Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-10507Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Ele
- CVE-2019-10506While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not validate the data obtained from the user space wh
- CVE-2019-10501Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, Snapdragon
- CVE-2019-10499Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access.
- CVE-2019-10498Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon Co
- CVE-2019-10497Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous one
- CVE-2019-10492Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 21
- CVE-2019-10489Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I
- CVE-2019-2346Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation.
- CVE-2019-2345Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon In
- CVE-2019-2343Out of bound read and information disclosure in firmware due to insufficient checking of an embedded structure that can be sent from a kerne
- CVE-2019-2334Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Con
- CVE-2019-2330improper input validation in allocation request for secure allocations can lead to page fault.
- CVE-2019-2328Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon Compute, S
- CVE-2019-2327Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer
- CVE-2019-2326Data token is received from ADSP and is used without validation as an index into the array leads to out of bound access in Snapdragon Auto,
- CVE-2019-2322Buffer overflow can occur when playing specific clip which is non-standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,
- CVE-2019-2316When computing the digest a local variable is used after going out of scope in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile,
- CVE-2019-2314Possible race condition that will cause a use-after-free when writing to two sysfs entries at nearly the same time in Snapdragon Compute, Sn
- CVE-2019-2312When handling the vendor command there exists a potential buffer overflow due to lack of input validation of data buffer received in Snapdra
- CVE-2019-2309While storing calibrated data from firmware in cache, An integer overflow may occur since data length received may exceed real data length.
- CVE-2019-2308User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote sub
- CVE-2019-2307Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon A
- CVE-2019-2306Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, S
- CVE-2019-2305Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consume
- CVE-2019-2301Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer
- CVE-2019-2299An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application.
- CVE-2019-2298Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Sn
- CVE-2019-2293Pointer dereference while freeing IFE resources due to lack of length check of in port resource.
- CVE-2019-2290Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdrago