Qcm2150 Firmware (Qualcomm) - vulnerabilities (CVEs)

126 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-10-09. Vendor: Qualcomm.

CVEs of Qcm2150 Firmware

CVE-2025-27053 - CVSS 7.8 (high), 2025-10-09: Memory corruption during PlayReady APP usecase while processing TA commands.
CVE-2025-21487 - CVSS 8.2 (high), 2025-09-24: Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.
CVE-2025-21483 - CVSS 9.8 (critical), 2025-09-24: Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.
CVE-2025-27061 - CVSS 7.8 (high), 2025-07-08: Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the video firmware.
CVE-2025-27042 - CVSS 7.8 (high), 2025-07-08: Memory corruption while processing video packets received from video firmware.
CVE-2025-21433 - CVSS 6.2 (medium), 2025-07-08: Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.
CVE-2024-53020 - CVSS 8.2 (high), 2025-06-03: Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
CVE-2024-53026 - CVSS 8.2 (high), 2025-06-03: Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
CVE-2024-53021 - CVSS 8.2 (high), 2025-06-03: Information disclosure may occur while processing goodbye RTCP packet from network.
CVE-2025-21453 - CVSS 7.8 (high), 2025-05-06: Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
CVE-2025-21428 - CVSS 7.5 (high), 2025-04-07: Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
CVE-2025-21424 - CVSS 7.8 (high), 2025-03-03: Memory corruption while calling the NPU driver APIs concurrently.
CVE-2024-53014 - CVSS 7.8 (high), 2025-03-03: Memory corruption may occur while validating ports and channels in Audio driver.
CVE-2024-38426 - CVSS 5.4 (medium), 2025-03-03: While processing the authentication message in UE, improper authentication may lead to information disclosure.
CVE-2024-43052 - CVSS 7.8 (high), 2024-12-02: Memory corruption while processing API calls to NPU with invalid input.
CVE-2024-38423 - CVSS 7.8 (high), 2024-11-04: Memory corruption while processing GPU page table switch.
CVE-2024-38415 - CVSS 7.8 (high), 2024-11-04: Memory corruption while handling session errors from firmware.
CVE-2024-38422 - CVSS 7.8 (high), 2024-11-04: Memory corruption while processing voice packet with arbitrary data received from ADSP.
CVE-2024-33060 - CVSS 8.4 (high), 2024-09-02: Memory corruption when two threads try to map and unmap a single node simultaneously.
CVE-2024-33052 - CVSS 7.8 (high), 2024-09-02: Memory corruption when user provides data for FM HCI command control operations.
CVE-2024-33042 - CVSS 7.8 (high), 2024-09-02: Memory corruption when Alternative Frequency offset value is set to 255.
CVE-2024-33043 - CVSS 5.5 (medium), 2024-09-02: Transient DOS while handling PS event when Program Service name length offset value is set to 255.
CVE-2024-23357 - CVSS 6.2 (medium), 2024-08-05: Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
CVE-2024-23353 - CVSS 7.5 (high), 2024-08-05: Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
CVE-2024-23373 - CVSS 8.4 (high), 2024-07-01: Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
CVE-2024-23368 - CVSS 7.8 (high), 2024-07-01: Memory corruption when allocating and accessing an entry in an SMEM partition.
CVE-2024-21461 - CVSS 8.4 (high), 2024-07-01: Memory corruption while performing finish HMAC operation when context is freed by keymaster.
CVE-2023-33023 - CVSS 8.4 (high), 2024-04-01: Memory corruption while processing finish_sign command to pass a rsp buffer.
CVE-2023-28547 - CVSS 8.4 (high), 2024-04-01: Memory corruption in SPS Application while requesting for public key in sorter TA.
CVE-2020-3696 - CVSS 7.8 (high), 2020-11-02: u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use for checking security permission for…
CVE-2020-3703 - CVSS 9.8 (critical), 2020-11-02: u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central device(This CVE…
CVE-2020-3670 - CVSS 9.1 (critical), 2020-11-02: u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container'…
CVE-2020-3654 - CVSS 9.8 (critical), 2020-11-02: u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon…
CVE-2020-3693 - CVSS 7.8 (high), 2020-11-02: u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-11174 - CVSS 7.8 (high), 2020-11-02: u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-3673 - CVSS 9.8 (critical), 2020-11-02: u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in…
CVE-2020-11162 - CVSS 7.8 (high), 2020-11-02: u'Possible buffer overflow in MHI driver due to lack of input parameter validation of EOT events received from MHI device side' in Snapdragon Auto, Snapdragon…
CVE-2020-11157 - CVSS 7.5 (high), 2020-11-02: u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in Snapdragon Auto,…
CVE-2020-11125 - CVSS 7.8 (high), 2020-11-02: u'Out of bound access can happen in MHI command process due to lack of check of channel id value received from MHI devices' in Snapdragon Auto, Snapdragon…
CVE-2020-11164 - CVSS 7.8 (high), 2020-11-02: u'Third-party app may also call the broadcasts in Perfdump and cause privilege escalation issue due to improper access control' in Snapdragon Auto, Snapdragon…
CVE-2020-3656 - CVSS 7.8 (high), 2020-09-09: Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI devices in Snapdragon Auto,…
CVE-2020-3634 - CVSS 9.1 (critical), 2020-09-09: u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-11135 - CVSS 7.5 (high), 2020-09-09: u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…
CVE-2020-3622 - CVSS 7.8 (high), 2020-09-08: u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can…
CVE-2020-3646 - CVSS 7.8 (high), 2020-09-08: u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Snapdragon Consumer…
CVE-2020-3621 - CVSS 5.5 (medium), 2020-09-08: u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption…
CVE-2020-3643 - CVSS 5.5 (medium), 2020-09-08: u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-3620 - CVSS 5.5 (medium), 2020-09-08: u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and…
CVE-2020-3624 - CVSS 7.8 (high), 2020-09-08: u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto,…
CVE-2020-11128 - CVSS 7.8 (high), 2020-09-08: u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-11115 - CVSS 7.5 (high), 2020-09-08: u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon Auto, Snapdragon…
CVE-2020-11120 - CVSS 7.8 (high), 2020-09-08: u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buffer may not be…
CVE-2020-11118 - CVSS 7.5 (high), 2020-09-08: u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
CVE-2020-11116 - CVSS 9.8 (critical), 2020-09-08: u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto, Snapdragon…
CVE-2019-14115 - CVSS 5.5 (medium), 2020-09-08: u'Information disclosure issue occurs as in current logic as secure touch is released without clearing the display session which can result in user reading…
CVE-2019-10527 - CVSS 7.8 (high), 2020-09-08: u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to…
CVE-2019-13995 - CVSS 7.8 (high), 2020-09-08: u'Lack of integer overflow check for addition of fragment size and remaining size that are read from shared memory can lead to memory corruption and potential…
CVE-2019-14052 - CVSS 9.8 (critical), 2020-09-08: u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdragon…
CVE-2019-13994 - CVSS 7.8 (high), 2020-09-08: u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are less than the actual packet size can…
CVE-2019-13999 - CVSS 7.8 (high), 2020-09-08: u'Lack of check for integer overflow for round up and addition operations result into memory corruption and potential information leakage' in Snapdragon Auto,…
CVE-2019-10615 - CVSS 7.8 (high), 2020-09-08: u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster bob which can…
CVE-2019-13998 - CVSS 7.8 (high), 2020-09-08: u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size results into memory corruption and potential…
CVE-2019-14074 - CVSS 7.8 (high), 2020-09-08: u'Heap overflow in diag command handler due to lack of check of packet length received from user' in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-3688 - CVSS 9.8 (critical), 2020-07-30: Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-3699 - CVSS 9.8 (critical), 2020-07-30: Possible out of bound access while processing assoc response from host due to improper length check before copying into buffer in Snapdragon Auto, Snapdragon…
CVE-2020-3698 - CVSS 9.8 (critical), 2020-07-30: Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon Auto, Snapdragon…
CVE-2019-14093 - CVSS 7.8 (high), 2020-07-30: Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon Auto, Snapdragon Connectivity,…
CVE-2020-3671 - CVSS 9.8 (critical), 2020-07-30: Use-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL ES in Snapdragon Compute, Snapdragon Consumer IOT,…
CVE-2019-10580 - CVSS 7.8 (high), 2020-07-30: When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snapdragon Auto,…
CVE-2019-14101 - CVSS 7.1 (high), 2020-07-30: Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is less than expected length in…
CVE-2019-14099 - CVSS 7.8 (high), 2020-07-30: Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-3635 - CVSS 7.8 (high), 2020-06-22: Stack based overflow If the maximum number of arguments allowed per request in perflock exceeds in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
CVE-2020-3676 - CVSS 7.8 (high), 2020-06-22: Possible memory corruption in perfservice due to improper validation array length taken from user application. in Snapdragon Auto, Snapdragon Consumer IOT,…
CVE-2019-14080 - CVSS 9.8 (critical), 2020-06-22: Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2019-14073 - CVSS 9.8 (critical), 2020-06-22: Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when processing large…
CVE-2020-3614 - CVSS 9.8 (critical), 2020-06-22: Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute,…
CVE-2019-14062 - CVSS 9.8 (critical), 2020-06-22: Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon…
CVE-2019-14094 - CVSS 7.8 (high), 2020-06-22: Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, Snapdragon…
CVE-2020-3641 - CVSS 9.8 (critical), 2020-06-02: Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-3630 - CVSS 7.8 (high), 2020-06-02: Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2019-14067 - CVSS 5.5 (medium), 2020-06-02: Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue. in Snapdragon Auto,…
CVE-2020-3651 - CVSS 7.5 (high), 2020-04-16: Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon…
CVE-2019-14012 - CVSS 7.5 (high), 2020-04-16: Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP messages in…
CVE-2019-14020 - CVSS 9.1 (critical), 2020-04-16: Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/ cs_serv_notification/ emm_info/…
CVE-2019-14033 - CVSS 9.1 (critical), 2020-04-16: Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdragon Auto,…
CVE-2019-14011 - CVSS 9.1 (critical), 2020-04-16: Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/ bearer modify…
CVE-2019-14019 - CVSS 9.1 (critical), 2020-04-16: Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt req/bearer resource alloc Rej/Deact…
CVE-2019-14022 - CVSS 7.5 (high), 2020-04-16: Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer…
CVE-2019-14018 - CVSS 7.8 (high), 2020-04-16: Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
CVE-2019-14021 - CVSS 7.8 (high), 2020-04-16: Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received…
CVE-2019-10551 - CVSS 9.1 (critical), 2020-04-16: String error while processing non standard SIP messages received can lead to buffer overread and then denial of service in Snapdragon Auto, Snapdragon…
CVE-2019-10609 - CVSS 9.8 (critical), 2020-04-16: Out of bound write can happen due to lack of check of array index value while calculating it. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,…
CVE-2019-10588 - CVSS 9.8 (critical), 2020-04-16: Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow. in Snapdragon Auto,…
CVE-2019-10574 - CVSS 7.1 (high), 2020-04-16: Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2019-10610 - CVSS 9.1 (critical), 2020-04-16: Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon…
CVE-2019-2317 - CVSS 9.8 (critical), 2020-03-05: The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdragon Auto,…
CVE-2019-14071 - CVSS 7.8 (high), 2020-03-05: Compromised reset handler may bypass access control due to AC config is being reset if debug path is enabled to collect secure or non-secure ram dumps in…
CVE-2019-14095 - CVSS 9.8 (critical), 2020-03-05: Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon…
CVE-2019-10587 - CVSS 9.8 (critical), 2020-03-05: Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Snapdragon Compute,…
CVE-2019-14000 - CVSS 7.8 (high), 2020-03-05: Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory corruption and potential information…