PT-2022-10438

Name of the Vulnerable Software and Affected Versions Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile affected versions not specified Description The issue arises from an improper use of an array index to lock and unlock a mutex, leading to...

PT-2022-17436

Name of the Vulnerable Software and Affected Versions Snapdragon Auto affected versions not specified Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Snapdragon Voice & Music affect...

CVE-2021-35094: Improper Authentication

Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30350: Improper Validation of Specified Quantity in Input

Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-35076: NULL Pointer Dereference

Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-22057

CVE-2022-22057 (Qualcomm KGSL) is a use-after-free race condition in the Graphics Fence handling caused by closing the fence file descriptor and destroying the graphics timeline concurrently in Qualcomm’s KGSL driver. Affected products span Snapdragon Auto, Compute, Connectivity, Industrial IoT, ...

PT-2022-10401

Name of the Vulnerable Software and Affected Versions Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables affected versions not specified Description The issue is related to the disabled SMMU from the secure side while RPM is assigned a secure stream, which can lead to information...

PT-2022-10391

Name of the Vulnerable Software and Affected Versions Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected versions not specified Description The issue is related to improper SMMU configuration, allowing RPM secure Stream to access any secure resource. This can lea...

PT-2022-10440 · Qualcomm · Qualcomm Snapdragon Connectivity +1

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Connectivity and Snapdragon Industrial IOT affected versions not specified Description: The issue is related to a buffer copy in GATT multi notification due to an improper length check for the data coming over-the-air...

CVE-2021-35121: Improper Validation of Array Index

An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-22057: Concurrent Execution using Shared Resource with Improper Synchronization

Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35123: Undefined Security Weakness

Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT...

CVE-2021-30345: Undefined Security Weakness

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2021-35070: Exposure of Sensitive Information to an Unauthorized Actor

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-22072: Improper Validation of Specified Quantity in Input

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-35080: Exposure of Sensitive Information to an Unauthorized Actor

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35087: NULL Pointer Dereference

Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35082: Time-of-check Time-of-use (TOCTOU) Race Condition

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has been received in Snapdragon Industrial IOT...

CVE-2022-22057

Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35096: Allocation of Resources Without Limits or Throttling

Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...