CVE-2019-10501

The CVE-2019-10501 entry affects Qualcomm Snapdragon volumes listener library across multiple Snapdragon platforms. Root cause: use-after-free caused by improper input validation in the volume listener component. Reported impact indicates partial confidentiality, integrity, and availability at a ...

CVE-2019-10497

Technical details about CVE-2019-10497 are not publicly provided in the supplied documents. No specifics on affected products, root cause, or fixes are available here. Monitor for updates.

CVE-2019-10497

Use after free issue occurs If another instance of open for voicesvc node has been called from application without closing the previous one. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

CVE-2019-2284

Possible use-after-free issue due to a race condition while calling camera ioctl concurrently in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, QCS405, QCS605, Qualcomm 215, SD 425, SD 439 / SD...

CVE-2019-10492

CVE-2019-10492 describes a vulnerability in boot image verification where AVB verification can be bypassed for Qualcomm Snapdragon-based platforms (Snapdragon Auto, Mobile, Wearables) across multiple SoCs (MDM9607, MSM8909W, Qualcomm 215, SD series and SDM439). The issue is a local vulnerability ...

CVE-2019-10489

CVE-2019-10489 involves a possible null-pointer dereference when parsing an AVI clip during copy in Qualcomm Snapdragon drivers across many Snapdragon products. Root cause: null pointer in parsing/copy path. Impact: high, with potential crash (availability) and no confidentiality/integrity impact...

CVE-2019-10539

CVE-2019-10539 affects Qualcomm WLAN firmware in a wide range of Snapdragon chipsets (e.g., IPQ8074, MSM8xxx, QCA... and SD-series) where a missing length check when parsing the extended cap IE header length can trigger a buffer overflow. Reports describe this as a potential remote WLAN/firmware ...

CVE-2019-10498

CVE-2019-10498 describes a buffer overflow in a Qualcomm closed‑source component triggered when a client sends more than 5 io_vec requests to the server. Affected products span Snapdragon Auto/Compute, Snapdragon IoT devices, and related Snapdragon/SDM families (e.g., SD 210–855, various Snapdrag...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20162)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. An input validation error vulnerability exists in Audio in multiple Qualcomm products. The vulnerability...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20149)

The Qualcomm MDM9650 and others are a central processing unit CPU product of Qualcomm Incorporated USA. An input validation error vulnerability exists in Kernel in multiple Qualcomm products. The vulnerability originates from a networked system or product that does not properly validate input dat...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20151)

The Qualcomm MDM9206 and others are a central processing unit CPU product of Qualcomm Incorporated. An input validation error vulnerability exists in a number of Qualcomm products, which could be exploited by an attacker to cause, among other things, a buffer overflow or heap overflow...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20154)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. An input validation error vulnerability exists in Audio in multiple Qualcomm products. The vulnerability...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20159)

The Qualcomm MDM9607, among others, is a central processing unit CPU product of Qualcomm Incorporated USA. An input validation error vulnerability exists in HLOS in multiple Qualcomm products. The vulnerability originates from a network system or product that does not properly validate incoming...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20153)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. Multiple Qualcomm products are vulnerable to input validation errors, and no detailed vulnerability detail...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20160)

Qualcomm MDM9607 and others are products of Qualcomm Incorporated, U.S.A. The MDM9607 is a central processing unit CPU product.The Qualcomm MDM9206 is a central processing unit CPU product.The SDX20 is a modem. An input validation error vulnerability exists in multiple Qualcomm products. The...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20155)

The Qualcomm MDM9640 and others are a central processing unit CPU product of Qualcomm Incorporated USA. An input validation error vulnerability exists in Kernel in multiple Qualcomm products. The vulnerability originates from a networked system or product that does not properly validate input dat...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20152)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. Multiple Qualcomm products are vulnerable to input validation errors, and no detailed vulnerability detail...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20150)

Qualcomm MDM9607 and others are products of Qualcomm Incorporated.The MDM9607 is a central processing unit CPU product.The Qualcomm MDM9150 is a central processing unit CPU product.The SDX20 is a modem.The Qualcomm MDM9150 is a central processing unit CPU product.The Qualcomm MDM9150 is a central...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20161)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. An input validation error vulnerability exists in HLOS in multiple Qualcomm products. The vulnerability...

Qualcomm WLAN Chip Remote Code Execution Vulnerability

The Qualcomm WLAN chip is a dedicated chip for processing WLAN/WIFI protocols on Qualcomm platforms and is part of the Qualcomm Baseband subsystem, which is used to increase the speed and performance of WLAN/WIFI processing and reduce energy consumption. A remote code execution vulnerability exis...