CVE-2021-30256

CVE-2021-30256 describes a stack overflow caused by improper validation of the camera name length before copying the name in VR Service on Qualcomm/Snapdragon platforms (Snapdragon Compute, Connectivity, Consumer IoT, Industrial IoT). Connected sources corroborate exposure within Qualcomm compone...

CVE-2021-30256

Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

CVE-2021-1984

CVE-2021-1984 describes a buffer overflow caused by improper validation of an index value when processing the plugin block in Qualcomm Snapdragon platforms. The vulnerability affects multiple Snapdragon lines, including Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, and Wea...

CVE-2021-1983

CVE-2021-1983 concerns a buffer overflow in Qualcomm Snapdragon VR service when processing a write request, attributed to improper handling of negative data length. Public records identify Snapdragon lines affected (Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Wearables)....

CVE-2021-1980

CVE-2021-1980 corresponds to a Qualcomm vulnerability: a possible buffer over-read due to a missing length check when parsing beacon IE responses in Snapdragon-related platforms (Auto, Compute, Connectivity, and other Snapdragon SKUs). The issue is triggered via network access and has high to cri...

CVE-2021-1977

CVE-2021-1977 describes a buffer over-read caused by improper validation of frame length during AEAD decryption in ASSOC response, affecting Qualcomm Snapdragon-based devices (Auto, Compute, Connectivity, Consumer/IOT/Industrial IOT, Mobile, etc.). The vulnerability arises from frame-length valid...

CVE-2021-1967

The CVE-2021-1967 issue affects Qualcomm Snapdragon components (Auto/Compute/Connectivity/IoT wearables, etc.). It corresponds to a stack buffer overflow caused by insufficient validation of the maximum number of post NAN discovery attributes during processing of a NAN Match event. Impact is desc...

CVE-2021-1966

CVE-2021-1966 is a Qualcomm Snapdragon-related buffer overflow caused by a missing length check when copying between source and destination buffers. The vulnerability affects multiple Snapdragon families (Auto, Compute, Consumer IOT, Industrial IOT, Mobile, and Voice & Music) and is described as ...

CVE-2021-1959

CVE-2021-1959 describes memory corruption due to a missing bound check on an input index in Qualcomm Snapdragon components across Snapdragon Auto, Compute, Connectivity, Consumer/Industrial IoT, IoT, Mobile, Voice & Music, and Wearables. The vulnerability is triggered locally and has a high impac...

CVE-2021-1949

This CVE (CVE-2021-1949) concerns an integer overflow in Qualcomm Snapdragon components when sanitizer is enabled, stemming from an improper check of the batch count value. Affected products include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Voice & Music, and Wearables...

CVE-2021-1949

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1936

CVE-2021-1936 is a Qualcomm/Snapdragon-related vulnerability describing a null pointer dereference due to a missing null check on user input across Snapdragon Auto/Compute/Connectivity/Consumer IoT/Industrial IoT/Wearables. According to the CVE entry, the issue leads to a complete availability im...

CVE-2021-1932

Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired...

CVE-2021-1932

CVE-2021-1932 is a vulnerability reported in Qualcomm closed-source components affecting Snapdragon platforms. The issue is described as improper access control in the trusted application environment, allowing unauthorized memory access to CDSP or ADSP VM memory with either privilege. Impact is r...

CVE-2020-11303

The CVE-2020-11303 entry affects Qualcomm/Snapdragon wireless components (e.g., Snapdragon Auto, Connectivity, and IoT lines) and is caused by accepting AMSDU frames with a mismatched destination and source address, leading to information disclosure. The issue is categorized with high severity (C...

CVE-2020-11303

Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voi...

CVE-2021-1968

CVE-2021-1968 is a Qualcomm/Snapdragon kernel vulnerability caused by improper validation of the kernel buffer address when copying data back to the user buffer, which can lead to exposure of kernel memory contents to user space. Affected are Qualcomm Snapdragon products across multiple lineups (...

CVE-2021-1969

CVE-2021-1969 involves improper validation of a kernel buffer address when copying data back to a user buffer, enabling kernel memory information exposure to user space on Qualcomm/Snapdragon devices. Affected components include Qualcomm kernel/driver areas used across Snapdragon Auto, Compute, C...

CVE-2021-36286

Dell SupportAssist Client Consumer versions 3.9.13.0 and earlier are affected by an arbitrary file deletion vulnerability tied to NTFS symbolic links and junction points. The clean-files function treats junction points as normal folders, allowing non-privileged users to cause deletion of files ac...

PT-2021-21204 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 Description: The issue concerns an arbitrary file deletion vulnerability that can be exploited using the Windows feature of NTFS called Symbolic links...