DEBIAN-CVE-2024-35994

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: Fix memory related IO errors and crashes It turns out that while the QSEECOM APPSEND command has specific fields for request and response buffers, uefisecapp expects them both to be in a single memory...

DEBIAN-CVE-2023-52684

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: qseecom: fix memory leaks in error paths Fix instances of returning error codes directly instead of jumping to the relevant labels where memory allocated for the SCM calls would be freed...

PT-2023-24146 · Qualcomm · 315 5G Iot Modem Firmware +171

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in HLOS when IOCTL calls are invoked from user-space. This can potentially lead to unintended system behavior or...

PT-2023-21796 · Qualcomm · 315 5G Iot Modem Firmware +203

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the WLAN HAL when parsing the Rx buffer during the processing of TLV payload. This can potentially lead to...

PT-2023-8969 · Qualcomm · Qualcomm Embedded Platform Dsp Firmware

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption in graphics when importing a file. It is also described as a vulnerability in Qualcomm embedded platform...

Qualcomm Wlan Firmware Security Vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Wlan Firmware that could result in a denial of service due to improper authentication when processing host WMI commands...

Qualcomm Wlan Firmware Input Validation Error Vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Wlan Firmware that stems from a failure to verify key lengths prior to use, which may result in memory corruption...

Qualcomm WIN TZ FW Buffer Error Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. The Qualcomm WIN TZ FW suffers from a buffer error vulnerability that stems from an information disclosure issue caused by not validating pointer parameters passed to the TZ BSP. The following products and...

Qualcomm WIN TZ FW Security Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. A security vulnerability exists in Qualcomm WIN TZ FW, which arises from an image address being dereferenced prior to validation of its scope, and affects the following products and versions: AR7420, AR9580,...

CVE-2017-17764

In all Qualcomm products with Android releases from CAF using the Linux kernel, the numfailureinfo value from firmware is not properly validated in wmarxaggrfailureeventhandler so that an integer overflow vulnerability in a buffer size calculation may potentially lead to a buffer overflow...