Skip to contentQualcomm, Inc. vulnerabilities
Products
- Snapdragon997
- Android For Msm, Firefox Os For Msm, Qrd Android306
- All Qualcomm Products194
- Snapdragon Mobile, Snapdragon Wear133
- Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear129
- Snapdragon Mobile116
- Snapdragon Automobile, Snapdragon Mobile39
- Snapdragon Auto13
- Snapdragon Wired Infrastructure And Networking10
- Snapdragon Connectivity, Snapdragon Mobile9
- Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile8
- Snapdragon Auto, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile7
- Snapdragon Auto, Snapdragon Consumer Iot, Snapdragon Mobile7
- Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial Iot, Snapdragon Mobile7
- Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial Iot, Snapdragon Mobile6
- Snapdragon Compute, Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile5
- Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Voice & Music5
- Snapdragon Industrial Iot, Snapdragon Mobile5
- Snapdragon Compute, Snapdragon Industrial Iot, Snapdragon Mobile4
- Snapdragon Consumer Iot, Snapdragon Mobile4
- Snapdragon Iot, Snapdragon Mobile4
- Snapdragon Mobile, Snapdragon Wear, Small Cell Soc4
- Small Cell Soc , Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear3
- Small Cell Soc, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear3
- Small Cell Soc , Snapdragon Mobile, Snapdragon Wear3
- Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial Iot, Snapdragon Mobile3
- Snapdragon Auto, Snapdragon Consumer Iot, Snapdragon Mobile, Snapdragon Voice & Music3
- Snapdragon Auto, Snapdragon Mobile3
- Snapdragon Compute, Snapdragon Connectivity3
- Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity3
- Snapdragon Consumer Iot, Snapdragon Industrial Iot, Snapdragon Mobile3
- Small Cell Soc, Snapdragon Mobile, Snapdragon Wear2
- Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, Small Cell Soc2
- Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Iot, Snapdragon Mobile2
- Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile2
- Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables2
- Snapdragon Auto, Snapdragon Industrial Iot, Snapdragon Mobile2
- Snapdragon Auto, Snapdragon Mobile, Snapdragon Wearables2
- Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Iot, Snapdragon Industrial Iot2
- Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile2
- Snapdragon Compute, Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Voice & Music2
- Snapdragon Connectivity, Snapdragon Industrial Iot, Snapdragon Mobile2
- Snapdragon Industrial Iot2
- Snapdragon Mobile, Snapdragon Wearables2
Newest
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, msm8953 firmware +47 more +49 moreMemory corruption in synx driver due to use-after-free condition in the synx driver due to...CVE-2022-22095Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8096au firmware +110 more +112 moreImproper validation of backend id in PCM routing process can lead to memory corruption in...CVE-2022-22080Fix available8.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +55 more +57 moreMemory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data...CVE-2022-22096Fix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +77 more +79 moreMemory corruption due to use after free issue in kernel while processing ION handles in...CVE-2022-22058Fix available8.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +34 more +36 moreUse after free in the synx driver issue while performing other functions during multiple...CVE-2021-35133Fix available6.7 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, ipq5010 firmware +43 more +45 moreMemory corruption in BT controller due to improper length check while processing vendor specific...CVE-2021-351297.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qam8295p firmware, qca6391 firmware +24 more +26 moreMemory corruption in DSP service due to improper validation of input parameters in Snapdragon...CVE-2021-351268.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +174 more +176 morePossible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in...CVE-2021-351049.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +118 more +120 morePossible buffer over read due to improper calculation of string length while parsing Id3 tag in...CVE-2021-351007.5 High
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile, qualcomm qcm6125 firmware, qcs6125 firmware +7 more +9 moreRPM secure Stream can access any secure resource due to improper SMMU configuration and can lead...CVE-2021-350706.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +94 more +96 moreLack of MBN header size verification against input buffer can lead to memory corruption in...CVE-2021-303508.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +139 more +141 moreImproper access control sequence for AC database after memory allocation can lead to possible...CVE-2021-303498.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +62 more +64 moreImproper integrity check can lead to race condition between tasks PDCP and RRC? right after a...CVE-2021-303479.1 Critical
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca9984 firmware +26 more +28 moreRPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon...CVE-2021-303466.5 Medium
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca9984 firmware +26 more +28 moreRPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon...CVE-2021-303456.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +145 more +147 moreImproper authorization of a replayed LTE security mode command can lead to a denial of service in...CVE-2021-303447.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +62 more +64 moreImproper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC...CVE-2021-303439.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +93 more +95 moreImproper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC...CVE-2021-303429.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8096au firmware +118 more +120 moreImproper buffer size validation of DSM packet received can lead to memory corruption in...CVE-2021-303419.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 moreReachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in...CVE-2021-303407.5 High
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca6391 firmware +53 more +55 moreReading PRNG output may lead to improper key generation due to lack of buffer validation in...CVE-2021-303399.0 Critical
- qualcomm, inc. snapdragon compute, qualcomm sd850 firmware, sdxr1 firmware +2 moreImproper input validation in TrustZone memory transfer interface can lead to information...CVE-2021-303387.1 High
- qualcomm, inc. snapdragon mobile, snapdragon compute, snapdragon auto, snapdragon iot, snapdragon connectivity, snapdragon voice & music, qualcomm apq8097 firmware, apq8098 firmware +77 more +79 moreBuffer overflow in sahara protocol while processing commands leads to overwrite of secure...CVE-2021-30327Public exploit7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +145 more +147 moreXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX in Snapdragon Auto, Snapdragon Compute, Snapdragon...CVE-2021-302818.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, ar8031 firmware +89 more +91 morePossible use after free when process shell memory is freed using IOCTL munmap call and process...CVE-2022-22071In KEV8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +111 more +113 moreAPK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s...CVE-2021-351167.7 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +54 more +56 moreImproper memory allocation during counter check DLM handling can lead to denial of service in...CVE-2021-350967.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +79 more +81 moreImproper verification of timeout-based authentication in identity credential can lead to invalid...CVE-2021-350947.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 morePossible hypervisor memory corruption due to TOC TOU race condition when updating address...CVE-2021-350909.3 Critical
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +39 more +41 morePossible null pointer access due to improper validation of system information message to be...CVE-2021-350877.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +53 more +55 morePossible buffer over read due to improper validation of SIB type when processing a NR system...CVE-2021-350867.5 High
- qualcomm, inc. snapdragon industrial iot, qualcomm mdm9206 firmware, qca9367 firmware +1 more +3 moreImproper integrity check can lead to race condition between tasks PDCP and RRC? right after a...CVE-2021-350829.1 Critical
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm qcm2290 firmware, qcm4290 firmware +23 more +25 moreDisabled SMMU from secure side while RPM is assigned a secure stream can lead to information...CVE-2021-350806.5 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, aqt1000 firmware +59 more +61 moreImproper validation of permissions for third party application accessing Telephony service API...CVE-2021-350796.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +105 more +107 morePossible memory leak due to improper validation of certificate chain length while parsing server...CVE-2021-350787.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +55 more +57 morePossible null pointer dereference due to improper validation of RRC connection reconfiguration...CVE-2021-350767.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +54 more +56 morePossible assertion due to improper validation of rank restriction field in Snapdragon Auto,...CVE-2021-350737.5 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +80 more +82 morePossible buffer overflow due to improper validation of array index while processing external DIAG...CVE-2021-350727.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +50 more +52 moreMemory corruption in bluetooth host due to integer overflow while processing BT HFP-UNIT profile...CVE-2022-256519.8 Critical
- qualcomm, inc. snapdragon auto, qualcomm sa8540p firmware, sa9000p firmware +2 moreMemory corruption in multimedia driver due to double free while processing data from user in...CVE-2022-221037.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm sd865 5g firmware, sd888 5g firmware +21 more +23 moreMemory corruption in audio due to use after free while managing buffers from internal cache in...CVE-2022-220908.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 morememory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in...CVE-2022-220877.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +138 more +140 moreMemory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms...CVE-2022-220867.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 moreMemory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto,...CVE-2022-220858.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +151 more +153 moreMemory corruption when extracting qcp audio file due to lack of check on data length in...CVE-2022-220848.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +149 more +151 moreDenial of service due to memory corruption while extracting ape header from clips in Snapdragon...CVE-2022-220837.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +151 more +153 moreMemory corruption due to possible buffer overflow while parsing DSF header with corrupted channel...CVE-2022-220828.4 High
- qualcomm, inc. snapdragon auto, qualcomm sa8540p firmware, sa9000p firmware +2 moreImproper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon AutoCVE-2021-351148.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +36 more +38 moreImproper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition...CVE-2021-351117.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +66 more +68 morePossible buffer overflow due to lack of validation for the length of NAI string read from EFS in...CVE-2021-351027.8 High
- Show moreLoading…