CVE-2021-30270

Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables,...

CVE-2021-30270

CVE-2021-30270 is a Qualcomm/ Snapdragon local vulnerability described as a null pointer dereference in the thread profile/trap handler caused by missing thread ID validation. Affected products include Snapdragon Auto, Compute, Connectivity, and other Snapdragon family components. CVSS metrics in...

CVE-2021-30269

Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired...

CVE-2021-30269

CVE-2021-30269 describes a potential null pointer dereference caused by insufficient TLB validation for user-provided addresses on Qualcomm Snapdragon platforms (across Snapdragon Auto, Compute, Connectivity, and related Snapdragon variants). Multiple connected sources (Red Hat, PRION, and CNNVD ...

CVE-2021-30268

Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-30268

CVE-2021-30268 describes a heap memory corruption flaw caused by insufficient input validation when issuing the HWTC IQ Capture command in Qualcomm Snapdragon components (Auto, Compute, Connectivity, IoT, Industrial IoT, Mobile, Voice & Music, Wearables). The issue affects a broad range of Snapdr...

CVE-2021-30267

CVE-2021-30267 corresponds to an integer overflow vulnerability caused by improper input validation in Qualcomm FTM ARA commands, leading to a potential buffer overflow. Affected products span Qualcomm/Qualcomm Snapdragon families including Auto, Compute, Connectivity, Consumer IoT, Industrial Io...

CVE-2021-30267

Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30262

CVE-2021-30262 describes improper validation of a socket state when socket events are sent to clients, causing invalid memory access in Qualcomm Snapdragon devices. Affected families include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables...

CVE-2021-1918

Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-1918

CVE-2021-1918 is a vulnerability described as an improper handling of resource allocation in virtual machines that can lead to information exposure on Qualcomm Snapdragon platforms. The primary affected products are Qualcomm closed‑source components (notably in Snapdragon devices) as documented i...

CVE-2020-11263

CVE-2020-11263 describes an integer overflow caused by an improper check after address and size alignment in Qualcomm Snapdragon components (notably Snapdragon Compute/Connectivity/IoT families). The vulnerability arises in the handling of aligned address-size values and is tied to the Snapdragon...

PT-2022-9953

Name of the Vulnerable Software and Affected Versions Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT affect...

CVE-2021-30293: Reachable Assertion

Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

CVE-2021-30283: Improper Handling of Exceptional Conditions

Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-1918: Exposure of Resource to Wrong Sphere

Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

PT-2022-9148

Name of the Vulnerable Software and Affected Versions Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Description The issue is related to improper handling of resource allocation in...

CVE-2021-30273: Reachable Assertion

Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-44023

A link following denial-of-service DoS vulnerability in the Trend Micro Security Consumer 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service...

CVE-2021-44023: Improper Link Resolution Before File Access

A link following denial-of-service DoS vulnerability in the Trend Micro Security Consumer 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service...