Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-3664Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Com
- CVE-2020-11297Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdragon Auto, Snapdrago
- CVE-2020-11296Arithmetic overflow can happen while processing NOA IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
- CVE-2020-11287Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure.
- CVE-2020-11286An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories
- CVE-2020-11283A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn
- CVE-2020-11282Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU
- CVE-2020-11281Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure.
- CVE-2020-11280Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improp
- CVE-2020-11278Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
- CVE-2020-11277Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snap
- CVE-2020-11276Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE
- CVE-2020-11275Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto
- CVE-2020-11272Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can
- CVE-2020-11271Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn
- CVE-2020-11270Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter
- CVE-2020-11269Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdra
- CVE-2020-11253Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv
- CVE-2020-11223Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Com
- CVE-2020-11204Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters th
- CVE-2020-11203Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in Snapdragon Auto, Snap
- CVE-2020-11198Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset i
- CVE-2020-11195Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snap
- CVE-2020-11194Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon Aut
- CVE-2020-11187Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdrag
- CVE-2020-11177User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapd
- CVE-2020-11170Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdrag
- CVE-2020-11163Possible buffer overflow while updating ikev2 parameters due to lack of check of input validation for certain parameters received from the e
- CVE-2020-11147Use after free issue in audio modules while removing and freeing objects during list iteration due to incorrect usage of macro in Snapdragon
- CVE-2020-3691Possible out of bound memory access in audio due to integer underflow while processing modified contents in Snapdragon Auto, Snapdragon Comp