CVE-2021-35106

CVE-2021-35106 describes a Qualcomm Snapdragon vulnerability caused by an improper length calculation of a WMI message, leading to a possible out-of-bounds read. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables. The ...

CVE-2021-35105

CVE-2021-35105 is a graphics profiling input-validation issue leading to possible out-of-bounds access in Qualcomm Snapdragon components (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Vision/Music, Wearables). Connected sources attribute the flaw to improper input handling in...

CVE-2021-35088

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure...

CVE-2021-30333

CVE-2021-30333 describes an improper validation of buffer size input to the EFS file causing memory corruption in Qualcomm Snapdragon products (e.g., Snapdragon Auto/Compute/Connectivity, Snapdragon mobile and IoT lines). Root cause: inadequate validation of the EFS file buffer size. Impact per t...

CVE-2021-30333

Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-30332

Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30331

CVE-2021-30331 concerns a buffer overflow in Qualcomm Snapdragon devices caused by improper data validation of external commands sent via the DIAG interface. Affected products include Snapdragon Auto/Compute/Connectivity/Consumer IOT/Industrial IOT/Mobile/Wearables. Root cause: DIAG external comm...

CVE-2021-30329

Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30329

CVE-2021-30329 describes a vulnerability in Qualcomm Snapdragon firmware where an assertion can occur due to improper validation of TCI configuration across Snapdragon Auto, Compute, Connectivity, Industrial IOT, and Mobile platforms. The root cause is explicitly stated as improper validation of ...

CVE-2021-30328

Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30328

CVE-2021-30328 describes a possible assertion caused by improper validation of an invalid NR CSI-IM resource configuration in Qualcomm Snapdragon Auto, Compute, Connectivity, Industrial IOT, and Mobile products. Root cause: incorrect validation of NR CSI-IM resource configuration. Impact: network...

CVE-2021-1950

Root cause: improper clearing of secure memory between authenticated users in Qualcomm Snapdragon components. Affected: Snapdragon Auto, Compute, Connectivity, Industrial IOT, Mobile, and Wired Infrastructure/Networking platforms. Impact: face authentication bypass (local access, high confidentia...

PT-2022-10424 · Qualcomm · Snapdragon Connectivity +7

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...

PT-2022-9991 · Qualcomm · Snapdragon Connectivity +4

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected...

PT-2022-4879 · Qualcomm · Qualcomm Snapdragon Mobile +5

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Qualcomm Snapdragon Compute affected versions not specified Qualcomm Snapdragon Connectivity affected versions not specified Qualcomm Snapdragon Industrial IOT affected versions not...

CVE-2021-35069

Improper validation of data length received from DMA buffer can lead to memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networki...

CVE-2021-30322

Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35077

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30326

Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30318

Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...