CVE-2021-35108

Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon Mobile...

CVE-2021-35108

CVE-2021-35108 concerns Qualcomm/Qualcomm closed‑source components in Snapdragon Connectivity and Snapdragon Mobile. The root cause is improper checking of the AP-S lock bit when verifying secure resource group permissions, which can permit non‑secure read and write access. The CVSSv3.1 base vect...

CVE-2021-35097

CVE-2021-35097 concerns an authentication bypass caused by the improper order of signature verification and hashing in Qualcomm Snapdragon’s signature verification path. Affected components span Snapdragon Auto, Compute, Connectivity, COTS IoT, Industrial IoT, Mobile, Voice & Music, and Wearables...

CVE-2021-35097

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrago...

PT-2022-15236 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in multimedia due to an improper check on received export descriptors. Recommendations: At the moment, there is no information abo...

PT-2022-10448 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: A null pointer dereference may potentially occur during RSA key import in various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon...

PT-2022-15212 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: An out-of-bounds read can occur while parsing a server certificate due to improper length check in various Qualcomm Snapdragon products, including Snapdragon Auto, Snapdragon...

PT-2022-17448 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in the video driver due to a double free error that occurs while parsing an ASF clip. This problem affects various Snapdragon products,...

PT-2022-10439 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue arises from improper input validation, allowing a non-secure region to potentially modify RG permissions of IO space xPUs. This affects various Qualcomm...

PT-2022-10430 · Qualcomm · Snapdragon Wearables +5

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a possible authentication bypass due to the improper order of signature verification and hashing in the signature verification call. This affect...

PT-2022-10446 · Qualcomm · Snapdragon Mobile +2

Name of the Vulnerable Software and Affected Versions: Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Description: The issue is related to a use after free in the synx driver, whic...

PT-2022-15234 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in the multimedia driver due to an untrusted pointer dereference. This occurs while reading data from a socket, which can lead to...

PT-2022-17438 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: A memory corruption issue occurs due to a buffer overflow when processing an invalid MKV clip with an invalid seek header. This issue affects various Qualcomm Snapdragon product...

PT-2022-15235 · Qualcomm · Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption in multimedia due to improper validation of an array index in Snapdragon Auto. This can potentially lead to security issues, but...

PT-2022-10426 · Qualcomm · Snapdragon Connectivity +1

Name of the Vulnerable Software and Affected Versions: Snapdragon Connectivity, Snapdragon Mobile affected versions not specified Description: The issue arises from improper checking of the AP-S lock bit while verifying secure resource group permissions. This can lead to non-secure read and write...

PT-2022-10417 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a possible authentication bypass due to improper order of signature verification and hashing in the signature verification call. This affects various...

PT-2022-15232 · Qualcomm · Qualcomm Snapdragon Connectivity +1

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Connectivity and Snapdragon Mobile affected versions not specified Description: The issue is related to memory corruption in the Bluetooth HOST component due to a stack-based buffer overflow. This occurs when extracting da...

PT-2022-15223 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper validation of backend id in the PCM routing process, which can lead to memory corruption. This affects various Qualcomm Snapdragon products,...

PT-2022-15210 · Qualcomm · Snapdragon Connectivity +4

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected...

PT-2022-15219 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in audio due to the lack of a check for an invalid routing address into the APR Routing table. This affects various Qualcomm Snapdragon...