CVE-2017-18141

CVE-2017-18141 describes a local elevation of privilege in Qualcomm closed‑source components used across many Snapdragon platforms (e.g., IPQ8074, MDM9xxx, SDx and related SoCs) where loading a third‑party TEE enables the non‑secure world to invoke a secure monitor call to access privileged funct...

CVE-2017-18302

CVE-2017-18302 affects Qualcomm Snapdragon SoCs (MSM8996AU and numerous SD/i variants listed) where a crafted HLOS client can modify in-memory structures passed to a QSEE application between check and use. This leads to arbitrary writes to TZ kernel memory regions, i.e., local elevation of privil...

CVE-2017-18310

CVE-2017-18310 affects Qualcomm closed‑source components in Snapdragon devices, with the issue described as a code injection vulnerability involving ClientEnv exposing services 0–32 to the HLOS. The associated records (NVD/NIST, CVE list, prion entry) indicate local attack feasibility and a high/...

CVE-2018-11284

CVE-2018-11284 describes a vulnerability where spoofed SMS can trigger a flood of registration updates to the server on devices using Qualcomm Snapdragon mobile and Snapdragon Wear platforms (MDM9206, MDM9607, MDM9650, SD 210/212/205, SD 625, SD 636, SDA660, SDM630, SDM660, SDX20). The underlying...

CVE-2018-11287

CVE-2018-11287 affects Qualcomm Video components in Snapdragon/Qualcomm closed‑source stack (mobile, automotive, wearables) across listed SDM/SM and Snapdragon platforms. Root cause is an incorrect control flow when verifying buffer sufficiency in video processing, enabling potential abuse within...

CVE-2018-11935

CVE-2018-11935 affects Qualcomm Snapdragon devices (MDM9607/9650/9655, MSM8996AU, QCS605, SD 210–SD 415/SD 636/675/712 etc.) across Snapdragon Auto, Compute, Connectivity, and IoT lines. The issue is improper input validation in the Snapdragon stack that can cause an incorrect app id to be return...

CVE-2018-11949

CVE-2018-11949 describes a failure to initialize an extra buffer that can lead to an out-of-bounds access in the WLAN function of Qualcomm Snapdragon components (WLAN HOST) across multiple Snapdragon family devices. The affected scope includes Snapdragon Auto, Compute, Consumer IOT, Industrial IO...

CVE-2018-5837

The CVE-2018-5837 entry concerns Snapdragon SoCs (IPQ8074, MDM9xxx, SD series, etc.) where MAC address randomization during probe requests is compromised by a flawed RNG that outputs repeating values far sooner than expected. The description covers the affected devices and the root cause, but the...

CVE-2019-10489

CVE-2019-10489 involves a possible null-pointer dereference when parsing an AVI clip during copy in Qualcomm Snapdragon drivers across many Snapdragon products. Root cause: null pointer in parsing/copy path. Impact: high, with potential crash (availability) and no confidentiality/integrity impact...

CVE-2019-10524

CVE-2019-10524 involves a lack of validation for a negative value returned by get_clk, which is misinterpreted as a valid pointer, causing a use-after-free in the Qualcomm clk driver across numerous Snapdragon platforms (e.g., Snapdragon Auto/Mobile/IoT variants). The issue enables local exploita...

CVE-2019-10587

CVE-2019-10587 describes a potential stack overflow when processing large or non-standard SDP bodies without proper delimiters in Qualcomm Snapdragon firmwares (multiple Snapdragon Auto/Compute/IoT/Wearables platforms listed). The entry notes a stack overflow vulnerability arising from SDP proces...

CVE-2019-14027

CVE-2019-14027 concerns a buffer overflow caused by missing upper-bound checks on a channel length used in a loop, affecting Qualcomm closed-source components (per CVE entries in NVD/Red Hat/CVE feeds). The issue is classified as High severity with local exposure in Snapdragon-related Qualcomm co...

CVE-2019-14039

CVE-2019-14039 is an out-of-bounds read in the Qualcomm Snapdragon hardware/firmware stack. The issue arises from an incorrect boundary check in the ADM callback function when processing payloads in command responses, affecting multiple Snapdragon families (Auto, Compute, Consumer IoT, Industrial...

CVE-2019-14062

CVE-2019-14062 is a buffer overflow in how a setup message from the Network is decoded in various Qualcomm/Snapdragon components (listed in the description). Root cause: lack of validation of IE message length during network processing in multiple Snapdragon SoCs and related devices. Public sourc...

CVE-2019-14071

CVE-2019-14071 affects Qualcomm/Snapdragon components where the reset handler can bypass access control if the AC configuration is reset while debug path for RAM dumps is enabled. The issue is described across multiple sources (NVD, Red Hat, PRION, CIRCL) with same core summary, listing affected ...

CVE-2019-14080

CVE-2019-14080 is a high-severity, Qualcomm‑related vulnerability affecting Snapdragon modem data in multiple SoCs. Root cause: out-of-bounds write from lack of array index validation while parsing SDP attributes for SAR. Impact could be remote execution via network (per CVSS, network attack, cri...

CVE-2019-14095

CVE-2019-14095 describes a buffer overflow in Snapdragon devices during LMP packet processing when the Bluetooth name length exceeds the BT specification. Affected families include Snapdragon Auto, Compute, Connectivity, and related Snapdragon devices across numerous SoCs (APQ8009, SDM… etc.). Th...

CVE-2019-14112

The CVE-2019-14112 entry describes a potential buffer overflow when processing CBF frames due to a missing buffer-length check before copy in Qualcomm Snapdragon components. Affected products span Snapdragon Auto, Compute, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, a...

CVE-2019-2236

CVE-2019-2236 is a null pointer dereference during secure application termination when using specific application IDs. Affected vendors/products (as listed in the description) include Qualcomm Snapdragon families and multiple Snapdragon platforms (e.g., IPQ8074, MDM9xxx, SD 4xx–430/625/820, 8CX, ...

CVE-2019-2239

CVE-2019-2239 is a Qualcomm/Snapdragon-related issue where sanity checks are missing in layout, potentially causing SUI corruption or denial of service. Affected families span Snapdragon Auto, Compute, Connectivity, and related Snapdragon platforms (e.g., MDM9150, SD 210/212/205, SD 410/12, SD 62...

CVE-2019-2305

CVE-2019-2305 corresponds to an out-of-bounds access in processing where the reason code is extracted from frame data without validating the frame length. Affected are Snapdragon platforms across multiple product families (Snapdragon Auto, Consumer Electronics Connectivity, Consumer IoT, Industri...

CVE-2019-2315

CVE-2019-2315 concerns a data handling issue in Snapdragon SoCs where parameters populated during a copy operation from a non-secure environment to a secure buffer can be exposed or mishandled. The description consistently cites copying from an fd or local buffer to a secure buffer with inputs fr...

CVE-2019-2327

CVE-2019-2327 describes a possible buffer overflow when playing a clip with an incorrect element size affecting a wide range of Qualcomm Snapdragon platforms (Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, IoT, Mobile, Voice & Music, Wearables, and related SDM/SD/ Snapdragon families). T...

CVE-2017-18330

CVE-2017-18330 describes a buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in Qualcomm Snapdragon-based platforms (automotive, mobile, wearables) across numerous SoCs and SD/SoC families. The issue affects components implementing AES-CCM/GCM and can impact confidential...

CVE-2018-11268

CVE-2018-11268 describes a potential buffer overflow in Snapdragon/Qualcomm components when parsing TFTP options on a wide range of SoCs (e.g., MDM9206/9607/9635M/9640/.../SD 810–845). The connected documents confirm affected Snapdragon/Qualcomm closed‑source components; however, the exact root c...

CVE-2018-11996

CVE-2018-11996 describes an out-of-bounds access in the Qualcomm device programmer when a malformed command is sent, affecting Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear platforms (versions including MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, ...

CVE-2018-13897

CVE-2018-13897 affects Snapdragon devices running dnsmasq, where a hostname is added to the device’s DNS records, causing information exposure (confidentiality impact). Affected families include Snapdragon Auto, Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, Wearables across numerous SD...

CVE-2018-5867

CVE-2018-5867 relates to a buffer overflow caused by lack of input-size checking in WideVine on Qualcomm/Snapdragon platforms (automotive, mobile, wearables). Affected products include a broad list of Snapdragon/SDM/SDX devices (e.g., MDM9206, MDM9607, SD 210–SD 850 families, SDX24, Snapdragon_Hi...

CVE-2018-5918

CVE-2018-5918 describes a possible buffer overflow in the DRM Trusted application on Qualcomm Snapdragon platforms (e.g., MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD family up to SDX24 and SXR1130, including SD410/12, SD425, SD430, SD450, SD615/16/SD415, SD625, SD650/52, SD800, SD810, SD82...

CVE-2019-10509

CVE-2019-10509 is a use-after-free issue in the pairing device record that occurs after ACL disconnection on Qualcomm Snapdragon Bluetooth implementations. The description applies to Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables across ...

CVE-2019-14081

CVE-2019-14081 describes a buffer over-read in the WLAN module when handling a WMI message for SAR limits with an invalid number of limits. Affected products include Snapdragon family components (Compute/Consumer Connectivity/IoT lines and related APQ/IPQ/SDM/QCA/QCN/SDA devices). The root cause ...

CVE-2019-14094

CVE-2019-14094 describes an integer overflow in the diag command handler when a large value is supplied for the number of tasks in request packets. Affected products are Qualcomm Snapdragon families including Snapdragon Auto, Compute, Connectivity, etc., across numerous SoCs (e.g., APQ8009, APQ80...

CVE-2019-2251

CVE-2019-2251 describes a stack-buffer overflow when a bitmap is loaded from an unauthenticated source, affecting Qualcomm/SoC families listed in the initial records (e.g., Snapdragon Auto/Compute/Connectivity and related devices). The vulnerability is tied to closed-source Qualcomm components an...

CVE-2019-2253

CVE-2019-2253 is a buffer over-read that can occur when parsing a corrupted OGG comment block in Qualcomm Snapdragon devices (listed families). The root cause is parsing a stream with malformed metadata leading to reading beyond bounds. The description and connected documents do not provide expli...

CVE-2019-2328

CVE-2019-2328 describes a potential buffer overflow when the number of channels exceeds the size of the channel mapping array in Qualcomm/ Snapdragon audio-related components (across multiple Snapdragon families). The vulnerability is listed under Qualcomm Audio in the 2019 Android security conte...

CVE-2019-2335

CVE-2019-2335 concerns a logic issue in Qualcomm Snapdragon firmware where, while processing an Attach Reject message, the valid exit condition is not met, causing an infinite loop. Affected are numerous Snapdragon platforms (e.g., APQ8009/8017/8053/8096AU/8098, MDM9xxx, SDX20, SDX55, SM6x50 seri...

CVE-2019-2343

The CVE-2019-2343 entry concerns out-of-bounds reads and information disclosure in firmware due to insufficient checking of an embedded structure that can be sent from a kernel driver within Qualcomm Snapdragon firmware across numerous SoCs and platforms (Snapdragon Auto, Compute, Connectivity, C...

CVE-2020-11168

CVE-2020-11168 is a null-pointer dereference vulnerability affecting a broad list of Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Compute/Consumer IOT/Industrial IOT, Mobile, Wearables) across numerous SoCs (APQ8xxx, SDM/SXR families, etc.). The underlying flaw is a null-pointer dereferen...

CVE-2020-3661

CVE-2020-3661 is a buffer overflow in Qualcomm Snapdragon components occurring when parsing MP4 clips with corrupted sample atoms values exceeding MAX_UINT32, caused by missing input validation. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, W...

CVE-2018-13913

CVE-2018-13913 describes an unauthorized access vulnerability caused by improper validation of an array index while processing debugFS in Qualcomm Snapdragon components. The CNVD entry (CNVD-2019-05662) specifies this vulnerability as affecting multiple Qualcomm products and variants, including M...

CVE-2019-10496

CVE-2019-10496 involves a lack of checking a variable received from a driver when populating a Firmware data structure, causing a buffer overflow. Affects Qualcomm Snapdragon families including Snapdragon Auto/Compute/Connectivity/Consumer IoT/Industrial IoT/Mobile/Voice & Music/Wearables and a b...

CVE-2019-10503

CVE-2019-10503 describes an out-of-bounds access in the Qualcomm Snapdragon camera driver caused by improper validation of an array index across multiple Snapdragon platforms (APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, MDM9…, SDM660, SDX20, etc.). Root cause: insufficient validation leading t...

CVE-2019-14033

CVE-2019-14033 involves multiple Read overflows due to an improper length check when decoding tau reject/accept and detach/attach requests in Qualcomm Snapdragon components across numerous devices. The issue affects Snapdragon Auto/Compute/Consumer IOT/Industrial IOT/Mobile/Wearables (listing man...

CVE-2019-14050

CVE-2019-14050 describes an out-of-bounds write caused by a missing buffer-size check, leading to a buffer overflow on 32-bit architectures. Affected products include Qualcomm Snapdragon platforms across Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice/Music, and Networking offerings (v...

CVE-2019-2285

CVE-2019-2285 describes an out-of-bounds write bug in Qualcomm Snapdragon media handling related to reporting properties during video playback. Affected are Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables platforms across numerous SDM/SD vari...

CVE-2019-2297

CVE-2019-2297 is a buffer overflow in Qualcomm Snapdragon WLAN host when processing non-standard NAN messages from user space. Affected devices span Qualcomm Snapdragon platforms listed in the initial description (e.g., various APQ, IPQ, MDM, QCA, SDX, etc.). According to connected records, the i...

CVE-2020-11207

CVE-2020-11207 is a buffer overflow in the LibFastCV library due to improper size checks, affecting Qualcomm Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, and Mobile products (APQ8052 through SA8195P and related SKUs). The root cause is inadequate validation of buffer lengths in LibFast...

CVE-2020-3663

CVE-2020-3663 affects Qualcomm Snapdragon platforms (multiple Snapdragon Auto/Compute/Connectivity/IoT/Wearables generations) where buffer over-run can occur while fetching track decoder information if the decode- cb size exceeds the allocated buffer. The issue’s root cause is a buffer overflow i...

CVE-2017-18320

CVE-2017-18320 describes a data abort in QSEE when unloading on a third-party TEE without prior loading, affecting Qualcomm Snapdragon automotive/mobile platforms across numerous SoCs (e.g., MSM8996AU, SD 410/12, 820, 835, 650/52, 710/670, 810, 820A, 835, 660, several SDM/SXR variants). The linke...

CVE-2018-5839

The CVE-2018-5839 issue is a memory protection flaw in Qualcomm Snapdragon environments that permits local read/write of the modem image from the host OS kernel. Affected products include Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, and Mobile lines across multiple SoCs (MDM9150, MDM96...