Qca9377 Firmware vulnerabilities

38 known vulnerabilities in Qca9377 Firmware from Qualcomm. 38 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Snapdragon: Out-of-bounds Write

  CVE-2025-21468May 6, 2025Qualcomm

  Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.

• 7.8 High severity

  Snapdragon: Use After Free

  CVE-2024-43061Mar 3, 2025Qualcomm

  Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.

• 7.5 High severity

  Snapdragon: Improper Authentication

  CVE-2023-43551Jun 3, 2024Qualcomm

  Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command.

• 7.8 High severity

  Snapdragon: Use After Free

  CVE-2023-33118Jan 2, 2024Qualcomm

  Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.

• 7.8 High severity

  Qualcomm Multiple Chipsets Integer Overflow Exploited

  CVE-2023-33107Dec 5, 2023QualcommEPSS 1.02%

  Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

• 7.8 High severity

  Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Exploited

  CVE-2023-33106Dec 5, 2023Qualcomm

  Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

• 8.1 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-33268Dec 13, 2022Qualcomm

  Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-25681Dec 13, 2022Qualcomm

  Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

• 7.5 High severity

  Snapdragon Auto, Snapdragon Consumer IOT…: NULL Pointer Dereference

  CVE-2022-25710Nov 15, 2022Qualcomm

  Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Buffer Copy without Checking Size of Input

  CVE-2022-25687Oct 19, 2022Qualcomm

  memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-25661Oct 19, 2022Qualcomm

  Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Double Free

  CVE-2022-25660Oct 19, 2022Qualcomm

  Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Use After Free

  CVE-2022-22058Sep 26, 2022Qualcomm

  Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon M

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Buffer Copy without Checking Size of Input

  CVE-2022-25688Sep 16, 2022Qualcomm

  Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearable

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-25670Sep 16, 2022Qualcomm

  Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-25669Sep 16, 2022Qualcomm

  Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Integer Overflow or Wraparound

  CVE-2022-25656Sep 16, 2022Qualcomm

  Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Sn

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Consumer IOT…: Integer Overflow or Wraparound

  CVE-2022-22105Sep 16, 2022Qualcomm

  Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Integer Overflow or Wraparound

  CVE-2022-22074Sep 16, 2022Qualcomm

  Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-22066Sep 16, 2022Qualcomm

  Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Double Free

  CVE-2022-25668Sep 2, 2022Qualcomm

  Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Buffer Copy without Checking Size of Input

  CVE-2022-25659Sep 2, 2022Qualcomm

  Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-25658Sep 2, 2022Qualcomm

  Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snap

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Write

  CVE-2022-22080Sep 2, 2022Qualcomm

  Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Write

  CVE-2022-22070Sep 2, 2022Qualcomm

  Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Consumer IOT…: Integer Overflow or Wraparound

  CVE-2022-25651Jun 14, 2022Qualcomm

  Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Buffer Copy without Checking Size of Input

  CVE-2022-22087Jun 14, 2022Qualcomm

  memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapd

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Double Free

  CVE-2022-22086Jun 14, 2022Qualcomm

  Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Write

  CVE-2022-22085Jun 14, 2022Qualcomm

  Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Write

  CVE-2022-22084Jun 14, 2022Qualcomm

  Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon We

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-22083Jun 14, 2022Qualcomm

  Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Weara

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Buffer Copy without Checking Size of Input

  CVE-2022-22082Jun 14, 2022Qualcomm

  Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & M

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Validation of Specified Quantity in Input

  CVE-2022-22072Jun 14, 2022Qualcomm

  Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon V

• 7.8 High severity

  Qualcomm Multiple Chipsets Use-After-Free Exploited

  CVE-2022-22071Jun 14, 2022Qualcomm

  Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Use After Free

  CVE-2022-22068Jun 14, 2022Qualcomm

  kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-22065Jun 14, 2022Qualcomm

  Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Sn

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-22064Jun 14, 2022Qualcomm

  Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2022-22057Jun 14, 2022Qualcomm

  Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon