Qualcomm, Inc.
Page 23 of 30 — Qualcomm, Inc. CVEs from a corpus of 2956, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-11818 | High | 7.0 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, LUT configuration is passed down to driver from use… |
CVE-2018-11302 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input received from userspace befo… |
CVE-2018-11301 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on buffer length while processing deb… |
CVE-2018-11299 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when WLAN FW has not filled the vdev id correctly i… |
CVE-2018-11298 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing SET_PASSPOINT_LIST vendor command… |
CVE-2018-11297 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, a buffer over-read can occur In the WMA NDP event h… |
CVE-2018-11296 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a message from firmware in WLAN ha… |
CVE-2018-11295 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WMA handler carries a fixed event data from the fir… |
CVE-2018-11294 | High | 8.0 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WLAN handler indication from the firmware gets the… |
CVE-2018-11293 | Medium | 5.7 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in wma_ndp_confirm_event_handler and wma_ndp_indica… |
CVE-2018-11281 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while calling IPA_IOC_MDFY_RT_RULE IPA IOCTL, heade… |
CVE-2018-11280 | Medium | 5.5 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing user-space there is no size valida… |
CVE-2018-11278 | High | 7.1 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Venus HW searches for start code when decoding inpu… |
CVE-2018-11276 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, double free of memory allocation is possible in Ker… |
CVE-2018-11275 | Medium | 5.5 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, when flashing image using FastbootLib if size is no… |
CVE-2018-11274 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, buffer overflow may occur when payload size is extr… |
CVE-2018-11270 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, memory allocated with devm_kzalloc is automatically… |
CVE-2018-11265 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, possible buffer overflow while incrementing the log… |
CVE-2017-15844 | Medium | 5.5 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing the function for writing device va… |
CVE-2017-15828 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while accessing the keystore in LK, an integer over… |
CVE-2017-15825 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing a gpt update, an out of bounds mem… |
CVE-2017-15818 | High | 7.8 | 2018-09-18 | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while loading a user application in qseecom, an int… |
CVE-2018-11263 | High | 8.8 | 2018-09-06 | In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio_id is received from the FW and is used to acc… |
CVE-2018-11262 | High | 7.8 | 2018-09-04 | In Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel while trying to find out total number of part… |
CVE-2017-18155 | High | 7.8 | 2018-07-12 | While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, an uninit… |
CVE-2018-5907 | High | 7.8 | 2018-07-06 | Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android re… |
CVE-2018-5886 | High | 7.5 | 2018-07-06 | A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD And… |
CVE-2018-5873 | High | 7.0 | 2018-07-06 | An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After F… |
CVE-2018-5872 | High | 8.0 | 2018-07-06 | While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) befo… |
CVE-2018-5865 | Medium | 5.5 | 2018-07-06 | While processing a debug log event from firmware in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) bef… |
CVE-2018-5864 | Medium | 5.5 | 2018-07-06 | While processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security… |
CVE-2018-5862 | High | 7.8 | 2018-07-06 | In __wlan_hdd_cfg80211_vendor_scan() in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security… |
CVE-2018-5859 | High | 7.0 | 2018-07-06 | Due to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) befor… |
CVE-2018-5858 | High | 7.8 | 2018-07-06 | In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 201… |
CVE-2018-5855 | Critical | 9.8 | 2018-07-06 | While padding or shrinking a nested wmi packet in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) befor… |
CVE-2018-5853 | High | 7.0 | 2018-07-06 | A race condition exists in a driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security… |
CVE-2018-3587 | High | 7.8 | 2018-07-06 | In a firmware memory dump feature in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), a Use After Free… |
CVE-2018-3586 | Critical | 9.8 | 2018-07-06 | An integer overflow to buffer overflow vulnerability exists in the ADSPRPC heap manager in all Android releases(Android for MSM, Firefox OS for MSM, QRD Androi… |
CVE-2018-3570 | High | 7.8 | 2018-07-06 | In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list_for_each macro was no… |
CVE-2018-11304 | High | 7.8 | 2018-07-06 | Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android re… |
CVE-2017-15851 | High | 7.8 | 2018-07-06 | Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera crash in all Android releases(Android for… |
CVE-2018-5899 | High | 7.8 | 2018-07-06 | In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, whenever TDLS co… |
CVE-2018-5898 | High | 7.8 | 2018-07-06 | Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyond certain limit in Android releases fro… |
CVE-2018-5897 | High | 7.5 | 2018-07-06 | While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly in Android releases f… |
CVE-2018-5896 | High | 7.1 | 2018-07-06 | In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, kernel panic may… |
CVE-2018-5895 | Medium | 5.5 | 2018-07-06 | Buffer over-read may happen in wma_process_utf_event() due to improper buffer length validation before writing into param_buf->num_wow_packet_buffer in Android… |
CVE-2018-5894 | Medium | 6.5 | 2018-07-06 | Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds ac… |
CVE-2018-5893 | High | 7.8 | 2018-07-06 | While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM… |
CVE-2018-5892 | High | 7.5 | 2018-07-06 | The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5891 | High | 8.4 | 2018-07-06 | While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Consequently, the DPL threa… |
CVE-2018-5890 | High | 7.8 | 2018-07-06 | If the fdt_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases from CAF using the li… |
CVE-2018-5889 | High | 7.8 | 2018-07-06 | While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MS… |
CVE-2018-5888 | High | 7.8 | 2018-07-06 | While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, Q… |
CVE-2018-5887 | High | 7.8 | 2018-07-06 | While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel (Android for MSM… |
CVE-2018-5885 | Critical | 9.8 | 2018-07-06 | While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5884 | High | 8.4 | 2018-07-06 | Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm… |
CVE-2018-5882 | Critical | 9.8 | 2018-07-06 | While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5878 | Critical | 9.8 | 2018-07-06 | While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon We… |
CVE-2018-5876 | High | 8.8 | 2018-07-06 | While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5875 | High | 8.8 | 2018-07-06 | While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5874 | High | 8.8 | 2018-07-06 | While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5838 | High | 7.8 | 2018-07-06 | Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occ… |
CVE-2018-5836 | Medium | 5.5 | 2018-07-06 | In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch lev… |
CVE-2018-5835 | High | 7.8 | 2018-07-06 | If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copying keyRSC in Android releases from CAF u… |
CVE-2018-5834 | High | 7.8 | 2018-07-06 | In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS… |
CVE-2018-5832 | High | 7.0 | 2018-07-06 | Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android)… |
CVE-2018-5831 | High | 7.8 | 2018-07-06 | In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0… |
CVE-2018-5830 | High | 7.8 | 2018-07-06 | While processing the HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND message, a buffer overflow can potentially occur in Android releases from CAF using the linux kernel (A… |
CVE-2018-5829 | High | 7.5 | 2018-07-06 | In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security… |
CVE-2018-3597 | High | 7.8 | 2018-07-06 | In the ADSP RPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-… |
CVE-2018-3577 | High | 7.5 | 2018-07-06 | While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow can occur in Android releases from CAF… |
CVE-2018-3569 | High | 7.8 | 2018-07-06 | A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the linux kernel (Android for MSM, Firefox O… |
CVE-2018-3564 | High | 7.8 | 2018-07-06 | In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-0… |
CVE-2018-11259 | High | 7.7 | 2018-07-06 | Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS… |
CVE-2018-11258 | High | 7.8 | 2018-07-06 | In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM890… |
CVE-2018-11257 | High | 7.8 | 2018-07-06 | Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 2… |
CVE-2017-18159 | High | 7.8 | 2018-07-06 | In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, while processing… |
CVE-2017-18158 | High | 7.8 | 2018-07-06 | Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Androi… |
CVE-2017-15856 | High | 7.0 | 2018-07-06 | Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in Android releases from CAF using the li… |
CVE-2017-15824 | Medium | 5.5 | 2018-07-06 | In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, the function Upd… |
CVE-2017-14893 | Medium | 5.5 | 2018-07-06 | While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header size or is smaller than the image head… |
CVE-2017-14872 | Medium | 5.5 | 2018-07-06 | While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum range of 32 in Android releases from CAF… |
CVE-2017-11088 | Critical | 9.8 | 2018-07-06 | Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability exists in versions MSM8909W, MSM8996AU… |
CVE-2018-5863 | High | 7.8 | 2018-06-15 | If userspace provides a too-large WPA RSN IE length in wlan_hdd_cfg80211_set_ie(), a buffer overflow occurs in all Android releases(Android for MSM, Firefox OS… |
CVE-2018-5860 | Medium | 5.5 | 2018-06-15 | In the MDSS driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, a data structure may be used with… |
CVE-2017-18169 | Medium | 5.5 | 2018-06-15 | User process can perform the kernel DOS in ashmem when doing cache maintenance operation in all Android releases(Android for MSM, Firefox OS for MSM, QRD Andro… |
CVE-2018-5857 | High | 7.8 | 2018-06-15 | In the WCD CPE codec, a Use After Free condition can occur in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux k… |
CVE-2018-5854 | High | 7.8 | 2018-06-15 | A stack-based buffer overflow can occur in fastboot from all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel. |
CVE-2018-5851 | High | 7.8 | 2018-06-12 | Buffer over flow can occur while processing a HTT_T2H_MSG_TYPE_TX_COMPL_IND message with an out-of-range num_msdus value in all Android releases from CAF (Andr… |
CVE-2018-5849 | High | 7.0 | 2018-06-12 | Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, when… |
CVE-2018-5848 | High | 7.8 | 2018-06-12 | In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ie_len' argumen… |
CVE-2018-5847 | High | 7.8 | 2018-06-12 | Early or late retirement of rotation requests can result in a Use After Free condition in all Android releases from CAF (Android for MSM, Firefox OS for MSM, Q… |
CVE-2018-5844 | High | 7.8 | 2018-06-12 | In the video driver function set_output_buffers(), binfo can be accessed after being freed in a failure scenario in all Android releases from CAF (Android for… |
CVE-2018-5843 | High | 7.8 | 2018-06-12 | In the function wma_pdev_div_info_evt_handler() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, the… |
CVE-2018-5842 | High | 7.8 | 2018-06-12 | An arbitrary address write can occur if a compromised WLAN firmware sends incorrect data to WLAN driver in all Android releases from CAF (Android for MSM, Fire… |
CVE-2018-3582 | High | 7.8 | 2018-06-12 | Buffer overflow can occur due to improper input validation in multiple WMA event handler functions in all Android releases from CAF (Android for MSM, Firefox O… |
CVE-2018-3581 | High | 7.8 | 2018-06-12 | In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a buffer overwrite can occur if… |
CVE-2018-3579 | Medium | 5.5 | 2018-06-12 | In the WLAN driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, event->num_entries_in_page is a… |
CVE-2018-3576 | High | 7.8 | 2018-06-12 | improper validation of array index in WiFi driver function sapInterferenceRssiCount() leads to array out-of-bounds access in all Android releases from CAF (And… |
CVE-2018-3572 | High | 7.8 | 2018-06-12 | While processing a DSP buffer in an audio driver's event handler, an index of a buffer is not checked before accessing the buffer in all Android releases from… |