Vendor
Qualcomm
3,001 known vulnerabilities.
Products
983 results · Clear filters · Feed
-
High 8.4
Improper Restriction of Operations within the Bounds of a Memory Buffer in Hypervisor
Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
-
High 7.5
Buffer Over-read in Audio
Transient DOS during music playback of ALAC content.
-
High 8.4
Use After Free in Graphics
Memory corruption while handling user packets during VBO bind operation.
-
High 8.4
Use After Free in Graphics
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
-
High 8.4
Integer Overflow or Wraparound in Graphics
Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.
-
High 7.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC
Memory corruption when allocating and accessing an entry in an SMEM partition.
-
High 7.3
Permissions, Privileges, and Access Control issues in TZ Secure OS
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
-
High 7.8
Buffer Over-read in Trusted Execution Environment
Memory corruption while processing key blob passed by the user.
-
High 7.1
Buffer Over-read in TZ Secure OS
Transient DOS while loading the TA ELF file.
-
High 8.4
Double Free in HLOS
Memory corruption while performing finish HMAC operation when context is freed by keymaster.
-
High 7.1
Use of Insufficiently Random Values in Core
Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.
-
High 8.4
Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services
Memory corruption while processing IOCTL handler in FastRPC.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.
-
High 8.4
Improper Access Control in Graphics Windows
Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers.
-
High 8.2
Buffer Over-read in Video
Information disclosure in Video while parsing mp2 clip with invalid section length.
-
High 7.8
Buffer Copy Without Checking Size of Input in Trusted Execution Environment
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
-
High 8.4
Use After Free in Graphics Linux
Memory corruption when the IOCTL call is interrupted by a signal.
-
High 8.4
Improper Access Control in Graphics Linux
Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.
-
High 7.3
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while playing audio file having large-sized input buffer.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
-
High 7.8
Improper Input Validation in Secure Processor
Memory corruption when the channel ID passed by user is not validated and further used.
-
High 7.8
Use of Out-of-range Pointer Offset in Video
Memory corruption when the payload received from firmware is not as per the expected protocol size.
-
High 8.4
Stack-based Buffer Overflow in PMIC
Memory corruption when size of buffer from previous call is used without validation or re-initialization.
-
High 8.4
Use After Free in Graphics Linux
Memory corruption when IOMMU unmap of a GPU buffer fails in Linux.
-
High 8.4
Access of Uninitialized Pointer in SPS Applications
Memory corruption while verifying the serialized header when the key pairs are generated.
-
High 7.5
Reachable Assertion in Data Modem
Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received.
-
High 8.4
Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
-
High 8.4
Use After Free in Kernel
Memory corruption in Kernel while handling GPU operations.
-
High 8.4
Integer Overflow to Buffer Overflow in Graphics Windows
Memory corruption while allocating memory for graphics.
-
High 8.4
Use After Free in Kernel
Memory corruption when there is failed unmap operation in GPU.
-
High 7.3
Buffer Copy Without Checking Size of Input in Audio
Memory corruption while processing Codec2 during v13k decoder pitch synthesis.
-
High 7.5
Integer Overflow to Buffer Overflow in Automotive Telematics
Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics.
-
High 7.5
Improper Input Validation in Automotive Telematics
Transient DOS while decoding message of size that exceeds the available system memory.
-
High 7.3
Improper Input Validation in Automotive Telematics
Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions.
-
High 7.8
Buffer Over-read in Trusted Execution Environment
Memory corruption while processing buffer initialization, when trusted report for certain report types are generated.
-
High 7.5
Incorrect Type Conversion or Cast in Multi-Mode Call Processor
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
-
High 7.5
Improper input validation in Multi-Mode Call Processor
Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.
-
High 7.5
Improper Input Validation in Multi-Mode Call Processor
Transient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
-
High 8.4
Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications
Memory corruption while processing finish_sign command to pass a rsp buffer.
-
High 8.4
Buffer Copy Without Checking Size of Input in SPS Applications
Memory corruption in SPS Application while requesting for public key in sorter TA.