Qualcomm Inc All Qualcomm Products vulnerabilities

CVE-2016-10341 [HIGH] CWE-264 CVE-2016-10341: In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than int In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended.

CVE-2016-10338 [HIGH] CWE-20 CVE-2016-10338: In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processi In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.

CVE-2016-5863 [HIGH] CWE-264 CVE-2016-5863: In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Androi In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses.

CVE-2017-8243 [HIGH] CWE-119 CVE-2017-8243: A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QR A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when processing a firmware image file.

CVE-2017-8263 [HIGH] CVE-2017-8263: In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can o In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a read-only virtual address in userspace.

CVE-2014-9929 [HIGH] CWE-119 CVE-2014-9929: In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offs In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially exist.

CVE-2014-9927 [HIGH] CWE-119 CVE-2014-9927: In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.

CVE-2017-7367 [HIGH] CWE-191 CVE-2017-7367: In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists w In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image.

CVE-2017-7371 [HIGH] CWE-416 CVE-2017-7371: In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned off by Bluetooth.

CVE-2017-8272 [HIGH] CWE-787 CVE-2017-8272: In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properly validated potentially leading to an out of bounds heap write.

CVE-2017-8256 [HIGH] CWE-125 CVE-2017-8256: In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more than 16 multicast addresses.

CVE-2017-8238 [HIGH] CWE-119 CVE-2017-8238: In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function.

CVE-2016-10343 [CRITICAL] CWE-119 CVE-2016-10343: In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failur In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak.

CVE-2017-9680 [HIGH] CWE-200 CVE-2017-9680: In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argumen In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message.

CVE-2015-9002 [HIGH] CWE-189 CVE-2015-9002: In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.

CVE-2014-9967 [HIGH] CWE-476 CVE-2014-9967: In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerabil In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.

CVE-2015-9033 [HIGH] CWE-20 CVE-2015-9033: In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a poin In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer.

CVE-2016-10389 [HIGH] CWE-119 CVE-2016-10389: In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size che In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.

CVE-2014-9943 [HIGH] CWE-476 CVE-2014-9943: In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference v In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist.

CVE-2017-8253 [HIGH] CWE-770 CVE-2017-8253: In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can po In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid master is sent from userspace.