qualcomm ipq8076 firmware

productUS

cpe:2.3:o:qualcomm:ipq8076_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity
21critical124high25medium0low
updated 2026-10-30
01

vulnerabilities (221)

Related CVEs.

IDseverity exploitable
CVE-2023-33063UShigh7.8OT criticalKEV
Memory corruption in DSP Services during a remote call from HLOS to DSP.
CVE-2021-1965UScritical9.8Exploit
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapd…
CVE-2023-33105US—Exploit
Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.
CVE-2026-24088US—OT elevatedExploit
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
CVE-2020-11301UShigh7.5—
Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect…
CVE-2021-30351UScritical9.8—
An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect…
CVE-2020-11191UScritical9.1—
Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elect…
CVE-2021-35088UScritical9.1—
Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra…
CVE-2020-11276UScritical9.1—
Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon…
CVE-2020-11275UScritical9.1—
Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect…
CVE-2021-35104UScritical9.8—
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer I…
CVE-2022-25736UShigh7.5—
Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer El…
CVE-2021-1972UScritical9.8—
Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap…
CVE-2021-1976UShigh10.0—
A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2020-11134UScritical9.8—
Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame ar…
CVE-2020-11159UScritical9.1—
Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdrago…
CVE-2020-11126UScritical9.1—
Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons…
CVE-2020-11119UShigh7.5—
Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…
CVE-2020-11281UShigh7.5—
Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapd…
CVE-2024-21473US——
Memory corruption while redirecting log file to any file location with any file name.
CVE-2021-30302USmedium5.0—
Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer El…
CVE-2021-30312USmedium5.0—
Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons…
CVE-2020-11280UShigh7.5—
Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improper error handling in Snapdragon Auto, Sn…
CVE-2020-11278UShigh7.5—
Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electroni…
CVE-2020-11270UShigh7.5—
Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Snapdragon Auto, Snapdragon Comput…
CVE-2020-11296UShigh7.5—
Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electroni…
CVE-2023-33083UScritical9.8—
Memory corruption in WLAN Host while processing RRM beacon on the AP.
CVE-2021-1980UScritical9.1—
Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electron…
CVE-2022-33279UScritical9.8—
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
CVE-2021-1971UShigh7.5—
Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sna…
CVE-2021-1948UShigh7.5—
Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago…
CVE-2021-1941UShigh7.5—
Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elec…
CVE-2020-11241UShigh7.5—
Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn…
CVE-2020-11238UShigh7.5—
Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elec…
CVE-2021-1925UShigh7.5—
Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer E…
CVE-2024-33066US——
Memory corruption while redirecting log file to any file location with any file name.
CVE-2021-1974UShigh7.5—
Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2021-1964UShigh7.5—
Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co…
CVE-2021-1954UShigh7.5—
Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co…
CVE-2021-1953UShigh7.5—
Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne…
CVE-2021-1945UShigh7.5—
Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indu…
CVE-2021-1943UShigh7.5—
Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1938UShigh7.5—
Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronic…
CVE-2021-1937UShigh7.5—
Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti…
CVE-2024-45569US——
Memory corruption while parsing the ML IE due to invalid frame content.
CVE-2022-25719UScritical9.1—
Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics C…
CVE-2021-1903USmedium5.0OT elevated—
Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response frame in Snapdragon Auto, Snapdragon Compute…
CVE-2023-33028UScritical9.8—
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
CVE-2023-33082UScritical9.8—
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.
CVE-2022-25748UScritical9.8—
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
showing 50 of 221
02

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

  • CWE-125Out-of-bounds Read81 CVEs
  • CWE-126Buffer Over-read67 CVEs
  • CWE-787Out-of-bounds Write27 CVEs
  • CWE-120Buffer Copy without Checking Size of Input23 CVEs
  • CWE-416Use After Free16 CVEs
  • CWE-617Reachable Assertion14 CVEs
  • CWE-129Improper Validation of Array Index11 CVEs
  • CWE-20Improper Input Validation10 CVEs
03

sources (1)

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan