Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-3675u'Potential integer underflow while parsing Service Info and IPv6 link-local TLVs that comes as part of NDPE attribute' in Snapdragon Auto,
- CVE-2020-3669u'Buffer Overflow issue in WLAN tcp ip verification due to usage of out of range pointer offset' in Snapdragon Auto, Snapdragon Compute, Sna
- CVE-2020-3668u'Buffer overflow while parsing PMF enabled MCBC frames due to frame length being lesser than what is expected while parsing' in Snapdragon
- CVE-2020-3667u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in Snapdragon Auto, Sn
- CVE-2020-3666u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv
- CVE-2020-3648u'Possible out of bound write in DSP driver code due to lack of check of data received from user' in Snapdragon Auto, Snapdragon Compute, Sn
- CVE-2020-3647u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, Snapdragon Industrial
- CVE-2020-3646u'Buffer overflow seen as the destination buffer size is lesser than the source buffer size in video application' in Snapdragon Compute, Sna
- CVE-2020-3644u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display session' in Snapdrago
- CVE-2020-3643u'Information disclosure issue can occur due to partial secure display-touch session tear-down' in Snapdragon Auto, Snapdragon Compute, Snap
- CVE-2020-3640u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in invalid state when a HLO
- CVE-2020-3636u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated for the header' in Snapdragon Auto, Snapdra
- CVE-2020-3629u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining the buffer size for
- CVE-2020-3624u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snap
- CVE-2020-3622u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL ter
- CVE-2020-3621u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into
- CVE-2020-3620u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to
- CVE-2020-3619u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' i
- CVE-2020-3611u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon C
- CVE-2020-11158u'Null pointer dereference in HP OfficeJet Pro 8210 jbig2 filter due to lack of check of PDF font array leads to denial of service' in IPS P
- CVE-2020-11133u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, S
- CVE-2020-11128u'Possible out of bound access while copying the mask file content into the buffer without checking the buffer size' in Snapdragon Auto, Sna
- CVE-2020-11122u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, S
- CVE-2020-11120u'Calling thread may free the data buffer pointer that was passed to the callback and later when event loop executes the callback, data buff
- CVE-2020-11118u'Information exposure issues while processing IE header due to improper check of beacon IE frame' in Snapdragon Auto, Snapdragon Compute, S
- CVE-2020-11117u'In the lbd service, an external user can issue a specially crafted debug command to overwrite arbitrary files with arbitrary content resul
- CVE-2020-11116u'Possible out of bound write while processing association response received from host due to lack of check of IE length' in Snapdragon Auto
- CVE-2020-11115u'Buffer over read occurs while processing information element from beacon due to lack of check of data received from beacon' in Snapdragon
- CVE-2019-14119u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition and lead to memory co
- CVE-2019-14117u'Whenever the page list is updated via privileged user, the previous list elements are freed but are not deleted from the list which result