Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-8257In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register
- CVE-2017-8256In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more
- CVE-2017-8255In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot.
- CVE-2017-8254In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked
- CVE-2017-8253In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid m
- CVE-2016-5872In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validate
- CVE-2016-5871In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists
- CVE-2016-10392In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory.
- CVE-2016-10391In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for val
- CVE-2016-10389In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the
- CVE-2016-10388In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-part
- CVE-2016-10387In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenari
- CVE-2016-10386In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP.
- CVE-2016-10385In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists in IMS RCS.
- CVE-2016-10384In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioct
- CVE-2016-10383In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI.
- CVE-2016-10382In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient.
- CVE-2016-10381In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE
- CVE-2016-10380In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE
- CVE-2016-10347In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validat
- CVE-2016-10346In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor.
- CVE-2016-10344In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially pos
- CVE-2016-10343In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in
- CVE-2015-9073In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone sy
- CVE-2015-9072In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone sy
- CVE-2015-9071In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone sysca
- CVE-2015-9070In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone sysca
- CVE-2015-9069In all Qualcomm products with Android releases from CAF using the Linux kernel, the Secure File System can become corrupted.
- CVE-2015-9068In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated.
- CVE-2015-9067In all Qualcomm products with Android releases from CAF using the Linux kernel, a potential compiler optimization of memset() is addressed.