CVE-2019-14097

Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

CVE-2019-14097

CVE-2019-14097 is a possible buffer overflow in Qualcomm/Qualcomm Snapdragon WLAN Parser due to a missing length check when copying data. Affected devices span many Snapdragon families (Auto, Compute, Connectivity, etc.). The issue is classified as critical (CVSS v3.1: 9.8) for network access wit...

CVE-2019-14085

The CVE-2019-14085 entry describes a Possible Integer underflow in WLAN function due to insufficient validation of user-supplied data across Qualcomm Snapdragon families (QCN7605, QCS605, SDA845, SDM670/710/845/850, SM8150, SXR1130). Affected components are WLAN-related functions in Snapdragon Au...

CVE-2019-14085

Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCN7605, QCS605, SDA845, SDM670, SDM710,...

CVE-2019-14082

Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074,...

CVE-2019-14082

CVE-2019-14082 is a buffer over-read in WLAN firmware used by Qualcomm Snapdragon platforms (e.g., IPQ8074, MDM9206/9207C/9607, QCN7605, SM8150) due to a missing bound check on a memory offset. The issue affects Qualcomm WLAN firmware across multiple Snapdragon SKUs and is rated CVSS v3.1/3.0 as ...

CVE-2019-14081

CVE-2019-14081 describes a buffer over-read in the WLAN module when handling a WMI message for SAR limits with an invalid number of limits. Affected products include Snapdragon family components (Compute/Consumer Connectivity/IoT lines and related APQ/IPQ/SDM/QCA/QCN/SDA devices). The root cause ...

CVE-2019-14081

Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networki...

CVE-2019-14026

CVE-2019-14026 describes a possible buffer overflow in the WLAN WMI handler caused by missing SSID length checks during data copy on Qualcomm Snapdragon platforms (e.g., APQ80xx, SDM/SM series, QCA devices, and others listed). Root cause: insufficient length validation for SSID data before copyin...

CVE-2019-14026

Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2019-10526

Out of bound write in WLAN driver due to NULL character not properly placed after SSID name in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in APQ8009, APQ8017,...

CVE-2019-10546

CVE-2019-10546 describes a buffer overflow in WLAN firmware when parsing beacon/probe_response frames during roaming on Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, and others including APQ8096/.. SXR2130). Affected hardware spans numerous Snapdragon SoCs, including IPQ/MDM/SDM fam...

CVE-2019-10546

Buffer overflow can occur in WLAN firmware while parsing beacon/proberesponse frames during roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wire...

CVE-2019-10526

CVE-2019-10526 describes an out-of-bounds write in the Qualcomm WLAN driver caused by a NULL character not properly placed after the SSID. Affected products include Snapdragon Auto/Compute/Consumer Electronics Connectivity/Consumer IOT/Industrial IOT/Mobile/Voice & Music platforms across numerous...

CVE-2018-11838

CVE-2018-11838 describes a possible double-free in the WLAN stack due to insufficient memory-free-condition checking in Qualcomm Snapdragon platforms, affecting Qualcomm WLAN components across Snapdragon families (e.g., APQ8053, MDM9640, SDA660, SDM636/660/SDX20) and various Snapdragon product li...

CVE-2019-14097: Buffer Copy without Checking Size of Input

Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...

PT-2020-9517

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: A possible buffer overflow issue exists in the WLAN Parser component due to the lack of a length check when copying data. This issue affects various Qualcomm Snapdragon...

CVE-2019-14026: Buffer Copy without Checking Size of Input

Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

PT-2020-9066

Name of the Vulnerable Software and Affected Versions Snapdragon Auto versions APQ8096 through SM8250 Snapdragon Compute versions APQ8096 through SM8250 Snapdragon Connectivity versions APQ8096 through SM8250 Snapdragon Consumer Electronics Connectivity versions APQ8096 through SM8250 Snapdragon...

PT-2020-10888

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions APQ8009 through SDX24 Qualcomm Snapdragon Compute versions APQ8009 through SDX24 Qualcomm Snapdragon Connectivity versions APQ8009 through SDX24 Qualcomm Snapdragon Consumer Electronics Connectivity versions...