CVE-2019-14091

CVE-2019-14091 describes a double-free vulnerability in Qualcomm Snapdragon Neural Processing Unit (NPU) involving a race condition caused by insufficient resource locking. Affected are multiple Snapdragon platforms including Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, Mobile, and Voi...

CVE-2019-14080

CVE-2019-14080 is a high-severity, Qualcomm‑related vulnerability affecting Snapdragon modem data in multiple SoCs. Root cause: out-of-bounds write from lack of array index validation while parsing SDP attributes for SAR. Impact could be remote execution via network (per CVSS, network attack, cri...

CVE-2019-14092

CVE-2019-14092 affects Qualcomm’s Snapdragon-based platforms (Snapdragon Industrial IOT and Snapdragon Mobile on devices like MDM9206/9207C/9607 and other listed chips). The vulnerability stems from System Services exporting services without proper permission, leading to potential information exp...

CVE-2019-14076

Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired...

CVE-2019-14073

Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when processing large data or non-standard feedback messages in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

CVE-2019-14073

CVE-2019-14073 is a Qualcomm/Qualcomm closed‑source component vulnerability in the modem data path where RTCP messages are copied into an output buffer without verifying the destination size, potentially enabling remote stack overflow when processing large or non‑standard RTCP data. Public docume...

CVE-2019-14076

CVE-2019-14076 is a buffer overflow in Snapdragon subsample data length processing caused by missing input validation, affecting multiple Snapdragon lines (e.g., APQ8009, APQ8098, Kamorta, MDM9xx, SDM67x/SDM71x/SDM84x/SDX24/SDX55, etc.). Root cause: insufficient validation in subsample processing...

CVE-2019-14047

CVE-2019-14047 affects Qualcomm/Snapdragon IPA driver: a lack of input validation for the rule ID when processing route add rule IOCTL can lead to a vulnerability in the IPA HW commit list across multiple Snapdragon platforms (APQ8053, APQ8096AU, MDM9607, MSM89xx, QCN7605, QCS605, SC8180X, SDA845...

CVE-2019-14062

Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables ...

CVE-2019-14047

While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit list in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...

CVE-2019-14062

CVE-2019-14062 is a buffer overflow in how a setup message from the Network is decoded in various Qualcomm/Snapdragon components (listed in the description). Root cause: lack of validation of IE message length during network processing in multiple Snapdragon SoCs and related devices. Public sourc...

CVE-2019-10626

CVE-2019-10626 describes a memory-read issue in Qualcomm/Snapdragon components where payload size is not validated before reading memory, potentially causing access to an invalid pointer or garbage data across a wide range of Snapdragon platforms (APQ8009, SDM7x, QCS, etc.). The root cause is rea...

CVE-2019-10626

Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,...

CVE-2019-10597

CVE-2019-10597 is a kernel-level issue described across multiple sources as a local vulnerability where the kernel writes to a user-supplied address, enabling arbitrary memory writes in Qualcomm/Qualcomm-closed components. Public references in the dataset include a Red Hat advisory listing affect...

CVE-2019-10597

kernel writes to user passed address without any checks can lead to arbitrary memory write in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, MSM8996, MSM8996AU, Nicobar,...

HPSBHF03671 rev.1 - HP lt4120 Snapdragon X5 LTE Driver Installer Escalation of Privilege

Potential Security Impact Escalation of Privilege, Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT Reported by: TBD VULNERABILITY SUMMARY A potential security vulnerability has been identified with the installation package for the HP lt4120 Snapdragon X5 LTE Driver pri...

CVE-2020-3641

Integer overflow may occur if atom size is less than atom offset as there is improper validation of atom size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8053, APQ8096A...

CVE-2020-3645

Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

CVE-2020-3680

A race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053, MSM8909W, MSM8917, MSM8953, QCS605, QM215, SA415M, SDM429, SDM429W, SDM439...

CVE-2020-3618

NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, QCA8081, SC8180X, SXR2130...