Vendor
Qualcomm
3,001 known vulnerabilities.
Products
983 results · Clear filters · Feed
-
High 7.8
Use After Free in MProc
Memory corruption while processing command in Glink linux.
-
High 7.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera_Linux
Memory corruption while processing camera use case IOCTL call.
-
High 7.8
Improper Validation of Array Index in Graphics_Linux
Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.
-
High 7.8
Use of Out-of-range Pointer Offset in WLAN Windows Host
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.
-
High 8.2
Buffer Over-read in WLAN Host Cmn
Memory corruption during management frame processing due to mismatch in T2LM info element.
-
High 8.2
Buffer Over-read in WLAN HOST
Information disclosure while parsing the OCI IE with invalid length.
-
High 7.8
Improper Validation of Array Index in Automotive OS Platform
Memory corruption while reading CPU state data during guest VM suspend.
-
High 7.8
Improper Validation of Array Index in Camera
Memory corruption while power-up or power-down sequence of the camera sensor.
-
High 7.8
Improper Validation of Array Index in Camera
Memory corruption can occur in the camera when an invalid CID is used.
-
High 7.8
Improper Validation of Array Index in Camera
Memory corruption in Camera due to unusually high number of nodes passed to AXI port.
-
High 7.8
Untrusted Pointer Dereference in Automotive Android OS
Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.
-
High 7.8
Improper Validation of Array Index in Camera Driver
Memory corruption while validating number of devices in Camera kernel .
-
High 7.8
Use of Out-of-range Pointer Offset in Display
Memory corruption may occour while generating test pattern due to negative indexing of display ID.
-
High 7.8
Use After Free in WLAN Host Communication
Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.
-
High 7.8
Use After Free in Windows WLAN Host
Memory corruption while handling IOCTL call from user-space to set latency level.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.
-
High 8.8
Improper Input Validation in Hypervisor
Memory corruption while configuring a Hypervisor based input virtual device.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux
Memory corruption while parsing the memory map info in IOCTL calls.
-
High 7.5
Buffer Over-read in Multi Mode Call Processor
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
-
High 7.5
Buffer Over-read in WLAN Host Cmn
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
-
High 8.4
Integer Overflow to Buffer Overflow in Automotive OS Platform
Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.
-
High 7.8
Use After Free in DSP Services
Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.
-
High 7.8
Improper Validation of Array Index in DSP Services
Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.
-
High 7.8
Buffer Over-read in WLAN Windows Host
Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.
-
High 7.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host
Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.
-
High 7.8
Buffer Over-read in WLAN Windows Host
Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.
-
High 7.8
Stack-based Buffer Overflow in WLAN Windows Host
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
-
High 7.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host
Memory corruption when IOCTL call is invoked from user-space to read board data.
-
High 7.5
Permissions, Privileges, and Access Controls issue in Automotive OS Platform
Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.
-
High 8.4
Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity
Memory corruption while processing IPA statistics, when there are no active clients registered.
-
High 7.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host
Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.
-
High 7.8
Improper Input Validation in Video Analytics and Processing
Memory corruption while processing API calls to NPU with invalid input.
-
High 7.8
Stack-based Buffer Overflow in WLAN Windows Host
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.
-
High 7.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host
Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.
-
High 7.8
Stack-based Buffer Overflow in Performance
Memory corruption when invalid input is passed to invoke GPU Headroom API call.
-
High 7.5
Integer Overflow or Wraparound in WLAN Host Communication
Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.
-
High 8.4
Buffer Over-read in MProc
Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
-
High 8.4
Improper Validation of Array Index in Hypervisor
Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
-
High 8.4
Buffer Over-read in IPA
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'
-
High 7.8
Use After Free in Video
Crafted Binder Request Causes Heap UAF in MediaServer