CVE-2021-30342

CVE-2021-30342 is a Qualcomm closed‑source component issue described as an improper integrity check that can cause a race condition between the PDCP and RRC tasks after a valid RRC Command packet is received. Documents indicate an impact in Snapdragon-family devices (Auto/Compute/Consumer IoT/Ind...

CVE-2021-30341

Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-30341

CVE-2021-30341 describes memory corruption caused by improper buffer size validation of DSM packets in Qualcomm/Snapdragon components (Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Wearables). The CVSS v3.1 base score is 9.8 (CRITICAL) with NETWORK ...

CVE-2021-30334

CVE-2021-30334 describes a use-after-free in Qualcomm Snapdragon DRM handling caused by a missing null check of DRM file status after the file structure is freed. Affected products include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Voice & Music, and Wearables. The vuln...

CVE-2021-30281

CVE-2021-30281 concerns an access control error described for Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Voice & Music, Wearables, Wired Infrastructure & Networking). Description states possible unauthorized access to a secure space due to improper c...

CVE-2022-22072

CVE-2022-22072 is a buffer overflow caused by improper validation of NDP application information length in Qualcomm Snapdragon family components (including Auto, Compute, CE Connectivity, CIOT, Industrial IOT, Mobile, Voice & Music) and related WLAN subsystems. The vulnerability is locally exploi...

CVE-2022-22071

CVE-2022-22071 describes a use-after-free condition in Qualcomm Snapdragon chipsets where process shell memory is freed via IOCTL munmap during initialization. Affected lines include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, and Voice & Music families. The vuln...

CVE-2022-22068

CVE-2022-22068 affects Qualcomm/ Snapdragon kernel components. The issue arises when a kernel event contains content not generated by NPU software during asynchronous execution, potentially enabling local escalation of privileges with high impact (confidentiality, integrity, and availability all ...

CVE-2022-22068

kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22065

CVE-2022-22065 is a Qualcomm Snapdragon WLAN-Host vulnerability characterized by an out-of-bounds read due to an improper length check, leading to Denial of Service. The CVE is listed under Qualcomm components for the May 2022 Android security updates as a High-severity WLAN issue. Connected sour...

CVE-2022-22065

Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2022-22064

Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2021-35098

CVE-2021-35098 describes memory corruption due to improper validation of the session id in the PCM routing process across Qualcomm Snapdragon components (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables). The issue, as documented by NVD and Red Hat, has ...

CVE-2021-35084

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-35079

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35078

Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35078

CVE-2021-35078 describes a potential memory leak caused by improper validation of the certificate chain length while parsing the server certificate chain in Qualcomm Snapdragon families (Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wearables). Connected sources (P...

CVE-2021-35072

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-35072

CVE-2021-35072 is a Qualcomm/Snapdragon DIAG command handling vulnerability where an input validation error on array indexes in the Modem/DIAG path can cause a buffer overflow. The issue affects Snapdragon line components (Auto, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) with...

CVE-2022-25651

Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...