CVE-2018-5871

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660,...

CVE-2018-11268

CVE-2018-11268 describes a potential buffer overflow in Snapdragon/Qualcomm components when parsing TFTP options on a wide range of SoCs (e.g., MDM9206/9607/9635M/9640/.../SD 810–845). The connected documents confirm affected Snapdragon/Qualcomm closed‑source components; however, the exact root c...

CVE-2018-11287

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710,...

CVE-2018-11287

CVE-2018-11287 affects Qualcomm Video components in Snapdragon/Qualcomm closed‑source stack (mobile, automotive, wearables) across listed SDM/SM and Snapdragon platforms. Root cause is an incorrect control flow when verifying buffer sufficiency in video processing, enabling potential abuse within...

CVE-2018-11292

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820A, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660,...

CVE-2018-11269

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630,...

CVE-2018-11290

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCA6574AU, QCA6584, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820A, SD 845, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDX20, SnapdragonHighMed2016, MAC...

CVE-2018-11267

Technical details about CVE-2018-11267 are not publicly available in the provided connected documents. The entry lists affected Qualcomm/SD components but does not specify root cause, vulnerable versions, impact specifics, or remediation. Monitor for updates.

CVE-2017-18302

CVE-2017-18302 affects Qualcomm Snapdragon SoCs (MSM8996AU and numerous SD/i variants listed) where a crafted HLOS client can modify in-memory structures passed to a QSEE application between check and use. This leads to arbitrary writes to TZ kernel memory regions, i.e., local elevation of privil...

CVE-2018-11269

The CVE-2018-11269 entry concerns Qualcomm Snapdragon SoCs (listed in the initial description) where a potential buffer overflow may occur when parsing TFTP options. The affected product families include automotive, mobile, and wearables with processors such as MDM9206, MDM9607, MDM9635M, MDM9640...

CVE-2018-11285

CVE-2018-11285 describes a buffer over-read in Snapdragon SoCs when parsing FLAC files with a corrupted picture block. Affected products include a wide range of Qualcomm/SDM/SD platforms (e.g., MDM9206, SD 210–P, SD 820/835/845, SDX20, Snapdragon_High_Med_2016, etc.). The root cause is a buffer o...

CVE-2017-18280

CVE-2017-18280 : In Snapdragon platforms (Automobile, Mobile, Wear) across listed SoCs, a trusted application that has opened an SPI/I2C interface to a device could allow another trusted application to read data via the SPI/I2C read function. The initial disclosures list the affected families (e....

CVE-2017-18314

CVE-2017-18314 affects Qualcomm closed‑source components. The entry notes that on TZ cold boot the CNOC_QDSS RG0, which is locked by xBL_SEC, is cleared by TZ. This is categorized as a Critical issue in the Qualcomm closed‑source component list and is referenced in Android/industry bulletins. The...

CVE-2018-11277

In Snapdragon Automobile, Mobile, Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SDA660, the com.qualcomm.embms is a vendor package deployed in the system image which has an inadequat...

CVE-2018-11268

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630,...

CVE-2018-11291

CVE-2018-11291 affects Qualcomm Snapdragon and related IPs (e.g., IPQ8074, MDM9xxx, QCA family, SD/MOD platforms) with a cryptographic RNG that is not strong enough. The issue is described in the CVE as cryptographic issues due to weak randomness in NAN, affecting listed Snapdragon/SoC families. ...

CVE-2018-11277

The CVE-2018-11277 issue affects Snapdragon devices (Automobile, Mobile, Wear) with listed MSM/SD platforms where the vendor package com.qualcomm.embms is deployed in the system image and has an inadequate permission level. This allows any app installed from the Play Store to request this permiss...

CVE-2018-11290

CVE-2018-11290 concerns Qualcomm/Snapdragon platforms where MAC address randomization during probe requests is not properly implemented due to a flawed RNG. The NVD entry lists affected Snapdragon/Mobile/Wear families (e.g., MDM9xxx, SD/SM-series, Snapdragon_High_Med_2016) and explicitly states t...

CVE-2018-11292

CVE-2018-11292 involves Qualcomm Snapdragon WLANWMI command handlers with lack of input validation, affecting a wide range of Snapdragon SoCs (e.g., MDM9206/9607/9640/9650, MSM89xx, QCA6574AU/6584, SD 210–212, 410/12, 425, 427, 430, 435, 450, 615/16/SD 415, 625, 650/52, 820A, SDM429/439/630/632/6...

CVE-2018-11267

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429,...