Qualcomm Inc All Qualcomm Products vulnerabilities

CVE-2016-10339 [HIGH] CWE-200 CVE-2016-10339: In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read con In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.

CVE-2016-5860 [HIGH] CWE-264 CVE-2016-5860: In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow.

CVE-2016-5859 [HIGH] CWE-264 CVE-2016-5859: In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a buffer overflow.

CVE-2016-5867 [HIGH] CWE-264 CVE-2016-5867: In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from users In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow.

CVE-2016-5862 [HIGH] CWE-264 CVE-2016-5862: When a control related to codec is issued from userspace in all Qualcomm products with Android for M When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type casting is done to the container structure instead of the codec's individual structure, resulting in a device restart after kernel crash occurs.

CVE-2016-10242 [HIGH] CWE-362 CVE-2016-10242: A time-of-check time-of-use race condition could potentially exist in the secure file system in all A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.

CVE-2017-8267 [HIGH] CWE-190 CVE-2017-8267: In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exi In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leading to an integer overflow and then an out-of-bounds write.

CVE-2017-7368 [HIGH] CWE-362 CVE-2017-7368: In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver.

CVE-2015-9022 [HIGH] CWE-362 CVE-2015-9022: In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Con In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs.

CVE-2015-8996 [HIGH] CWE-362 CVE-2015-8996: In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using the Linux kernel.

CVE-2015-8997 [HIGH] CWE-362 CVE-2015-8997: In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routin In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using the Linux kernel.

CVE-2017-8269 [MEDIUM] CWE-200 CVE-2017-8269: Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with A Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux kernel can lead to exposure of kernel memory.

CVE-2017-8258 [MEDIUM] CWE-125 CVE-2017-8258: An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linu An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a camera driver.

CVE-2015-9001 [MEDIUM] CWE-200 CVE-2015-9001: In TrustZone an information exposure vulnerability can potentially occur in all Android releases fro In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.

CVE-2014-9947 [MEDIUM] CWE-200 CVE-2014-9947: In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulner In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potentially exist.

CVE-2014-9951 [MEDIUM] CWE-200 CVE-2014-9951: In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Throug In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepancy vulnerability could potentially exist.

CVE-2017-8239 [MEDIUM] CWE-200 CVE-2017-8239: In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash i In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentially leading to exposure of kernel memory.

CVE-2016-10336 [MEDIUM] CWE-254 CVE-2016-10336: In all Android releases from CAF using the Linux kernel, some regions of memory were not protected d In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.

CVE-2016-10332 [MEDIUM] CWE-254 CVE-2016-10332: In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications.

CVE-2015-9021 [MEDIUM] CWE-284 CVE-2015-9021: In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabl In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled.