CVE-2019-14027

CVE-2019-14027 concerns a buffer overflow caused by missing upper-bound checks on a channel length used in a loop, affecting Qualcomm closed-source components (per CVE entries in NVD/Red Hat/CVE feeds). The issue is classified as High severity with local exposure in Snapdragon-related Qualcomm co...

CVE-2019-14071

CVE-2019-14071 affects Qualcomm/Snapdragon components where the reset handler can bypass access control if the AC configuration is reset while debug path for RAM dumps is enabled. The issue is described across multiple sources (NVD, Red Hat, PRION, CIRCL) with same core summary, listing affected ...

CVE-2019-14095

CVE-2019-14095 describes a buffer overflow in Snapdragon devices during LMP packet processing when the Bluetooth name length exceeds the BT specification. Affected families include Snapdragon Auto, Compute, Connectivity, and related Snapdragon devices across numerous SoCs (APQ8009, SDM… etc.). Th...

CVE-2019-14112

The CVE-2019-14112 entry describes a potential buffer overflow when processing CBF frames due to a missing buffer-length check before copy in Qualcomm Snapdragon components. Affected products span Snapdragon Auto, Compute, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, a...

CVE-2019-2236

CVE-2019-2236 is a null pointer dereference during secure application termination when using specific application IDs. Affected vendors/products (as listed in the description) include Qualcomm Snapdragon families and multiple Snapdragon platforms (e.g., IPQ8074, MDM9xxx, SD 4xx–430/625/820, 8CX, ...

CVE-2019-2258

CVE-2019-2258: Improper validation of array index causes out-of-bounds write and memory corruption in MMCP within Qualcomm Snapdragon family devices (Auto, Compute, IoT, Wearables, etc.). Impact spans numerous Snapdragon platforms (MDM9xxx, SDX20, SDM6xx/8xx, etc.), across multiple SoCs listed in...

CVE-2019-2315

CVE-2019-2315 concerns a data handling issue in Snapdragon SoCs where parameters populated during a copy operation from a non-secure environment to a secure buffer can be exposed or mishandled. The description consistently cites copying from an fd or local buffer to a secure buffer with inputs fr...

CVE-2019-2341

CVE-2019-2341 describes a buffer overflow in the audio subsystem when a user-provided audio buffer size exceeds the maximum allowed. Affected: Snapdragon SoCs and families listed in the entry (e.g., Snapdragon Auto/Compute/IoT, Snapdragon Mobile, Wearables, etc.). Root cause: unchecked size in au...

CVE-2020-11168

CVE-2020-11168 is a null-pointer dereference vulnerability affecting a broad list of Qualcomm Snapdragon platforms (e.g., Snapdragon Auto/Compute/Consumer IOT/Industrial IOT, Mobile, Wearables) across numerous SoCs (APQ8xxx, SDM/SXR families, etc.). The underlying flaw is a null-pointer dereferen...

CVE-2020-3658

CVE-2020-3658 involves a possible null-pointer dereference in the MP4 parsing path for Snapdragon media components. Affected are Qualcomm/Android platforms using Snapdragon Auto, Compute, Connectivity, IOT, Mobile, Wearables, and related SoCs (e.g., APQ8009, SDM, SM families) per multiple vendor ...

CVE-2017-18316

CVE-2017-18316 affects Qualcomm Snapdragon platforms (Automobile, Mobile, Wear) and is triggered via the Ontario kernel driver that can allow a secure application to access QSEE kernel memory. Affected devices/SoCs include MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430...

CVE-2018-11284

CVE-2018-11284 describes a vulnerability where spoofed SMS can trigger a flood of registration updates to the server on devices using Qualcomm Snapdragon mobile and Snapdragon Wear platforms (MDM9206, MDM9607, MDM9650, SD 210/212/205, SD 625, SD 636, SDA660, SDM630, SDM660, SDX20). The underlying...

CVE-2018-11287

CVE-2018-11287 affects Qualcomm Video components in Snapdragon/Qualcomm closed‑source stack (mobile, automotive, wearables) across listed SDM/SM and Snapdragon platforms. Root cause is an incorrect control flow when verifying buffer sufficiency in video processing, enabling potential abuse within...

CVE-2018-11948

CVE-2018-11948 affects Qualcomm Snapdragon platforms listed (MSM8996AU, QCS605, SD 410/12, SD 425/427/430/435/439/SD 429, SD 450, SD 625/632/636/675, SD 712/710/670/820/820A/835/845/SD 850, SD 8CX, SDA660, SDM439/630/660, Snapdragon_High_Med_2016, SXR1130) where the issue is that usage-entry limi...

CVE-2018-13897

CVE-2018-13897 affects Snapdragon devices running dnsmasq, where a hostname is added to the device’s DNS records, causing information exposure (confidentiality impact). Affected families include Snapdragon Auto, Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, Wearables across numerous SD...

CVE-2018-5918

CVE-2018-5918 describes a possible buffer overflow in the DRM Trusted application on Qualcomm Snapdragon platforms (e.g., MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD family up to SDX24 and SXR1130, including SD410/12, SD425, SD430, SD450, SD615/16/SD415, SD625, SD650/52, SD800, SD810, SD82...

CVE-2019-14039

CVE-2019-14039 is an out-of-bounds read in the Qualcomm Snapdragon hardware/firmware stack. The issue arises from an incorrect boundary check in the ADM callback function when processing payloads in command responses, affecting multiple Snapdragon families (Auto, Compute, Consumer IoT, Industrial...

CVE-2019-2239

CVE-2019-2239 is a Qualcomm/Snapdragon-related issue where sanity checks are missing in layout, potentially causing SUI corruption or denial of service. Affected families span Snapdragon Auto, Compute, Connectivity, and related Snapdragon platforms (e.g., MDM9150, SD 210/212/205, SD 410/12, SD 62...

CVE-2019-2253

CVE-2019-2253 is a buffer over-read that can occur when parsing a corrupted OGG comment block in Qualcomm Snapdragon devices (listed families). The root cause is parsing a stream with malformed metadata leading to reading beyond bounds. The description and connected documents do not provide expli...

CVE-2019-2283

An out‑of‑bounds access vulnerability in Qualcomm Snapdragon devices results from improper validation of the read/write index of TX/RX FIFOs before pointer calculation. The issue affects a broad set of Snapdragon platforms (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Weara...

CVE-2019-2305

CVE-2019-2305 corresponds to an out-of-bounds access in processing where the reason code is extracted from frame data without validating the frame length. Affected are Snapdragon platforms across multiple product families (Snapdragon Auto, Consumer Electronics Connectivity, Consumer IoT, Industri...

CVE-2019-2327

CVE-2019-2327 describes a possible buffer overflow when playing a clip with an incorrect element size affecting a wide range of Qualcomm Snapdragon platforms (Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, IoT, Mobile, Voice & Music, Wearables, and related SDM/SD/ Snapdragon families). T...

CVE-2019-2328

CVE-2019-2328 describes a potential buffer overflow when the number of channels exceeds the size of the channel mapping array in Qualcomm/ Snapdragon audio-related components (across multiple Snapdragon families). The vulnerability is listed under Qualcomm Audio in the 2019 Android security conte...

CVE-2020-11207

CVE-2020-11207 is a buffer overflow in the LibFastCV library due to improper size checks, affecting Qualcomm Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, and Mobile products (APQ8052 through SA8195P and related SKUs). The root cause is inadequate validation of buffer lengths in LibFast...

CVE-2017-18141

CVE-2017-18141 describes a local elevation of privilege in Qualcomm closed‑source components used across many Snapdragon platforms (e.g., IPQ8074, MDM9xxx, SDx and related SoCs) where loading a third‑party TEE enables the non‑secure world to invoke a secure monitor call to access privileged funct...

CVE-2017-18330

CVE-2017-18330 describes a buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in Qualcomm Snapdragon-based platforms (automotive, mobile, wearables) across numerous SoCs and SD/SoC families. The issue affects components implementing AES-CCM/GCM and can impact confidential...

CVE-2018-11949

CVE-2018-11949 describes a failure to initialize an extra buffer that can lead to an out-of-bounds access in the WLAN function of Qualcomm Snapdragon components (WLAN HOST) across multiple Snapdragon family devices. The affected scope includes Snapdragon Auto, Compute, Consumer IOT, Industrial IO...

CVE-2018-3595

CVE-2018-3595 affects Qualcomm Snapdragon platforms (automobile/mobile/wear) across multiple SoCs (e.g., MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/212/205, 425, 430, 450, 625, 650/52, 712/710/670, 820/820A, 835/845/850, 660, SDX24, SXR1130). The vulnerability arises from improper error handlin...

CVE-2018-5867

CVE-2018-5867 relates to a buffer overflow caused by lack of input-size checking in WideVine on Qualcomm/Snapdragon platforms (automotive, mobile, wearables). Affected products include a broad list of Snapdragon/SDM/SDX devices (e.g., MDM9206, MDM9607, SD 210–SD 850 families, SDX24, Snapdragon_Hi...

CVE-2019-10509

CVE-2019-10509 is a use-after-free issue in the pairing device record that occurs after ACL disconnection on Qualcomm Snapdragon Bluetooth implementations. The description applies to Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables across ...

CVE-2019-13995

CVE-2019-13995 describes a lack of integer overflow protection when adding fragment size to remaining size read from shared memory, causing memory corruption and potential information leakage in Qualcomm Snapdragon components. Affected products span numerous Snapdragon generations (APQ, IPQ, QCS ...

CVE-2019-14000

CVE-2019-14000 concerns memory corruption and potential information leakage in Qualcomm Snapdragon platforms due to a missing RX FIFO write index check against the FIFO size in shared RAM. Affected families include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wear...

CVE-2019-14050

CVE-2019-14050 describes an out-of-bounds write caused by a missing buffer-size check, leading to a buffer overflow on 32-bit architectures. Affected products include Qualcomm Snapdragon platforms across Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice/Music, and Networking offerings (v...

CVE-2019-14081

CVE-2019-14081 describes a buffer over-read in the WLAN module when handling a WMI message for SAR limits with an invalid number of limits. Affected products include Snapdragon family components (Compute/Consumer Connectivity/IoT lines and related APQ/IPQ/SDM/QCA/QCN/SDA devices). The root cause ...

CVE-2019-14094

CVE-2019-14094 describes an integer overflow in the diag command handler when a large value is supplied for the number of tasks in request packets. Affected products are Qualcomm Snapdragon families including Snapdragon Auto, Compute, Connectivity, etc., across numerous SoCs (e.g., APQ8009, APQ80...

CVE-2019-2251

CVE-2019-2251 describes a stack-buffer overflow when a bitmap is loaded from an unauthenticated source, affecting Qualcomm/SoC families listed in the initial records (e.g., Snapdragon Auto/Compute/Connectivity and related devices). The vulnerability is tied to closed-source Qualcomm components an...

CVE-2019-2310

CVE-2019-2310 describes an out-of-bounds read when parsing the Rx Frame body (action category and action ID) in Qualcomm Snapdragon components (including Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IoT, Snapdragon Industrial IoT, Snapdragon Mobile, Snapdrago...

CVE-2019-2335

CVE-2019-2335 concerns a logic issue in Qualcomm Snapdragon firmware where, while processing an Attach Reject message, the valid exit condition is not met, causing an infinite loop. Affected are numerous Snapdragon platforms (e.g., APQ8009/8017/8053/8096AU/8098, MDM9xxx, SDX20, SDX55, SM6x50 seri...

CVE-2019-2343

The CVE-2019-2343 entry concerns out-of-bounds reads and information disclosure in firmware due to insufficient checking of an embedded structure that can be sent from a kernel driver within Qualcomm Snapdragon firmware across numerous SoCs and platforms (Snapdragon Auto, Compute, Connectivity, C...

CVE-2020-3661

CVE-2020-3661 is a buffer overflow in Qualcomm Snapdragon components occurring when parsing MP4 clips with corrupted sample atoms values exceeding MAX_UINT32, caused by missing input validation. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, W...

CVE-2017-18323

CVE-2017-18323 involves cryptographic key material leakage in TDSCDMA RRC debug messages affecting Qualcomm Snapdragon components across multiple platforms (e.g., MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU) and various SD/SoC families (e.g., SD 21...

CVE-2018-11268

CVE-2018-11268 describes a potential buffer overflow in Snapdragon/Qualcomm components when parsing TFTP options on a wide range of SoCs (e.g., MDM9206/9607/9635M/9640/.../SD 810–845). The connected documents confirm affected Snapdragon/Qualcomm closed‑source components; however, the exact root c...

CVE-2018-11845

CVE-2018-11845 describes the use of non-time-constant comparison functions in Qualcomm Snapdragon components (across numerous Snapdragon Auto/Compute/Connectivity lines and device families such as MDM9150, MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, QCS605, SDs 210–835, SD 8CX, and related SKU...

CVE-2018-11921

The CVE-2018-11921 entry concerns a failure-condition handling defect that fails to return the correct error code. Affects Snapdragon family components across numerous SoCs (e.g., MDM9206, MDM9607, MDM9650, MSM8996AU, SD/SDX-series, SDA-series, SXR1130) and can cause unintended SUI behavior or di...

CVE-2018-11931

CVE-2018-11931 is listed in the Qualcomm closed-source components section of the 2019 Android security bulletin. The vulnerability is described as improper access to HLOS when transferring memory to CPZ in multiple Snapdragon/SOC families (e.g., MDM/SD series and Snapdragon channels). The CVSS da...

CVE-2018-11996

CVE-2018-11996 describes an out-of-bounds access in the Qualcomm device programmer when a malformed command is sent, affecting Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear platforms (versions including MDM9206, MDM9607, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, ...

CVE-2018-13913

CVE-2018-13913 describes an unauthorized access vulnerability caused by improper validation of an array index while processing debugFS in Qualcomm Snapdragon components. The CNVD entry (CNVD-2019-05662) specifies this vulnerability as affecting multiple Qualcomm products and variants, including M...

CVE-2018-5837

The CVE-2018-5837 entry concerns Snapdragon SoCs (IPQ8074, MDM9xxx, SD series, etc.) where MAC address randomization during probe requests is compromised by a flawed RNG that outputs repeating values far sooner than expected. The description covers the affected devices and the root cause, but the...

CVE-2019-10490

CVE-2019-10490 describes a use-after-free in the Xtra daemon shutdown caused by a static object instance being freed from multiple places in Qualcomm-based Snapdragon platforms (including Snapdragon Auto/Compute/Connectivity, IoT, wearables, and various SoCs). The issue affects a wide range of Qu...

CVE-2019-10496

CVE-2019-10496 involves a lack of checking a variable received from a driver when populating a Firmware data structure, causing a buffer overflow. Affects Qualcomm Snapdragon families including Snapdragon Auto/Compute/Connectivity/Consumer IoT/Industrial IoT/Mobile/Voice & Music/Wearables and a b...