Qualcomm CVEs
2,991 CVEs and advisories name Qualcomm as an affected vendor, 12 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-30316Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, S
- CVE-2021-30315Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto
- CVE-2021-30312Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute,
- CVE-2021-30310Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity,
- CVE-2021-30306Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivi
- CVE-2021-30305Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, S
- CVE-2021-30304Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdra
- CVE-2021-30302Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdra
- CVE-2021-30297Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdr
- CVE-2021-30292Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapd
- CVE-2021-30291Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapd
- CVE-2021-30288Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon C
- CVE-2021-30258Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdrag
- CVE-2021-30257Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connec
- CVE-2021-30256Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdr
- CVE-2021-1985Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon C
- CVE-2021-1984Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute,
- CVE-2021-1983Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, S
- CVE-2021-1980Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Co
- CVE-2021-1977Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Au
- CVE-2021-1967Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match even
- CVE-2021-1966Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute,
- CVE-2021-1959Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr
- CVE-2021-1949Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snap
- CVE-2021-1936Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn
- CVE-2021-1932Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in
- CVE-2021-1917Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,
- CVE-2021-1913Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute,
- CVE-2020-11303Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Conn
- CVE-2021-1969Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to