Qualcomm Sda660 Firmware vulnerabilities

• qualcomm 5g fixed wireless access platform firmware, aqt1000 firmware, ar8031 firmware +374 more +376 more Buffer Over-read in WLAN Firmware CVE-2026-25275 7.5 HighSeptember 17, 2026
• qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 more Improper Validation of Syntactic Correctness of Input in Display CVE-2026-24091 Fix available 7.2 HighJune 1, 2026
• qualcomm 5g fixed wireless access platform firmware, c-v2x 9150 firmware, cq7790 firmware +234 more +236 more Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver CVE-2025-59610 6.4 MediumJune 1, 2026
• qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +271 more +273 more Stack-based Buffer Overflow in Display CVE-2026-24085 Fix available 7.2 HighJune 1, 2026
• qualcomm 215 mobile firmware, 5g fixed wireless access firmware, ar8031 firmware +186 more +188 more Buffer Copy Without Checking Size of Input in Automotive Audio CVE-2025-47404 6.5 MediumMay 4, 2026
• qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 more Use After Free in Automotive Audio CVE-2025-47386 7.8 HighMarch 2, 2026
• qualcomm 5g fixed wireless access platform firmware, 9206 lte modem firmware, 9207 lte modem firmware +204 more +206 more Missing Cryptographic Step in Data Modem CVE-2025-47383 7.2 HighMarch 2, 2026
• qualcomm 5g fixed wireless access platform firmware, ar8031 firmware, ar8035 firmware +176 more +178 more Use After Free in Automotive Audio CVE-2025-47379 7.8 HighMarch 2, 2026
• qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +168 more +170 more Use After Free in Automotive Audio CVE-2025-47376 7.8 HighMarch 2, 2026
• qualcomm ar8031 firmware, ar8035 firmware, csra6620 firmware +167 more +169 more Use After Free in Automotive Audio CVE-2025-47375 7.8 HighMarch 2, 2026
• qualcomm 5g fixed wireless access platform firmware, apq8098 firmware, ar8031 firmware +236 more +238 more Integer Overflow or Wraparound in Graphics CVE-2026-21385 In KEVPublic exploitFix available 7.8 HighMarch 1, 2026
• qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +151 more +153 more Use After Free in Graphics CVE-2025-47398 Fix available 7.8 HighFebruary 2, 2026
• qualcomm 215 firmware, mdm9206 firmware, mdm9607 firmware +20 more +22 more Configurations in Android Build CVE-2018-11922 7.5 HighNovember 26, 2024
• qualcomm, inc. snapdragon mobile, snapdragon compute, snapdragon auto, snapdragon iot, snapdragon connectivity, snapdragon voice & music, qualcomm apq8097 firmware, apq8098 firmware +77 more +79 more Buffer overflow in sahara protocol while processing commands leads to overwrite of secure... CVE-2021-30327 Public exploit 7.5 HighJune 14, 2022
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +87 more +89 more u'When a non standard SIP sigcomp message is received from the network, then there may be chances... CVE-2020-3639 9.8 CriticalNovember 12, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8052 firmware, apq8056 firmware +60 more +62 more u'Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length'... CVE-2020-11207 7.8 HighNovember 12, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, msm8998 firmware +52 more +54 more u'Possible buffer overflow in Fastrpc while handling received parameters due to lack of... CVE-2020-11206 7.8 HighNovember 12, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 more u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number... CVE-2020-11196 9.8 CriticalNovember 12, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 more u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned... CVE-2020-11193 9.8 CriticalNovember 12, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +59 more +61 more u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to... CVE-2020-11168 9.8 CriticalNovember 12, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +113 more +115 more u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to... CVE-2020-11123 5.5 MediumNovember 12, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +43 more +45 more u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents... CVE-2020-3684 7.8 HighNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +38 more +40 more u'Buffer overflow can happen as part of SIP message packet processing while storing values in... CVE-2020-3673 9.8 CriticalNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +51 more +53 more u'Potential out of bounds read while processing downlink NAS transport message due to improper... CVE-2020-3670 9.1 CriticalNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 more u'Remote code execution can happen by sending a carefully crafted POST query when Device... CVE-2020-3657 EPSS 26.6% 9.8 CriticalNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +39 more +41 more u'Buffer overflow occurs while processing SIP message packet due to lack of check of index... CVE-2020-3654 9.8 CriticalNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8096au firmware +28 more +30 more u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue... CVE-2020-11164 7.8 HighNovember 2, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +49 more +51 more u'Array index underflow issue in adsp driver due to improper check of channel id before used as... CVE-2020-11174 Fix available 7.8 HighOctober 1, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +48 more +50 more u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport... CVE-2020-3634 9.1 CriticalSeptember 9, 2020
• qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm kamorta firmware, nicobar firmware +14 more +16 more u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely... CVE-2020-3617 7.1 HighSeptember 9, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +40 more +42 more u'Information disclosure issue occurs as in current logic Secure Touch session is released... CVE-2020-3644 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 more u'Information disclosure issue can occur due to partial secure display-touch session tear-down'... CVE-2020-3643 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +59 more +61 more u'A potential buffer overflow exists due to integer overflow when parsing handler options due to... CVE-2020-3624 7.8 HighSeptember 8, 2020
• qualcomm apq8009, apq8017, apq8053 +128 more +130 more u'Channel name string which has been read from shared memory is potentially subjected to string... CVE-2020-3622 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 more u'Lack of check to ensure that the TX read index & RX write index that are read from shared... CVE-2020-3621 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +61 more +63 more u'Lack of check of integer overflow while doing a round up operation for data read from shared... CVE-2020-3620 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 more u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to... CVE-2020-3619 7.0 HighSeptember 8, 2020
• qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, kamorta firmware +13 more +15 more u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access... CVE-2020-3611 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 more u'Information disclosure issue occurs as in current logic as secure touch is released without... CVE-2019-14115 5.5 MediumSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +68 more +70 more u'Heap overflow in diag command handler due to lack of check of packet length received from user'... CVE-2019-14074 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +35 more +37 more u'Pointer double free in HavenSvc due to not setting the pointer to NULL after freeing it' in... CVE-2019-14065 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm kamorta firmware, mdm9150 firmware +27 more +29 more u'Possible integer overflow in API due to lack of check on large oid range count in cert... CVE-2019-14056 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 more u'Accessing an uninitialized data structure could result in partially copying of contents and... CVE-2019-14052 9.8 CriticalSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +62 more +64 more u'Lack of check for integer overflow for round up and addition operations result into memory... CVE-2019-13999 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 more u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less... CVE-2019-13998 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 more u'Lack of integer overflow check for addition of fragment size and remaining size that are read... CVE-2019-13995 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +63 more +65 more u'Lack of check that the current received data fragment size of a particular packet that are read... CVE-2019-13994 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, bitra firmware +34 more +36 more u'Memory can be potentially corrupted if random index is allowed to manipulate TLB entries in... CVE-2019-10628 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +55 more +57 more u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of... CVE-2019-10615 7.8 HighSeptember 8, 2020
• qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ipq6018 firmware, kamorta firmware +26 more +28 more u'Improper authentication and signature verification of debug polices in secure boot loader will... CVE-2019-10562 7.8 HighSeptember 8, 2020
• Show olderLoading…