Vendor
Qualcomm
3,001 known vulnerabilities.
Products
3,001 results · Feed
-
High 7.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.
-
High 8.4
Integer Overflow in Multimedia Framework
Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.
-
High 8.4
Integer overflow or wraparound in WLAN
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
-
High 8.2
Buffer over-read in Bluetooth Host.
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.
-
Medium 6.8
Improper validation of array index in User Identity Module
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.
-
Medium 6.7
Incorrect type conversion or cast in Audio
Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM.
-
Medium 6.7
Use after free in Modem
Memory corruption due to use after free in Modem while modem initialization.
-
Medium 6.8
Buffer overread in Linux Sensors
Information disclosure due to buffer overread in Linux sensors
-
Medium 5.9
Integer overflow to buffer overflow in Modem
Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.
-
High 8.2
Buffer over-read in Modem
Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.
-
High 7.5
NULL pointer dereference in Modem
Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap request message.
-
High 8.2
Buffer over-read in Modem
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
-
Medium 6.8
Improper validation of array index in Modem
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
-
Critical 9.3
Buffer copy without checking the size of input in Core
Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.
-
High 8.2
Buffer over-read in Modem
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
-
High 8.4
Integer overflow to buffer overflow in Automotive Multimedia
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.
-
High 7.5
Time-of-check time-of-use race condition in Modem
Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.
-
Critical 9.3
Integer overflow or wraparound in Core
Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.
-
Critical 9.8
Buffer copy without checking the size of input in Modem
Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.
-
High 8.2
Buffer over-read in Modem
Information disclosure due to buffer over-read in modem while reading configuration parameters.
-
Critical 9.3
Double free in Core
Memory corruption due to double free in core while initializing the encryption key.
-
High 8.2
Buffer over-read in Modem
Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.
-
High 7.5
Null pointer dereference in Modem
Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.
-
High 8.2
Buffer over-read in Modem
Information disclosure due to buffer over-read while parsing DNS response packets in Modem.
-
Critical 9.8
Improper Input Validation in MODEM
memory corruption in modem due to improper check while calculating size of serialized CoAP message
-
High 8.2
Buffer Over-read in MODEM
Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message
-
Critical 9.8
Always Incorrect Control Flow Implementation in MODEM
Memory corruption in modem due to improper input validation while handling the incoming CoAP message
-
Critical 9.8
Buffer Copy Without Checking Size of Input in MODEM
Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface
-
High 7.5
Null Point Dereference in MODEM
Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call
-
High 7.5
Use of Uninitialized Variable in MODEM
Information disclosure in modem due to missing NULL check while reading packets received from local network
-
High 7.5
Incorrect Calculation of Buffer Size in MODEM
Information disclosure in modem due to buffer over-read while processing packets from DNS server
-
High 8.2
Buffer Over-read in MODEM
Information disclosure in modem due to improper check of IP type while processing DNS server query
-
High 8.2
Buffer Over-read in MODEM
Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet
-
Critical 9.8
Buffer Copy Without Checking Size of Input in MODEM
Memory correction in modem due to buffer overwrite during coap connection
-
High 8.4
Buffer copy without checking the size of input in Linux Kernel
Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.
-
High 8.4
Improper Validation of Array Index in Automotive Android OS
Memory corruption in Automotive Android OS due to improper validation of array index.
-
High 7.3
Improper Validation of Array Index in Bluetooth HOST
Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.
-
High 7.5
Buffer Over-read in WLAN
Transient DOS due to buffer over-read in WLAN while sending a packet to device.
-
High 8.4
Incorrect type conversion in WLAN
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
-
High 8.4
Integer overflow to buffer overflow in WLAN
Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.