CVE-2021-35069

Improper validation of data length received from DMA buffer can lead to memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networki...

CVE-2021-35069

CVE-2021-35069 describes an improper validation of data length received from a DMA buffer that can cause memory corruption in Qualcomm Snapdragon products. Affected families include Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and WIN (Snapdragon ha...

CVE-2021-35068

CVE-2021-35068 involves a NULL pointer dereference caused by a missing null check when freeing the device information buffer in the Bluetooth HFP protocol. Affected product families are Qualcomm Snapdragon lines: Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Voice & Music, and Wearab...

CVE-2021-30326

Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30326

CVE-2021-30326 affects Qualcomm Snapdragon family components (Auto/Compute/Connectivity/Industrial IOT/Mobile). Root cause: improper size validation when processing the DownlinkPreemption IE in RRC Reconfiguration/RRC Setup messages, leading to an assertion. CVSS vectors in the provided data indi...

CVE-2021-30325

CVE-2021-30325 is a Qualcomm/Qualcomm-derived vulnerability affecting Snapdragon family components (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables, Wired Infrastructure and Networking). The root cause is an input validation/resource allocation flaw leading to out-of...

CVE-2021-30325

Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure an...

CVE-2021-30323

Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-30323

CVE-2021-30323 is a memory corruption vulnerability due to improper validation of the maximum data write size to an EFS file in Qualcomm components. Public coverage in CNNVD1 lists affected Qualcomm products (e.g., mdm9640/9650/9655/ msm8909w/ msm8953/ msm8996au, qca-series, and various qcs/qet d...

CVE-2021-30317

Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voi...

PT-2022-10398 · Qualcomm · Snapdragon Connectivity +4

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected...

PT-2022-10390 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper validation of data length received from a DMA buffer, which can lead to memory corruption. This affects various Qualcomm Snapdragon products,...

PT-2022-9985 · Qualcomm · Snapdragon Connectivity +5

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...

PT-2022-9983 · Qualcomm · Snapdragon Compute +6

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT...

Virtuozzo Hybrid Infrastructure 5.0 (5.0.0-137)

In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance service providers' interoperability and help expand their services. The improvements cover compute services, object storage, security, and monitoring. Additionally, this release delivers stability...

ALEA-2022:0354 vulkan bug fix and enhancement update

The vulkan packages contain the reference ICD loader and validation layers for Vulkan, a graphics and compute API for cross-platform access to modern GPUs. Bug Fixes and Enhancements: Rebase vulkan-loader in 8.6 BZ2016391 Rebase vulkan-headers in 8.6 BZ2016392 Rebase spirv-headers in 8.6 BZ201639...

vulkan bug fix and enhancement update

The vulkan packages contain the reference ICD loader and validation layers for Vulkan, a graphics and compute API for cross-platform access to modern GPUs. Bug Fixes and Enhancements: Rebase vulkan-loader in 8.6 BZ2016391 Rebase vulkan-headers in 8.6 BZ2016392 Rebase spirv-headers in 8.6 BZ201639...

Virtuozzo Hybrid Infrastructure 4.7 Update 1.3

This update synchronizes the MDS state, which can be unsynchronized due to previous issues, and provides important fixes for the FUSE, object storage, and compute services. Vulnerability id: VSTOR-49963 Synchronize the MDS state during an upgrade. Vulnerability id: VSTOR-50181 Fix the upgrade err...

DEBIAN-CVE-2021-40570

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avccomputepoc function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...

UBUNTU-CVE-2021-40570

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avccomputepoc function in avparsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges...