CVE-2021-1917

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-1917

CVE-2021-1917 is a memory-allocation failure–driven null pointer dereference in Qualcomm’s DIAG on Snapdragon platforms (Snapdragon Auto/Compute/Connectivity/Industrial IOT/Wearables). The issue is triggered locally and can lead to a crash with HIGH impact to confidentiality, integrity, and avail...

CVE-2021-1913

Technical details about CVE-2021-1913 are not publicly provided in the supplied connected documents; only the description of an integer overflow in Qualcomm Snapdragon components is available. Monitor for updates.

CVE-2020-11303

Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voi...

CVE-2020-11303

The CVE-2020-11303 entry affects Qualcomm/Snapdragon wireless components (e.g., Snapdragon Auto, Connectivity, and IoT lines) and is caused by accepting AMSDU frames with a mismatched destination and source address, leading to information disclosure. The issue is categorized with high severity (C...

CVE-2021-30304: Out-of-bounds Read

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...

CVE-2021-1985: Out-of-bounds Read

Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-1983: Buffer Copy without Checking Size of Input

Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

PT-2021-18685

Name of the Vulnerable Software and Affected Versions Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT affected versions not specified Description The issue ...

CVE-2021-1984: Buffer Copy without Checking Size of Input

Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-1917: NULL Pointer Dereference

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables...

PT-2021-18706

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description A buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, and...

PT-2021-13685

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: A null pointer dereference issue can occur due to the lack of a null check for user-provided input in various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon...

PT-2021-18707

Name of the Vulnerable Software and Affected Versions Snapdragon Auto affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Description The issue is relate...

CVE-2021-30291: Out-of-bounds Write

Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

Ubuntu 16.04 ESM / 18.04 LTS : Linux kernel vulnerabilities (USN-5114-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5114-1 advisory. It was discovered that a race condition existed in the Atheros Ath9k WiFi driver in the Linux kernel. An attacker could possibly use this to...

October 12, 2021 Security Update (KB5006679)

None None...

CVE-2020-19003

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list...

Important: ca-certificates

Issue Overview: Update of ca-certificates to version 2018.2.22-65.1.24.amzn1 addresses the expiring IdentTrust DST Root CA X3, which affected some Let's Encrypt TLS certificates. The effect of the expiring certificate would be an inability of OpenSSL to validate impacted certificates issued by...

Ubuntu: Security Advisory (USN-5089-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...