Race condition

A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables...

Null pointer dereference

Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Design/Logic Flaw

Possible heap overflow due to improper validation of local variable while storing current task information locally in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-30294

CVE-2021-30294 concerns a potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Qualcomm Snapdragon GPUs (Auto, Connectivity, Industrial IOT, Mobile). The issue affects KGSL GPU commands and can impact availability locally; CVSS indicates Loc...

CVE-2021-30290

Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30290

CVE-2021-30290 describes a race condition in Qualcomm/Snapdragon components that could lead to a null pointer dereference when a timeline fence signal and its destroy occur concurrently. Affected are Snapdragon Auto, Connectivity, Industrial IOT, and Mobile platforms. The CVE has high/very high p...

CVE-2021-1974

Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure an...

CVE-2021-1974

CVE-2021-1974 is described in connected sources as a buffer issue (buffer over-read) due to misalignment between IPA SMMU and WLAN SMMU mapping lengths in Snapdragon platforms (Auto/Compute/Connectivity/IoT/Wearables/Networking). Qualcomm/Red Hat/NVD entries label it as high severity with network...

CVE-2021-1971

CVE-2021-1971 affects Qualcomm closed-source components in Snapdragon SoCs, arising from a lack of physical layer state validation leading to possible assertion. The exposure spans Snapdragon Auto/Compute/Connectivity/Consumer Electronics Connectivity/Industrial IOT/ Mobile/Wired Infrastructure, ...

CVE-2021-1963

CVE-2021-1963 describes a use-after-free in the IPA driver of Qualcomm Snapdragon SoCs (across Snapdragon Auto/Compute/Connectivity/IoT/Wearables families) caused by insufficient validation of the rule count in the filter table. The issue affects kernel components and is documented with a CVSS v3...

CVE-2021-1961

CVE-2021-1961 describes a possible buffer overflow due to lack of offset length check when updating a buffer value in Qualcomm Snapdragon family components (Auto, Compute, Connectivity, Consumer / Industrial IoT, Mobile, Voice & Music, Wearables). The CVE is referenced across multiple feeds (NVD,...

CVE-2021-1958

CVE-2021-1958 describes a race condition in the Qualcomm fastrpc kernel driver used for dynamic process creation, leading to a possible use-after-free in Snapdragon Auto, Connectivity, Mobile, and Wearables. The underlying issue is a race in the kernel driver that can compromise memory safety. Do...

CVE-2021-1958

A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-1957

Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-1957

CVE-2021-1957 is a Qualcomm Bluetooth vulnerability affecting Snapdragon devices (Auto, Compute, Connectivity, Industrial IOT, Mobile, Voice & Music). The root cause is improper access control when ACL link encryption fails and the ACL link is not disconnected during reconnection with a paired de...

CVE-2021-1956

The CVE-2021-1956 entry describes an improper handling of ASB-U packets with an L2CAP channel ID by the slave host in Qualcomm Snapdragon family devices, potentially causing interference with piconet operation. The affected scope is broad across Qualcomm/Snapdragon platforms (e.g., Snapdragon Aut...

CVE-2021-1956

Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-1952

CVE-2021-1952 describes a buffer over-read in Qualcomm Snapdragon components due to lack of length checking in the request buffer. Affected products listed in the CVE description include Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, and Voice & Music. The issue is characte...

CVE-2021-1948

Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrago...

CVE-2021-1948

CVE-2021-1948 describes a possible out-of-bounds read due to a missing length check while parsing beacon or probe responses in Qualcomm Snapdragon families (Snapdragon Auto, Compute, Connectivity, and related lines). The published entry lists an impact of high severity (availability impact) and s...