CVE-2023-33022

Memory corruption in HLOS while invoking IOCTL calls from user-space...

CVE-2023-28556

Cryptographic issue in HLOS during key management...

CVE-2023-28544

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers...

CVE-2023-33030

Memory corruption in HLOS while running playready use-case...

CVE-2020-3640

u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in invalid state when a HLOS adversary calls the function with wrong input' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and...

CVE-2019-10538

Lack of check of address range received from firmware response allows modem to respond arbitrary pages into its address range which can compromise HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

CVE-2024-49845 Improper Input Validation in HLOS

Memory corruption during the FRS UDS generation process...

CVE-2024-45551 Weak Authentication in HLOS

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2024-33058 Insufficient Granularity of Access Control in Core

Memory corruption while assigning memory from the source DDR memoryHLOS to ADSP...

CVE-2022-33278

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity...

CVE-2024-43047

Memory corruption while maintaining memory maps of HLOS memory...

PT-2024-13101 · Qualcomm · Snapdragon +86

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves information disclosure when the ADSP payload size received in HLOS in response to an Audio Stream Manager matrix session is less than...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from memory corruption in HLOS when converting from authorization tokens to HIDL vectors...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which arises from a memory corruption while processing an event ring, where the context read pointer is not trusted by the HLOS and may point to an address in the middl...

CVE-2023-33030 Buffer Copy without Checking Size of Input in HLOS

Memory corruption in HLOS while running playready use-case...

Qualcomm Chips Trust Management Issues Vulnerabilities

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a security vulnerability that stems from an...

The vulnerability of GPS HLOS driver for Android operating systems in Qualcomm embedded chips allows a hacker to trigger a service failure.

The vulnerability of the GPS HLOS driver for Android operating systems in Qualcomm embedded chips is related to the re-release of memory upon calling the cancellation registration function after registration. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of microprogramming software in embedded Qualcomm chips lies in the copying of buffers without checking the size of input data during the processing of arguments received from HLOS. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software in embedded Qualcomm chips stems from the copying of buffers without checking the size of the input data during the processing of arguments received from HLOS. Exploiting this vulnerability can allow attackers to compromise the confidentiality,...

多款Qualcomm产品输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. A security vulnerability exists in Qualcomm chips that stems from a lack of...

Qualcomm HLOS Input Validation Error Vulnerability

Qualcomm HLOS is a Qualcomm Advanced Operating Platform component used in Qualcomm products. An input validation error vulnerability exists in Qualcomm HLOS, where writes and reads are made out-of-bounds in the TA due to improper checking of the length of the command and response buffers...