CVE-2023-24851 Buffer Copy Without Checking Size of Input in WLAN HOST

Memory Corruption in WLAN HOST while parsing QMI response message from firmware...

CVE-2023-24851

CVE-2023-24851 is a memory corruption vulnerability in the WLAN HOST component when parsing a QMI response from firmware. It is listed for Qualcomm WLAN and appears in Qualcomm’s July 2023 bulletin; CVSS v3.1 base score 7.8 (LOCAL, LOW attack complexity, HIGH impact on confidentiality, integrity,...

CVE-2022-40533 Untrusted Pointer Dereference in Core

Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request...

CVE-2022-40533

CVE-2022-40533 describes a transient Denial of Service caused by an untrusted pointer dereference in the core when sending USB QMI requests. The vulnerability affects Qualcomm chipset components (including closed-source parts) and is caused by dereferencing an untrusted pointer in the USB QMI han...

CVE-2022-25709

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg...

Memory corruption

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg...

CVE-2022-25709 Use of Out-of-range Pointer Offset in Data Modem

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg...

CVE-2022-25709 Use of Out-of-range Pointer Offset in Data Modem

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg...

SUSE CVE-2017-16650

The qmiwwanbind function in drivers/net/usb/qmiwwan.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service divide-by-zero error and system crash or possibly have unspecified other impact via a crafted USB device...

CVE-2022-33248

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http...

Integer overflow

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http...

CVE-2022-33248 Integer overflow to buffer overflow in User Identity Module

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http...

CVE-2020-11292

Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

Buffer overflow

Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2020-11292

CVE-2020-11292 is a heap overflow in Qualcomm's QMI Voice API exposed by the MSM modem (MSM/QMI Voice service). The qmi_voicei_srvcc_call_config_req handler may overflow modem heap if the number of calls field is set high, enabling potential remote code execution via a malicious Android app. Thre...

CVE-2020-11292

Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

Qualcomm Chip Bug Opens Android Fans to Eavesdropping

A vulnerability in a 5G modem data service could allow mobile hackers to remotely target Android users by injecting malicious code into a phone’s modem – gaining the ability to execute code, access mobile users’ call histories and text messages, and eavesdrop on phone calls. That’s according to...

Heap overflow

In loadloggingconfig of qmivsservice.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9...

CVE-2015-9119

Technical details about CVE-2015-9119 are not publicly provided in the connected documents. Affected products, exploitation, and fixes are not specified here. Monitor for updates from the sources in the Initial document (Android bulletin, NVD) for remediation.

CVE-2015-9119

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD...