CVE-2019-2339

CVE-2019-2339 relates to an out-of-bounds access due to lack of checking the whitelist array size when reading image ELF segments in Qualcomm Snapdragon components across multiple product families (Auto, Compute, Connectivity, IoT, Mobile, etc.). The root cause is an unchecked whitelist array dur...

CVE-2019-2289

CVE-2019-2289 involves a lack of integrity check that allows a MODEM to accept arbitrary NAS messages, potentially causing authentication bypass of NAS on Snapdragon-based devices (e.g., Snapdragon Auto, Compute, IoT variants across APQ and MSM families). The description lists an extensive set of...

CVE-2019-2315

CVE-2019-2315 concerns a data handling issue in Snapdragon SoCs where parameters populated during a copy operation from a non-secure environment to a secure buffer can be exposed or mishandled. The description consistently cites copying from an fd or local buffer to a secure buffer with inputs fr...

CVE-2019-2295

CVE-2019-2295 describes information disclosure caused by a missing address range check in the SysDBG buffers within SDI code. The weakness affects Qualcomm Snapdragon platforms across multiple families (including Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice ...

CVE-2019-2303

CVE-2019-2303 concerns the Qualcomm SNDCP module and related Snapdragon components. The issue is described as the module potentially accessing memory outside its boundary when handling malformed XID messages, potentially leading to memory corruption (buffer/heap overflow) in GSNDCP. Affected plat...

CVE-2019-2271

CVE-2019-2271 is a buffer over-read in Qualcomm closed-source components used across Snapdragon lineups (e.g., APQ8009/8017/8053/8096A U, SDM/SM/SC families). It can occur when parsing downlink OTA messages with unintended network values, potentially enabling remote code execution or other impact...

CVE-2019-2303

SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053,...

CVE-2019-2271

Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...

CVE-2019-2329

Use after free issue in cleanup routine due to missing pointer sanitization for a failed start of a trusted application. in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205, QCS404, QCS605, SDA845,...

CVE-2019-2336

Subsequent use of the CBO listener may result in further memory corruption due to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure...

CVE-2019-2315

While invoking the API to copy from fd or local buffer to the secure buffer, Parameters being populated are from non secure environment. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2019-2339

Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205...

CVE-2019-2318

Non Secure Kernel can cause Trustzone to do an arbitrary memory read which will result into DOS in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in APQ8017,...

CVE-2019-2251

If a bitmap file is loaded from any un-authenticated source, there is a possibility that the bitmap can potentially cause stack buffer overflow. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...

CVE-2019-10535

Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

CVE-2019-10486

Race condition due to the lack of resource lock which will be concurrently modified in the memcpy statement leads to out of bound access in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...

CVE-2019-10535

CVE-2019-10535 affects Qualcomm Snapdragon WLAN host components across multiple Snapdragon lineups (e.g., APQ8053, APQ8096AU, SDX20, MSM9xxx, QCA6574AU, etc.). The root cause is improper validation of a loop variable received from firmware, which can cause out-of-bounds access while the WLAN host...

CVE-2019-10490

CVE-2019-10490 describes a use-after-free in the Xtra daemon shutdown caused by a static object instance being freed from multiple places in Qualcomm-based Snapdragon platforms (including Snapdragon Auto/Compute/Connectivity, IoT, wearables, and various SoCs). The issue affects a wide range of Qu...

CVE-2019-10503

Out-of-bounds access can occur in camera driver due to improper validation of array index in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017,...

CVE-2019-10486

CVE-2019-10486 describes a race condition caused by a missing resource lock around a memcpy, leading to out-of-bounds access in a broad set of Qualcomm Snapdragon components (Auto, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, Wearables) across numer...