Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-2256An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdrago
- CVE-2019-2255An unprivileged user can craft a bitstream such that the payload encoded in the bitstream gains code execution in Snapdragon Auto, Snapdrago
- CVE-2018-5913A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute,
- CVE-2018-5911Buffer overflow in WLAN function due to improper check of buffer size before copying in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon
- CVE-2018-5903Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Sna
- CVE-2018-5883Buffer overflow in WLAN driver event handlers due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer IOT, Snapdra
- CVE-2018-3583A buffer overflow can occur while processing an extscan hotlist event in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snap
- CVE-2018-13919Use-after-free vulnerability will occur if reset of the routing table encounters an invalid rule id while processing command to reset in Sna
- CVE-2018-13911Out of bounds memory read and access may lead to unexpected behavior in GNSS XTRA Parser in Snapdragon Auto, Snapdragon Compute, Snapdragon
- CVE-2018-13910Out-of-Bounds access in TZ due to invalid index calculated to check against DDR in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Cons
- CVE-2018-13909Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected beh
- CVE-2018-13908Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon Com
- CVE-2018-13907While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key operations
- CVE-2018-13906The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially forged application messag
- CVE-2018-13902Out of bounds memory read and access due to improper array index validation may lead to unexpected behavior while decoding XTRA file in Snap
- CVE-2018-13901Due to missing permissions in Android Manifest file, Sensitive information disclosure issue can happen in PCI RCS app in Snapdragon Auto, Sn
- CVE-2018-13898Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Conne
- CVE-2018-11955Lack of check on length of reason-code fetched from payload may lead driver access the memory not allocated to the frame and results in out
- CVE-2018-11947The txrx stats req might be double freed in the pdev detach when the host driver is unloading in Snapdragon Auto, Snapdragon Consumer Electr
- CVE-2018-11942Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory
- CVE-2018-11939Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industr
- CVE-2018-11934Possible out of bounds write due to improper input validation while processing DO_ACS vendor command in Snapdragon Auto, Snapdragon Consumer
- CVE-2018-11929Lack of input validation in WLAN function can lead to potential heap overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Indust
- CVE-2018-11819Use after issue in WLAN function due to multiple ACS scan requests at a time in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industr
- CVE-2017-8252Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in Snapdragon Auto, Snapdragon
- CVE-2019-2250Kernel can write to arbitrary memory address passed by user while freeing/stopping a thread in Snapdragon Compute, Snapdragon Consumer IOT,
- CVE-2019-2248Buffer overflow can occur if invalid header tries to overwrite the existing buffer which fix size allocation in Snapdragon Auto, Snapdragon
- CVE-2019-2247Possibility of double free issue while running multiple instances of smp2p test because of proper protection is missing while using global v
- CVE-2019-2245Possible integer underflow can happen when calculating length of elementary stream map from invalid packet length which is later used to rea
- CVE-2019-2244Possible integer underflow can happen when calculating length of elementary stream info from invalid section length which is later used to r