Advisories · Technology
Qualcomm, Inc. All Qualcomm products.
Every CVE that names Qualcomm, Inc. All Qualcomm products among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem memory.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure Display.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a DRM provisioning command.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on write protection.
- Qualcomm, Inc. All Qualcomm products
-
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.
- Qualcomm, Inc. All Qualcomm products
-
In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepancy vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur.
- Qualcomm, Inc. All Qualcomm products
-
In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially exist.
- Qualcomm, Inc. All Qualcomm products
-
A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.
- Qualcomm, Inc. All Qualcomm Products
-
In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a…
- Qualcomm, Inc. All Qualcomm Products
-
In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue.
- Qualcomm, Inc. All Qualcomm Products
-
If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF using the Linux kernel, the TA would not…
- Qualcomm, Inc. All Qualcomm Products
-
In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.
- Qualcomm, Inc. All Qualcomm Products
-
In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.
- Qualcomm, Inc. All Qualcomm Products