Skip to content
OpenAdvisories

Product · Qualcomm

Snapdragon

997 known vulnerabilities.

997 results · Feed

  • High 7.8

    Out-of-bounds Write in Audio

    Memory corruption while processing MFC channel configuration during music playback.

  • Medium 6.7

    Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS

    Information disclosure while exposing internal TA-to-TA communication APIs to HLOS

  • High 7.8

    Use After Free in Video

    Memory corruption during video playback when video session open fails with time out error.

  • Medium 6.5

    Reachable Assertion in BT Controller

    Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan.

  • High 7.8

    Buffer Over-read in DSP Service

    Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.

  • High 7.8

    Out-of-bounds Write in WinBlast Driver

    Memory corruption while accessing a buffer during IOCTL processing.

  • High 7.8

    Integer Overflow or Wraparound in Automotive Platform

    Memory corruption while processing large input data from a remote source via a communication interface.

  • Medium 6.1

    Buffer Over-read in Automotive Software platform based on QNX

    Information disclosure while processing message from client with invalid payload.

  • High 7.8

    Improper Validation of Array Index in Automotive Software platform based on QNX

    Memory corruption when triggering a subsystem crash with an out-of-range identifier.

  • High 7.8

    Stack-based Buffer Overflow in Automotive Software platform based on QNX

    Memory corruption while processing client message during device management.

  • High 8.0

    Missing Authentication for Critical Function in SMSS

    Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.

  • High 7.8

    Exposed Dangerous Method or Function in Automotive Software platform based on QNX

    Memory corruption while processing request sent from GVM.

  • High 7.8

    Improper Validation of Array Index in Audio

    Memory corruption while processing audio streaming operations.

  • High 8.8

    Incorrect Calculation of Buffer Size in SCE-Mink

    Memory corruption while processing a GP command response.

  • High 7.8

    Out-of-bounds Write in Windows Compute

    Memory corruption while performing encryption and decryption commands.

  • Medium 6.1

    Buffer Over-read in Core Services

    Information disclosure while registering commands from clients with diag through diagHal.

  • High 7.8

    Out-of-bounds Write in DSP Service

    Memory corruption while invoking remote procedure IOCTL calls.

  • High 7.8

    Use After Free in DSP Service

    Memory corruption while allocating buffers in DSP service.

  • High 7.8

    Integer Overflow or Wraparound in DSP Service

    Memory corruption while processing user buffers.

  • High 7.8

    Use of Out-of-range Pointer Offset in DSP Service

    Memory corruption while processing an escape call.

  • High 7.8

    Stack-based Buffer Overflow in Automotive Software platform based on QNX

    Memory corruption while processing control commands in the virtual memory management interface.

  • High 7.1

    Use After Free in BT Controller

    Transient DOS may occur when multi-profile concurrency arises with QHS enabled.

  • High 7.8

    Buffer Copy Without Checking Size of Input in Camera

    memory corruption while processing an image encoding completion event.

  • High 7.8

    Out-of-bounds Write in DSP Service

    Memory corruption while processing IOCTL call to get the mapping.

  • High 7.8

    Untrusted Pointer Dereference in DSP Service

    Memory corruption while processing escape commands from userspace.

  • High 8.8

    Untrusted Pointer Dereference in TZ Firmware

    Memory corruption while performing SCM call with malformed inputs.

  • High 8.8

    Use of Out-of-range Pointer Offset in TZ Firmware

    Memory corruption while performing SCM call.

  • High 7.8

    Out-of-bounds Write in Display

    Memory corruption while processing a malformed license file during reboot.

  • High 7.8

    Incorrect Calculation of Buffer Size in HLOS

    Memory corruption during PlayReady APP usecase while processing TA commands.

  • Medium 5.5

    Buffer Over-read in Camera

    Transient DOS while processing IOCTL call for image encoding.

  • High 7.8

    Untrusted Pointer Dereference in Camera

    Memory corruption while processing camera platform driver IOCTL calls.

  • Medium 6.1

    Buffer Over-read in Video

    Information disclosure while processing batch command execution in Video driver.

  • Medium 5.5

    Buffer Over-read in Video

    Transient DOS while processing video packets received from video firmware.

  • Medium 6.5

    Improper Input Validation in TZ Firmware

    Information disclosure may occur while processing the hypervisor log.

  • Medium 6.6

    Detection of Error Condition Without Action in Computer Vision

    Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.

  • High 7.8

    Release of Invalid Pointer or Reference in Android Core

    Memory corruption while handling invalid inputs in application info setup.

  • High 7.5

    Buffer Over-read in WLAN HAL

    Transient DOS while processing power control requests with invalid antenna or stream values.

  • High 7.8

    Use After Free in Camera

    Memory corruption while encoding the image data.

  • High 7.5

    Buffer Over-read in WLAN HAL

    Transient DOS while handling command data during power control processing.

  • High 7.5

    Buffer Over-read in BT Controller

    Transient DOS while parsing the EPTM test control message to get the test pattern.