CVE-2021-35112

CVE-2021-35112 is a Qualcomm/Qualcomm Snapdragon vulnerability described as an access control error in register configuration that allows a user-level attacker to access graphics protected regions across multiple Snapdragon products (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobi...

CVE-2021-35104

Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and...

CVE-2021-35104

CVE-2021-35104 concerns Qualcomm closed‑source components with a buffer overflow caused by improper header parsing when playing FLAC audio clips in Snapdragon driver/software stacks. The vulnerability is described as a critical issue (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base score 9.8...

CVE-2021-35100

Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-35100

CVE-2021-35100 is a buffer over-read in Qualcomm Snapdragon components caused by improper calculation of string length when parsing Id3 tags. Affected products include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables. The vulnerability ste...

CVE-2021-35095

CVE-2021-35095 is a Qualcomm/Qualcomm-derived issue affecting Snapdragon components (Snapdragon Connectivity and Snapdragon Mobile) where improper serialization of message queue client registrations can cause a race condition, allowing multiple gunyah message clients to register with the same lab...

CVE-2021-35095

Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in Snapdragon Connectivity, Snapdragon Mobile...

CVE-2021-35091

Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connectivity, Snapdragon Mobile...

CVE-2021-35091

The CVE-2021-35091 issue is linked to Qualcomm’s closed‑source components in Snapdragon platforms (e.g., Snapdragon Connectivity and Snapdragon Mobile). It describes an out‑of‑bounds read caused by improper typecasting while handling page faults for global memory. Affected products/areas referenc...

CVE-2021-35081

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

CVE-2021-35081

CVE-2021-35081 is a Qualcomm-related vulnerability described as a buffer overflow caused by improper validation of SSID length received from beacon or probe response during an IBSS session. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connectivity, Industria...

CVE-2021-35071

Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired...

CVE-2021-35071

CVE-2021-35071 is a buffer over-read in Qualcomm Snapdragon components caused by lack of size validation when copying data from the DBR buffer to the RX buffer, leading to Denial of Service. Affected products span Snapdragon Auto, Compute, Connectivity, Industrial IoT, Mobile, Wearables, and Wire...

CVE-2021-35070

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35070

CVE-2021-35070 involves Qualcomm closed‑source components where RPM secure stream can access any secure resource due to misconfigured SMMU, potentially causing information disclosure on Snapdragon Industrial IOT and Snapdragon Mobile. The root cause is improper SMMU configuration that grants acce...

CVE-2021-30350

CVE-2021-30350 describes a memory-corruption vulnerability caused by lack of MBN header size verification against input buffers in Qualcomm Snapdragon family components (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Wearables). The issue affects Qualcomm closed-source components and ...

CVE-2021-30350

Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-30349

Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired...

CVE-2021-30349

CVE-2021-30349 describes an improper access control sequence in Qualcomm/ Snapdragon firmware where after memory allocation the AC database can be accessed out of intended order, potentially causing memory corruption in multiple Snapdragon products (Auto, Compute, Connectivity, Consumer IOT, Indu...

CVE-2021-30347

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...