Qualcomm
Page 13 of 26 — Qualcomm CVEs from a corpus of 2538, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-35093 | Medium | 6.5 | 2022-01-03 | Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service in BlueCore |
CVE-2021-30351 | Critical | 9.8 | 2022-01-03 | An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Comput… |
CVE-2021-30348 | Medium | 6.5 | 2022-01-03 | Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2021-30337 | High | 8.4 | 2022-01-03 | Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2021-30336 | High | 8.4 | 2022-01-03 | Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-30335 | High | 8.4 | 2022-01-03 | Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon Com… |
CVE-2021-30303 | High | 7.8 | 2022-01-03 | Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CVE-2021-30298 | Medium | 6.7 | 2022-01-03 | Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Au… |
CVE-2021-30293 | High | 7.5 | 2022-01-03 | Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2021-30289 | High | 7.8 | 2022-01-03 | Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapdragon Cons… |
CVE-2021-30283 | High | 7.1 | 2022-01-03 | Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdr… |
CVE-2021-30282 | High | 8.4 | 2022-01-03 | Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
CVE-2021-30279 | High | 7.8 | 2022-01-03 | Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-30278 | High | 7.1 | 2022-01-03 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2021-30276 | Critical | 9.3 | 2022-01-03 | Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon Con… |
CVE-2021-30275 | Critical | 9.3 | 2022-01-03 | Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2021-30274 | High | 8.4 | 2022-01-03 | Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2021-30273 | High | 7.5 | 2022-01-03 | Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-30272 | High | 7.3 | 2022-01-03 | Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute, Sn… |
CVE-2021-30271 | High | 7.3 | 2022-01-03 | Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute, Snapdrago… |
CVE-2021-30270 | High | 7.3 | 2022-01-03 | Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Com… |
CVE-2021-30269 | High | 7.3 | 2022-01-03 | Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap… |
CVE-2021-30268 | High | 7.8 | 2022-01-03 | Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Compute, Snapdragon C… |
CVE-2021-30267 | High | 7.8 | 2022-01-03 | Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… |
CVE-2021-30262 | High | 8.4 | 2022-01-03 | Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, Snapdragon Compute… |
CVE-2021-1918 | Medium | 6.5 | 2022-01-03 | Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CVE-2021-1894 | High | 7.1 | 2022-01-03 | Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CVE-2020-11263 | High | 7.3 | 2022-01-03 | An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co… |
CVE-2021-30321 | Critical | 9.8 | 2021-11-12 | Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2021-30284 | High | 7.5 | 2021-11-12 | Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2021-30266 | Medium | 6.7 | 2021-11-12 | Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2021-30265 | Medium | 6.7 | 2021-11-12 | Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdrago… |
CVE-2021-30264 | Medium | 6.7 | 2021-11-12 | Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Con… |
CVE-2021-30263 | Medium | 6.7 | 2021-11-12 | Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon Compute, Snapdrago… |
CVE-2021-30259 | High | 7.8 | 2021-11-12 | Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C… |
CVE-2021-30255 | High | 7.8 | 2021-11-12 | Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2021-30254 | High | 7.8 | 2021-11-12 | Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne… |
CVE-2021-1982 | High | 7.5 | 2021-11-12 | Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit… |
CVE-2021-1981 | High | 7.5 | 2021-11-12 | Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CVE-2021-1979 | High | 7.8 | 2021-11-12 | Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2021-1975 | Critical | 9.8 | 2021-11-12 | Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… |
CVE-2021-1973 | High | 7.8 | 2021-11-12 | A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S… |
CVE-2021-1924 | Critical | 9.0 | 2021-11-12 | Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2021-1921 | High | 7.8 | 2021-11-12 | Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Sna… |
CVE-2021-1912 | High | 8.4 | 2021-11-12 | Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2021-1903 | Medium | 5.3 | 2021-11-12 | Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response frame in Snapdragon Aut… |
CVE-2021-30316 | High | 8.4 | 2021-10-20 | Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2021-30315 | High | 8.4 | 2021-10-20 | Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto |
CVE-2021-30312 | High | 7.5 | 2021-10-20 | Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2021-30310 | High | 7.5 | 2021-10-20 | Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer… |
CVE-2021-30306 | High | 8.4 | 2021-10-20 | Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Indu… |
CVE-2021-30305 | High | 8.4 | 2021-10-20 | Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industria… |
CVE-2021-30304 | High | 7.5 | 2021-10-20 | Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdr… |
CVE-2021-30302 | High | 7.5 | 2021-10-20 | Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, S… |
CVE-2021-30297 | High | 8.4 | 2021-10-20 | Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdragon Compute, Snapd… |
CVE-2021-30292 | High | 8.4 | 2021-10-20 | Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-30291 | High | 8.4 | 2021-10-20 | Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-30288 | High | 8.4 | 2021-10-20 | Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-30258 | High | 8.4 | 2021-10-20 | Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
CVE-2021-30257 | High | 8.4 | 2021-10-20 | Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon… |
CVE-2021-30256 | High | 8.4 | 2021-10-20 | Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1985 | High | 8.4 | 2021-10-20 | Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr… |
CVE-2021-1984 | High | 8.4 | 2021-10-20 | Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… |
CVE-2021-1983 | High | 8.4 | 2021-10-20 | Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon Compute… |
CVE-2021-1980 | High | 7.5 | 2021-10-20 | Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2021-1977 | High | 7.5 | 2021-10-20 | Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Comp… |
CVE-2021-1969 | Medium | 6.2 | 2021-10-20 | Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snap… |
CVE-2021-1968 | Medium | 6.2 | 2021-10-20 | Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user space in Snap… |
CVE-2021-1967 | Medium | 5.3 | 2021-10-20 | Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snapdragon Aut… |
CVE-2021-1966 | Medium | 6.7 | 2021-10-20 | Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consume… |
CVE-2021-1959 | High | 7.8 | 2021-10-20 | Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT… |
CVE-2021-1949 | High | 8.4 | 2021-10-20 | Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1936 | High | 7.5 | 2021-10-20 | Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CVE-2021-1932 | High | 8.4 | 2021-10-20 | Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Sn… |
CVE-2021-1917 | High | 8.4 | 2021-10-20 | Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industr… |
CVE-2021-1913 | High | 8.4 | 2021-10-20 | Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… |
CVE-2020-11303 | High | 8.6 | 2021-10-20 | Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdrago… |
CVE-2021-25480 | Medium | 4.4 | 2021-10-06 | A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead to remote denial of… |
CVE-2021-30261 | High | 8.4 | 2021-09-17 | Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Sna… |
CVE-2021-30260 | High | 8.4 | 2021-09-17 | Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is rece… |
CVE-2021-1976 | Critical | 9.8 | 2021-09-17 | A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1947 | High | 8.4 | 2021-09-17 | Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industr… |
CVE-2021-1939 | High | 8.4 | 2021-09-17 | Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-30295 | High | 8.4 | 2021-09-09 | Possible heap overflow due to improper validation of local variable while storing current task information locally in Snapdragon Auto, Snapdragon Compute, Snap… |
CVE-2021-30294 | High | 8.4 | 2021-09-09 | Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon Auto, Snapdragon Connectivity, Snapdrag… |
CVE-2021-30290 | High | 8.4 | 2021-09-09 | Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity… |
CVE-2021-1974 | High | 7.5 | 2021-09-09 | Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… |
CVE-2021-1971 | High | 7.5 | 2021-09-09 | Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electron… |
CVE-2021-1963 | Medium | 6.7 | 2021-09-09 | Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CVE-2021-1962 | Medium | 6.7 | 2021-09-09 | Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size i… |
CVE-2021-1961 | Medium | 6.7 | 2021-09-09 | Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
CVE-2021-1960 | Medium | 6.5 | 2021-09-09 | Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, S… |
CVE-2021-1958 | Medium | 6.7 | 2021-09-09 | A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdra… |
CVE-2021-1957 | Medium | 6.5 | 2021-09-09 | Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdrag… |
CVE-2021-1956 | Medium | 6.5 | 2021-09-09 | Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2021-1952 | High | 7.8 | 2021-09-09 | Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons… |
CVE-2021-1948 | High | 7.5 | 2021-09-09 | Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… |
CVE-2021-1946 | Critical | 9.8 | 2021-09-09 | Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity… |
CVE-2021-1941 | High | 7.5 | 2021-09-09 | Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna… |
CVE-2021-1935 | High | 7.1 | 2021-09-09 | Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne… |