Skip to content

Known vulnerabilities in Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Is your version affected?

CVE Summary Score Published
CVE-2019-14048 Possible out of bound memory access while playing a crafted clip in media player in Snapdragon Auto, Snapdragon Compute,… Not rated Mar 5, 2020
CVE-2019-14029 Use-after-free in graphics module due to destroying already queued syncobj in error case in Snapdragon Auto,… Not rated Mar 5, 2020
CVE-2019-14088 Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource… Not rated Feb 7, 2020
CVE-2019-10567 There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting… Not rated Feb 7, 2020
CVE-2019-14034 Use after free while processing eeprom query as there is a chance to not unlock mutex after error occurs in Snapdragon… Not rated Jan 21, 2020
CVE-2019-10583 Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon… Not rated Jan 21, 2020
CVE-2019-10592 Possible integer overflow while multiplying two integers of 32 bit in QDCM API of get display modes as there is no check… Not rated Dec 12, 2019
CVE-2019-10484 Use after free issue occurs when command destructors access dynamically allocated response buffer which is already… Not rated Dec 12, 2019
CVE-2019-2323 Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto,… Not rated Nov 6, 2019
CVE-2019-2283 Improper validation of read and write index of tx and rx fifo`s before calculating pointer can lead to out-of-bound… Not rated Nov 6, 2019
CVE-2019-10534 Null-pointer dereference can occur while accessing the super index entry when it is not been allocated in Snapdragon… Not rated Nov 6, 2019
CVE-2019-10541 Dereference on uninitialized buffer can happen when parsing FLV clip with corrupted codec specific data in Snapdragon… Not rated Nov 6, 2019
CVE-2019-10533 Out of bound access due to improper validation of array index cause the index table entry to get corrupt in Snapdragon… Not rated Nov 6, 2019
CVE-2019-2333 Buffer overflow due to improper validation of buffer size while IPA driver processing to perform read operation in… Not rated Sep 30, 2019
CVE-2019-10538 Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its… Not rated Sep 30, 2019
CVE-2019-10501 Possible use after free issue due to improper input validation in volume listener library in Snapdragon Auto, Snapdragon… Not rated Sep 30, 2019
CVE-2019-2298 Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto,… Not rated Jul 25, 2019
CVE-2019-2260 A race condition occurs while processing perf-event which can lead to a use after free condition in Snapdragon Auto,… Not rated Jul 22, 2019
CVE-2019-2287 Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver Not rated Jul 22, 2019
CVE-2018-12005 An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute,… Not rated May 24, 2019

Other Qualcomm, Inc. products