CVE-2020-3688

CVE-2020-3688 describes a possible buffer overflow while parsing MP4 clips with corrupted sample atoms, caused by improper validation of index in Snapdragon Auto/Compute/Connectivity/Consumer IOT/Industrial IOT, Mobile, Voice & Music, Wearables (and related APQ/Nikobar/SDM/SM family variants). Th...

CVE-2017-18293

Overview: CVE-2017-18293 describes a local vulnerability in Qualcomm/Snapdragon GPIO handling where blocking access to GPIO resource registers can be bypassed via banked GPIO registers, affecting Snapdragon Mobile and Snapdragon Wear devices (MDM9206, MDM9607, MDM9650, SD 210/212/205, SD 425, SD ...

CVE-2017-18326

CVE-2017-18326 affects Qualcomm Snapdragon mobile and Snapdragon Wear modem components (e.g., MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/212/205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 800, ...

CVE-2017-18327

CVE-2017-18327 concerns logging of security keys when any WCDMA call is configured or reconfigured on Qualcomm Snapdragon platforms (automotive, mobile, wear) across listed chipsets and SoCs (e.g., MDM9607, MSM8996AU, SD 210/212/205, SD 820/835/845, SDA660, etc.). The NVD entry lists affected pro...

CVE-2017-18331

CVE-2017-18331 affects Qualcomm Snapdragon devices with affected secure display buffers (mobile, automobile, wearables) and is due to an improper access control in the buffer handling. Affected products/SoCs include versions of MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/212/205, SD 820, SD 820A...

CVE-2017-8276

CVE-2017-8276 describes improper authorization involving a fuse in TrustZone affecting Qualcomm Snapdragon automotive, mobile, and wear platforms. Documented affected families include MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439/SD 429, SD 4...

CVE-2018-11854

CVE-2018-11854 affects Qualcomm Snapdragon Mobile WLAN; the root cause is a lack of validation on the input length, which may lead to a buffer overwrite. Affected devices include SD 835, SD 845, SD 850, and SDA660 variants. The vulnerability is categorized with high impact, including confidential...

CVE-2018-11864

CVE-2018-11864 affects Qualcomm Snapdragon family devices (multiple SKUs) where bytes can be written to fuses from the Secure region and later read by the high-level OS. The description lists affected products/SoCs (e.g., IPQ8074, MDM9xxx, SD 210–SD 835, SDM/SD series, etc.) and indicates the iss...

CVE-2018-5866

CVE-2018-5866 affects Qualcomm Snapdragon mobile/wear platforms (MDM9206/9607/9650 and various SD/SDA generations). The issue stems from processing logs where data is copied into a buffer pointed to by an untrusted pointer, within Snapdragon Mobile/Snapdragon Wear components. Affected products li...

CVE-2018-5881

CVE-2018-5881 is a buffer-length validation flaw in the LwM2M device management protocol that can lead to a buffer overflow on Snapdragon platforms. Affected are Snapdragon Mobile and Wear devices across MDM9206, MDM9607, and SD variants: SD 210/212/205, 425, 427, 430, 435, 450, 625, 636, 835, SD...

CVE-2019-10501

The CVE-2019-10501 entry affects Qualcomm Snapdragon volumes listener library across multiple Snapdragon platforms. Root cause: use-after-free caused by improper input validation in the volume listener component. Reported impact indicates partial confidentiality, integrity, and availability at a ...

CVE-2019-14031

CVE-2019-14031 describes a buffer overflow in Qualcomm Snapdragon devices when parsing RSN Information Elements that contain a list of PMK IDs longer than the allocated buffer. The issue affects a broad set of Snapdragon products (Auto, Compute, Connectivity, IoT, Mobile, etc.) across numerous So...

CVE-2019-14093

CVE-2019-14093 affects Qualcomm Snapdragon display/graphics components across numerous Snapdragon variants. The root cause is an array bounds issue due to missing bound checks on input parcels in the display module. Impact is rated High (CVSSv3: HIGH for confidentiality, integrity, and availabili...

CVE-2020-3620

CVE-2020-3620 affects a wide range of Qualcomm Snapdragon platforms (Auto/Compute/Connectivity etc.) through G-link SMEM transport. The root cause is a lack of bounds checking for an integer overflow during a round-up operation on data read from shared memory, which can lead to memory corruption ...

CVE-2020-3634

The CVE-2020-3634 issue is a hardware/firmware vulnerability affecting multiple Snapdragon generations (e.g., APQ8053, MDM9xxx, SDM6/7/8 series, QCS/QMX lines) where a read overflow results from an improper length check during decoding of Generic NAS transport/EMM info. The root cause is an impro...

CVE-2017-18294

CVE-2017-18294 describes a buffer overread when reading the ELF header file class type on Qualcomm closed‑source components (e.g., SoCs in Snapdragon/SD lines). The root cause is a size check mismatch where the ELF file size is less than the ELF64 header, potentially enabling local code execution...

CVE-2018-3588

Technical details about CVE-2018-3588 are not publicly provided in the connected documents. No specifics on affected products, versions, impact, or fixes are available here. Monitor for updates.

CVE-2018-5879

CVE-2018-5879 affects Snapdragon mobile and Snapdragon Wear platforms (list includes MDM9206, MDM9607, SD 210/212/205, 425, 427, 430, 435, 450, 625, 636, 835, SDA660, SDM630, SDM660). Root cause is an improper length check while processing an MQTT message, which can lead to a heap overflow. The i...

CVE-2019-10511

CVE-2019-10511 concerns a memory overflow during GSNDCP compressed mode PDU decoding in Qualcomm Snapdragon components (Snapdragon Auto/Compute/IoT/Wearables and related Snapdragon variants). The issue affects a broad set of Qualcomm/Snapdragon platforms listed in the description (e.g., APQ8009, ...

CVE-2019-14022

CVE-2019-14022 concerns an error in parsing ipv6_header length due to a missing length check in Qualcomm/Snapdragon components (Auto, Compute, IOT, Wearables, Mobile, etc.). Affected family includes Snapdragon platforms (APQ, SDM/SM series, Nicobar, etc.) across numerous devices. Root cause: insu...

CVE-2019-14115

CVE-2019-14115 affects Qualcomm Snapdragon platforms (listed APQ/SDM/SC families) where information disclosure could occur when secure touch is released without clearing the secure display session, potentially allowing a user to read secure input while touch is in a non-secure domain. Root cause:...

CVE-2019-2252

CVE-2019-2252 is a classic buffer overflow in the Qualcomm Snapdragon video decode path triggered by decoding a specific video whose Decode picture buffer size exceeds 16. Described across Snapdragon Auto/Compute/Connectivity/IoT/Sensors/Wearables families (SDM/SDx/Snapdragon_High_Med_2016, SXR11...

CVE-2019-2311

The CVE-2019-2311 entry concerns a potential buffer overflow in the WLAN handler due to lack of validation of destination buffer size before copying, affecting Qualcomm Snapdragon products (numerous APQ, MSM, SDM, and related platforms). Root cause: insufficient destination buffer size validation...

CVE-2019-2322

CVE-2019-2322 is a buffer overflow vulnerability in Qualcomm Snapdragon media playback paths affecting a wide range of Snapdragon SoCs and product lines (e.g., Snapdragon Auto/Compute/Connectivity, Snapdragon Mobile, Media frameworks). The issue occurs when playing a specific non-standard clip, e...

CVE-2020-3611

CVE-2020-3611 affects Qualcomm/Qualcomm-based Snapdragon platforms (e.g., APQ8098, Kamorta, MSM8998, QCS404/605, SDA660/845, SDM6xx/7xx, SXR1130, etc.). The root cause is an improper access issue caused by XBL SEC clearing only the ZI region when loading Qualcomm-signed segments, which can lead t...

CVE-2020-3662

CVE-2020-3662 describes a buffer overflow that can occur when parsing the eac3 header while playing a clip on Snapdragon platforms (including Snapdragon Auto/Compute/Connectivity/IoT/Mobile families). The underlying issue is a parsing buffer overflow in nonstandard eac3 header handling across a w...

CVE-2016-10502

CVE-2016-10502 involves an integer overflow while generating a trusted application id, which can yield a trusted application's identity as invalid. The issue affects Qualcomm Snapdragon components on Snapdragon Mobile and Snapdragon Wear devices, specifically in versions MDM9206, MDM9607, MDM9650...

CVE-2017-18283

CVE-2017-18283 describes a memory corruption issue in Qualcomm Snapdragon mobile platform components triggered by Read Val Blob Req with invalid parameters. Affected are Snapdragon variants QCA9379 and SD series: 210/212/205, 625, 835, 845, 850, and SDA660. The vulnerability context in the connec...

CVE-2017-18299

CVE-2017-18299 affects Qualcomm closed‑source components in Snapdragon platforms (Automobile, Mobile, Wear) across several SoCs/SDs. The issue arises from improper translation table consolidation logic, causing resource exhaustion and QSEE errors. Connected records identify this CVE as associated...

CVE-2017-18303

CVE-2017-18303 describes a buffer overflow in Qualcomm Snapdragon components (including Snapdragon Automobile, Mobile, and Wear families across listed SD/x chips) caused by unvalidated inputs while processing the sensors registry configuration file. The root cause is input validation failure lead...

CVE-2018-11269

The CVE-2018-11269 entry concerns Qualcomm Snapdragon SoCs (listed in the initial description) where a potential buffer overflow may occur when parsing TFTP options. The affected product families include automotive, mobile, and wearables with processors such as MDM9206, MDM9607, MDM9635M, MDM9640...

CVE-2018-11855

CVE-2018-11855 describes a buffer overflow in Qualcomm Snapdragon components when an end user uses the SCP11 sample OCE code without modification, during transmission of a CAPDU. Affected products include Snapdragon Auto, Compute, Connectivity, and related Snapdragon lines across multiple device ...

CVE-2018-11862

CVE-2018-11862 is described as a buffer overflow in the WLAN module of Snapdragon Mobile (fits Qualcomm WLAN HOST). The initial entry notes input length validation failure in Snapdragon Mobile across SD 845, SD 850, SDA660. The connected data confirms CVE-2018-11862 is listed under Qualcomm close...

CVE-2018-11865

CVE-2018-11865 is a local, integer overflow in Qualcomm Snapdragon components (Snapdragon Mobile/Wear) caused by missing validation of input length when computing an internal structure size. Affected are numerous Snapdragon/SDM platforms (MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, S...

CVE-2018-5880

The CVE-2018-5880 entry affects Qualcomm Snapdragon devices (mobile and wear) across multiple chips (e.g., MDM9206, MDM9607, SD 210/212/205, 425, 427, 430, 435, 450, 625, 636, 835, SDA660, SDM630, SDM660). The vulnerability stems from an improper data length check when processing an event report ...

CVE-2019-10534

CVE-2019-10534 describes a null-pointer dereference that can occur when accessing the super index entry before it has been allocated in a wide range of Qualcomm Snapdragon products (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) across numerous SDM/SDX/SD component...

CVE-2020-3643

CVE-2020-3643 relates to an information disclosure issue in Snapdragon SoCs (across Snapdragon Auto, Compute, Connectivity, etc.) caused by incomplete teardown of a secure display-touch session. Affected products include a long list of Snapdragon platforms (e.g., APQ8009, MSM89xx, SDM6xx, QCS6xx,...

CVE-2017-18282

CVE-2017-18282 concerns non-secure software enabling SDCC to generate secure bus accesses, potentially exposing RPM control on a range of Qualcomm Snapdragon platforms (Snapdragon Mobile/Wear) including devices with MDM9206, MDM9607, MDM9650 and SoCs/SD cards: SD 210/212/205, SD 425, 430, 450, 62...

CVE-2017-18332

CVE-2017-18332 describes a vulnerability where security keys are logged during WCDMA call configuration on Qualcomm Snapdragon automotive/mobile/wear platforms (MDM9607/MDM9635M/MDM9640/MDM9645/MDM9650/MDM9655, MSM8909W/MSM8996AU, SDx family, etc.). Connected records list affected Qualcomm compon...

CVE-2018-11277

The CVE-2018-11277 issue affects Snapdragon devices (Automobile, Mobile, Wear) with listed MSM/SD platforms where the vendor package com.qualcomm.embms is deployed in the system image and has an inadequate permission level. This allows any app installed from the Play Store to request this permiss...

CVE-2019-2338

CVE-2019-2338 describes a vulnerability in Qualcomm Snapdragon firmware where a crafted image signed by a non-QC entity can be loaded and read/write memory in the secure world across multiple Snapdragon family devices (Auto, Compute, Connectivity, etc.). Root cause is improper validation of image...

CVE-2018-11267

Technical details about CVE-2018-11267 are not publicly available in the provided connected documents. The entry lists affected Qualcomm/SD components but does not specify root cause, vulnerable versions, impact specifics, or remediation. Monitor for updates.

CVE-2018-11850

CVE-2018-11850 describes a buffer flow caused by a missing check on the remaining length parameter when processing the scan start command, affecting Qualcomm Snapdragon components across a broad range of devices (Snapdragon Automobile, Mobile, Wear) and SoCs such as MDM92xx, MSM89xx, QCA6xxx, SD ...

CVE-2018-11874

CVE-2018-11874 describes a buffer overflow in Snapdragon Mobile when setting up a secure NDP connection, triggered if the passphrase length exceeds 32. Affected are Qualcomm-derived SoCs in Snapdragon Mobile platforms: SD 835, SD 845, SD 850, and SDA660. The entry lists a local attack vector with...

CVE-2018-11884

The CVE-2018-11884 issue affects Qualcomm Snapdragon Mobile WLAN processing, caused by improper input validation that leads to a buffer overflow while handling the network list offload command. Affected products/versions include SD 835, SD 845, SD 850, and SDA660, with the WLAN HOST component imp...

CVE-2018-11998

CVE-2018-11998 affects Qualcomm Snapdragon mobile and Snapdragon Wear devices (including MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 427, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016). The vulnerability arises during processing of a packet decode request...

CVE-2018-5868

CVE-2018-5868 affects WideVine in Qualcomm Snapdragon Automotive and Snapdragon Mobile devices (e.g., MSM8996AU, SD 425/430/450/625/712/710/670/820/820A/835/845/850, SDA660, SDX24, SXR1130). Root cause: lack of input size checking leading to a buffer overflow. Impact: local code execution with hi...

CVE-2018-11822

CVE-2018-11822 affects Qualcomm Snapdragon Mobile WLAN HOST. A possible integer overflow during memory allocation in the WLAN stack could impact devices with SD 835, SD 845, SD 850, and SDA660. Severity in the Qualcomm bulletin is listed as High for WLAN HOST; exploitation status is not provided ...

CVE-2018-11853

CVE-2018-11853 affects Qualcomm Snapdragon/SoCs (e.g., IPQ8074, MDM9xxx, SD 4xx–8xx) where processing a channel list set command lacks an out-of-range check, causing a buffer overflow in the channel processing path. This is a local-attack, low-precision vector with potential impact on confidentia...

CVE-2018-11876

CVE-2018-11876 describes a buffer overflow in Qualcomm Snapdragon WLAN due to insufficient input validation when copying to a buffer, affecting Snapdragon Mobile devices with SD 835, 845, 850, and SDA660. The vulnerability is exploitable via a local vector with no user interaction required, resul...