Qualcomm
Page 19 of 26 — Qualcomm CVEs from a corpus of 2538, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-10583 | High | 7.8 | 2020-01-21 | Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdra… |
CVE-2019-10582 | High | 7.8 | 2020-01-21 | Use after free issue due to using of invalidated iterator to delete an object in sensors HAL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial… |
CVE-2019-10581 | Critical | 9.8 | 2020-01-21 | NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdragon Auto… |
CVE-2019-10579 | Critical | 9.1 | 2020-01-21 | Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CVE-2019-10578 | High | 7.5 | 2020-01-21 | Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons… |
CVE-2019-10561 | Medium | 5.5 | 2020-01-21 | Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and leads to denial of service in Snapdragon A… |
CVE-2019-10558 | High | 7.8 | 2020-01-21 | While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be controlled by DSP in Snapdragon Auto, Snapdra… |
CVE-2019-10548 | High | 7.8 | 2020-01-21 | While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occurs at same time in Snapdragon Auto, Sna… |
CVE-2019-10532 | Critical | 9.8 | 2020-01-21 | Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivity, Snapdra… |
CVE-2019-2304 | High | 7.8 | 2019-12-18 | Integer overflow to buffer overflow due to lack of validation of event arguments received from firmware. in Snapdragon Auto, Snapdragon Consumer Electronics Co… |
CVE-2019-2274 | High | 7.8 | 2019-12-18 | Improper Access Control for RPU write access from secure processor in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdr… |
CVE-2019-2242 | Critical | 9.8 | 2019-12-18 | Device memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Sna… |
CVE-2019-10614 | Critical | 9.8 | 2019-12-18 | Out of boundary access is possible as there is no validation of data accessed against the received size of the packet in case of malicious firmware in Snapdrag… |
CVE-2019-10607 | High | 7.8 | 2019-12-18 | Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdragon Auto, Snapdragon… |
CVE-2019-10605 | High | 7.8 | 2019-12-18 | Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdragon Auto, Snapdragon… |
CVE-2019-10601 | High | 7.8 | 2019-12-18 | Out of bound access can occur while processing firmware event due to lack of validation of WMI message received from firmware in Snapdragon Auto, Snapdragon Co… |
CVE-2019-10600 | High | 7.8 | 2019-12-18 | Use of local variable as argument to netlink CB callback goes out of it scope when callback triggered lead to invalid stack memory in Snapdragon Auto, Snapdrag… |
CVE-2019-10598 | High | 7.8 | 2019-12-18 | Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to ensure that for loop further will not cau… |
CVE-2019-10595 | High | 7.8 | 2019-12-18 | Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdragon Auto, Snapdrag… |
CVE-2019-10584 | High | 7.8 | 2019-12-18 | Possibility of out of bound access in debug queue, if packet size field is corrupted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2019-10572 | Critical | 9.8 | 2019-12-18 | Improper check in video driver while processing data from video firmware can lead to integer overflow and then buffer overflow in Snapdragon Auto, Snapdragon C… |
CVE-2019-10564 | High | 7.8 | 2019-12-18 | Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2019-10557 | Critical | 9.8 | 2019-12-18 | Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length. in Snapdragon Auto, Snapdragon Consumer Electronics Connect… |
CVE-2019-10544 | High | 7.8 | 2019-12-18 | Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handlers in Snapdragon Auto, Snapdragon Comput… |
CVE-2019-10537 | High | 7.8 | 2019-12-18 | Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and eventually will lead… |
CVE-2019-10536 | High | 7.8 | 2019-12-18 | Potential double free scenario if driver receives another DIAG_EVENT_LOG_SUPPORTED event from firmware as the pointer is not set to NULL on first call in Snapd… |
CVE-2019-10525 | Critical | 9.8 | 2019-12-18 | Buffer overflow during SIB read when network configures complete sib list along with first and last segment of other SIB in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-10518 | High | 7.8 | 2019-12-18 | Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr… |
CVE-2019-10517 | High | 7.8 | 2019-12-18 | Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrago… |
CVE-2019-10516 | Critical | 9.8 | 2019-12-18 | Multiple read overflows in MM while decoding service accept,service reject,attach reject and MT detach in Snapdragon Auto, Snapdragon Compute, Snapdragon Consu… |
CVE-2019-10513 | Medium | 5.5 | 2019-12-18 | Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2019-10500 | Critical | 9.8 | 2019-12-18 | While processing MT Secondary PDP request, Buffer overflow will happen due to incorrect calculation of buffer size in Snapdragon Auto, Snapdragon Compute, Snap… |
CVE-2019-10487 | Critical | 9.8 | 2019-12-18 | Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2019-10482 | Medium | 5.9 | 2019-12-18 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channel for SUI corruptio… |
CVE-2019-10481 | High | 7.8 | 2019-12-18 | Out of bound access occurs while handling the WMI FW event due to lack of check of buffer argument which comes directly from the WLAN FW in Snapdragon Auto, Sn… |
CVE-2019-10480 | High | 7.8 | 2019-12-18 | Out of bound write can happen in WMI firmware event handler due to lack of validation of data received from WLAN firmware in Snapdragon Auto, Snapdragon Consum… |
CVE-2018-11980 | High | 7.8 | 2019-12-18 | When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer overflow will happen in both cds_is_mmie… |
CVE-2019-2338 | High | 7.1 | 2019-12-12 | Crafted image that has a valid signature from a non-QC entity can be loaded which can read/write memory that belongs to the secure world in Snapdragon Auto, Sn… |
CVE-2019-2337 | High | 7.5 | 2019-12-12 | While Skipping unknown IES, EMM is reading the buffer even if the no of bytes to read are more than message length which may cause device to shutdown in Snapdr… |
CVE-2019-2321 | High | 7.8 | 2019-12-12 | Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2019-2320 | Critical | 9.8 | 2019-12-12 | Possible out of bounds write in a MT SMS/SS scenario due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… |
CVE-2019-2319 | High | 7.8 | 2019-12-12 | HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrago… |
CVE-2019-2310 | High | 7.5 | 2019-12-12 | Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body in Snapdragon Auto… |
CVE-2019-2288 | High | 7.8 | 2019-12-12 | Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2019-10618 | Medium | 5.5 | 2019-12-12 | Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QCA6390 |
CVE-2019-10592 | High | 7.8 | 2019-12-12 | Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check on the maximum mode count in Snapdrago… |
CVE-2019-10571 | High | 7.8 | 2019-12-12 | Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2019-10559 | Critical | 9.8 | 2019-12-12 | Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in Snapdragon Auto, Snap… |
CVE-2019-10555 | High | 7.8 | 2019-12-12 | Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2019-10545 | Medium | 5.5 | 2019-12-12 | Null pointer dereference issue in kernel due to missing check related to LLC support in GPU in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, S… |
CVE-2019-10530 | High | 7.8 | 2019-12-12 | Lack of check of data truncation on user supplied data in kernel leads to buffer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IO… |
CVE-2019-10520 | Medium | 5.5 | 2019-12-12 | An unprivileged application can allocate GPU memory by calling memory allocation ioctl function and can exhaust all the memory which results in out of memory i… |
CVE-2019-10511 | Critical | 9.8 | 2019-12-12 | Possibility of memory overflow while decoding GSNDCP compressed mode PDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial… |
CVE-2019-10494 | High | 8.1 | 2019-12-12 | Race condition between the camera functions due to lack of resource lock which will lead to memory corruption and UAF issue in Snapdragon Auto, Snapdragon Cons… |
CVE-2019-10493 | Critical | 9.8 | 2019-12-12 | Position determination accuracy may be degraded due to wrongly decoded information in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon… |
CVE-2019-10485 | High | 7.5 | 2019-12-12 | Infinite loop while decoding compressed data can lead to overrun condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industri… |
CVE-2019-10484 | Medium | 5.5 | 2019-12-12 | Use after free issue occurs when command destructors access dynamically allocated response buffer which is already deallocated during previous command teardwon… |
CVE-2019-2339 | High | 7.8 | 2019-11-21 | Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2019-2336 | Medium | 5.5 | 2019-11-21 | Subsequent use of the CBO listener may result in further memory corruption due to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2019-2335 | High | 7.5 | 2019-11-21 | While processing Attach Reject message, Valid exit condition is not met resulting into an infinite loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2019-2329 | High | 7.8 | 2019-11-21 | Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application. in Snapdragon Compute, Snapdragon Cons… |
CVE-2019-2318 | Medium | 5.5 | 2019-11-21 | Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consume… |
CVE-2019-2315 | High | 7.8 | 2019-11-21 | While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. in Snapdragon Auto, Sn… |
CVE-2019-2303 | Critical | 9.8 | 2019-11-21 | SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn… |
CVE-2019-2297 | High | 7.8 | 2019-11-21 | Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdrag… |
CVE-2019-2295 | Medium | 5.5 | 2019-11-21 | Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2019-2289 | Critical | 9.8 | 2019-11-21 | Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in Snapdragon Auto, Snapdragon Compute, Snap… |
CVE-2019-2271 | Critical | 9.8 | 2019-11-21 | Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-2268 | Critical | 9.8 | 2019-11-21 | Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon… |
CVE-2019-2266 | High | 7.8 | 2019-11-21 | Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrago… |
CVE-2019-2251 | High | 7.8 | 2019-11-21 | If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon… |
CVE-2019-10627 | Critical | 9.8 | 2019-11-21 | Integer overflow to buffer overflow vulnerability in PostScript image handling code used by the PostScript- and PDF-compatible interpreters due to incorrect bu… |
CVE-2019-10617 | High | 7.8 | 2019-11-21 | Low privilege users can access service configuration which contains registry data that admins uses to create or delete entries in the registry in QCA6174_9377… |
CVE-2019-10566 | High | 7.8 | 2019-11-21 | Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in Snapdragon Auto, Snapdragon… |
CVE-2019-10563 | High | 7.8 | 2019-11-21 | Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon Auto, Snapdragon Con… |
CVE-2019-10535 | Medium | 5.5 | 2019-11-21 | Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto… |
CVE-2019-10503 | High | 7.8 | 2019-11-21 | Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Sna… |
CVE-2019-10490 | Medium | 5.5 | 2019-11-21 | Use after free issue in Xtra daemon shutdown due to static object instance getting freed from a multiple places in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2019-10486 | High | 7.0 | 2019-11-21 | Race condition due to the lack of resource lock which will be concurrently modified in the memcpy statement leads to out of bound access in Snapdragon Auto, Sn… |
CVE-2018-13916 | High | 7.8 | 2019-11-21 | Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve thread data. in Snapdragon Auto, Snapdra… |
CVE-2019-2332 | Critical | 9.8 | 2019-11-06 | Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn… |
CVE-2019-2331 | Critical | 9.8 | 2019-11-06 | Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snap… |
CVE-2019-2325 | Critical | 9.8 | 2019-11-06 | Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2019-2324 | Critical | 9.8 | 2019-11-06 | When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto… |
CVE-2019-2323 | Critical | 9.8 | 2019-11-06 | Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IO… |
CVE-2019-2302 | Critical | 9.8 | 2019-11-06 | While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. in Snapdragon Auto… |
CVE-2019-2285 | Critical | 9.8 | 2019-11-06 | Out of bound write issue is observed while giving information about properties that have been set so far for playing video in Snapdragon Auto, Snapdragon Compu… |
CVE-2019-2283 | Critical | 9.8 | 2019-11-06 | Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon Compu… |
CVE-2019-2275 | Medium | 5.5 | 2019-11-06 | While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invoked(Depends… |
CVE-2019-2258 | Critical | 9.8 | 2019-11-06 | Improper validation of array index causes OOB write and then leads to memory corruption in MMCP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… |
CVE-2019-2249 | Critical | 9.8 | 2019-11-06 | Kernel can do a memory read from arbitrary address passed by user during execution of a syscall in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT… |
CVE-2019-2246 | High | 7.8 | 2019-11-06 | Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute… |
CVE-2019-10565 | Critical | 9.8 | 2019-11-06 | Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2019-10542 | Critical | 9.8 | 2019-11-06 | Buffer over-read may occur when downloading a corrupted firmware file that has chunk length in header which doesn`t match the contents in Snapdragon Auto, Snap… |
CVE-2019-10541 | Critical | 9.8 | 2019-11-06 | Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2019-10534 | Critical | 9.8 | 2019-11-06 | Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon Auto, Snapdragon Compute, Snapdragon Consu… |
CVE-2019-10533 | Critical | 9.8 | 2019-11-06 | Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… |
CVE-2019-10531 | Critical | 9.8 | 2019-11-06 | Incorrect reading of system image resulting in buffer overflow when size of system image is increased in Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearabl… |
CVE-2019-10529 | High | 8.1 | 2019-11-06 | Possible use after free issue due to race condition while attempting to mark the entry pages as dirty using function set_page_dirty() in Snapdragon Auto, Snapd… |
CVE-2019-10528 | Critical | 9.8 | 2019-11-06 | Use after free issue in kernel while accessing freed mdlog session info and its attributes after closing the session in Snapdragon Auto, Snapdragon Connectivit… |