Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-14051Subsequent additions performed during Module loading while allocating the memory would lead to integer overflow and then to buffer overflow
- CVE-2019-14049Stage-2 fault will occur while writing to an ION system allocation which has been assigned to non-HLOS memory which is non-standard in Snapd
- CVE-2019-14046Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Sna
- CVE-2019-14044Out of bound access due to access of uninitialized memory segment in an array of pointers while normal camera open close in Snapdragon Consu
- CVE-2019-14041During listener modified response processing, a buffer overrun occurs due to lack of buffer size verification when updating message buffer w
- CVE-2019-14040Using memory after being freed in qsee due to wrong implementation can lead to unexpected behavior such as execution of unknown code in Snap
- CVE-2019-14002APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, Sna
- CVE-2019-10590Out of bound access while parsing dts atom, which is non-standard as it does not have valid number of tracks in Snapdragon Auto, Snapdragon
- CVE-2019-10567There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting existing commands could al
- CVE-2019-2267Locked regions may be modified through other interfaces in secure boot loader image due to improper access control.
- CVE-2019-14036Possible buffer overflow issue in error processing due to improper validation of array index value in Snapdragon Auto, Snapdragon Consumer E
- CVE-2019-14034Use after free while processing eeprom query as there is a chance to not unlock mutex after error occurs in Snapdragon Auto, Snapdragon Comp
- CVE-2019-14024Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in M
- CVE-2019-14023String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are properly NULL terminated
- CVE-2019-14017Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data in Snapdragon Auto, S
- CVE-2019-14016Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra
- CVE-2019-14014Possible buffer overflow when byte array receives incorrect input from reading source as array is not null terminated in Snapdragon Consumer
- CVE-2019-14013While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the tab
- CVE-2019-14010The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd buffer map which hap
- CVE-2019-14008Possible null pointer dereference issue in location assistance data processing due to missing null check on resources before using it in Sna
- CVE-2019-14006Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute,
- CVE-2019-14005Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compu
- CVE-2019-14004Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
- CVE-2019-14003Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Snapdragon Au
- CVE-2019-10611Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, S
- CVE-2019-10606Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdragon Auto, Snapdragon C
- CVE-2019-10602Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon Compute, Snapdragon
- CVE-2019-10585Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free
- CVE-2019-10583Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Co
- CVE-2019-10582Use after free issue due to using of invalidated iterator to delete an object in sensors HAL in Snapdragon Auto, Snapdragon Consumer IOT, Sn