CVE-2019-2324

CVE-2019-2324 affects Qualcomm Snapdragon devices where ADSP can be compromised, causing the audio port index returned by ADSP to be out of bounds and trigger out-of-bound access across a wide range of Snapdragon products (Auto, Connectivity, IoT, Wearables, and other SKUs). Root cause is an inte...

CVE-2019-2327

CVE-2019-2327 describes a possible buffer overflow when playing a clip with an incorrect element size affecting a wide range of Qualcomm Snapdragon platforms (Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, IoT, Mobile, Voice & Music, Wearables, and related SDM/SD/ Snapdragon families). T...

CVE-2014-9993

CVE-2014-9993 is a buffer overread vulnerability affecting Android on Qualcomm Snapdragon platforms (including automotive/mobile/wear MDMs and Snapdragon SD/SoC families) that may occur when provisioning content with a large message. The available sources describe the issue as a large-message pro...

CVE-2015-9140

CVE-2015-9140 affects Android devices with Qualcomm Snapdragon Mobile, Snapdragon Wear and listed Small Cell SoCs (e.g., FSM9055, MDM9xxx, MSM8909W, SD family) where the online memory dump feature can allow unauthorized memory access. Root cause: improper protection in the online memory dump path...

CVE-2015-9172

The CVE-2015-9172 issue affects Android platforms with WideVine API on Qualcomm Snapdragon families (Automotive, Mobile, Wear) including devices using SD 210/212/205, 400, 410/12, 425, 430, 450, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820/820A, 835, 845, 850. In a WideVine API function, a bu...

CVE-2015-9177

CVE-2015-9177 describes a buffer over-read in a crypto API function on Android devices using Qualcomm Snapdragon (broad range of Automotive/Mobile/Wearable SD family) prior to the 2018-04-05 patch level. The issue is rated high/critical, with CVSSv3.0 vectors indicating network access, no user in...

CVE-2015-9190

CVE-2015-9190 describes an integer overflow in boot_clobber_check_local_address_range() on certain Qualcomm Snapdragon platforms (SD 210/212/205, SD 400/410/12/16, SD 600/615/16/SD 415, SD 808, SD 810, IPQ4019, MDM9xx, MSM89xx, etc.). The overflow can bypass the clobber protection check, leading ...

CVE-2016-10437

CVE-2016-10437 is an information-disclosure vulnerability affecting Android devices with Qualcomm networking components. In affected Android versions prior to 2018-04-05 patch level (and related patches for various Qualcomm SoCs such as Small Cell, Snapdragon Mobile/Wear families and SDR devices ...

CVE-2016-10457

CVE-2016-10457 affects Android on Qualcomm Snapdragon-based devices (multiple SoCs listed) where an app requests more permissions than required. The issue is described as a permission overreach with a high-impact risk profile (CVSS v3: 9.8, Network, No user interaction) and is documented for Andr...

CVE-2016-10472

CVE-2016-10472 affects Qualcomm Snapdragon mobile and wearable SoCs (e.g., MDM9206/9607/9650, MSM8909W, SD 210/212/205, 400, 410/12, 425, 430, 450, 600, 615/16/415, 617, 625, 650/52, 800, 808, 810, 820, 835, SDX20). Root cause: HLOS kernel failed to check address and size passed to TZ_INFO_GET_SE...

CVE-2017-18124

CVE-2017-18124 : The description in the linked sources states that during secure boot an addition is performed on uint8 pointers, causing an overflow. This affects a broad set of Qualcomm/Snapdragon devices (e.g., FSM9055, IPQ4019, MDM9xxx, MSM/SDA/XOA families and many SD series SKUs). The conne...

CVE-2017-18310

CVE-2017-18310 affects Qualcomm closed‑source components in Snapdragon devices, with the issue described as a code injection vulnerability involving ClientEnv exposing services 0–32 to the HLOS. The associated records (NVD/NIST, CVE list, prion entry) indicate local attack feasibility and a high/...

CVE-2017-18330

CVE-2017-18330 describes a buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in Qualcomm Snapdragon-based platforms (automotive, mobile, wearables) across numerous SoCs and SD/SoC families. The issue affects components implementing AES-CCM/GCM and can impact confidential...

CVE-2018-11932

CVE-2018-11932 involves improper input validation that could allow RW access from the host OS to a secure subsystem in Snapdragon Auto, Compute, Connectivity, and related Snapdragon devices (MDM9650/9655, MSM8996AU, QCS605, SD 410/12, SD 615/16/SD 415, SD 675, SD 712/710/670, SD 820/820A/835/845/...

CVE-2018-5838

CVE-2018-5838 concerns an “Improper Validation of Array Index” in the Adreno OpenGL driver affecting Snapdragon platforms (Automobile, Mobile, Wear). The issue can lead to an out-of-bounds access in SurfaceFlinger . According to the NVD entry, it has a CVSS v3.0 base score of 7.8 (High) , with LO...

CVE-2019-10489

CVE-2019-10489 involves a possible null-pointer dereference when parsing an AVI clip during copy in Qualcomm Snapdragon drivers across many Snapdragon products. Root cause: null pointer in parsing/copy path. Impact: high, with potential crash (availability) and no confidentiality/integrity impact...

CVE-2019-10508

CVE-2019-10508 describes a vulnerability due to lack of input validation for data received from user space, which can cause out-of-bounds access in WLAN on Snapdragon devices. Affected families include Snapdragon Auto, Snapdragon Connectivity, Snapdragon IOT, Snapdragon Mobile, and others listed ...

CVE-2019-2253

CVE-2019-2253 is a buffer over-read that can occur when parsing a corrupted OGG comment block in Qualcomm Snapdragon devices (listed families). The root cause is parsing a stream with malformed metadata leading to reading beyond bounds. The description and connected documents do not provide expli...

CVE-2019-2328

CVE-2019-2328 describes a potential buffer overflow when the number of channels exceeds the size of the channel mapping array in Qualcomm/ Snapdragon audio-related components (across multiple Snapdragon families). The vulnerability is listed under Qualcomm Audio in the 2019 Android security conte...

CVE-2014-9988

CVE-2014-9988 affects Android on Qualcomm Snapdragon devices (Automotive, Mobile, Wear, and listed SD families). Root cause: lack of input validation for message length leads to a buffer over-read in drm_app_encapsulate_save_keys. Impact: critical risk across confidentiality, integrity, and avail...

CVE-2015-9160

CVE-2015-9160 affects Qualcomm‑based Android devices (Snapdragon) prior to 2018-04-05 SPLs, where an integer overflow may occur in TZBSP_GFX_DCVS_UPDATE_ID when HLOS graphics driver busy time and total time values are very large. The issue is documented in NVD with a CVSS v3.0 base score of 9.8 (...

CVE-2015-9186

CVE-2015-9186 affects Android on Qualcomm Snapdragon family (automobile, mobile, wearables) and several SoCs (e.g., SD 210/212/205, 400/410, 425/430/450, 615/625/650/52, 800/808/810/820/835/845, 850) where a buffer over-read can occur in a PlayReady API function. The issue is documented with a hi...

CVE-2015-9206

Technical details about CVE-2015-9206 are not publicly provided in the connected documents. The materials available here reiterate the issue description but do not specify affected products, root cause, impact, or remediation. Monitor for updates.

CVE-2015-9211

CVE-2015-9211 describes a buffer overread in the PlayReady module affecting Android devices with Qualcomm Snapdragon ranges (Automobile, Mobile, Wear) prior to the 2018-04-05 patch level. The issue occurs when a large PlayReady message is processed, potentially impacting confidentiality, integrit...

CVE-2016-10452

CVE-2016-10452 affectsAndroid environments on Qualcomm Snapdragon Automotive and Snapdragon Mobile (SD 410/12, 425, 430, 450, 615/16/415, 617, 625, 650/52, 808, 810, 820, 820A, 835). Root cause: memory protection assertion occurs after out-of-order termination of a trusted application (TA). Impac...

CVE-2017-18126

CVE-2017-18126 affects Android on Qualcomm-based devices (e.g., Snapdragon/WLAN stacks) where the original mac spoofing feature in probe requests for cfg80211 scan, vendor scan, and pno scan did not use randomized sequence numbers or randomized source addresses. This privacy-related flaw could af...

CVE-2018-11921

The CVE-2018-11921 entry concerns a failure-condition handling defect that fails to return the correct error code. Affects Snapdragon family components across numerous SoCs (e.g., MDM9206, MDM9607, MDM9650, MSM8996AU, SD/SDX-series, SDA-series, SXR1130) and can cause unintended SUI behavior or di...

CVE-2018-11931

CVE-2018-11931 is listed in the Qualcomm closed-source components section of the 2019 Android security bulletin. The vulnerability is described as improper access to HLOS when transferring memory to CPZ in multiple Snapdragon/SOC families (e.g., MDM/SD series and Snapdragon channels). The CVSS da...

CVE-2018-13913

CVE-2018-13913 describes an unauthorized access vulnerability caused by improper validation of an array index while processing debugFS in Qualcomm Snapdragon components. The CNVD entry (CNVD-2019-05662) specifies this vulnerability as affecting multiple Qualcomm products and variants, including M...

CVE-2018-5918

CVE-2018-5918 describes a possible buffer overflow in the DRM Trusted application on Qualcomm Snapdragon platforms (e.g., MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD family up to SDX24 and SXR1130, including SD410/12, SD425, SD430, SD450, SD615/16/SD415, SD625, SD650/52, SD800, SD810, SD82...

CVE-2019-2254

CVE-2019-2254 affects Qualcomm Snapdragon platforms (multiple Snapdragon Auto/Compute/IoT/Mobile lines, including various SD/SDM/RH-series) where position-determination accuracy can be degraded due to wrongly decoded information. The root cause is not explicitly detailed beyond the decoding error...

CVE-2019-2272

CVE-2019-2272 is a buffer overflow in the display function caused by insufficient validation of the header block size in Qualcomm Snapdragon devices (including Snapdragon Auto/IoT/Mobile/Wearables families such as SD 210–SD 212/SD 205, 425, 427, 430, 435, 450, 615/16/415, 625, 636, 650/52, 712/71...

CVE-2019-2341

CVE-2019-2341 describes a buffer overflow in the audio subsystem when a user-provided audio buffer size exceeds the maximum allowed. Affected: Snapdragon SoCs and families listed in the entry (e.g., Snapdragon Auto/Compute/IoT, Snapdragon Mobile, Wearables, etc.). Root cause: unchecked size in au...

CVE-2014-9991

CVE-2014-9991 describes a buffer overflow in Qualcomm closed-source Android components when USB mass storage transfers exceed 16kB. Public sources (CNVD-2018-08826, NVD entry) tie this issue to Android devices using Qualcomm Snapdragon/mobile platforms (e.g., MDM9206/9625/9635M/etc., SD series) a...

CVE-2015-9115

CVE-2015-9115 affects Android on Qualcomm Snapdragon platforms (Automotive and Mobile MDM9625 and several Snapdragon 410/12/425/430/450/615/16/415/617/625/650/52/820/820A). The root cause is missing validation of the address argument in the qsee_prng_getdata syscall, enabling potential misuse. Re...

CVE-2015-9132

CVE-2015-9132: In Android on Qualcomm Snapdragon mobile/Small Cell SoCs (FSM9055 and SD variants listed) prior to the 2018-04-05 patch level, there is an arbitrary memory read due to an untrusted pointer dereference when handling HLOS-controlled values passed to the QSEE syscall helper. Affected ...

CVE-2015-9216

CVE-2015-9216 concerns Android devices using Qualcomm Snapdragon and related chipsets where the USB subsystem mishandles simultaneous interrupts during USB RESET and EP COMPLETE. Affected products span Snapdragon Mobile/Wear platforms (MDM9206/9607/9625/9635M/ MSM8909W) and various Snapdragon SD ...

CVE-2016-10436

CVE-2016-10436 affects Android on Qualcomm/Qualcomm-based SoCs (e.g., Qualcomm Small Cell SoC, Snapdragon Mobile and Wear FSM9055; IPQ4019/IPQ8064/MDM92xx/MSM89xx/SD family and related SDX20 devices). The issue is improper input validation on a read path that leads to memory corruption in the aff...

CVE-2016-10473

The CVE-2016-10473 entry describes a buffer overflow in a Qualcomm Snapdragon-based Android platform's supplementary services function, affecting Android versions prior to patch levels 2018-04-01/2018-04-05. Affected devices include Snapdragon Mobile and Snapdragon Wear families (e.g., MDM9206, M...

CVE-2016-10498

CVE-2016-10498 affects Android devices with Qualcomm Snapdragon platforms (e.g., MDM9635M/9645/9650/9655, SD 210–650 series, SDM630/636/660, Snapdragon_High_Med_2016). The issue arises when stopping of the DTR occurs prematurely, which can cause the micro kernel to become stuck; the trigger is a ...

CVE-2017-17773

CVE-2017-17773 affects Qualcomm closed‑source components used in Snapdragon Automotive/Wearable and various Snapdragon mobile platforms (e.g., MDM9206/9607/9650 and many SD/MSM variants). The vulnerability stems from improper input validation in the function video_fmt_mp4r_process_atom_avc1(), wh...

CVE-2017-18072

CVE-2017-18072 affects Android on Qualcomm Snapdragon/mobile platforms (list of affected SoCs) where probe requests from a user’s device reveal information elements that specify supported Wi‑Fi features, creating a potential privacy risk if sniffed. The root cause is the disclosure of Wi‑Fi infor...

CVE-2017-18295

CVE-2017-18295 describes a possible buffer overflow in the DSP Service module across Snapdragon platforms (Automobile, Mobile, Wear) for various Qualcomm SoCs (MDM9206/9607/9650, MSM8909W/8996AU, SD family up to SD835/SDX20). Root cause: input that is not null terminated may overflow a buffer, po...

CVE-2017-18323

CVE-2017-18323 involves cryptographic key material leakage in TDSCDMA RRC debug messages affecting Qualcomm Snapdragon components across multiple platforms (e.g., MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU) and various SD/SoC families (e.g., SD 21...

CVE-2018-11279

CVE-2018-11279 describes a buffer overflow caused by lack of input size checking in Qualcomm Snapdragon components for automotive, mobile, and wearables. Affected families include a long list of Qualcomm/SDM/SD variations (e.g., MDM9206, MDM9607, SD 210/212/205, SD 410/12, SD 625, SD 835, SD 845/...

CVE-2018-13897

CVE-2018-13897 affects Snapdragon devices running dnsmasq, where a hostname is added to the device’s DNS records, causing information exposure (confidentiality impact). Affected families include Snapdragon Auto, Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, Wearables across numerous SD...

CVE-2018-5869

CVE-2018-5869 concerns improper input validation in the QTEE keymaster app, leading to invalid memory access on Qualcomm Snapdragon mobile/wear platforms. Affected are devices using several Snapdragon families (e.g., MDM9206, MDM9607, MSM8909W, SD 210/212/205, SD 410/12, SD 615/16/SD 415, SD 800,...

CVE-2019-2306

CVE-2019-2306 is described as: an improper casting of a structure while handling a buffer causes an out-of-bounds read in the display code across Snapdragon platforms (Snapdragon Auto, Connectivity, Consumer IoT, Industrial IoT, IoT, Mobile, Voice & Music, Wearables) on multiple SoCs (e.g., SD se...

CVE-2019-2325

CVE-2019-2325 affects a wide range of Qualcomm Snapdragon components (Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/IoT/Mobile/Voice & Music/Wearables) across multiple platforms (MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, QCS405, QCS605, and various SD/SDM/SDA/SDX ser...

CVE-2019-2332

CVE-2019-2332 : A memory corruption issue in Qualcomm Snapdragon families (numerous SDMs/SDX/SDA/SM models) arises when payload size is not validated before memory access. CVSSv3.1 base score 9.8 (CRITICAL; Network, Low, None) per NVD; exploitation could occur remotely without user interaction. C...