Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

246 records in Qca9379 Firmware · all components

Priority CRITICAL 93KEV

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01529 Published 2021-06-09 No fix listed CWE-20
Priority MEDIUM 52

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.11108 Published 2021-09-08 No fix listed CWE-287
Priority MEDIUM 49

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00507 Published 2022-10-19 No fix listed CWE-129
Priority MEDIUM 49

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00497 Published 2022-10-19 No fix listed CWE-252
Priority MEDIUM 48

memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00389 Published 2022-10-19 No fix listed CWE-120
Priority MEDIUM 46

Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00559 Published 2022-10-19 No fix listed CWE-125
Priority MEDIUM 46

u'Out of bound memory access while processing GATT data received due to lack of check of pdu data length and leads to remote code execution' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02277 Published 2020-11-02 No fix listed CWE-787
Priority MEDIUM 45

Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snap…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01621 Published 2019-07-25 No fix listed CWE-125
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, IPQ8064, MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6574AU, QCA6584, QCA6584AU, QCA93…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01243 Published 2018-04-18 No fix listed CWE-190
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA6174A, QCA6574AU, QCA9377,…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01377 Published 2018-04-18 No fix listed CWE-264
Priority MEDIUM 44

Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00917 Published 2022-06-14 No fix listed CWE-190
Priority MEDIUM 44

Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00827 Published 2022-06-14 No fix listed CWE-787
Priority MEDIUM 44

Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00869 Published 2021-11-12 No fix listed CWE-787
Priority MEDIUM 44

Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00808 Published 2021-09-08 No fix listed CWE-120
Priority MEDIUM 44

Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Vo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01093 Published 2021-03-17 No fix listed CWE-120
Priority MEDIUM 44

Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of input validation for certain parameters received from the ePDG server in Snapdra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00937 Published 2021-06-09 No fix listed CWE-129
Priority MEDIUM 44

Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2021-05-07 No fix listed CWE-190
Priority MEDIUM 44

Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00894 Published 2021-02-22 No fix listed CWE-416
Priority MEDIUM 44

Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00911 Published 2021-03-17 No fix listed CWE-129
Priority MEDIUM 44

Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Sn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01099 Published 2021-03-17 No fix listed CWE-787
Priority MEDIUM 44

Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00834 Published 2021-02-22 No fix listed CWE-120
Priority MEDIUM 44

u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon C…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-09-08 No fix listed CWE-120
Priority MEDIUM 44

Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00922 Published 2020-07-30 No fix listed CWE-120
Load more
Open these records in search →