Stack overflow

Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon...

CVE-2021-30310

CVE-2021-30310 concerns a buffer overflow in Qualcomm/ Snapdragon WLAN firmware caused by improper validation of CF-ACK and CF-Poll frames. The vulnerability affects Qualcomm WLAN/Qualcomm-derived components used across Snapdragon Auto, Connectivity, IoT, and related platforms. The core issue is ...

CVE-2021-30304

CVE-2021-30304 affects Qualcomm Wlan firmware used in Snapdragon Compute/Connectivity and Snapdragon Consumer Electronics Connectivity. The root cause is improper validation of TBTT count and length while parsing the beacon response, causing a possible out-of-bounds read. The vulnerability can im...

CVE-2021-30304

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...

CVE-2021-30302

Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired...

CVE-2021-30288

CVE-2021-30288 describes a stack overflow due to improper TLV length checks when copying TLVs to a local stack variable in Qualcomm/Snapdragon components. Connected sources confirm this is a Qualcomm/Android ecosystem issue affecting multiple Snapdragon sub-families (e.g., Auto/Compute/Connectivi...

CVE-2021-1980

CVE-2021-1980 corresponds to a Qualcomm vulnerability: a possible buffer over-read due to a missing length check when parsing beacon IE responses in Snapdragon-related platforms (Auto, Compute, Connectivity, and other Snapdragon SKUs). The issue is triggered via network access and has high to cri...

CVE-2021-1977

CVE-2021-1977 describes a buffer over-read caused by improper validation of frame length during AEAD decryption in ASSOC response, affecting Qualcomm Snapdragon-based devices (Auto, Compute, Connectivity, Consumer/IOT/Industrial IOT, Mobile, etc.). The vulnerability arises from frame-length valid...

CVE-2020-11303

Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voi...

Integer overflow

Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IO...

CVE-2021-30260

CVE-2021-30260 involves a Qualcomm-related vulnerability where improper validation of input parameters when handling the extscan hostlist configuration command can cause an integer overflow that may progress to a buffer overflow. Affected Qualcomm components/chips include csra6620, csra6640, csrb...

CVE-2021-30260

Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IO...

CVE-2021-1956

Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-1971

CVE-2021-1971 affects Qualcomm closed-source components in Snapdragon SoCs, arising from a lack of physical layer state validation leading to possible assertion. The exposure spans Snapdragon Auto/Compute/Connectivity/Consumer Electronics Connectivity/Industrial IOT/ Mobile/Wired Infrastructure, ...

CVE-2021-1956

The CVE-2021-1956 entry describes an improper handling of ASB-U packets with an L2CAP channel ID by the slave host in Qualcomm Snapdragon family devices, potentially causing interference with piconet operation. The affected scope is broad across Qualcomm/Snapdragon platforms (e.g., Snapdragon Aut...

CVE-2021-1956

Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-1941

Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-1909

CVE-2021-1909 describes a buffer overflow caused by a missing length check of parameters in Qualcomm Snapdragon components (across Snapdragon Auto, Compute, Connectivity, and related devices). The vulnerability affects trusted/closed-source code in Qualcomm’s stack and has been documented in mult...

Authentication flaw

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

Authentication flaw

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...