# Qualcomm, Inc. All Qualcomm products.

Every CVE that names Qualcomm, Inc. All Qualcomm products among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.](https://agentprime.io/advisories/CVE-2016-10339.md)
  `CVE-2016-10339` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.](https://agentprime.io/advisories/CVE-2016-10338.md)
  `CVE-2016-10338` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.](https://agentprime.io/advisories/CVE-2016-10337.md)
  `CVE-2016-10337` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.](https://agentprime.io/advisories/CVE-2016-10336.md)
  `CVE-2016-10336` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.](https://agentprime.io/advisories/CVE-2016-10335.md)
  `CVE-2016-10335` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten.](https://agentprime.io/advisories/CVE-2016-10334.md)
  `CVE-2016-10334` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.](https://agentprime.io/advisories/CVE-2016-10333.md)
  `CVE-2016-10333` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications.](https://agentprime.io/advisories/CVE-2016-10332.md)
  `CVE-2016-10332` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer.](https://agentprime.io/advisories/CVE-2015-9033.md)
  `CVE-2015-9033` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.](https://agentprime.io/advisories/CVE-2015-9032.md)
  `CVE-2015-9032` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.](https://agentprime.io/advisories/CVE-2015-9031.md)
  `CVE-2015-9031` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication.](https://agentprime.io/advisories/CVE-2015-9030.md)
  `CVE-2015-9030` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem memory.](https://agentprime.io/advisories/CVE-2015-9029.md)
  `CVE-2015-9029` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine.](https://agentprime.io/advisories/CVE-2015-9028.md)
  `CVE-2015-9028` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.](https://agentprime.io/advisories/CVE-2015-9027.md)
  `CVE-2015-9027` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.](https://agentprime.io/advisories/CVE-2015-9026.md)
  `CVE-2015-9026` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application.](https://agentprime.io/advisories/CVE-2015-9025.md)
  `CVE-2015-9025` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications.](https://agentprime.io/advisories/CVE-2015-9024.md)
  `CVE-2015-9024` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.](https://agentprime.io/advisories/CVE-2015-9023.md)
  `CVE-2015-9023` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs.](https://agentprime.io/advisories/CVE-2015-9022.md)
  `CVE-2015-9022` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled.](https://agentprime.io/advisories/CVE-2015-9021.md)
  `CVE-2015-9021` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory.](https://agentprime.io/advisories/CVE-2015-9020.md)
  `CVE-2015-9020` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.](https://agentprime.io/advisories/CVE-2014-9967.md)
  `CVE-2014-9967` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure Display.](https://agentprime.io/advisories/CVE-2014-9966.md)
  `CVE-2014-9966` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call.](https://agentprime.io/advisories/CVE-2014-9965.md)
  `CVE-2014-9965` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality.](https://agentprime.io/advisories/CVE-2014-9964.md)
  `CVE-2014-9964` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM.](https://agentprime.io/advisories/CVE-2014-9963.md)
  `CVE-2014-9963` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a DRM provisioning command.](https://agentprime.io/advisories/CVE-2014-9962.md)
  `CVE-2014-9962` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection.](https://agentprime.io/advisories/CVE-2014-9961.md)
  `CVE-2014-9961` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.](https://agentprime.io/advisories/CVE-2014-9960.md)
  `CVE-2014-9960` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 13 Jun 2017
- [In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2016-10297.md)
  `CVE-2016-10297` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2015-9007.md)
  `CVE-2015-9007` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2015-9006.md)
  `CVE-2015-9006` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2015-9005.md)
  `CVE-2015-9005` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9952.md)
  `CVE-2014-9952` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepancy vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9951.md)
  `CVE-2014-9951` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9950.md)
  `CVE-2014-9950` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9949.md)
  `CVE-2014-9949` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9948.md)
  `CVE-2014-9948` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9947.md)
  `CVE-2014-9947` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9946.md)
  `CVE-2014-9946` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9945.md)
  `CVE-2014-9945` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9944.md)
  `CVE-2014-9944` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9943.md)
  `CVE-2014-9943` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9942.md)
  `CVE-2014-9942` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9941.md)
  `CVE-2014-9941` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9930.md)
  `CVE-2014-9930` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9929.md)
  `CVE-2014-9929` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9928.md)
  `CVE-2014-9928` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9927.md)
  `CVE-2014-9927` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9926.md)
  `CVE-2014-9926` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9925.md)
  `CVE-2014-9925` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur.](https://agentprime.io/advisories/CVE-2014-9924.md)
  `CVE-2014-9924` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.](https://agentprime.io/advisories/CVE-2014-9923.md)
  `CVE-2014-9923` · CVE record: Qualcomm, Inc. All Qualcomm products · No CVSS score · Not analysed yet · Published 6 Jun 2017
- [A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.](https://agentprime.io/advisories/CVE-2016-10242.md)
  `CVE-2016-10242` · CVE record: Qualcomm, Inc. All Qualcomm Products · No CVSS score · Not analysed yet · Published 16 May 2017
- [In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a…](https://agentprime.io/advisories/CVE-2016-10239.md)
  `CVE-2016-10239` · CVE record: Qualcomm, Inc. All Qualcomm Products · No CVSS score · Not analysed yet · Published 16 May 2017
- [In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue.](https://agentprime.io/advisories/CVE-2016-10238.md)
  `CVE-2016-10238` · CVE record: Qualcomm, Inc. All Qualcomm Products · No CVSS score · Not analysed yet · Published 16 May 2017
- [If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF using the Linux kernel, the TA would not…](https://agentprime.io/advisories/CVE-2016-10237.md)
  `CVE-2016-10237` · CVE record: Qualcomm, Inc. All Qualcomm Products · No CVSS score · Not analysed yet · Published 16 May 2017
- [In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.](https://agentprime.io/advisories/CVE-2015-9003.md)
  `CVE-2015-9003` · CVE record: Qualcomm, Inc. All Qualcomm Products · No CVSS score · Not analysed yet · Published 16 May 2017
- [In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.](https://agentprime.io/advisories/CVE-2015-9002.md)
  `CVE-2015-9002` · CVE record: Qualcomm, Inc. All Qualcomm Products · No CVSS score · Not analysed yet · Published 16 May 2017

Newest: <https://agentprime.io/advisories/technology/qualcomm-inc-all-qualcomm-products.md>
Older: <https://agentprime.io/advisories/technology/qualcomm-inc-all-qualcomm-products.md?cursor=WyIyMDE3LTA1LTE2VDE0OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxNS05MDAyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=qualcomm-inc-all-qualcomm-products&cursor=WyIyMDE3LTA2LTEzVDIwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxNi0xMDM0MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/qualcomm-inc-all-qualcomm-products/?cursor=WyIyMDE3LTA2LTEzVDIwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxNi0xMDM0MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.