CVE-2021-35088

CVE-2021-35088 : An out-of-bounds read due to improper validation of the SSID IE length during SSID IE parsing when the channel is DFS, reported for Qualcomm Snapdragon families (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wearables, Wired Infrastructure and Networking). Th...

CVE-2021-30351

CVE-2021-30351 is an out-of-bounds memory access in Qualcomm/Snapdragon audio decoders triggered by improper validation of the number of frames during music playback. The NVD entry and Red Hat bulletin describe a critical issue with CVSS 3.1 score of 9.8 (NETWORK, LOW attack complexity, NONE priv...

CVE-2021-1954

The CVE-2021-1954 issue is a buffer over-read in Qualcomm’s Snapdragon family (parsing FILS indication IE) caused by improper validation of the data pointer. Affects Qualcomm/ Snapdragon components; CVSS v3.1 indicates high severity (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) with network lead and high...

CVE-2021-35069

CVE-2021-35069 describes an improper validation of data length received from a DMA buffer that can cause memory corruption in Qualcomm Snapdragon products. Affected families include Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and WIN (Snapdragon ha...

CVE-2021-1945

CVE-2021-1945 describes a possible out-of-bounds read in Qualcomm Snapdragon firmware, caused by a missing length check for the Bandwidth-NSS IE across multiple Snapdragon lines (Auto/Compute/Connectivity/IoT/Industrial IoT/Mobile/Voice & Music/ Wired Infrastructure). The vulnerability affects Qu...

CVE-2021-1943

CVE-2021-1943 describes a buffer out-of-bounds read due to improper TBTT count/length validation when parsing beacon responses in Qualcomm Snapdragon WLAN components across Snapdragon Auto, Compute, Connectivity, Industrial IOT, Mobile, and Wired Infrastructure and Networking. The vulnerability d...

CVE-2020-11271

CVE-2020-11271 describes a race-condition vulnerability causing possible out-of-bounds access when handling global control elements in Qualcomm Snapdragon firmware across multiple platforms (Snapdragon Auto/Compute/Connectivity, IoT, Mobile, Wearables, etc.). The issue is characterized by local a...

CVE-2021-30324

CVE-2021-30324 describes an out-of-bounds write caused by missing boundary checks for the maximum buffer size when sending a DCI packet to a remote process in Qualcomm Snapdragon family components (e.g., APQ8096AU, IPQ4… and many QCA/IQ/QCS/SD devices). Root cause: lack of boundary checking leads...

CVE-2021-1964

CVE-2021-1964 corresponds to a buffer over-read in Qualcomm WLAN/IEEE 802.11 beacon parsing due to improper validation of IE size in the WLAN host subsystem. Affected are Qualcomm Snapdragon/WLAN components (e.g., QCA6574AU and related chips) across multiple Snapdragon device families. Root cause...

CVE-2021-1972

CVE-2021-1972 is a Qualcomm WLAN host vulnerability described as a buffer overflow caused by improper validation of device types during P2P search in Snapdragon platforms (Auto/Compute/Connectivity/…/Wired Networking). Affected products are Qualcomm/Snapdragon WLAN components; CVSS v3.1 base scor...

CVE-2021-1976

CVE-2021-1976 is a Qualcomm WLAN use-after-free vulnerability caused by improper validation of a P2P device address in PD Request frames. It affects Qualcomm/ Snapdragon WLAN components; exploited via network, with a CVSS v3.1 base score of 9.8 (CRITICAL). Public details reference Qualcomm’s Augu...

CVE-2021-1941

CVE-2021-1941 corresponds to a Qualcomm WLAN issue: a possible buffer over-read caused by an improper length check on the WPA IE string, affecting multiple Snapdragon platforms (Auto/Compute/Connectivity/Consumer Electronics Connectivity/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wired Infr...

CVE-2021-30325

CVE-2021-30325 is a Qualcomm/Qualcomm-derived vulnerability affecting Snapdragon family components (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables, Wired Infrastructure and Networking). The root cause is an input validation/resource allocation flaw leading to out-of...

CVE-2020-11301

CVE-2020-11301 describes improper authentication of unencrypted plaintext Wi‑Fi frames within encrypted networks, enabling information disclosure in Snapdragon platforms (Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, IoT, Mobile, Voice & ...

CVE-2021-1974

CVE-2021-1974 is described in connected sources as a buffer issue (buffer over-read) due to misalignment between IPA SMMU and WLAN SMMU mapping lengths in Snapdragon platforms (Auto/Compute/Connectivity/IoT/Wearables/Networking). Qualcomm/Red Hat/NVD entries label it as high severity with network...

CVE-2021-1891

CVE-2021-1891 is a Qualcomm audio-driver use-after-free vulnerability (pointer mismanagement) impacting Snapdragon platforms (Auto/Compute/Connectivity/IoT variants). It affects the Audio component; root cause is use-after-free in the audio driver, with impact on confidentiality, integrity, and a...

CVE-2021-1927

CVE-2021-1927 describes a use-after-free in the Qualcomm FastRPC driver affecting Snapdragon devices (Auto, Compute, Connectivity, IoT, Mobile, Wearables, etc.). The root cause is a missing null check while memory is being freed, enabling a local attacker to trigger memory corruption with effects...

CVE-2021-30335

CVE-2021-30335 describes a logic issue in Qualcomm’s Snapdragon family where an assertion may occur in QOS handling due to improper validation when multiple add/update requests arrive concurrently. The vulnerability is reported against Qualcomm Snapdragon Auto/Compute/Connectivity/IoT/Industrial ...

CVE-2021-30337

CVE-2021-30337 describes a local-use-after-free/double-free vulnerability in Qualcomm/Snapdragon kernel components where process shell memory is freed via an IOCTL during initialization. This can lead to memory corruption with potential impact to confidentiality, integrity, and availability as in...

CVE-2020-11267

CVE-2020-11267 involves a stack out-of-bounds write during the setup of a cipher device when the IV length exceeds the maximum limit on Qualcomm/Snapdragon devices (Auto/Compute/Connectivity/Consumer IoT/Industrial IOT/Mobile/Voice & Music/Wearables/Wired Infrastructure). The vulnerability affect...

CVE-2021-35071

CVE-2021-35071 is a buffer over-read in Qualcomm Snapdragon components caused by lack of size validation when copying data from the DBR buffer to the RX buffer, leading to Denial of Service. Affected products span Snapdragon Auto, Compute, Connectivity, Industrial IoT, Mobile, Wearables, and Wire...

CVE-2021-30312

CVE-2021-30312 concerns an improper authentication of sub-frames of a multicast AMSDU frame that can cause information disclosure in Qualcomm Snapdragon-based devices (e.g., Snapdragon Auto/Compute/Connectivity, IoT variants, and related Qualcomm WLAN components). The issue is triggered via malfo...

CVE-2023-21628

CVE-2023-21628 describes a memory corruption (classic buffer overflow) in the WLAN HAL of Qualcomm chipsets when processing WMI-UTF or FTM TLV1 commands. The CVE is listed as a buffer copy without checking input size, leading to potential data corruption and high impact. Connected sources identif...

CVE-2021-1980

CVE-2021-1980 corresponds to a Qualcomm vulnerability: a possible buffer over-read due to a missing length check when parsing beacon IE responses in Snapdragon-related platforms (Auto, Compute, Connectivity, and other Snapdragon SKUs). The issue is triggered via network access and has high to cri...

CVE-2020-11134

CVE-2020-11134 affects Qualcomm Snapdragon family (Snapdragon Auto/Compute/Connectivity, etc.). The root cause is insufficient validation of time bitmap length and bit duration fields in NAN management frame attributes, leading to a possible stack out-of-bounds write within NAN ranging setup. The...

CVE-2021-1948

CVE-2021-1948 describes a possible out-of-bounds read due to a missing length check while parsing beacon or probe responses in Qualcomm Snapdragon families (Snapdragon Auto, Compute, Connectivity, and related lines). The published entry lists an impact of high severity (availability impact) and s...

CVE-2020-11296

CVE-2020-11296 concerns an arithmetic overflow in processing NOA IE across multiple Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, etc.). Root cause is improper error handling, leading to an overflow that can impact Snapdragon families including Mobile, IoT, Automotive lines and rela...

CVE-2023-28563

CVE-2023-28563 affects IOE Firmware in Qualcomm chipsets. The root cause is information disclosure when processing WMI commands in the firmware, leading to potentially exposed data (confidentiality impact high). The issue is listed in Android Pixel bulletin as a closed‑source component vulnerabil...

CVE-2020-11159

CVE-2020-11159 is a buffer over-read in Snapdragon/Qualcomm code while processing WPA/RSN IE in beacon and response frames. The flaw occurs when the IE length is shorter than the frame pointer being accessed, potentially affecting multiple Snapdragon product families (Auto, Compute, Connectivity,...

CVE-2020-11275

CVE-2020-11275 involves a possible buffer over-read when parsing a quiet Information Element in an Rx beacon frame on Qualcomm Snapdragon platforms (Auto/Compute/Connectivity, Consumer Electronics Connectivity, IoT, Industrial IoT, Mobile, etc.). The root cause is an improper check of the IE leng...

CVE-2020-11126

CVE-2020-11126 affects Qualcomm closed‑source components in Snapdragon lineups, tied to WLAN frame parsing. The root cause is an out-of-bounds read caused by missing checks for body and header lengths in parsing WLAN frames across multiple Snapdragon families (Auto, Compute, Connectivity, Consume...

CVE-2020-11270

CVE-2020-11270 : A DoS condition in Qualcomm Snapdragon firmware (across Snapdragon Auto, Compute, Connectivity, and related Snapdragon platforms) arises when an RTT responder consistently rejects all FTMR by sending FTM1 with a failure status in the FTM parameter IE. This vulnerability is descri...

CVE-2020-11280

Summary : CVE-2020-11280 describes a DoS vulnerability in Qualcomm/ Snapdragon components due to improper error handling when processing a Fine Timing Measurement (FTMR) frame with reserved bits in the FTM parameter IE. Affected products/areas : Snapdragon Auto, Snapdragon Compute, Snapdragon Con...

CVE-2021-1953

CVE-2021-1953 is a Qualcomm/Snapdragon chipset vulnerability: improper handling of malformed FTMR request frames can cause a reachable assertion when replying with FTM1 frames, enabling a network‑based DoS against multiple Snapdragon Product families (Auto, Compute, Connectivity, etc.). The CVSS3...

CVE-2022-40512

CVE-2022-40512 describes a transient DoS in WLAN firmware caused by a buffer over-read while processing probe responses or beacons. The vulnerability affects Qualcomm WLAN firmware/module (closed-source components) and is characterized by network-based exposure with no user interaction. The CVSS ...

CVE-2022-40530

CVE-2022-40530 describes memory corruption in WLAN caused by an integer overflow that progresses to a buffer overflow during WLAN initialization. The issue is documented in Qualcomm closed-source WLAN components and is reflected in multiple sources (NVD/Red Hat/CVE lists); exploitation status and...

CVE-2022-40531

CVE-2022-40531: Memory corruption in WLAN due to an incorrect type cast when sending WMI_SCAN_SCH_PRIO_TBL_CMDID. Documented CVSSv3.1 base score 7.8 (NVD) / 8.4 (Qualcomm bulletin) with Local, Low-Privilege, No-User-Interaction access and High impact to confidentiality, integrity, and availabilit...

CVE-2020-11238

CVE-2020-11238 is a buffer over-read in ARP/NS parsing caused by a missing length check on received packets, affecting Qualcomm Snapdragon-based platforms across multiple product families (Auto, Compute, Connectivity, CES, IoT, Industrial IoT, Mobile, V&M, and Wired Networking). The impact is a p...

CVE-2020-11241

CVE-2020-11241 affects Qualcomm Snapdragon family components (e.g., Snapdragon Auto, Compute, Connectivity, and related Snapdragon lines) and is rooted in the NAN shared key descriptor processing when EAPOL Key length is shorter than expected. The vulnerability exposes an out-of-bounds read in th...

CVE-2020-11269

CVE-2020-11269 is a memory corruption issue described as occurring while processing EAPOL frames due to insufficient validation of key length in Qualcomm Snapdragon families (Auto, Compute, Connectivity, and related Snapdragon components). The initial entry lists a high severity (CVSS v3.1 base 8...

CVE-2020-11278

CVE-2020-11278 affects Qualcomm Snapdragon platforms (Snapdragon Auto, Compute, Connectivity, CE Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wired Infrastructure & Networking). The root cause is improper validation when handling host WMI commands, leading to possible Denial...

CVE-2023-28569

CVE-2023-28569 is described across multiple sources as an information disclosure in the WLAN HAL when commands are processed via WMI interfaces. The vulnerability is associated with Qualcomm WLAN HAL components and affects Qualcomm chipsets; the confidentiality impact is High, with an attacker re...

CVE-2020-11276

CVE-2020-11276 is a buffer over-read in processing P2P IE and NOA attributes in beacon/probe frames due to improper validation of P2P IE/NOA lengths in Qualcomm Snapdragon firmware (across Snapdragon Auto, Compute, Connectivity, and related Snapdragon lines). Root cause is incorrect length valida...

CVE-2021-1938

CVE-2021-1938 concerns a Qualcomm/Snapdragon issue involving an assertion caused by improper verification when creating and deleting a peer across multiple Snapdragon subsystems (Auto, Compute, Connectivity, etc.). The root cause is described as improper verification during peer creation/deletion...

CVE-2021-30313

CVE-2021-30313 describes a use-after-free condition in Qualcomm Snapdragon firmware related to a race condition when creating and deleting folders, affecting multiple Snapdragon lines (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables, and related Wired I...

CVE-2023-43536

Technical details for CVE-2023-43536 are not publicly provided in the supplied documents. No confirmed affected products, versions, or fixes are disclosed here; monitor official advisories for updates.

CVE-2020-11235

CVE-2020-11235 describes a buffer overflow that can occur while parsing a unified command due to insufficient input validation in Qualcomm Snapdragon components (Auto, Compute, Connectivity, etc.). The issue is triggered locally and can impact confidentiality, integrity, and availability, as indi...

CVE-2020-11281

CVE-2020-11281 affects Qualcomm Snapdragon platforms (Auto/Compute/Connectivity/Consumer Electronics Connectivity/Consumer IOT/Industrial IOT/Mobile/V&M/Wired Infrastructure and Networking). The issue arises from a logic that links RTT frames with non-randomized MAC addresses by comparing sequenc...

CVE-2022-33275

CVE-2022-33275 describes memory corruption due to improper validation of an array index in the WLAN HAL when lm_itemNum is out of range. The issue affects Qualcomm chipsets’ WLAN HAL and is caused by out-of-bounds handling of item indices, leading to potential memory corruption. Public details in...

CVE-2021-35104

CVE-2021-35104 concerns Qualcomm closed‑source components with a buffer overflow caused by improper header parsing when playing FLAC audio clips in Snapdragon driver/software stacks. The vulnerability is described as a critical issue (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base score 9.8...