PT-2023-13271 · Qualcomm · Snapdragon +45

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to memory corruption caused by a stack-based buffer overflow in the core when sending a command from a USB device of large size. Recommendations: At the moment, there ...

Android Security Bulletin—March 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2023-03-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

SUSE CVE-2023-22996

In the Linux kernel before 5.17.2, drivers/soc/qcom/qcomaoss.c does not release an offinddevicebynode reference after use, e.g., with putdevice...

AZL-13823 CVE-2023-22996 affecting package kernel for versions less than 5.15.102.1-1

In the Linux kernel before 5.17.2, drivers/soc/qcom/qcomaoss.c does not release an offinddevicebynode reference after use, e.g., with putdevice...

UBUNTU-CVE-2023-22996

In the Linux kernel before 5.17.2, drivers/soc/qcom/qcomaoss.c does not release an offinddevicebynode reference after use, e.g., with putdevice...

The vulnerability of the implementation of the WMI_REQUEST_STATS_CMDID command in Qualcomm’s embedded devices allows a hacker to execute arbitrary code.

The vulnerability of the WMIREQUESTSTATSCMDID implementation in Qualcomm’s embedded devices arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of microprogramming software in embedded Qualcomm chips arises from improper input validation in automotive systems, allowing attackers to execute arbitrary code.

The vulnerability of microprogramming software in embedded Qualcomm chips exists due to improper input validation in automotive systems. Exploiting this vulnerability can allow attackers to execute arbitrary code...

SUSE CVE-2014-4322

drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not validate certain offset, length, and base values within an ioctl call, which allows attackers to gain privileges or...

SUSE CVE-2015-9185

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD...

SUSE CVE-2016-5857

The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR1094140...

SUSE CVE-2016-5863

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses...

SUSE CVE-2017-6421

In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controlled by the user and can lead to a buffer overflow...

SUSE CVE-2017-8281

In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while querying event status via DCI...

SUSE CVE-2017-9725

In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail...

SUSE CVE-2019-2308

User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go through to the remote subsystem in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150,...

SUSE CVE-2021-3743

An out-of-bounds OOB memory read flaw was found in the Qualcomm IPC router protocol in the Linux kernel. A missing sanity check allows a local attacker to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this...

PT-2023-35138 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.91 Description: The issue is related to the EDAC/qcom driver in the Linux Kernel, where llcc driv data is passed as edac device ctl info's pvt info. The actual impact and attack plausibility have not yet...

CVE-2022-33243

Memory corruption due to improper access control in Qualcomm IPC...

Improper access control

Memory corruption due to improper access control in Qualcomm IPC...

Qualcomm 芯片安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm chip wlan driver, which stem...