Qualcomm Inc All Qualcomm Products vulnerabilities

CVE-2016-10342 [HIGH] CWE-119 CVE-2016-10342: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler.

CVE-2014-9964 [HIGH] CWE-190 CVE-2014-9964: In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality.

CVE-2014-9965 [HIGH] CWE-20 CVE-2014-9965: In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call.

CVE-2014-9962 [HIGH] CWE-20 CVE-2014-9962: In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a DRM provisioning command.

CVE-2016-10237 [HIGH] CWE-284 CVE-2016-10237: If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated as secure memory.

CVE-2015-9020 [HIGH] CWE-476 CVE-2015-9020: In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerabil In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory.

CVE-2015-9029 [HIGH] CWE-284 CVE-2015-9029: In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access contro In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem memory.

CVE-2015-9005 [HIGH] CWE-190 CVE-2015-9005: In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.

CVE-2014-9944 [HIGH] CWE-190 CVE-2014-9944: In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overfl In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.

CVE-2017-8255 [HIGH] CWE-190 CVE-2017-8255: In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot.

CVE-2017-8240 [HIGH] CWE-125 CVE-2017-8240: In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer ov In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability.

CVE-2014-9945 [HIGH] CWE-285 CVE-2014-9945: In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vuln In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.

CVE-2017-9678 [HIGH] CWE-119 CVE-2017-9678: In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, m In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur due to lack of bounds checking in a memcpy().

CVE-2017-8268 [HIGH] CWE-125 CVE-2017-8268: In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera applicati In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buffer processing with invalid values leading to the driver performing a heap buffer over-read.

CVE-2017-8259 [HIGH] CWE-120 CVE-2017-8259: In the service locator in all Qualcomm products with Android releases from CAF using the Linux kerne In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the variable set for determining the size of the buffer is not used to indicate the size of the buffer.

CVE-2014-9925 [HIGH] CWE-119 CVE-2014-9925: In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.

CVE-2014-9928 [HIGH] CWE-119 CVE-2014-9928: In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Siz In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.

CVE-2014-9942 [HIGH] CWE-665 CVE-2014-9942: In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vul In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could potentially exist.

CVE-2015-9007 [HIGH] CWE-415 CVE-2015-9007: In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability co In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist.

CVE-2014-9923 [HIGH] CWE-119 CVE-2014-9923: In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.