CVE-2019-14086

CVE-2019-14086 describes a possible integer overflow when checking the length of a frame (two 32-bit integers added together) in Qualcomm Snapdragon platforms (Snapdragon Auto/Compute/Consumer Electronics Connectivity/IoT/Industrial IoT and mobile variants such as APQ8098, MDM9607, MSM8998, QCA65...

CVE-2019-2241

CVE-2019-2241 affects Qualcomm Snapdragon firmware across numerous Snapdragon Auto, Compute, Connectivity, and IoT platforms (e.g., MDM9150/MDM9607/SDX24/SD 210–SD 855 family). The root cause is improper error status checks and incorrect status handling during layout background rendering, leading...

CVE-2019-2252

CVE-2019-2252 is a classic buffer overflow in the Qualcomm Snapdragon video decode path triggered by decoding a specific video whose Decode picture buffer size exceeds 16. Described across Snapdragon Auto/Compute/Connectivity/IoT/Sensors/Wearables families (SDM/SDx/Snapdragon_High_Med_2016, SXR11...

CVE-2019-2254

CVE-2019-2254 affects Qualcomm Snapdragon platforms (multiple Snapdragon Auto/Compute/IoT/Mobile lines, including various SD/SDM/RH-series) where position-determination accuracy can be degraded due to wrongly decoded information. The root cause is not explicitly detailed beyond the decoding error...

CVE-2019-2297

CVE-2019-2297 is a buffer overflow in Qualcomm Snapdragon WLAN host when processing non-standard NAN messages from user space. Affected devices span Qualcomm Snapdragon platforms listed in the initial description (e.g., various APQ, IPQ, MDM, QCA, SDX, etc.). According to connected records, the i...

CVE-2020-3617

CVE-2020-3617 refers to a Buffer over-read in the Q6 testbus framework where diag packet length isn’t fully validated before accessing a field, leading to Information disclosure. Affected Qualcomm closed-source components on Snapdragon platforms (Compute, Consumer IOT, Industrial IOT, and Mobile)...

CVE-2020-3663

CVE-2020-3663 affects Qualcomm Snapdragon platforms (multiple Snapdragon Auto/Compute/Connectivity/IoT/Wearables generations) where buffer over-run can occur while fetching track decoder information if the decode- cb size exceeds the allocated buffer. The issue’s root cause is a buffer overflow i...

CVE-2018-11864

CVE-2018-11864 affects Qualcomm Snapdragon family devices (multiple SKUs) where bytes can be written to fuses from the Secure region and later read by the high-level OS. The description lists affected products/SoCs (e.g., IPQ8074, MDM9xxx, SD 210–SD 835, SDM/SD series, etc.) and indicates the iss...

CVE-2018-11866

The CVE-2018-11866 issue is an integer overflow in WLAN when calculating an internal structure size caused by lack of input-length validation in Snapdragon Mobile and Snapdragon Wear platforms (covering IPQ8074, MDM9206, MDM9607, MDM9650, SD 210/212/205, 425, 427, 430, 435, 450, 625, 835, 845, 85...

CVE-2018-3588

Technical details about CVE-2018-3588 are not publicly provided in the connected documents. No specifics on affected products, versions, impact, or fixes are available here. Monitor for updates.

CVE-2019-10498

CVE-2019-10498 describes a buffer overflow in a Qualcomm closed‑source component triggered when a client sends more than 5 io_vec requests to the server. Affected products span Snapdragon Auto/Compute, Snapdragon IoT devices, and related Snapdragon/SDM families (e.g., SD 210–855, various Snapdrag...

CVE-2019-10511

CVE-2019-10511 concerns a memory overflow during GSNDCP compressed mode PDU decoding in Qualcomm Snapdragon components (Snapdragon Auto/Compute/IoT/Wearables and related Snapdragon variants). The issue affects a broad set of Qualcomm/Snapdragon platforms listed in the description (e.g., APQ8009, ...

CVE-2019-10587

CVE-2019-10587 describes a potential stack overflow when processing large or non-standard SDP bodies without proper delimiters in Qualcomm Snapdragon firmwares (multiple Snapdragon Auto/Compute/IoT/Wearables platforms listed). The entry notes a stack overflow vulnerability arising from SDP proces...

CVE-2019-14000

CVE-2019-14000 concerns memory corruption and potential information leakage in Qualcomm Snapdragon platforms due to a missing RX FIFO write index check against the FIFO size in shared RAM. Affected families include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wear...

CVE-2019-2331

CVE-2019-2331 describes a possible integer overflow caused by subtracting two integers without overflow checks in Qualcomm/Xiaomi Snapdragon family devices (e.g., Snapdragon Auto/Compute/IoT/Mobile and related SSDs listed in the description). The issue affects a broad set of Qualcomm/Snapdragon c...

CVE-2020-3620

CVE-2020-3620 affects a wide range of Qualcomm Snapdragon platforms (Auto/Compute/Connectivity etc.) through G-link SMEM transport. The root cause is a lack of bounds checking for an integer overflow during a round-up operation on data read from shared memory, which can lead to memory corruption ...

CVE-2020-3634

The CVE-2020-3634 issue is a hardware/firmware vulnerability affecting multiple Snapdragon generations (e.g., APQ8053, MDM9xxx, SDM6/7/8 series, QCS/QMX lines) where a read overflow results from an improper length check during decoding of Generic NAS transport/EMM info. The root cause is an impro...

CVE-2017-18283

CVE-2017-18283 describes a memory corruption issue in Qualcomm Snapdragon mobile platform components triggered by Read Val Blob Req with invalid parameters. Affected are Snapdragon variants QCA9379 and SD series: 210/212/205, 625, 835, 845, 850, and SDA660. The vulnerability context in the connec...

CVE-2017-18327

CVE-2017-18327 concerns logging of security keys when any WCDMA call is configured or reconfigured on Qualcomm Snapdragon platforms (automotive, mobile, wear) across listed chipsets and SoCs (e.g., MDM9607, MSM8996AU, SD 210/212/205, SD 820/835/845, SDA660, etc.). The NVD entry lists affected pro...

CVE-2017-18332

CVE-2017-18332 describes a vulnerability where security keys are logged during WCDMA call configuration on Qualcomm Snapdragon automotive/mobile/wear platforms (MDM9607/MDM9635M/MDM9640/MDM9645/MDM9650/MDM9655, MSM8909W/MSM8996AU, SDx family, etc.). Connected records list affected Qualcomm compon...

CVE-2018-11277

The CVE-2018-11277 issue affects Snapdragon devices (Automobile, Mobile, Wear) with listed MSM/SD platforms where the vendor package com.qualcomm.embms is deployed in the system image and has an inadequate permission level. This allows any app installed from the Play Store to request this permiss...

CVE-2018-11853

CVE-2018-11853 affects Qualcomm Snapdragon/SoCs (e.g., IPQ8074, MDM9xxx, SD 4xx–8xx) where processing a channel list set command lacks an out-of-range check, causing a buffer overflow in the channel processing path. This is a local-attack, low-precision vector with potential impact on confidentia...

CVE-2018-13900

CVE-2018-13900 is a use-after-free vulnerability in the IPA driver’s route table handling, where there is no protection for the route rule. Affected are Snapdragon platforms across multiple product families (e.g., Snapdragon Auto, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) an...

CVE-2018-5866

CVE-2018-5866 affects Qualcomm Snapdragon mobile/wear platforms (MDM9206/9607/9650 and various SD/SDA generations). The issue stems from processing logs where data is copied into a buffer pointed to by an untrusted pointer, within Snapdragon Mobile/Snapdragon Wear components. Affected products li...

CVE-2019-10534

CVE-2019-10534 describes a null-pointer dereference that can occur when accessing the super index entry before it has been allocated in a wide range of Qualcomm Snapdragon products (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) across numerous SDM/SDX/SD component...

CVE-2019-2311

The CVE-2019-2311 entry concerns a potential buffer overflow in the WLAN handler due to lack of validation of destination buffer size before copying, affecting Qualcomm Snapdragon products (numerous APQ, MSM, SDM, and related platforms). Root cause: insufficient destination buffer size validation...

CVE-2019-2322

CVE-2019-2322 is a buffer overflow vulnerability in Qualcomm Snapdragon media playback paths affecting a wide range of Snapdragon SoCs and product lines (e.g., Snapdragon Auto/Compute/Connectivity, Snapdragon Mobile, Media frameworks). The issue occurs when playing a specific non-standard clip, e...

CVE-2020-3611

CVE-2020-3611 affects Qualcomm/Qualcomm-based Snapdragon platforms (e.g., APQ8098, Kamorta, MSM8998, QCS404/605, SDA660/845, SDM6xx/7xx, SXR1130, etc.). The root cause is an improper access issue caused by XBL SEC clearing only the ZI region when loading Qualcomm-signed segments, which can lead t...

CVE-2020-3624

CVE-2020-3624 describes a potential buffer overflow caused by an integer overflow when parsing handler options due to incorrect data type usage, affecting a wide range of Qualcomm Snapdragon SoCs (e.g., APQ8009, APQ8017, APQ8053, QCS605, SM series, MSM series, etc.). The root cause is in the pars...

CVE-2020-3662

CVE-2020-3662 describes a buffer overflow that can occur when parsing the eac3 header while playing a clip on Snapdragon platforms (including Snapdragon Auto/Compute/Connectivity/IoT/Mobile families). The underlying issue is a parsing buffer overflow in nonstandard eac3 header handling across a w...

CVE-2018-11269

The CVE-2018-11269 entry concerns Qualcomm Snapdragon SoCs (listed in the initial description) where a potential buffer overflow may occur when parsing TFTP options. The affected product families include automotive, mobile, and wearables with processors such as MDM9206, MDM9607, MDM9635M, MDM9640...

CVE-2018-11862

CVE-2018-11862 is described as a buffer overflow in the WLAN module of Snapdragon Mobile (fits Qualcomm WLAN HOST). The initial entry notes input length validation failure in Snapdragon Mobile across SD 845, SD 850, SDA660. The connected data confirms CVE-2018-11862 is listed under Qualcomm close...

CVE-2018-11865

CVE-2018-11865 is a local, integer overflow in Qualcomm Snapdragon components (Snapdragon Mobile/Wear) caused by missing validation of input length when computing an internal structure size. Affected are numerous Snapdragon/SDM platforms (MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 425, S...

CVE-2018-5868

CVE-2018-5868 affects WideVine in Qualcomm Snapdragon Automotive and Snapdragon Mobile devices (e.g., MSM8996AU, SD 425/430/450/625/712/710/670/820/820A/835/845/850, SDA660, SDX24, SXR1130). Root cause: lack of input size checking leading to a buffer overflow. Impact: local code execution with hi...

CVE-2019-10486

CVE-2019-10486 describes a race condition caused by a missing resource lock around a memcpy, leading to out-of-bounds access in a broad set of Qualcomm Snapdragon components (Auto, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & Music, Wearables) across numer...

CVE-2019-2338

CVE-2019-2338 describes a vulnerability in Qualcomm Snapdragon firmware where a crafted image signed by a non-QC entity can be loaded and read/write memory in the secure world across multiple Snapdragon family devices (Auto, Compute, Connectivity, etc.). Root cause is improper validation of image...

CVE-2018-11305

CVE-2018-11305 describes a Use-After-Free condition in Qualcomm Snapdragon modems triggered by a sequence of FDAL messages. Affected products include Snapdragon Automotive, Mobile, and Wear platforms across the listed chipsets: MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU and multiple ...

CVE-2018-11850

CVE-2018-11850 describes a buffer flow caused by a missing check on the remaining length parameter when processing the scan start command, affecting Qualcomm Snapdragon components across a broad range of devices (Snapdragon Automobile, Mobile, Wear) and SoCs such as MDM92xx, MSM89xx, QCA6xxx, SD ...

CVE-2018-11884

The CVE-2018-11884 issue affects Qualcomm Snapdragon Mobile WLAN processing, caused by improper input validation that leads to a buffer overflow while handling the network list offload command. Affected products/versions include SD 835, SD 845, SD 850, and SDA660, with the WLAN HOST component imp...

CVE-2019-10512

CVE-2019-10512 affects Qualcomm Snapdragon audio components across many SoCs (e.g., IPQ4019, IPQ8064, SD/SDM/SM variants) due to payload size not being checked before using it as an array index in audio code. This is described in multiple sources (NVD, Red Hat advisory) as a vulnerability in the ...

CVE-2019-10547

CVE-2019-10547 describes a memory leak in IOCTL handling for ION on Snapdragon platforms (APQ8009, APQ8053, APQ8096AU, etc.). The root cause is failure to unassign pages under certain conditions, affecting a wide range of Snapdragon variants (Auto, Compute, NR/IoT, Wearables, and more). CVSS metr...

CVE-2020-3619

CVE-2020-3619 concerns non-secure memory touched during TrustZone execution on Qualcomm Snapdragon SoCs, potentially enabling local privilege escalation or memory corruption. Affected products span a wide range of Snapdragon families (e.g., APQ8009, APQ8017, APQ8053, APQ8098, IPQ8074, Kamorta, MD...

CVE-2020-3688

CVE-2020-3688 describes a possible buffer overflow while parsing MP4 clips with corrupted sample atoms, caused by improper validation of index in Snapdragon Auto/Compute/Connectivity/Consumer IOT/Industrial IOT, Mobile, Voice & Music, Wearables (and related APQ/Nikobar/SDM/SM family variants). Th...

CVE-2018-11998

CVE-2018-11998 affects Qualcomm Snapdragon mobile and Snapdragon Wear devices (including MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 427, SD 435, SD 450, SD 625, SD 636, SD 835, SDA660, SDM630, SDM660, Snapdragon_High_Med_2016). The vulnerability arises during processing of a packet decode request...

CVE-2019-2345

CVE-2019-2345 describes a race condition when accessing the DMA buffer in the JPEG driver across Snapdragon platforms (Auto, Connectivity, consumer IoT, industrial IoT, Mobile, Wearables). The issue affects numerous SDM/SoC lines (e.g., MSM8909W, MSM8996AU, QCS605, SD 425–SD 827/SD 835–SD 850, SD...

CVE-2020-3643

CVE-2020-3643 relates to an information disclosure issue in Snapdragon SoCs (across Snapdragon Auto, Compute, Connectivity, etc.) caused by incomplete teardown of a secure display-touch session. Affected products include a long list of Snapdragon platforms (e.g., APQ8009, MSM89xx, SDM6xx, QCS6xx,...

CVE-2018-11822

CVE-2018-11822 affects Qualcomm Snapdragon Mobile WLAN HOST. A possible integer overflow during memory allocation in the WLAN stack could impact devices with SD 835, SD 845, SD 850, and SDA660. Severity in the Qualcomm bulletin is listed as High for WLAN HOST; exploitation status is not provided ...

CVE-2018-11854

CVE-2018-11854 affects Qualcomm Snapdragon Mobile WLAN; the root cause is a lack of validation on the input length, which may lead to a buffer overwrite. Affected devices include SD 835, SD 845, SD 850, and SDA660 variants. The vulnerability is categorized with high impact, including confidential...

CVE-2018-11876

CVE-2018-11876 describes a buffer overflow in Qualcomm Snapdragon WLAN due to insufficient input validation when copying to a buffer, affecting Snapdragon Mobile devices with SD 835, 845, 850, and SDA660. The vulnerability is exploitable via a local vector with no user interaction required, resul...

CVE-2017-18300

CVE-2017-18300 affects Qualcomm closed‑source components used in Snapdragon Mobile/Wear (MDM9206/MDM9607/MDM9650, SD 210/212/205, SD 835, SDA660). The description indicates a local information‑disclosure flaw where secure display content could be exposed to a third‑party trusted application after...