Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-11245Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Auto, Snapdragon Compu
- CVE-2020-11243RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to denial of service i
- CVE-2020-11242User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested content
- CVE-2020-11237Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon
- CVE-2020-11236Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon Auto
- CVE-2020-11234When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting i
- CVE-2020-11231Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap
- CVE-2020-11210Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon
- CVE-2020-11191Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon
- CVE-2020-11309Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snap
- CVE-2020-11308Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Sn
- CVE-2020-11305Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago
- CVE-2020-11299Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap
- CVE-2020-11290Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon Auto, Snapdragon Com
- CVE-2020-11230Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address
- CVE-2020-11228Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snapdragon Auto, Snapdrag
- CVE-2020-11227Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, S
- CVE-2020-11226Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapd
- CVE-2020-11222Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon
- CVE-2020-11221Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient chec
- CVE-2020-11220While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific tim
- CVE-2020-11218Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compu
- CVE-2020-11199HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdrago
- CVE-2020-11192Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn
- CVE-2020-11190Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co
- CVE-2020-11189Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co
- CVE-2020-11188Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co
- CVE-2020-11186Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdr
- CVE-2020-11171Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Co
- CVE-2020-11166Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdrago