CVE-2022-22064

Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2021-35098

CVE-2021-35098 describes memory corruption due to improper validation of the session id in the PCM routing process across Qualcomm Snapdragon components (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables). The issue, as documented by NVD and Red Hat, has ...

CVE-2021-35094

Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35094

CVE-2021-35094 involves Qualcomm components (e.g., QCA family, AQT1000) with an improper validation of timeout-based authentication in identity credentials, which can lead to invalid authorization in HLOS. The issue affects multiple Qualcomm/Qualcomm-supplied platforms including Snapdragon Auto, ...

CVE-2021-35090

CVE-2021-35090 describes a TOC TOU race condition that could cause hypervisor memory corruption when updating address mappings on Qualcomm Snapdragon platforms (Auto/Compute/Connectivity/Industrial IOT/ Mobile). Root cause: TOC-Timing-Of-Check/Time-Of-Use race in kernel memory mappings. Impact st...

CVE-2021-35087

Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35087

CVE-2021-35087 affects Qualcomm Snapdragon components (Industrial IoT and Snapdragon Mobile). Affected behavior: possible null pointer access caused by improper validation of the system information message processed by these devices. Root cause as stated across sources is null pointer dereference...

CVE-2021-35086

CVE-2021-35086 affects Qualcomm Snapdragon components (Auto, Compute, Connectivity, Industrial IOT, Mobile). The root cause is improper validation of the SIB type while processing an NR System Information message, leading to a potential buffer over-read. Public sources consistently describe the v...

CVE-2021-35086

Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35080

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35080

CVE-2021-35080 is an information-disclosure vulnerability in Qualcomm components caused by disabling the SMMU from the secure side while an RPM is assigned a secure stream. The issue affects Qualcomm/Qualcomm-derived platforms (examples include QCM2290, QCM4290, QCS2290, QCS4290, SD460, SD480, SD...

CVE-2021-35078

CVE-2021-35078 describes a potential memory leak caused by improper validation of the certificate chain length while parsing the server certificate chain in Qualcomm Snapdragon families (Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wearables). Connected sources (P...

CVE-2021-35078

Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35076

Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35076

CVE-2021-35076 corresponds to Qualcomm Snapdragon platform issues where a null pointer dereference can occur due to improper validation of the RRC connection reconfiguration message. Affected product families include Snapdragon Auto, Compute, Connectivity, Industrial IOT, and Mobile. The root cau...

CVE-2021-35073

CVE-2021-35073 describes an assertion caused by improper validation of the rank restriction field in Qualcomm Snapdragon components across Snapdragon Auto, Compute, Connectivity, Industrial IOT, and Mobile. The root cause is an input validation issue in the rank restriction, with a high impact (a...

CVE-2021-35072

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-35072

CVE-2021-35072 is a Qualcomm/Snapdragon DIAG command handling vulnerability where an input validation error on array indexes in the Modem/DIAG path can cause a buffer overflow. The issue affects Snapdragon line components (Auto, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) with...

CVE-2022-25651

Memory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-25651

CVE-2022-25651 describes a memory corruption in the Bluetooth host due to an integer overflow when processing the BT HFP-UNIT profile on Qualcomm Snapdragon platforms (Auto, Consumer IoT, Industrial IoT, Mobile, and Voice & Music). The description identifies the root cause as an integer overflow ...