Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-1940Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,
- CVE-2021-1937Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto,
- CVE-2021-1900Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdrag
- CVE-2020-11306Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute, Snapdrag
- CVE-2020-11304Possible out of bound read in DRM due to improper buffer length check.
- CVE-2020-11298While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by H
- CVE-2020-11292Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Comp
- CVE-2020-11291Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of
- CVE-2020-11267Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto,
- CVE-2020-11176While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which
- CVE-2020-11266Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastruct
- CVE-2020-11265Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networki
- CVE-2020-11262A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free is
- CVE-2020-11261Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto,
- CVE-2020-11260An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
- CVE-2020-11259Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking
- CVE-2020-11258Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking
- CVE-2020-11257Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking
- CVE-2020-11256Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Network
- CVE-2020-11250Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti
- CVE-2020-11241Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon A
- CVE-2020-11240Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy of
- CVE-2020-11239Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snap
- CVE-2020-11238Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute, Snapdrago
- CVE-2020-11235Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute
- CVE-2020-11233Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without vali
- CVE-2020-11182Possible heap overflow while parsing NAL header due to lack of check of length of data received from user in Snapdragon Auto, Snapdragon Com
- CVE-2020-11178Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its
- CVE-2020-11165Memory corruption due to buffer overflow while copying the message provided by HLOS into buffer without validating the length of buffer in S
- CVE-2020-11161Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon A