CVE-2019-2244

CVE-2019-2244 affects Qualcomm Snapdragon firmware components across a wide range of SoCs. The issue is a possible integer underflow when calculating the length of elementary stream info from an invalid section length, which is then used to read from the input buffer. Impact is described as poten...

CVE-2020-11164

CVE-2020-11164 describes a privilege-escalation issue in Qualcomm Snapdragon platforms where a third-party app can call broadcasts in Perfdump, abusing access controls. Affected products include Snapdragon Auto, Connectivity, Consumer IoT, Industrial IoT, Mobile, Wearables across numerous SoCs (e...

CVE-2018-11928

CVE-2018-11928 is a buffer-overflow vulnerability caused by a missing length parameter check when processing WMI commands in Qualcomm Snapdragon components. Affected are Snapdragon Auto/Compute/Connectivity devices (various SD/SM/QCA platforms) and related Android stack components that use Qualco...

CVE-2018-13925

CVE-2018-13925 describes a heap-use-after-free in Qualcomm Snapdragon devices caused by an error in parsing the PMT table, where memory is freed but the context map reference is not reset. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, We...

CVE-2019-10540

CVE-2019-10540 is a buffer overflow in the WLAN firmware (Qualcomm/QualPwn context) affecting multiple Snapdragon platforms, where a missing bounds check on the NAN availability attribute count enables overrun in the WLAN/NAN path. Affected hardware includes IPQ8074, MSM8996AU, QCA6174A, QCA6574A...

CVE-2019-10541

CVE-2019-10541 affects Qualcomm Snapdragon platforms (various Snapdragon Auto/Compute/Consumer IoT/Industrial IoT/Mobile/Wearables) where a dereference on an uninitialized buffer can occur while parsing an FLV clip with corrupted codec-specific data. The issue stems from improper handling during ...

CVE-2019-13998

CVE-2019-13998 affects Qualcomm closed‑source components on Snapdragon SoCs (various Snapdragon Auto/Compute/Connectivity lines and related PCIe/telemetry stacks) with a root cause described as a lack of bounds checking on TX FIFO write/read indices read from shared RAM, enabling memory corruptio...

CVE-2018-11924

The CVE-2018-11924 description is supported by connected documents, which indicate an improper buffer length validation in WLAN functionality can cause an integer overflow in Qualcomm/Qualcomm-based Snapdragon WLAN hosts. Affected products include Snapdragon Auto/Compute/Consumer Electronics Conn...

CVE-2018-11937

CVE-2018-11937 affects Qualcomm Snapdragon WLAN components across Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/Mobile families (listed in the description). The root cause is a lack of input validation before copying, causing a buffer over-read in the WLAN function. CVSS indicates CRITICAL ...

CVE-2018-13895

CVE-2018-13895 describes an issue where missing permissions on several content providers in the RCS app’s Android manifest could enable unprivileged access on Qualcomm Snapdragon platforms (covering a broad set of Snapdragon Auto, Compute, Connectivity, IoT, Wearable, and related devices). The ro...

CVE-2019-2275

CVE-2019-2275 centers on a buffer overflow during deserialization of a key blob in Qualcomm Snapdragon firmware (multiple Snapdragon Auto/Compute/Connectivity/Secure elements). The issue arises when key operations are invoked and depends on CVE-2018-13907. Affected components include numerous Sna...

CVE-2019-2279

CVE-2019-2279 affects Qualcomm/Snapdragon components (e.g., Snapdragon Auto/Connectivity/Consumer IOT/Industrial IOT, Snapdragon Mobile, Wearables, and related SoCs such as MDM9150, MDM9607, MDM9650, various SDx/SDM/QCA families). Root cause: shared memory is updated with invalid data, causing me...

CVE-2020-3639

CVE-2020-3639 is reported as a critical issue affecting Qualcomm Snapdragon components (closed‑source) across multiple Snapdragon lines. The root cause described in the provided documents is handling of non‑standard SIP SigComp messages, which may cause excessive UDVM cycles or memory overflow. T...

CVE-2019-10497

Technical details about CVE-2019-10497 are not publicly provided in the supplied documents. No specifics on affected products, root cause, or fixes are available here. Monitor for updates.

CVE-2019-10550

The CVE-2019-10550 issue affects Qualcomm Snapdragon line devices (e.g., various Snapdragon Auto/Compute/Consumer IOT/Industrial IOT, Mobile, Wearables families) where a buffer over-read occurs when a UE processes a network-received message without zero termination. The root cause is a missing ze...

CVE-2018-11923

This CVE (CVE-2018-11923) is a buffer-length–checking bug that can cause an integer overflow and subsequent buffer overflow in the WMA event handler. It affects Qualcomm/Snapdragon device families including Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, and Snapdragon Mobile across numer...

CVE-2018-11968

CVE-2018-11968 is described as an integer overflow due to an improper check before assigning a value in Qualcomm/Snapdragon components (including IPQ4019 through SD variants). The impact is high for confidentiality, integrity, and availability per CVSS, with local attack possible and low complexi...

CVE-2018-13927

CVE-2018-13927 concerns Qualcomm Snapdragon platforms (multiple Snapdragon Auto/Compute/Connectivity/IOT/Mobile/related SDMs) where the debug policy with invalid signature could be loaded even when debug policy is disabled by using parallel image loading. The issue is described consistently acros...

CVE-2018-5877

CVE-2018-5877 describes a vulnerability in the device programmer target-side code for firehose used on Qualcomm Snapdragon platforms. The issue arises because a string may not be properly NULL terminated, potentially leading to an incorrect buffer size in Snapdragon Automotive, Mobile, and Wear d...

CVE-2019-10523

CVE-2019-10523 is associated with a Qualcomm closed‑source component and is rated Moderate in the Pixel bulletin. The issue describes target-specific data being sent to a remote server, resulting in information exposure across Snapdragon platforms (Auto, Compute, IoT, Mobile, Wearables) and a lon...

CVE-2019-10628

CVE-2019-10628 describes a memory-corruption issue in the kernel where a random index can manipulate TLB entries via a user library provenance. Affected devices include Snapdragon platforms (APQ8098, SDM660/670/710/845/850, SMx series, QCS/QCN/SCx, and others listed in the entry). The root cause ...

CVE-2020-11123

CVE-2020-11123 describes an information disclosure in the gatekeeper TrustZone throttling mechanism that could bypass brute-force protections on lock-screen passwords in Qualcomm Snapdragon-based devices (various APQ/SDM/MDM families). Connected sources confirm it affects Qualcomm closed-source c...

CVE-2020-3630

CVE-2020-3630 covers a potential out-of-bounds access when processing responses from video firmware in Qualcomm Snapdragon platforms (Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Wearables, etc.). The root cause is described as out-of-bounds access in the video co...

CVE-2020-3670

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2018-11289

CVE-2018-11289 corresponds to a data truncation causing a buffer overflow in Qualcomm/ Snapdragon components (e.g., Snapdragon Auto, Compute, Connectivity, and other Snapdragon variations). The root cause is a higher-to-lower type conversion that allocates less memory than required, enabling pote...

CVE-2018-5871

CVE-2018-5871 affects Qualcomm/Snapdragon components where MAC address randomization during probe requests is broken due to a flawed RNG that repeats output earlier than expected. Affected are numerous Snapdragon/SDM/MDM platforms listed in the description (e.g., MDM9206, SD 820A, SD 835, SD 845,...

CVE-2019-14053

CVE-2019-14053 involves a stack out-of-bounds read when creating a new XFRM policy if the template mode does not map to a valid XFRM mode in Qualcomm Snapdragon-based platforms (e.g., Snapdragon Auto/Compute and other Snapdragon family devices). Affected component is the kernel/network/XFRM logic...

CVE-2019-14114

CVE-2019-14114 describes a buffer overflow in WLAN firmware when parsing a GTK Information Element containing a GTK key longer than the buffer size, affecting Qualcomm Snapdragon family devices (numerous APQ, IPQ, MDM, QCA, and SM series). Root cause: GTK IE parsing overflow in WLAN firmware; con...

CVE-2020-3633

CVE-2020-3633 describes an array-out-of-bounds condition that can occur when playing MP3 files due to an offset check not validating against the allocated buffer in Qualcomm Snapdragon products (various Auto/Compute/IoT/Wearable families including APQ8009, SDM… and SXR2130). The issue affects a w...

CVE-2017-18329

CVE-2017-18329 describes a potential buffer overflow in RTP packet handling on Qualcomm Snapdragon automotive and wearable platforms. Affected are Snapdragon Automotive/Wear devices across listed Snapdragon/HW variants (e.g., MDM9615/9625/9635M/9640/9645/9650/9655, MSM8909W, MSM8996AU, SD 210–SD ...

CVE-2019-14061

CVE-2019-14061 describes a null-pointer dereference that can occur when accessing the segment element info that is not allocated/assigned in multiple Qualcomm/Snapdragon platforms (e.g., Snapdragon Auto/Compute/Connectivity, Snapdragon IoT, Mobile, Wearables, etc.). Affected families include APQ8...

CVE-2019-14065

CVE-2019-14065 is a vulnerability described as a pointer double free in HavenSvc caused by not resetting the freed pointer to NULL. It affects a wide range of Qualcomm-Snapdragon platforms (Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wired Networking) across mul...

CVE-2017-11004

CVE-2017-11004 affects Qualcomm Snapdragon components across multiple platforms (e.g., IPQ8074, MDM9xxx, MSM8996AU and a wide range of SD-series chipsets) where a non-secure user can access certain registers in Snapdragon Automotive, Mobile and Wear devices. The impact is local with partial confi...

CVE-2018-11849

The CVE-2018-11849 entry describes a buffer overflow caused by a missing bounds check on the out-of-range bssid parameter during scan start processing in Qualcomm Snapdragon wireless code. Affected devices/SoCs include Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear platforms across num...

CVE-2019-10515

CVE-2019-10515 describes a vulnerability in the DCI client on Qualcomm Snapdragon devices where a preemptively freed DCI client could be accessed to transfer packets, potentially causing a kernel error. Affected products listed in Red Hat/NVD entries include numerous Snapdragon Auto/IoT/Mobile fa...

CVE-2019-10574

CVE-2019-10574 describes a vulnerability due to lack of boundary checks for data offsets from HLOS, enabling an out-of-bounds read in Qualcomm-derived platforms (Snapdragon family such as Auto, Compute, Connectivity, etc.). The NVD entry lists affected Qualcomm/SoC families (APQ8009, SDM8xx, SM8x...

CVE-2019-10589

CVE-2019-10589 concerns Qualcomm’s closed‑source components and affects multiple Snapdragon SKUs (Auto, Compute, Connectivity, IoT, Mobile, etc.). The issue is a lack of length checking of a GP command response buffer, which can cause a buffer overflow during response handling in affected Snapdra...

CVE-2019-14043

CVE-2019-14043 is a memory_out_of_bounds issue described as an out-of-bounds read in the Fingerprint application due to data used without length checks across Qualcomm/Snapdragon platforms (including Snapdragon Auto, Compute, Connectivity, and various Snapdragon devices). The core vulnerability i...

CVE-2019-14073

CVE-2019-14073 is a Qualcomm/Qualcomm closed‑source component vulnerability in the modem data path where RTCP messages are copied into an output buffer without verifying the destination size, potentially enabling remote stack overflow when processing large or non‑standard RTCP data. Public docume...

CVE-2019-14078

CVE-2019-14078: Out-of-bounds memory access during processing of qpay due to failure to validate the length of the response buffer. Affected components are Qualcomm Snapdragon families (Snapdragon Auto/Compute/Consumer IoT/Industrial IoT/Mobile/Voice & Music/Wired Infrastructure & Networking) acr...

CVE-2019-2235

CVE-2019-2235 affects Qualcomm Snapdragon platforms listed in the vulnerability details. A buffer overflow occurs when the emulated RPMB is used, caused by sector-size assumptions in the trusted application (TA) rollback protection logic. The vulnerability impacts confidentiality, integrity, and ...

CVE-2019-2287

CVE-2019-2287 involves an improper validation in inputs received from firmware that can cause an out-of-bounds write in the video driver within Qualcomm Snapdragon components (across many Snapdragon Auto/Compute/IoT/mobile/wearables families). The issue is tied to the video subsystem and has been...

CVE-2019-2333

Technical details about CVE-2019-2333 are not publicly provided in the supplied documents. Monitor for updates as more specifics (affected components, root cause, remediation) may be disclosed in future disclosures.

CVE-2020-3616

CVE-2020-3616 describes a buffer overflow in Qualcomm Snapdragon display code caused by a memory copy using strcpy without length checking. Affected products include Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, and Wearables across APQ8017/8053/8096AU/8098, ...

CVE-2018-11264

CVE-2018-11264 involves a buffer overflow in the Ontario fingerprinting code in Qualcomm Snapdragon platforms (Ontario fingerprint code) across multiple Snapdragon variants. The root cause is a lack of input validation for parameters entering TZ from HLOS, leading to a potential buffer overflow. ...

CVE-2018-11938

CVE-2018-11938 affects Qualcomm/Snapdragon components (e.g., IPQ8074, MSM89xx, SDx series, etc.) via improper input validation of an HLOS argument, causing potential buffer overflows and unexpected behavior. Root cause is input validation failure in the argument path from HLOS; impact could invol...

CVE-2019-10491

CVE-2019-10491 affects Qualcomm ADSP (Audio DSP) across a broad set of Snapdragon platforms (e.g., IPQ4019, IPQ8064, IPQ8074, MDM9150/9206/9607/9640/9650, MSM8909W/8996AU, QCS405/605, SD-series like SD 210–435/439, SD 450, 615/16/625/632/636/665/675, 712/710/670, 730, 820/820A, 835, 845/850, 855,...

CVE-2019-13999

CVE-2019-13999 involves a lack of check for integer overflow during round-up and addition, causing memory corruption and potential information leakage on multiple Qualcomm/Snapdragon platforms. The vulnerability affects a wide range of Snapdragon products (Auto, Compute, Connectivity, Consumer El...

CVE-2019-2245

CVE-2019-2245 is a Qualcomm/Snapdragon vulnerability describing a possible integer underflow when calculating the length of an elementary stream map from an invalid packet length, which is then used to read from an input buffer. Affected products include a broad set of Snapdragon platforms (Auto,...

CVE-2019-2247

CVE-2019-2247 involves a potential double-free condition triggered when running multiple smp2p tests due to missing protection for a global variable across Qualcomm Snapdragon platforms (Auto/Compute/IoT/Industrial IoT/Smart wearables and multiple SoCs). The issue affects a broad set of devices (...