Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-11257Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions
- CVE-2017-18159In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0
- CVE-2017-18158Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS
- CVE-2017-15856Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases fr
- CVE-2017-15824In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0
- CVE-2017-14893While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header size or is smaller
- CVE-2017-14872While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Androi
- CVE-2017-11088Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MS
- CVE-2018-5863If userspace provides a too-large WPA RSN IE length in wlan_hdd_cfg80211_set_ie(), a buffer overflow occurs in all Android releases(Android
- CVE-2018-5860In the MDSS driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, a data structu
- CVE-2017-18169User process can perform the kernel DOS in ashmem when doing cache maintenance operation in all Android releases(Android for MSM, Firefox OS
- CVE-2018-5857In the WCD CPE codec, a Use After Free condition can occur in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CA
- CVE-2018-5854A stack-based buffer overflow can occur in fastboot from all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF usi
- CVE-2018-5851Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android rele
- CVE-2018-5849Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the
- CVE-2018-5848In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly.
- CVE-2018-5847Early or late retirement of rotation requests can result in a Use After Free condition in all Android releases from CAF (Android for MSM, Fi
- CVE-2018-5844In the video driver function set_output_buffers(), binfo can be accessed after being freed in a failure scenario in all Android releases fro
- CVE-2018-5843In the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using th
- CVE-2018-5842An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android releases from CAF (An
- CVE-2018-3582Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android
- CVE-2018-3581In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a buffer over
- CVE-2018-3579In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, event->num_en
- CVE-2018-3576improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds access in all Android rel
- CVE-2018-3572While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all And
- CVE-2018-3571In the KGSL driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a Use After F
- CVE-2017-18070In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of variable "event->num_n
- CVE-2017-15854The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wma_radio_chan_stats_ev
- CVE-2017-15843Due to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can potentially occur in all Android releases from CA
- CVE-2017-15842Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases from CAF (Android for