Vulnerabilities of Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdrago...
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-33238 | Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames | 7.5 High | Dec 13, 2022 |
| CVE-2022-25749 | Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames | 7.5 High | Oct 19, 2022 |
| CVE-2022-25748 | Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames | 9.8 Critical | Oct 19, 2022 |
| CVE-2022-22062 | An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto,… | 8.2 High | Sep 2, 2022 |
| CVE-2020-11301 | Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information… | 9.1 Critical | Sep 8, 2021 |
| CVE-2020-11191 | Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon… | 8.2 High | Apr 7, 2021 |
| CVE-2020-11269 | Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in… | Not rated | Feb 22, 2021 |
| CVE-2020-11213 | Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields… | Not rated | Jan 21, 2021 |
| CVE-2019-14101 | Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is… | Not rated | Jul 30, 2020 |
| CVE-2020-3614 | Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in… | Not rated | Jun 22, 2020 |
| CVE-2019-14094 | Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request… | Not rated | Jun 22, 2020 |
| CVE-2019-10574 | Lack of boundary checks for data offsets received from HLOS can lead to out-of-bound read in Snapdragon Auto, Snapdragon… | Not rated | Apr 16, 2020 |
| CVE-2019-10483 | Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in… | Not rated | Apr 16, 2020 |
| CVE-2019-14095 | Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in… | Not rated | Mar 5, 2020 |
| CVE-2019-10616 | Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ | Not rated | Mar 5, 2020 |
| CVE-2019-10561 | Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and… | Not rated | Jan 21, 2020 |
| CVE-2019-10607 | Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string… | Not rated | Dec 18, 2019 |
| CVE-2019-10513 | Possibility of Null pointer access if the SPDM commands are executed in the non-standard way in Trustzone in… | Not rated | Dec 18, 2019 |
| CVE-2019-2321 | Incorrect length used while validating the qsee log buffer sent from HLOS which could then lead to remap conflict in… | Not rated | Dec 12, 2019 |
| CVE-2018-13916 | Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve… | Not rated | Nov 21, 2019 |
| CVE-2019-2275 | While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information… | Not rated | Nov 6, 2019 |
| CVE-2018-13908 | Truncated access authentication token leads to weakened access control for stored secure application data in… | Not rated | Jun 14, 2019 |
| CVE-2018-13907 | While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if… | Not rated | Jun 14, 2019 |
| CVE-2018-13906 | The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis leading to potentially… | Not rated | Jun 14, 2019 |
| CVE-2017-8252 | Kernel can inject faults in computations during the execution of TrustZone leading to information disclosure in… | Not rated | Jun 14, 2019 |
Other Qualcomm, Inc. products
Snapdragon 997
Android for MSM, Firefox OS for MSM, QRD Android 306
All Qualcomm products 194
Snapdragon Mobile, Snapdragon Wear 132
Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear 123
Snapdragon Mobile 114
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 73
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 50
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking 47
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 45
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 41
Snapdragon Automobile, Snapdragon Mobile 39