Skip to contentQualcomm Qca6574au vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +194 more +196 moreAn out of bound memory access can occur due to improper validation of number of frames being...CVE-2021-303519.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8017 firmware, apq8064au firmware +139 more +141 moreImproper validation of LLM utility timers availability can lead to denial of service in...CVE-2021-303486.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon wearables, qualcomm qca6390 firmware, qca6391 firmware +70 more +72 morePossible out of bound read due to lack of domain input validation while processing APK close...CVE-2021-303368.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +237 more +239 morePossible buffer overflow due to lack of buffer length check when segmented WMI command is...CVE-2021-303037.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm ar6003 firmware, ar8035 firmware +74 more +76 morePossible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto,...CVE-2021-302937.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +101 more +103 morePossible buffer overflow due to lack of range check while processing a DIAG command for COEX...CVE-2021-302897.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +123 more +125 morePossible out of bound write in RAM partition table due to improper validation on number of...CVE-2021-302828.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +124 more +126 moreImproper input validation in TrustZone memory transfer interface can lead to information...CVE-2021-302787.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +125 more +127 morePossible integer overflow in page alignment interface due to lack of address and size validation...CVE-2021-302759.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +124 more +126 morePossible integer overflow in access control initialization interface due to lack and size and...CVE-2021-302748.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8096au firmware +72 more +74 morePossible assertion due to improper handling of IPV6 packet with invalid length in destination...CVE-2021-302737.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +194 more +196 morePossible null pointer dereference in thread cache operation handler due to lack of validation of...CVE-2021-302727.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +164 more +166 morePossible null pointer dereference in trap handler due to lack of thread ID validation before...CVE-2021-302717.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +153 more +155 morePossible null pointer dereference in thread profile trap handler due to lack of thread ID...CVE-2021-302707.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +115 more +117 morePossible null pointer dereference due to lack of TLB validation for user provided address in...CVE-2021-302697.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +135 more +137 morePossible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ...CVE-2021-302687.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +86 more +88 morePossible integer overflow to buffer overflow due to improper input validation in FTM ARA commands...CVE-2021-302677.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +115 more +117 moreImproper access control in TrustZone due to improper error handling while handling the signing...CVE-2021-18947.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm ar8031 firmware, ar8035 firmware +108 more +110 moreImproper validation of function pointer type with actual function signature can lead to assertion...CVE-2021-30353Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +132 more +134 morePossible integer overflow due to improper validation of command length parameters while...CVE-2021-30319Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +178 more +180 moreUse after free condition can occur in wired connectivity due to a race condition while creating...CVE-2021-30313Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +208 more +210 morePossible use after free when process shell memory is freed using IOCTL call and process...CVE-2021-30337Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, aqt1000 firmware +172 more +174 morePossible assertion in QOS request due to improper validation when multiple add or update request...CVE-2021-30335Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +59 more +61 morePossible out of bound access due to improper validation of item size and DIAG memory pools data...CVE-2021-30298Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, aqt1000 firmware +103 more +105 moreImproper validation of a socket state when socket events are being sent to clients can lead to...CVE-2021-30262Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 morePossible information exposure and denial of service due to NAS not dropping messages when...CVE-2021-302847.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +202 more +204 morePossible use after free due to improper memory validation when initializing new interface via...CVE-2021-302666.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +192 more +194 morePossible use after free due improper validation of reference from call back to internal store...CVE-2021-302646.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +156 more +158 morePossible out of bound access due to improper validation of function table entries in Snapdragon...CVE-2021-302597.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 morePossible buffer overflow due to improper input validation in PDM DIAG command in FTM in...CVE-2021-302557.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +161 more +163 morePossible buffer overflow due to improper input validation in factory calibration and test DIAG...CVE-2021-302547.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +70 more +72 morePossible denial of service scenario due to improper input validation of received NAS OTA message...CVE-2021-19827.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, ar8035 firmware +88 more +90 morePossible buffer over read due to improper IE size check of Bearer capability IE in MT setup...CVE-2021-19817.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +120 more +122 morePossible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto,...CVE-2021-19797.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +178 more +180 morePossible heap overflow due to improper length check of domain while parsing the DNS response in...CVE-2021-19759.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 moreA FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto,...CVE-2021-19737.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 moreInformation disclosure through timing and power side-channels during mod exponentiation for RSA...CVE-2021-19249.0 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +55 more +57 morePossible memory corruption due to Improper handling of hypervisor unmap operations for concurrent...CVE-2021-19217.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +40 more +42 morePossible integer overflow can occur due to improper length check while calculating count and...CVE-2021-19128.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +204 more +206 morePossible denial of service scenario can occur due to lack of length check on Channel Switch...CVE-2021-19035.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +93 more +95 morePossible memory corruption due to improper validation of memory address while processing user...CVE-2021-30265Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8031 firmware, csra6620 firmware +75 more +77 morePossible out of bound memory access due to improper boundary check while creating HSYNC fence in...CVE-2021-303168.4 High
- qualcomm, inc. snapdragon auto, qualcomm mdm9628 firmware, qca6564a firmware +13 more +15 moreImproper handling of sensor HAL structure in absence of sensor can lead to use after free in...CVE-2021-303158.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +84 more +86 morePossible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in...CVE-2021-303107.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +87 more +89 morePossible out of bound read due to improper validation of packet length while handling data...CVE-2021-302978.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +89 more +91 morePossible memory corruption due to lack of validation of client data used for memory allocation in...CVE-2021-302928.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +88 more +90 morePossible memory corruption due to lack of validation of client data used for memory allocation in...CVE-2021-302918.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +194 more +196 morePossible stack overflow due to improper length check of TLV while copying the TLV to a local...CVE-2021-302888.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +95 more +97 morePossible buffer overflow due to improper size calculation of payload received in VR service in...CVE-2021-302588.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +93 more +95 morePossible buffer over read due to lack of data length check in QVR Service configuration in...CVE-2021-19858.4 High
- Show moreLoading…