Vulnerabilities in Qualcomm, Inc.

2,991 results
CVE-2014-9975—In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk EncEPSS 0.5%CVE-2022-25749HIGHTransient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon CoEPSS 0.5%CVE-2022-22091HIGHImproper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, SnapdEPSS 0.5%CVE-2022-25669HIGHDenial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SEPSS 0.5%CVE-2016-5854—In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, kernel heap memory can be exposed to userspacEPSS 0.5%CVE-2015-9032—In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.EPSS 0.5%CVE-2016-5855—In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a user-supplied buffer is casted to a structuEPSS 0.5%CVE-2015-9031—In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.EPSS 0.5%CVE-2017-11092—In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the KGSL driver function EPSS 0.5%CVE-2022-25727CRITICALMemory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, SnaEPSS 0.5%CVE-2015-9022—In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs.EPSS 0.5%CVE-2020-11114—u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer overflow via a craftEPSS 0.4%CVE-2019-14079—Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped in the first place leEPSS 0.4%CVE-2020-11236HIGHMemory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon AutoEPSS 0.4%CVE-2018-3578—Type mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading to a heap buffer overEPSS 0.4%CVE-2015-8996—In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using tEPSS 0.4%CVE-2015-8997—In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF usingEPSS 0.4%CVE-2014-9966—In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure EPSS 0.4%CVE-2022-25686HIGHMemory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnecEPSS 0.4%CVE-2022-25659HIGHMemory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, SnapdragonEPSS 0.4%