Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-14114Buffer overflow in WLAN firmware while parsing GTK IE containing GTK key having length more than the buffer size in Snapdragon Auto, Snapdra
- CVE-2019-14113Buffer overflow can occur in In WLAN firmware while unwraping data using CCMP cipher suite during parsing of EAPOL handshake frame in Snapdr
- CVE-2019-14112Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compu
- CVE-2019-14111Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con
- CVE-2019-14110Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer
- CVE-2019-14105Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial I
- CVE-2019-14104Slab-out-of-bounds access can occur if the context pointer is invalid due to lack of null check on pointer before accessing it in Snapdragon
- CVE-2019-14075Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Con
- CVE-2019-14070Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto,
- CVE-2019-14033Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept i
- CVE-2019-14022Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto, Snapdragon Compute, S
- CVE-2019-14021Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and paylo
- CVE-2019-14020Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/ cs_serv_notificatio
- CVE-2019-14019Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt req/bearer resource
- CVE-2019-14018Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer
- CVE-2019-14012Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP
- CVE-2019-14011Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/
- CVE-2019-14009Out of bound memory access while processing TZ command handler due to improper input validation on response length received from user in Sna
- CVE-2019-14007Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channe
- CVE-2019-14001Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT
- CVE-2019-10625Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in Snapdragon Auto, Sn
- CVE-2019-10624While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int data type copied to u8
- CVE-2019-10623Possible integer overflow can happen in host driver while processing user controlled string due to improper validation on data received.
- CVE-2019-10622Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in Snapdrag
- CVE-2019-10621Use after free issue when MAP and UNMAP calls at same time as data structure used my MAP may be freed by UNMAP function in Snapdragon Auto,
- CVE-2019-10620Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon Cons
- CVE-2019-10610Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Au
- CVE-2019-10609Out of bound write can happen due to lack of check of array index value while calculating it.
- CVE-2019-10608Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display session that allows user
- CVE-2019-10589Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in Snapdragon Auto, Snapdrago