CVE-2018-5871

CVE-2018-5871 affects Qualcomm/Snapdragon components where MAC address randomization during probe requests is broken due to a flawed RNG that repeats output earlier than expected. Affected are numerous Snapdragon/SDM/MDM platforms listed in the description (e.g., MDM9206, SD 820A, SD 835, SD 845,...

CVE-2017-18314

CVE-2017-18314 affects Qualcomm closed‑source components. The entry notes that on TZ cold boot the CNOC_QDSS RG0, which is locked by xBL_SEC, is cleared by TZ. This is categorized as a Critical issue in the Qualcomm closed‑source component list and is referenced in Android/industry bulletins. The...

CVE-2018-11291

CVE-2018-11291 affects Qualcomm Snapdragon and related IPs (e.g., IPQ8074, MDM9xxx, QCA family, SD/MOD platforms) with a cryptographic RNG that is not strong enough. The issue is described in the CVE as cryptographic issues due to weak randomness in NAN, affecting listed Snapdragon/SoC families. ...

CVE-2018-11292

CVE-2018-11292 involves Qualcomm Snapdragon WLANWMI command handlers with lack of input validation, affecting a wide range of Snapdragon SoCs (e.g., MDM9206/9607/9640/9650, MSM89xx, QCA6574AU/6584, SD 210–212, 410/12, 425, 427, 430, 435, 450, 615/16/SD 415, 625, 650/52, 820A, SDM429/439/630/632/6...

CVE-2017-18302

CVE-2017-18302 affects Qualcomm Snapdragon SoCs (MSM8996AU and numerous SD/i variants listed) where a crafted HLOS client can modify in-memory structures passed to a QSEE application between check and use. This leads to arbitrary writes to TZ kernel memory regions, i.e., local elevation of privil...

CVE-2018-11287

CVE-2018-11287 affects Qualcomm Video components in Snapdragon/Qualcomm closed‑source stack (mobile, automotive, wearables) across listed SDM/SM and Snapdragon platforms. Root cause is an incorrect control flow when verifying buffer sufficiency in video processing, enabling potential abuse within...

CVE-2018-11290

CVE-2018-11290 concerns Qualcomm/Snapdragon platforms where MAC address randomization during probe requests is not properly implemented due to a flawed RNG. The NVD entry lists affected Snapdragon/Mobile/Wear families (e.g., MDM9xxx, SD/SM-series, Snapdragon_High_Med_2016) and explicitly states t...

CVE-2017-18280

CVE-2017-18280 : In Snapdragon platforms (Automobile, Mobile, Wear) across listed SoCs, a trusted application that has opened an SPI/I2C interface to a device could allow another trusted application to read data via the SPI/I2C read function. The initial disclosures list the affected families (e....

CVE-2017-18301

CVE-2017-18301 concerns Qualcomm/ Snapdragon components used in Small Cell SoC and Snapdragon devices (Automobile, Mobile, Wear) including FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8909W, SD 425/427/430/435/450, SD 617/625/650/52, SD 820/820A, SD 835, SD 845, SDM630/636/660, SDX20, Snapdrag...

CVE-2018-11268

CVE-2018-11268 describes a potential buffer overflow in Snapdragon/Qualcomm components when parsing TFTP options on a wide range of SoCs (e.g., MDM9206/9607/9635M/9640/.../SD 810–845). The connected documents confirm affected Snapdragon/Qualcomm closed‑source components; however, the exact root c...

CVE-2017-18282

CVE-2017-18282 concerns non-secure software enabling SDCC to generate secure bus accesses, potentially exposing RPM control on a range of Qualcomm Snapdragon platforms (Snapdragon Mobile/Wear) including devices with MDM9206, MDM9607, MDM9650 and SoCs/SD cards: SD 210/212/205, SD 425, 430, 450, 62...

CVE-2018-11267

Technical details about CVE-2018-11267 are not publicly available in the provided connected documents. The entry lists affected Qualcomm/SD components but does not specify root cause, vulnerable versions, impact specifics, or remediation. Monitor for updates.

CVE-2018-11269

The CVE-2018-11269 entry concerns Qualcomm Snapdragon SoCs (listed in the initial description) where a potential buffer overflow may occur when parsing TFTP options. The affected product families include automotive, mobile, and wearables with processors such as MDM9206, MDM9607, MDM9635M, MDM9640...

CVE-2018-11277

The CVE-2018-11277 issue affects Snapdragon devices (Automobile, Mobile, Wear) with listed MSM/SD platforms where the vendor package com.qualcomm.embms is deployed in the system image and has an inadequate permission level. This allows any app installed from the Play Store to request this permiss...

CVE-2018-11982

CVE-2018-11982 affects Snapdragon platforms (Mobile/Wear) including MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/212/205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 835, Snapdragon_High_M...