Qualcomm, Inc.
Page 29 of 30 — Qualcomm, Inc. CVEs from a corpus of 2956, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-9047 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GNSS when performing a scan after bootup. |
CVE-2015-9046 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an impro… |
CVE-2015-9045 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a buffer can be overflown while taking po… |
CVE-2015-9044 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an impro… |
CVE-2015-9043 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a timer. |
CVE-2015-9042 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when processing a QMI message. |
CVE-2015-9041 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when performing WCDMA radio tuning. |
CVE-2015-9040 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in a GERAN API. |
CVE-2015-9039 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in eMBMS where an assertion can be reached by a sequence… |
CVE-2015-9038 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end. |
CVE-2015-9037 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read may occur in the processing of a downlink 3G NAS message. |
CVE-2015-9036 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an incorrect length is used to clear a memory buffer resulting in adjacent memo… |
CVE-2015-9035 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a memory buffer fails to be freed after it is no longer needed potentially resu… |
CVE-2015-9034 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a string can fail to be null-terminated in SIP leading to a buffer overflow. |
CVE-2015-8596 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths is missing in malware protection. |
CVE-2015-8595 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in digital television/digital radio DRM. |
CVE-2015-8594 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in RFA-1x. |
CVE-2015-8593 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing. |
CVE-2015-8592 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not validated prior to being dereferenced potentially resulting in… |
CVE-2015-0576 | High | 7.0 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in HSDPA. |
CVE-2015-0575 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, insecure ciphersuites were included in the default configuration. |
CVE-2015-0574 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the validation of filesystem access was insufficient. |
CVE-2014-9981 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an overflow check in the USB interface was insufficient during boot. |
CVE-2014-9980 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to unauthorized acces… |
CVE-2014-9979 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to t… |
CVE-2014-9978 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service. |
CVE-2014-9977 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM. |
CVE-2014-9976 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing. |
CVE-2014-9975 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk Encryption. |
CVE-2014-9974 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster. |
CVE-2014-9973 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRM routine. |
CVE-2014-9972 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer dereference during an ou… |
CVE-2014-9971 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert to not be executed… |
CVE-2014-9969 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client may use an insecure cryptographic algorithm. |
CVE-2014-9968 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the UIMDIAG interface. |
CVE-2014-9411 | Critical | 9.8 | 2017-08-18 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in rollback p… |
CVE-2017-8248 | Critical | 9.8 | 2017-08-16 | A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and late… |
CVE-2017-8243 | High | 7.8 | 2017-08-16 | A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when processing a firmware image file. |
CVE-2017-6421 | High | 8.8 | 2017-08-16 | In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user an… |
CVE-2016-5867 | High | 7.0 | 2017-08-16 | In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack ov… |
CVE-2016-5864 | High | 7.8 | 2017-08-16 | In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they… |
CVE-2016-5863 | High | 7.8 | 2017-08-16 | In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-… |
CVE-2016-5862 | High | 7.0 | 2017-08-16 | When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type casting is… |
CVE-2016-5861 | High | 8.8 | 2017-08-16 | In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace is used to calculate… |
CVE-2016-5860 | High | 7.0 | 2017-08-16 | In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an inte… |
CVE-2016-5859 | High | 7.0 | 2017-08-16 | In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integ… |
CVE-2016-5858 | Medium | 4.7 | 2017-08-16 | In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a user supplies a value too large, then an out-of-bou… |
CVE-2016-5855 | Medium | 4.7 | 2017-08-16 | In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a user-supplied buffer is casted to a structure without checking… |
CVE-2016-5854 | Medium | 4.7 | 2017-08-16 | In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, kernel heap memory can be exposed to userspace. |
CVE-2016-5853 | High | 7.0 | 2017-08-16 | In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the cor… |
CVE-2016-5347 | Medium | 4.7 | 2017-08-16 | In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver. |
CVE-2017-8273 | High | 7.8 | 2017-08-11 | In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command when verified boot feature is disabled, w… |
CVE-2017-8271 | High | 7.8 | 2017-08-11 | Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernel by an unsanitize… |
CVE-2017-8269 | Medium | 5.5 | 2017-08-11 | Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux kernel can lead to… |
CVE-2017-8264 | High | 7.8 | 2017-08-11 | A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the Linux kernel. |
CVE-2017-8259 | High | 7.8 | 2017-08-11 | In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for dete… |
CVE-2017-8258 | Medium | 5.5 | 2017-08-11 | An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a camera driver. |
CVE-2017-8242 | Medium | 5.9 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory write. |
CVE-2017-8241 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due to an incorrect message length. |
CVE-2017-8240 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability. |
CVE-2017-8239 | Medium | 5.5 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentially leading to expo… |
CVE-2017-8238 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function. |
CVE-2017-8237 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image. |
CVE-2017-8236 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver. |
CVE-2017-8235 | Medium | 5.5 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protected. |
CVE-2017-8234 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function. |
CVE-2017-8233 | High | 7.8 | 2017-06-13 | In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array potentially leading t… |
CVE-2017-7373 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver. |
CVE-2017-7372 | High | 7.0 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to arbitrary… |
CVE-2017-7371 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned off by Bluetooth. |
CVE-2017-7370 | High | 7.0 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition. |
CVE-2017-7369 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack corru… |
CVE-2017-7368 | High | 7.0 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver. |
CVE-2017-7367 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image. |
CVE-2017-7365 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated. |
CVE-2016-10342 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler. |
CVE-2016-10341 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended. |
CVE-2016-10340 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall handler. |
CVE-2016-10339 | High | 7.1 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore. |
CVE-2016-10338 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing. |
CVE-2016-10337 | Medium | 5.5 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed. |
CVE-2016-10336 | Medium | 5.5 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot. |
CVE-2016-10335 | Medium | 5.5 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, libtomcrypt was updated. |
CVE-2016-10334 | Medium | 5.5 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten. |
CVE-2016-10333 | Medium | 5.5 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS. |
CVE-2016-10332 | Medium | 5.5 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications. |
CVE-2015-9033 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer. |
CVE-2015-9032 | Low | 3.3 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications. |
CVE-2015-9031 | Low | 3.3 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP. |
CVE-2015-9030 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication. |
CVE-2015-9029 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem memory. |
CVE-2015-9028 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine. |
CVE-2015-9027 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. |
CVE-2015-9026 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. |
CVE-2015-9025 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application. |
CVE-2015-9024 | Medium | 5.5 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications. |
CVE-2015-9023 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. |
CVE-2015-9022 | High | 7.0 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs. |
CVE-2015-9021 | Medium | 5.5 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled. |
CVE-2015-9020 | High | 7.8 | 2017-06-13 | In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory. |