Qualcomm Inc All Qualcomm Products vulnerabilities

CVE-2014-9948 [HIGH] CWE-129 CVE-2014-9948: In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Arra In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially exist.

CVE-2017-7369 [HIGH] CWE-20 CVE-2017-7369: In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not pr In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to kernel stack corruption.

CVE-2014-9952 [HIGH] CWE-287 CVE-2014-9952: In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist.

CVE-2015-9006 [HIGH] CWE-284 CVE-2015-9006: In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could potentially exist.

CVE-2014-9950 [HIGH] CWE-285 CVE-2014-9950: In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vu In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.

CVE-2017-8241 [HIGH] CWE-119 CVE-2017-8241: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due to an incorrect message length.

CVE-2017-7373 [HIGH] CWE-415 CVE-2017-7373: In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a dis In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver.

CVE-2017-8236 [HIGH] CWE-119 CVE-2017-8236: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver.

CVE-2017-8237 [HIGH] CWE-119 CVE-2017-8237: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists whil In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image.

CVE-2017-8273 [HIGH] CWE-119 CVE-2017-8273: In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fast In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command when verified boot feature is disabled, with length greater than boot image buffer, a buffer overflow can occur.

CVE-2017-8233 [HIGH] CWE-787 CVE-2017-8233: In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array potentially leading to an out-of-bounds heap write.

CVE-2017-8271 [HIGH] CWE-787 CVE-2017-8271: Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Androi Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kernel by an unsanitized userspace-controlled parameter.

CVE-2017-8257 [HIGH] CWE-362 CVE-2017-8257: In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the s In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register reading with multiple processes, one process can free the debug buffer while another process still has the debug buffer in use.

CVE-2014-9932 [HIGH] CWE-190 CVE-2014-9932: In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from C In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation.

CVE-2015-9025 [HIGH] CWE-119 CVE-2015-9025: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application.

CVE-2014-9963 [HIGH] CWE-119 CVE-2014-9963: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in W In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM.

CVE-2015-9003 [HIGH] CWE-310 CVE-2015-9003: In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.

CVE-2015-9000 [HIGH] CWE-476 CVE-2015-9000: In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine i In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.

CVE-2015-9026 [HIGH] CWE-476 CVE-2015-9026: In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerabil In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.

CVE-2015-9027 [HIGH] CWE-476 CVE-2015-9027: In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerabil In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.