CVE-2021-35100

Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-35095

CVE-2021-35095 is a Qualcomm/Qualcomm-derived issue affecting Snapdragon components (Snapdragon Connectivity and Snapdragon Mobile) where improper serialization of message queue client registrations can cause a race condition, allowing multiple gunyah message clients to register with the same lab...

CVE-2021-35095

Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in Snapdragon Connectivity, Snapdragon Mobile...

CVE-2021-35091

The CVE-2021-35091 issue is linked to Qualcomm’s closed‑source components in Snapdragon platforms (e.g., Snapdragon Connectivity and Snapdragon Mobile). It describes an out‑of‑bounds read caused by improper typecasting while handling page faults for global memory. Affected products/areas referenc...

CVE-2021-35081

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

CVE-2021-35071

Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired...

CVE-2021-35071

CVE-2021-35071 is a buffer over-read in Qualcomm Snapdragon components caused by lack of size validation when copying data from the DBR buffer to the RX buffer, leading to Denial of Service. Affected products span Snapdragon Auto, Compute, Connectivity, Industrial IoT, Mobile, Wearables, and Wire...

CVE-2021-35070

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35070

CVE-2021-35070 involves Qualcomm closed‑source components where RPM secure stream can access any secure resource due to misconfigured SMMU, potentially causing information disclosure on Snapdragon Industrial IOT and Snapdragon Mobile. The root cause is improper SMMU configuration that grants acce...

CVE-2021-30347

CVE-2021-30347 maps to a Qualcomm/Snapdragon issue where an improper integrity check after receiving a valid RRC command can cause a race between PDCP and RRC tasks. Affected products include Snapdragon Auto/Compute/Connectivity/Industrial IOT/Mobile and various Qualcomm closed‑source components;...

CVE-2021-30347

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30345

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2021-30345

CVE-2021-30345 describes an improper SMMU configuration in Qualcomm RPM secure Stream that can allow access to any secure resource. The initial entry lists affected Qualcomm Snapdragon lines (Industrial IOT, Mobile, Wearables, Wired Infrastructure and Networking) and notes the root cause as a mis...

CVE-2021-30344

CVE-2021-30344 involves improper authorization of a replayed LTE security mode command that can cause a denial of service in Qualcomm Snapdragon devices. The vulnerability is described under Qualcomm closed-source components; public details on affected products, versions, or a concrete fix are no...

CVE-2021-30343

CVE-2021-30343 describes an improper integrity check in Qualcomm closed‑source components (Qualcomm Snapdragon family) that can trigger a race condition between PDCP and RRC after receiving a valid RRC Command packet. Various Snapdragon lines (Auto/Compute/Connectivity/Industrial IOT/Mobile) are ...

CVE-2021-30340

Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30340

CVE-2021-30340 is a Qualcomm-related issue described as a reachable assertion caused by improper validation of the coreset in PDCCH configuration in SA mode. Connected sources identify the vulnerability in Qualcomm closed-source components across Snapdragon Auto/Compute/Connectivity/Industrial IO...

CVE-2021-30339

Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2022-22072

CVE-2022-22072 is a buffer overflow caused by improper validation of NDP application information length in Qualcomm Snapdragon family components (including Auto, Compute, CE Connectivity, CIOT, Industrial IOT, Mobile, Voice & Music) and related WLAN subsystems. The vulnerability is locally exploi...

CVE-2022-22071

CVE-2022-22071 describes a use-after-free condition in Qualcomm Snapdragon chipsets where process shell memory is freed via IOCTL munmap during initialization. Affected lines include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, and Voice & Music families. The vuln...