Vendor
Qualcomm
3,001 known vulnerabilities.
Products
983 results · Clear filters · Feed
-
High 7.8
Out-of-bounds Read in Windows WLAN Host
Memory corruption while IOCTL call is invoked from user-space to read board data.
-
High 7.8
Use After Free in Automotive Linux OS
Memory corruption while processing memory map or unmap IOCTL operations simultaneously.
-
High 7.8
Use After Free in DSP Service
Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS may occur while parsing extended IE in beacon.
-
High 7.5
Buffer Over-read in WLAN Host
Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
-
High 7.5
Buffer Over-read in WLAN Host
Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
-
High 7.5
Buffer Over-read in WLAN Host
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
-
High 7.5
Buffer Over-read in WLAN Host
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
-
High 7.3
Improper Access Control in Automotive Linux OS
Memory corruption may occur due top improper access control in HAB process.
-
High 7.8
Improper Validation of Array Index in Display
Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.
-
High 7.8
Buffer Over-read in Display
Memory corruption while processing escape code in API.
-
High 7.8
Use of Out-of-range Pointer Offset in Trust Management Engine
Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.
-
High 7.7
Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL
Information disclosure while creating MQ channels.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.
-
High 7.8
Use After Free in HLOS
Memory corruption while handling file descriptor during listener registration/de-registration.
-
High 7.1
Exposed Dangerous Method or Function in HLOS
Cryptographic issues while generating an asymmetric key pair for RKP use cases.
-
High 7.8
Incorrect Type Conversion or Cast in Multimedia Frameworks
Memory corruption while processing IOCTL calls.
-
High 7.5
Insufficient Granularity of Access Control in Core
Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.
-
High 7.8
Use After Free in NPU
Memory corruption while calling the NPU driver APIs concurrently.
-
High 7.8
Untrusted Pointer Dereference in DSP_Services
Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.
-
High 7.8
Untrusted Pointer Dereference in DSP_Services
Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform
Memory corruption may occur in keyboard virtual device due to guest VM interaction.
-
High 7.8
Improper Input Validation in Automotive OS Platform
Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.
-
High 7.8
Improper Input Validation in Automotive OS Platform
Memory corruption while processing input message passed from FE driver.
-
High 7.8
Improper Input Validation in Automotive OS Platform
Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive Vehicle Networks
Memory corruption may occur while processing message from frontend during allocation.
-
High 7.5CVE-2024-53027 Public exploit
Buffer Copy Without Checking Size of Input in WLAN Host
Transient DOS may occur while processing the country IE.
-
High 7.8
NULL Pointer Dereference in Display
Memory corruption in display driver while detaching a device.
-
High 7.8
Use After Free in Automotive Android OS
Memory corruption may occur while accessing a variable during extended back to back tests.
-
High 7.8
Improper Input Validation in Automotive OS Platform
Memory corruption may occur during communication between primary and guest VM.
-
High 7.8
Improper Validation of Array Index in Audio
Memory corruption may occur while validating ports and channels in Audio driver.
-
High 7.8
Improper Input Validation in Automotive OS Platform
Memory corruption may occur due to improper input validation in clock device.
-
High 7.9
Permissions, Privileges, and Access Controls in Video Analytics and Processing
Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
-
High 7.8
Improper Validation of Array Index in Camera
Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.
-
High 7.8
Use After Free in DSP Service
Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.
-
High 7.8
Use After Free in Camera Linux
Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.
-
High 7.8
Use After Free in Audio
Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.
-
High 7.8
Use of Out-of-range Pointer Offset in Automotive Audio
Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.
-
High 7.8
Use After Free in Automotive Multimedia
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.