Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-2281An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code.
- CVE-2019-2278User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer
- CVE-2019-2276Possible out of bound read occurs while processing beaconing request due to lack of check on action frames received from user controlled spa
- CVE-2019-2273IOMMU page fault while playing h265 video file leads to denial of service issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv
- CVE-2019-2272Buffer overflow can occur in display function due to lack of validation of header block size set by user.
- CVE-2019-2263Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Sn
- CVE-2019-2254Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consum
- CVE-2019-2253Buffer over-read can occur while parsing an ogg file with a corrupted comment block.
- CVE-2019-2241While rendering the layout background, Error status check is not caught properly and also incorrect status handling is being done leading to
- CVE-2019-2240While sending the rendered surface content to the screen, Error handling is not properly checked results in an unpredictable behaviour in Sn
- CVE-2019-2239Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute
- CVE-2019-2238Lack of check of data type can lead to subsequent loop-expression potentially go negative and the condition will still evaluate to true lead
- CVE-2019-2237Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequ
- CVE-2019-2236Null pointer dereference during secure application termination using specific application ids.
- CVE-2019-2235Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic.
- CVE-2018-13897Clients hostname gets added to DNS record on device which is running dnsmasq resulting in an information exposure in Snapdragon Auto, Snapdr
- CVE-2019-2292Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdragon Auto, Snapdragon C
- CVE-2019-2287Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver.
- CVE-2019-2279Shared memory gets updated with invalid data and may lead to access beyond the allocated memory.
- CVE-2019-2277Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdra
- CVE-2019-2269Possible buffer overflow while processing the high level lim process action frame due to improper buffer length validation in Snapdragon Aut
- CVE-2019-2264Null pointer dereference occurs for channel context while opening glink channel in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobi
- CVE-2019-2261Unauthorized access from GPU subsystem to HLOS or other non secure subsystem memory can lead to information disclosure in Snapdragon Auto, S
- CVE-2019-2260A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto, Snapdragon Compute, Sna
- CVE-2019-2243Possible buffer overflow at the end of iterating loop while getting the version info and lead to information disclosure.
- CVE-2018-13927Debug policy with invalid signature can be loaded when the debug policy functionality is disabled by using the parallel image loading in Sna
- CVE-2018-13924Lack of check to prevent the buffer length taking negative values can lead to stack overflow.
- CVE-2018-13896XBL_SEC image authentication and other crypto related validations are accessible to a compromised OEM XBL Loader due to missing lock at XBL_
- CVE-2019-2259Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto, Snapdragon Compute,
- CVE-2019-2257Wrong permissions in configuration file can lead to unauthorized permission in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer