Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-14029Use-after-free in graphics module due to destroying already queued syncobj in error case in Snapdragon Auto, Snapdragon Compute, Snapdragon
- CVE-2019-14028Buffer overwrite during memcpy due to lack of check on SSID length validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit
- CVE-2019-14027Buffer overflow due to lack of upper bound check on channel length which is used for a loop.
- CVE-2019-14026Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snapdragon Compute, Snap
- CVE-2019-14015A stack-based buffer overflow exists in the initialization of the identification stage due to lack of check on the number of templates provi
- CVE-2019-14000Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory corruption and potent
- CVE-2019-10616Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ.
- CVE-2019-10612UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentially be corrupted by
- CVE-2019-10604Possibility of heap-buffer-overflow during last iteration of loop while populating image version information in diag command response packet
- CVE-2019-10603Use after free issue occurs If the real device interface goes down and a route lookup is performed while sending a raw IPv6 message in Snapd
- CVE-2019-10594Stack overflow can occur when SDP is received with multiple payload types in the FMTP attribute of a video M line in Snapdragon Auto, Snapdr
- CVE-2019-10593Buffer overflow can occur when processing non standard SDP video Image attribute parameter in a VILTE\VOLTE call in Snapdragon Auto, Snapdra
- CVE-2019-10591Null pointer dereference can happen when parsing udta atom which is non-standard and having invalid depth in Snapdragon Auto, Snapdragon Com
- CVE-2019-10587Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Sna
- CVE-2019-10586Filling media attribute tag names without validating the destination buffer size which can result in the buffer overflow in Snapdragon Auto,
- CVE-2019-10577Improper input validation while processing SIP URI received from the network will lead to buffer over-read and then to denial of service in
- CVE-2019-10569Stack buffer overflow due to instance id is misplaced inside definition of hardware accelerated effects in makefile in Snapdragon Auto, Snap
- CVE-2019-10554Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS domain/ P
- CVE-2019-10553Multiple Read overflows due to improper length checks while decoding authentication in Cs domain/RAU Reject and TC cmd in Snapdragon Auto, S
- CVE-2019-10552Multiple Buffer Over-read issue can happen due to improper length checks while decoding Service Reject/RAU Reject/PTMSI Realloc cmd in Snapd
- CVE-2019-10550Buffer Over-read when UE is trying to process the message received form the network without zero termination in Snapdragon Auto, Snapdragon
- CVE-2019-10549Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in Snapdragon Auto, Snapd
- CVE-2019-10546Buffer overflow can occur in WLAN firmware while parsing beacon/probe_response frames during roaming in Snapdragon Auto, Snapdragon Compute,
- CVE-2019-10526Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdragon Compute, Snapdrag
- CVE-2018-11838Possible double free issue in WLAN due to lack of checking memory free condition.
- CVE-2019-14088Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in Snapdra
- CVE-2019-14063Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Sna
- CVE-2019-14060Uninitialized stack data gets used If memory is not allocated for blob or if the allocated blob is less than the struct size required due to
- CVE-2019-14057Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer size before read in Snapdragon Auto, Snapdra
- CVE-2019-14055Possibility of use-after-free and double free because of not marking buffer as NULL after freeing can lead to dangling pointer access in Sna