Skip to content
Qualcomm Sdm845 vulnerabilities
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +364 more +366 more
Buffer over-read in WLAN Firmware
CVE-2023-33080
7.5 High
-
qualcomm apq5053-aa firmware, aqt1000 firmware, ar8031 firmware +100 more +102 more
Improper Authentication in Automotive OS
CVE-2023-33070
7.1 High
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +166 more +168 more
Improper Authentication in GPS HLOS Driver
CVE-2023-33054
9.1 Critical
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +261 more +263 more
Integer Overflow to Buffer Overflow in User Identity Module
CVE-2023-33018
7.8 High
-
qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +275 more +277 more
Buffer Copy Without Checking Size of Input in Boot
CVE-2023-33017
7.8 High
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +313 more +315 more
Use After Free in DSP Services
CVE-2023-33063
In KEVFix available
7.8 High
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +257 more +259 more
Buffer Copy Without Checking Size of Input in Audio
CVE-2023-33059
Fix available
7.8 High
-
qualcomm apq5053-aa firmware, apq8009 firmware, apq8017 firmware +163 more +165 more
Buffer Copy Without Checking Size of Input in Automotive Audio
CVE-2023-33031
Fix available
7.8 High
-
qualcomm 8098 firmware, 8998 firmware, apq5053-aa firmware +265 more +267 more
Buffer Copy Without Checking Size of Input in WLAN HAL
CVE-2023-28560
7.8 High
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +181 more +183 more
Integer Overflow or Wraparound in Audio
CVE-2023-28537
8.4 High
-
qualcomm 315 5g iot modem firmware, 8953pro firmware, 9205 lte modem firmware +240 more +242 more
Improper authorization in Modem
CVE-2022-40521
7.5 High
-
qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +240 more +242 more
Double free in Core
CVE-2022-40507
8.4 High
-
qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6800 firmware +118 more +120 more
Double free in Automotive
CVE-2022-33307
8.4 High
-
qualcomm 315 5g iot modem firmware, 8953pro firmware, 9207 lte modem firmware +271 more +273 more
Stack-based buffer overflow in Modem
CVE-2022-33264
7.9 High
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +180 more +182 more
Improper Access control in GPU Subsystem
CVE-2023-21670
Fix available
7.8 High
-
qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +187 more +189 more
Reachable assertion in Modem
CVE-2022-40504
7.5 High
-
qualcomm aqt1000 firmware, ar8035 firmware, qam8295p firmware +97 more +99 more
Buffer over-read in Trusted Execution Environment
CVE-2022-33273
7.3 High
-
qualcomm 8905 firmware, 8909 firmware, 8917 firmware +163 more +165 more
Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
CVE-2023-21666
Fix available
8.4 High
-
qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +263 more +265 more
Incorrect Type Conversion or Cast in Graphics
CVE-2023-21665
Fix available
8.4 High
-
qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +351 more +353 more
Integer overflow or wraparound in WLAN
CVE-2022-40532
8.4 High
-
qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +223 more +225 more
Improper validation of array index in User Identity Module
CVE-2022-33302
6.8 Medium
-
qualcomm 315 5g iot modem firmware, 7wcn785x-1 firmware, 8905 firmware +269 more +271 more
Improper validation of array index in Modem
CVE-2022-33289
6.8 Medium
-
qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8035 firmware +146 more +148 more
Buffer copy without checking the size of input in Core
CVE-2022-33288
9.3 Critical
-
qualcomm aqt1000 firmware, ar8035 firmware, qam8295p firmware +99 more +101 more
Integer overflow or wraparound in Core
CVE-2022-33269
9.3 Critical
-
qualcomm 315 5g iot modem firmware, 8098 firmware, 8909 firmware +217 more +219 more
Double free in Core
CVE-2022-33231
9.3 Critical
-
qualcomm 8905 firmware, 8909 firmware, 8953 firmware +183 more +185 more
Buffer over-read in Bluetooth Host.
CVE-2022-40503
Fix available
8.2 High
-
qualcomm, inc. snapdragon mobile, snapdragon compute, snapdragon auto, snapdragon iot, snapdragon connectivity, snapdragon voice & music, qualcomm apq8097 firmware, apq8098 firmware +77 more +79 more
Buffer overflow in sahara protocol while processing commands leads to overwrite of secure...
CVE-2021-30327
Public exploit
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +87 more +89 more
u'When a non standard SIP sigcomp message is received from the network, then there may be chances...
CVE-2020-3639
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8052 firmware, apq8056 firmware +60 more +62 more
u'Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length'...
CVE-2020-11207
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8098 firmware, msm8998 firmware +52 more +54 more
u'Possible buffer overflow in Fastrpc while handling received parameters due to lack of...
CVE-2020-11206
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qcm6125 firmware, qcs410 firmware +30 more +32 more
u'Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the...
CVE-2020-11202
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qcm6125 firmware, qcs410 firmware +26 more +28 more
u'Arbitrary access to DSP memory due to improper check in loaded library for data received from...
CVE-2020-11201
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 more
u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number...
CVE-2020-11196
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +90 more +92 more
u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned...
CVE-2020-11193
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009w firmware, msm8909w firmware +29 more +31 more
u'Use after free issue in Bluetooth transport driver when a method in the object is accessed...
CVE-2020-11175
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +59 more +61 more
u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to...
CVE-2020-11168
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +79 more +81 more
u'Buffer over read in boot due to size check ignored before copying GUID attribute from request...
CVE-2020-11132
7.1 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm mdm9205 firmware, qcm4290 firmware +51 more +53 more
u'Integer overflow can cause a buffer overflow due to lack of table length check in the...
CVE-2020-11127
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +113 more +115 more
u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to...
CVE-2020-11123
5.5 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +44 more +46 more
u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0)...
CVE-2020-3704
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8076 firmware +39 more +41 more
u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode...
CVE-2020-3703
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, bitra firmware +27 more +29 more
u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the...
CVE-2020-3690
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +43 more +45 more
u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents...
CVE-2020-3684
7.8 High
-
qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm agatti firmware, kamorta firmware +7 more +9 more
u'A buffer overflow could occur if the API is improperly used due to UIE init does not contain a...
CVE-2020-3678
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +38 more +40 more
u'Buffer overflow can happen as part of SIP message packet processing while storing values in...
CVE-2020-3673
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +51 more +53 more
u'Potential out of bounds read while processing downlink NAS transport message due to improper...
CVE-2020-3670
9.1 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +35 more +37 more
u'Remote code execution can happen by sending a carefully crafted POST query when Device...
CVE-2020-3657
EPSS 26.6%
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm agatti firmware, apq8053 firmware +39 more +41 more
u'Buffer overflow occurs while processing SIP message packet due to lack of check of index...
CVE-2020-3654
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +49 more +51 more
u'Array index underflow issue in adsp driver due to improper check of channel id before used as...
CVE-2020-11174
Fix available
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm agatti firmware, apq8009 firmware +38 more +40 more
u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events...
CVE-2020-11162
Fix available
7.8 High
- Show olderLoading…