuffer overflow in modem due to improper array index check before copying into it in Snapdragon...CVE-2020-113079.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, aqt1000 firmware +116 more +118 morePossible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto,...CVE-2021-1970Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar9380 firmware +124 more +126 morePossible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in...CVE-2021-1965Public exploitFix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +186 more +188 morePossible buffer over read due to improper validation of IE size while parsing beacon from peer...CVE-2021-1964Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +176 more +178 moreDenial of service in SAP case due to improper handling of connections when association is...CVE-2021-1955Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +148 more +150 morePossible buffer over read due to improper validation of data pointer while parsing FILS...CVE-2021-1954Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +204 more +206 morePossible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto,...CVE-2021-1945Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +175 more +177 morePossible buffer out of bound read can occur due to improper validation of TBTT count and length...CVE-2021-1943Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +119 more +121 morePossible buffer overflow due to improper validation of buffer length while processing fast boot...CVE-2021-1931Public exploitFix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, csrb31024 firmware +82 more +84 morePossible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon...CVE-2021-1907Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +184 more +186 moreReachable assertion is possible while processing peer association WLAN message from host and...CVE-2021-19377.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +80 more +82 morePossible integer overflow in RPMB counter due to lack of length check on user provided data in...CVE-2020-113067.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +157 more +159 morePossible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto,...CVE-2020-113047.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +269 more +271 moreStack out-of-bounds write occurs while setting up a cipher device if the provided IV length...CVE-2020-11267Fix available8.4 High