Vendor
Qualcomm
3,001 known vulnerabilities.
Products
3,001 results · Feed
-
High 7.5
Reachable Assertion in Modem
Transient DOS in Modem while triggering a camping on an 5G cell.
-
High 8.2
Buffer Over-read in Data Modem
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
-
Medium 6.7
Buffer Copy Without Checking Size of Input in VR Service
Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).
-
High 7.4
Improper Input Validation in Automotive
Weak configuration in Automotive while VM is processing a listener request from TEE.
-
High 8.7
Improper Access Control in Kernel
Improper Access to the VM resource manager can lead to Memory Corruption.
-
High 8.1
Out of Bounds read in SNPE Library
A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source).
-
High 8.4
Use After Free in Graphics
Memory corruption in Graphics while processing user packets for command submission.
-
High 7.5
Improper Authorization in WLAN Host
Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.
-
High 7.5
Improper Authorization in WLAN Host
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN firmware while parsing MLO (multi-link operation).
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
-
High 7.5
Improper Authorization in WLAN Host
Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA).
-
Critical 9.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Firmware
Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE.
-
High 7.8
Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while parsing WMI command parameters.
-
High 7.8
Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while handling command through WMI interfaces.
-
High 7.8
Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
-
High 7.8
Use of Out-of-range Pointer Offset in WLAN HAL
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
-
Critical 9.8
Buffer Copy Without Checking Size of Input in QESL
Memory corruption while handling payloads from remote ESL.
-
High 7.8
Buffer Copy Without Checking Size of Input in WLAN HAL
Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.
-
High 7.8
Buffer Copy Without Checking Size of Input in WLAN HAL
Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.
-
High 7.8
Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN handler while processing PhyID in Tx status handler.
-
High 7.8
Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.
-
High 7.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL
Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.
-
High 7.8
Improper Validation of Array Index in WLAN HAL
Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.
-
High 7.8
Buffer Copy without Checking the Size of Input in WLAN Firmware
Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.
-
High 8.4
Stack-based Buffer Overflow in WIN Product
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.
-
Medium 6.5
Buffer Over-read in Bluetooth HOST
Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.
-
High 7.8
Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform
Memory Corruption in Core Platform while printing the response buffer in log.
-
Medium 6.7
Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display
Memory Corruption while accessing metadata in Display.
-
High 7.8
Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform
Memory corruption in Core Platform while printing the response buffer in log.
-
Medium 6.7
Integer Overflow or Wraparound in Display
Memory corruption in Audio while validating and mapping metadata.
-
Medium 6.7
Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio
Memory corruption in Audio during playback session with audio effects enabled.
-
High 7.5
Reachable Assertion in Modem
Transient DOS in Modem while processing RRC reconfiguration message.
-
High 7.5
Reachable Assertion in Modem
Transient DOS in Modem while processing invalid System Information Block 1.
-
Medium 6.7
Integer Overflow to Buffer Overflow in RIL
Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.
-
Medium 6.7
Improper Validation of Array Index in Linux
Memory Corruption due to improper validation of array index in Linux while updating adn record.
-
High 8.4
Improper Validation of Array Index in Audio
Memory corruption due to improper validation of array index in Audio.
-
Medium 6.7
Buffer over-read in Modem
Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.
-
High 8.4
Improper validation of array index in WLAN HAL
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
-
Medium 5.1
Buffer over-read in Automotive multimedia
Information disclosure in Automotive multimedia due to buffer over-read.