CVE-2023-33063

CVE-2023-33063 is a Use-After-Free/memory corruption issue in Qualcomm DSP Services triggered by a remote call from HLOS to DSP. Affected: Qualcomm chipsets with DSP Services; root cause: memory corruption leading to potential unintended behavior. Documents indicate high impact (confidentiality, ...

CVE-2020-3702

CVE-2020-3702 affects the Linux kernel (ath9k wireless driver) and can lead to information disclosure via specially crafted WLAN traffic. Multiple connected sources confirm the flaw in the Atheros IEEE 802.11n chipsets driver and its potential for information leakage. Debian LTS advisories (DSA-4...

CVE-2018-11942

CVE-2018-11942 describes a vulnerability where failure to initialize the reserved memory sent to the firmware may cause exposure of 1 byte of uninitialized kernel SKB memory to the firmware in multiple Qualcomm/Qualcomm-supplied platforms (e.g., Snapdragon Auto, Snapdragon Mobile, IPQ4019, IPQ806...

CVE-2018-11947

CVE-2018-11947 concerns a double-free in the txrx stats request during pdev detach as the host driver unloads on Snapdragon platforms (multiple Snapdragon Mobile/IoT/industrial devices and various Qualcomm/QCS/QCA/SDM families). The description notes a potential use-after-free style issue in the ...

CVE-2021-1965

CVE-2021-1965 describes a buffer overflow in Qualcomm WLAN/MBSSID handling caused by missing parameter length checks during MBSSID scan IE parsing in Snapdragon components (Auto/Compute/Connectivity/Mobile/Wired). The NVD/Red Hat entries rate it Critical (CVSSv3.1: 9.8, Network, No privileges, Us...

CVE-2021-35088

CVE-2021-35088 : An out-of-bounds read due to improper validation of the SSID IE length during SSID IE parsing when the channel is DFS, reported for Qualcomm Snapdragon families (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wearables, Wired Infrastructure and Networking). Th...

CVE-2021-30351

CVE-2021-30351 is an out-of-bounds memory access in Qualcomm/Snapdragon audio decoders triggered by improper validation of the number of frames during music playback. The NVD entry and Red Hat bulletin describe a critical issue with CVSS 3.1 score of 9.8 (NETWORK, LOW attack complexity, NONE priv...

CVE-2021-35103

CVE-2021-35103 is a Qualcomm/Snapdragon timer synchronization flaw where an improper validation of the number of timer values from firmware allows a local out-of-bounds write. Affected products span Qualcomm Snapdragon families (Auto, Compute, Connectivity, Industrial IOT, Mobile, Wearables, Wire...

CVE-2022-33243

The CVE-2022-33243 entry describes memory corruption due to improper access control in Qualcomm IPC. Public records in this set identify Qualcomm IPC as the affected component and characterize the vulnerability as memory corruption arising from access-control weaknesses, with high impact on confi...

CVE-2021-1954

The CVE-2021-1954 issue is a buffer over-read in Qualcomm’s Snapdragon family (parsing FILS indication IE) caused by improper validation of the data pointer. Affects Qualcomm/ Snapdragon components; CVSS v3.1 indicates high severity (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) with network lead and high...

CVE-2021-1945

CVE-2021-1945 describes a possible out-of-bounds read in Qualcomm Snapdragon firmware, caused by a missing length check for the Bandwidth-NSS IE across multiple Snapdragon lines (Auto/Compute/Connectivity/IoT/Industrial IoT/Mobile/Voice & Music/ Wired Infrastructure). The vulnerability affects Qu...

CVE-2021-35069

CVE-2021-35069 describes an improper validation of data length received from a DMA buffer that can cause memory corruption in Qualcomm Snapdragon products. Affected families include Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and WIN (Snapdragon ha...

CVE-2021-1943

CVE-2021-1943 describes a buffer out-of-bounds read due to improper TBTT count/length validation when parsing beacon responses in Qualcomm Snapdragon WLAN components across Snapdragon Auto, Compute, Connectivity, Industrial IOT, Mobile, and Wired Infrastructure and Networking. The vulnerability d...

CVE-2021-30324

CVE-2021-30324 describes an out-of-bounds write caused by missing boundary checks for the maximum buffer size when sending a DCI packet to a remote process in Qualcomm Snapdragon family components (e.g., APQ8096AU, IPQ4… and many QCA/IQ/QCS/SD devices). Root cause: lack of boundary checking leads...

CVE-2021-1964

CVE-2021-1964 corresponds to a buffer over-read in Qualcomm WLAN/IEEE 802.11 beacon parsing due to improper validation of IE size in the WLAN host subsystem. Affected are Qualcomm Snapdragon/WLAN components (e.g., QCA6574AU and related chips) across multiple Snapdragon device families. Root cause...

CVE-2020-11271

CVE-2020-11271 describes a race-condition vulnerability causing possible out-of-bounds access when handling global control elements in Qualcomm Snapdragon firmware across multiple platforms (Snapdragon Auto/Compute/Connectivity, IoT, Mobile, Wearables, etc.). The issue is characterized by local a...

CVE-2023-22387

CVE-2023-22387 describes an arbitrary memory overwrite when a VM is compromised during a TX write, causing memory corruption. The most concrete details in the connected docs are: (1) it is listed under Qualcomm components, specifically in the Qualcomm kernel area, with a high impact and Local att...

CVE-2023-28553

CVE-2023-28553 is a Qualcomm WLAN Host vulnerability described as Information Disclosure when processing WMI event commands. Connected sources identify a related issue described as a buffer over‑read in the WLAN Host component, with CVSS foundations indicating Local access, Low attack complexity,...

CVE-2020-11125

CVE-2020-11125 affects Qualcomm/Snapdragon platforms (Kernel) with an out-of-bounds access in the MHI command processing due to insufficient channel-id validation. The vulnerability is listed in Android/Qualcomm bulletin context (kernel path) for multiple SnapdragonSoCs and was tracked in CVE-202...

CVE-2020-11162

CVE-2020-11162 describes a possible buffer overflow in the MHI driver due to missing validation of EOT events in Qualcomm Snapdragon SoCs (OEMs include Snapdragon Auto/Compute/Connectivity etc.). Root cause: lack of input parameter validation on EOT events received from the MHI device side; impac...

CVE-2021-1976

CVE-2021-1976 is a Qualcomm WLAN use-after-free vulnerability caused by improper validation of a P2P device address in PD Request frames. It affects Qualcomm/ Snapdragon WLAN components; exploited via network, with a CVSS v3.1 base score of 9.8 (CRITICAL). Public details reference Qualcomm’s Augu...

CVE-2020-11174

CVE-2020-11174 concerns an Array index underflow in the ADSP driver caused by an improper check of the channel id before it is used as an array index. Affected products include Snapdragon Auto/Compute/Connectivity/IoT/Wearables and numerous Snapdragon SoCs (e.g., APQ8009, IPQ, QCS, SDM, SXR famil...

CVE-2019-10600

CVE-2019-10600 describes a use-after-scope issue where a local variable is passed as an argument to a netlink callback, causing invalid stack memory when the callback fires. Affected are Snapdragon families across many devices and SoCs (e.g., Snapdragon Auto/Consumer IOT/Industrial IOT, IoT, Mobi...

CVE-2021-1941

CVE-2021-1941 corresponds to a Qualcomm WLAN issue: a possible buffer over-read caused by an improper length check on the WPA IE string, affecting multiple Snapdragon platforms (Auto/Compute/Connectivity/Consumer Electronics Connectivity/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wired Infr...

CVE-2021-1972

CVE-2021-1972 is a Qualcomm WLAN host vulnerability described as a buffer overflow caused by improper validation of device types during P2P search in Snapdragon platforms (Auto/Compute/Connectivity/…/Wired Networking). Affected products are Qualcomm/Snapdragon WLAN components; CVSS v3.1 base scor...

CVE-2024-23368

CVE-2024-23368 is a memory corruption issue in Qualcomm’s embedded platform concerning the SMEM Partition Handler. The vulnerability arises when allocating and accessing an entry in an SMEM partition, effectively a classic buffer copy without proper input size checking, which can lead to memory c...

CVE-2019-10595

CVE-2019-10595 is a Qualcomm/Qualcomm WLAN issue affecting Snapdragon components (e.g., APQ8009, APQ8053, APQ8064, IPQ4019, MDM9206, SDM660, QCA9880, etc.) where a lack of validation of the tid value parsed from firmware packets can cause a buffer overwrite in the message handler. The vulnerabili...

CVE-2019-14060

CVE-2019-14060 is a vulnerability described as uninitialized stack data usage when memory for a blob is not allocated or is smaller than the required struct, caused by a missing check of the return value for read/write blob operations in Qualcomm Snapdragon components (Android/Snapdragon Auto, Co...

CVE-2020-11301

CVE-2020-11301 describes improper authentication of unencrypted plaintext Wi‑Fi frames within encrypted networks, enabling information disclosure in Snapdragon platforms (Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & ...

CVE-2021-30325

CVE-2021-30325 is a Qualcomm/Qualcomm-derived vulnerability affecting Snapdragon family components (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables, Wired Infrastructure and Networking). The root cause is an input validation/resource allocation flaw leading to out-of...

CVE-2020-11173

CVE-2020-11173 describes a race condition caused by two threads running from user space in Qualcomm/ Snapdragon fastRPC driver. Public records show this vulnerability as affecting Qualcomm Kernel components with high severity (local) and is listed in CVE-2020-11173 across multiple vendor advisori...

CVE-2021-1974

CVE-2021-1974 is described in connected sources as a buffer issue (buffer over-read) due to misalignment between IPA SMMU and WLAN SMMU mapping lengths in Snapdragon platforms (Auto/Compute/Connectivity/IoT/Wearables/Networking). Qualcomm/Red Hat/NVD entries label it as high severity with network...

CVE-2024-33050

CVE-2024-33050 affects Qualcomm WLAN host components and describes a Transient Denial of Service during MBSSID processing when constructing new Information Elements in beacon/probe frames. Root cause is a missing/improper IE length check; impact is DoS with network access, no confidentiality/inte...

CVE-2021-1927

CVE-2021-1927 describes a use-after-free in the Qualcomm FastRPC driver affecting Snapdragon devices (Auto, Compute, Connectivity, IoT, Mobile, Wearables, etc.). The root cause is a missing null check while memory is being freed, enabling a local attacker to trigger memory corruption with effects...

CVE-2021-30335

CVE-2021-30335 describes a logic issue in Qualcomm’s Snapdragon family where an assertion may occur in QOS handling due to improper validation when multiple add/update requests arrive concurrently. The vulnerability is reported against Qualcomm Snapdragon Auto/Compute/Connectivity/IoT/Industrial ...

CVE-2023-28541

CVE-2023-28541 affects Qualcomm Data Modem (WLAN), with memory corruption during DMA buffer release involving CFR data. CVSSv3.1 base score 7.8 (HIGH) via NVD/Qualcomm metrics; impact includes confidentiality, integrity, and availability. Connected sources confirm the issue under Qualcomm compone...

CVE-2019-10481

CVE-2019-10481 affects Qualcomm WLAN host components in Snapdragon platforms (e.g., APQ8096AU, IPQ4019/IPQ8064/IPQ8074, MDM9607, MSM8996AU, QCA6574AU, QCA8081, QCN7605, SDX55, SM6150/7150/8150) where an out-of-bounds access occurs due to a missing check on a buffer argument coming from WLAN firmw...

CVE-2020-3700

CVE-2020-3700 concerns a possible out-of-bounds read in the wifi driver across Snapdragon Auto, Compute, Connectivity, Consumer IOT, Mobile, Voice & Music, Wearables, and related Snapdragon platforms (APQ8053, APQ8096AU, IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM8909W, MSM8996AU, QCA6574AU, QCA9531,...

CVE-2023-33028

CVE-2023-33028 describes a memory corruption vulnerability in Qualcomm WLAN firmware during a pmk cache memory copy, classified as buffer copy without checking size. Public records indicate potential remote code execution with high impact on confidentiality, integrity, and availability (CVSS 3.1:...

CVE-2021-1891

CVE-2021-1891 is a Qualcomm audio-driver use-after-free vulnerability (pointer mismanagement) impacting Snapdragon platforms (Auto/Compute/Connectivity/IoT variants). It affects the Audio component; root cause is use-after-free in the audio driver, with impact on confidentiality, integrity, and a...

CVE-2019-10480

CVE-2019-10480 describes an out-of-bounds write in the WMI firmware event handler caused by inadequate validation of data from WLAN firmware. Affected are Qualcomm/Snapdragon platforms (e.g., APQ8009, SDM- series, QCS/SC variants) across multiple product families (Auto, Consumer Electronics Conne...

CVE-2021-1947

CVE-2021-1947 is a use-after-free in the kernel graphics driver caused by storing an invalid pointer inside Qualcomm Snapdragon components (Snapdragon Compute, Connectivity, Industrial IoT, Mobile, Wearables, Wired Infrastructure and Networking). The entry indicates a local, low-effort attack pat...

CVE-2021-30337

CVE-2021-30337 describes a local-use-after-free/double-free vulnerability in Qualcomm/Snapdragon kernel components where process shell memory is freed via an IOCTL during initialization. This can lead to memory corruption with potential impact to confidentiality, integrity, and availability as in...

CVE-2019-10518

CVE-2019-10518 describes a use-after-free of a pointer in the iWLAN path during the netmgr state transition to CONNECT on Qualcomm Snapdragon platforms (covering APQ8009, APQ8017, APQ8053, APQ8064, APQ8096AU, APQ8098, IPQ... SXR2130, etc.). The issue spans Snapdragon Auto, Compute, Consumer IoT, ...

CVE-2019-10607

CVE-2019-10607 describes an out-of-bounds memcpy issue in Qualcomm Snapdragon firmware/stack affecting numerous Snapdragon SoCs (APQ/SDX/SM8140 family and related). The root cause is providing an embedded NULL character with a string length greater than the actual string length, leading to out-of...

CVE-2019-2304

CVE-2019-2304 describes an integer overflow that can lead to a buffer overflow due to insufficient validation of firmware event arguments. Affects Snapdragon platforms (e.g., IPQ4019, IPQ8064, IPQ8074, MDM9607, MSM9xxx, SDM/B series) across multiple product families (Auto, Electronics Connectivit...

CVE-2020-11267

CVE-2020-11267 involves a stack out-of-bounds write during the setup of a cipher device when the IV length exceeds the maximum limit on Qualcomm/Snapdragon devices (Auto/Compute/Connectivity/Consumer IoT/Industrial IOT/Mobile/Voice & Music/Wearables/Wired Infrastructure). The vulnerability affect...

CVE-2021-30312

CVE-2021-30312 concerns an improper authentication of sub-frames of a multicast AMSDU frame that can cause information disclosure in Qualcomm Snapdragon-based devices (e.g., Snapdragon Auto/Compute/Connectivity, IoT variants, and related Qualcomm WLAN components). The issue is triggered via malfo...

CVE-2021-35071

CVE-2021-35071 is a buffer over-read in Qualcomm Snapdragon components caused by lack of size validation when copying data from the DBR buffer to the RX buffer, leading to Denial of Service. Affected products span Snapdragon Auto, Compute, Connectivity, Industrial IoT, Mobile, Wearables, and Wire...

CVE-2023-28554

CVE-2023-28554 concerns Qualcomm IPC. Connected sources describe an information-disclosure vulnerability arising when reading values from shared memory inside a VM, attributed to a buffer over-read in the Qualcomm IPC path. The issue impacts confidentiality and is characterized with local access ...