Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

244 records in Qcs603 Firmware · all components

Priority CRITICAL 93KEV

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01529 Published 2021-06-09 No fix listed CWE-20
Priority MEDIUM 57

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Ele…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13186 Published 2021-09-08 No fix listed CWE-287
Priority MEDIUM 52

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics C…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.11108 Published 2021-09-08 No fix listed CWE-287
Priority MEDIUM 49

An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrag…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04018 Published 2022-01-03 No fix listed CWE-120
Priority MEDIUM 44

Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0084 Published 2022-06-14 No fix listed CWE-120
Priority MEDIUM 44

Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00869 Published 2021-11-12 No fix listed CWE-787
Priority MEDIUM 44

Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00808 Published 2021-09-08 No fix listed CWE-120
Priority MEDIUM 44

Buffer overflow in modem due to improper array index check before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00937 Published 2021-07-13 No fix listed CWE-129
Priority MEDIUM 44

Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Vo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01093 Published 2021-03-17 No fix listed CWE-120
Priority MEDIUM 44

Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2021-05-07 No fix listed CWE-190
Priority MEDIUM 44

Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00911 Published 2021-03-17 No fix listed CWE-129
Priority MEDIUM 44

u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2020-11-12 No fix listed CWE-119
Priority MEDIUM 44

u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-11-12 No fix listed CWE-125
Priority MEDIUM 44

Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Sn…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01099 Published 2021-03-17 No fix listed CWE-787
Priority MEDIUM 44

Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00808 Published 2021-06-09 No fix listed CWE-787
Priority MEDIUM 44

Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00834 Published 2021-02-22 No fix listed CWE-120
Priority MEDIUM 44

u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IO…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-11-12 No fix listed CWE-476
Priority MEDIUM 44

u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflow' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon I…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2020-11-12 No fix listed CWE-129
Priority MEDIUM 43

Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00475 Published 2023-02-09 No fix listed CWE-120
Priority MEDIUM 43

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00427 Published 2023-08-08 No fix listed CWE-457
Priority MEDIUM 43

memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00608 Published 2022-06-14 No fix listed CWE-120
Priority MEDIUM 43

Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00592 Published 2022-06-14 No fix listed CWE-415
Load more
Open these records in search →