Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-30274Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdra
- CVE-2021-30273Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon
- CVE-2021-30272Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Sna
- CVE-2021-30271Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon
- CVE-2021-30270Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon A
- CVE-2021-30269Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon
- CVE-2021-30268Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon Auto, Snapdragon Co
- CVE-2021-30267Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Sn
- CVE-2021-30262Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto,
- CVE-2021-1918Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industr
- CVE-2021-1894Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, S
- CVE-2020-11263An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connecti
- CVE-2021-30321Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, S
- CVE-2021-30284Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdrag
- CVE-2021-30266Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snap
- CVE-2021-30265Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route stat
- CVE-2021-30264Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectiv
- CVE-2021-30263Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon
- CVE-2021-30259Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect
- CVE-2021-30255Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn
- CVE-2021-30254Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Comput
- CVE-2021-1982Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Sna
- CVE-2021-1981Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdra
- CVE-2021-1979Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,
- CVE-2021-1975Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdra
- CVE-2021-1973A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra
- CVE-2021-1924Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute,
- CVE-2021-1921Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snap
- CVE-2021-1912Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Com
- CVE-2021-1903Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response fram