Input validation

Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017,...

Race condition

Race condition due to the lack of resource lock which will be concurrently modified in the memcpy statement leads to out of bound access in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...

Input validation

Buffer over-read can occur in fast message handler due to improper input validation while processing a message from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8053...

Design/Logic Flaw

While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

Design/Logic Flaw

Out-of-bounds memory access in Qurt kernel function when using the identifier to access Qurt kernel buffer to retrieve thread data. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

Stack overflow

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...

CVE-2019-2335

CVE-2019-2335 concerns a logic issue in Qualcomm Snapdragon firmware where, while processing an Attach Reject message, the valid exit condition is not met, causing an infinite loop. Affected are numerous Snapdragon platforms (e.g., APQ8009/8017/8053/8096AU/8098, MDM9xxx, SDX20, SDX55, SM6x50 seri...

CVE-2019-2268

CVE-2019-2268 affects Qualcomm WLAN host components in Snapdragon SoCs (multiple APQs and MSM/SDM families). It describes a possible out-of-bounds (OOB) read in P2P action frames while processing WLAN management frames. CVSS metrics in the sources show an overall HIGH impact (CVSS v2 base 7.5) an...

CVE-2019-2297

CVE-2019-2297 is a buffer overflow in Qualcomm Snapdragon WLAN host when processing non-standard NAN messages from user space. Affected devices span Qualcomm Snapdragon platforms listed in the initial description (e.g., various APQ, IPQ, MDM, QCA, SDX, etc.). According to connected records, the i...

CVE-2019-2268

Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098,...

CVE-2019-2336

CVE-2019-2336 involves a use-after-free in the CBO listener that can lead to memory corruption on Qualcomm Snapdragon platforms. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wired Infrastructure/Networking, including MDM92...

CVE-2019-2335

While processing Attach Reject message, Valid exit condition is not met resulting into an infinite loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017...

CVE-2019-2295

Information disclosure due to lack of address range check done on the SysDBG buffers in SDI code. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...

CVE-2019-2266

The CVE-2019-2266 entry concerns a possible double-free issue in the kernel when handling camera sensor power sequencing across Snapdragon-based platforms (e.g., APQ8053, IPQ4019/8064, MDM92xx, SDM84x/SDX2x, etc.). The Red Hat/NVD/CVE records describe the vulnerability as a kernel-level double-fr...

CVE-2019-2289

Lack of integrity check allows MODEM to accept any NAS messages which can result into authentication bypass of NAS in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

CVE-2019-2251

CVE-2019-2251 describes a stack-buffer overflow when a bitmap is loaded from an unauthenticated source, affecting Qualcomm/SoC families listed in the initial records (e.g., Snapdragon Auto/Compute/Connectivity and related devices). The vulnerability is tied to closed-source Qualcomm components an...

CVE-2019-2329

CVE-2019-2329 is a use-after-free issue in the cleanup routine caused by missing pointer sanitization after a failed start of a trusted application. Affected are Qualcomm Snapdragon platforms: Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, and Snapdrago...

CVE-2019-2318

CVE-2019-2318 affects Qualcomm Snapdragon platforms (Auto/Connectivity/Consumer IoT/Industrial IoT/Mobile/Voice & Music/Wired Infrastructure and Networking) and relates to a non-secure kernel issue where TrustZone can perform an arbitrary memory read, causing a denial-of-service. Connected source...

CVE-2019-2266

Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and...

CVE-2019-2297

Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in...