Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-3687Local privilege escalation in admin services in Windows environment can occur due to an arbitrary read issue.
- CVE-2020-3686Possible memory out of bound issue during music playback when an incorrect bit stream content is copied into array without checking the leng
- CVE-2020-3685Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdragon Auto, Snapdragon
- CVE-2020-11225Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Comput
- CVE-2020-11217A possible double free or invalid memory access in audio driver while reading Speaker Protection parameters in Snapdragon Compute, Snapdrago
- CVE-2020-11216Buffer over read can happen in video driver when playing clip with atomsize having value UINT32_MAX in Snapdragon Auto, Snapdragon Compute,
- CVE-2020-11215An out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdragon Auto, Snapdragon
- CVE-2020-11214Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it as more number of imm
- CVE-2020-11213Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, Sna
- CVE-2020-11212Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon Compu
- CVE-2020-11200Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side.
- CVE-2020-11197Possible integer overflow can occur when stream info update is called when total number of streams detected are zero while parsing TS clip w
- CVE-2020-11185Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data received from firmware in
- CVE-2020-11183A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing code as that service in
- CVE-2020-11181Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer received from HLOS in Snap
- CVE-2020-11180Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdra
- CVE-2020-11179Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition.
- CVE-2020-11167Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Sn
- CVE-2020-11152Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in
- CVE-2020-11151Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon A
- CVE-2020-11150Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of poin
- CVE-2020-11149Out of bound access due to usage of an out-of-range pointer offset in the camera driver.
- CVE-2020-11148Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is trigg
- CVE-2020-11146Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Comp
- CVE-2020-11145Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Sna
- CVE-2020-11144Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon A
- CVE-2020-11143Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in Snapd
- CVE-2020-11140Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Auto, Snapdragon Comput
- CVE-2020-11139Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, Snapdragon Compute, S
- CVE-2020-11138Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability i