Vendor
Qualcomm
3,001 known vulnerabilities.
Products
3,001 results · Feed
-
High 8.4
Use After Free in Audio
Memory corruption in Audio when SSR event is triggered after music playback is stopped.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.
-
High 7.8
Buffer Copy Without Checking Size of Input in Audio
Memory corruption in Audio while processing the VOC packet data from ADSP.
-
High 7.5
NULL Pointer dereference in WLAN Firmware
Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.
-
High 7.8
Buffer Copy Without Checking Size of Input in Audio
Memory Corruption in Audio while invoking callback function in driver from ADSP.
-
High 7.5
Buffer over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing t2lm buffers.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing no-inherit IES.
-
Critical 9.8
Buffer Copy Without Checking Size of Input in WLAN Firmware
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
-
High 7.8
Buffer Copy Without Checking Size of Input in Automotive Audio
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
-
Critical 9.0
Improper Input Validation in Core
Memory corruption in core services when Diag handler receives a command to configure event listeners.
-
Medium 6.6
Buffer Over-read in WLAN HOST
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.
-
Medium 6.7
Buffer Copy without Checking Size of Input in Audio
Memory corruption while processing audio effects.
-
Medium 6.1
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL while handling command through WMI interfaces.
-
Medium 6.1
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL when reception status handler is called.
-
Medium 6.1
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL while handling the WMI state info command.
-
Medium 6.1
Buffer Over-read in IOE Firmware
Information disclosure in IOE Firmware while handling WMI command.
-
High 7.1
Improper Authorization in HLOS
Cryptographic issue in HLOS during key management.
-
Medium 6.1
Buffer Over-read in Qualcomm IPC
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
-
Medium 6.1
Buffer Over-read in WLAN Host
Information Disclosure in WLAN Host when processing WMI event command.
-
High 8.2
Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS
Memory corruption in TZ Secure OS while loading an app ELF.
-
High 8.4
Improper Authentication in Core
Memory Corruption in Core due to secure memory access by user while loading modem image.
-
Critical 9.8
Use of Out-of-range Pointer Offset in Multi-mode Call Processor
Memory Corruption in Multi-mode Call Processor while processing bit mask API.
-
Critical 9.3
Improper Input Validation in Core
Memory Corruption in Core during syscall for Sectools Fuse comparison feature.
-
High 8.4
Use After Free in Automotive Display
Memory corruption in Automotive Display while destroying the image handle created using connected display driver.
-
High 7.8
Buffer Copy Without Checking Size of Input in Audio
Memory corruption while invoking callback function of AFE from ADSP.
-
High 7.8
Signed-to-unsigned conversion error in Audio
Memory corruption while parsing the ADSP response command.
-
High 8.4
Use After Free in DSP Service
Memory corruption in DSP Service during a remote call from HLOS to DSP.
-
Critical 9.8
Buffer Copy without Checking Size of Input in WLAN Firmware
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing rsn ies.
-
High 7.5
Buffer over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing a NAN management frame.
-
Medium 6.1
Buffer Over-read in WLAN HOST
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
-
Critical 9.1
Improper Authentication in Data Modem
Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
-
Medium 6.6
Buffer Copy Without Checking Size of Input in WLAN Host
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
-
Critical 9.8
Use of Out-of-range Pointer Offset in Modem
Memory corruption in Modem while processing security related configuration before AS Security Exchange.
-
High 8.4
Improper Input Validation in HLOS
Memory Corruption in HLOS while registering for key provisioning notify.
-
High 7.8
Improper Validation of Array Index in HLOS
Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.
-
High 8.2
Buffer Over-read in Data Modem
Information Disclosure in data Modem while parsing an FMTP line in an SDP message.
-
High 8.2
Buffer Over-read in Data Modem
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.
-
High 7.5
NULL pointer Dereference in Modem
Transient DOS in Modem while allocating DSM items.
-
High 8.4
Improper Access Control in Core
Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.