Qualcomm
Page 12 of 26 — Qualcomm CVEs from a corpus of 2538, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-22082 | High | 8.4 | 2022-06-14 | Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel count in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2022-22072 | High | 7.8 | 2022-06-14 | Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electron… |
CVE-2022-22071 | High | 8.4 | 2022-06-14 | Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Com… |
CVE-2022-22068 | High | 8.4 | 2022-06-14 | kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2022-22065 | High | 7.5 | 2022-06-14 | Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume… |
CVE-2022-22064 | High | 7.5 | 2022-06-14 | Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons… |
CVE-2022-22057 | High | 8.4 | 2022-06-14 | Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, S… |
CVE-2021-35130 | High | 8.4 | 2022-06-14 | Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CVE-2021-35129 | High | 7.8 | 2022-06-14 | Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapd… |
CVE-2021-35126 | High | 8.4 | 2022-06-14 | Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Ind… |
CVE-2021-35123 | High | 8.8 | 2022-06-14 | Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT |
CVE-2021-35121 | Medium | 6.7 | 2022-06-14 | An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon… |
CVE-2021-35120 | Medium | 6.7 | 2022-06-14 | Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-35119 | Medium | 5.5 | 2022-06-14 | Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2021-35118 | Medium | 6.7 | 2022-06-14 | An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag… |
CVE-2021-35116 | High | 7.7 | 2022-06-14 | APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute… |
CVE-2021-35114 | High | 8.4 | 2022-06-14 | Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto |
CVE-2021-35112 | High | 8.4 | 2022-06-14 | A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdragon Auto, Snapdragon… |
CVE-2021-35111 | High | 7.5 | 2022-06-14 | Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile |
CVE-2021-35104 | Critical | 9.8 | 2022-06-14 | Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-35102 | High | 7.8 | 2022-06-14 | Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-35101 | High | 7.1 | 2022-06-14 | Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile |
CVE-2021-35100 | High | 7.5 | 2022-06-14 | Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… |
CVE-2021-35098 | Medium | 6.7 | 2022-06-14 | Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2021-35096 | High | 7.5 | 2022-06-14 | Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna… |
CVE-2021-35095 | High | 8.4 | 2022-06-14 | Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in… |
CVE-2021-35094 | High | 7.8 | 2022-06-14 | Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute… |
CVE-2021-35092 | Medium | 6.7 | 2022-06-14 | Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute… |
CVE-2021-35091 | High | 8.4 | 2022-06-14 | Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connectivity, Snapdragon Mobile |
CVE-2021-35090 | Critical | 9.3 | 2022-06-14 | Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CVE-2021-35087 | High | 7.5 | 2022-06-14 | Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile |
CVE-2021-35086 | High | 7.5 | 2022-06-14 | Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2021-35085 | Medium | 5.5 | 2022-06-14 | Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-35084 | Medium | 5.5 | 2022-06-14 | Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2021-35083 | High | 8.2 | 2022-06-14 | Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon C… |
CVE-2021-35082 | Critical | 9.1 | 2022-06-14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has been received in Snapd… |
CVE-2021-35081 | Critical | 9.8 | 2022-06-14 | Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon… |
CVE-2021-35080 | Medium | 6.5 | 2022-06-14 | Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdr… |
CVE-2021-35079 | Medium | 6.2 | 2022-06-14 | Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdr… |
CVE-2021-35078 | High | 7.5 | 2022-06-14 | Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snap… |
CVE-2021-35076 | High | 7.5 | 2022-06-14 | Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne… |
CVE-2021-35073 | High | 7.5 | 2022-06-14 | Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial… |
CVE-2021-35072 | High | 7.8 | 2022-06-14 | Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag… |
CVE-2021-35071 | Medium | 5.5 | 2022-06-14 | Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto… |
CVE-2021-35070 | Medium | 6.5 | 2022-06-14 | RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdr… |
CVE-2021-30350 | High | 8.4 | 2022-06-14 | Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr… |
CVE-2021-30349 | High | 8.2 | 2022-06-14 | Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2021-30347 | Critical | 9.1 | 2022-06-14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Sn… |
CVE-2021-30346 | Medium | 6.5 | 2022-06-14 | RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snap… |
CVE-2021-30345 | Medium | 6.5 | 2022-06-14 | RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snap… |
CVE-2021-30344 | High | 7.5 | 2022-06-14 | Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-30343 | Critical | 9.1 | 2022-06-14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdrag… |
CVE-2021-30342 | Critical | 9.1 | 2022-06-14 | Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdrag… |
CVE-2021-30341 | Critical | 9.8 | 2022-06-14 | Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2021-30340 | High | 7.5 | 2022-06-14 | Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
CVE-2021-30339 | Critical | 9.0 | 2022-06-14 | Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobi… |
CVE-2021-30338 | High | 7.1 | 2022-06-14 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Compute |
CVE-2021-30334 | High | 8.4 | 2022-06-14 | Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CVE-2021-30327 | High | 7.5 | 2022-06-14 | Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdrag… |
CVE-2021-30281 | High | 8.4 | 2022-06-14 | Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto… |
CVE-2021-35117 | High | 8.2 | 2022-04-01 | An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum… |
CVE-2021-35115 | High | 8.4 | 2022-04-01 | Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile |
CVE-2021-35110 | High | 8.1 | 2022-04-01 | Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobile |
CVE-2021-35106 | High | 7.8 | 2022-04-01 | Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CVE-2021-35105 | High | 8.4 | 2022-04-01 | Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd… |
CVE-2021-35103 | High | 7.8 | 2022-04-01 | Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Com… |
CVE-2021-35089 | High | 8.4 | 2022-04-01 | Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto |
CVE-2021-35088 | High | 8.2 | 2022-04-01 | Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-30333 | High | 7.8 | 2022-04-01 | Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2021-30332 | High | 7.5 | 2022-04-01 | Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT… |
CVE-2021-30331 | Medium | 5.5 | 2022-04-01 | Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec… |
CVE-2021-30329 | High | 7.5 | 2022-04-01 | Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT… |
CVE-2021-30328 | High | 7.5 | 2022-04-01 | Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… |
CVE-2021-1950 | High | 7.8 | 2022-04-01 | Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec… |
CVE-2021-1942 | Critical | 9.3 | 2022-04-01 | Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd… |
CVE-2021-35077 | High | 8.4 | 2022-02-11 | Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… |
CVE-2021-35075 | High | 8.4 | 2022-02-11 | Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industri… |
CVE-2021-35074 | High | 8.4 | 2022-02-11 | Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, Snapdragon Connectiv… |
CVE-2021-35069 | High | 7.8 | 2022-02-11 | Improper validation of data length received from DMA buffer can lead to memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna… |
CVE-2021-35068 | High | 8.4 | 2022-02-11 | Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdra… |
CVE-2021-30326 | High | 7.5 | 2022-02-11 | Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdragon Auto, S… |
CVE-2021-30325 | Medium | 6.7 | 2022-02-11 | Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2021-30324 | Medium | 6.7 | 2022-02-11 | Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in Snapdragon Auto, Snapdr… |
CVE-2021-30323 | High | 7.8 | 2022-02-11 | Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn… |
CVE-2021-30322 | High | 7.8 | 2022-02-11 | Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2021-30318 | High | 8.4 | 2022-02-11 | Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… |
CVE-2021-30317 | Critical | 9.3 | 2022-02-11 | Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… |
CVE-2021-30309 | High | 7.8 | 2022-02-11 | Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon M… |
CVE-2021-30353 | High | 7.5 | 2022-01-13 | Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2021-30330 | High | 7.5 | 2022-01-13 | Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer I… |
CVE-2021-30319 | High | 7.8 | 2022-01-13 | Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2021-30314 | Medium | 6.2 | 2022-01-13 | Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2021-30313 | Medium | 6.7 | 2022-01-13 | Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute, Sn… |
CVE-2021-30311 | High | 7.8 | 2022-01-13 | Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2021-30308 | High | 7.8 | 2022-01-13 | Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snap… |
CVE-2021-30307 | High | 7.5 | 2022-01-13 | Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in Snapdragon Auto, Snapdragon… |
CVE-2021-30301 | High | 7.5 | 2022-01-13 | Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile |
CVE-2021-30300 | High | 7.5 | 2022-01-13 | Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS config… |
CVE-2021-30287 | High | 7.5 | 2022-01-13 | Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd… |
CVE-2021-30285 | Critical | 9.3 | 2022-01-13 | Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr… |