Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-14100Register write via debugfs is disabled by default to prevent register writing via debugfs.
- CVE-2019-14099Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdragon Auto, Snapdragon
- CVE-2019-14093Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon Auto, Snapdragon Con
- CVE-2019-14037Close and bind operations done on a socket can lead to a Use-After-Free condition.
- CVE-2019-10580When kernel thread unregistered listener, Use after free issue happened as the listener client`s private data has been already freed in Snap
- CVE-2020-3676Possible memory corruption in perfservice due to improper validation array length taken from user application.
- CVE-2020-3665A possible buffer overflow would occur while processing command from firmware due to the group_id obtained from the firmware being out of ra
- CVE-2020-3663Buffer over-write may occur during fetching track decoder specific information if cb size exceeds buffer size in Snapdragon Auto, Snapdragon
- CVE-2020-3662Buffer overflow can occur while parsing eac3 header while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snap
- CVE-2020-3661Buffer overflow will happen while parsing mp4 clip with corrupted sample atoms values which exceeds MAX_UINT32 range due to lack of validati
- CVE-2020-3660Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute,
- CVE-2020-3658Possible null-pointer dereference can occur while parsing mp4 clip with corrupted sample table atoms in Snapdragon Auto, Snapdragon Compute,
- CVE-2020-3642Use after free issue in camera applications when used randomly over multiple operations due to pointer not set to NULL after free/destroy of
- CVE-2020-3635Stack based overflow If the maximum number of arguments allowed per request in perflock exceeds in Snapdragon Auto, Snapdragon Compute, Snap
- CVE-2020-3628Improper access due to socket opened by the logging application without specifying localhost address in Snapdragon Consumer IOT, Snapdragon
- CVE-2020-3626Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto, Snapdragon Compute, Sna
- CVE-2020-3614Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdrago
- CVE-2020-3613Double free issue in kernel memory mapping due to lack of memory protection mechanism in Snapdragon Compute, Snapdragon Mobile, Snapdragon V
- CVE-2019-14094Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto,
- CVE-2019-14092System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon Mo
- CVE-2019-14091Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdrago
- CVE-2019-14080Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon C
- CVE-2019-14076Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, Snapd
- CVE-2019-14073Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when p
- CVE-2019-14062Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Aut
- CVE-2019-14047While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit l
- CVE-2019-10626Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon Aut
- CVE-2019-10597kernel writes to user passed address without any checks can lead to arbitrary memory write in Snapdragon Auto, Snapdragon Compute, Snapdrago
- CVE-2020-3680A race condition can occur when using the fastrpc memory mapping API.
- CVE-2020-3645Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compu