VendorsQualcommapq8017_firmwareall versions
Vulnerabilities

Qualcomm APQ8017 Firmware

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

401CVEs
CVE-2021-1895
Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Published 2021-05-07 · Modified
7.8EPSS 0.002
CVE-2021-1909
Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Published 2021-09-09 · Modified
7.8EPSS 0.002
CVE-2021-30289
Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Published 2022-01-03 · Modified
7.8EPSS 0.002
CVE-2021-30303
Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Published 2022-01-03 · Modified
7.8EPSS 0.002
CVE-2021-30254
Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Published 2021-11-12 · Modified
7.8EPSS 0.002
CVE-2021-30255
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Published 2021-11-12 · Modified
7.8EPSS 0.002
CVE-2021-30319
Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Published 2022-01-13 · Modified
7.8EPSS 0.002
CVE-2021-30323
Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Published 2022-02-11 · Modified
7.8EPSS 0.002
CVE-2021-1973
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Published 2021-11-12 · Modified
7.8EPSS 0.002
CVE-2021-30268
Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Published 2022-01-03 · Modified
7.8EPSS 0.002
CVE-2021-30270
Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Published 2022-01-03 · Modified
7.8EPSS 0.002
CVE-2021-30271
Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Published 2022-01-03 · Modified
7.8EPSS 0.002
CVE-2021-30272
Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Published 2022-01-03 · Modified
7.8EPSS 0.002
CVE-2019-14001
Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905, MSM8909W, MSM8917, MSM8953, MSM8996AU, QM215, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDX20
Published 2020-04-16 · Modified
7.8EPSS 0.001
CVE-2021-30333
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Published 2022-04-01 · Modified
7.8EPSS 0.001
CVE-2024-33042
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host
Published 2024-09-02 · Analyzed
7.8EPSS 0.001
CVE-2024-33052
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host
Published 2024-09-02 · Analyzed
7.8EPSS 0.001
CVE-2022-25705
Integer Overflow to Buffer Overflow in Modem
Published 2023-03-07 · Modified
7.8EPSS 0.001
CVE-2022-33248
Integer overflow to buffer overflow in User Identity Module
Published 2023-02-09 · Modified
7.8EPSS 0.001
CVE-2022-33233
Configuration weakness in modem
Published 2023-02-09 · Modified
7.8EPSS 0.001
CVE-2022-33302
Improper validation of array index in User Identity Module
Published 2023-04-04 · Modified
7.8EPSS 0.001
CVE-2023-28551
Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS
Published 2023-12-05 · Modified
7.8EPSS 0.001
CVE-2023-28550
Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance
Published 2023-12-05 · Modified
7.8EPSS 0.001
CVE-2023-28565
Improper Validation of Array Index in WLAN HAL
Published 2023-09-05 · Modified
7.8EPSS 0.001
CVE-2023-22387
Use of Out-of-range Pointer Offset in Qualcomm IPC
Published 2023-07-04 · Modified
7.8EPSS 0.001
CVE-2022-33296
Integer overflow to buffer overflow in Modem
Published 2023-04-04 · Modified
7.8EPSS 0.001
CVE-2022-33266
Integer overflow to buffer overflow in Audio
Published 2023-01-06 · Modified
7.8EPSS 0.001
CVE-2023-33120
Use After Free in Audio
Published 2024-01-02 · Modified
7.8EPSS 0.001
CVE-2023-33059
Buffer Copy Without Checking Size of Input in Audio
Published 2023-11-07 · Modified
7.8EPSS 0.001
CVE-2023-33018
Integer Overflow to Buffer Overflow in User Identity Module
Published 2023-12-05 · Modified
7.8EPSS 0.001
CVE-2023-28546
Buffer Copy Without Checking Size of Input in SPS Applications
Published 2023-12-05 · Modified
7.8EPSS 0.001
CVE-2023-24850
Improper Validation of Array Index in HLOS
Published 2023-10-03 · Modified
7.8EPSS 0.001
CVE-2018-11816
Use After Free in Video
Published 2024-11-26 · Analyzed
7.8EPSS 0.001
CVE-2023-33031
Buffer Copy Without Checking Size of Input in Automotive Audio
Published 2023-11-07 · Modified
7.8EPSS 0.001
CVE-2023-43513
Use of Out-of-range Pointer Offset in PCIe
Published 2024-02-06 · Modified
7.8EPSS 0.001
CVE-2025-21453
Use After Free in GPS HLOS Driver
Published 2025-05-06 · Analyzed
7.8EPSS 0.001
CVE-2024-43052
Improper Input Validation in Video Analytics and Processing
Published 2024-12-02 · Analyzed
7.8EPSS 0.001
CVE-2025-27053
Incorrect Calculation of Buffer Size in HLOS
Published 2025-10-09 · Analyzed
7.8EPSS 0.001
CVE-2025-47320
Out-of-bounds Write in Audio
Published 2025-12-18 · Analyzed
7.8EPSS 0.001
CVE-2020-11226
Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Published 2021-03-17 · Modified
7.5EPSS 0.009
← Prev8 / 11Next →