Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-11958Insufficient protection of keys in keypad can lead HLOS to gain access to confidential keypad input data in Snapdragon Auto, Snapdragon Cons
- CVE-2018-11830Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectiv
- CVE-2018-5839Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Sna
- CVE-2018-13914Lack of input validation for data received from user space can lead to an out of bound array issue in Snapdragon Auto, Snapdragon Consumer I
- CVE-2018-13913Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Sna
- CVE-2018-13912Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Con
- CVE-2018-13905KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer
- CVE-2018-13904Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Sna
- CVE-2018-13900Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Co
- CVE-2018-11948Exceeding the limit of usage entries are not tracked and the information will be lost causing the content to lose continuity in Snapdragon A
- CVE-2018-11945Improper input validation in wireless service messaging module for data received from broadcast messages can lead to heap overflow in Snapdr
- CVE-2018-11938Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdrago
- CVE-2018-11935Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdrago
- CVE-2018-11932Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,
- CVE-2018-11931Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr
- CVE-2018-11864Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti
- CVE-2018-11845Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon
- CVE-2018-11820Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, S
- CVE-2018-11289Data truncation during higher to lower type conversion which causes less memory allocation than desired can lead to a buffer overflow in Sna
- CVE-2018-13893In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Out of bound mask range access ca
- CVE-2018-13889In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Heap memory was accessed after it
- CVE-2018-13888There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdr
- CVE-2018-12014In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null pointer dereference vulnerab
- CVE-2018-12011In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Uninitialized data for socket add
- CVE-2018-12010In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Absence of length sanity check ma
- CVE-2018-12006In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Users with no extra privileges ca
- CVE-2018-11962In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Use-after-free issue in heap whil
- CVE-2018-11899While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, S
- CVE-2018-11888Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Com
- CVE-2018-11855If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapd