CVE-2019-14122

CVE-2019-14122 describes a memory failure in the SKB path when padding is not added correctly for low-memory or highly fragmented targets on Qualcomm Snapdragon Auto and Snapdragon Mobile (Saipan, SM8150, SM8250, SXR2130). The issue affects Qualcomm components with a High severity rating (per Qua...

CVE-2019-14112

The CVE-2019-14112 entry describes a potential buffer overflow when processing CBF frames due to a missing buffer-length check before copy in Qualcomm Snapdragon components. Affected products span Snapdragon Auto, Compute, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, a...

CVE-2019-14114

CVE-2019-14114 describes a buffer overflow in WLAN firmware when parsing a GTK Information Element containing a GTK key longer than the buffer size, affecting Qualcomm Snapdragon family devices (numerous APQ, IPQ, MDM, QCA, and SM series). Root cause: GTK IE parsing overflow in WLAN firmware; con...

CVE-2019-14113

CVE-2019-14113 is a buffer overflow in WLAN firmware when unwraping data with CCMP during EAPOL handshake parsing across Qualcomm Snapdragon hardware (APQ/SDM/QCA platforms). The issue affects a wide range of Snapdragon devices and SoCs (e.g., APQ8009, SDM630/636/660/670/710/845/850, QCA, Nicobar...

CVE-2019-14112

Potential buffer overflow while processing CBF frames due to lack of check of buffer length before copy in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and...

CVE-2019-14111

CVE-2019-14111 is a buffer overflow in the Qualcomm Snapdragon stack related to NAN reception of NMF. Affected products include Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connectivity, Mobile, Voice & Music, and Wired Infrastructure/Networking on platforms such as IPQ6018, IPQ80...

CVE-2019-14110

Buffer overflow can occur in function wlan firmware while copying association frame content if frame length is more than the maximum buffer size in case of SAP mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...

CVE-2019-14111

Possible buffer overflow while handling NAN reception of NMF in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, Nicobar,...

CVE-2019-14110

CVE-2019-14110 describes a buffer overflow in WLAN firmware when copying association frame content in SAP mode for Qualcomm Snapdragon devices (wide range of APQ/SDM/SC variants). Root cause: copying association frames exceeds the maximum destination buffer, enabling a potential overflow. Impact ...

CVE-2019-14105

CVE-2019-14105 affects Qualcomm Snapdragon components (e.g., Snapdragon Industrial IOT, SDA845/SDM845/SM8150) where the kernel read a CSL-reserved field as uint16 instead of uint32, causing memory overflow. Exploitation is described as local (LAS) with low complexity in the NVD entry; no explicit...

CVE-2019-14104

CVE-2019-14104 describes a slab-out-of-bounds access caused by a missing null check before dereferencing the context pointer in Snapdragon Compute/IoT/Mobile components (APQ8053, SC8180X, SDX55, SM8150). Affected products include Snapdragon Compute, Snapdragon Consumer IoT, and Snapdragon Mobile ...

CVE-2019-14104

Slab-out-of-bounds access can occur if the context pointer is invalid due to lack of null check on pointer before accessing it in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, SC8180X, SDX55, SM8150...

CVE-2019-14105

Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150...

CVE-2019-14075

Null pointer dereference issue in radio interface layer due to lack of null check in sapmodule destructor in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9607, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8998, Nicobar, QCS605, Rennell, Saipan,...

CVE-2019-14070

Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired...

CVE-2019-14070

The CVE-2019-14070 entry is supported by connected docs showing a Qualcomm/Android exposure in the Audio path. It describes a race condition causing a use-after-free in PCM volume controls within Qualcomm Snapdragon platform audio controls. Affected scope includes Snapdragon Auto/Compute/Consumer...

CVE-2019-14033

CVE-2019-14033 involves multiple Read overflows due to an improper length check when decoding tau reject/accept and detach/attach requests in Qualcomm Snapdragon components across numerous devices. The issue affects Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/Mobile/Wearables (listing man...

CVE-2019-14022

CVE-2019-14022 concerns an error in parsing ipv6_header length due to a missing length check in Qualcomm/Snapdragon components (Auto, Compute, IOT, Wearables, Mobile, etc.). Affected family includes Snapdragon platforms (APQ, SDM/SM series, Nicobar, etc.) across numerous devices. Root cause: insu...

CVE-2019-14033

Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, APQ8096,...

CVE-2019-14021

Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in...