Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-10581NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue
- CVE-2019-10579Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit
- CVE-2019-10578Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi
- CVE-2019-10561Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and leads to denial of serv
- CVE-2019-10558While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be controlled by DSP in Snapd
- CVE-2019-10548While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occurs at same time in S
- CVE-2019-10532Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Co
- CVE-2019-2304Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware.
- CVE-2019-2274Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics C
- CVE-2019-2242Device memory may get corrupted because of buffer overflow/underflow.
- CVE-2019-10614Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious f
- CVE-2019-10607Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdrago
- CVE-2019-10605Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdrag
- CVE-2019-10601Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from firmware in Snapdragon
- CVE-2019-10600Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid stack memory in Snapdr
- CVE-2019-10598Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop f
- CVE-2019-10595Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdr
- CVE-2019-10584Possibility of out of bound access in debug queue, if packet size field is corrupted in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn
- CVE-2019-10572Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon
- CVE-2019-10564Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, Snap
- CVE-2019-10557Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length.
- CVE-2019-10544Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handlers in Snapdragon Auto
- CVE-2019-10537Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and e
- CVE-2019-10536Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on
- CVE-2019-10525Buffer overflow during SIB read when network configures complete sib list along with first and last segment of other SIB in Snapdragon Auto,
- CVE-2019-10518Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon Compute, Snapdragon C
- CVE-2019-10517Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons
- CVE-2019-10516Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Auto, Snapdragon Comput
- CVE-2019-10513Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Com
- CVE-2019-10500While processing MT Secondary PDP request, Buffer overflow will happen due to incorrect calculation of buffer size in Snapdragon Auto, Snapd