CVE-2021-1967

The CVE-2021-1967 issue affects Qualcomm Snapdragon components (Auto/Compute/Connectivity/IoT wearables, etc.). It corresponds to a stack buffer overflow caused by insufficient validation of the maximum number of post NAN discovery attributes during processing of a NAN Match event. Impact is desc...

CVE-2021-1967

Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2021-1966

CVE-2021-1966 is a Qualcomm Snapdragon-related buffer overflow caused by a missing length check when copying between source and destination buffers. The vulnerability affects multiple Snapdragon families (Auto, Compute, Consumer IOT, Industrial IOT, Mobile, and Voice & Music) and is described as ...

CVE-2021-1959

CVE-2021-1959 describes memory corruption due to a missing bound check on an input index in Qualcomm Snapdragon components across Snapdragon Auto, Compute, Connectivity, Consumer/Industrial IoT, IoT, Mobile, Voice & Music, and Wearables. The vulnerability is triggered locally and has a high impac...

CVE-2021-1949

This CVE (CVE-2021-1949) concerns an integer overflow in Qualcomm Snapdragon components when sanitizer is enabled, stemming from an improper check of the batch count value. Affected products include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Voice & Music, and Wearables...

CVE-2021-1949

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1932

CVE-2021-1932 is a vulnerability reported in Qualcomm closed-source components affecting Snapdragon platforms. The issue is described as improper access control in the trusted application environment, allowing unauthorized memory access to CDSP or ADSP VM memory with either privilege. Impact is r...

CVE-2021-1932

Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired...

CVE-2021-1917

CVE-2021-1917 is a memory-allocation failure–driven null pointer dereference in Qualcomm’s DIAG on Snapdragon platforms (Snapdragon Auto/Compute/Connectivity/Industrial IOT/Wearables). The issue is triggered locally and can lead to a crash with HIGH impact to confidentiality, integrity, and avail...

CVE-2021-1917

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-1913

Technical details about CVE-2021-1913 are not publicly provided in the supplied connected documents; only the description of an integer overflow in Qualcomm Snapdragon components is available. Monitor for updates.

CVE-2020-11303

Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voi...

CVE-2021-1969

CVE-2021-1969 involves improper validation of a kernel buffer address when copying data back to a user buffer, enabling kernel memory information exposure to user space on Qualcomm/Snapdragon devices. Affected components include Qualcomm kernel/driver areas used across Snapdragon Auto, Compute, C...

CVE-2021-1968

CVE-2021-1968 is a Qualcomm/Snapdragon kernel vulnerability caused by improper validation of the kernel buffer address when copying data back to the user buffer, which can lead to exposure of kernel memory contents to user space. Affected are Qualcomm Snapdragon products across multiple lineups (...

CVE-2021-1976

A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and...

CVE-2021-1939

Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

Null pointer dereference

Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

Integer overflow

Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

Integer overflow

Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IO...

CVE-2021-30261

CVE-2021-30261 : Qualcomm/Qualcomm-derived Snapdragon components are affected by an input validation flaw in the HLOS beacon template update path. The vulnerability stems from lack of input command size validation, enabling possible integer and heap overflow in affected Qualcomm chips. The CNNVD ...