Vendor
Qualcomm
3,001 known vulnerabilities.
Products
317 results · Clear filters · Feed
-
Medium 6.7
Buffer Copy Without Checking Size of Input in Linux
Memory corruption in Linux when the file upload API is called with parameters having large buffer.
-
Medium 6.7
Buffer Copy Without Checking the Size of Input in Audio
Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
-
Medium 6.7
Incorrect Type Conversion or Cast in Video
Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.
-
Medium 6.7
Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux
Memory corruption in Linux while calling system configuration APIs.
-
Medium 6.7
Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
-
Medium 6.7
Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
-
Medium 6.8
Double Free in Modem
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
-
Medium 6.2
Information Exposure in DSP Services
Information disclosure in DSP Services while loading dynamic module.
-
Medium 6.2
Untrusted Pointer Dereference in Core
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
-
Medium 5.5
Uncontrolled resource consumption in Linux kernel
Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.
-
Medium 6.7
Improper restriction of operations within the bounds of memory buffer in Linux
Memory corruption in Linux while sending DRM request.
-
Medium 6.7
Use after free in Core
Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
-
Medium 6.7
Incorrect type conversion or cast in Audio
Memory corruption in Audio due to incorrect type cast during audio use-cases.
-
Medium 6.7
Buffer copy without checking the size of input in FM Host
Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
-
Medium 6.7
Double free in Linux-Android
Memory corruption in Linux android due to double free while calling unregister provider after register call.
-
Medium 6.7
Buffer copy without checking the size of input in Core
Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.
-
Medium 6.7
Buffer copy without checking the size of input in Core
Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
-
Medium 6.7
Improper validation of array index in computer vision.
Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.
-
Medium 6.8
Improper validation of array index in User Identity Module
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
-
Medium 6.7
Incorrect type conversion or cast in Audio
Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM.
-
Medium 6.7
Use after free in Modem
Memory corruption due to use after free in Modem while modem initialization.
-
Medium 6.8
Buffer overread in Linux Sensors
Information disclosure due to buffer overread in Linux sensors
-
Medium 5.9
Integer overflow to buffer overflow in Modem
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.
-
Medium 6.8
Improper validation of array index in Modem
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
-
Medium 5.9
Stack based buffer overflow in Core
Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.
-
Medium 6.7
Use after free in WLAN
Memory corruption in WLAN due to use after free
-
Medium 6.2
Information Exposure in Graphics
Information Disclosure in Graphics during GPU context switch.
-
Medium 6.7
Use of out-of-range pointer offset in Audio
Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.
-
Medium 6.7
Use after free in Trusted Application Environment
Memory corruption due to use after free in trusted application environment.
-
Medium 6.8
Buffer over-read in Trusted Execution Environment
Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
-
Medium 6.0
Improper Input Validation in Automotive
Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.
-
Medium 6.8
Buffer over-read in Core
Information disclosure due to buffer overread in Core
-
Medium 6.8
Buffer overread in Core
Information disclosure due to buffer overread in Core
-
Medium 5.9
Integer overflow to buffer overflow in Audio
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.
-
Medium 6.2
Use-after-Free in MODEM
Denial of service in MODEM due to improper pointer handling
-
Medium 6.0
Information Exposure in DSP Services
Information exposure in DSP services due to improper handling of freeing memory
-
Medium 6.7
Incorrect Type Conversion in Video driver
Memory corruption in video driver due to type confusion error during video playback
-
Medium 6.7
Use-After-Free Issue in Display
Memory corruption in display due to double free while allocating frame buffer memory
-
Medium 6.7
Time-of-check Time-of-use Race Condition in Multimedia Framework
Memory corruption in Multimedia Framework due to unsafe access to the data members
-
Medium 6.7
Incorrect type casting in Display driver
Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields