Qualcomm Inc All Qualcomm Products vulnerabilities

CVE-2016-10239 [HIGH] CWE-119 CVE-2016-10239: In TrustZone access control policy may potentially be bypassed in all Android releases from CAF usin In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.

CVE-2014-9930 [HIGH] CWE-416 CVE-2014-9930: In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability cou In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.

CVE-2014-9926 [HIGH] CWE-416 CVE-2014-9926: In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability coul In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.

CVE-2015-9073 [CRITICAL] CWE-476 CVE-2015-9073: In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall.

CVE-2014-9980 [CRITICAL] CWE-119 CVE-2014-9980: In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to unauthorized access to secure memory.

CVE-2014-9979 [CRITICAL] CWE-119 CVE-2014-9979: In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninit In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to the compromise of secure memory.

CVE-2015-9060 [CRITICAL] CWE-20 CVE-2015-9060: In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not pro In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call.

CVE-2016-5872 [CRITICAL] CWE-20 CVE-2016-5872: In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated.

CVE-2016-10347 [CRITICAL] CWE-20 CVE-2016-10347: In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hyp In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated.

CVE-2015-9072 [CRITICAL] CWE-476 CVE-2015-9072: In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall.

CVE-2014-9933 [HIGH] CWE-20 CVE-2014-9933: Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can wr Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access.

CVE-2014-9961 [HIGH] CWE-284 CVE-2014-9961: In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection ex In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection.

CVE-2014-9946 [HIGH] CWE-416 CVE-2014-9946: In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerabili In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.

CVE-2015-9054 [CRITICAL] CWE-476 CVE-2015-9054: In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can b In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding.

CVE-2015-9043 [CRITICAL] CWE-476 CVE-2015-9043: In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can b In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a timer.

CVE-2015-9038 [CRITICAL] CWE-476 CVE-2015-9038: In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may b In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end.

CVE-2015-9068 [CRITICAL] CWE-20 CVE-2015-9068: In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a min In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated.

CVE-2015-9037 [CRITICAL] CWE-119 CVE-2015-9037: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read m In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read may occur in the processing of a downlink 3G NAS message.

CVE-2015-8595 [CRITICAL] CWE-119 CVE-2015-8595: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read v In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in digital television/digital radio DRM.

CVE-2016-10383 [HIGH] CWE-362 CVE-2016-10383: In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU ra In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI.