Vulnerabilities > Qualcomm

DATE CVE VULNERABILITY TITLE RISK
2025-02-03 CVE-2024-49838 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure while parsing the OCI IE with invalid length.
network
low complexity
qualcomm CWE-125
7.5
2025-02-03 CVE-2024-49839 Out-of-bounds Read vulnerability in Qualcomm products
Memory corruption during management frame processing due to mismatch in T2LM info element.
network
low complexity
qualcomm CWE-125
critical
9.8
2025-02-03 CVE-2024-49840 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.
local
low complexity
qualcomm CWE-119
7.8
2025-02-03 CVE-2024-49843 Improper Validation of Array Index vulnerability in Qualcomm products
Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.
local
low complexity
qualcomm CWE-129
7.8
2025-01-06 CVE-2024-21464 Classic Buffer Overflow vulnerability in Qualcomm products
Memory corruption while processing IPA statistics, when there are no active clients registered.
local
low complexity
qualcomm CWE-120
7.8
2025-01-06 CVE-2024-23366 Out-of-bounds Read vulnerability in Qualcomm products
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
local
low complexity
qualcomm CWE-125
5.5
2025-01-06 CVE-2024-33041 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
local
low complexity
qualcomm CWE-787
7.8
2025-01-06 CVE-2024-33055 Use After Free vulnerability in Qualcomm products
Memory corruption while invoking IOCTL calls to unmap the DMA buffers.
local
low complexity
qualcomm CWE-416
7.8
2025-01-06 CVE-2024-33059 Use After Free vulnerability in Qualcomm products
Memory corruption while processing frame command IOCTL calls.
local
low complexity
qualcomm CWE-416
7.8
2025-01-06 CVE-2024-33061 Out-of-bounds Read vulnerability in Qualcomm products
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.
local
low complexity
qualcomm CWE-125
5.5