CVE-2019-10515

CVE-2019-10515 describes a vulnerability in the DCI client on Qualcomm Snapdragon devices where a preemptively freed DCI client could be accessed to transfer packets, potentially causing a kernel error. Affected products listed in Red Hat/NVD entries include numerous Snapdragon Auto/IoT/Mobile fa...

CVE-2019-10533

CVE-2019-10533 describes an out-of-bounds access due to improper validation of an array index that corrupts an index table entry in Qualcomm/Snapdragon components (numerous SoCs and modems across Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wearables portfolios). Conne...

CVE-2019-10591

CVE-2019-10591 is a null pointer dereference that can occur while parsing a non-standard udta atom with invalid depth in Qualcomm/Snapdragon devices (including Snapdragon Auto, Compute, Connectivity, IoT, Wearables, etc.). The vulnerability affects a long list of Snapdragon-based platforms (APQ80...

CVE-2019-10615

CVE-2019-10615 describes an integer overflow in keymaster 4 during memory allocation caused by multiplying a large numcerts value by the size of the keymaster blob, potentially leading to memory corruption on a wide set of Snapdragon-based devices (APQ8009/8017/8053/8096A U and many more). The is...

CVE-2019-13999

CVE-2019-13999 involves a lack of check for integer overflow during round-up and addition, causing memory corruption and potential information leakage on multiple Qualcomm/Snapdragon platforms. The vulnerability affects a wide range of Snapdragon products (Auto, Compute, Connectivity, Consumer El...

CVE-2019-14029

CVE-2019-14029 describes a use-after-free in the graphics module caused by destroying an already queued syncobj in error handling, affecting a wide range of Qualcomm/Snapdragon devices (Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Wearables, etc.) across multiple SKUs (APQ8009,...

CVE-2019-14127

CVE-2019-14127 : A possible buffer overflow during MKV playback due to improper validation of the atom size buffer in Qualcomm Snapdragon video paths (Snapdragon Auto/Compute/Consumer IoT/Industrial IoT/Mobile/Wearables, etc.) affecting a wide range of Snapdragon families (APQ, MDM, MSM, Nicobar/...

CVE-2020-11206

CVE-2020-11206 describes a possible buffer overflow in Qualcomm’s Fastrpc when handling received parameters due to insufficient input validation. Affected devices span Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, and Mobile families, including APQ8098 through SM8350P variants. Root cau...

CVE-2020-3616

CVE-2020-3616 describes a buffer overflow in Qualcomm Snapdragon display code caused by a memory copy using strcpy without length checking. Affected products include Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, and Wearables across APQ8017/8053/8096AU/8098, ...

CVE-2017-11004

CVE-2017-11004 affects Qualcomm Snapdragon components across multiple platforms (e.g., IPQ8074, MDM9xxx, MSM8996AU and a wide range of SD-series chipsets) where a non-secure user can access certain registers in Snapdragon Automotive, Mobile and Wear devices. The impact is local with partial confi...

CVE-2018-11820

CVE-2018-11820 concerns a side-channel leak caused by using a non-time-constant memcmp function in Qualcomm/Snapdragon components. Affected platforms include Snapdragon Auto/Compute/Connectivity, Snapdragon IoT lines and many SDM/SD/SDM variants (e.g., IPQ8074, MDM9150, MDM9206, MDM9607, MDM9640,...

CVE-2018-11971

CVE-2018-11971 concerns an interrupt exit code flow issue that may undermine the TrustZone access control on Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Compute/Consumer devices and various Qualcomm SoCs). Descriptions across sources consistently state risk of secure asset leakage within...

CVE-2019-10546

CVE-2019-10546 describes a buffer overflow in WLAN firmware when parsing beacon/probe_response frames during roaming on Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, and others including APQ8096/.. SXR2130). Affected hardware spans numerous Snapdragon SoCs, including IPQ/MDM/SDM fam...

CVE-2019-10577

CVE-2019-10577 is a buffer over-read caused by improper input validation when processing SIP URIs in Qualcomm Snapdragon modem/processor families (e.g., Snapdragon Auto, Compute, IoT, Mobile, Wearables). The issue can lead to denial of service. Affected products span numerous Qualcomm platforms l...

CVE-2019-10586

CVE-2019-10586 describes a buffer overflow caused by filling media attribute tag names without validating the destination buffer size. Affected components span Qualcomm/Snapdragon families (e.g., Snapdragon Auto/Compute/IoT, MDM9150, MDM9205/9206/9607/9615/9625/9635M/9640/9645/9650/9655, MSM89x, ...

CVE-2019-10589

CVE-2019-10589 concerns Qualcomm’s closed‑source components and affects multiple Snapdragon SKUs (Auto, Compute, Connectivity, IoT, Mobile, etc.). The issue is a lack of length checking of a GP command response buffer, which can cause a buffer overflow during response handling in affected Snapdra...

CVE-2019-10594

CVE-2019-10594 is a stack overflow vulnerability in Snapdragon media SDP handling when FMTP in an M-line carries multiple payload types. Affected are Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, Wearables across numerous SoC families (APQ, MDM, MSM variants)...

CVE-2018-11838

CVE-2018-11838 describes a possible double-free in the WLAN stack due to insufficient memory-free-condition checking in Qualcomm Snapdragon platforms, affecting Qualcomm WLAN components across Snapdragon families (e.g., APQ8053, MDM9640, SDA660, SDM636/660/SDX20) and various Snapdragon product li...

CVE-2018-13912

CVE-2018-13912 describes an Arbitrary write in Qualcomm camera components when a kernel address is provided in compat mode on a wide range of Snapdragon platforms (e.g., Snapdragon Auto/Connectivity/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wearables; various SDM/SD variants). The issue ap...

CVE-2019-10491

CVE-2019-10491 affects Qualcomm ADSP (Audio DSP) across a broad set of Snapdragon platforms (e.g., IPQ4019, IPQ8064, IPQ8074, MDM9150/9206/9607/9640/9650, MSM8909W/8996AU, QCS405/605, SD-series like SD 210–435/439, SD 450, 615/16/625/632/636/665/675, 712/710/670, 730, 820/820A, 835, 845/850, 855,...

CVE-2019-10494

CVE-2019-10494 is a race condition in the camera function stack due to missing resource locks, leading to memory corruption and a use-after-free in Qualcomm/Snapdragon device families (APQ8009, APQ8017, APQ8053, … SM8150). The issue affects Snapdragon Auto, Snapdragon Mobile, and related SoCs; Re...

CVE-2019-10588

CVE-2019-10588 involves copying RTCP messages into an output buffer without validating the destination size, enabling a remote stack overflow. Affected are Qualcomm/Snapdragon platforms (multiple SoCs and product lines) across Snapdragon Auto, Compute, IoT, Wearables, and related drivers. Root ca...

CVE-2019-14015

CVE-2019-14015 affects Snapdragon platforms (multiple APQ/SDM variants) where a stack-based buffer overflow occurs during the identification stage initialization due to inadequate validation of the number of templates. This vulnerability is rated HIGH (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A...

CVE-2019-14073

CVE-2019-14073 is a Qualcomm/Qualcomm closed‑source component vulnerability in the modem data path where RTCP messages are copied into an output buffer without verifying the destination size, potentially enabling remote stack overflow when processing large or non‑standard RTCP data. Public docume...

CVE-2019-2246

CVE-2019-2246: A memory-corruption issue where thread start can trigger invalid memory writes in the kernel due to a user-provided argument, affecting Qualcomm Snapdragon-based devices (e.g., Snapdragon Auto/Compute/Connectivity, Snapdragon Mobile across numerous SoCs). Root cause: improper handl...

CVE-2017-18304

CVE-2017-18304 involves Insufficient memory allocation in boot due to an incorrect size being passed, causing out-of-bounds access. The affected devices span Qualcomm Snapdragon-family platforms and SoCs, including Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear acro...

CVE-2018-11945

CVE-2018-11945 is a heap overflow due to improper input validation in the wireless service messaging module that processes data from broadcast messages. The flaw affects Qualcomm/Snapdragon families (e.g., Snapdragon Auto, Compute, Consumer Electronics Connectivity, Snapdragon IoT, and related mo...

CVE-2018-13916

CVE-2018-13916 describes an out-of-bounds memory access in a Qurt kernel function when using an identifier to access a Qurt kernel buffer to retrieve thread data. The vulnerability affects Qualcomm/Snapdragon platforms (e.g., APQ8009/ MSM9xxx series, SDM/SDX lines and related Qualcomm components)...

CVE-2019-10530

CVE-2019-10530 involves a kernel-level buffer overflow caused by a missing check for data truncation in Qualcomm Snapdragon kernel components. Affected are numerous Snapdragon families (Auto, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) across many SDM and Snapdragon Snapdragon...

CVE-2019-10552

CVE-2019-10552 describes a buffer over-read in Qualcomm’s Snapdragon components due to improper length checks when decoding Service Reject/RAU Reject/PTMSI Realloc commands. Affected are Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, Wearables, a...

CVE-2019-10554

CVE-2019-10554 describes Multiple Read overflows due to improper length checks during Identity Request decoding in the CS domain flow across numerous Snapdragon products (Auto/Compute/Connectivity/IoT/etc). Root cause stated as length check issues during decoding, enabling potential overflow cond...

CVE-2019-10562

CVE-2019-10562 affects Qualcomm Snapdragon families (including IPQ6018, MSM CPUs) with an improper authentication and signature verification of debug policies in the secure boot loader. The root cause is insecure policy loading into secure memory, leading to memory corruption and potential local ...

CVE-2019-10610

CVE-2019-10610 affects Qualcomm/Snapdragon video components where a buffer over-read can occur while parsing an SDP video media line with a frame-size attribute. Affected products include a wide range of Snapdragon Auto/Compute/IoT platforms (APQ/MDM/SC/SDM lines). The root cause is an over-read ...

CVE-2019-14027

CVE-2019-14027 concerns a buffer overflow caused by missing upper-bound checks on a channel length used in a loop, affecting Qualcomm closed-source components (per CVE entries in NVD/Red Hat/CVE feeds). The issue is classified as High severity with local exposure in Snapdragon-related Qualcomm co...

CVE-2019-14039

CVE-2019-14039 is an out-of-bounds read in the Qualcomm Snapdragon hardware/firmware stack. The issue arises from an incorrect boundary check in the ADM callback function when processing payloads in command responses, affecting multiple Snapdragon families (Auto, Compute, Consumer IoT, Industrial...

CVE-2019-2245

CVE-2019-2245 is a Qualcomm/Snapdragon vulnerability describing a possible integer underflow when calculating the length of an elementary stream map from an invalid packet length, which is then used to read from an input buffer. Affected products include a broad set of Snapdragon platforms (Auto,...

CVE-2019-2268

CVE-2019-2268 affects Qualcomm WLAN host components in Snapdragon SoCs (multiple APQs and MSM/SDM families). It describes a possible out-of-bounds (OOB) read in P2P action frames while processing WLAN management frames. CVSS metrics in the sources show an overall HIGH impact (CVSS v2 base 7.5) an...

CVE-2019-2281

CVE-2019-2281 describes an unauthenticated bitmap image loading vulnerability that can lead to execution of unverified code in Qualcomm Snapdragon platforms. The incident is triggered by loading a bitmap into memory, potentially enabling local code execution with high impact (confidentiality, int...

CVE-2017-18298

CVE-2017-18298 describes a lack of input validation in the SDMX API that can cause NULL pointer dereference in Qualcomm Snapdragon platforms listed (e.g., MDM9206/9607/9650; MSM8996AU; SD 210/212/205, 410/12, 425, 430, 450, 615/16/ SD 415, 617, 625, 650/52, 810, 820/820A, 835, 845, 850, SDA660). ...

CVE-2017-18314

CVE-2017-18314 affects Qualcomm closed‑source components. The entry notes that on TZ cold boot the CNOC_QDSS RG0, which is locked by xBL_SEC, is cleared by TZ. This is categorized as a Critical issue in the Qualcomm closed‑source component list and is referenced in Android/industry bulletins. The...

CVE-2018-11264

CVE-2018-11264 involves a buffer overflow in the Ontario fingerprinting code in Qualcomm Snapdragon platforms (Ontario fingerprint code) across multiple Snapdragon variants. The root cause is a lack of input validation for parameters entering TZ from HLOS, leading to a potential buffer overflow. ...

CVE-2018-11870

Technical details for CVE-2018-11870 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates from the provided sources.

CVE-2018-11922

Technical details (affected product/version, root cause, impact, fixes) for CVE-2018-11922 are not publicly available in the provided connected documents. Monitor for updates from vendors and security bulletins.

CVE-2018-12004

CVE-2018-12004 affects Qualcomm Snapdragon-based mobile/embedded platforms (e.g., Snapdragon Auto, Compute, Consumer Electronics Connectivity, IOT, Industrial IOT, Mobile, Wearables) and related SoCs (e.g., SDM63x/SD 210–SD 845 family). The vulnerability description indicates that the secure keyp...

CVE-2019-10593

CVE-2019-10593 is a buffer overflow vulnerability in Qualcomm Snapdragon firmware. It occurs when processing non-standard SDP video Image attribute parameters during VILTE/VOLTE calls across a wide range of Qualcomm Snapdragon platforms (Auto, Compute, IoT, Wearables, etc.). The root cause is a p...

CVE-2019-14020

CVE-2019-14020 describes “Multiple Read overflows” caused by improper length checks when decoding several Qualcomm/Snapdragon protocol messages (dedicated_eps_bearer_req, act_def_context_req, cs_serv_notification, emm_info, guti_realloc_cmd) affecting a wide range of Snapdragon-based devices (Aut...

CVE-2019-14021

CVE-2019-14021 is a buffer overrun in Qualcomm Snapdragon components triggered during EFS filename and payload processing over the diag interface due to missing length checks. This affects a wide range of Snapdragon products (e.g., APQ8096AU/APQ8098, MDM9150/MDM9206/MDM9607/MDM9640/MDM9650, MSM89...

CVE-2019-14070

The CVE-2019-14070 entry is supported by connected docs showing a Qualcomm/Android exposure in the Audio path. It describes a race condition causing a use-after-free in PCM volume controls within Qualcomm Snapdragon platform audio controls. Affected scope includes Snapdragon Auto/Compute/Consumer...

CVE-2019-2258

CVE-2019-2258: Improper validation of array index causes out-of-bounds write and memory corruption in MMCP within Qualcomm Snapdragon family devices (Auto, Compute, IoT, Wearables, etc.). Impact spans numerous Snapdragon platforms (MDM9xxx, SDX20, SDM6xx/8xx, etc.), across multiple SoCs listed in...

CVE-2019-2271

CVE-2019-2271 is a buffer over-read in Qualcomm closed-source components used across Snapdragon lineups (e.g., APQ8009/8017/8053/8096A U, SDM/SM/SC families). It can occur when parsing downlink OTA messages with unintended network values, potentially enabling remote code execution or other impact...