Qualcomm Inc All Qualcomm Products vulnerabilities

CVE-2015-9042 [CRITICAL] CWE-119 CVE-2015-9042: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vu In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when processing a QMI message.

CVE-2015-9041 [CRITICAL] CWE-119 CVE-2015-9041: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vu In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when performing WCDMA radio tuning.

CVE-2014-9978 [CRITICAL] CWE-119 CVE-2014-9978: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vu In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service.

CVE-2015-9053 [CRITICAL] CWE-119 CVE-2015-9053: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vu In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the processing of certain responses from the USIM.

CVE-2014-9968 [CRITICAL] CWE-119 CVE-2014-9968: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vu In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the UIMDIAG interface.

CVE-2016-5871 [CRITICAL] CWE-119 CVE-2016-5871: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an image file.

CVE-2015-9062 [CRITICAL] CWE-119 CVE-2015-9062: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an ELF file.

CVE-2015-9050 [CRITICAL] CWE-125 CVE-2015-9050: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exis In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access can occur during a CA call.

CVE-2014-9974 [CRITICAL] CWE-119 CVE-2014-9974: In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster.

CVE-2015-8596 [CRITICAL] CWE-119 CVE-2015-8596: In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths is missing in malware protection.

CVE-2017-7364 [CRITICAL] CWE-416 CVE-2017-7364: In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_f In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_data[i].scale may still point to a user-provided address (which could point to arbitrary kernel address), so on an error condition, this user-provided address will be freed (arbitrary free), and continued operatio

CVE-2014-9977 [CRITICAL] CWE-119 CVE-2014-9977: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vu In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM.

CVE-2015-9045 [CRITICAL] CWE-119 CVE-2015-9045: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exis In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a buffer can be overflown while taking power measurements.

CVE-2014-9973 [CRITICAL] CWE-119 CVE-2014-9973: In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buff In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRM routine.

CVE-2016-10346 [CRITICAL] CWE-190 CVE-2016-10346: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor.

CVE-2015-9048 [CRITICAL] CWE-20 CVE-2015-9048: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exis In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets.

CVE-2015-9046 [CRITICAL] CWE-20 CVE-2015-9046: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exis In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an improper bound on the size of a frequency list.

CVE-2015-9044 [CRITICAL] CWE-20 CVE-2015-9044: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exis In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due to an improper bound on the size of a frequency list.

CVE-2015-9052 [CRITICAL] CWE-20 CVE-2015-9052: In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exis In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached while processing a downlink message.

CVE-2016-10391 [CRITICAL] CWE-20 CVE-2016-10391: In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.