Vendor
Qualcomm
3,001 known vulnerabilities.
Products
983 results · Clear filters · Feed
-
High 8.4
Information Exposure in Kernel
Information disclosure possible while audio playback.
-
High 8.4
Information Exposure in Camera Driver
Information disclosure due to uninitialized variable.
-
High 7.8
Improper Access Control in Core.
QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.
-
High 7.8
Improper Authentication in TrustZone
An image with a version lower than the fuse version may potentially be booted lead to improper authentication.
-
High 7.5
Configurations in Android Build
Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.
-
High 8.8
Multiple buffer overread vulnerabilities in WLAN
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
-
High 7.8
Buffer overwrite due to improper input validation in WLAN host
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW
-
High 8.8
Use of Out-of-range Pointer Offset in Video
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
-
High 7.8
Use After Free in GPS
Memory corruption during GNSS HAL process initialization.
-
High 7.8
Buffer Copy Without Checking Size of Input in Graphics Linux
Memory corruption while processing GPU page table switch.
-
High 7.8
Integer Overflow to Buffer Overflow in Audio
Memory corruption while processing voice packet with arbitrary data received from ADSP.
-
High 7.8
Use After Free in Graphics Linux
Memory corruption while processing GPU commands.
-
High 7.8
Use After Free in Automotive GPU
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
-
High 7.8
Use After Free in Computer Vision
Memory corruption while handling session errors from firmware.
-
High 7.8
Stack-based Buffer Overflow in WLAN Windows Host
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
-
High 7.8
Buffer Copy Without Checking Size of Input in WLAN Windows Host
Memory corruption while station LL statistic handling.
-
High 8.2
Cryptographic Issues in BT Controller
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
Memory corruption while handling IOCTL calls in JPEG Encoder driver.
-
High 7.5
Buffer Over-read in WLAN Host
Transient DOS while processing the CU information from RNR IE.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while parsing BTM ML IE when per STA profile is not included.
-
High 7.5
Use After Free in WLAN Host Communication
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
-
High 7.5
Reachable Assertion in Modem
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
-
High 7.8CVE-2024-43047 Exploited
Use After Free in DSP Service
Memory corruption while maintaining memory maps of HLOS memory.
KEV Oct 8, 2024 -
High 8.4CVE-2024-38399 Public exploit
Use After Free in Graphics
Memory corruption while processing user packets to generate page faults.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing probe response and assoc response frame.
-
High 8.2
Buffer Over-read in WLAN Host Communication
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing ESP IE from beacon/probe response frame.
-
High 7.5
Use After Free in WLAN Host
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host.
-
High 8.4
Improper Input Validation in Camera
Memory corruption while taking snapshot when an offset variable is set by camera driver.
-
High 8.2
Buffer Over-read in WLAN Host Communication
Information disclosure while parsing the multiple MBSSID IEs from the beacon.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
-
High 7.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS
Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
-
High 7.8
Untrusted Pointer Dereference in DSP Service
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
-
High 7.8
Use After Free in DSP Services
Memory corruption while processing IOCTL call for getting group info.
-
High 7.8
Use After Free in Qualcomm IPC
Memory corruption while processing concurrent IOCTL calls.
-
High 8.4
Use After Free in DSP Service
Memory corruption when two threads try to map and unmap a single node simultaneously.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
-
High 7.8
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Computer Vision
Memory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.