CVE-2021-1934

Possible memory corruption due to improper check when application loader object is explicitly destructed while application is unloading in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

CVE-2021-1933

CVE-2021-1933 is an in-device vulnerability affecting Qualcomm Snapdragon platforms (Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Wearables). The issue stems from improper validation of invite messages with SDP bodies, enabling a UE assertion under networking conditions. ...

CVE-2021-1909

CVE-2021-1909 describes a buffer overflow caused by a missing length check of parameters in Qualcomm Snapdragon components (across Snapdragon Auto, Compute, Connectivity, and related devices). The vulnerability affects trusted/closed-source code in Qualcomm’s stack and has been documented in mult...

CVE-2021-1923

Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT...

CVE-2021-1916

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2020-11264

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

Information disclosure

Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2021-1929

Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

Authentication flaw

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

Information disclosure

Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

Buffer overflow

Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired...

Authentication flaw

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

CVE-2021-1972

CVE-2021-1972 is a Qualcomm WLAN host vulnerability described as a buffer overflow caused by improper validation of device types during P2P search in Snapdragon platforms (Auto/Compute/Connectivity/…/Wired Networking). Affected products are Qualcomm/Snapdragon WLAN components; CVSS v3.1 base scor...

CVE-2021-1930

CVE-2021-1930 describes a buffer-length validation bug in Qualcomm Snapdragon components (Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, and Mobile) that can cause an out-of-bounds read. The root cause is incorrect validation of the incoming buffer length, leading to potent...

CVE-2021-1929

The provided documents confirm CVE-2021-1929 affects Qualcomm Snapdragon components due to a lack of strict validation of bootmode, enabling potential information disclosure. The NVD entry lists impact as information disclosure with a LOCAL attack vector and LOW to MEDIUM severity depending on th...

CVE-2021-1923

CVE-2021-1923 involves a Qualcomm/ Snapdragon trusted-application (TA) vulnerability where an incorrect pointer argument passed to a TA could cause unintended memory operations. Connected sources confirm the root cause as a mis-passed pointer to a TA, with affected Qualcomm/Snapdragon components ...

CVE-2021-1923

Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT...

CVE-2021-1919

CVE-2021-1919 describes an integer underflow in Qualcomm Snapdragon video/RTCP handling where the RTCP length is smaller than the actual number of blocks, affecting Snapdragon Auto, Compute, Connectivity, Ciot, Industrial IoT, IoT, Voice & Music, Wearables and related Snapdragon lines. The vulner...

CVE-2021-1914

CVE-2021-1914 affects Qualcomm Snapdragon families (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, IoT, Voice & Music, Wearables). Root cause: mishandling of unsupported input can cause a loop with an unreachable exit condition. Impact: described as a high-severity issue with potentia...

CVE-2021-1914

Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables...