CVE-2019-14061

CVE-2019-14061 describes a null-pointer dereference that can occur when accessing the segment element info that is not allocated/assigned in multiple Qualcomm/Snapdragon platforms (e.g., Snapdragon Auto/Compute/Connectivity, Snapdragon IoT, Mobile, Wearables, etc.). Affected families include APQ8...

CVE-2019-14073

CVE-2019-14073 is a Qualcomm/Qualcomm closed‑source component vulnerability in the modem data path where RTCP messages are copied into an output buffer without verifying the destination size, potentially enabling remote stack overflow when processing large or non‑standard RTCP data. Public docume...

CVE-2019-14078

CVE-2019-14078: Out-of-bounds memory access during processing of qpay due to failure to validate the length of the response buffer. Affected components are Qualcomm Snapdragon families (Snapdragon Auto/Compute/Consumer IoT/Industrial IoT/Mobile/Voice & Music/Wired Infrastructure & Networking) acr...

CVE-2020-3622

CVE-2020-3622 refers to a vulnerability where a channel name string read from shared memory can be manipulated but not NULL-terminated, leading to potential memory corruption in Qualcomm Snapdragon components. Affected families include Snapdragon Auto/Compute/Connectivity, various Snapdragon SoCs...

CVE-2019-10494

CVE-2019-10494 is a race condition in the camera function stack due to missing resource locks, leading to memory corruption and a use-after-free in Qualcomm/Snapdragon device families (APQ8009, APQ8017, APQ8053, … SM8150). The issue affects Snapdragon Auto, Snapdragon Mobile, and related SoCs; Re...

CVE-2019-10577

CVE-2019-10577 is a buffer over-read caused by improper input validation when processing SIP URIs in Qualcomm Snapdragon modem/processor families (e.g., Snapdragon Auto, Compute, IoT, Mobile, Wearables). The issue can lead to denial of service. Affected products span numerous Qualcomm platforms l...

CVE-2019-10615

CVE-2019-10615 describes an integer overflow in keymaster 4 during memory allocation caused by multiplying a large numcerts value by the size of the keymaster blob, potentially leading to memory corruption on a wide set of Snapdragon-based devices (APQ8009/8017/8053/8096A U and many more). The is...

CVE-2018-11264

CVE-2018-11264 involves a buffer overflow in the Ontario fingerprinting code in Qualcomm Snapdragon platforms (Ontario fingerprint code) across multiple Snapdragon variants. The root cause is a lack of input validation for parameters entering TZ from HLOS, leading to a potential buffer overflow. ...

CVE-2018-11820

CVE-2018-11820 concerns a side-channel leak caused by using a non-time-constant memcmp function in Qualcomm/Snapdragon components. Affected platforms include Snapdragon Auto/Compute/Connectivity, Snapdragon IoT lines and many SDM/SD/SDM variants (e.g., IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640,...

CVE-2018-11971

CVE-2018-11971 concerns an interrupt exit code flow issue that may undermine the TrustZone access control on Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Compute/Consumer devices and various Qualcomm SoCs). Descriptions across sources consistently state risk of secure asset leakage within...

CVE-2019-10530

CVE-2019-10530 involves a kernel-level buffer overflow caused by a missing check for data truncation in Qualcomm Snapdragon kernel components. Affected are numerous Snapdragon families (Auto, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) across many SDM and Snapdragon Snapdragon...

CVE-2019-14127

CVE-2019-14127 : A possible buffer overflow during MKV playback due to improper validation of the atom size buffer in Qualcomm Snapdragon video paths (Snapdragon Auto/Compute/Consumer IoT/Industrial IoT/Mobile/Wearables, etc.) affecting a wide range of Snapdragon families (APQ, MDM, MSM, Nicobar/...

CVE-2019-2245

CVE-2019-2245 is a Qualcomm/Snapdragon vulnerability describing a possible integer underflow when calculating the length of an elementary stream map from an invalid packet length, which is then used to read from an input buffer. Affected products include a broad set of Snapdragon platforms (Auto,...

CVE-2019-2246

CVE-2019-2246: A memory-corruption issue where thread start can trigger invalid memory writes in the kernel due to a user-provided argument, affecting Qualcomm Snapdragon-based devices (e.g., Snapdragon Auto/Compute/Connectivity, Snapdragon Mobile across numerous SoCs). Root cause: improper handl...

CVE-2018-11966

CVE-2018-11966 affects Qualcomm Snapdragon platforms (Auto/Compute/IoT/Wearables/SXR1130 family and multiple SDMs) across numerous devices (e.g., SD 210–DDR list, 625, 632, 650/52, 675, 712/710/670, 820/820A, 835/850, 855, 9120-era GPUs) due to undefined behavior in UE when processing an unknown ...

CVE-2019-10485

CVE-2019-10485 involves an infinite loop when decoding compressed data that can cause an overrun condition in various Snapdragon platforms (Auto, Compute, IoT, Mobile, Wearables, etc.). The issue affects a broad set of Qualcomm/Snapdragon components and is driven by a decoding loop condition, as ...

CVE-2019-10594

CVE-2019-10594 is a stack overflow vulnerability in Snapdragon media SDP handling when FMTP in an M-line carries multiple payload types. Affected are Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, Wearables across numerous SoC families (APQ, MDM, MSM variants)...

CVE-2019-14015

CVE-2019-14015 affects Snapdragon platforms (multiple APQ/SDM variants) where a stack-based buffer overflow occurs during the identification stage initialization due to inadequate validation of the number of templates. This vulnerability is rated HIGH (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A...

CVE-2019-14021

CVE-2019-14021 is a buffer overrun in Qualcomm Snapdragon components triggered during EFS filename and payload processing over the diag interface due to missing length checks. This affects a wide range of Snapdragon products (e.g., APQ8096AU/APQ8098, MDM9150/MDM9206/MDM9607/MDM9640/MDM9650, MSM89...

CVE-2019-14028

CVE-2019-14028 is a Qualcomm Snapdragon vulnerability: a buffer overwrite during memcpy caused by a missing SSID length validation in multiple Snapdragon components (Auto, Compute, Connectivity, and related Snapdragon families on various SoCs). Root cause documented as lack of check on SSID lengt...

CVE-2019-2292

CVE-2019-2292 affects Qualcomm WLAN Host components in Snapdragon devices (e.g., Snapdragon Auto/Consumer IoT/Industrial IoT and mobile families listed). Root cause: out-of-bounds access due to buffer copy without checking input size received from WLAN firmware. Impact: potential local code execu...

CVE-2019-2320

CVE-2019-2320 describes a possible out-of-bounds write in a MT SMS/SS scenario caused by improper validation of an array index in Qualcomm Snapdragon components (including Snapdragon Auto/Compute/IoT/Wearables families and numerous SoCs). Affected areas span many Snapdragon platforms (e.g., APQ8x...

CVE-2020-11196

CVE-2020-11196 is a vulnerability where an integer overflow can overflow into a buffer during ASF clip playback when the clip has an unexpected number of codec entries. Reported affects Qualcomm Snapdragon multimedia components across a wide range of SoCs (e.g., APQ8009/9W, APQ8017, APQ8037, APQ8...

CVE-2020-3610

CVE-2020-3610 describes a double-free in a drawobj added to the drawqueue during IOCTL handling, due to a missing refcount for the object in multiple Snapdragon products (APQ8009/8053/8096AU/8098, MSM89xx, SDM4xx/6xx/7xx, SM8xxx, SXR2130, and related Qualcomm/Android platforms). The Red Hat and N...

CVE-2017-18298

CVE-2017-18298 describes a lack of input validation in the SDMX API that can cause NULL pointer dereference in Qualcomm Snapdragon platforms listed (e.g., MDM9206/9607/9650; MSM8996AU; SD 210/212/205, 410/12, 425, 430, 450, 615/16/ SD 415, 617, 625, 650/52, 810, 820/820A, 835, 845, 850, SDA660). ...

CVE-2017-18314

CVE-2017-18314 affects Qualcomm closed‑source components. The entry notes that on TZ cold boot the CNOC_QDSS RG0, which is locked by xBL_SEC, is cleared by TZ. This is categorized as a Critical issue in the Qualcomm closed‑source component list and is referenced in Android/industry bulletins. The...

CVE-2018-11824

CVE-2018-11824 describes a stack-based buffer overflow in a firmware routine of Qualcomm/ Snapdragon components ( Snapdragon Mobile, Snapdragon Wear ) affecting multiple platform variants (MDM9206, MDM9607, MDM9650, SD 210/212/205, SD 835, SD 845, SD 850, SDA660). The root cause is a overflow in ...

CVE-2018-11838

CVE-2018-11838 describes a possible double-free in the WLAN stack due to insufficient memory-free-condition checking in Qualcomm Snapdragon platforms, affecting Qualcomm WLAN components across Snapdragon families (e.g., APQ8053, MDM9640, SDA660, SDM636/660/SDX20) and various Snapdragon product li...

CVE-2018-13912

CVE-2018-13912 describes an Arbitrary write in Qualcomm camera components when a kernel address is provided in compat mode on a wide range of Snapdragon platforms (e.g., Snapdragon Auto/Connectivity/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wearables; various SDM/SD variants). The issue ap...

CVE-2018-13916

CVE-2018-13916 describes an out-of-bounds memory access in a Qurt kernel function when using an identifier to access a Qurt kernel buffer to retrieve thread data. The vulnerability affects Qualcomm/Snapdragon platforms (e.g., APQ8009/ MSM9xxx series, SDM/SDX lines and related Qualcomm components)...

CVE-2019-10504

CVE-2019-10504 affects Qualcomm Snapdragon firmware components (multiple Snapdragon Auto/Consumer IoT/Industrial IoT devices and related SoCs). Root cause: resource consumption leads to firmware not delivering EXT scan response to host within 1 second, impacting availability. Affected products in...

CVE-2019-10533

CVE-2019-10533 describes an out-of-bounds access due to improper validation of an array index that corrupts an index table entry in Qualcomm/Snapdragon components (numerous SoCs and modems across Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wearables portfolios). Conne...

CVE-2019-10546

CVE-2019-10546 describes a buffer overflow in WLAN firmware when parsing beacon/probe_response frames during roaming on Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, and others including APQ8096/.. SXR2130). Affected hardware spans numerous Snapdragon SoCs, including IPQ/MDM/SDM fam...

CVE-2019-10610

CVE-2019-10610 affects Qualcomm/Snapdragon video components where a buffer over-read can occur while parsing an SDP video media line with a frame-size attribute. Affected products include a wide range of Snapdragon Auto/Compute/IoT platforms (APQ/MDM/SC/SDM lines). The root cause is an over-read ...

CVE-2019-14018

CVE-2019-14018 is a Qualcomm/Snapdragon component issue described as a possible out-of-bounds array access caused by no carrier index check in Snapdragon Auto/Compute/IoT/mobile wearable stacks (multiple Snapdragon/MDM/SC families listed). NVD/Red Hat entries indicate a local attack surface with ...

CVE-2019-14070

The CVE-2019-14070 entry is supported by connected docs showing a Qualcomm/Android exposure in the Audio path. It describes a race condition causing a use-after-free in PCM volume controls within Qualcomm Snapdragon platform audio controls. Affected scope includes Snapdragon Auto/Compute/Consumer...

CVE-2017-18304

CVE-2017-18304 involves Insufficient memory allocation in boot due to an incorrect size being passed, causing out-of-bounds access. The affected devices span Qualcomm Snapdragon-family platforms and SoCs, including Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear acro...

CVE-2018-11870

Technical details for CVE-2018-11870 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates from the provided sources.

CVE-2018-12004

CVE-2018-12004 affects Qualcomm Snapdragon-based mobile/embedded platforms (e.g., Snapdragon Auto, Compute, Consumer Electronics Connectivity, IOT, Industrial IOT, Mobile, Wearables) and related SoCs (e.g., SDM63x/SD 210–SD 845 family). The vulnerability description indicates that the secure keyp...

CVE-2018-5912

CVE-2018-5912 is a Critical, closed-source component buffer overflow in Video within Qualcomm Snapdragon firmware (MSM8996AU, etc.). Technical detail: input validation weakness in the Video path can lead to arbitrary code execution in a privileged context. Android May 2019 bulletin documents CVE-...

CVE-2019-10552

CVE-2019-10552 describes a buffer over-read in Qualcomm’s Snapdragon components due to improper length checks when decoding Service Reject/RAU Reject/PTMSI Realloc commands. Affected are Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, Wearables, a...

CVE-2019-10554

CVE-2019-10554 describes Multiple Read overflows due to improper length checks during Identity Request decoding in the CS domain flow across numerous Snapdragon products (Auto/Compute/Connectivity/IoT/etc). Root cause stated as length check issues during decoding, enabling potential overflow cond...

CVE-2019-10586

CVE-2019-10586 describes a buffer overflow caused by filling media attribute tag names without validating the destination buffer size. Affected components span Qualcomm/Snapdragon families (e.g., Snapdragon Auto/Compute/IoT, MDM9150, MDM9205/9206/9607/9615/9625/9635M/9640/9645/9650/9655, MSM89x, ...

CVE-2019-10588

CVE-2019-10588 involves copying RTCP messages into an output buffer without validating the destination size, enabling a remote stack overflow. Affected are Qualcomm/Snapdragon platforms (multiple SoCs and product lines) across Snapdragon Auto, Compute, IoT, Wearables, and related drivers. Root ca...

CVE-2019-14011

CVE-2019-14011 concerns multiple Read overflow issues caused by improper length checks during decoding of 3G attach accept/SMS/PDN connection reject/esm data transport/bearer modify context reject in Qualcomm Snapdragon lineups (Auto, Compute, IoT, Wearables, etc.) across numerous SoCs and produc...

CVE-2019-14020

CVE-2019-14020 describes “Multiple Read overflows” caused by improper length checks when decoding several Qualcomm/Snapdragon protocol messages (dedicated_eps_bearer_req, act_def_context_req, cs_serv_notification, emm_info, guti_realloc_cmd) affecting a wide range of Snapdragon-based devices (Aut...

CVE-2019-14110

CVE-2019-14110 describes a buffer overflow in WLAN firmware when copying association frame content in SAP mode for Qualcomm Snapdragon devices (wide range of APQ/SDM/SC variants). Root cause: copying association frames exceeds the maximum destination buffer, enabling a potential overflow. Impact ...

CVE-2019-2268

CVE-2019-2268 affects Qualcomm WLAN host components in Snapdragon SoCs (multiple APQs and MSM/SDM families). It describes a possible out-of-bounds (OOB) read in P2P action frames while processing WLAN management frames. CVSS metrics in the sources show an overall HIGH impact (CVSS v2 base 7.5) an...

CVE-2019-2303

CVE-2019-2303 concerns the Qualcomm SNDCP module and related Snapdragon components. The issue is described as the module potentially accessing memory outside its boundary when handling malformed XID messages, potentially leading to memory corruption (buffer/heap overflow) in GSNDCP. Affected plat...

CVE-2020-11206

CVE-2020-11206 describes a possible buffer overflow in Qualcomm’s Fastrpc when handling received parameters due to insufficient input validation. Affected devices span Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, and Mobile families, including APQ8098 through SM8350P variants. Root cau...