Skip to content
Qualcomm Sdm660 vulnerabilities
-
qualcomm msm8909w firmware, msm8996au firmware, sd 205 firmware +25 more +27 more
Use of Out-of-range Pointer Offset in Video
CVE-2017-11076
8.8 High
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +364 more +366 more
Buffer over-read in WLAN Firmware
CVE-2023-33080
7.5 High
-
qualcomm apq5053-aa firmware, aqt1000 firmware, ar8031 firmware +100 more +102 more
Improper Authentication in Automotive OS
CVE-2023-33070
7.1 High
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +166 more +168 more
Improper Authentication in GPS HLOS Driver
CVE-2023-33054
9.1 Critical
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +261 more +263 more
Integer Overflow to Buffer Overflow in User Identity Module
CVE-2023-33018
7.8 High
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +313 more +315 more
Use After Free in DSP Services
CVE-2023-33063
In KEVFix available
7.8 High
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +257 more +259 more
Buffer Copy Without Checking Size of Input in Audio
CVE-2023-33059
Fix available
7.8 High
-
qualcomm apq5053-aa firmware, apq8009 firmware, apq8017 firmware +163 more +165 more
Buffer Copy Without Checking Size of Input in Automotive Audio
CVE-2023-33031
Fix available
7.8 High
-
qualcomm 315 5g iot modem firmware, apq5053-aa firmware, aqt1000 firmware +257 more +259 more
Improper validation of array index in WLAN HAL
CVE-2022-33275
8.4 High
-
qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +121 more +123 more
Buffer Over-read in WLAN Firmware
CVE-2023-21661
7.5 High
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +268 more +270 more
Buffer Over-read in WLAN Firmware
CVE-2023-21659
7.5 High
-
qualcomm apq8017 firmware, apq8064au firmware, apq8076 firmware +281 more +283 more
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL
CVE-2023-21628
8.4 High
-
qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +240 more +242 more
Improper authorization in Modem
CVE-2022-40521
7.5 High
-
qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +240 more +242 more
Double free in Core
CVE-2022-40507
8.4 High
-
qualcomm 315 5g iot modem firmware, 8953pro firmware, 9207 lte modem firmware +271 more +273 more
Stack-based buffer overflow in Modem
CVE-2022-33264
7.9 High
-
qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +346 more +348 more
Cryptographic issue in Core
CVE-2022-22076
7.1 High
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +180 more +182 more
Improper Access control in GPU Subsystem
CVE-2023-21670
Fix available
7.8 High
-
qualcomm csra6620 firmware, csra6640 firmware, fastconnect 6200 firmware +145 more +147 more
Improper Input Validation in Audio
CVE-2023-21657
Fix available
7.8 High
-
qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +187 more +189 more
Reachable assertion in Modem
CVE-2022-40504
7.5 High
-
qualcomm 8905 firmware, 8909 firmware, 8917 firmware +163 more +165 more
Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
CVE-2023-21666
Fix available
8.4 High
-
qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +263 more +265 more
Incorrect Type Conversion or Cast in Graphics
CVE-2023-21665
Fix available
8.4 High
-
qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +351 more +353 more
Integer overflow or wraparound in WLAN
CVE-2022-40532
8.4 High
-
qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +223 more +225 more
Improper validation of array index in User Identity Module
CVE-2022-33302
6.8 Medium
-
qualcomm 315 5g iot modem firmware, 7wcn785x-1 firmware, 8905 firmware +269 more +271 more
Improper validation of array index in Modem
CVE-2022-33289
6.8 Medium
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8909 firmware +217 more +219 more
Double free in Core
CVE-2022-33231
9.3 Critical
-
qualcomm 8905 firmware, 8909 firmware, 8953 firmware +183 more +185 more
Buffer over-read in Bluetooth Host.
CVE-2022-40503
Fix available
8.2 High
-
qualcomm, inc. snapdragon mobile, snapdragon compute, snapdragon auto, snapdragon iot, snapdragon connectivity, snapdragon voice & music, qualcomm apq8097 firmware, apq8098 firmware +77 more +79 more
Buffer overflow in sahara protocol while processing commands leads to overwrite of secure...
CVE-2021-30327
Public exploit
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +87 more +89 more
u'When a non standard SIP sigcomp message is received from the network, then there may be chances...
CVE-2020-3639
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8052 firmware, apq8056 firmware +60 more +62 more
u'Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length'...
CVE-2020-11207
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, msm8998 firmware +52 more +54 more
u'Possible buffer overflow in Fastrpc while handling received parameters due to lack of...
CVE-2020-11206
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 more
u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number...
CVE-2020-11196
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 more
u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned...
CVE-2020-11193
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +113 more +115 more
u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to...
CVE-2020-11123
5.5 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +44 more +46 more
u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0)...
CVE-2020-3704
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8076 firmware +39 more +41 more
u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode...
CVE-2020-3703
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +43 more +45 more
u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents...
CVE-2020-3684
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +38 more +40 more
u'Buffer overflow can happen as part of SIP message packet processing while storing values in...
CVE-2020-3673
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +51 more +53 more
u'Potential out of bounds read while processing downlink NAS transport message due to improper...
CVE-2020-3670
9.1 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 more
u'Remote code execution can happen by sending a carefully crafted POST query when Device...
CVE-2020-3657
EPSS 26.6%
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +39 more +41 more
u'Buffer overflow occurs while processing SIP message packet due to lack of check of index...
CVE-2020-3654
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8096au firmware +28 more +30 more
u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue...
CVE-2020-11164
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +49 more +51 more
u'Array index underflow issue in adsp driver due to improper check of channel id before used as...
CVE-2020-11174
Fix available
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8053 firmware +31 more +33 more
u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver...
CVE-2020-11173
Fix available
7.0 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +46 more +48 more
u'Out of bound access can happen in MHI command process due to lack of check of channel id value...
CVE-2020-11125
Fix available
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +48 more +50 more
u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport...
CVE-2020-3634
9.1 Critical
-
qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm kamorta firmware, nicobar firmware +14 more +16 more
u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely...
CVE-2020-3617
7.1 High
-
qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, kamorta firmware +25 more +27 more
u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon...
CVE-2020-11135
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq5018 firmware +28 more +30 more
u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset'...
CVE-2020-3669
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8098 firmware, ipq5018 firmware +28 more +30 more
u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating...
CVE-2020-3667
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +44 more +46 more
u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon...
CVE-2020-3666
7.8 High
- Show olderLoading…