Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-13925Error in parsing PMT table frees the memory allocated for the map section but does not reset the context map section reference causing heap
- CVE-2018-13920Use-after-free condition due to Improper handling of hrtimers when the PMU driver tries to access its events in Snapdragon Auto, Snapdragon
- CVE-2018-13899Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,
- CVE-2018-13895Due to the missing permissions on several content providers of the RCS app in its android manifest file will lead to an unprivileged access
- CVE-2018-13887Untrusted header fields in GNSS XTRA3 function can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,
- CVE-2018-13886Unchecked OTA field in GNSS XTRA3 lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consu
- CVE-2018-13885Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon
- CVE-2018-12013Improper authentication in locked memory region can lead to unprivilged access to the memory in Snapdragon Auto, Snapdragon Compute, Snapdra
- CVE-2018-12012While updating blacklisting region shared buffered memory region is not validated against newly updated black list, causing boot-up to be co
- CVE-2018-12005An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr
- CVE-2018-12004Secure keypad is unlocked with secure display still intact in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectiv
- CVE-2018-11976ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit
- CVE-2018-11968Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag
- CVE-2018-11967Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library i
- CVE-2018-11953While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Sn
- CVE-2018-11949Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdrag
- CVE-2018-11940Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consu
- CVE-2018-11937Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon C
- CVE-2018-11936Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads to out of bound memo
- CVE-2018-11930Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer t
- CVE-2018-11928Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute, Snapdragon
- CVE-2018-11927Improper input validation on input which is used as an array index will lead to an out of bounds issue while processing AP find event from f
- CVE-2018-11925Data length received from firmware is not validated against the max allowed size which can result in buffer overflow.
- CVE-2018-11924Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Sna
- CVE-2018-11271Improper authentication can happen on Remote command handling due to inappropriate handling of events in Snapdragon Auto, Snapdragon Compute
- CVE-2018-11923Improper buffer length check before copying can lead to integer overflow and then a buffer overflow in WMA event handler in Snapdragon Auto,
- CVE-2018-13918kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops norma
- CVE-2018-11971Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdra
- CVE-2018-11970TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivit
- CVE-2018-11966Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr