Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-11137Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in poss
- CVE-2020-11136Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapd
- CVE-2020-11119Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload in Snapdragon Auto,
- CVE-2020-3639u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflo
- CVE-2020-3632u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM
- CVE-2020-11209Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS60
- CVE-2020-11208Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD82
- CVE-2020-11207Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snap
- CVE-2020-11206Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Sn
- CVE-2020-11205u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Sn
- CVE-2020-11202Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual si
- CVE-2020-11201Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compu
- CVE-2020-11196u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapd
- CVE-2020-11193u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdra
- CVE-2020-11184u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute,
- CVE-2020-11175u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to improp
- CVE-2020-11168u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdr
- CVE-2020-11132u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon
- CVE-2020-11131u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Sna
- CVE-2020-11130u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Comput
- CVE-2020-11127u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of secu
- CVE-2020-11123u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`
- CVE-2020-11121u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Sna
- CVE-2020-3704u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral sy
- CVE-2020-3703u'Buffer over-read issue in Bluetooth peripheral firmware due to lack of check for invalid opcode and length of opcode received from central
- CVE-2020-3696u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use for checking securit
- CVE-2020-3694u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom' in Snapdragon Auto, Snapdrag
- CVE-2020-3693u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdra
- CVE-2020-3692u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters
- CVE-2020-3690u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon