Qualcomm, Inc. All Qualcomm products
194 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2017-9685 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can lead to a Use After Fr | HIGH 8.1 | 0.5 % | ||
| CVE-2017-9684 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After Fre | HIGH 7.0 | 0.4 % | ||
| CVE-2017-9682 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a | MEDIUM 4.7 | 0.3 % | ||
| CVE-2017-9680 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a dr | HIGH 7.5 | 0.6 % | ||
| CVE-2017-9679 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-terminated, kernel memory | HIGH 7.5 | 0.6 % | ||
| CVE-2017-9678 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur d | HIGH 7.8 | 0.5 % | ||
| CVE-2017-7364 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_da | CRITICAL 9.8 | 0.9 % | ||
| CVE-2017-8272 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properly | HIGH 7.8 | 0.4 % | ||
| CVE-2017-8270 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a | HIGH 7.0 | 0.3 % | ||
| CVE-2017-8268 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command bu | HIGH 7.8 | 0.5 % | ||
| CVE-2017-8267 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially lead | HIGH 7.0 | 0.4 % | ||
| CVE-2017-8266 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leadin | HIGH 7.0 | 0.3 % | ||
| CVE-2017-8265 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to | HIGH 7.0 | 0.3 % | ||
| CVE-2017-8263 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a | HIGH 7.8 | 0.5 % | ||
| CVE-2017-8262 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race conditi | HIGH 7.0 | 0.3 % | ||
| CVE-2017-8261 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentially | HIGH 7.8 | 0.4 % | ||
| CVE-2017-8260 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validati | HIGH 7.8 | 0.6 % | ||
| CVE-2017-8257 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register | HIGH 7.8 | 0.3 % | ||
| CVE-2017-8256 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more | HIGH 7.8 | 0.4 % | ||
| CVE-2017-8255 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot. | HIGH 7.8 | 0.5 % | ||
| CVE-2017-8254 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked | MEDIUM 5.5 | 0.4 % | ||
| CVE-2017-8253 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid m | HIGH 7.8 | 0.5 % | ||
| CVE-2016-5872 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validate | CRITICAL 9.8 | 0.9 % | ||
| CVE-2016-5871 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists | CRITICAL 9.8 | 1.0 % | ||
| CVE-2016-10391 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for val | CRITICAL 9.8 | 0.9 % | ||
| CVE-2016-10389 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the | HIGH 7.8 | 0.5 % | ||
| CVE-2016-10388 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-part | CRITICAL 9.8 | 0.9 % | ||
| CVE-2016-10383 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI. | HIGH 8.1 | 0.6 % | ||
| CVE-2016-10382 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient. | CRITICAL 9.8 | 0.9 % | ||
| CVE-2016-10347 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validat | CRITICAL 9.8 | 0.9 % | ||
| CVE-2016-10346 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor. | CRITICAL 9.8 | 0.9 % | ||
| CVE-2016-10344 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially pos | CRITICAL 9.8 | 0.9 % | ||
| CVE-2016-10343 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9073 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone sy | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9072 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone sy | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9071 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone sysca | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9070 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone sysca | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9069 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, the Secure File System can become corrupted. | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9068 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated. | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9067 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a potential compiler optimization of memset() is addressed. | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9062 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists | CRITICAL 9.8 | 1.0 % | ||
| CVE-2015-9061 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading t | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9060 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call. | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9055 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a memory managemen | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9054 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding. | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9053 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the processing of | CRITICAL 9.8 | 1.0 % | ||
| CVE-2015-9052 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reac | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9051 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reac | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9050 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access c | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9049 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of certain response | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9048 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9047 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GNSS when performing a scan after | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9046 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reac | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9045 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a buffer can be overfl | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9044 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reac | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9043 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a time | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9042 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when processing a QMI | CRITICAL 9.8 | 1.0 % | ||
| CVE-2015-9041 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when performing WCDMA | CRITICAL 9.8 | 1.0 % | ||
| CVE-2015-9040 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in a GERAN API. | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9039 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in eMBMS where an assertion can be re | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9038 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end. | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9037 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read may occur in the processing of a downlink | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9036 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, an incorrect length is used to clear a memory buffer resulti | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9035 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a memory buffer fails to be freed after it is no longer need | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-9034 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a string can fail to be null-terminated in SIP leading to a | CRITICAL 9.8 | 1.0 % | ||
| CVE-2015-8596 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths is missing in malware protectio | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-8595 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in digital televisio | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-8592 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not validated prior to being dereferenced poten | CRITICAL 9.8 | 0.9 % | ||
| CVE-2015-0575 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, insecure ciphersuites were included in the default configura | CRITICAL 9.8 | 0.6 % | ||
| CVE-2014-9980 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to | CRITICAL 9.8 | 0.9 % | ||
| CVE-2014-9979 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call poten | CRITICAL 9.8 | 0.9 % | ||
| CVE-2014-9978 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service. | CRITICAL 9.8 | 1.0 % | ||
| CVE-2014-9977 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM. | CRITICAL 9.8 | 1.0 % | ||
| CVE-2014-9975 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk Enc | CRITICAL 9.8 | 0.5 % | ||
| CVE-2014-9974 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster. | CRITICAL 9.8 | 0.9 % | ||
| CVE-2014-9973 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRM | CRITICAL 9.8 | 0.9 % | ||
| CVE-2014-9969 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client may use an insecure cryptographic algorithm. | CRITICAL 9.8 | 0.4 % | ||
| CVE-2014-9968 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the UIMDIAG interf | CRITICAL 9.8 | 1.0 % | ||
| CVE-2014-9411 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially pos | CRITICAL 9.8 | 0.9 % | ||
| CVE-2017-8243 | Android for MSM, Firefox OS for MSM, QRD Android | A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when processing a firmware ima | HIGH 7.8 | 0.5 % | ||
| CVE-2017-6421 | Android for MSM, Firefox OS for MSM, QRD Android | In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be contro | HIGH 8.8 | 0.5 % | ||
| CVE-2016-5867 | Android for MSM, Firefox OS for MSM, QRD Android | In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could | HIGH 7.0 | 0.6 % | ||
| CVE-2016-5864 | Android for MSM, Firefox OS for MSM, QRD Android | In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from user | HIGH 7.8 | 0.7 % | ||
| CVE-2016-5863 | Android for MSM, Firefox OS for MSM, QRD Android | In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing whi | HIGH 7.8 | 0.6 % | ||
| CVE-2016-5862 | Android for MSM, Firefox OS for MSM, QRD Android | When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, | HIGH 7.0 | 0.5 % | ||
| CVE-2016-5861 | Android for MSM, Firefox OS for MSM, QRD Android | In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace is | HIGH 8.8 | 0.5 % | ||
| CVE-2016-5860 | Android for MSM, Firefox OS for MSM, QRD Android | In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very la | HIGH 7.0 | 0.6 % | ||
| CVE-2016-5859 | Android for MSM, Firefox OS for MSM, QRD Android | In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very lar | HIGH 7.0 | 0.6 % | ||
| CVE-2016-5858 | Android for MSM, Firefox OS for MSM, QRD Android | In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a user supplies a value too large, | MEDIUM 4.7 | 0.5 % | ||
| CVE-2016-5855 | Android for MSM, Firefox OS for MSM, QRD Android | In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a user-supplied buffer is casted to a structu | MEDIUM 4.7 | 0.5 % | ||
| CVE-2016-5854 | Android for MSM, Firefox OS for MSM, QRD Android | In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, kernel heap memory can be exposed to userspac | MEDIUM 4.7 | 0.5 % | ||
| CVE-2016-5853 | All Android releases from CAF using the Linux kernel | In an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel, when a sanity check encounters a length v | HIGH 7.0 | 0.8 % | ||
| CVE-2016-5347 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio dri | MEDIUM 4.7 | 0.6 % | ||
| CVE-2017-8273 | All Android releases from CAF using the Linux kernel | In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command when verified boot fea | HIGH 7.8 | 0.4 % | ||
| CVE-2017-8271 | All Android releases from CAF using the Linux kernel | Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF using the Linux kern | HIGH 7.8 | 0.4 % | ||
| CVE-2017-8269 | All Android releases from CAF using the Linux kernel | Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the Linux | MEDIUM 5.5 | 0.5 % | ||
| CVE-2017-8264 | All Android releases from CAF using the Linux kernel | A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases from CAF using the Lin | HIGH 7.8 | 0.4 % | ||
| CVE-2017-8259 | All Android releases from CAF using the Linux kernel | In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow can occur as the va | HIGH 7.8 | 0.5 % | ||
| CVE-2017-8258 | All Android releases from CAF using the Linux kernel | An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potentially occur in a came | MEDIUM 5.5 | 0.4 % | ||
| CVE-2017-8242 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory | MEDIUM 5.9 | 0.3 % | ||
| CVE-2017-8241 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due to an incorrect messa | HIGH 7.8 | 0.4 % | ||
| CVE-2017-8240 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability. | HIGH 7.8 | 0.5 % | ||
| CVE-2017-8239 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentia | MEDIUM 5.5 | 0.4 % | ||
| CVE-2017-8238 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function. | HIGH 7.8 | 0.4 % | ||
| CVE-2017-8237 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image. | HIGH 7.8 | 0.4 % | ||
| CVE-2017-8236 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver. | HIGH 7.8 | 0.4 % | ||
| CVE-2017-8235 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protected. | MEDIUM 5.5 | 0.3 % | ||
| CVE-2017-8234 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function. | HIGH 7.8 | 0.4 % | ||
| CVE-2017-8233 | All Android releases from CAF using the Linux kernel | In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array po | HIGH 7.8 | 0.4 % | ||
| CVE-2017-7373 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver. | HIGH 7.8 | 0.4 % | ||
| CVE-2017-7372 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or | HIGH 7.0 | 0.3 % | ||
| CVE-2017-7371 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned o | HIGH 7.8 | 0.4 % | ||
| CVE-2017-7370 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free c | HIGH 7.0 | 0.3 % | ||
| CVE-2017-7369 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to | HIGH 7.8 | 0.5 % | ||
| CVE-2017-7368 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver. | HIGH 7.0 | 0.3 % | ||
| CVE-2017-7367 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image. | HIGH 7.8 | 0.4 % | ||
| CVE-2017-7365 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated. | HIGH 7.8 | 0.4 % | ||
| CVE-2016-10342 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler. | HIGH 7.8 | 0.7 % | ||
| CVE-2016-10341 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended. | HIGH 7.8 | 0.6 % | ||
| CVE-2016-10340 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall h | HIGH 7.8 | 0.7 % | ||
| CVE-2016-10339 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore. | HIGH 7.1 | 0.5 % | ||
| CVE-2016-10338 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing. | HIGH 7.8 | 0.6 % | ||
| CVE-2016-10337 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed. | MEDIUM 5.5 | 0.5 % | ||
| CVE-2016-10336 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot. | MEDIUM 5.5 | 0.5 % | ||
| CVE-2016-10335 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, libtomcrypt was updated. | MEDIUM 5.5 | 0.5 % | ||
| CVE-2016-10334 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten. | MEDIUM 5.5 | 0.5 % | ||
| CVE-2016-10333 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS. | MEDIUM 5.5 | 0.5 % | ||
| CVE-2016-10332 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications. | MEDIUM 5.5 | 0.5 % | ||
| CVE-2015-9033 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer. | HIGH 7.8 | 0.6 % | ||
| CVE-2015-9032 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications. | LOW 3.3 | 0.5 % | ||
| CVE-2015-9031 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP. | LOW 3.3 | 0.5 % | ||
| CVE-2015-9030 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication. | HIGH 7.8 | 0.8 % | ||
| CVE-2015-9029 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem memory. | HIGH 7.8 | 0.6 % | ||
| CVE-2015-9028 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine. | HIGH 7.8 | 0.7 % | ||
| CVE-2015-9027 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. | HIGH 7.8 | 0.6 % | ||
| CVE-2015-9026 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. | HIGH 7.8 | 0.6 % | ||
| CVE-2015-9025 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application. | HIGH 7.8 | 0.7 % | ||
| CVE-2015-9024 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications. | MEDIUM 5.5 | 0.5 % | ||
| CVE-2015-9023 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. | HIGH 7.8 | 0.7 % | ||
| CVE-2015-9022 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs. | HIGH 7.0 | 0.5 % | ||
| CVE-2015-9021 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled. | MEDIUM 5.5 | 0.5 % | ||
| CVE-2015-9020 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory. | HIGH 7.8 | 0.6 % | ||
| CVE-2014-9967 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. | HIGH 7.8 | 0.6 % | ||
| CVE-2014-9966 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure | HIGH 7.0 | 0.4 % | ||
| CVE-2014-9965 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call. | HIGH 7.8 | 0.6 % | ||
| CVE-2014-9964 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality. | HIGH 7.8 | 0.6 % | ||
| CVE-2014-9963 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM. | HIGH 7.8 | 0.7 % | ||
| CVE-2014-9962 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a DRM provisioning command. | HIGH 7.8 | 0.6 % | ||
| CVE-2014-9961 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on | HIGH 7.8 | 0.6 % | ||
| CVE-2014-9960 | All Android releases from CAF using the Linux kernel | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. | HIGH 7.8 | 0.7 % | ||
| CVE-2016-10297 | All Android releases from CAF using the Linux kernel | In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potenti | HIGH 7.0 | 0.3 % | ||
| CVE-2015-9007 | All Android releases from CAF using the Linux kernel | In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist. | HIGH 7.8 | 0.5 % | ||
| CVE-2015-9006 | All Android releases from CAF using the Linux kernel | In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could pote | HIGH 7.8 | 0.5 % | ||
| CVE-2015-9005 | All Android releases from CAF using the Linux kernel | In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentially | HIGH 7.8 | 0.6 % | ||
| CVE-2014-9952 | All Android releases from CAF using the Linux kernel | In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist. | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9951 | All Android releases from CAF using the Linux kernel | In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepancy vulnerability could | MEDIUM 5.5 | 0.4 % | ||
| CVE-2014-9950 | All Android releases from CAF using the Linux kernel | In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist. | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9949 | All Android releases from CAF using the Linux kernel | In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially exist | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9948 | All Android releases from CAF using the Linux kernel | In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9947 | All Android releases from CAF using the Linux kernel | In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potentially exist. | MEDIUM 5.5 | 0.4 % | ||
| CVE-2014-9946 | All Android releases from CAF using the Linux kernel | In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist. | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9945 | All Android releases from CAF using the Linux kernel | In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist. | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9944 | All Android releases from CAF using the Linux kernel | In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability coul | HIGH 7.8 | 0.6 % | ||
| CVE-2014-9943 | All Android releases from CAF using the Linux kernel | In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist. | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9942 | All Android releases from CAF using the Linux kernel | In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could potentially exist. | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9941 | All Android releases from CAF using the Linux kernel | In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerabilit | HIGH 7.0 | 0.4 % | ||
| CVE-2014-9930 | All Android releases from CAF using the Linux kernel | In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist. | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9929 | All Android releases from CAF using the Linux kernel | In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially exist | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9928 | All Android releases from CAF using the Linux kernel | In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potential | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9927 | All Android releases from CAF using the Linux kernel | In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially | HIGH 7.8 | 0.4 % | ||
| CVE-2014-9926 | All Android releases from CAF using the Linux kernel | In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist. | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9925 | All Android releases from CAF using the Linux kernel | In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9924 | All Android releases from CAF using the Linux kernel | In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur. | HIGH 7.8 | 0.5 % | ||
| CVE-2014-9923 | All Android releases from CAF using the Linux kernel | In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentially | HIGH 7.8 | 0.5 % | ||
| CVE-2016-10242 | All Android releases from CAF using the Linux kernel | A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linu | HIGH 7.0 | 0.4 % | ||
| CVE-2016-10239 | All Android releases from CAF using the Linux kernel | In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input | HIGH 7.8 | 0.7 % | ||
| CVE-2016-10238 | All Android releases from CAF using the Linux kernel | In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue. | HIGH 7.8 | 0.6 % | ||
| CVE-2016-10237 | All Android releases from CAF using the Linux kernel | If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android | HIGH 7.8 | 0.6 % | ||
| CVE-2015-9003 | All Android releases from CAF using the Linux kernel | In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel. | HIGH 7.8 | 0.6 % | ||
| CVE-2015-9002 | All Android releases from CAF using the Linux kernel | In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the | HIGH 7.8 | 0.6 % | ||
| CVE-2015-9001 | All Android releases from CAF using the Linux kernel | In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. | MEDIUM 5.5 | 0.5 % | ||
| CVE-2015-9000 | All Android releases from CAF using the Linux kernel | In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using th | HIGH 7.8 | 0.6 % | ||
| CVE-2015-8999 | All Android releases from CAF using the Linux kernel | In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an | HIGH 7.8 | 0.7 % | ||
| CVE-2015-8998 | All Android releases from CAF using the Linux kernel | In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. | HIGH 7.8 | 0.6 % | ||
| CVE-2015-8997 | All Android releases from CAF using the Linux kernel | In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using | HIGH 7.0 | 0.4 % | ||
| CVE-2015-8996 | All Android releases from CAF using the Linux kernel | In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using t | HIGH 7.0 | 0.4 % | ||
| CVE-2015-8995 | All Android releases from CAF using the Linux kernel | In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. | HIGH 7.8 | 0.6 % | ||
| CVE-2014-9937 | All Android releases from CAF using the Linux kernel | In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel. | HIGH 7.8 | 0.7 % | ||
| CVE-2014-9936 | All Android releases from CAF using the Linux kernel | In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CA | HIGH 7.0 | 0.6 % | ||
| CVE-2014-9935 | All Android releases from CAF using the Linux kernel | In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases | HIGH 7.8 | 0.7 % | ||
| CVE-2014-9934 | All Android releases from CAF using the Linux kernel | A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding. | HIGH 7.8 | 0.4 % | ||
| CVE-2014-9933 | All Android releases from CAF using the Linux kernel | Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not hav | HIGH 7.8 | 0.6 % | ||
| CVE-2014-9932 | All Android releases from CAF using the Linux kernel | In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an impr | HIGH 7.8 | 0.6 % | ||
| CVE-2014-9931 | All Android releases from CAF using the Linux kernel | A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app regi | HIGH 7.8 | 0.7 % |