CVE-2019-14016

CVE-2019-14016 is an integer overflow in Qualcomm Snapdragon components when playing certain clips, spanning numerous Snapdragon Auto/Compute/Connectivity/IoT and related SoCs (e.g., APQ8009/8017/8053/8064/8096/8953, SDM/SM series, Nicobar, etc.). Root cause, as described in Red Hat/NVD entries, ...

CVE-2019-10482

CVE-2019-10482 describes a timing side-channel vulnerability caused by non-time-constant comparison functions, potentially enabling SUI corruption on Qualcomm Snapdragon platforms. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, ...

CVE-2019-10611

CVE-2019-10611 is a buffer overflow in Qualcomm Snapdragon components (multiple Snapdragon Auto/Compute/Connectivity/IoT/Wearables devices) caused by not checking object size before parsing clip data. The entry covers a wide set of Snapdragon platforms (APQ8009, APQ8017, APQ8053, APQ8064, APQ8096...

CVE-2019-2274

CVE-2019-2274 describes an Improper Access Control issue for RPU write access from the secure processor in Qualcomm-supplied Snapdragon platforms (Auto, Compute, CE Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wired Infrastructure/Networking). Affected families include APQ80...

CVE-2019-10516

CVE-2019-10516 is described as multiple read overflows in MM during decoding of service accept/reject and MT detach, affecting a broad list of Qualcomm Snapdragon platforms (e.g., APQ8009, APQ8017, SDM4xx, SM8x, SXR1130, and other Snapdragon lines). Root cause: read overflow in MM when decoding s...

CVE-2019-14013

CVE-2019-14013 affects Snapdragon SoCs (listed family) and is triggered by parsing of an invalid super index table, potentially causing invalid data to be read into the table. The NVD entry rates it as CRITICAL (CVSS 3.1: 9.8) with NETWORK attack vector, no user interaction, and high impact on co...

CVE-2019-14055

The CVE-2019-14055 issue affects a broad range of Qualcomm/Snapdragon devices (Snapdragon Auto, Compute, Consumer Electronics Connectivity, IoT, etc.) across many SoCs (APQ, MSM, SDX, SXR, SC8180X, etc.). Root cause: a use-after-free and potential double-free due to not clearing a buffer after fr...

CVE-2018-11271

CVE-2018-11271 is an improper authentication vulnerability affecting Qualcomm Snapdragon platforms (broad range of Snapdragon Auto/Compute/Connectivity/IoT families and related devices). The issue relates to remote command handling caused by improper event handling, enabling potential unauthorize...

CVE-2019-14017

CVE-2019-14017 describes a heap buffer overflow while parsing invalid MKV clips with malformed Vorbis data in Snapdragon hardware and Qualcomm software stacks. Affected are a wide range of Qualcomm/Snapdragon devices and components (e.g., Snapdragon Auto/Compute/Connectivity, IoT lines, and Qualc...

CVE-2019-10605

The CVE-2019-10605 issue is a buffer overwrite in the IEEE80211 header filling function caused by a missing range check on an array index sourced from firmware, affecting Qualcomm Snapdragon WLAN host components across multiple SoCs (e.g., APQ8009, APQ8053, IPQ8074, MDM9607, MDM9650, SDM630, SDM6...

CVE-2019-10602

CVE-2019-10602 affects Qualcomm display components (display HW composer) on Snapdragon platforms (APQ8053, APQ8096AU/APQ8098, MDM9…/MSM89xx, SDM845, SM8150, etc.). Description: potential use-after-free heap error during Validate/Present calls in the display HW composer, leading to local impact wi...

CVE-2019-10500

CVE-2019-10500: A buffer overflow occurs while processing MT Secondary PDP requests due to an incorrect calculation of buffer size in Qualcomm Snapdragon platforms. Affected products include Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, IoT, Mobile, Voice & Music, Wearables across numer...

CVE-2019-10532

CVE-2019-10532 describes a null-pointer dereference when calculating string length if the source string length is zero, affecting Qualcomm Snapdragon components (Auto, Connectivity, Consumer IoT, Industrial IoT, IoT, Mobile, Voice & Music, Wearables) across numerous Snapdragon SOCs (e.g., APQ8009...

CVE-2019-10548

CVE-2019-10548 is a heap use-after-free in the datad IPC handle during DPL initialization that can occur if modem SSR happens concurrently, reported for Snapdragon Auto/Compute/IoT/Wearables platforms (list of affected SoCs). The issue is documented with CVSS v2/v3 scores (7.2/7.8, HIGH) and LOCA...

CVE-2019-10584

CVE-2019-10584 affects Qualcomm/Snapdragon components (Snapdragon Auto, Compute, Connectivity, Consumer IOT/Industrial IOT, Mobile, Wearables, etc.) with an out-of-bounds access in the debug queue when the packet size field is corrupted. The issue is documented across multiple vendors, including ...

CVE-2019-10561

The CVE-2019-10561 entry concerns Snapdragon components (Auto/Compute/Connectivity, etc.) where improper initialization of local variables that are parameters to the sfs API can cause an invalid pointer dereference, leading to a Denial of Service. Affected families include numerous Snapdragon SoC...

CVE-2019-14004

CVE-2019-14004 is a buffer overflow in the MKV/EBML handling path affecting numerous Qualcomm/Snapdragon platforms (e.g., APQ80xx/SDM/SM… families) when processing an invalid MKV clip with an invalid EBML size. Public sources (NVD, Red Hat, CVE listing) describe the issue as a buffer overflow in ...

CVE-2019-10558

CVE-2019-10558 describes an out-of-bounds condition in the Qualcomm FastRPC HLOS driver when transferring data from APPS to DSP, where a data buffer controllable by the DSP on a range of Snapdragon platforms (Auto/Compute/CE Connectivity/IoT/Industrial IoT/Mobile/Voice & Music/Wearables) could be...

CVE-2019-10544

CVE-2019-10544 is a Snapdragon/Qualcomm vulnerability described as an improper length check on a source buffer that handles userspace data, leading to out-of-bounds access in diag handlers across a wide range of Qualcomm Snapdragon families (APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9xxx,...

CVE-2019-10578

The CVE-2019-10578 issue is a null pointer dereference that can occur while parsing a clip, affecting a broad set of Qualcomm Snapdragon products (Auto/Compute/Connectivity/IoT lines) and various SoCs (e.g., APQ8xxx, MSM/SDX families) as listed in the initial description. The root cause is a cras...

CVE-2019-14006

CVE-2019-14006 describes a buffer overflow in clip playback due to missing offset length checks in multiple Qualcomm Snapdragon components (e.g., Snapdragon Auto/Compute/Connectivity, Consumer IoT, Industrial IoT, IoT, Mobile, Wearables) across numerous Qualcomm platforms (APQ8xxx, SDM/SM series,...

CVE-2021-30327

CVE-2021-30327 describes a buffer overflow in the Sahara protocol during command processing that overwrites secure configuration data in Qualcomm Snapdragon products. Affected are Snapdragon Mobile, Compute, Auto, IOT, Connectivity, and Voice & Music lines. Root cause: buffer overflow in Sahara p...

CVE-2018-13886

Technical details about CVE-2018-13886 are not publicly available in the provided documents; no affected products, versions, or fixes are specified here. Monitor for updates.

CVE-2018-11940

CVE-2018-11940 is a Qualcomm WLAN Host vulnerability caused by a lack of length validation before memcpy in the WLAN function, leading to out-of-bounds access in multiple Snapdragon platforms (Auto/Compute/Consumer IOT/Industrial IOT, Mobile) across listed SoCs. Connected sources confirm affected...

CVE-2018-13885

CVE-2018-13885 describes a memory overread in Qualcomm Snapdragon components (e.g., Snapdragon Auto/Compute/IoT, mobile, wearables) that could allow access to sensitive data. The issue is documented across multiple sources (NVD, Red Hat, CVE list, PRION) with consistent wording: a memory overread...

CVE-2019-13994

CVE-2019-13994 concerns memory corruption and potential information leakage caused by a missing validation: the current received data fragment size read from shared memory is not checked to be less than the actual packet size. This affects a wide range of Qualcomm Snapdragon families and devices ...

CVE-2019-2277

CVE-2019-2277 affects Qualcomm Snapdragon WLAN-related components (e.g., MSM8996AU and related SD/SDX devices). The issue is described as an out-of-bounds read caused by lack of NULL termination on user-controlled data in WLAN paths across numerous Snapdragon platforms. CVSS metrics in the Datapo...

CVE-2020-3654

CVE-2020-3654 is a buffer overflow in Qualcomm closed‑source components (Qualcomm/ Snapdragon) where SIP message processing fails to validate an index before copying data. The vulnerability is rated Critical (CVSS v3.1/10.0) with network access and no user interaction, implying potential remote c...

CVE-2020-3673

CVE-2020-3673 is a vulnerability reported in Qualcomm closed-source components affecting Snapdragon/Qualcomm stack. The issue is a buffer overflow during SIP message processing where values are stored in an array without validating the index length, enabling potential arbitrary code execution wit...

CVE-2018-11930

CVE-2018-11930: Improper input validation in WLAN function can cause integer truncation. Affected Qualcomm Snapdragon families include Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/Mobile across SDM/SDX/SM7150 and related platforms; CVSSv3 base 9.8 (Network, low attack complexity, no user i...

CVE-2019-14053

CVE-2019-14053 involves a stack out-of-bounds read when creating a new XFRM policy if the template mode does not map to a valid XFRM mode in Qualcomm Snapdragon-based platforms (e.g., Snapdragon Auto/Compute and other Snapdragon family devices). Affected component is the kernel/network/XFRM logic...

CVE-2019-2269

CVE-2019-2269 describes a possible buffer overflow in Qualcomm Snapdragon components when processing the high level lim process action frame due to improper buffer length validation. Affected products include Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/Mobile/Voice & Music across numerous...

CVE-2019-10538

CVE-2019-10538 is a Qualcomm Qualcomm WLAN/modem/Linux-kernel-driver issue caused by a lack of check of address range received from firmware, allowing the modem to respond with arbitrary pages into the HLOS address space and potentially compromise the device OS. Affected stack includes Snapdragon...

CVE-2020-3641

CVE-2020-3641 is a Qualcomm closed‑source component issue (Snapdragon) involving an integer overflow when atom size is smaller than atom offset due to improper validation. Affected products span Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wearables across numerous SoC...

CVE-2018-11967

CVE-2018-11967 concerns signature verification of the skel library that could be disabled because the memory region where the library is loaded is allocated from userspace in Qualcomm/Snapdragon subsystems. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial Io...

CVE-2018-13896

CVE-2018-13896 affects Qualcomm closed-source components (XBL_SEC image authentication and related crypto checks) across Snapdragon platforms. Root cause: missing lock at the XBL_SEC stage allowing a compromised OEM XBL Loader to access image authentication and crypto validations. Impact per sour...

CVE-2018-13899

CVE-2018-13899 describes a use-after-free memory fault in Qualcomm Snapdragon components when processing messages after an error, affecting a wide range of Snapdragon Auto/Compute/Connectivity/IoT/Wearables platforms (e.g., SDM630/660/665/670/675/820/845/855 and related QCS/SDA/X20/X24/X5 familie...

CVE-2019-14054

CVE-2019-14054 describes an improper permissions issue in the XBL_SEC region that lets a local attacker update XBL_SEC code/data and divert the RAM dump path to a normal cold boot path on Qualcomm Snapdragon platforms. Affected families include Snapdragon Compute, Snapdragon Consumer IoT, Snapdra...

CVE-2019-14072

CVE-2019-14072 describes a race condition in Qualcomm/Snapdragon kernel/JPU handling leading to an unhandled paging request by dereferencing a freed object due to concurrent sparse free and sparse bind ioctls. Affected are Snapdragon Auto/Compute/IoT/Wearables platforms across numerous SoCs (e.g....

CVE-2019-2261

CVE-2019-2261 describes information disclosure caused by unauthorized access from the GPU subsystem to HLOS/non-secure memory. The vulnerability affects Qualcomm devices across multiple Snapdragon families (e.g., IPQ8074, MDM9xxx, MSM8xxx, SD-series including SD625/SD820/SD835/SD845/SD850, SDM43x...

CVE-2018-12005

CVE-2018-12005: Unprivileged user can issue a binder call to trigger a system halt on Qualcomm Snapdragon devices (wide range of Snapdragon Auto/Compute/IoT/Mobile families listed). Root cause described as Binder/CVE in Qualcomm components; affected products include Snapdragon 210/400/600/800 ser...

CVE-2019-10553

CVE-2019-10553 affects Qualcomm Snapdragon platforms. The issue is multiple read overflows caused by improper length checks during authentication decoding in Cs domain/RAU Reject and TC cmd paths. Affected products span extensive Snapdragon families (APQ8009, APQ8017, APQ8053, APQ8096, APQ8096AU,...

CVE-2018-13887

CVE-2018-13887 describes an integer overflow vulnerability caused by untrusted header fields in the GNSS XTRA3 function, affecting Qualcomm Snapdragon platforms (Auto, Compute, IOT variants across multiple Snapdragon and QC700-series devices). The root cause is untrusted data in GNSS XTRA3 header...

CVE-2019-14077

CVE-2019-14077 is a memory-about-out-of-bounds issue in Snapdragon SoCs where an ese transmit command can corrupt memory by using a user-supplied Response buffer. Affected products span Qualcomm-based hardware in Snapdragon Auto/Compute/Connectivity/IoT/Industrial IoT, including various Snapdrago...

CVE-2019-2243

CVE-2019-2243 describes a possible buffer overflow at the end of an iteration when retrieving version information, potentially leading to information disclosure. Affected components are Qualcomm Snapdragon family (across numerous Snapdragon Auto/Compute/IoT lines and related SoCs listed in the de...

CVE-2019-2275

CVE-2019-2275 centers on a buffer overflow during deserialization of a key blob in Qualcomm Snapdragon firmware (multiple Snapdragon Auto/Compute/Connectivity/Secure elements). The issue arises when key operations are invoked and depends on CVE-2018-13907. Affected components include numerous Sna...

CVE-2020-3639

CVE-2020-3639 is reported as a critical issue affecting Qualcomm Snapdragon components (closed‑source) across multiple Snapdragon lines. The root cause described in the provided documents is handling of non‑standard SIP SigComp messages, which may cause excessive UDVM cycles or memory overflow. T...

CVE-2020-3657

Technical details for CVE-2020-3657 are not publicly available in the provided documents. Monitor for updates; current sources do not disclose affected products, root cause, or fixes.

CVE-2018-11958

CVE-2018-11958 affects a wide range of Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Consumer/IoT/Industrial IoT, Snapdragon Mobile, Snapdragon Voice & Music) and related Media/SoC components. The root issue is insufficient protection of keypad keys, which could allow a high-security, high...

CVE-2018-13924

The CVE-2018-13924 entry concerns a buffer length validation flaw that can take negative values, causing a stack overflow in Qualcomm components across many Snapdragon platforms (Auto/Compute/Connectivity/IOT/Industrial IOT, Mobile, Wearables, etc.) including IPQ8074 family and various SD/SM/QR s...