Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-11853Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, Snapdrago
- CVE-2018-11850Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon
- CVE-2018-11849Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapd
- CVE-2018-11846The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SD
- CVE-2018-11828When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying
- CVE-2018-11824A stack-based buffer overflow can occur in a firmware routine in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD
- CVE-2018-11822A possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660
- CVE-2018-11821Possible integer overflow may happen in WLAN during memory allocation in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM
- CVE-2018-11305When a series of FDAL messages are sent to the modem, a Use After Free condition can occur in Snapdragon Automobile, Snapdragon Mobile, Snap
- CVE-2017-18311XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration port
- CVE-2017-18310ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/
- CVE-2017-18309A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845,
- CVE-2017-18308Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM960
- CVE-2017-18124During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mob
- CVE-2017-18313Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS
- CVE-2017-18312While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of
- CVE-2017-18305XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdrag
- CVE-2017-18304Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon
- CVE-2017-18303While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile,
- CVE-2017-18300Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdrag
- CVE-2017-18299Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and S
- CVE-2017-18298Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in vers
- CVE-2017-18297Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD
- CVE-2017-18296Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snap
- CVE-2017-18295Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear
- CVE-2017-18294While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size
- CVE-2017-18293When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can be bypassed using th
- CVE-2017-18292Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, Snapdragon Mobile and
- CVE-2017-18283Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212
- CVE-2017-18282Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdragon Wear in version M