Qualcomm, Inc. All Qualcomm Products vulnerabilities, page 5
194 vulnerabilities
Known vulnerabilities in Qualcomm, Inc. All Qualcomm Products, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2016-10335qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Android releases from CAF using the Linux kernel, libtomcrypt was updated.EPSS0.50%CriticalCVE-2016-10389qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the NAND memory in their respective partitions, so there is a possibility of writing beyond the intended partition.EPSS0.50%MediumCVE-2016-10336qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.EPSS0.52%MediumCVE-2016-10334qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten.EPSS0.50%CriticalCVE-2016-10347qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated.EPSS0.90%CriticalCVE-2016-10383qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI.EPSS0.59%MediumCVE-2016-10333qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.EPSS0.50%MediumCVE-2016-10337qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.EPSS0.52%CriticalCVE-2016-10238google · android +1 moregoogle androidIn QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue.EPSS0.62%CriticalCVE-2016-10342qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler.EPSS0.67%HighCVE-2016-10339qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.EPSS0.54%CriticalCVE-2016-10343qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in memory leak.EPSS0.90%CriticalCVE-2016-10237google · android +1 moregoogle androidIf shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated as secure memory.EPSS0.60%CriticalCVE-2016-10388qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-party QTEE application.EPSS0.90%CriticalCVE-2016-10391qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity.EPSS0.90%CriticalCVE-2016-10239qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input validation an integer overflow vulnerability leading to a buffer overflow could potentially occur and a buffer over-read vulnerability could potentially occur.EPSS0.70%HighCVE-2016-10242google · android +1 moregoogle androidA time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linux kernel.EPSS0.39%CriticalCVE-2016-10338qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.EPSS0.62%CriticalCVE-2016-10382qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient.EPSS0.86%CriticalCVE-2016-10344qualcomm, inc. · all qualcomm productsqualcomm, inc. all qualcomm productsIn all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in LTE.EPSS0.90%