Vulnerabilities (CVE)

Filtered by vendor Qualcomm Subscribe
Total 2178 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-23366 1 Qualcomm 34 Qam8255p, Qam8255p Firmware, Qam8295p and 31 more 2025-01-10 N/A 6.6 MEDIUM
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
CVE-2024-33041 1 Qualcomm 70 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 67 more 2025-01-10 N/A 6.7 MEDIUM
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
CVE-2024-33055 1 Qualcomm 78 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 75 more 2025-01-10 N/A 6.7 MEDIUM
Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
CVE-2024-33059 1 Qualcomm 32 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 29 more 2025-01-10 N/A 6.7 MEDIUM
Memory corruption while processing frame command IOCTL calls.
CVE-2024-33061 1 Qualcomm 18 Qcs8550, Qcs8550 Firmware, Sw5100 and 15 more 2025-01-10 N/A 6.8 MEDIUM
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.
CVE-2024-33067 1 Qualcomm 154 Ar8035, Ar8035 Firmware, C-v2x 9150 and 151 more 2025-01-10 N/A 6.1 MEDIUM
Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.
CVE-2024-43063 1 Qualcomm 34 Qam8255p, Qam8255p Firmware, Qam8295p and 31 more 2025-01-10 N/A 6.1 MEDIUM
information disclosure while invoking the mailbox read API.
CVE-2024-23360 1 Qualcomm 26 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 23 more 2025-01-09 N/A 8.4 HIGH
Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers.
CVE-2024-23363 1 Qualcomm 250 Ar8035, Ar8035 Firmware, Csr8811 and 247 more 2025-01-09 N/A 7.5 HIGH
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.
CVE-2016-10394 1 Qualcomm 10 Mdm9206, Mdm9206 Firmware, Mdm9607 and 7 more 2025-01-09 N/A 8.4 HIGH
Initial xbl_sec revision does not have all the debug policy features and critical checks.
CVE-2017-11076 1 Qualcomm 54 Msm8909w, Msm8909w Firmware, Msm8996au and 51 more 2025-01-09 N/A 9.8 CRITICAL
On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into the decoder hardware which can lead to an invalid memory access by the decoder.
CVE-2017-15832 1 Qualcomm 10 Mdm9206, Mdm9206 Firmware, Mdm9607 and 7 more 2025-01-09 N/A 8.4 HIGH
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW
CVE-2017-17772 1 Qualcomm 14 Sd 450, Sd 450 Firmware, Sd 625 and 11 more 2025-01-09 N/A 9.8 CRITICAL
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation.
CVE-2017-18153 1 Qualcomm 10 9206 Lte Modem, 9206 Lte Modem Firmware, Apq8017 and 7 more 2025-01-09 N/A 8.4 HIGH
A race condition exists in a driver potentially leading to a use-after-free condition.
CVE-2018-11922 1 Qualcomm 44 215, 215 Firmware, Mdm9206 and 41 more 2025-01-09 N/A 9.8 CRITICAL
Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user.
CVE-2018-11952 1 Qualcomm 46 Mdm9206, Mdm9206 Firmware, Mdm9607 and 43 more 2025-01-09 N/A 8.4 HIGH
An image with a version lower than the fuse version may potentially be booted lead to improper authentication.
CVE-2016-10408 1 Qualcomm 10 9206 Lte Modem, 9206 Lte Modem Firmware, Apq8037 and 7 more 2025-01-09 N/A 8.4 HIGH
QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.
CVE-2017-18306 1 Qualcomm 14 Sd 450, Sd 450 Firmware, Sd 625 and 11 more 2025-01-09 N/A 8.4 HIGH
Information disclosure due to uninitialized variable.
CVE-2017-18307 1 Qualcomm 14 Sd 450, Sd 450 Firmware, Sd 625 and 11 more 2025-01-09 N/A 8.4 HIGH
Information disclosure possible while audio playback.
CVE-2018-5852 1 Qualcomm 46 Mdm9206, Mdm9206 Firmware, Mdm9607 and 43 more 2025-01-09 N/A 8.4 HIGH
An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'