Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-11160Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdrag
- CVE-2020-11159Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer bein
- CVE-2020-11134Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup at
- CVE-2020-11126Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute,
- CVE-2021-1927Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snap
- CVE-2021-1925Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdragon Compute, Snapdr
- CVE-2021-1915Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdrago
- CVE-2021-1910Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co
- CVE-2021-1906Improper handling of address deregistration on failure can lead to new GPU address allocation failure.
- CVE-2021-1905Possible use after free due to improper handling of memory mapping of multiple processes simultaneously.
- CVE-2021-1895Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdr
- CVE-2021-1891A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Comput
- CVE-2020-11295Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdrag
- CVE-2020-11294Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon Compute, S
- CVE-2020-11293Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Sn
- CVE-2020-11289Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdrago
- CVE-2020-11288Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute, S
- CVE-2020-11285Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snap
- CVE-2020-11284Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untruste
- CVE-2020-11279Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon
- CVE-2020-11274Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd
- CVE-2020-11273Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when his
- CVE-2020-11268Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Aut
- CVE-2020-11254Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto,
- CVE-2021-1892Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connec
- CVE-2020-11255Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the
- CVE-2020-11252Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Snapdragon Auto, Snapdr
- CVE-2020-11251Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapd
- CVE-2020-11247Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti
- CVE-2020-11246A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapd