CVE-2021-30298

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wire...

CVE-2021-30293

Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

CVE-2021-30293

CVE-2021-30293 describes a possible assertion caused by insufficient input validation in PUSCH configuration on Qualcomm Snapdragon substrates (Auto, Compute, Connectivity, IoT variants). Public records enumerate a Qualcomm-focused vulnerability with CVSS v3.1 base score 7.5 (Network, L, PR:N, UI...

CVE-2021-30289

CVE-2021-30289 is a buffer overflow risk in Qualcomm Snapdragon components related to COEX management, triggered by processing a DIAG command. Connected sources robustly map affected products to Snapdragon families including Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, Mobile, Voice & ...

CVE-2021-30283

Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30283

CVE-2021-30283 concerns a Qualcomm/ Snapdragon-SoC DoS due to improper handling of traps in the debug registers of user applications. CNNVD lists affected Qualcomm products (e.g., QCA6391, QCM6490, QCS6490, QRB5165/5165N, SD778G, SD888 5G, SM7325P, WCN… variants) and confirms the root cause as tr...

CVE-2021-30282

CVE-2021-30282 affects Qualcomm Snapdragon hardware/software components, with a flaw described as an input validation error that fails to validate the number of RAM partitions. This can lead to an out-of-bounds write in the RAM partition table. The vulnerability is associated with multiple Snapdr...

CVE-2021-30279

CVE-2021-30279 is tied to an access control issue caused by improper privilege masking for VMIDs in Qualcomm components. CNNVD notes the vulnerability exists in Qualcomm SDX55 and QCA6390 products, indicating a local privilege elevation possibility via VMID privilege settings. NVD/Red Hat entries...

CVE-2021-30278

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking...

CVE-2021-30276

Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wired Infrastructure and Networking...

CVE-2021-30275

Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...

CVE-2021-30275

The CVE-2021-30275 issue is an input validation and integer overflow vulnerability in Qualcomm’s closed‑source components across Snapdragon platforms (e.g., Snapdragon Auto/Compute/Connectivity and related SoCs). The root cause is a lack of address/size validation before the page alignment operat...

CVE-2021-30274

CVE-2021-30274 concerns an integer overflow in the access initialization interface due to inadequate size and address validation. The issue is described across multiple sources as affecting Qualcomm/ Qualcomm Snapdragon platforms (including Snapdragon Auto, Compute, Connectivity, and related IoT/...

CVE-2021-30273

CVE-2021-30273 describes a vulnerability in Qualcomm Snapdragon devices where improper handling of IPV6 packets with an invalid length in the destination options header can cause an assertion in the Qualcomm/IP stack. Affected products include Snapdragon Auto, Compute, Consumer IOT, Industrial IO...

CVE-2021-30273

Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-30271

Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music...

CVE-2021-30270

Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables,...

CVE-2021-30270

CVE-2021-30270 is a Qualcomm/ Snapdragon local vulnerability described as a null pointer dereference in the thread profile/trap handler caused by missing thread ID validation. Affected products include Snapdragon Auto, Compute, Connectivity, and other Snapdragon family components. CVSS metrics in...

CVE-2021-30269

Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired...

CVE-2021-30269

CVE-2021-30269 describes a potential null pointer dereference caused by insufficient TLB validation for user-provided addresses on Qualcomm Snapdragon platforms (across Snapdragon Auto, Compute, Connectivity, and related Snapdragon variants). Multiple connected sources (Red Hat, PRION, and CNNVD ...