Read the docs

Qualcomm

Records3060All Threatist records
Exploited (KEV)12In CISA KEV
CVSS critical678CVSS 9.0–10.0
CVSS high1984CVSS 7.0–8.9

Exploited now

Qualcomm records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

81 records in Sd 600 Firmware · all components

Priority MEDIUM 45

Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snap…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01621 Published 2019-07-25 No fix listed CWE-125
Priority MEDIUM 45

In Snapdragon Automobile, Snapdragon Wearable and Snapdragon Mobile MDM9206,MDM9607,MDM9650,SD 210/SD 212/SD 205,SD 400,SD 410/12,SD 425,SD 430,SD 450,SD 600,SD 602A,SD 615/16/SD 415,SD 617,SD 625,SD 650/52,SD 800,SD 808…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01408 Published 2018-03-15 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600,…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM96…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 600, and SD 800, a buffer overflow can occur when processing an audio buffer.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01354 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01445 Published 2018-04-18 No fix listed CWE-190
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, SD 400, SD 425, SD 430, SD 450, SD 600, SD 617,…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01344 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MDM9615, MDM9625, MDM9640, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 40…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 600, SD 625, SD 650/52,…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2018-04-18 No fix listed CWE-119
Priority MEDIUM 45

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA6174A, QCA6574AU, QCA9377,…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01377 Published 2018-04-18 No fix listed CWE-264
Priority MEDIUM 44

Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapd…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2019-11-06 No fix listed CWE-119
Priority MEDIUM 44

Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01084 Published 2019-11-06 No fix listed CWE-476
Priority MEDIUM 44

Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snap…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2019-11-06 No fix listed CWE-129
Priority MEDIUM 44

Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, S…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2019-11-06 No fix listed CWE-787
Priority MEDIUM 44

Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Io…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01169 Published 2019-11-06 No fix listed CWE-190
Priority MEDIUM 44

Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon V…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0093 Published 2019-07-25 No fix listed CWE-119
Priority MEDIUM 44

When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrago…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00907 Published 2019-11-06 No fix listed CWE-119
Priority MEDIUM 44

Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon M…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00903 Published 2019-07-25 No fix listed CWE-119
Priority MEDIUM 44

Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00988 Published 2019-05-24 No fix listed CWE-191
Priority MEDIUM 44

Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to read from input buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00988 Published 2019-05-24 No fix listed CWE-191
Priority MEDIUM 44

Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00935 Published 2019-05-24 No fix listed CWE-416
Priority MEDIUM 44

Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150,…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01118 Published 2019-05-24 No fix listed CWE-190
Priority MEDIUM 44

Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01112 Published 2019-05-24 No fix listed CWE-190
Priority MEDIUM 44

Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out of bound read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity,…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00815 Published 2019-06-14 No fix listed CWE-125
Load more
Open these records in search →