Skip to content
OpenAdvisories

Vendor

Qualcomm

3,001 known vulnerabilities.

Products

Snapdragon 997 Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear 516 Android for MSM, Firefox OS for MSM, QRD Android 306 All Qualcomm products 194 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 187 Snapdragon Mobile, Snapdragon Wear 134 Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear 129 Snapdragon Mobile 116 Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile 50 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 44 Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructur 42 Snapdragon Automobile, Snapdragon Mobile 39 Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 23 Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking 17 Snapdragon Auto 13 Snapdragon Wired Infrastructure and Networking 10 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music 10 Snapdragon Connectivity, Snapdragon Mobile 9 Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voic 8 Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 8 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastruct 8 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking 8 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile 7 Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear 6 Small Cell SoC , Snapdragon Mobile, Snapdragon Wear 6 Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 6 Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile 6 Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music 5 Snapdragon Industrial IOT, Snapdragon Mobile 5 Snapdragon Mobile, Snapdragon Wear, Small Cell SoC 4 Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music 4 Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile 4 Snapdragon IoT, Snapdragon Mobile 4 Snapdragon Consumer IOT, Snapdragon Mobile 4 Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile 3 Snapdragon Compute, Snapdragon Connectivity 3 Snapdragon Auto, Snapdragon Mobile 3 Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking 3 Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking 2 Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile 2

983 results · Clear filters · Feed

  • High 7.8

    Use of Out-of-range Pointer Offset in WLAN HAL

    Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.

  • High 7.8

    Buffer Copy Without Checking Size of Input in WLAN HAL

    Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

  • High 7.8

    Buffer Copy Without Checking Size of Input in WLAN HAL

    Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.

  • High 7.8

    Improper Validation of Array Index in WLAN HAL

    Memory corruption in WLAN handler while processing PhyID in Tx status handler.

  • High 7.8

    Improper Validation of Array Index in WLAN HAL

    Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.

  • High 7.8

    Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL

    Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.

  • High 7.8

    Improper Validation of Array Index in WLAN HAL

    Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.

  • High 7.8

    Buffer Copy without Checking the Size of Input in WLAN Firmware

    Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.

  • High 8.4

    Stack-based Buffer Overflow in WIN Product

    Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.

  • High 7.8

    Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

    Memory Corruption in Core Platform while printing the response buffer in log.

  • High 7.8

    Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform

    Memory corruption in Core Platform while printing the response buffer in log.

  • High 7.5

    Reachable Assertion in Modem

    Transient DOS in Modem while processing RRC reconfiguration message.

  • High 7.5

    Reachable Assertion in Modem

    Transient DOS in Modem while processing invalid System Information Block 1.

  • High 8.4

    Improper Validation of Array Index in Audio

    Memory corruption due to improper validation of array index in Audio.

  • High 8.4

    Improper validation of array index in WLAN HAL

    Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

  • High 7.5

    Buffer Over-read in Audio

    Transient DOS in Audio while remapping channel buffer in media codec decoding.

  • High 8.4

    Integer Overflow or Wraparound in Audio

    Memory corruption while allocating memory in COmxApeDec module in Audio.

  • High 8.4

    Integer Overflow or Wraparound in Audio

    Memory Corruption in Audio while playing amrwbplus clips with modified content.

  • High 7.7

    Key Management Errors in HLOS

    Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

  • High 7.1

    Improper Authentication in HLOS.

    Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

  • High 8.2

    Buffer Over-read in Network Services

    Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

  • High 7.8

    Buffer Over-read in WLAN HOST

    Memory Corruption in WLAN HOST while fetching TX status information.

  • High 7.8

    Buffer Over-read in WLAN Host

    Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.

  • High 7.8

    Stack-based Buffer Overflow in WLAN HOST

    Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.

  • High 7.8

    Buffer Copy Without Checking Size of Input in WLAN HOST

    Memory Corruption in WLAN HOST while parsing QMI response message from firmware.

  • High 8.4

    Integer Overflow or Wraparound in Audio

    Memory Corruption in Audio while allocating the ion buffer during the music playback.

  • High 7.8

    Use of Out-of-range Pointer Offset in Qualcomm IPC

    Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

  • High 7.8

    Buffer Copy Without Checking Size of Input in WLAN HOST

    Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

  • High 8.4

    Use After Free in Audio

    Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.

  • High 7.5

    Improper Input Validation in Modem

    Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.

  • High 7.8

    Improper Access control in GPU Subsystem

    Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.

  • High 8.2

    Buffer Over-read in WLAN HOST

    Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

  • High 7.5

    Buffer Over-read in WLAN Firmware

    Transient DOS while parsing WLAN beacon or probe-response frame.

  • High 7.5

    Buffer Over-read in WLAN Firmware

    Transient DOS in WLAN Firmware while parsing FT Information Elements.

  • High 7.5

    Buffer Over-read in WLAN Firmware

    Transient DOS in WLAN Firmware while processing frames with missing header fields.

  • High 7.5

    Buffer Over-Read in WLAN Firmware

    Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.

  • High 7.8

    Improper Input Validation in Audio

    Memoru corruption in Audio when ADSP sends input during record use case.

  • High 7.8

    Improper Input Validation in WLAN HOST

    Memory corruption in WLAN HOST while receiving an WMI event from firmware.

  • High 8.4

    Stack-based Buffer Overflow in Automotive GPU

    Memory corruption in Automotive GPU while querying a gsl memory node.

  • High 8.4

    Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL

    Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.