Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-3641Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon
- CVE-2020-3633Array out of bound may occur while playing mp3 file as no check is there on offset if it is greater than the buffer allocated or not in Snap
- CVE-2020-3630Possibility of out of bound access while processing the responses from video firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
- CVE-2020-3625When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Aut
- CVE-2020-3623kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130
- CVE-2020-3618NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infra
- CVE-2020-3616Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon
- CVE-2020-3615Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to im
- CVE-2020-3610Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as there is no refcount
- CVE-2019-14087Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapd
- CVE-2019-14078Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User.
- CVE-2019-14077Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Snapdragon Auto, Snapd
- CVE-2019-14067Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue.
- CVE-2019-14066Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Featur
- CVE-2019-14054Improper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the RAM dump path to normal cold boot path in
- CVE-2019-14053When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to
- CVE-2019-14043Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute
- CVE-2019-14042Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in Snapdragon Auto, Sn
- CVE-2019-14039Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon C
- CVE-2019-14038Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Sna
- CVE-2020-3653Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon C
- CVE-2020-3652Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length
- CVE-2020-3651Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames.
- CVE-2019-14135Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages.
- CVE-2019-14134Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE i
- CVE-2019-14132Buffer over-write when this 0-byte buffer is typecasted to some other structure and hence memory corruption in Snapdragon Auto, Snapdragon C
- CVE-2019-14131Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Aut
- CVE-2019-14127Possible buffer overflow while playing mkv clip due to lack of validation of atom size buffer in Snapdragon Auto, Snapdragon Compute, Snapdr
- CVE-2019-14122Memory failure in SKB if it fails to to add the requested padding to the skb in low memory targets or targets with major memory fragmentatio
- CVE-2019-14116Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the