Vulnerabilities in Qualcomm, Inc.

2,991 results
CVE-2023-33028CRITICALBuffer Copy without Checking Size of Input in WLAN FirmwareEPSS 0.5%CVE-2022-22088CRITICALInteger Overflow to Buffer Overflow in Bluetooth HOSTEPSS 0.5%CVE-2016-10339—In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.EPSS 0.5%CVE-2023-33048HIGHBuffer over-read in WLAN FirmwareEPSS 0.5%CVE-2023-33061HIGHBuffer Over-read in WLAN FirmwareEPSS 0.5%CVE-2018-5897—While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly inEPSS 0.5%CVE-2023-33047HIGHBuffer Over-read in WLAN FirmwareEPSS 0.5%CVE-2023-33056HIGHNULL Pointer dereference in WLAN FirmwareEPSS 0.5%CVE-2020-3704—u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral syEPSS 0.5%CVE-2021-35068HIGHLack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in SnapdEPSS 0.5%CVE-2022-33256CRITICALImproper validation of array index in Multi-mode call processorEPSS 0.5%CVE-2022-25748CRITICALMemory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, SnapdEPSS 0.5%CVE-2023-33082CRITICALBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HostEPSS 0.5%CVE-2016-5862—When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, EPSS 0.5%CVE-2022-22096CRITICALMemory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in SnapdragoEPSS 0.5%CVE-2017-14875—In the handler for the ioctl command VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-EPSS 0.5%CVE-2017-15859—While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCAEPSS 0.5%CVE-2017-18170—Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SEPSS 0.5%CVE-2021-35082CRITICALImproper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has beeEPSS 0.5%CVE-2023-28588HIGHInteger Overflow or Wraparound in Bluetooth HostEPSS 0.5%