CVE-2021-30326

CVE-2021-30326 affects Qualcomm Snapdragon family components (Auto/Compute/Connectivity/Industrial IOT/Mobile). Root cause: improper size validation when processing the DownlinkPreemption IE in RRC Reconfiguration/RRC Setup messages, leading to an assertion. CVSS vectors in the provided data indi...

CVE-2021-30326

Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30325

CVE-2021-30325 is a Qualcomm/Qualcomm-derived vulnerability affecting Snapdragon family components (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables, Wired Infrastructure and Networking). The root cause is an input validation/resource allocation flaw leading to out-of...

CVE-2021-30325

Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure an...

CVE-2021-30324

Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,...

CVE-2021-30324

CVE-2021-30324 describes an out-of-bounds write caused by missing boundary checks for the maximum buffer size when sending a DCI packet to a remote process in Qualcomm Snapdragon family components (e.g., APQ8096AU, IPQ4… and many QCA/IQ/QCS/SD devices). Root cause: lack of boundary checking leads...

CVE-2021-30323

CVE-2021-30323 is a memory corruption vulnerability due to improper validation of the maximum data write size to an EFS file in Qualcomm components. Public coverage in CNNVD1 lists affected Qualcomm products (e.g., mdm9640/9650/9655/ msm8909w/ msm8953/ msm8996au, qca-series, and various qcs/qet d...

CVE-2021-30323

Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-30322

CVE-2021-30322 is a Qualcomm/ Snapdragon local out-of-bounds write issue caused by incorrect validation of the number of GPIOs in an internal parameters array. Affected families include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, and Mobile. The root cause is improper ha...

CVE-2021-30322

Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30318

Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-30318

CVE-2021-30318 involves improper validation of inputs when provisioning the HDCP key that can cause memory corruption in Qualcomm Snapdragon components. Concrete details in connected documents (CNNVD) list affected Qualcomm/QCT families and devices (e.g., mdm9607, msm8909w, qca6xxx series, etc.) ...

CVE-2021-30317

Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voi...

CVE-2021-30317

CVE-2021-30317: Root cause is improper validation of program headers containing ELF metadata. The connected document set confirms impact as image verification bypass on Qualcomm/ Snapdragon-based platforms, specifically within Qualcomm closed‑source components. The vulnerability is categorized as...

CVE-2021-30309

Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30309

CVE-2021-30309 involves memory corruption due to improper size validation of a QXDM command in Qualcomm’s closed‑source components (QXDM/QCA/QCS family). Public records associate affected lines with Snapdragon surfaces (Compute, Consumer/Industrial IoT, Mobile) and Qualcomm’s closed‑source stack;...

PT-2022-10398 · Qualcomm · Snapdragon Connectivity +4

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected...

PT-2022-10389 · Qualcomm · Snapdragon Compute +6

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...

PT-2022-10390 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper validation of data length received from a DMA buffer, which can lead to memory corruption. This affects various Qualcomm Snapdragon products,...

PT-2022-10395 · Qualcomm · Snapdragon Connectivity +3

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Description: The issue is...