Vendor
Qualcomm
3,001 known vulnerabilities.
Products
983 results · Clear filters · Feed
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while processing the EHT operation IE in the received beacon frame.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while processing goodbye RTCP packet from network.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.
-
High 7.8
Improper Access Control in Core
Memory corruption may occur while attaching VM when the HLOS retains access to VM.
-
High 7.8
Buffer Over-read in Display
Memory corruption while processing escape code, when DisplayId is passed with large unsigned value.
-
High 7.8
Improper Access Control in Camera Driver
Memory corruption while processing image encoding, when configuration is NULL in IOCTL parameter.
-
High 7.8
Improper Access Control in Camera Driver
Memory corruption while processing image encoding, when input buffer length is 0 in IOCTL call.
-
High 7.8
Out-of-bounds Write in Computer Vision
Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.
-
High 7.8
Out-of-bounds Write in Computer Vision
Memory corruption while reading the FW response from the shared queue.
-
High 7.8
Out-of-bounds Write in Computer Vision
Memory corruption while processing an IOCTL request, when buffer significantly exceeds the command argument limit.
-
High 7.8
Improper Input Validation in Automotive Software platform based on QNX
Memory corruption while processing a message, when the buffer is controlled by a Guest VM, the value can be changed continuously.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing per STA profile in ML IE.
-
High 7.8
Use After Free in GPS HLOS Driver
Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.
-
High 7.5
Buffer Over-read in Multi-Mode Call Processor
Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE.
-
High 8.2
Buffer Over-read in Multi-Mode Call Processor
Memory corruption while decoding of OTA messages from T3448 IE.
-
High 7.8
Improper Input Validation in HLOS
Memory corruption during the FRS UDS generation process.
-
High 7.8
Improper Input Validation in Automotive
Memory corruption while triggering commands in the PlayReady Trusted application.
-
High 7.8
Improper Access Control in Hypervisor
Memory corruption during memory mapping into protected VM address space due to incorrect API restrictions.
-
High 7.8
Detection of Error Condition Without Action in Hypervisor
Memory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.
-
High 7.8
Out-of-bounds Write in SPS Applications
Memory corruption while reading secure file.
-
High 7.8
Improper Input Validation in Camera Driver
Memory corruption may occur when invoking IOCTL calls from userspace to the camera kernel driver to dump request information, due to a missing memory requirement check.
-
High 7.8
Improper Validation of Array Index in Camera Driver
Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.
-
High 7.8
Improper Input Validation in Camera Driver
Memory corruption while invoking IOCTL calls from userspace to camera kernel driver to dump request information.
-
High 7.8
Improper Validation of Array Index in Camera Driver
Memory corruption while prociesing command buffer buffer in OPE module.
-
High 7.8
Integer Overflow or Wraparound in Camera Driver
Memory corruption Camera kernel when large number of devices are attached through userspace.
-
High 7.8
Improper Validation of Array Index in Camera Driver
Memory corruption during array access in Camera kernel due to invalid index from invalid command data.
-
High 7.8
Use After Free in Camera Driver
Memory corruption while encoding JPEG format.
-
High 7.8
Use After Free in Camera Driver
Memory corruption during concurrent buffer access due to modification of the reference count.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption when blob structure is modified by user-space after kernel verification.
-
High 7.8
Use After Free in HLOS
Memory corruption during concurrent access to server info object due to incorrect reference count update.
-
High 7.8
Use After Free in DSP Service
Memory corruption during concurrent SSR execution due to race condition on the global maps list.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS may occur while parsing SSID in action frames.
-
High 7.8
Improper Validation of Array Index in Computer Vision
Memory corruption may occur while processing device IO control call for session control.
-
High 7.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Automotive Vehicle Networks
Memory corruption while processing message content in eAVB.
-
High 7.8
Integer Overflow to Buffer Overflow in Automotive Vehicle Networks
Memory corruption while transmitting packet mapping information with invalid header payload size.
-
High 7.8
Out-of-bounds Read in Windows WLAN Host
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
-
High 7.8
Out-of-bounds Read in Windows WLAN Host
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
-
High 7.8
Out-of-bounds Read in Windows WLAN Host
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.