Skip to contentQualcomm, Inc. Snapdragon Connectivity, Snapdragon Industrial Iot vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +90 more +92 moreMemory corruption in display due to time-of-check time-of-use race condition during map or unmap...CVE-2022-256968.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +105 more +107 moreMemory corruption in video module due to buffer overflow while processing WAV file in Snapdragon...CVE-2022-256867.3 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 morememory corruption in Kernel due to race condition while getting mapping reference in Snapdragon...CVE-2022-220947.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 moreMemory corruption or temporary denial of service due to improper handling of concurrent...CVE-2022-220937.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 moreMemory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon...CVE-2022-220927.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +105 more +107 moreMemory corruption due to buffer overflow occurs while processing invalid MKV clip which has...CVE-2022-256577.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, qca6390 firmware +85 more +87 moreDevices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in...CVE-2022-220697.7 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +93 more +95 moreMemory corruption due to out of bound read while parsing a video file in Snapdragon Auto,...CVE-2022-220598.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qca6391 firmware, qcm6490 firmware +28 more +30 moreDue to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur...CVE-2021-351348.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qca6174a firmware +63 more +65 morePossible integer overflow and memory corruption due to improper validation of buffer size sent to...CVE-2022-25656Fix available8.4 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, msm8953 firmware +47 more +49 moreMemory corruption in synx driver due to use-after-free condition in the synx driver due to...CVE-2022-22095Fix available8.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +34 more +36 moreUse after free in the synx driver issue while performing other functions during multiple...CVE-2021-35133Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qam8295p firmware, qca6391 firmware +24 more +26 moreMemory corruption in DSP service due to improper validation of input parameters in Snapdragon...CVE-2021-351268.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +62 more +64 moreImproper integrity check can lead to race condition between tasks PDCP and RRC? right after a...CVE-2021-303479.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +62 more +64 moreImproper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC...CVE-2021-303439.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 moreReachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in...CVE-2021-303407.5 High
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca6391 firmware +53 more +55 moreReading PRNG output may lead to improper key generation due to lack of buffer validation in...CVE-2021-303399.0 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +54 more +56 moreImproper memory allocation during counter check DLM handling can lead to denial of service in...CVE-2021-350967.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +79 more +81 moreImproper verification of timeout-based authentication in identity credential can lead to invalid...CVE-2021-350947.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 morePossible hypervisor memory corruption due to TOC TOU race condition when updating address...CVE-2021-350909.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +53 more +55 morePossible buffer over read due to improper validation of SIB type when processing a NR system...CVE-2021-350867.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +55 more +57 morePossible null pointer dereference due to improper validation of RRC connection reconfiguration...CVE-2021-350767.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +54 more +56 morePossible assertion due to improper validation of rank restriction field in Snapdragon Auto,...CVE-2021-350737.5 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, msm8953 firmware +42 more +44 moreAn array index is improperly used to lock and unlock a mutex which can lead to a Use After Free...CVE-2021-35121Fix available6.7 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, aqt1000 firmware +98 more +100 moreImproper handling between export and release functions on the same handle from client can lead to...CVE-2021-35120Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +81 more +83 morePotential out of Bounds read in FIPS event processing due to improper validation of the length...CVE-2021-35119Fix available5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, ar8035 firmware +78 more +80 moreUse after free in graphics fence due to a race condition while closing fence file descriptor and...CVE-2022-22057Public exploitFix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +68 more +70 morePossible buffer overflow due to lack of buffer length check during management frame Rx handling...CVE-2021-35085Fix available5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +53 more +55 morePossible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon...CVE-2021-303327.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 morePossible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon...CVE-2021-303297.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +46 more +48 morePossible assertion due to improper validation of invalid NR CSI-IM resource configuration in...CVE-2021-303287.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, csr8811 firmware +90 more +92 moreImproper cleaning of secure memory between authenticated users can lead to face authentication...CVE-2021-19507.8 High
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, qualcomm aqt1000 firmware, qca6390 firmware +30 more +32 moreBuffer copy in GATT multi notification due to improper length check for the data coming over-the...CVE-2021-35123Fix available8.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +169 more +171 morePossible buffer over read due to lack of size validation while copying data from DBR buffer to RX...CVE-2021-35071Fix available5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, ar9380 firmware +147 more +149 morePossible out of bound write due to improper validation of number of timer values received from...CVE-2021-35103Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 morePossible assertion due to improper size validation while processing the DownlinkPreemption IE in...CVE-2021-303267.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +69 more +71 morePossible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic...CVE-2021-35077Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +47 more +49 morePossible null pointer dereference due to lack of WDOG structure validation during registration in...CVE-2021-35075Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +39 more +41 morePossible integer overflow due to improper fragment datatype while calculating number of fragments...CVE-2021-35074Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +65 more +67 morePossible heap overflow due to lack of index validation before allocating and writing to heap...CVE-2021-303117.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +56 more +58 morePossible assertion due to improper validation of symbols configured for PDCCH monitoring in...CVE-2021-302877.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon wearables, qualcomm qca6390 firmware, qca6391 firmware +70 more +72 morePossible out of bound read due to lack of domain input validation while processing APK close...CVE-2021-303368.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +40 more +42 morePossible integer overflow can occur due to improper length check while calculating count and...CVE-2021-19128.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +82 more +84 moreNull pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto,...CVE-2021-19178.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +79 more +81 morePossible integer overflow due to improper length check while updating grace period and count...CVE-2021-19138.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, msm8953 firmware +63 more +65 morePossible buffer over read due to improper buffer allocation for file length passed from user...CVE-2021-30306Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qca6174a firmware, qca6391 firmware +39 more +41 morePossible out of bound access due to lack of validation of page offset before page is inserted in...CVE-2021-30305Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, qualcomm aqt1000 firmware, qca6390 firmware +82 more +84 moreIncorrect pointer argument passed to trusted application TA could result in un-intended memory...CVE-2021-19237.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qca6174a firmware, qca6574 firmware +39 more +41 morePotential null pointer dereference in KGSL GPU auxiliary command due to improper validation of...CVE-2021-30294Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qca6174a firmware, qca6574 firmware +39 more +41 morePossible null pointer dereference due to race condition between timeline fence signal and time...CVE-2021-30290Fix available8.4 High
- Show moreLoading…