CVE-2021-30265

CVE-2021-30265 involves memory corruption from improper validation of a memory address during user-space IOCTL handling to clear Filter and Route statistics on Qualcomm/Snapdragon platforms (Auto/Compute/Connectivity/Consumer IoT/Industrial IoT/Mobile/Voice & Music/Wearables). The issue affects S...

CVE-2021-30263

CVE-2021-30263 is a Qualcomm/ Snapdragon-focused race-condition vulnerability caused by a lack of synchronization when the On-Device Logging node is opened twice concurrently. Public details specify affected families and devices, including Snapdragon Compute/Industrial IOT/Mobile/Voice & Music li...

CVE-2021-30263

Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-30259

CVE-2021-30259 affects Qualcomm Snapdragon platforms (Auto/Compute/Connectivity, Consumer IoT, Industrial IoT, Mobile, Wearables, etc.) with a likely closed-source component vulnerability caused by improper validation of function table entries, leading to possible out-of-bounds access. The issue ...

CVE-2021-30259

Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure...

CVE-2021-30254

Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2021-1982

Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-1982

CVE-2021-1982 concerns Qualcomm Snapdragon family devices (Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile) where improper input validation of NAS OTA messages can cause a denial of service. The NVD entry shows CVSS v3.1 base score 7.5 (NETWORK, LOW attack complexity,...

CVE-2021-1981

Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-1981

CVE-2021-1981 involves a buffer over-read caused by an improper Bearer capability IE size check in MT setup requests from the network. It affects Qualcomm/Qualcomm closed‑source components used in Snapdragon platforms, including Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT...

CVE-2021-1979

CVE-2021-1979 describes a buffer overflow in Qualcomm Snapdragon components caused by improper validation of FTM command payloads. The affected products span Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, and Mobile lines, with exploitation potentially leading to memory cor...

CVE-2021-1975

CVE-2021-1975 affects Qualcomm closed‑source components (e.g., data-modem) in Snapdragon family. Root cause: improper length check of the domain while parsing DNS responses, leading to a heap overflow. Documents indicate high/critical impact and potential remote implications in Qualcomm’s Stack; ...

CVE-2021-1973

CVE-2021-1973 concerns a vulnerability in Qualcomm Snapdragon modem software where a FTM Diag command could write arbitrarily to modem OS space. Connected sources indicate impact across multiple Snapdragon lines (Auto, Compute, Connectivity, Consumer/Industrial IoT, IoT, Mobile, Wearables, Voice ...

CVE-2021-1921

CVE-2021-1921 describes memory corruption due to improper handling of hypervisor unmap operations for concurrent memory operations in Qualcomm Snapdragon families (Auto/Compute/Connectivity/Consumer IOT/Industrial IOT/Mobile). Connected sources confirm this vulnerability across Qualcomm closed‑so...

CVE-2021-1912

The CVE-2021-1912 issue concerns Qualcomm Snapdragon firmware across Snapdragon Auto, Compute, Connectivity, Industrial IOT and Mobile families. A root cause is an integer overflow caused by an improper length check when computing count and grace period. Affected components are within the Snapdra...

CVE-2021-30321: Buffer Copy without Checking Size of Input

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...

CVE-2021-1912: Integer Overflow or Wraparound

Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

GHSA-GPFH-JVF9-7WG5 Use after free / memory leak in `CollectiveReduceV2`

Impact The async implementation of CollectiveReduceV2 suffers from a memory leak and a use after free: python import tensorflow as tf tf.rawops.CollectiveReduceV2 input=, groupsize=-10, -10, -10, groupkey=-10, -10, instancekey=-10, orderingtoken=, mergeop='Mul', finalop='Div' This occurs due to t...

CVE-2021-3062

An improper access control vulnerability in PAN-OS software enables an attacker with authenticated access to GlobalProtect portals and gateways to connect to the EC2 instance metadata endpoint for VM-Series firewalls hosted on Amazon AWS. Exploitation of this vulnerability enables an attacker to...

PT-2021-6922

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile affected versions not specified Description The issue is related to improper input validation of...