Skip to contentQualcomm Sm7325p Firmware vulnerabilities
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +135 more +137 moreImproper validation of input when provisioning the HDCP key can lead to memory corruption in...CVE-2021-303188.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +112 more +114 moreImproper validation of program headers containing ELF metadata can lead to image verification...CVE-2021-303179.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +69 more +71 morePossible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic...CVE-2021-35077Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +47 more +49 morePossible null pointer dereference due to lack of WDOG structure validation during registration in...CVE-2021-35075Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +189 more +191 moreImproper validation of data length received from DMA buffer can lead to memory corruption. in...CVE-2021-35069Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, aqt1000 firmware +98 more +100 moreLack of null check while freeing the device information buffer in the Bluetooth HFP protocol can...CVE-2021-35068Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +108 more +110 morePossible null pointer dereference due to improper validation of APE clip in Snapdragon Auto,...CVE-2021-303307.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm qca6390 firmware, qca6391 firmware +72 more +74 moreLack of validation for third party application accessing the service can lead to information...CVE-2021-303146.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +65 more +67 morePossible heap overflow due to lack of index validation before allocating and writing to heap...CVE-2021-303117.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, qualcomm ar8035 firmware, csrb31024 firmware +84 more +86 morePossible denial of service due to improper validation of DNS response when DNS client requests...CVE-2021-303077.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +100 more +102 moreImproper validation of memory region in Hypervisor can lead to incorrect region mapping in...CVE-2021-302859.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +194 more +196 moreAn out of bound memory access can occur due to improper validation of number of frames being...CVE-2021-303519.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8017 firmware, apq8064au firmware +139 more +141 moreImproper validation of LLM utility timers availability can lead to denial of service in...CVE-2021-303486.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon wearables, qualcomm qca6390 firmware, qca6391 firmware +70 more +72 morePossible out of bound read due to lack of domain input validation while processing APK close...CVE-2021-303368.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +237 more +239 morePossible buffer overflow due to lack of buffer length check when segmented WMI command is...CVE-2021-303037.8 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qca6391 firmware, qcm6490 firmware +17 more +19 morePossible denial of service due to improper handling of debug register trap from user applications...CVE-2021-302837.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +123 more +125 morePossible out of bound write in RAM partition table due to improper validation on number of...CVE-2021-302828.4 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca6390 firmware +60 more +62 morePossible access control violation while setting current permission for VMIDs due to improper...CVE-2021-302797.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +124 more +126 moreImproper input validation in TrustZone memory transfer interface can lead to information...CVE-2021-302787.1 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca6390 firmware +56 more +58 moreImproper access control while doing XPU re-configuration dynamically can lead to unauthorized...CVE-2021-302769.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +125 more +127 morePossible integer overflow in page alignment interface due to lack of address and size validation...CVE-2021-302759.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +124 more +126 morePossible integer overflow in access control initialization interface due to lack and size and...CVE-2021-302748.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +194 more +196 morePossible null pointer dereference in thread cache operation handler due to lack of validation of...CVE-2021-302727.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +153 more +155 morePossible null pointer dereference in thread profile trap handler due to lack of thread ID...CVE-2021-302707.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +115 more +117 morePossible null pointer dereference due to lack of TLB validation for user provided address in...CVE-2021-302697.3 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qca6391 firmware, qcm6490 firmware +28 more +30 moreImproper handling of resource allocation in virtual machines can lead to information exposure in...CVE-2021-19186.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +115 more +117 moreImproper access control in TrustZone due to improper error handling while handling the signing...CVE-2021-18947.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm ar8031 firmware, ar8035 firmware +108 more +110 moreImproper validation of function pointer type with actual function signature can lead to assertion...CVE-2021-30353Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +132 more +134 morePossible integer overflow due to improper validation of command length parameters while...CVE-2021-30319Fix available7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, ar8031 firmware +178 more +180 moreUse after free condition can occur in wired connectivity due to a race condition while creating...CVE-2021-30313Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +203 more +205 moreImproper handling of received malformed FTMR request frame can lead to reachable assertion while...CVE-2021-19537.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +205 more +207 morePossible assertion due to improper verification while creating and deleting the peer in...CVE-2021-19387.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 moreImproper length check of public exponent in RSA import key function could cause memory corruption...CVE-2021-18908.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 morePossible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto,...CVE-2021-18898.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +153 more +155 moreMemory corruption in key parsing and import function due to double freeing the same heap...CVE-2021-18888.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +156 more +158 moreIncorrect handling of pointers in trusted application key import mechanism could cause memory...CVE-2021-18868.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +119 more +121 moreBuffer overflow in modem due to improper array index check before copying into it in Snapdragon...CVE-2020-113079.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, aqt1000 firmware +116 more +118 morePossible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto,...CVE-2021-1970Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar9380 firmware +124 more +126 morePossible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in...CVE-2021-1965Public exploitFix available9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +186 more +188 morePossible buffer over read due to improper validation of IE size while parsing beacon from peer...CVE-2021-1964Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +176 more +178 moreDenial of service in SAP case due to improper handling of connections when association is...CVE-2021-1955Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +148 more +150 morePossible buffer over read due to improper validation of data pointer while parsing FILS...CVE-2021-1954Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +204 more +206 morePossible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto,...CVE-2021-1945Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +175 more +177 morePossible buffer out of bound read can occur due to improper validation of TBTT count and length...CVE-2021-1943Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +119 more +121 morePossible buffer overflow due to improper validation of buffer length while processing fast boot...CVE-2021-1931Public exploitFix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, csrb31024 firmware +82 more +84 morePossible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon...CVE-2021-1907Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +184 more +186 moreReachable assertion is possible while processing peer association WLAN message from host and...CVE-2021-19377.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +80 more +82 morePossible integer overflow in RPMB counter due to lack of length check on user provided data in...CVE-2020-113067.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +157 more +159 morePossible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto,...CVE-2020-113047.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +269 more +271 moreStack out-of-bounds write occurs while setting up a cipher device if the provided IV length...CVE-2020-11267Fix available8.4 High