CVE-2018-12005

CVE-2018-12005: Unprivileged user can issue a binder call to trigger a system halt on Qualcomm Snapdragon devices (wide range of Snapdragon Auto/Compute/IoT/Mobile families listed). Root cause described as Binder/CVE in Qualcomm components; affected products include Snapdragon 210/400/600/800 ser...

CVE-2018-13895

CVE-2018-13895 describes an issue where missing permissions on several content providers in the RCS app’s Android manifest could enable unprivileged access on Qualcomm Snapdragon platforms (covering a broad set of Snapdragon Auto, Compute, Connectivity, IoT, Wearable, and related devices). The ro...

CVE-2018-13924

The CVE-2018-13924 entry concerns a buffer length validation flaw that can take negative values, causing a stack overflow in Qualcomm components across many Snapdragon platforms (Auto/Compute/Connectivity/IOT/Industrial IOT, Mobile, Wearables, etc.) including IPQ8074 family and various SD/SM/QR s...

CVE-2019-10507

CVE-2019-10507 describes a vulnerability in Qualcomm/Snapdragon firmware where the device fails to validate extscan change results from firmware, allowing an out-of-bounds read in multiple Snapdragon families (Auto, Connectivity, IOT, etc.). The root cause is lack of proper bounds/checks during e...

CVE-2019-10541

CVE-2019-10541 affects Qualcomm Snapdragon platforms (various Snapdragon Auto/Compute/Consumer IoT/Industrial IoT/Mobile/Wearables) where a dereference on an uninitialized buffer can occur while parsing an FLV clip with corrupted codec-specific data. The issue stems from improper handling during ...

CVE-2020-11123

CVE-2020-11123 describes an information disclosure in the gatekeeper TrustZone throttling mechanism that could bypass brute-force protections on lock-screen passwords in Qualcomm Snapdragon-based devices (various APQ/SDM/MDM families). Connected sources confirm it affects Qualcomm closed-source c...

CVE-2020-3639

CVE-2020-3639 is reported as a critical issue affecting Qualcomm Snapdragon components (closed‑source) across multiple Snapdragon lines. The root cause described in the provided documents is handling of non‑standard SIP SigComp messages, which may cause excessive UDVM cycles or memory overflow. T...

CVE-2018-11958

CVE-2018-11958 affects a wide range of Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Consumer/IoT/Industrial IoT, Snapdragon Mobile, Snapdragon Voice & Music) and related Media/SoC components. The root issue is insufficient protection of keypad keys, which could allow a high-security, high...

CVE-2019-2323

CVE-2019-2323 describes a lack of validation of user-passed crypto engine data, which can lead to a bus error in Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Compute/Consumer IOT/Industrial IOT, Mobile, Voice & Music, Wearables) across numerous SDM/SDX/SD platforms. Root cause is uninitia...

CVE-2019-14074

CVE-2019-14074 describes a heap overflow in the diag command handler caused by missing packet-length validation, affecting numerous Qualcomm Snapdragon platforms (e.g., APQ8009, SDM8xx/9x, and other Snapdragon families). The issue is localized (local attacker) and is described in public CVE listi...

CVE-2019-2279

CVE-2019-2279 affects Qualcomm/Snapdragon components (e.g., Snapdragon Auto/Connectivity/Consumer IOT/Industrial IOT, Snapdragon Mobile, Wearables, and related SoCs such as MDM9150, MDM9607, MDM9650, various SDx/SDM/QCA families). Root cause: shared memory is updated with invalid data, causing me...

CVE-2020-11164

CVE-2020-11164 describes a privilege-escalation issue in Qualcomm Snapdragon platforms where a third-party app can call broadcasts in Perfdump, abusing access controls. Affected products include Snapdragon Auto, Connectivity, Consumer IoT, Industrial IoT, Mobile, Wearables across numerous SoCs (e...

CVE-2018-11924

The CVE-2018-11924 description is supported by connected documents, which indicate an improper buffer length validation in WLAN functionality can cause an integer overflow in Qualcomm/Qualcomm-based Snapdragon WLAN hosts. Affected products include Snapdragon Auto/Compute/Consumer Electronics Conn...

CVE-2018-13925

CVE-2018-13925 describes a heap-use-after-free in Qualcomm Snapdragon devices caused by an error in parsing the PMT table, where memory is freed but the context map reference is not reset. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, We...

CVE-2019-13998

CVE-2019-13998 affects Qualcomm closed‑source components on Snapdragon SoCs (various Snapdragon Auto/Compute/Connectivity lines and related PCIe/telemetry stacks) with a root cause described as a lack of bounds checking on TX FIFO write/read indices read from shared RAM, enabling memory corruptio...

CVE-2019-14038

CVE-2019-14038 is a buffer over-read in the ADSP parse function caused by a missing check for sufficient data payload in a Qualcomm Snapdragon ADSP command response. Affected are Snapdragon products across multiple lines (Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, We...

CVE-2019-14043

CVE-2019-14043 is a memory_out_of_bounds issue described as an out-of-bounds read in the Fingerprint application due to data used without length checks across Qualcomm/Snapdragon platforms (including Snapdragon Auto, Compute, Connectivity, and various Snapdragon devices). The core vulnerability i...

CVE-2018-11928

CVE-2018-11928 is a buffer-overflow vulnerability caused by a missing length parameter check when processing WMI commands in Qualcomm Snapdragon components. Affected are Snapdragon Auto/Compute/Connectivity devices (various SD/SM/QCA platforms) and related Android stack components that use Qualco...

CVE-2018-11968

CVE-2018-11968 is described as an integer overflow due to an improper check before assigning a value in Qualcomm/Snapdragon components (including IPQ4019 through SD variants). The impact is high for confidentiality, integrity, and availability per CVSS, with local attack possible and low complexi...

CVE-2019-14078

CVE-2019-14078: Out-of-bounds memory access during processing of qpay due to failure to validate the length of the response buffer. Affected components are Qualcomm Snapdragon families (Snapdragon Auto/Compute/Consumer IoT/Industrial IoT/Mobile/Voice & Music/Wired Infrastructure & Networking) acr...

CVE-2019-2247

CVE-2019-2247 involves a potential double-free condition triggered when running multiple smp2p tests due to missing protection for a global variable across Qualcomm Snapdragon platforms (Auto/Compute/IoT/Industrial IoT/Smart wearables and multiple SoCs). The issue affects a broad set of devices (...

CVE-2018-11289

CVE-2018-11289 corresponds to a data truncation causing a buffer overflow in Qualcomm/ Snapdragon components (e.g., Snapdragon Auto, Compute, Connectivity, and other Snapdragon variations). The root cause is a higher-to-lower type conversion that allocates less memory than required, enabling pote...

CVE-2018-5871

CVE-2018-5871 affects Qualcomm/Snapdragon components where MAC address randomization during probe requests is broken due to a flawed RNG that repeats output earlier than expected. Affected are numerous Snapdragon/SDM/MDM platforms listed in the description (e.g., MDM9206, SD 820A, SD 835, SD 845,...

CVE-2019-10550

The CVE-2019-10550 issue affects Qualcomm Snapdragon line devices (e.g., various Snapdragon Auto/Compute/Consumer IOT/Industrial IOT, Mobile, Wearables families) where a buffer over-read occurs when a UE processes a network-received message without zero termination. The root cause is a missing ze...

CVE-2020-3622

CVE-2020-3622 refers to a vulnerability where a channel name string read from shared memory can be manipulated but not NULL-terminated, leading to potential memory corruption in Qualcomm Snapdragon components. Affected families include Snapdragon Auto/Compute/Connectivity, various Snapdragon SoCs...

CVE-2020-3670

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2025-59610

CVE-2025-59610 represents a memory corruption vulnerability that occurs when processing IOCTL requests with mismatched API versions, caused by concurrent modification of a user-space buffer. The CVSS 3.1 vector (L/H/C/I/A) indicates a Local, High complexity, High privileges required, no user inte...

CVE-2017-18329

CVE-2017-18329 describes a potential buffer overflow in RTP packet handling on Qualcomm Snapdragon automotive and wearable platforms. Affected are Snapdragon Automotive/Wear devices across listed Snapdragon/HW variants (e.g., MDM9615/9625/9635M/9640/9645/9650/9655, MSM8909W, MSM8996AU, SD 210–SD ...

CVE-2018-11937

CVE-2018-11937 affects Qualcomm Snapdragon WLAN components across Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/Mobile families (listed in the description). The root cause is a lack of input validation before copying, causing a buffer over-read in the WLAN function. CVSS indicates CRITICAL ...

CVE-2018-13927

CVE-2018-13927 concerns Qualcomm Snapdragon platforms (multiple Snapdragon Auto/Compute/Connectivity/IOT/Mobile/related SDMs) where the debug policy with invalid signature could be loaded even when debug policy is disabled by using parallel image loading. The issue is described consistently acros...

CVE-2019-10523

CVE-2019-10523 is associated with a Qualcomm closed‑source component and is rated Moderate in the Pixel bulletin. The issue describes target-specific data being sent to a remote server, resulting in information exposure across Snapdragon platforms (Auto, Compute, IoT, Mobile, Wearables) and a lon...

CVE-2019-10574

CVE-2019-10574 describes a vulnerability due to lack of boundary checks for data offsets from HLOS, enabling an out-of-bounds read in Qualcomm-derived platforms (Snapdragon family such as Auto, Compute, Connectivity, etc.). The NVD entry lists affected Qualcomm/SoC families (APQ8009, SDM8xx, SM8x...

CVE-2019-14061

CVE-2019-14061 describes a null-pointer dereference that can occur when accessing the segment element info that is not allocated/assigned in multiple Qualcomm/Snapdragon platforms (e.g., Snapdragon Auto/Compute/Connectivity, Snapdragon IoT, Mobile, Wearables, etc.). Affected families include APQ8...

CVE-2019-14065

CVE-2019-14065 is a vulnerability described as a pointer double free in HavenSvc caused by not resetting the freed pointer to NULL. It affects a wide range of Qualcomm-Snapdragon platforms (Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wired Networking) across mul...

CVE-2019-2235

CVE-2019-2235 affects Qualcomm Snapdragon platforms listed in the vulnerability details. A buffer overflow occurs when the emulated RPMB is used, caused by sector-size assumptions in the trusted application (TA) rollback protection logic. The vulnerability impacts confidentiality, integrity, and ...

CVE-2019-2287

CVE-2019-2287 involves an improper validation in inputs received from firmware that can cause an out-of-bounds write in the video driver within Qualcomm Snapdragon components (across many Snapdragon Auto/Compute/IoT/mobile/wearables families). The issue is tied to the video subsystem and has been...

CVE-2019-2333

Technical details about CVE-2019-2333 are not publicly provided in the supplied documents. Monitor for updates as more specifics (affected components, root cause, remediation) may be disclosed in future disclosures.

CVE-2020-11196

CVE-2020-11196 is a vulnerability where an integer overflow can overflow into a buffer during ASF clip playback when the clip has an unexpected number of codec entries. Reported affects Qualcomm Snapdragon multimedia components across a wide range of SoCs (e.g., APQ8009/9W, APQ8017, APQ8037, APQ8...

CVE-2020-3633

CVE-2020-3633 describes an array-out-of-bounds condition that can occur when playing MP3 files due to an offset check not validating against the allocated buffer in Qualcomm Snapdragon products (various Auto/Compute/IoT/Wearable families including APQ8009, SDM… and SXR2130). The issue affects a w...

CVE-2018-11849

The CVE-2018-11849 entry describes a buffer overflow caused by a missing bounds check on the out-of-range bssid parameter during scan start processing in Qualcomm Snapdragon wireless code. Affected devices/SoCs include Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear platforms across num...

CVE-2018-11923

This CVE (CVE-2018-11923) is a buffer-length–checking bug that can cause an integer overflow and subsequent buffer overflow in the WMA event handler. It affects Qualcomm/Snapdragon device families including Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, and Snapdragon Mobile across numer...

CVE-2019-10497

Technical details about CVE-2019-10497 are not publicly provided in the supplied documents. No specifics on affected products, root cause, or fixes are available here. Monitor for updates.

CVE-2019-10551

CVE-2019-10551 describes a string processing error in non-standard SIP messages that can cause a buffer overread and denial of service on Qualcomm/Snapdragon platforms (Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, IoT, Mobile, Wearables) across numerous Snapdragon families. The vulnera...

CVE-2019-10628

CVE-2019-10628 describes a memory-corruption issue in the kernel where a random index can manipulate TLB entries via a user library provenance. Affected devices include Snapdragon platforms (APQ8098, SDM660/670/710/845/850, SMx series, QCS/QCN/SCx, and others listed in the entry). The root cause ...

CVE-2019-14056

CVE-2019-14056 describes a possible integer overflow in an API caused by no check on large oid range counts in a cert extension field, affecting a wide range of Snapdragon chipsets (Auto, Compute, IoT, Mobile, etc.). The root cause is overflow when handling large OID range counts in cert extensio...

CVE-2019-14114

CVE-2019-14114 describes a buffer overflow in WLAN firmware when parsing a GTK Information Element containing a GTK key longer than the buffer size, affecting Qualcomm Snapdragon family devices (numerous APQ, IPQ, MDM, QCA, and SM series). Root cause: GTK IE parsing overflow in WLAN firmware; con...

CVE-2019-2320

CVE-2019-2320 describes a possible out-of-bounds write in a MT SMS/SS scenario caused by improper validation of an array index in Qualcomm Snapdragon components (including Snapdragon Auto/Compute/IoT/Wearables families and numerous SoCs). Affected areas span many Snapdragon platforms (e.g., APQ8x...

CVE-2020-3626

CVE-2020-3626 affects Qualcomm closed‑source components on various Snapdragon platforms (e.g., APQ8053, SDM/SM variants). The underlying issue is reported as an authentication flaw where the AIDL uimlpaservice has insufficient protection, allowing any application to bind to the service and exerci...

CVE-2020-3630

CVE-2020-3630 covers a potential out-of-bounds access when processing responses from video firmware in Qualcomm Snapdragon platforms (Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Wearables, etc.). The root cause is described as out-of-bounds access in the video co...

CVE-2018-11938

CVE-2018-11938 affects Qualcomm/Snapdragon components (e.g., IPQ8074, MSM89xx, SDx series, etc.) via improper input validation of an HLOS argument, causing potential buffer overflows and unexpected behavior. Root cause is input validation failure in the argument path from HLOS; impact could invol...