Qualcomm Inc All Qualcomm Products vulnerabilities

CVE-2016-10334 [MEDIUM] CWE-284 CVE-2016-10334: In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could po In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten.

CVE-2017-8254 [MEDIUM] CWE-200 CVE-2017-8254: In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client poin In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked if it is valid.

CVE-2017-8235 [MEDIUM] CVE-2017-8235: In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is no In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protected.

CVE-2016-5347 [MEDIUM] CWE-200 CVE-2016-5347: In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data ca In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver.

CVE-2017-9682 [MEDIUM] CWE-200 CVE-2017-9682: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a Use After Free condition.

CVE-2016-10337 [MEDIUM] CWE-20 CVE-2016-10337: In all Android releases from CAF using the Linux kernel, some validation of secure applications was In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.

CVE-2015-9024 [MEDIUM] CWE-284 CVE-2015-9024: In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications.

CVE-2016-10335 [MEDIUM] CWE-284 CVE-2016-10335: In all Android releases from CAF using the Linux kernel, libtomcrypt was updated. In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.

CVE-2016-10333 [MEDIUM] CWE-284 CVE-2016-10333: In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be c In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.

CVE-2016-5858 [MEDIUM] CWE-200 CVE-2016-5858: In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Androi In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a user supplies a value too large, then an out-of-bounds read occurs.

CVE-2016-5855 [MEDIUM] CWE-200 CVE-2016-5855: In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a use In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a user-supplied buffer is casted to a structure without checking if the source buffer is large enough.

CVE-2016-5854 [MEDIUM] CWE-200 CVE-2016-5854: In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, kerne In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, kernel heap memory can be exposed to userspace.

CVE-2015-9031 [LOW] CWE-200 CVE-2015-9031: In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by H In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.

CVE-2015-9032 [LOW] CWE-200 CVE-2015-9032: In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications. In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.