Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-10588Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow.
- CVE-2019-10575Wlan binary which is not signed with OEMs RoT is working on secure device without authentication failure in Snapdragon Compute, Snapdragon C
- CVE-2019-10574Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon Compute, Snapdragon
- CVE-2019-10556Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some ca
- CVE-2019-10551String error while processing non standard SIP messages received can lead to buffer overread and then denial of service in Snapdragon Auto,
- CVE-2019-10547When issuing IOCTL calls to ION, Memory leak can occur due to failure in unassign pages under certain conditions in Snapdragon Auto, Snapdra
- CVE-2019-10523Target specific data is being sent to remote server and leads to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
- CVE-2019-10483Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon Com
- CVE-2019-2317The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdr
- CVE-2019-2311Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdrag
- CVE-2019-2300Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Sna
- CVE-2019-14098Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Com
- CVE-2019-14097Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
- CVE-2019-14095Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon
- CVE-2019-14086Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit integer which can lead
- CVE-2019-14085Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, Sna
- CVE-2019-14083While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified
- CVE-2019-14082Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer El
- CVE-2019-14081Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snapdragon Compute, Snap
- CVE-2019-14079Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped in the first place le
- CVE-2019-14072Unhandled paging request is observed due to dereferencing an already freed object because of race condition between sparse free and sparse b
- CVE-2019-14071Compromised reset handler may bypass access control due to AC config is being reset if debug path is enabled to collect secure or non-secure
- CVE-2019-14068Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer
- CVE-2019-14061Null-pointer dereference can occur while accessing the segment element info when it is not allocated and assigned in Snapdragon Auto, Snapdr
- CVE-2019-14050Out-of-bound writes occurs due to lack of check of buffer size will cause buffer overflow only in 32bit architecture.
- CVE-2019-14048Possible out of bound memory access while playing a crafted clip in media player in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer
- CVE-2019-14045Possible buffer overflow while processing clientlog and serverlog due to lack of validation of data received in logs in Snapdragon Auto, Sna
- CVE-2019-14032Memory use after free issue in audio due to lack of resource control in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr
- CVE-2019-14031Buffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than the buffer size in Snapdragon Auto, Snapdrago
- CVE-2019-14030The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check