CVE-2021-30256

CVE-2021-30256 describes a stack overflow caused by improper validation of the camera name length before copying the name in VR Service on Qualcomm/Snapdragon platforms (Snapdragon Compute, Connectivity, Consumer IoT, Industrial IoT). Connected sources corroborate exposure within Qualcomm compone...

CVE-2021-1985

CVE-2021-1985 affects Qualcomm Snapdragon devices via the QVR Service configuration. Root cause: lack of proper data length checks leads to a buffer over-read. Impact described as local access with high confidentiality and availability impact; no public exploit details are provided in the supplie...

CVE-2021-1984

CVE-2021-1984 describes a buffer overflow caused by improper validation of an index value when processing the plugin block in Qualcomm Snapdragon platforms. The vulnerability affects multiple Snapdragon lines, including Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, and Wea...

CVE-2021-1983

CVE-2021-1983 concerns a buffer overflow in Qualcomm Snapdragon VR service when processing a write request, attributed to improper handling of negative data length. Public records identify Snapdragon lines affected (Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Wearables)....

CVE-2021-1980

CVE-2021-1980 corresponds to a Qualcomm vulnerability: a possible buffer over-read due to a missing length check when parsing beacon IE responses in Snapdragon-related platforms (Auto, Compute, Connectivity, and other Snapdragon SKUs). The issue is triggered via network access and has high to cri...

CVE-2021-1977

CVE-2021-1977 describes a buffer over-read caused by improper validation of frame length during AEAD decryption in ASSOC response, affecting Qualcomm Snapdragon-based devices (Auto, Compute, Connectivity, Consumer/IOT/Industrial IOT, Mobile, etc.). The vulnerability arises from frame-length valid...

CVE-2021-1967

The CVE-2021-1967 issue affects Qualcomm Snapdragon components (Auto/Compute/Connectivity/IoT wearables, etc.). It corresponds to a stack buffer overflow caused by insufficient validation of the maximum number of post NAN discovery attributes during processing of a NAN Match event. Impact is desc...

CVE-2021-1967

Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2021-1966

CVE-2021-1966 is a Qualcomm Snapdragon-related buffer overflow caused by a missing length check when copying between source and destination buffers. The vulnerability affects multiple Snapdragon families (Auto, Compute, Consumer IOT, Industrial IOT, Mobile, and Voice & Music) and is described as ...

CVE-2021-1959

CVE-2021-1959 describes memory corruption due to a missing bound check on an input index in Qualcomm Snapdragon components across Snapdragon Auto, Compute, Connectivity, Consumer/Industrial IoT, IoT, Mobile, Voice & Music, and Wearables. The vulnerability is triggered locally and has a high impac...

CVE-2021-1949

This CVE (CVE-2021-1949) concerns an integer overflow in Qualcomm Snapdragon components when sanitizer is enabled, stemming from an improper check of the batch count value. Affected products include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Voice & Music, and Wearables...

CVE-2021-1949

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1932

Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired...

CVE-2021-1932

CVE-2021-1932 is a vulnerability reported in Qualcomm closed-source components affecting Snapdragon platforms. The issue is described as improper access control in the trusted application environment, allowing unauthorized memory access to CDSP or ADSP VM memory with either privilege. Impact is r...

CVE-2021-1917

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-1917

CVE-2021-1917 is a memory-allocation failure–driven null pointer dereference in Qualcomm’s DIAG on Snapdragon platforms (Snapdragon Auto/Compute/Connectivity/Industrial IOT/Wearables). The issue is triggered locally and can lead to a crash with HIGH impact to confidentiality, integrity, and avail...

CVE-2021-1913

Technical details about CVE-2021-1913 are not publicly provided in the supplied connected documents; only the description of an integer overflow in Qualcomm Snapdragon components is available. Monitor for updates.

CVE-2021-1968

CVE-2021-1968 is a Qualcomm/Snapdragon kernel vulnerability caused by improper validation of the kernel buffer address when copying data back to the user buffer, which can lead to exposure of kernel memory contents to user space. Affected are Qualcomm Snapdragon products across multiple lineups (...

CVE-2021-1969

CVE-2021-1969 involves improper validation of a kernel buffer address when copying data back to a user buffer, enabling kernel memory information exposure to user space on Qualcomm/Snapdragon devices. Affected components include Qualcomm kernel/driver areas used across Snapdragon Auto, Compute, C...

CVE-2021-1939

Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...