Buffer overflow

Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobile...

Input validation

Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Authentication flaw

Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking...

Out-of-bounds

Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-35117

CVE-2021-35117 is associated with Qualcomm Snapdragon WLAN components. Description indicates an out-of-bounds read may occur while processing an IBSS beacon across multiple Snapdragon lines (Auto, Compute, Connectivity, C.I.O.T., Industrial IOT, Mobile, Voice & Music). The CVE is listed in Qualco...

CVE-2021-35117

An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-35110

Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobile...

CVE-2021-35110

CVE-2021-35110 affects Qualcomm Snapdragon components (Snapdragon Connectivity and Snapdragon Mobile). Reported issue is a buffer overflow caused by improper validation of a file’s hash segment during memory allocation, enabling potential local impact if exploited. The vulnerability is classified...

CVE-2021-35106

CVE-2021-35106 describes a Qualcomm Snapdragon vulnerability caused by an improper length calculation of a WMI message, leading to a possible out-of-bounds read. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables. The ...

CVE-2021-35105

CVE-2021-35105 is a graphics profiling input-validation issue leading to possible out-of-bounds access in Qualcomm Snapdragon components (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Vision/Music, Wearables). Connected sources attribute the flaw to improper input handling in...

CVE-2021-35088

CVE-2021-35088 : An out-of-bounds read due to improper validation of the SSID IE length during SSID IE parsing when the channel is DFS, reported for Qualcomm Snapdragon families (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wearables, Wired Infrastructure and Networking). Th...

CVE-2021-35088

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure...

CVE-2021-30333

CVE-2021-30333 describes an improper validation of buffer size input to the EFS file causing memory corruption in Qualcomm Snapdragon products (e.g., Snapdragon Auto/Compute/Connectivity, Snapdragon mobile and IoT lines). Root cause: inadequate validation of the EFS file buffer size. Impact per t...

CVE-2021-30333

Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-30332

Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30331

CVE-2021-30331 concerns a buffer overflow in Qualcomm Snapdragon devices caused by improper data validation of external commands sent via the DIAG interface. Affected products include Snapdragon Auto/Compute/Connectivity/Consumer IOT/Industrial IOT/Mobile/Wearables. Root cause: DIAG external comm...

CVE-2021-30329

Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30329

CVE-2021-30329 describes a vulnerability in Qualcomm Snapdragon firmware where an assertion can occur due to improper validation of TCI configuration across Snapdragon Auto, Compute, Connectivity, Industrial IOT, and Mobile platforms. The root cause is explicitly stated as improper validation of ...

CVE-2021-30328

Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30328

CVE-2021-30328 describes a possible assertion caused by improper validation of an invalid NR CSI-IM resource configuration in Qualcomm Snapdragon Auto, Compute, Connectivity, Industrial IOT, and Mobile products. Root cause: incorrect validation of NR CSI-IM resource configuration. Impact: network...