Qualcomm, Inc. All Qualcomm Products vulnerabilities, page 5

194 vulnerabilities

Known vulnerabilities in Qualcomm, Inc. All Qualcomm Products, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2016-10335qualcomm, inc.all qualcomm products
EPSS score
0.50%
In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.
9.3CVE-2016-10389qualcomm, inc.all qualcomm products
EPSS score
0.50%
In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.
5.5CVE-2016-10336qualcomm, inc.all qualcomm products
EPSS score
0.52%
In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.
5.5CVE-2016-10334qualcomm, inc.all qualcomm products
EPSS score
0.50%
In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten.
10CVE-2016-10347qualcomm, inc.all qualcomm products
EPSS score
0.90%
In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated.
9.3CVE-2016-10383qualcomm, inc.all qualcomm products
EPSS score
0.59%
In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI.
5.5CVE-2016-10333qualcomm, inc.all qualcomm products
EPSS score
0.50%
In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.
5.5CVE-2016-10337qualcomm, inc.all qualcomm products
EPSS score
0.52%
In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.
9.3CVE-2016-10238googleandroid+1
EPSS score
0.62%
In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue.
9.3CVE-2016-10342qualcomm, inc.all qualcomm products
EPSS score
0.67%
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler.
7.1CVE-2016-10339qualcomm, inc.all qualcomm products
EPSS score
0.54%
In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.
10CVE-2016-10343qualcomm, inc.all qualcomm products
EPSS score
0.90%
In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak.
9.3CVE-2016-10237googleandroid+1
EPSS score
0.60%
If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated as secure memory.
10CVE-2016-10388qualcomm, inc.all qualcomm products
EPSS score
0.90%
In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application.
10CVE-2016-10391qualcomm, inc.all qualcomm products
EPSS score
0.90%
In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.
9.3CVE-2016-10239qualcomm, inc.all qualcomm products
EPSS score
0.70%
In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.
7.6CVE-2016-10242googleandroid+1
EPSS score
0.39%
A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.
9.3CVE-2016-10338qualcomm, inc.all qualcomm products
EPSS score
0.62%
In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.
10CVE-2016-10382qualcomm, inc.all qualcomm products
EPSS score
0.86%
In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient.
10CVE-2016-10344qualcomm, inc.all qualcomm products
EPSS score
0.90%
In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE.