The vulnerability of embedded software developed by Qualcomm, related to copying from buffers without checking the size of the input data, allows a violator to execute arbitrary code.

The vulnerability of microprogramming software in embedded Qualcomm chips lies in the copying of input data from the buffer without checking its size. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of embedded software developed by Qualcomm, related to the lack of protection for service data, allows attackers to disclose the protected information.

The vulnerability of embedded software developed by Qualcomm relates to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

PT-2023-1411 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform versions affected versions not specified Description: The issue is related to memory corruption in Automotive due to improper input validation. This could potentially allow an attacker to execute arbitrary code...

The vulnerability of the implementation of content protection functions in Qualcomm’s embedded software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the content protection implementation in Qualcomm’s embedded software lies in the lack of checks for buffer length and reading beyond the memory boundary. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the implementation of LTE microprogramming technology in Qualcomm’s embedded chips allows a intruder to trigger a service failure.

The vulnerability of the LTE microprogramming technology implementation in Qualcomm’s embedded chips is related to deficiencies in the authentication process when processing the securityModeCommand parameter. Exploiting this vulnerability allows a malicious actor to trigger a service failure by...

The vulnerability of the kernel of microprogramming software in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips is related to improper processing of parallel operations by the supervisor for enabling or disabling IRQ signals. Exploiting this vulnerability can allow an attacker to cause service failures or execute...

The vulnerability of the Video microprogramming system component in Qualcomm’s embedded chips allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Video microprogramming software component in Qualcomm’s embedded chips relates to the lack of checks for buffer length and reading beyond the memory boundary when processing AVI files. Exploiting this vulnerability can allow an intruder to gain unauthorized access to...

The vulnerability of the kernel of microprogramming software in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the kernel of microprogramming software in Qualcomm’s embedded chips is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause malfunctions or execute arbitrary code...

The vulnerability of the Audio component in Qualcomm’s embedded software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Audio microprogramming component in Qualcomm’s embedded chips is related to a numerical overflow during the playback of WMA format files. Exploiting this vulnerability can allow an attacker to cause system failures or execute arbitrary code...

PT-2022-6732 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Qualcomm embedded platforms affected versions not specified Description: The issue is related to memory corruption that occurs when sending a DRM request in Linux. It is also described as a buffer overflo...

The vulnerability of the Kernel Graphics Support Layer (KGSL) driver in Qualcomm’s embedded chipsets allows a hacker to execute arbitrary code.

The vulnerability of the Kernel Graphics Support Layer KGSL driver in embedded chips from Qualcomm relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of embedded software developed by Qualcomm, caused by buffer overflows, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software in embedded Qualcomm devices arises due to buffer overflows. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information as a result of incorrect input validation in the P...

The vulnerability of embedded software developed by Qualcomm, related to the use of the assert() function or similar operators, allows attackers to trigger a service failure.

The vulnerability of embedded software developed for Qualcomm chips lies in the use of the assert function or similar operators. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2022-6731 · Google +1 · Android +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to uncontrolled resource consumption in the Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue. This can lead to a...

The vulnerability of embedded software developed by Qualcomm, caused by buffer overflows in the heap, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of embedded software developed by Qualcomm stems from buffer overflows in the heap. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the FTM Diag command implementation in Qualcomm’s embedded software allows a hacker to write into the operating system space of the modem.

The vulnerability of the FTM Diag command in Qualcomm’s embedded software implementations arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to write data into the operating system space of the modem...

The vulnerability of embedded software developed by Qualcomm, due to insufficient testing of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software in embedded Qualcomm devices exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the FTM command implementation in Qualcomm’s embedded software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the FTM command implementation in Qualcomm’s embedded software is caused by buffer overflow. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2021-5588

Name of the Vulnerable Software and Affected Versions Qualcomm embedded platform software affected versions not specified Description The issue is related to a possible buffer overflow due to the lack of a parameter length check during the MBSSID scan IE parse. This can be exploited by a remote...

PT-2021-7408 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a buffer over-read when processing avi files, which can lead to information disclosure. This is due to a lack of buffer length checks and...