CVE-2019-2297

Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in...

CVE-2019-2339

Out of bound access due to lack of check of whiltelist array size while reading the image elf segments. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in MDM9205...

CVE-2019-2303

SNDCP module may access array out side its boundary when it receives malformed XID message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053,...

CVE-2019-10535

CVE-2019-10535 affects Qualcomm Snapdragon WLAN host components across multiple Snapdragon lineups (e.g., APQ8053, APQ8096AU, SDX20, MSM9xxx, QCA6574AU, etc.). The root cause is improper validation of a loop variable received from firmware, which can cause out-of-bounds access while the WLAN host...

CVE-2018-13916

CVE-2018-13916 describes an out-of-bounds memory access in a Qurt kernel function when using an identifier to access a Qurt kernel buffer to retrieve thread data. The vulnerability affects Qualcomm/Snapdragon platforms (e.g., APQ8009/ MSM9xxx series, SDM/SDX lines and related Qualcomm components)...

Double free

Double free issue can happen when sensor power settings is freed by some thread while another thread try to access. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2019-2302

While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

Design/Logic Flaw

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8996, MSM8939, MSM8976, MSM8917, SDM845, and SDM660, access control collision vulnerability when accessing the replay protected memory block...

CVE-2014-10050

The CVE-2014-10050 entry concerns an access-control collision vulnerability in the replay protected memory block on Qualcomm Snapdragon Mobile platforms (MSM8996, MSM8939, MSM8976, MSM8917, SDM845, SDM660) running Android with patch levels prior to 2018-04-05. The issue is described as an access ...