Qualcomm Inc All Qualcomm Products vulnerabilities

CVE-2014-9949 [HIGH] CWE-476 CVE-2014-9949: In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereferen In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist.

CVE-2014-9924 [HIGH] CWE-189 CVE-2014-9924: In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur.

CVE-2017-8261 [HIGH] CVE-2017-8261: In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver i In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentially occur.

CVE-2017-8264 [HIGH] CWE-400 CVE-2017-8264: A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the Linux kernel.

CVE-2017-9679 [HIGH] CWE-200 CVE-2017-9679: In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace strin In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-terminated, kernel memory contents can leak to system logs.

CVE-2014-9934 [HIGH] CWE-347 CVE-2014-9934: A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.

CVE-2017-7365 [HIGH] CWE-125 CVE-2017-7365: In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated.

CVE-2017-7372 [HIGH] CWE-119 CVE-2017-7372: In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver p In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or write to arbitrary pointer location.

CVE-2017-8242 [MEDIUM] CWE-362 CVE-2017-8242: In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver po In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory write.

CVE-2017-7370 [HIGH] CWE-416 CVE-2017-7370: In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver p In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition.

CVE-2017-8266 [HIGH] CWE-362 CVE-2017-8266: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exi In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free condition.

CVE-2017-8270 [HIGH] CWE-362 CVE-2017-8270: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exi In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a use-after-free condition.

CVE-2014-9936 [HIGH] CWE-362 CVE-2014-9936: In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAF using the Linux kernel.

CVE-2017-9684 [HIGH] CWE-362 CVE-2017-9684: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After Free condition.

CVE-2017-8262 [HIGH] CWE-362 CVE-2017-8262: In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory alloc In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race condition can potentially occur leading to a Use After Free condition.

CVE-2016-5853 [HIGH] CWE-264 CVE-2016-5853: In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, w In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length value not in the correct range, an error message is printed, but code execution continues in the same way as for a correct length value.

CVE-2014-9966 [HIGH] CWE-362 CVE-2014-9966: In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race C In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure Display.

CVE-2014-9941 [HIGH] CWE-362 CVE-2014-9941: In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.

CVE-2016-10297 [HIGH] CWE-362 CVE-2016-10297: In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Ra In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.

CVE-2017-8265 [HIGH] CWE-362 CVE-2017-8265: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exi In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to a double free.