Qualcomm Ipq4019 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Qualcomm Ipq4019 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (156)

• CVE-2024-21473 — CVSS 9.8 (critical): Memory corruption while redirecting log file to any file location with any file name.
• CVE-2014-10052 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055…
• CVE-2014-9988 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear SD…
• CVE-2014-9998 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear…
• CVE-2015-9120 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear…
• CVE-2023-33083 — CVSS 9.8 (critical): Memory corruption in WLAN Host while processing RRM beacon on the AP.
• CVE-2015-9190 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607…
• CVE-2015-9198 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear…
• CVE-2015-9199 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile IPQ4019, MDM9625…
• CVE-2015-9208 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607…
• CVE-2015-9220 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, IPQ8064, MDM9206…
• CVE-2014-10045 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607…
• CVE-2016-10422 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and…
• CVE-2023-33082 — CVSS 9.8 (critical): Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.
• CVE-2016-10436 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055…
• CVE-2016-10474 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear…
• CVE-2016-10484 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear…
• CVE-2016-10485 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607…
• CVE-2022-33279 — CVSS 9.8 (critical): Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
• CVE-2021-1976 — CVSS 9.8 (critical): A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute…
• CVE-2021-1972 — CVSS 9.8 (critical): Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2021-1965 — CVSS 9.8 (critical): Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute…
• CVE-2020-3657 — CVSS 9.8 (critical): u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client…
• CVE-2020-11172 — CVSS 9.8 (critical): u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack overflow' in…
• CVE-2020-11117 — CVSS 9.8 (critical): u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content…
• CVE-2015-9138 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, and…
• CVE-2015-9143 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607…
• CVE-2015-9152 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile IPQ4019, SD 210/SD…
• CVE-2015-9153 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear…
• CVE-2015-9157 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607…
• CVE-2015-9165 — CVSS 9.8 (critical): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607…
• CVE-2019-10622 — CVSS 9.1 (critical): Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in…
• CVE-2020-11301 — CVSS 9.1 (critical): Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon…
• CVE-2019-14063 — CVSS 9.1 (critical): Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute…
• CVE-2018-13906 — CVSS 9.1 (critical): The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application…
• CVE-2021-1924 — CVSS 9.0 (critical): Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute…
• CVE-2020-11269 — CVSS 8.8 (high): Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto…
• CVE-2020-11258 — CVSS 8.8 (high): Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking
• CVE-2020-11257 — CVSS 8.8 (high): Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking
• CVE-2020-11259 — CVSS 8.8 (high): Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking
• CVE-2020-11256 — CVSS 8.8 (high): Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and…
• CVE-2021-30335 — CVSS 8.4 (high): Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon…
• CVE-2020-11267 — CVSS 8.4 (high): Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto…
• CVE-2022-33243 — CVSS 8.4 (high): Memory corruption due to improper access control in Qualcomm IPC.
• CVE-2022-25655 — CVSS 8.4 (high): Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.
• CVE-2021-30337 — CVSS 8.4 (high): Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto…
• CVE-2021-1927 — CVSS 8.4 (high): Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute…
• CVE-2023-21628 — CVSS 8.4 (high): Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
• CVE-2021-35088 — CVSS 8.2 (high): Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon…
• CVE-2022-22062 — CVSS 8.2 (high): An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute…
• CVE-2026-24088 — CVSS 8.2 (high): Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
• CVE-2016-10417 — CVSS 8.1 (high): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear…
• CVE-2023-28544 — CVSS 7.8 (high): Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
• CVE-2019-10595 — CVSS 7.8 (high): Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in…
• CVE-2019-10536 — CVSS 7.8 (high): Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on…
• CVE-2019-10518 — CVSS 7.8 (high): Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-3666 — CVSS 7.8 (high): u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2020-3696 — CVSS 7.8 (high): u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use for checking…
• CVE-2024-23368 — CVSS 7.8 (high): Memory corruption when allocating and accessing an entry in an SMEM partition.
• CVE-2021-1915 — CVSS 7.8 (high): Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute…
• CVE-2019-10512 — CVSS 7.8 (high): Payload size is not checked before using it as array index in audio in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT…
• CVE-2019-10499 — CVSS 7.8 (high): Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access. in…
• CVE-2019-10491 — CVSS 7.8 (high): ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-10481 — CVSS 7.8 (high): Out of bound access occurs while handling the WMI FW event due to lack of check of buffer argument which comes directly from the WLAN FW in…
• CVE-2019-10480 — CVSS 7.8 (high): Out of bound write can happen in WMI firmware event handler due to lack of validation of data received from WLAN firmware in Snapdragon…
• CVE-2021-30303 — CVSS 7.8 (high): Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute…
• CVE-2023-33063 — CVSS 7.8 (high) — actively exploited: Memory corruption in DSP Services during a remote call from HLOS to DSP.
• CVE-2018-11968 — CVSS 7.8 (high): Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…
• CVE-2023-28567 — CVSS 7.8 (high): Memory corruption in WLAN HAL while handling command through WMI interfaces.
• CVE-2021-35069 — CVSS 7.8 (high): Improper validation of data length received from DMA buffer can lead to memory corruption. in Snapdragon Auto, Snapdragon Compute…
• CVE-2023-28565 — CVSS 7.8 (high): Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
• CVE-2018-11925 — CVSS 7.8 (high): Data length received from firmware is not validated against the max allowed size which can result in buffer overflow. in Snapdragon Auto…
• CVE-2021-35103 — CVSS 7.8 (high): Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon…
• CVE-2018-11871 — CVSS 7.8 (high): Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon…
• CVE-2023-28564 — CVSS 7.8 (high): Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
• CVE-2023-28560 — CVSS 7.8 (high): Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
• CVE-2023-28559 — CVSS 7.8 (high): Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
• CVE-2023-28549 — CVSS 7.8 (high): Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
• CVE-2017-18279 — CVSS 7.8 (high): Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon…
• CVE-2017-18124 — CVSS 7.8 (high): During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon…
• CVE-2023-22387 — CVSS 7.8 (high): Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.
• CVE-2023-28541 — CVSS 7.8 (high): Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
• CVE-2019-2263 — CVSS 7.8 (high): Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity…
• CVE-2019-2266 — CVSS 7.8 (high): Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon…
• CVE-2019-2297 — CVSS 7.8 (high): Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics…
• CVE-2019-2299 — CVSS 7.8 (high): An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Snapdragon…
• CVE-2019-2301 — CVSS 7.8 (high): Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-2304 — CVSS 7.8 (high): Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon…
• CVE-2019-2321 — CVSS 7.8 (high): Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto…
• CVE-2025-47339 — CVSS 7.8 (high): Memory corruption while deinitializing a HDCP session.
• CVE-2019-14060 — CVSS 7.8 (high): Uninitialized stack data gets used If memory is not allocated for blob or if the allocated blob is less than the struct size required due…
• CVE-2020-11125 — CVSS 7.8 (high): u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon…
• CVE-2020-11162 — CVSS 7.8 (high): u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in…
• CVE-2020-11174 — CVSS 7.8 (high): u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto…
• CVE-2020-11235 — CVSS 7.8 (high): Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon…
• CVE-2019-14036 — CVSS 7.8 (high): Possible buffer overflow issue in error processing due to improper validation of array index value in Snapdragon Auto, Snapdragon Consumer…
• CVE-2019-10607 — CVSS 7.8 (high): Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in…
• CVE-2019-10601 — CVSS 7.8 (high): Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from firmware in Snapdragon…
• CVE-2019-10600 — CVSS 7.8 (high): Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid stack memory in…
• CVE-2022-25667 — CVSS 7.5 (high): Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking
• CVE-2021-1980 — CVSS 7.5 (high): Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2023-33116 — CVSS 7.5 (high): Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.
• CVE-2020-3700 — CVSS 7.5 (high): Possible out of bounds read due to a missing bounds check and could lead to local information disclosure in the wifi driver with no…
• CVE-2023-33105 — CVSS 7.5 (high): Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence…
• CVE-2021-1887 — CVSS 7.5 (high): An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure…
• CVE-2015-9123 — CVSS 7.5 (high): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055…
• CVE-2022-33238 — CVSS 7.5 (high): Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon…
• CVE-2021-30312 — CVSS 7.5 (high): Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute…
• CVE-2015-9189 — CVSS 7.5 (high): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, MDM9206, MDM9607…
• CVE-2015-9166 — CVSS 7.5 (high): In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear…
• CVE-2021-1941 — CVSS 7.5 (high): Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute…
• CVE-2024-33050 — CVSS 7.5 (high): Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
• CVE-2024-33014 — CVSS 7.5 (high): Transient DOS while parsing ESP IE from beacon/probe response frame.
• CVE-2021-1943 — CVSS 7.5 (high): Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in…
• CVE-2021-1945 — CVSS 7.5 (high): Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity…
• CVE-2021-1948 — CVSS 7.5 (high): Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon…
• CVE-2024-33012 — CVSS 7.5 (high): Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.
• CVE-2021-1954 — CVSS 7.5 (high): Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon…
• CVE-2021-1964 — CVSS 7.5 (high): Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon…
• CVE-2024-33011 — CVSS 7.5 (high): Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
• CVE-2024-33010 — CVSS 7.5 (high): Transient DOS while parsing fragments of MBSSID IE from beacon frame.
• CVE-2016-10429 — CVSS 7.5 (high): In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and…
• CVE-2016-10438 — CVSS 7.5 (high): In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Mobile, and Snapdragon Wear FSM9055…
• CVE-2020-11270 — CVSS 7.5 (high): Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter…
• CVE-2020-11280 — CVSS 7.5 (high): Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to…
• CVE-2020-11296 — CVSS 7.5 (high): Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2021-1974 — CVSS 7.5 (high): Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon…
• CVE-2021-1909 — CVSS 7.3 (high): Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon…
• CVE-2019-14053 — CVSS 7.1 (high): When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to…
• CVE-2025-21482 — CVSS 7.1 (high): Cryptographic issue while performing RSA PKCS padding decoding.
• CVE-2019-14070 — CVSS 7.0 (high): Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto…
• CVE-2020-11173 — CVSS 7.0 (high): u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute…
• CVE-2022-25666 — CVSS 6.7 (medium): Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute…
• CVE-2021-30264 — CVSS 6.7 (medium): Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon…
• CVE-2021-30266 — CVSS 6.7 (medium): Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto…
• CVE-2021-30313 — CVSS 6.7 (medium): Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto…
• CVE-2021-30325 — CVSS 6.7 (medium): Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon…
• CVE-2021-30324 — CVSS 6.7 (medium): Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in…
• CVE-2022-25677 — CVSS 6.7 (medium): Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
• CVE-2023-28539 — CVSS 6.6 (medium): Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
• CVE-2024-21459 — CVSS 6.5 (medium): Information disclosure while handling beacon or probe response frame in STA.
• CVE-2020-11266 — CVSS 6.5 (medium): Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired…
• CVE-2020-3702 — CVSS 6.5 (medium): u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with…
• CVE-2023-28569 — CVSS 6.1 (medium): Information disclosure in WLAN HAL while handling command through WMI interfaces.
• CVE-2023-28563 — CVSS 6.1 (medium): Information disclosure in IOE Firmware while handling WMI command.
• CVE-2023-28554 — CVSS 6.1 (medium): Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
• CVE-2023-28553 — CVSS 6.1 (medium): Information Disclosure in WLAN Host when processing WMI event command.
• CVE-2022-25722 — CVSS 6.0 (medium): Information exposure in DSP services due to improper handling of freeing memory
• CVE-2018-11942 — CVSS 5.5 (medium): Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory…
• CVE-2020-11265 — CVSS 5.5 (medium): Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and…
• CVE-2019-10626 — CVSS 5.5 (medium): Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon…
• CVE-2019-2330 — CVSS 5.5 (medium): improper input validation in allocation request for secure allocations can lead to page fault. in Snapdragon Auto, Snapdragon Compute…
• CVE-2019-2240 — CVSS 5.5 (medium): While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in…
• CVE-2017-8252 — CVSS 5.5 (medium): Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon…
• CVE-2021-35071 — CVSS 5.5 (medium): Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service…
• CVE-2021-1928 — CVSS 4.6 (medium): Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon…