CVE-2018-11287

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710,...

CVE-2018-5871

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660,...

CVE-2018-5837

The CVE-2018-5837 entry concerns Snapdragon SoCs (IPQ8074, MDM9xxx, SD series, etc.) where MAC address randomization during probe requests is compromised by a flawed RNG that outputs repeating values far sooner than expected. The description covers the affected devices and the root cause, but the...

CVE-2018-11287

CVE-2018-11287 affects Qualcomm Video components in Snapdragon/Qualcomm closed‑source stack (mobile, automotive, wearables) across listed SDM/SM and Snapdragon platforms. Root cause is an incorrect control flow when verifying buffer sufficiency in video processing, enabling potential abuse within...

CVE-2018-11285

CVE-2018-11285 describes a buffer over-read in Snapdragon SoCs when parsing FLAC files with a corrupted picture block. Affected products include a wide range of Qualcomm/SDM/SD platforms (e.g., MDM9206, SD 210–P, SD 820/835/845, SDX20, Snapdragon_High_Med_2016, etc.). The root cause is a buffer o...

CVE-2017-18280

CVE-2017-18280 : In Snapdragon platforms (Automobile, Mobile, Wear) across listed SoCs, a trusted application that has opened an SPI/I2C interface to a device could allow another trusted application to read data via the SPI/I2C read function. The initial disclosures list the affected families (e....

CVE-2018-11277

In Snapdragon Automobile, Mobile, Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, the com.qualcomm.embms is a vendor package deployed in the system image which has an inadequat...

CVE-2018-11267

Technical details about CVE-2018-11267 are not publicly available in the provided connected documents. The entry lists affected Qualcomm/SD components but does not specify root cause, vulnerable versions, impact specifics, or remediation. Monitor for updates.

CVE-2018-11269

The CVE-2018-11269 entry concerns Qualcomm Snapdragon SoCs (listed in the initial description) where a potential buffer overflow may occur when parsing TFTP options. The affected product families include automotive, mobile, and wearables with processors such as MDM9206, MDM9607, MDM9635M, MDM9640...

CVE-2017-18314

CVE-2017-18314 affects Qualcomm closed‑source components. The entry notes that on TZ cold boot the CNOC_QDSS RG0, which is locked by xBL_SEC, is cleared by TZ. This is categorized as a Critical issue in the Qualcomm closed‑source component list and is referenced in Android/industry bulletins. The...

CVE-2018-11269

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630,...

CVE-2018-11290

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820A, SD 845, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDX20, SnapdragonHighMed2016, MAC...

CVE-2017-18302

CVE-2017-18302 affects Qualcomm Snapdragon SoCs (MSM8996AU and numerous SD/i variants listed) where a crafted HLOS client can modify in-memory structures passed to a QSEE application between check and use. This leads to arbitrary writes to TZ kernel memory regions, i.e., local elevation of privil...

CVE-2018-11292

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660,...

CVE-2018-11290

CVE-2018-11290 concerns Qualcomm/Snapdragon platforms where MAC address randomization during probe requests is not properly implemented due to a flawed RNG. The NVD entry lists affected Snapdragon/Mobile/Wear families (e.g., MDM9xxx, SD/SM-series, Snapdragon_High_Med_2016) and explicitly states t...

CVE-2017-18314

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SDA660,...

CVE-2018-5837

In Snapdragon Automobile, Mobile, Wear in version IPQ8074, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710,...

CVE-2018-11292

CVE-2018-11292 involves Qualcomm Snapdragon WLANWMI command handlers with lack of input validation, affecting a wide range of Snapdragon SoCs (e.g., MDM9206/9607/9640/9650, MSM89xx, QCA6574AU/6584, SD 210–212, 410/12, 425, 427, 430, 435, 450, 615/16/SD 415, 625, 650/52, 820A, SDM429/439/630/632/6...

CVE-2018-11268

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630,...

CVE-2017-18280

In Snapdragon Automobile, Mobile, Wear in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SDM429, SDM439, SDM632, SnapdragonHighMed2016, when a Trusted Application has opened the SPI/I2C...