CVE-2019-10501

The CVE-2019-10501 entry affects Qualcomm Snapdragon volumes listener library across multiple Snapdragon platforms. Root cause: use-after-free caused by improper input validation in the volume listener component. Reported impact indicates partial confidentiality, integrity, and availability at a ...

CVE-2019-14000

CVE-2019-14000 concerns memory corruption and potential information leakage in Qualcomm Snapdragon platforms due to a missing RX FIFO write index check against the FIFO size in shared RAM. Affected families include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wear...

CVE-2019-14022

CVE-2019-14022 concerns an error in parsing ipv6_header length due to a missing length check in Qualcomm/Snapdragon components (Auto, Compute, IOT, Wearables, Mobile, etc.). Affected family includes Snapdragon platforms (APQ, SDM/SM series, Nicobar, etc.) across numerous devices. Root cause: insu...

CVE-2019-14052

CVE-2019-14052 affects Qualcomm Snapdragon devices (Auto/Compute/Consumer IoT/Industrial IoT/ Mobile/ Wearables, etc.) across numerous SoCs (APQ8xxx, MDM*, MSM*, QCM/QCS, etc.). The issue arises from accessing an uninitialized data structure, which could cause partial copying of contents and lead...

CVE-2019-14086

CVE-2019-14086 describes a possible integer overflow when checking the length of a frame (two 32-bit integers added together) in Qualcomm Snapdragon platforms (Snapdragon Auto/Compute/Consumer Electronics Connectivity/IoT/Industrial IoT and mobile variants such as APQ8098, MDM9607, MSM8998, QCA65...

CVE-2019-14093

CVE-2019-14093 affects Qualcomm Snapdragon display/graphics components across numerous Snapdragon variants. The root cause is an array bounds issue due to missing bound checks on input parcels in the display module. Impact is rated High (CVSSv3: HIGH for confidentiality, integrity, and availabili...

CVE-2019-14115

CVE-2019-14115 affects Qualcomm Snapdragon platforms (listed APQ/SDM/SC families) where information disclosure could occur when secure touch is released without clearing the secure display session, potentially allowing a user to read secure input while touch is in a non-secure domain. Root cause:...

CVE-2019-2241

CVE-2019-2241 affects Qualcomm Snapdragon firmware across numerous Snapdragon Auto, Compute, Connectivity, and IoT platforms (e.g., MDM9150/MDM9607/SDX24/SD 210–SD 855 family). The root cause is improper error status checks and incorrect status handling during layout background rendering, leading...

CVE-2019-2331

CVE-2019-2331 describes a possible integer overflow caused by subtracting two integers without overflow checks in Qualcomm/Xiaomi Snapdragon family devices (e.g., Snapdragon Auto/Compute/IoT/Mobile and related SSDs listed in the description). The issue affects a broad set of Qualcomm/Snapdragon c...

CVE-2019-2346

CVE-2019-2346 affects Qualcomm Snapdragon family firmware (Snapdragon Compute, Snapdragon Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wired Infrastructure/Networking) impacting IPQ8074, QCA8081, QCS404/QCS405/QCS605 and various SD/SDM platforms. Description: a memory overwrite loop trigg...

CVE-2020-3624

CVE-2020-3624 describes a potential buffer overflow caused by an integer overflow when parsing handler options due to incorrect data type usage, affecting a wide range of Qualcomm Snapdragon SoCs (e.g., APQ8009, APQ8017, APQ8053, QCS605, SM series, MSM series, etc.). The root cause is in the pars...

CVE-2020-3662

CVE-2020-3662 describes a buffer overflow that can occur when parsing the eac3 header while playing a clip on Snapdragon platforms (including Snapdragon Auto/Compute/Connectivity/IoT/Mobile families). The underlying issue is a parsing buffer overflow in nonstandard eac3 header handling across a w...

CVE-2025-47379

Summary: CVE-2025-47379 describes memory corruption and potential use-after-free when multiple threads access a shared buffer in parallel due to improper synchronization between assignment and deallocation. The CVSSv3.1 base score is 7.8 (HIGH), with local attack vector, low attack complexity, an...

CVE-2017-18282

CVE-2017-18282 concerns non-secure software enabling SDCC to generate secure bus accesses, potentially exposing RPM control on a range of Qualcomm Snapdragon platforms (Snapdragon Mobile/Wear) including devices with MDM9206, MDM9607, MDM9650 and SoCs/SD cards: SD 210/212/205, SD 425, 430, 450, 62...

CVE-2017-18294

CVE-2017-18294 describes a buffer overread when reading the ELF header file class type on Qualcomm closed‑source components (e.g., SoCs in Snapdragon/SD lines). The root cause is a size check mismatch where the ELF file size is less than the ELF64 header, potentially enabling local code execution...

CVE-2017-18326

CVE-2017-18326 affects Qualcomm Snapdragon mobile and Snapdragon Wear modem components (e.g., MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/212/205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 636, SD 650/52, SD 800, ...

CVE-2017-8276

CVE-2017-8276 describes improper authorization involving a fuse in TrustZone affecting Qualcomm Snapdragon automotive, mobile, and wear platforms. Documented affected families include MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439/SD 429, SD 4...

CVE-2018-11267

Technical details about CVE-2018-11267 are not publicly available in the provided connected documents. The entry lists affected Qualcomm/SD components but does not specify root cause, vulnerable versions, impact specifics, or remediation. Monitor for updates.

CVE-2018-11862

CVE-2018-11862 is described as a buffer overflow in the WLAN module of Snapdragon Mobile (fits Qualcomm WLAN HOST). The initial entry notes input length validation failure in Snapdragon Mobile across SD 845, SD 850, SDA660. The connected data confirms CVE-2018-11862 is listed under Qualcomm close...

CVE-2018-11864

CVE-2018-11864 affects Qualcomm Snapdragon family devices (multiple SKUs) where bytes can be written to fuses from the Secure region and later read by the high-level OS. The description lists affected products/SoCs (e.g., IPQ8074, MDM9xxx, SD 210–SD 835, SDM/SD series, etc.) and indicates the iss...

CVE-2018-11866

The CVE-2018-11866 issue is an integer overflow in WLAN when calculating an internal structure size caused by lack of input-length validation in Snapdragon Mobile and Snapdragon Wear platforms (covering IPQ8074, MDM9206, MDM9607, MDM9650, SD 210/212/205, 425, 427, 430, 435, 450, 625, 835, 845, 85...

CVE-2018-13900

CVE-2018-13900 is a use-after-free vulnerability in the IPA driver’s route table handling, where there is no protection for the route rule. Affected are Snapdragon platforms across multiple product families (e.g., Snapdragon Auto, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) an...

CVE-2018-3588

Technical details about CVE-2018-3588 are not publicly provided in the connected documents. No specifics on affected products, versions, impact, or fixes are available here. Monitor for updates.

CVE-2018-5880

The CVE-2018-5880 entry affects Qualcomm Snapdragon devices (mobile and wear) across multiple chips (e.g., MDM9206, MDM9607, SD 210/212/205, 425, 427, 430, 435, 450, 625, 636, 835, SDA660, SDM630, SDM660). The vulnerability stems from an improper data length check when processing an event report ...

CVE-2019-2252

CVE-2019-2252 is a classic buffer overflow in the Qualcomm Snapdragon video decode path triggered by decoding a specific video whose Decode picture buffer size exceeds 16. Described across Snapdragon Auto/Compute/Connectivity/IoT/Sensors/Wearables families (SDM/SDx/Snapdragon_High_Med_2016, SXR11...

CVE-2019-2322

CVE-2019-2322 is a buffer overflow vulnerability in Qualcomm Snapdragon media playback paths affecting a wide range of Snapdragon SoCs and product lines (e.g., Snapdragon Auto/Compute/Connectivity, Snapdragon Mobile, Media frameworks). The issue occurs when playing a specific non-standard clip, e...

CVE-2020-3620

CVE-2020-3620 affects a wide range of Qualcomm Snapdragon platforms (Auto/Compute/Connectivity etc.) through G-link SMEM transport. The root cause is a lack of bounds checking for an integer overflow during a round-up operation on data read from shared memory, which can lead to memory corruption ...

CVE-2020-3688

CVE-2020-3688 describes a possible buffer overflow while parsing MP4 clips with corrupted sample atoms, caused by improper validation of index in Snapdragon Auto/Compute/Connectivity/Consumer IOT/Industrial IOT, Mobile, Voice & Music, Wearables (and related APQ/Nikobar/SDM/SM family variants). Th...

CVE-2018-11269

The CVE-2018-11269 entry concerns Qualcomm Snapdragon SoCs (listed in the initial description) where a potential buffer overflow may occur when parsing TFTP options. The affected product families include automotive, mobile, and wearables with processors such as MDM9206, MDM9607, MDM9635M, MDM9640...

CVE-2019-2311

The CVE-2019-2311 entry concerns a potential buffer overflow in the WLAN handler due to lack of validation of destination buffer size before copying, affecting Qualcomm Snapdragon products (numerous APQ, MSM, SDM, and related platforms). Root cause: insufficient destination buffer size validation...

CVE-2020-3611

CVE-2020-3611 affects Qualcomm/Qualcomm-based Snapdragon platforms (e.g., APQ8098, Kamorta, MSM8998, QCS404/605, SDA660/845, SDM6xx/7xx, SXR1130, etc.). The root cause is an improper access issue caused by XBL SEC clearing only the ZI region when loading Qualcomm-signed segments, which can lead t...

CVE-2018-11277

The CVE-2018-11277 issue affects Snapdragon devices (Automobile, Mobile, Wear) with listed MSM/SD platforms where the vendor package com.qualcomm.embms is deployed in the system image and has an inadequate permission level. This allows any app installed from the Play Store to request this permiss...

CVE-2018-11865

CVE-2018-11865 is a local, integer overflow in Qualcomm Snapdragon components (Snapdragon Mobile/Wear) caused by missing validation of input length when computing an internal structure size. Affected are numerous Snapdragon/SDM platforms (MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, S...

CVE-2018-11998

CVE-2018-11998 affects Qualcomm Snapdragon mobile and Snapdragon Wear devices (including MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 427, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016). The vulnerability arises during processing of a packet decode request...

CVE-2018-5868

CVE-2018-5868 affects WideVine in Qualcomm Snapdragon Automotive and Snapdragon Mobile devices (e.g., MSM8996AU, SD 425/430/450/625/712/710/670/820/820A/835/845/850, SDA660, SDX24, SXR1130). Root cause: lack of input size checking leading to a buffer overflow. Impact: local code execution with hi...

CVE-2019-10534

CVE-2019-10534 describes a null-pointer dereference that can occur when accessing the super index entry before it has been allocated in a wide range of Qualcomm Snapdragon products (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) across numerous SDM/SDX/SD component...

CVE-2019-2338

CVE-2019-2338 describes a vulnerability in Qualcomm Snapdragon firmware where a crafted image signed by a non-QC entity can be loaded and read/write memory in the secure world across multiple Snapdragon family devices (Auto, Compute, Connectivity, etc.). Root cause is improper validation of image...

CVE-2020-3619

CVE-2020-3619 concerns non-secure memory touched during TrustZone execution on Qualcomm Snapdragon SoCs, potentially enabling local privilege escalation or memory corruption. Affected products span a wide range of Snapdragon families (e.g., APQ8009, APQ8017, APQ8053, APQ8098, IPQ8074, Kamorta, MD...

CVE-2025-59610

CVE-2025-59610 represents a memory corruption vulnerability that occurs when processing IOCTL requests with mismatched API versions, caused by concurrent modification of a user-space buffer. The CVSS 3.1 vector (L/H/C/I/A) indicates a Local, High complexity, High privileges required, no user inte...

CVE-2017-18283

CVE-2017-18283 describes a memory corruption issue in Qualcomm Snapdragon mobile platform components triggered by Read Val Blob Req with invalid parameters. Affected are Snapdragon variants QCA9379 and SD series: 210/212/205, 625, 835, 845, 850, and SDA660. The vulnerability context in the connec...

CVE-2017-18332

CVE-2017-18332 describes a vulnerability where security keys are logged during WCDMA call configuration on Qualcomm Snapdragon automotive/mobile/wear platforms (MDM9607/MDM9635M/MDM9640/MDM9645/MDM9650/MDM9655, MSM8909W/MSM8996AU, SDx family, etc.). Connected records list affected Qualcomm compon...

CVE-2018-11850

CVE-2018-11850 describes a buffer flow caused by a missing check on the remaining length parameter when processing the scan start command, affecting Qualcomm Snapdragon components across a broad range of devices (Snapdragon Automobile, Mobile, Wear) and SoCs such as MDM92xx, MSM89xx, QCA6xxx, SD ...

CVE-2018-11853

CVE-2018-11853 affects Qualcomm Snapdragon/SoCs (e.g., IPQ8074, MDM9xxx, SD 4xx–8xx) where processing a channel list set command lacks an out-of-range check, causing a buffer overflow in the channel processing path. This is a local-attack, low-precision vector with potential impact on confidentia...

CVE-2018-11884

The CVE-2018-11884 issue affects Qualcomm Snapdragon Mobile WLAN processing, caused by improper input validation that leads to a buffer overflow while handling the network list offload command. Affected products/versions include SD 835, SD 845, SD 850, and SDA660, with the WLAN HOST component imp...

CVE-2018-5917

CVE-2018-5917 affects Qualcomm Snapdragon OEM crypto function in Snapdragon Automobile and Snapdragon Mobile across MSM8996AU, SD/SDX/ SDA variants (MSM8996AU, SD425, SD430, SD450, SD625, SD820/SD820A, SD835, SD845, SD850, SDA660, SDA845, SDX24, SXR1130). Root cause: improper input validation lea...

CVE-2020-3643

CVE-2020-3643 relates to an information disclosure issue in Snapdragon SoCs (across Snapdragon Auto, Compute, Connectivity, etc.) caused by incomplete teardown of a secure display-touch session. Affected products include a long list of Snapdragon platforms (e.g., APQ8009, MSM89xx, SDM6xx, QCS6xx,...

CVE-2018-11305

CVE-2018-11305 describes a Use-After-Free condition in Qualcomm Snapdragon modems triggered by a sequence of FDAL messages. Affected products include Snapdragon Automotive, Mobile, and Wear platforms across the listed chipsets: MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU and multiple ...

CVE-2019-2345

CVE-2019-2345 describes a race condition when accessing the DMA buffer in the JPEG driver across Snapdragon platforms (Auto, Connectivity, consumer IoT, industrial IoT, Mobile, Wearables). The issue affects numerous SDM/SoC lines (e.g., MSM8909W, MSM8996AU, QCS605, SD 425–SD 827/SD 835–SD 850, SD...

CVE-2018-11822

CVE-2018-11822 affects Qualcomm Snapdragon Mobile WLAN HOST. A possible integer overflow during memory allocation in the WLAN stack could impact devices with SD 835, SD 845, SD 850, and SDA660. Severity in the Qualcomm bulletin is listed as High for WLAN HOST; exploitation status is not provided ...

CVE-2018-11854

CVE-2018-11854 affects Qualcomm Snapdragon Mobile WLAN; the root cause is a lack of validation on the input length, which may lead to a buffer overwrite. Affected devices include SD 835, SD 845, SD 850, and SDA660 variants. The vulnerability is categorized with high impact, including confidential...