CVE-2020-11125

CVE-2020-11125 affects Qualcomm/Snapdragon platforms (Kernel) with an out-of-bounds access in the MHI command processing due to insufficient channel-id validation. The vulnerability is listed in Android/Qualcomm bulletin context (kernel path) for multiple SnapdragonSoCs and was tracked in CVE-202...

CVE-2020-11162

CVE-2020-11162 describes a possible buffer overflow in the MHI driver due to missing validation of EOT events in Qualcomm Snapdragon SoCs (OEMs include Snapdragon Auto/Compute/Connectivity etc.). Root cause: lack of input parameter validation on EOT events received from the MHI device side; impac...

CVE-2020-11174

CVE-2020-11174 concerns an Array index underflow in the ADSP driver caused by an improper check of the channel id before it is used as an array index. Affected products include Snapdragon Auto/Compute/Connectivity/IoT/Wearables and numerous Snapdragon SoCs (e.g., APQ8009, IPQ, QCS, SDM, SXR famil...

CVE-2019-14117

CVE-2019-14117 affects Qualcomm/ Snapdragon drivers (e.g., Bitra, MDM9607, QCS405, Saipan, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130) where a page list update by a privileged user frees elements but does not delete them from the list, causing a use-after-free in the rmnet driver and...

CVE-2020-11173

CVE-2020-11173 describes a race condition caused by two threads running from user space in Qualcomm/ Snapdragon fastRPC driver. Public records show this vulnerability as affecting Qualcomm Kernel components with high severity (local) and is listed in CVE-2020-11173 across multiple vendor advisori...

CVE-2020-11116

CVE-2020-11116 describes a possible out-of-bounds write while processing an association response due to a missing IE length check in Qualcomm/Snapdragon components (Snapdragon Auto, Compute, Consumer Electronics Connectivity, etc.). Affected products span numerous Snapdragon families (APQ8009, AP...

CVE-2019-10527

CVE-2019-10527 affects Snapdragon Auto/Compute/Connectivity and related Snapdragon families. The root cause is manipulation of the SMEM (shared memory) partition in a scenario where the HLOS is compromised, which can allow access to memory outside the SMEM address range and lead to memory corrupt...

CVE-2020-3703

The connected Red Hat CVE entries confirm a concrete BLE Link Layer handling flaw: Cypress PSoC 4 BLE component

CVE-2020-11118

CVE-2020-11118 is an information-exposure issue tied to processing of IE headers (beacon IE frame) on Qualcomm Snapdragon platforms. The NVD entry lists affected families (Snapdragon Auto, Compute, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, Wearables, etc.) and a lon...

CVE-2020-11120

CVE-2020-11120 is a use-after-free vulnerability in Snapdragon components where the data buffer passed to a callback may be freed by the calling thread and become invalid when the event loop runs, enabling potential memory/data corruption. Affected devices span multiple Snapdragon families (APQ80...

CVE-2020-11115

CVE-2020-11115 is a buffer over-read in processing information elements from beacons due to missing input validation in the Snapdragon wireless stack affecting a wide range of Snapdragon platforms (e.g., APQ8009, APQ8053, APQ8096AU, SDM450/660/845, QCA61xx/QCM21x family, SXR2130, and others). The...

CVE-2019-13994

CVE-2019-13994 concerns memory corruption and potential information leakage caused by a missing validation: the current received data fragment size read from shared memory is not checked to be less than the actual packet size. This affects a wide range of Qualcomm Snapdragon families and devices ...

CVE-2020-3673

CVE-2020-3673 is a vulnerability reported in Qualcomm closed-source components affecting Snapdragon/Qualcomm stack. The issue is a buffer overflow during SIP message processing where values are stored in an array without validating the index length, enabling potential arbitrary code execution wit...

CVE-2020-3654

CVE-2020-3654 is a buffer overflow in Qualcomm closed‑source components (Qualcomm/ Snapdragon) where SIP message processing fails to validate an index before copying data. The vulnerability is rated Critical (CVSS v3.1/10.0) with network access and no user interaction, implying potential remote c...

CVE-2019-14074

CVE-2019-14074 describes a heap overflow in the diag command handler caused by missing packet-length validation, affecting numerous Qualcomm Snapdragon platforms (e.g., APQ8009, SDM8xx/9x, and other Snapdragon families). The issue is localized (local attacker) and is described in public CVE listi...

CVE-2020-11164

CVE-2020-11164 describes a privilege-escalation issue in Qualcomm Snapdragon platforms where a third-party app can call broadcasts in Perfdump, abusing access controls. Affected products include Snapdragon Auto, Connectivity, Consumer IoT, Industrial IoT, Mobile, Wearables across numerous SoCs (e...

CVE-2019-13998

CVE-2019-13998 affects Qualcomm closed‑source components on Snapdragon SoCs (various Snapdragon Auto/Compute/Connectivity lines and related PCIe/telemetry stacks) with a root cause described as a lack of bounds checking on TX FIFO write/read indices read from shared RAM, enabling memory corruptio...

CVE-2019-10628

CVE-2019-10628 describes a memory-corruption issue in the kernel where a random index can manipulate TLB entries via a user library provenance. Affected devices include Snapdragon platforms (APQ8098, SDM660/670/710/845/850, SMx series, QCS/QCN/SCx, and others listed in the entry). The root cause ...

CVE-2020-3690

CVE-2020-3690 describes that an incorrect SMMU configuration in the modem crypto engine could potentially compromise the hypervisor on Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Compute/Connectivity/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wired Networking) across listed SoCs (A...

CVE-2020-3693

Summary: CVE-2020-3693 describes a pointer out-of-range issue caused by an incorrect buffer range check in qseecom, affecting multiple Snapdragon platforms (APQ8009/8017/8053/8098, Bitra, MSM8909W/8996AU, Nicobar, QCM2150, QCS605, Saipan, SDM429W, SDX20, SM6150/8150/8250, SXR2130, etc.). The root...

CVE-2019-13992

CVE-2019-13992 describes an Out-of-bounds memory access when a stack push/pop occurs without a bound check on the stack top, affecting Snapdragon Auto, Compute, Connectivity, and related Snapdragon platforms (Bitra, IPQ60xx/SA/many variants). Root cause: missing bound check on stack top leading t...

CVE-2019-10629

CVE-2019-10629 affects Qualcomm closed‑source components in Snapdragon SoCs (e.g., Bitra, IPQ6xxx, SDM, and related devices) where a user process can pass a crafted page via an API, potentially corrupting a kernel virtual page. This is a local elevation of privilege/impact issue with high severit...

CVE-2020-3704

CVE-2020-3704 describes a vulnerability in Bluetooth Low Energy where processing an invalid connection request PDU (nonstandard interval/timeout of 0) from a central device may cause the peripheral to enter a deadlock state. The entry notes this CVE is equivalent to CVE-2019-19193 from the Sweynt...

CVE-2020-3622

CVE-2020-3622 refers to a vulnerability where a channel name string read from shared memory can be manipulated but not NULL-terminated, leading to potential memory corruption in Qualcomm Snapdragon components. Affected families include Snapdragon Auto/Compute/Connectivity, various Snapdragon SoCs...

CVE-2020-3679

CVE-2020-3679 affects Qualcomm Snapdragon components (including Snapdragon Auto/Compute/Mobile etc.) where, after ASLR is enabled in QTEE, some code remains mapped at a fixed known address. This exposes local attack surfaces and can lead to confidentiality impact (per CVSS), with code execution p...

CVE-2020-3694

CVE-2020-3694 affects Qualcomm Snapdragon components (Auto/Compute/Mobile/Voice & Music) with an out-of-range pointer issue caused by an incorrect buffer range check during the execution of qseecom. Affected devices/SoCs include Bitra, Nicobar, Saipan, SM6150, SM8150, SM8250, and SXR2130 under Sn...

CVE-2019-10596

CVE-2019-10596 is described as an improper access-control issue in Qualcomm/Snapdragon components (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, and related platforms such as Bitra, Nicobar, QCS605/610, Rennell, SA6155P, Saipan, SC7180X, SC8180X, SDM670/710/845/850, SM6150/71...

CVE-2020-3629

The CVE-2020-3629 issue affects Qualcomm Snapdragon line (DSP query path) where a stack out-of-bounds occurs due to an incorrect assumption in buffer-size calculation for DSP attributes. Affected: Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables; devices in...

CVE-2020-3638

CVE-2020-3638 affects Snapdragon devices (Auto/Compute/Connectivity/Consumer IoT/Industrial IoT, Mobile, Wired Infrastructure and Networking) including SoCs such as Agatti, Bitra, Kamorta, QCA6390, QCS404, QCS610, Rennell, SA515M, SC7180X, SC8180X, SDX55, SM6150, SM7150, SM8150, SM8250, SXR2130. ...

CVE-2020-3684

CVE-2020-3684 describes a local, privilege-relevant issue in Qualcomm Snapdragon platforms where QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by the XBL Loader and applies them without validation. This affects a wide range of Snapdragon p...

CVE-2019-13995

CVE-2019-13995 describes a lack of integer overflow protection when adding fragment size to remaining size read from shared memory, causing memory corruption and potential information leakage in Qualcomm Snapdragon components. Affected products span numerous Snapdragon generations (APQ, IPQ, QCS ...

CVE-2020-11128

CVE-2020-11128 affects Qualcomm Snapdragon platforms (including Snapdragon Auto/Compute/Consumer IOT/Industrial IOT and multiple SoCs listed) with a memory-unsafe path: possible out-of-bounds access when copying mask file content into a buffer without checking the destination size. The vulnerabil...

CVE-2020-11129

Technical details about CVE-2020-11129 are not publicly available in the provided connected documents; the initial entry notes a memory use-after-free in camera capture on Snapdragon devices. Monitor for updates.

CVE-2020-3646

CVE-2020-3646 affects Qualcomm Snapdragon video components; root cause is a buffer overflow where the destination buffer is smaller than the source buffer in a video application. Affected products include Snapdragon Compute/Consumer IoT/Industrial IoT, Mobile, Wearables, and related SoCs (e.g., S...

CVE-2020-3621

CVE-2020-3621: A lack of checks ensures that the TX read index and RX write index read from shared memory are less than the FIFO size, causing memory corruption and potential information leakage in Snapdragon devices (numerous SoCs and families listed). The available documents describe the root c...

CVE-2020-11122

CVE-2020-11122 corresponds to a Null Pointer dereference in Snapdragon video handling when decoding a crafted MKV data stream. Affected products include Snapdragon Auto, Snapdragon Consumer IoT, and Snapdragon Mobile (APQ8098, Bitra, Kamorta, SA6155P, Saipan, SM6150, SM7150, SM8150, SM8250, SXR21...

CVE-2020-3640

Technical details for CVE-2020-3640 are not publicly provided in the connected documents; they mention the vulnerability description but do not specify affected products, root cause, exploitability, or remediation. Monitor for updates.

CVE-2020-3620

CVE-2020-3620 affects a wide range of Qualcomm Snapdragon platforms (Auto/Compute/Connectivity etc.) through G-link SMEM transport. The root cause is a lack of bounds checking for an integer overflow during a round-up operation on data read from shared memory, which can lead to memory corruption ...