Skip to content

Vulnerabilities of Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Is your version affected?

CVE Summary Score Published
CVE-2022-25711 Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon… 6.7 Medium Dec 13, 2022
CVE-2022-25685 Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon… 7.5 High Dec 13, 2022
CVE-2022-25676 Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon… 6.8 Medium Nov 15, 2022
CVE-2022-33214 Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon… 8.4 High Oct 17, 2022
CVE-2021-35113 Possible authentication bypass due to improper order of signature verification and hashing in the signature verification… 7.3 High Sep 2, 2022
CVE-2020-11223 Out of bound in camera driver due to lack of check of validation of array index before copying into array in… Not rated Feb 22, 2021
CVE-2020-3639 u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM… Not rated Nov 12, 2020
CVE-2020-11175 u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been… Not rated Nov 12, 2020
CVE-2020-3670 u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of… Not rated Nov 2, 2020
CVE-2020-3634 u'Multiple Read overflows issue due to improper length check while decoding Generic NAS transport/EMM info' in… Not rated Sep 9, 2020
CVE-2018-13903 u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,… Not rated Sep 8, 2020
CVE-2020-3635 Stack based overflow If the maximum number of arguments allowed per request in perflock exceeds in Snapdragon Auto,… Not rated Jun 22, 2020
CVE-2020-3626 Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto,… Not rated Jun 22, 2020
CVE-2019-14080 Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in… Not rated Jun 22, 2020
CVE-2020-3680 A race condition can occur when using the fastrpc memory mapping API Not rated Jun 2, 2020
CVE-2019-14022 Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto,… Not rated Apr 16, 2020
CVE-2019-14021 Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for… Not rated Apr 16, 2020
CVE-2019-14033 Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach… Not rated Apr 16, 2020
CVE-2019-14020 Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/… Not rated Apr 16, 2020
CVE-2019-14012 Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking… Not rated Apr 16, 2020
CVE-2019-14018 Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon… Not rated Apr 16, 2020
CVE-2019-10625 Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in… Not rated Apr 16, 2020
CVE-2019-14079 Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped… Not rated Mar 5, 2020
CVE-2019-10550 Buffer Over-read when UE is trying to process the message received form the network without zero termination in… Not rated Mar 5, 2020
CVE-2019-10549 Null pointer dereference issue can happen due to improper validation of CSEQ header response received from network in… Not rated Mar 5, 2020

Other Qualcomm, Inc. products