Skip to contentQualcomm Sd 8c vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 morePossible hypervisor memory corruption due to TOC TOU race condition when updating address...CVE-2021-350909.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +105 more +107 morePossible memory leak due to improper validation of certificate chain length while parsing server...CVE-2021-350787.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +22 more +24 moreImproper handling of writes to virtual GICR control can lead to assertion failure in the...CVE-2021-351017.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +172 more +174 morePossible out of bound read due to improper validation of certificate chain in SSL or Internet key...CVE-2021-350838.2 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +127 more +129 moreImproper validation of buffer size input to the EFS file can lead to memory corruption in...CVE-2021-303337.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +109 more +111 moreImproper handling of permissions of a shared memory region can lead to memory corruption in...CVE-2021-19429.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +99 more +101 moreImproper validation of maximum size of data write to EFS file can lead to memory corruption in...CVE-2021-303237.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +96 more +98 morePossible out of bounds write due to improper validation of number of GPIOs configured in an...CVE-2021-303227.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +112 more +114 moreImproper validation of program headers containing ELF metadata can lead to image verification...CVE-2021-303179.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +84 more +86 morePossible buffer overflow while printing the HARQ memory partition detail due to improper...CVE-2021-303087.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm ar8035 firmware, csrb31024 firmware +84 more +86 morePossible denial of service due to improper validation of DNS response when DNS client requests...CVE-2021-303077.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +108 more +110 morePossible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and...CVE-2021-303007.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +100 more +102 moreImproper validation of memory region in Hypervisor can lead to incorrect region mapping in...CVE-2021-302859.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8017 firmware, apq8064au firmware +139 more +141 moreImproper validation of LLM utility timers availability can lead to denial of service in...CVE-2021-303486.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +237 more +239 morePossible buffer overflow due to lack of buffer length check when segmented WMI command is...CVE-2021-303037.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +101 more +103 morePossible buffer overflow due to lack of range check while processing a DIAG command for COEX...CVE-2021-302897.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +123 more +125 morePossible out of bound write in RAM partition table due to improper validation on number of...CVE-2021-302828.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +124 more +126 moreImproper input validation in TrustZone memory transfer interface can lead to information...CVE-2021-302787.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +125 more +127 morePossible integer overflow in page alignment interface due to lack of address and size validation...CVE-2021-302759.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +124 more +126 morePossible integer overflow in access control initialization interface due to lack and size and...CVE-2021-302748.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8096au firmware +72 more +74 morePossible assertion due to improper handling of IPV6 packet with invalid length in destination...CVE-2021-302737.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +194 more +196 morePossible null pointer dereference in thread cache operation handler due to lack of validation of...CVE-2021-302727.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +164 more +166 morePossible null pointer dereference in trap handler due to lack of thread ID validation before...CVE-2021-302717.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +153 more +155 morePossible null pointer dereference in thread profile trap handler due to lack of thread ID...CVE-2021-302707.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +115 more +117 morePossible null pointer dereference due to lack of TLB validation for user provided address in...CVE-2021-302697.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +135 more +137 morePossible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ...CVE-2021-302687.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +86 more +88 morePossible integer overflow to buffer overflow due to improper input validation in FTM ARA commands...CVE-2021-302677.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +115 more +117 moreImproper access control in TrustZone due to improper error handling while handling the signing...CVE-2021-18947.1 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, qualcomm aqt1000 firmware, qca1062 firmware +21 more +23 morePossible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in...CVE-2021-303219.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +156 more +158 morePossible out of bound access due to improper validation of function table entries in Snapdragon...CVE-2021-302597.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 morePossible buffer overflow due to improper input validation in PDM DIAG command in FTM in...CVE-2021-302557.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +120 more +122 morePossible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto,...CVE-2021-19797.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +178 more +180 morePossible heap overflow due to improper length check of domain while parsing the DNS response in...CVE-2021-19759.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 moreA FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto,...CVE-2021-19737.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +315 more +317 moreInformation disclosure through timing and power side-channels during mod exponentiation for RSA...CVE-2021-19249.0 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +55 more +57 morePossible memory corruption due to Improper handling of hypervisor unmap operations for concurrent...CVE-2021-19217.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +40 more +42 morePossible integer overflow can occur due to improper length check while calculating count and...CVE-2021-19128.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +204 more +206 morePossible denial of service scenario can occur due to lack of length check on Channel Switch...CVE-2021-19035.3 Medium
- qualcomm, inc. snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +25 more +27 morePossible race condition can occur due to lack of synchronization mechanism when On-Device Logging...CVE-2021-30263Fix available6.7 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +122 more +124 moreImproper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to...CVE-2021-303027.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8053 firmware +194 more +196 morePossible stack overflow due to improper length check of TLV while copying the TLV to a local...CVE-2021-302888.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +186 more +188 morePossible memory corruption due to lack of bound check of input index in Snapdragon Auto,...CVE-2021-19597.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +62 more +64 moreImproper access control in trusted application environment can cause unauthorized access to CDSP...CVE-2021-19328.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +79 more +81 morePossible integer overflow due to improper length check while updating grace period and count...CVE-2021-19138.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +217 more +219 morePossible buffer over read due to lack of length check while parsing beacon IE response in...CVE-2021-1980Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +60 more +62 moreImproper validation of kernel buffer address while copying information back to user buffer can...CVE-2021-1969Fix available6.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +60 more +62 moreImproper validation of kernel buffer address while copying information back to user buffer can...CVE-2021-1968Fix available6.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +108 more +110 morePossible stack buffer overflow due to lack of check on the maximum number of post NAN discovery...CVE-2021-1967Fix available5.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +63 more +65 morePossible buffer overflow due to lack of length check of source and destination buffer before...CVE-2021-1966Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +180 more +182 morePossible integer and heap overflow due to lack of input command size validation while handling...CVE-2021-302618.4 High
- Show moreLoading…