Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

169 records in Msm8998 Firmware · all components

Priority MEDIUM 45

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9206, MDM9607, SD 845, MSM8996, MSM8998, it is possible for IPA (internet protocol accelerator) channels owned…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01252 Published 2018-04-11 No fix listed CWE-668
Priority MEDIUM 44

u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-11-12 No fix listed CWE-119
Priority MEDIUM 44

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-11-12 No fix listed CWE-125
Priority MEDIUM 44

Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00879 Published 2020-07-30 No fix listed CWE-120
Priority MEDIUM 44

u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon C…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01111 Published 2020-09-08 No fix listed CWE-119
Priority MEDIUM 44

u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01071 Published 2020-09-08 No fix listed CWE-120
Priority MEDIUM 44

Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00915 Published 2020-06-22 No fix listed CWE-787
Priority MEDIUM 44

Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00962 Published 2020-06-22 No fix listed CWE-120
Priority MEDIUM 44

Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validation checks in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-06-22 No fix listed CWE-120
Priority MEDIUM 44

Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00949 Published 2020-06-22 No fix listed CWE-129
Priority MEDIUM 44

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-11-02 No fix listed CWE-129
Priority MEDIUM 44

Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01084 Published 2020-06-02 No fix listed CWE-190
Priority MEDIUM 44

Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01141 Published 2020-06-02 No fix listed CWE-129
Priority MEDIUM 44

Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-04-16 No fix listed CWE-787
Priority MEDIUM 44

Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voic…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-04-16 No fix listed CWE-120
Priority MEDIUM 44

Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-04-16 No fix listed CWE-190
Priority MEDIUM 44

Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-04-16 No fix listed CWE-119
Priority MEDIUM 44

Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapd…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-04-16 No fix listed CWE-120
Priority MEDIUM 44

Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-04-16 No fix listed CWE-120
Priority MEDIUM 44

Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-03-05 No fix listed CWE-120
Priority MEDIUM 44

Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electroni…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-03-05 No fix listed CWE-120
Priority MEDIUM 44

Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit integer which can lead to unexpected result during the check in Snapdragon Auto, Snapdragon Compute, S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-03-05 No fix listed CWE-190
Priority MEDIUM 44

While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified in the attribute length field of extended SSI which can lead to integer underfl…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00958 Published 2020-03-05 No fix listed CWE-191
Priority MEDIUM 44

Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-06-22 No fix listed CWE-120
Priority MEDIUM 44

u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-09-08 No fix listed CWE-908
Load more
Open these records in search →