All Qualcomm Products (Qualcomm Inc.) - vulnerabilities (CVEs)

194 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2017-08-18. Vendor: Qualcomm Inc..

CVEs of All Qualcomm Products

CVE-2017-9678 - CVSS 7.8 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of…
CVE-2017-9682 - CVSS 4.7 (medium), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a Use After Free…
CVE-2017-7364 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may…
CVE-2017-9680 - CVSS 7.5 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a driver may use an…
CVE-2017-9685 - CVSS 8.1 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can lead to a Use After Free condition.
CVE-2017-9679 - CVSS 7.5 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-terminated, kernel memory contents can leak…
CVE-2017-9684 - CVSS 7 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After Free condition.
CVE-2017-8253 - CVSS 7.8 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid master is sent from…
CVE-2017-8256 - CVSS 7.8 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast…
CVE-2017-8261 - CVSS 7.8 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentially occur.
CVE-2017-8265 - CVSS 7 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to a double free.
CVE-2017-8268 - CVSS 7.8 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer processing…
CVE-2016-10389 - CVSS 7.8 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in…
CVE-2016-5872 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated.
CVE-2017-8255 - CVSS 7.8 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot.
CVE-2017-8260 - CVSS 7.8 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and cause an…
CVE-2017-8263 - CVSS 7.8 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a read-only virtual…
CVE-2017-8267 - CVSS 7 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an integer…
CVE-2017-8272 - CVSS 7.8 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properly validated…
CVE-2016-5871 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an…
CVE-2017-8254 - CVSS 5.5 (medium), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is valid.
CVE-2017-8257 - CVSS 7.8 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register reading with…
CVE-2017-8262 - CVSS 7 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race condition can potentially…
CVE-2017-8266 - CVSS 7 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a…
CVE-2017-8270 - CVSS 7 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a use-after-free…
CVE-2016-10391 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.
CVE-2015-9069 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, the Secure File System can become corrupted.
CVE-2015-9072 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall.
CVE-2016-10344 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE.
CVE-2016-10382 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient.
CVE-2015-9061 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading to unauthorized…
CVE-2015-9068 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated.
CVE-2015-9071 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall.
CVE-2016-10343 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak.
CVE-2016-10347 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated.
CVE-2016-10388 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application.
CVE-2015-9060 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call.
CVE-2015-9067 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a potential compiler optimization of memset() is addressed.
CVE-2015-9070 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscall.
CVE-2015-9073 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall.
CVE-2016-10346 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor.
CVE-2016-10383 - CVSS 8.1 (high), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI.
CVE-2015-9055 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a memory management routine.
CVE-2015-9062 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an…
CVE-2015-9045 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a buffer can be overflown while taking…
CVE-2015-9048 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets.
CVE-2015-8595 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in digital television/digital radio DRM.
CVE-2015-9051 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an…
CVE-2015-9035 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a memory buffer fails to be freed after it is no longer needed potentially…
CVE-2015-9054 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding.
CVE-2015-9038 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end.
CVE-2015-9041 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when performing WCDMA radio tuning.
CVE-2015-9044 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an…
CVE-2015-9047 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GNSS when performing a scan after bootup.
CVE-2015-8592 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not validated prior to being dereferenced potentially resulting…
CVE-2015-9050 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access can occur during a…
CVE-2015-9034 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a string can fail to be null-terminated in SIP leading to a buffer overflow.
CVE-2015-9053 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the processing of certain responses…
CVE-2015-9037 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read may occur in the processing of a downlink 3G NAS message.
CVE-2015-9040 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in a GERAN API.
CVE-2015-9043 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a timer.
CVE-2015-9046 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an…
CVE-2015-9049 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of certain responses from the USIM.
CVE-2015-8596 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths is missing in malware protection.
CVE-2015-9036 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, an incorrect length is used to clear a memory buffer resulting in adjacent…
CVE-2015-9052 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached while…
CVE-2015-9039 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in eMBMS where an assertion can be reached by a…
CVE-2015-9042 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when processing a QMI message.
CVE-2014-9980 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to unauthorized…
CVE-2014-9969 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client may use an insecure cryptographic algorithm.
CVE-2014-9975 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk Encryption.
CVE-2014-9979 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to…
CVE-2014-9968 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the UIMDIAG interface.
CVE-2014-9974 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster.
CVE-2014-9978 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service.
CVE-2015-0575 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, insecure ciphersuites were included in the default configuration.
CVE-2014-9411 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in rollback…
CVE-2014-9973 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRM routine.
CVE-2014-9977 - CVSS 9.8 (critical), 2017-08-18: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM.
CVE-2016-5861 - CVSS 8.8 (high), 2017-08-16: In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace is used to calculate…
CVE-2016-5864 - CVSS 7.8 (high), 2017-08-16: In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they…
CVE-2017-8243 - CVSS 7.8 (high), 2017-08-16: A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when processing a firmware image file.
CVE-2016-5347 - CVSS 4.7 (medium), 2017-08-16: In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver.
CVE-2016-5855 - CVSS 4.7 (medium), 2017-08-16: In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a user-supplied buffer is casted to a structure without…
CVE-2016-5860 - CVSS 7 (high), 2017-08-16: In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an…
CVE-2016-5863 - CVSS 7.8 (high), 2017-08-16: In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to…
CVE-2017-6421 - CVSS 8.8 (high), 2017-08-16: In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user…
CVE-2016-5854 - CVSS 4.7 (medium), 2017-08-16: In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, kernel heap memory can be exposed to userspace.
CVE-2016-5859 - CVSS 7 (high), 2017-08-16: In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an…
CVE-2016-5862 - CVSS 7 (high), 2017-08-16: When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type casting…
CVE-2016-5867 - CVSS 7 (high), 2017-08-16: In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack…
CVE-2016-5853 - CVSS 7 (high), 2017-08-16: In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the…
CVE-2016-5858 - CVSS 4.7 (medium), 2017-08-16: In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a user supplies a value too large, then an…
CVE-2017-8258 - CVSS 5.5 (medium), 2017-08-11: An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a camera driver.
CVE-2017-8269 - CVSS 5.5 (medium), 2017-08-11: Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux kernel can lead…
CVE-2017-8264 - CVSS 7.8 (high), 2017-08-11: A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the Linux kernel.
CVE-2017-8273 - CVSS 7.8 (high), 2017-08-11: In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command when verified boot feature is disabled,…
CVE-2017-8259 - CVSS 7.8 (high), 2017-08-11: In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for…
CVE-2017-8271 - CVSS 7.8 (high), 2017-08-11: Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernel by an…
CVE-2017-8240 - CVSS 7.8 (high), 2017-06-13: In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability.