[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fu9D9LXjdvP5olnY1ucm9DHBC26nApp9RGLBV56EEYz4":3,"g5a-family:qualcomm\u002Fmsm8996au_firmware":124,"g5a-ex:qualcomm\u002Fmsm8996au_firmware@*":125},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":77,"seoMetadata":102,"meta":121},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"qualcomm","msm8996au_firmware",0,696,4,"2025-11-04",[],"Msm8996au Firmware by Qualcomm is a technology product and 696 known security vulnerabilities including 4 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,26,31,37,42,48,54,59,65,71],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":25},"CVE-2020-3657","u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, IPQ4019, IPQ6018, IPQ8064, IPQ8074, MDM9150, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MSM8905, MSM8909W, MSM8953, MSM8996AU, QCA6574AU, QCS405, QCS610, QRB5165, SC8180X, SDA660, SDA845, SDM429, SDM429W, SDM630, SDM632, SDM636, SDM660, SDM845, SDX20, SDX24, SDX55, SM8250","2020-11-02",9.8,"v3.1","Critical",false,0.28338,{"cveId":27,"description":28,"publishedDate":29,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":30},"CVE-2020-11264","Improper authentication of Non-EAPOL\u002FWAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music","2021-09-08",0.13186,{"cveId":32,"description":33,"publishedDate":29,"cvssScore":34,"cvssVersion":22,"severity":35,"isKev":24,"epssScore":36},"CVE-2020-11301","Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking",7.5,"High",0.11108,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":24,"epssScore":41},"CVE-2021-30351","An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","2022-01-03",0.04018,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":21,"cvssVersion":46,"severity":23,"isKev":24,"epssScore":47},"CVE-2017-14911","In Android before 2018-01-05 on Qualcomm Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile APQ8096AU, MDM9206, MDM9650, MSM8996AU, SD 210\u002FSD 212\u002FSD 205, SD 425, SD 430, SD 625, SD 650\u002F52, SD 820, SD 835, it is possible for the XBL loader to skip the authentication of device config.","2018-03-30","v3.0",0.02218,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":22,"severity":35,"isKev":24,"epssScore":53},"CVE-2019-10529","Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210\u002FSD 212\u002FSD 205, SD 425, SD 439 \u002F SD 429, SD 450, SD 615\u002F16\u002FSD 415, SD 625, SD 632, SD 636, SD 665, SD 675, SD 712 \u002F SD 710 \u002F SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 \u002F SD 850, SD 855, SDA660, SDM439, SDM630, SDM660, SDX20, SDX24","2019-11-06",8.1,0.01738,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":21,"cvssVersion":46,"severity":23,"isKev":24,"epssScore":58},"CVE-2019-2307","Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6174A, QCA6574AU, QCA9377, QCA9379, QCS405, QCS605, SD 210\u002FSD 212\u002FSD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 625, SD 636, SD 665, SD 675, SD 712 \u002F SD 710 \u002F SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 \u002F SD 850, SD 855, SDM630, SDM660, SDX20, SDX24","2019-07-25",0.01621,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":22,"severity":35,"isKev":4,"epssScore":64},"CVE-2020-11261","Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","2021-06-09",7.8,0.01604,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":22,"severity":35,"isKev":24,"epssScore":70},"CVE-2019-10574","Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8016, APQ8017, APQ8053, APQ8076, APQ8096, APQ8096AU, APQ8098, MDM9150, MDM9205, MDM9206, MDM9207C, MDM9607, MDM9640, MDM9650, MDM9655, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, QCM2150, QCS605, QM215, Rennell, SC7180, SDA660, SDA845, SDM429, SDM429W, SDM439, SDM450, SDM630, SDM632, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SM6150, SM7150, SM8150, SXR1130, SXR2130","2020-04-16",7.1,0.01589,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":22,"severity":35,"isKev":4,"epssScore":76},"CVE-2021-1905","Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","2021-05-07",8.4,0.01543,[78,86,90,94],{"cveId":79,"description":80,"publishedDate":81,"cvssScore":75,"severity":35,"isKev":4,"epssScore":82,"cisaVulnName":83,"cisaDateAdded":81,"cisaShortDescription":84,"cisaRequiredAction":85},"CVE-2023-33107","Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.","2023-12-05",0.00739,"Qualcomm Multiple Chipsets Integer Overflow Vulnerability","Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.","Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"severity":35,"isKev":4,"epssScore":64,"cisaVulnName":87,"cisaDateAdded":88,"cisaShortDescription":61,"cisaRequiredAction":89},"Qualcomm Multiple Chipsets Improper Input Validation Vulnerability","2021-12-01","Apply updates per vendor instructions.",{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"severity":35,"isKev":4,"epssScore":76,"cisaVulnName":91,"cisaDateAdded":92,"cisaShortDescription":93,"cisaRequiredAction":89},"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","2021-11-03","Multiple Qualcomm Chipsets contain a use after free vulnerability due to improper handling of memory mapping of multiple processes simultaneously.",{"cveId":95,"description":96,"publishedDate":74,"cvssScore":97,"severity":98,"isKev":4,"epssScore":99,"cisaVulnName":100,"cisaDateAdded":92,"cisaShortDescription":101,"cisaRequiredAction":89},"CVE-2021-1906","Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",6.2,"Medium",0.0052,"Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability","Multiple Qualcomm chipsets contain a detection of error condition without action vulnerability when improper handling of address deregistration on failure can lead to new GPU address allocation failure.",{"title":103,"metaDescription":104,"keywords":105,"structuredData":106},"Msm8996au Firmware by Qualcomm - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Msm8996au Firmware by Qualcomm with 696 tracked vulnerabilities including 0 critical and 3 high-severity issues and 4 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Msm8996au Firmware vulnerabilities, Msm8996au Firmware security, Msm8996au Firmware CVE, Qualcomm Msm8996au Firmware, Msm8996au Firmware threat intelligence, Qualcomm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Msm8996au Firmware KEV, Msm8996au Firmware exploited vulnerabilities",{"@context":107,"@type":108,"name":109,"description":104,"url":110,"manufacturer":111,"applicationCategory":115,"softwareVersion":116,"mainEntity":117},"https:\u002F\u002Fschema.org","SoftwareApplication","Msm8996au Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fqualcomm\u002Fmsm8996au_firmware",{"@type":112,"name":113,"url":114},"Organization","Qualcomm","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fqualcomm","Security Software","Multiple versions",{"@type":118,"name":119,"description":120,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Msm8996au Firmware Security Vulnerabilities","Security vulnerabilities affecting Msm8996au Firmware by Qualcomm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":122,"apiVersion":123},"2026-10-17T18:46:22.857Z","3.0",[],{"rows":126,"total":11,"capped":24,"failed":9},[127,131,135,139],{"cveId":79,"name":83,"severity":35,"cvss":75,"added":81,"epss":82,"published":128,"ranges":129,"checked":4,"hits":130,"covers":24},"2023-12-05T03:15:14.86",[],[],{"cveId":60,"name":87,"severity":35,"cvss":63,"added":88,"epss":64,"published":132,"ranges":133,"checked":4,"hits":134,"covers":24},"2021-06-09T05:15:07.643",[],[],{"cveId":72,"name":91,"severity":35,"cvss":75,"added":92,"epss":76,"published":136,"ranges":137,"checked":4,"hits":138,"covers":24},"2021-05-07T09:15:08.243",[],[],{"cveId":95,"name":100,"severity":98,"cvss":97,"added":92,"epss":99,"published":140,"ranges":141,"checked":4,"hits":142,"covers":24},"2021-05-07T09:15:08.28",[],[]]