Null pointer dereference

Out of bounds memcpy can occur by providing the embedded NULL character string and length greater than the actual string length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

Buffer overflow

When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wmaprocessbip, buffer overflow will happen in both cdsismmievalid and qdfnbuftrimtail in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

CVE-2019-2242

Device memory may get corrupted because of buffer overflow/underflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

CVE-2019-10605

Buffer overwrite can occur in IEEE80211 header filling function due to lack of range check of array index received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voic...

CVE-2019-10557

CVE-2019-10557 : Out-of-bounds read in the WLAN wireless driver of the Linux kernel caused by a missing buffer-length check. Affected Qualcomm Snapdragon families include Snapdragon Auto/Consumer Electronics Connectivity/IoT/Industrial IoT/Mobile/Voice & Music across multiple SoCs (e.g., APQ8009,...

CVE-2019-10564

Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2019-10481

CVE-2019-10481 affects Qualcomm WLAN host components in Snapdragon platforms (e.g., APQ8096AU, IPQ4019/IPQ8064/IPQ8074, MDM9607, MSM8996AU, QCA6574AU, QCA8081, QCN7605, SDX55, SM6150/7150/8150) where an out-of-bounds access occurs due to a missing check on a buffer argument coming from WLAN firmw...

CVE-2019-10480

Out of bound write can happen in WMI firmware event handler due to lack of validation of data received from WLAN firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2018-11980

When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wmaprocessbip, buffer overflow will happen in both cdsismmievalid and qdfnbuftrimtail in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

CVE-2019-10618

Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QCA6390...

CVE-2019-2288

Out of bound write in TZ while copying the secure dump structure on HLOS provided buffer as a part of memory dump in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

Design/Logic Flaw

Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

Design/Logic Flaw

Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...

Hardcoded credentials

HLOS could corrupt CPZ page table memory for S1 managed VMs in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845, SDM670, SDM710,...

Design/Logic Flaw

Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QCA6390...

CVE-2019-2319

CVE-2019-2319 affects Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, IoT, Mobile, etc.) where the HLOS may corrupt CPZ page table memory for S1 managed VMs. Root cause is memory corruption in the CPZ page table handling. The CVSSv3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) yield...

CVE-2019-10571

CVE-2019-10571 targets Qualcomm Snapdragon family GPUs/graphics drivers (listed APQ/MSM/SDM devices) with a memory-access flaw: a missing size check in a function can lead to invalid address access. Public references show vendor advisories (Qualcomm November 2019 bulletin) and cross-links in Red ...

CVE-2019-10618

Driver may access an invalid address while processing IO control due to lack of check of address validation in Snapdragon Connectivity in QCA6390...

CVE-2019-10618

CVE-2019-10618 affects Qualcomm Snapdragon Connectivity on the QCA6390, where the driver may access an invalid address while processing an IOCTL due to insufficient address validation. The issue is documented across multiple feeds (NVD, Red Hat, CVE lists) with a low to medium overall risk profil...

CVE-2019-10545

CVE-2019-10545 is a Qualcomm/ Snapdragon GPU-related vulnerability: a null pointer dereference in the kernel due to a missing LLC support check in the GPU. Affected are Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, and Snapdragon Voice ...