Qualcomm WIN TZ FW Buffer Error Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. The Qualcomm WIN TZ FW suffers from a buffer error vulnerability that stems from a lack of validation of pointer parameters passed to the TrustZone BSP, resulting in memory corruption. The following products...

Buffer Error Vulnerability in Multiple Qualcomm Products

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A buffer error vulnerability exists in several Qualcom...

Qualcomm Qualcomm Wlan Firmware Buffer Error Vulnerability

Qualcomm Wlan Firmware is a Bluetooth support firmware from Qualcomm, Inc. A buffer error vulnerability exists in Qualcomm WLAN Firmware, which results in a buffer over-read due to a failure to check the length of incoming messages. The following products and versions are affected: AQT1000, AR803...

Qualcomm Qualcomm Dsp Service Resource Management Error Vulnerability

Qualcomm Dsp Service is a digital signal processor from Qualcomm Incorporated that meets the needs of mobile platforms for multimedia and modem functionality, deep embedded processing. pm3003a, pm4125, pm439, pm456, pm6125, pm6150, pm6150a, pm6150l, pm6250, pm6350, pm640a, pm640l, pm640p, pm660,...

Qualcomm Automotive Telematics Security Breach

Qualcomm Automotive Telematics is a support firmware for automotive telematics from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Automotive Telematics where a newly created buffer is read again from mmc without validation. mdm9630, mdm9640, mdm9650, mdm9655, msm8909w,...

Qualcomm WIN TZ FW Buffer Error Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. The Qualcomm WIN TZ FW suffers from a buffer error vulnerability that stems from a lack of validation of pointer parameters passed to the Trustzone BSP, resulting in memory corruption. The following products...

Qualcomm Qualcomm Wlan Firmware Buffer Error Vulnerability

Qualcomm Wlan Firmware is a Bluetooth support firmware from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm WLAN Firmware that originates from an out-of-bounds read if the EAPOL key length is less than expected when processing NAN shared key descriptor attributes. The...

Qualcomm Qualcomm WIN TZ FW Buffer Error Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. A security vulnerability exists in Qualcomm WIN TZ FW, which results in memory corruption due to a lack of checking the validation of buffer pointers passed to trustzone. The following products and versions...

Qualcomm Video Buffer Error Vulnerability

Qualcomm Video is a Qualcomm Incorporated USA video component used in Qualcomm products. A buffer error vulnerability exists in Qualcomm Video, which stems from a failure to check the length of data received from a user, and could result in a heap overflow when parsing NAL headers. The following...

Qualcomm Wlan Firmware Buffer Error Vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A buffer error vulnerability exists in Qualcomm WLAN Firmware, which arises from a lack of checking of body and header lengths during WLAN frame parsing, which could result in out-of-bounds reads. The following...

Qualcomm Qualcomm Camera Driver Resource Management Error Vulnerability

Qualcomm Camera Driver is a camera driver from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Camera Driver that stems from incorrectly setting the ioctl command size to the size of a pointer and not allocating enough storage for a copy of the user...

Qualcomm WIN TZ FW Buffer Error Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. The Qualcomm WIN TZ FW suffers from a buffer error vulnerability that stems from a lack of validation of pointer parameters passed to the Trustzone BSP, resulting in memory corruption. The following products...

Qualcomm Qualcomm Graphics Resource Management Error Vulnerability

Qualcomm Graphics is a graphics support firmware for use on processors from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Graphics, which arises from attachments that are not properly cleaned. pm3003a, pm4125, pm439, pm456, pm6125, pm6150, pm6150a, pm6150l, pm6250, pm6350...

Qualcomm Wlan Hal Input Validation Error Vulnerability

Qualcomm Wlan Hal is a Bluetooth support firmware from Qualcomm Incorporated. APQ8096AU, AQT1000, AR7420, AR8031, AR8035, AR8151, AR9380, CSR6030, CSR8811, CSRA6620, CSRA6640, CSRB31024, IPQ4018, IPQ4019, IPQ4028, IPQ4029. ipq5010, ipq5018, ipq6000, ipq6005, ipq6010, ipq6018, ipq6028, ipq8064,...

Qualcomm Qualcomm Core Input Validation Error Vulnerability

Qualcomm Core is a core support firmware used on processors from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Core that stems from a dci client registration failure that does not mitigate a resource leak during dci client registration due to reference counting...

Qualcomm Qualcomm Core Security Vulnerability

Qualcomm Core is a core support firmware used on processors from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Core Services, which arises from improper release of uninitialized memory. The following products and versions are affected: APQ8017, APQ8053, AQT1000, MSM8917,...

Qualcomm WIN TZ FW Security Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. A security vulnerability exists in Qualcomm WIN TZ FW, which arises from an image address being dereferenced prior to validation of its scope, and affects the following products and versions: AR7420, AR9580,...

Qualcomm WIN TZ FW Buffer Error Vulnerability

Qualcomm WIN TZ FW is a Qualcomm Incorporated USA support firmware for use on processors. The Qualcomm WIN TZ FW suffers from a buffer error vulnerability that stems from an information disclosure issue caused by not validating pointer parameters passed to the TZ BSP. The following products and...

Qualcomm Graphics Input Validation Error Vulnerability

Qualcomm Graphics is a graphics support firmware for use on processors from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Graphics, which arises from memory corruption due to incorrect check return errors. The following products and versions are affected:...

Android Security Bulletin—January 2021Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2021-01-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...