Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-10487Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdr
- CVE-2019-10482Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channe
- CVE-2019-10481Out of bound access occurs while handling the WMI FW event due to lack of check of buffer argument which comes directly from the WLAN FW in
- CVE-2019-10480Out of bound write can happen in WMI firmware event handler due to lack of validation of data received from WLAN firmware in Snapdragon Auto
- CVE-2018-11980When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen
- CVE-2019-2338Crafted image that has a valid signature from a non-QC entity can be loaded which can read/write memory that belongs to the secure world in
- CVE-2019-2337While Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more than message length which may cause device to
- CVE-2019-2321Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdr
- CVE-2019-2320Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapd
- CVE-2019-2319HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons
- CVE-2019-2310Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body i
- CVE-2019-2288Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdr
- CVE-2019-10618Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QC
- CVE-2019-10592Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check on the maximum mode
- CVE-2019-10571Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon Compu
- CVE-2019-10559Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Sn
- CVE-2019-10555Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdragon Auto, Snapdragon
- CVE-2019-10545Null pointer dereference issue in kernel due to missing check related to LLC support in GPU in Snapdragon Auto, Snapdragon Consumer Electron
- CVE-2019-10530Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapd
- CVE-2019-10520An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results
- CVE-2019-10511Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn
- CVE-2019-10494Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Au
- CVE-2019-10493Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consum
- CVE-2019-10485Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,
- CVE-2019-10484Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previo
- CVE-2019-2339Out of bound access due to lack of check of whiltelist array size while reading the image elf segments.
- CVE-2019-2336Subsequent use of the CBO listener may result in further memory corruption due to use after free issue.
- CVE-2019-2335While processing Attach Reject message, Valid exit condition is not met resulting into an infinite loop in Snapdragon Auto, Snapdragon Compu
- CVE-2019-2329Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application.
- CVE-2019-2318Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity,