Vendor
Qualcomm
3,001 known vulnerabilities.
Products
3,001 results · Feed
-
High 8.4
Information Exposure in Kernel
Information disclosure possible while audio playback.
-
High 8.4
Information Exposure in Camera Driver
Information disclosure due to uninitialized variable.
-
High 7.8
Improper Access Control in Core.
QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.
-
High 7.8
Improper Authentication in TrustZone
An image with a version lower than the fuse version may potentially be booted lead to improper authentication.
-
High 7.5
Configurations in Android Build
Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.
-
Medium 6.8
Use After Free in WLAN
A race condition exists in a driver potentially leading to a use-after-free condition.
-
High 8.8
Multiple buffer overread vulnerabilities in WLAN
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
-
High 7.8
Buffer overwrite due to improper input validation in WLAN host
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW
-
High 8.8
Use of Out-of-range Pointer Offset in Video
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
-
Critical 9.8
Improper Authentication in Core
Initial xbl_sec revision does not have all the debug policy features and critical checks.
-
Medium 6.7
Improper Input Validation in Audio
Possible out of bound access in audio module due to lack of validation of user provided input.
-
Medium 6.7
Permissions, Privileges, and Access Controls in Data
Certain unprivileged processes are able to perform IOCTL calls.
-
High 7.8
Use After Free in GPS
Memory corruption during GNSS HAL process initialization.
-
High 7.8
Buffer Copy Without Checking Size of Input in Graphics Linux
Memory corruption while processing GPU page table switch.
-
High 7.8
Integer Overflow to Buffer Overflow in Audio
Memory corruption while processing voice packet with arbitrary data received from ADSP.
-
High 7.8
Use After Free in Graphics Linux
Memory corruption while processing GPU commands.
-
High 7.8
Use After Free in Automotive GPU
Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
-
High 7.8
Use After Free in Computer Vision
Memory corruption while handling session errors from firmware.
-
High 7.8
Stack-based Buffer Overflow in WLAN Windows Host
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
-
High 7.8
Buffer Copy Without Checking Size of Input in WLAN Windows Host
Memory corruption while station LL statistic handling.
-
High 8.2
Cryptographic Issues in BT Controller
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera
Memory corruption while handling IOCTL calls in JPEG Encoder driver.
-
High 7.5
Buffer Over-read in WLAN Host
Transient DOS while processing the CU information from RNR IE.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while parsing BTM ML IE when per STA profile is not included.
-
High 7.5
Use After Free in WLAN Host Communication
Transient DOS while parsing fragments of MBSSID IE from beacon frame.
-
Medium 6.7
Use After Free in ComputerVision
Memory corruption while processing IOCTL calls to unmap the buffers.
-
Medium 6.7
Improper Validation of Array Index in Camera_Linux
Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.
-
Medium 6.7
Improper Input Validation in RIL
Memory corruption while processing the update SIM PB records request.
-
Medium 6.7
Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance
Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.
-
Medium 6.7
Use After Free in DSP Services
Memory corruption while handling the PDR in driver for getting the remote heap maps.
-
Medium 6.7
Improper Input Validation in Video
memory corruption when WiFi display APIs are invoked with large random inputs.
-
High 7.5
Reachable Assertion in Modem
Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
-
Medium 6.7
Use of Out-of-range Pointer Offset in ComputerVision
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
-
High 7.8CVE-2024-43047 Exploited
Use After Free in DSP Service
Memory corruption while maintaining memory maps of HLOS memory.
KEV Oct 8, 2024 -
Medium 6.1
Improper Authorization in Performance
Information disclosure while sending implicit broadcast containing APP launch information.
-
High 8.4CVE-2024-38399 Public exploit
Use After Free in Graphics
Memory corruption while processing user packets to generate page faults.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing probe response and assoc response frame.
-
High 8.2
Buffer Over-read in WLAN Host Communication
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
-
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while parsing the MBSSID IE from the beacons when IE length is 0.