Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HQualcomm Apq8009
HWQualcommall versionsQualcomm Apq8009 Firmware
OSQualcommall versionsQualcomm Apq8009w
HWQualcommall versionsQualcomm Apq8009w Firmware
OSQualcommall versionsQualcomm Apq8017
HWQualcommall versionsQualcomm Apq8017 Firmware
OSQualcommall versionsQualcomm Apq8030
HWQualcommall versionsQualcomm Apq8030 Firmware
OSQualcommall versionsQualcomm Apq8037
HWQualcommall versionsQualcomm Apq8037 Firmware
OSQualcommall versionsQualcomm Apq8052
HWQualcommall versionsQualcomm Apq8052 Firmware
OSQualcommall versionsQualcomm Apq8053
HWQualcommall versionsQualcomm Apq8053 Firmware
OSQualcommall versionsQualcomm Apq8056
HWQualcommall versionsQualcomm Apq8056 Firmware
OSQualcommall versionsQualcomm Apq8060a
HWQualcommall versionsQualcomm Apq8060a Firmware
OSQualcommall versionsQualcomm Apq8062
HWQualcommall versionsQualcomm Apq8062 Firmware
OSQualcommall versionsQualcomm Apq8064
HWQualcommall versionsQualcomm Apq8064au
HWQualcommall versionsQualcomm Apq8064au Firmware
OSQualcommall versionsQualcomm Apq8064 Firmware
OSQualcommall versionsQualcomm Apq8076
HWQualcommall versionsQualcomm Apq8076 Firmware
OSQualcommall versionsQualcomm Apq8084
HWQualcommall versionsQualcomm Apq8084 Firmware
OSQualcommall versionsQualcomm Apq8096au
HWQualcommall versionsQualcomm Apq8096au Firmware
OSQualcommall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2026-25289CRITICAL9.6PL ✓same product
Przepełnienie bufora stosu w NAN Service Discovery Frames — Qualcomm
CVE-2025-21483CRITICAL9.8PL ✓same product
Memory corruption w Qualcomm podczas składania pakietów RTP (NALUs)
CVE-2025-27034CRITICAL9.8PL ✓same product
Qualcomm Firmware — memory corruption przy wyborze PLMN z listy SOR
CVE-2025-21450CRITICAL9.1PL ✓same product
Qualcomm: podatność kryptograficzna umożliwiająca Auth Bypass podczas pobierania
CVE-2024-45569CRITICAL9.8PL ✓same product
Qualcomm: Uszkodzenie pamięci przy parsowaniu ML IE w firmware