Qualcomm, Inc.
Page 19 of 30 — Qualcomm, Inc. CVEs from a corpus of 2956, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-2338 | High | 7.1 | 2019-12-12 | Crafted image that has a valid signature from a non-QC entity can be loaded which can read/write memory that belongs to the secure world in Snapdragon Auto, Sn… |
CVE-2019-2337 | High | 7.5 | 2019-12-12 | While Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more than message length which may cause device to shutdown in Snapdr… |
CVE-2019-2321 | High | 7.8 | 2019-12-12 | Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2019-2320 | Critical | 9.8 | 2019-12-12 | Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… |
CVE-2019-2319 | High | 7.8 | 2019-12-12 | HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrago… |
CVE-2019-2310 | High | 7.5 | 2019-12-12 | Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body in Snapdragon Auto… |
CVE-2019-2288 | High | 7.8 | 2019-12-12 | Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2019-10618 | Medium | 5.5 | 2019-12-12 | Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QCA6390 |
CVE-2019-10592 | High | 7.8 | 2019-12-12 | Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check on the maximum mode count in Snapdrago… |
CVE-2019-10571 | High | 7.8 | 2019-12-12 | Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2019-10559 | Critical | 9.8 | 2019-12-12 | Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Snapdragon Auto, Snap… |
CVE-2019-10555 | High | 7.8 | 2019-12-12 | Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2019-10545 | Medium | 5.5 | 2019-12-12 | Null pointer dereference issue in kernel due to missing check related to LLC support in GPU in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, S… |
CVE-2019-10530 | High | 7.8 | 2019-12-12 | Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IO… |
CVE-2019-10520 | Medium | 5.5 | 2019-12-12 | An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory i… |
CVE-2019-10511 | Critical | 9.8 | 2019-12-12 | Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial… |
CVE-2019-10494 | High | 8.1 | 2019-12-12 | Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Cons… |
CVE-2019-10493 | Critical | 9.8 | 2019-12-12 | Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2019-10485 | High | 7.5 | 2019-12-12 | Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industri… |
CVE-2019-10484 | Medium | 5.5 | 2019-12-12 | Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previous command teardwon… |
CVE-2019-2339 | High | 7.8 | 2019-11-21 | Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2019-2336 | Medium | 5.5 | 2019-11-21 | Subsequent use of the CBO listener may result in further memory corruption due to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2019-2335 | High | 7.5 | 2019-11-21 | While processing Attach Reject message, Valid exit condition is not met resulting into an infinite loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2019-2329 | High | 7.8 | 2019-11-21 | Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application. in Snapdragon Compute, Snapdragon Cons… |
CVE-2019-2318 | Medium | 5.5 | 2019-11-21 | Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consume… |
CVE-2019-2315 | High | 7.8 | 2019-11-21 | While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. in Snapdragon Auto, Sn… |
CVE-2019-2303 | Critical | 9.8 | 2019-11-21 | SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn… |
CVE-2019-2297 | High | 7.8 | 2019-11-21 | Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdrag… |
CVE-2019-2295 | Medium | 5.5 | 2019-11-21 | Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2019-2289 | Critical | 9.8 | 2019-11-21 | Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in Snapdragon Auto, Snapdragon Compute, Snap… |
CVE-2019-2271 | Critical | 9.8 | 2019-11-21 | Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-2268 | Critical | 9.8 | 2019-11-21 | Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon… |
CVE-2019-2266 | High | 7.8 | 2019-11-21 | Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrago… |
CVE-2019-2251 | High | 7.8 | 2019-11-21 | If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon… |
CVE-2019-10627 | Critical | 9.8 | 2019-11-21 | Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect bu… |
CVE-2019-10617 | High | 7.8 | 2019-11-21 | Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the registry in QCA6174_9377… |
CVE-2019-10566 | High | 7.8 | 2019-11-21 | Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdragon Auto, Snapdragon… |
CVE-2019-10563 | High | 7.8 | 2019-11-21 | Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon Auto, Snapdragon Con… |
CVE-2019-10535 | Medium | 5.5 | 2019-11-21 | Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto… |
CVE-2019-10503 | High | 7.8 | 2019-11-21 | Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Sna… |
CVE-2019-10490 | Medium | 5.5 | 2019-11-21 | Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2019-10486 | High | 7.0 | 2019-11-21 | Race condition due to the lack of resource lock which will be concurrently modified in the memcpy statement leads to out of bound access in Snapdragon Auto, Sn… |
CVE-2018-13916 | High | 7.8 | 2019-11-21 | Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve thread data. in Snapdragon Auto, Snapdra… |
CVE-2019-2332 | Critical | 9.8 | 2019-11-06 | Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn… |
CVE-2019-2331 | Critical | 9.8 | 2019-11-06 | Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snap… |
CVE-2019-2325 | Critical | 9.8 | 2019-11-06 | Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2019-2324 | Critical | 9.8 | 2019-11-06 | When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto… |
CVE-2019-2323 | Critical | 9.8 | 2019-11-06 | Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO… |
CVE-2019-2302 | Critical | 9.8 | 2019-11-06 | While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. in Snapdragon Auto… |
CVE-2019-2285 | Critical | 9.8 | 2019-11-06 | Out of bound write issue is observed while giving information about properties that have been set so far for playing video in Snapdragon Auto, Snapdragon Compu… |
CVE-2019-2283 | Critical | 9.8 | 2019-11-06 | Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon Compu… |
CVE-2019-2275 | Medium | 5.5 | 2019-11-06 | While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoked(Depends… |
CVE-2019-2258 | Critical | 9.8 | 2019-11-06 | Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… |
CVE-2019-2249 | Critical | 9.8 | 2019-11-06 | Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… |
CVE-2019-2246 | High | 7.8 | 2019-11-06 | Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-10565 | Critical | 9.8 | 2019-11-06 | Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2019-10542 | Critical | 9.8 | 2019-11-06 | Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in Snapdragon Auto, Snap… |
CVE-2019-10541 | Critical | 9.8 | 2019-11-06 | Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2019-10534 | Critical | 9.8 | 2019-11-06 | Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consu… |
CVE-2019-10533 | Critical | 9.8 | 2019-11-06 | Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… |
CVE-2019-10531 | Critical | 9.8 | 2019-11-06 | Incorrect reading of system image resulting in buffer overflow when size of system image is increased in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearabl… |
CVE-2019-10529 | High | 8.1 | 2019-11-06 | Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapd… |
CVE-2019-10528 | Critical | 9.8 | 2019-11-06 | Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in Snapdragon Auto, Snapdragon Connectivit… |
CVE-2019-10524 | High | 7.8 | 2019-11-06 | Lack of check for a negative value returned for get_clk is wrongly interpreted as valid pointer and lead to use after free in clk driver in Snapdragon Auto, Sn… |
CVE-2019-10522 | Critical | 9.8 | 2019-11-06 | While playing the clip which is nonstandard buffer overflow can occur while parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2019-10515 | Medium | 5.5 | 2019-11-06 | DCI client which might be preemptively freed up might be accessed for transferring packets leading to kernel error in Snapdragon Auto, Snapdragon Consumer IOT… |
CVE-2019-10512 | High | 7.8 | 2019-11-06 | Payload size is not checked before using it as array index in audio in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT… |
CVE-2019-10505 | Critical | 9.8 | 2019-11-06 | Out of bound access while processing a non-standard IE measurement request with length crossing past the size of frame in Snapdragon Auto, Snapdragon Consumer… |
CVE-2019-10504 | Medium | 6.5 | 2019-11-06 | Firmware not able to send EXT scan response to host within 1 sec due to resource consumption issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Indu… |
CVE-2019-10502 | High | 7.8 | 2019-11-06 | Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industria… |
CVE-2019-10496 | High | 7.8 | 2019-11-06 | Lack of checking a variable received from driver and populating in Firmware data structure leads to buffer overflow in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2019-10495 | High | 7.3 | 2019-11-06 | Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna… |
CVE-2019-10491 | High | 7.8 | 2019-11-06 | ADSP can be compromised since it`s a general-purpose CPU processing untrusted data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2019-10488 | High | 7.5 | 2019-11-06 | Null pointer dereference can occur while parsing invalid chunks while playing the nonstandard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer… |
CVE-2019-2341 | High | 7.8 | 2019-09-30 | Buffer overflow when the audio buffer size provided by user is larger than the maximum allowable audio buffer size. in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2019-2333 | High | 7.8 | 2019-09-30 | Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2019-2294 | Critical | 9.8 | 2019-09-30 | Usage of hard-coded magic number for calculating heap guard bytes can allow users to corrupt heap blocks without heap algorithm knowledge in Snapdragon Auto, S… |
CVE-2019-2284 | High | 7.0 | 2019-09-30 | Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indust… |
CVE-2019-2252 | Critical | 9.8 | 2019-09-30 | Classic buffer overflow vulnerability while playing the specific video whose Decode picture buffer size is more than 16 in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-10540 | Critical | 9.8 | 2019-09-30 | Buffer overflow in WLAN NAN function due to lack of check of count value received in NAN availability attribute in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2019-10539 | Critical | 9.8 | 2019-09-30 | Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2019-10538 | Critical | 9.8 | 2019-09-30 | Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snap… |
CVE-2019-10510 | High | 8.2 | 2019-09-30 | BT process died and BT toggled due to null pointer dereference when invalid vendor pass through command sent from remote in Snapdragon Auto, Snapdragon Consume… |
CVE-2019-10509 | Critical | 9.8 | 2019-09-30 | Device record of the pairing device used after free during ACL disconnection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum… |
CVE-2019-10508 | High | 7.8 | 2019-09-30 | Lack of input validation for data received from user space can lead to OOB access in WLAN in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Sna… |
CVE-2019-10507 | High | 7.8 | 2019-09-30 | Lack of check of extscan change results received from firmware can lead to an out of buffer read in Snapdragon Auto, Snapdragon Consumer Electronics Connectivi… |
CVE-2019-10506 | High | 7.8 | 2019-09-30 | While processing QCA_NL80211_VENDOR_SUBCMD_AVOID_FREQUENCY vendor command, driver does not validate the data obtained from the user space which could be invali… |
CVE-2019-10501 | High | 7.8 | 2019-09-30 | Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snap… |
CVE-2019-10499 | High | 7.8 | 2019-09-30 | Improper validation of read and write index of tx and rx fifo`s before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Sna… |
CVE-2019-10498 | High | 7.8 | 2019-09-30 | Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdra… |
CVE-2019-10497 | High | 7.8 | 2019-09-30 | Use after free issue occurs If another instance of open for voice_svc node has been called from application without closing the previous one. in Snapdragon Aut… |
CVE-2019-10492 | High | 7.8 | 2019-09-30 | Boot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables in MDM9607, MSM8909W, Qualcomm 215, SD 210/SD 212/SD 205, SD… |
CVE-2019-10489 | High | 7.5 | 2019-09-30 | Possible null-pointer dereference can occur while parsing avi clip during copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indu… |
CVE-2019-2346 | High | 7.8 | 2019-07-25 | Firmware is getting into loop of overwriting memory when scan command is given from host because of improper validation. in Snapdragon Compute, Snapdragon Cons… |
CVE-2019-2345 | High | 7.0 | 2019-07-25 | Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd… |
CVE-2019-2343 | Medium | 5.5 | 2019-07-25 | Out of bound read and information disclosure in firmware due to insufficient checking of an embedded structure that can be sent from a kernel driver in Snapdra… |
CVE-2019-2334 | High | 7.5 | 2019-07-25 | Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrag… |
CVE-2019-2330 | Medium | 5.5 | 2019-07-25 | improper input validation in allocation request for secure allocations can lead to page fault. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… |
CVE-2019-2328 | High | 7.8 | 2019-07-25 | Possible buffer overflow when number of channels passed is more than size of channel mapping array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer… |
CVE-2019-2327 | Critical | 9.8 | 2019-07-25 | Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon In… |