Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-18316Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon We
- CVE-2017-18315Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600.
- CVE-2018-11884Improper input validation leads to buffer overflow while processing network list offload command in WLAN function in Snapdragon Mobile in ve
- CVE-2018-11882Incorrect bound check can lead to potential buffer overwrite in WLAN controller in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA6
- CVE-2018-11880Incorrect bound check can lead to potential buffer overwrite in WLAN function in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660
- CVE-2018-11879When the buffer length passed is very large, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobile in ve
- CVE-2018-11877When the buffer length passed is very large in WLAN, bounds check could be bypassed leading to potential buffer overwrite in Snapdragon Mobi
- CVE-2018-11876Lack of input validation while copying to buffer in WLAN will lead to a buffer overflow in Snapdragon Mobile in version SD 835, SD 845, SD 8
- CVE-2018-11875Lack of check of buffer size before copying in a WLAN function can lead to a buffer overflow in Snapdragon Mobile in version SD 845, SD 850.
- CVE-2018-11874Buffer overflow if the length of passphrase is more than 32 when setting up secure NDP connection in Snapdragon Mobile in version SD 835, SD
- CVE-2018-11873Improper input validation leads to buffer overwrite in the WLAN function that handles WLAN roam buffer in Snapdragon Mobile in version SD 84
- CVE-2018-11872Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 845, S
- CVE-2018-11871Buffer overwrite can happen in WLAN function while processing set pdev parameter command due to lack of input validation in Snapdragon Autom
- CVE-2018-11870Buffer overwrite can occur when the legacy rates count received from the host is not checked against the maximum number of legacy rates in S
- CVE-2018-11867Lack of buffer length check before copying in WLAN function while processing FIPS event, can lead to a buffer overflow in Snapdragon Mobile
- CVE-2018-11866Integer overflow may happen in WLAN when calculating an internal structure size due to lack of validation of the input length in Snapdragon
- CVE-2018-11865Integer overflow may happen when calculating an internal structure size due to lack of validation of the input length in Snapdragon Mobile,
- CVE-2018-11862Buffer overflow can happen in WLAN module due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850, SDA6
- CVE-2018-11861Buffer overflow can happen in WLAN function due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850, SD
- CVE-2018-11859Buffer overwrite can happen in WLAN due to lack of validation of the input length in Snapdragon Mobile in version SD 845, SD 850.
- CVE-2018-11858When processing IE set command, buffer overwrite may occur due to lack of input validation of the IE length in Snapdragon Mobile in version
- CVE-2018-11857Improper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon Mobile in version SD 835, SD 845, SD 850
- CVE-2018-11856Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, S
- CVE-2017-18281A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android
- CVE-2018-5914Improper input validation in TZ led to array out of bound in TZ function while accessing the peripheral details using the incoming data in S
- CVE-2018-5866While processing logs, data is copied into a buffer pointed to by an untrusted pointer in Snapdragon Mobile, Snapdragon Wear in version MDM9
- CVE-2018-3588There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile, Snapdragon
- CVE-2018-11951Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snapdragon Mobile in vers
- CVE-2018-11950Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850
- CVE-2018-11854Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845, SD 850,