Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

154 records in Mdm9615 Firmware · all components

Priority MEDIUM 52

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.11108 Published 2021-09-08 No fix listed CWE-287
Priority MEDIUM 49

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00507 Published 2022-10-19 No fix listed CWE-129
Priority MEDIUM 49

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00497 Published 2022-10-19 No fix listed CWE-252
Priority MEDIUM 47

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00256 Published 2024-06-03 No fix listed CWE-287
Priority MEDIUM 45

Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Sna…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01352 Published 2019-02-25 No fix listed CWE-787
Priority MEDIUM 45

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, S…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01252 Published 2018-04-11 No fix listed CWE-416
TI-2016-08541 CVE-2016-10498 · GHSA-hwgv-4wq4-jrqh

Injection in Qualcomm Snapdragon Mobile

Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, MDM9645, MDM9650, MDM9655, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/S…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01228 Published 2018-04-18 No fix listed CWE-74
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM96…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 600, and SD 800, a buffer overflow can occur when processing an audio buffer.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01354 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, and SD 810, improper input validation can cause a null pointer dereference in USB bootloader find_ep(…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01377 Published 2018-04-18 No fix listed CWE-476
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 40…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 808, and SD 810, in ADSP's QDI Root-PD driver, untrus…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01329 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 44

Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00869 Published 2021-11-12 No fix listed CWE-787
Priority MEDIUM 44

Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00808 Published 2021-09-08 No fix listed CWE-120
Priority MEDIUM 44

Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2021-05-07 No fix listed CWE-190
Priority MEDIUM 44

Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00834 Published 2021-02-22 No fix listed CWE-120
Priority MEDIUM 44

u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-09-08 No fix listed CWE-908
Priority MEDIUM 44

Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-03-05 No fix listed CWE-129
Priority MEDIUM 44

Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-03-05 No fix listed CWE-787
Load more
Open these records in search →