Skip to contentQualcomm Sdm670 Firmware vulnerabilities
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +364 more +366 moreBuffer over-read in WLAN FirmwareCVE-2023-330807.5 High
- qualcomm 315 5g iot modem firmware, apq5053-aa firmware, aqt1000 firmware +210 more +212 moreInteger Overflow to Buffer Overflow in HLOSCVE-2023-330228.4 High
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +261 more +263 moreInteger Overflow to Buffer Overflow in User Identity ModuleCVE-2023-330187.8 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +275 more +277 moreBuffer Copy Without Checking Size of Input in BootCVE-2023-330177.8 High
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +257 more +259 moreBuffer Copy Without Checking Size of Input in AudioCVE-2023-33059Fix available7.8 High
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +350 more +352 moreBuffer Over-read in WLAN FirmwareCVE-2023-330277.5 High
- qualcomm 8098 firmware, 8998 firmware, apq5053-aa firmware +265 more +267 moreBuffer Copy Without Checking Size of Input in WLAN HALCVE-2023-285607.8 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +268 more +270 moreBuffer Over-read in WLAN FirmwareCVE-2023-216597.5 High
- qualcomm apq8017 firmware, apq8064au firmware, apq8076 firmware +281 more +283 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HALCVE-2023-216288.4 High
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +194 more +196 moreImproper access control in KernelCVE-2022-405297.1 High
- qualcomm 9205 lte modem firmware, aqt1000 firmware, ar8031 firmware +183 more +185 moreInformation exposure in KernelCVE-2022-405237.1 High
- qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +240 more +242 moreImproper authorization in ModemCVE-2022-405217.5 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +240 more +242 moreDouble free in CoreCVE-2022-405078.4 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6800 firmware +118 more +120 moreDouble free in AutomotiveCVE-2022-333078.4 High
- qualcomm 315 5g iot modem firmware, 8953pro firmware, 9207 lte modem firmware +271 more +273 moreStack-based buffer overflow in ModemCVE-2022-332647.9 High
- qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +346 more +348 moreCryptographic issue in CoreCVE-2022-220767.1 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +180 more +182 moreImproper Access control in GPU SubsystemCVE-2023-21670Fix available7.8 High
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +187 more +189 moreReachable assertion in ModemCVE-2022-405047.5 High
- qualcomm aqt1000 firmware, ar8035 firmware, qam8295p firmware +97 more +99 moreBuffer over-read in Trusted Execution EnvironmentCVE-2022-332737.3 High
- qualcomm 8905 firmware, 8909 firmware, 8917 firmware +163 more +165 moreImproper Release of Memory Before Removing Last Reference (`Memory Leak`) in GraphicsCVE-2023-21666Fix available8.4 High
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +263 more +265 moreIncorrect Type Conversion or Cast in GraphicsCVE-2023-21665Fix available8.4 High
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +351 more +353 moreInteger overflow or wraparound in WLANCVE-2022-405328.4 High
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +223 more +225 moreImproper validation of array index in User Identity ModuleCVE-2022-333026.8 Medium
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +112 more +114 moreInteger overflow to buffer overflow in ModemCVE-2022-332965.9 Medium
- qualcomm 315 5g iot modem firmware, 7wcn785x-1 firmware, 8905 firmware +269 more +271 moreImproper validation of array index in ModemCVE-2022-332896.8 Medium
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +146 more +148 moreBuffer copy without checking the size of input in CoreCVE-2022-332889.3 Critical
- qualcomm aqt1000 firmware, ar8035 firmware, qam8295p firmware +99 more +101 moreInteger overflow or wraparound in CoreCVE-2022-332699.3 Critical
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8909 firmware +217 more +219 moreDouble free in CoreCVE-2022-332319.3 Critical
- qualcomm 8905 firmware, 8909 firmware, 8953 firmware +183 more +185 moreBuffer over-read in Bluetooth Host.CVE-2022-40503Fix available8.2 High
- qualcomm, inc. snapdragon mobile, snapdragon compute, snapdragon auto, snapdragon iot, snapdragon connectivity, snapdragon voice & music, qualcomm apq8097 firmware, apq8098 firmware +77 more +79 moreBuffer overflow in sahara protocol while processing commands leads to overwrite of secure...CVE-2021-30327Public exploit7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +87 more +89 moreu'When a non standard SIP sigcomp message is received from the network, then there may be chances...CVE-2020-36399.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qcm6125 firmware, qcs410 firmware +30 more +32 moreu'Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the...CVE-2020-112027.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 moreu'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number...CVE-2020-111969.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 moreu'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned...CVE-2020-111939.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009w firmware, msm8909w firmware +29 more +31 moreu'Use after free issue in Bluetooth transport driver when a method in the object is accessed...CVE-2020-111757.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +79 more +81 moreu'Buffer over read in boot due to size check ignored before copying GUID attribute from request...CVE-2020-111327.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +113 more +115 moreu'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to...CVE-2020-111235.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +44 more +46 moreu'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0)...CVE-2020-37047.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8076 firmware +39 more +41 moreu'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode...CVE-2020-37039.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, bitra firmware +27 more +29 moreu'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the...CVE-2020-36907.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +43 more +45 moreu'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents...CVE-2020-36847.8 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm agatti firmware, kamorta firmware +7 more +9 moreu'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a...CVE-2020-36787.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +38 more +40 moreu'Buffer overflow can happen as part of SIP message packet processing while storing values in...CVE-2020-36739.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +51 more +53 moreu'Potential out of bounds read while processing downlink NAS transport message due to improper...CVE-2020-36709.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +39 more +41 moreu'Buffer overflow occurs while processing SIP message packet due to lack of check of index...CVE-2020-36549.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8096au firmware +28 more +30 moreu'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue...CVE-2020-111647.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +49 more +51 moreu'Array index underflow issue in adsp driver due to improper check of channel id before used as...CVE-2020-11174Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +46 more +48 moreu'Out of bound access can happen in MHI command process due to lack of check of channel id value...CVE-2020-11125Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, apq8096au firmware +48 more +50 moreu'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport...CVE-2020-36349.1 Critical
- qualcomm, inc. snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm kamorta firmware, nicobar firmware +14 more +16 moreu'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely...CVE-2020-36177.1 High
- Show olderLoading…