CVE-2021-30256

Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

Input validation

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

CVE-2021-1969

Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

CVE-2021-1936

Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-30316

Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-30316

CVE-2021-30316 affects Qualcomm/Qualcomm Snapdragon family components (e.g., Snapdragon Auto, Connectivity, Consumer IoT, Industrial IoT, Mobile, Wearables). Root cause: out-of-bounds memory access due to improper boundary check when creating an HSYNC fence. Impact per records: confidentiality, i...

CVE-2021-30315

Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto...

CVE-2021-30315

CVE-2021-30315 concerns improper handling of the sensor HAL structure in the absence of the sensor, leading to a use-after-free condition in Snapdragon Auto. Public documentation reiterates the root cause as sensor HAL mismanagement and lists Qualcomm’s sensor subsystem as the affected area. Conn...

CVE-2021-30312

CVE-2021-30312 concerns an improper authentication of sub-frames of a multicast AMSDU frame that can cause information disclosure in Qualcomm Snapdragon-based devices (e.g., Snapdragon Auto/Compute/Connectivity, IoT variants, and related Qualcomm WLAN components). The issue is triggered via malfo...

CVE-2021-30312

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon...

CVE-2021-30310

Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-30310

CVE-2021-30310 concerns a buffer overflow in Qualcomm/ Snapdragon WLAN firmware caused by improper validation of CF-ACK and CF-Poll frames. The vulnerability affects Qualcomm WLAN/Qualcomm-derived components used across Snapdragon Auto, Connectivity, IoT, and related platforms. The core issue is ...

CVE-2021-30306

Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30306

CVE-2021-30306 relates to a buffer over-read caused by improper buffer allocation for a file length supplied from user space in Qualcomm/Snapdragon components (e.g., Snapdragon Auto, Connectivity, Industrial IOT, Mobile). Connected sources identify downstream product families (Qualcomm QCA6574AU,...

CVE-2021-30305

CVE-2021-30305 is a local access vulnerability in Qualcomm/Snapdragon graphics stack caused by missing validation of page offsets before a page is inserted, leading to possible out-of-bounds access in Snapdragon Auto, Connectivity, Industrial IoT, and Mobile subsystems. Public metadata from NVD i...

CVE-2021-30305

Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30304

CVE-2021-30304 affects Qualcomm Wlan firmware used in Snapdragon Compute/Connectivity and Snapdragon Consumer Electronics Connectivity. The root cause is improper validation of TBTT count and length while parsing the beacon response, causing a possible out-of-bounds read. The vulnerability can im...

CVE-2021-30304

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...

CVE-2021-30302

CVE-2021-30302 is a Qualcomm/Qualcomm snapdragon related information disclosure where an unauthenticated user may exploit improper authentication of EAP WAPI EAPOL frames to access sensitive data. The issue is tied to Qualcomm components (including closed‑source parts) across multiple Snapdragon ...

CVE-2021-30302

Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired...