Qca9377 Firmware

CVEs (560)

• CVE-2020-11226HigMar 17, 2021
  Qualcomm

  Snapdragon
  risk 0.49cvss 7.5epss 0.01

  Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music,…

• CVE-2020-11218HigMar 17, 2021
  Qualcomm

  Snapdragon
  risk 0.49cvss 7.5epss 0.01

  Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

• CVE-2020-11296HigFeb 22, 2021
  Qualcomm

  Snapdragon
  risk 0.49cvss 7.5epss 0.01

  Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon…

• CVE-2020-11119HigJan 21, 2021
  Qualcomm

  Snapdragon
  risk 0.49cvss 7.5epss 0.01

  Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial…

• CVE-2020-3704HigNov 2, 2020
  Qualcomm

  Snapdragon
  risk 0.49cvss 7.5epss 0.01

  u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral system enter into dead lock state.(This CVE is equivalent to InvalidConnectionRequest(CVE-2019-19193) mentioned in sweyntooth paper)' in…

• CVE-2020-11118HigSep 8, 2020
  Qualcomm

  Snapdragon
  risk 0.49cvss 7.5epss 0.01

  u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &…

• CVE-2020-11115HigSep 8, 2020
  Qualcomm

  Snapdragon
  risk 0.49cvss 7.5epss 0.01

  u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon…

• CVE-2020-3651HigApr 16, 2020
  Qualcomm

  Snapdragon
  risk 0.49cvss 7.5epss 0.01

  Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

• CVE-2019-2310HigDec 12, 2019
  Qualcomm

  Snapdragon
  risk 0.49cvss 7.5epss 0.01

  Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…

• CVE-2018-11291HigSep 20, 2018
  Qualcomm

  Snapdragon
  risk 0.49cvss 7.5epss 0.01

  In Snapdragon (Automobile, Mobile, Wear) in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 650/52, SD 810,…

• CVE-2016-10464HigApr 18, 2018
  Qualcomm

  Snapdragon Mobile
  risk 0.49cvss 7.5epss 0.01

  In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574AU, QCA9377, SD 210/SD 212/SD 205, SD 425, SD 600, SD 650/52, SD 808, SD 810, SD 820, and SDX20, lack of input…

• CVE-2017-18126HigApr 11, 2018
  Qualcomm

  Snapdragon Mobile
  risk 0.49cvss 7.5epss 0.01

  In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD…

• CVE-2017-18072HigApr 11, 2018
  Qualcomm

  Snapdragon Mobile
  risk 0.49cvss 7.5epss 0.01

  In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6564, QCA6574, QCA6574AU, QCA6584, QCA6584AU, QCA9377, QCA9378, QCA9379, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427,…

• CVE-2026-24092HigJun 1, 2026
  Qualcomm

  Fastboot
  risk 0.47cvss 7.2epss 0.00

  Memory Corruption when processing fastboot commands to set display mode.

• CVE-2026-24091HigJun 1, 2026
  Qualcomm

  Fastboot
  risk 0.47cvss 7.2epss 0.00

  Memory corruption while processing fastboot commands with improperly formatted input.

• CVE-2026-24089HigJun 1, 2026
  Qualcomm

  Fastboot
  risk 0.47cvss 7.2epss 0.00

  Memory corruption while processing fastboot commands with invalid input.

• CVE-2026-24087HigJun 1, 2026
  Qualcomm

  Fastboot
  risk 0.47cvss 7.2epss 0.00

  Memory corruption while processing fastboot OEM commands.

• CVE-2026-24085HigJun 1, 2026
  Qualcomm

  Fastconnect 6900 Firmware
  risk 0.47cvss 7.2epss 0.00

  Memory Corruption when processing display command line information due to improper initialization of a variable.

• CVE-2025-47383HigMar 2, 2026
  Qualcomm

  VoWiFi
  risk 0.47cvss 7.2epss 0.00

  Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.

• CVE-2024-21469HigJul 1, 2024
  Qualcomm

  Trusted Application
  risk 0.47cvss 7.3epss 0.00

  Memory corruption when an invoke call and a TEE call are bound for the same trusted application.