Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-2315While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment.
- CVE-2019-2303SNDCP module may access array out side its boundary when it receives malformed XID message.
- CVE-2019-2297Buffer overflow can occur while processing non-standard NAN message from user space.
- CVE-2019-2295Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code.
- CVE-2019-2289Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in Snapdragon Auto, Snapd
- CVE-2019-2271Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, S
- CVE-2019-2268Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connec
- CVE-2019-2266Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Cons
- CVE-2019-2251If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overf
- CVE-2019-10627Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters
- CVE-2019-10617Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the regist
- CVE-2019-10566Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdrag
- CVE-2019-10563Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon A
- CVE-2019-10535Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop i
- CVE-2019-10503Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer Electronic
- CVE-2019-10490Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snapdragon Auto, Snapdrag
- CVE-2019-10486Race condition due to the lack of resource lock which will be concurrently modified in the memcpy statement leads to out of bound access in
- CVE-2018-13916Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve thread data.
- CVE-2019-2332Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdrag
- CVE-2019-2331Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapd
- CVE-2019-2325Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdra
- CVE-2019-2324When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access
- CVE-2019-2323Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Sna
- CVE-2019-2302While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow.
- CVE-2019-2285Out of bound write issue is observed while giving information about properties that have been set so far for playing video in Snapdragon Aut
- CVE-2019-2283Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Aut
- CVE-2019-2275While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations a
- CVE-2019-2258Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snap
- CVE-2019-2249Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snap
- CVE-2019-2246Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto,