VendorsQualcommqsm8250_firmwareall versions
Vulnerabilities

Qualcomm QSM8250 Firmware

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

194CVEs
CVE-2020-11182
Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Published 2021-06-09 · Modified
10.0EPSS 0.008
CVE-2021-35104
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Published 2022-06-14 · Modified
10.0EPSS 0.008
CVE-2021-30351
An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Published 2022-01-03 · Modified
9.8EPSS 0.040
CVE-2022-25748
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Published 2022-10-19 · Modified
9.8EPSS 0.005
CVE-2022-40514
Buffer copy without checking size of input in WLAN Firmware
Published 2023-02-09 · Modified
9.8EPSS 0.005
CVE-2022-40510
Buffer copy without checking size of input in Audio.
Published 2023-08-08 · Modified
9.8EPSS 0.004
CVE-2022-33234
Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Published 2022-11-15 · Modified
9.8EPSS 0.003
CVE-2025-27071
Buffer Copy Without Checking Size of Input in Powerline Communication Firmware
Published 2025-08-06 · Analyzed
9.8EPSS 0.002
CVE-2021-30275
Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Published 2022-01-03 · Modified
9.3EPSS 0.002
CVE-2021-1942
Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Published 2022-04-01 · Modified
9.3EPSS 0.002
CVE-2021-30276
Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wired Infrastructure and Networking
Published 2022-01-03 · Modified
9.3EPSS 0.002
CVE-2021-30285
Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Published 2022-01-13 · Modified
9.3EPSS 0.001
CVE-2023-28578
Improper Input Validation in Services
Published 2024-03-04 · Analyzed
9.3EPSS 0.001
CVE-2023-33030
Buffer Copy without Checking Size of Input in HLOS
Published 2024-01-02 · Modified
9.3EPSS 0.001
CVE-2022-33288
Buffer copy without checking the size of input in Core
Published 2023-04-04 · Modified
9.3EPSS 0.001
CVE-2023-21651
Incorrect Type Conversion or Cast in Core
Published 2023-08-08 · Modified
9.3EPSS 0.001
CVE-2022-33232
Buffer copy without checking size of input in Hypervisor
Published 2023-02-09 · Modified
9.3EPSS 0.001
CVE-2023-33072
Buffer copy without checking size of Input in Core
Published 2024-02-06 · Modified
9.3EPSS 0.001
CVE-2022-33257
Time-of-check time-of-use race condition in Core
Published 2023-03-07 · Modified
9.3EPSS 0.001
CVE-2022-33231
Double free in Core
Published 2023-04-04 · Modified
9.3EPSS 0.001
CVE-2020-11301
Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Published 2021-09-08 · Modified
9.1EPSS 0.111
CVE-2024-38408
Cryptographic Issues in BT Controller
Published 2024-11-04 · Analyzed
9.1EPSS 0.001
CVE-2023-28585
Integer Overflow to Buffer Overflow in TZ Secure OS
Published 2023-12-05 · Modified
8.8EPSS 0.001
CVE-2022-40507
Double free in Core
Published 2023-06-06 · Modified
8.4EPSS 0.013
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux
Published 2023-12-05 · Analyzed
8.4KEVEPSS 0.009
CVE-2022-40516
Stack-based buffer overflow in Core
Published 2023-01-06 · Modified
8.4EPSS 0.009
CVE-2022-40520
Stack based buffer overflow in Core
Published 2023-01-06 · Modified
8.4EPSS 0.007
CVE-2020-11245
Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Published 2021-04-07 · Modified
8.4EPSS 0.002
CVE-2021-35105
Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Published 2022-04-01 · Modified
8.4EPSS 0.002
CVE-2023-21665
Incorrect Type Conversion or Cast in Graphics
Published 2023-05-02 · Modified
8.4EPSS 0.002
CVE-2023-21666
Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
Published 2023-05-02 · Modified
8.4EPSS 0.002
CVE-2021-1889
Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Published 2021-07-13 · Modified
8.4EPSS 0.002
CVE-2021-1886
Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Published 2021-07-13 · Modified
8.4EPSS 0.002
CVE-2021-1888
Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Published 2021-07-13 · Modified
8.4EPSS 0.002
CVE-2021-1890
Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Published 2021-07-13 · Modified
8.4EPSS 0.002
CVE-2021-1949
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
Published 2021-10-20 · Modified
8.4EPSS 0.002
CVE-2021-30334
Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
Published 2022-06-14 · Modified
8.4EPSS 0.002
CVE-2023-33088
NULL pointer dereference in WLAN Firmware
Published 2023-12-05 · Modified
8.4EPSS 0.002
CVE-2023-33022
Integer Overflow to Buffer Overflow in HLOS
Published 2023-12-05 · Modified
8.4EPSS 0.002
CVE-2021-30281
Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Published 2022-06-14 · Modified
8.4EPSS 0.002
1 / 5Next →