Qualcomm Inc All Qualcomm Products vulnerabilities

CVE-2015-9073 [CRITICAL] CWE-476 CVE-2015-9073: In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall.

CVE-2014-9980 [CRITICAL] CWE-119 CVE-2014-9980: In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to unauthorized access to secure memory.

CVE-2014-9979 [CRITICAL] CWE-119 CVE-2014-9979: In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninit In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potentially leading to the compromise of secure memory.

CVE-2015-9060 [CRITICAL] CWE-20 CVE-2015-9060: In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not pro In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call.

CVE-2016-5872 [CRITICAL] CWE-20 CVE-2016-5872: In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated.

CVE-2016-10347 [CRITICAL] CWE-20 CVE-2016-10347: In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hyp In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated.

CVE-2015-9072 [CRITICAL] CWE-476 CVE-2015-9072: In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syscall.

CVE-2015-8592 [CRITICAL] CWE-476 CVE-2015-8592: In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not val In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not validated prior to being dereferenced potentially resulting in Guest-OS memory corruption.

CVE-2014-9933 [HIGH] CWE-20 CVE-2014-9933: Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can wr Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not have access.

CVE-2014-9946 [HIGH] CWE-416 CVE-2014-9946: In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerabili In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.

CVE-2014-9930 [HIGH] CWE-416 CVE-2014-9930: In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability cou In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.

CVE-2014-9926 [HIGH] CWE-416 CVE-2014-9926: In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability coul In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.

CVE-2015-9054 [CRITICAL] CWE-476 CVE-2015-9054: In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can b In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding.

CVE-2015-9043 [CRITICAL] CWE-476 CVE-2015-9043: In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can b In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a timer.

CVE-2015-9038 [CRITICAL] CWE-476 CVE-2015-9038: In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may b In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end.

CVE-2015-9068 [CRITICAL] CWE-20 CVE-2015-9068: In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a min In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated.

CVE-2015-9037 [CRITICAL] CWE-119 CVE-2015-9037: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read m In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read may occur in the processing of a downlink 3G NAS message.

CVE-2015-8595 [CRITICAL] CWE-119 CVE-2015-8595: In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read v In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in digital television/digital radio DRM.

CVE-2016-10383 [HIGH] CWE-362 CVE-2016-10383: In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU ra In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI.

CVE-2016-5864 [HIGH] CWE-264 CVE-2016-5864: In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QR In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound may result in an out of bounds memory access.