Vendor
Qualcomm
3,001 known vulnerabilities.
Products
96 results · Clear filters · Feed
-
Critical 9.8
Buffer copy without checking the size of input in Modem
Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.
-
Critical 9.3
Double free in Core
Memory corruption due to double free in core while initializing the encryption key.
-
Critical 9.8
Improper Input Validation in MODEM
memory corruption in modem due to improper check while calculating size of serialized CoAP message
-
Critical 9.8
Always Incorrect Control Flow Implementation in MODEM
Memory corruption in modem due to improper input validation while handling the incoming CoAP message
-
Critical 9.8
Buffer Copy Without Checking Size of Input in MODEM
Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface
-
Critical 9.8
Buffer Copy Without Checking Size of Input in MODEM
Memory correction in modem due to buffer overwrite during coap connection
-
Critical 9.3
Time-of-check time-of-use race condition in Core
Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
-
Critical 9.8
Improper validation of array index in Multi-mode call processor
Memory corruption due to improper validation of array index in Multi-mode call processor.
-
Critical 9.8
Buffer copy without checking size of input in WLAN Firmware
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
-
Critical 9.8
Stack based buffer overflow in WLAN
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
-
Critical 9.3
Buffer copy without checking size of input in Hypervisor
Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.
-
Critical 9.8
Improper Input Validation in MODEM
Memory corruption in modem due to improper length check while copying into memory
-
Critical 9.3
Integer Overflow to Buffer Overflow in Automotive
Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer.
-
Critical 9.8
Integer Overflow to Buffer Overflow in Bluetooth HOST
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
-
Critical 9.8
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdrago…
-
Critical 9.8
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snap…
-
Critical 9.1
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Sn…
-
Critical 9.8
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Comput…
-
Critical 9.8
Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivi…
-
Critical 9.0
Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking
-
Critical 9.4
Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon…
-
Critical 9.8
Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length p…
-
Critical 9.3
Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto…
-
Critical 9.8
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapd…
-
Critical 9.8
Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBS…
-
Critical 9.1
Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet …
-
Critical 9.1
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has be…
-
Critical 9.1
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has be…
-
Critical 9.8
Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Com…
-
Critical 9.0
Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Sn…
-
Critical 9.3
Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, …
-
Critical 9.1
Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode c…
-
Critical 9.8
Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Sn…
-
Critical 9.3
Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon…
-
Critical 9.3
Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto…
-
Critical 9.3
Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon …
-
Critical 9.8
An out of bound memory access can occur due to improper validation of number of frames being passed during music playba…
-
Critical 9.3
Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resour…
-
Critical 9.3
Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Sn…
-
Critical 9.8
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapd…