Vulnerabilities (CVE)

Filtered by vendor Qualcomm Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-30275 1 Qualcomm 254 Ar8031, Ar8031 Firmware, Ar8035 and 251 more 2022-01-12 7.2 HIGH 7.8 HIGH
Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVE-2021-30273 1 Qualcomm 148 Apq8009w, Apq8009w Firmware, Apq8096au and 145 more 2022-01-11 5.0 MEDIUM 7.5 HIGH
Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVE-2021-30267 1 Qualcomm 176 Aqt1000, Aqt1000 Firmware, Ar8035 and 173 more 2022-01-11 4.6 MEDIUM 7.8 HIGH
Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2020-11263 1 Qualcomm 122 Ar8035, Ar8035 Firmware, Qca6390 and 119 more 2022-01-11 4.6 MEDIUM 8.2 HIGH
An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVE-2020-11201 1 Qualcomm 56 Qcm6125, Qcm6125 Firmware, Qcs410 and 53 more 2021-12-30 7.2 HIGH 7.8 HIGH
Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA845, SDM640, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P
CVE-2020-11202 1 Qualcomm 64 Qcm6125, Qcm6125 Firmware, Qcs410 and 61 more 2021-12-22 7.2 HIGH 7.8 HIGH
Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual size of the structure' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in QCM6125, QCS410, QCS603, QCS605, QCS610, QCS6125, SA6145P, SA6155, SA6155P, SA8155, SA8155P, SDA640, SDA670, SDA845, SDM640, SDM670, SDM710, SDM830, SDM845, SDX50M, SDX55, SDX55M, SM6125, SM6150, SM6150P, SM6250, SM6250P, SM7125, SM7150, SM7150P, SM8150, SM8150P
CVE-2021-30263 1 Qualcomm 54 Aqt1000, Aqt1000 Firmware, Ar8031 and 51 more 2021-11-16 4.4 MEDIUM 7.8 HIGH
Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2021-30255 1 Qualcomm 376 Apq8009, Apq8009 Firmware, Apq8009w and 373 more 2021-11-16 7.2 HIGH 7.8 HIGH
Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-30254 1 Qualcomm 326 Apq8009, Apq8009 Firmware, Apq8009w and 323 more 2021-11-16 7.2 HIGH 7.8 HIGH
Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1982 1 Qualcomm 144 Ar8035, Ar8035 Firmware, Qca6390 and 141 more 2021-11-16 5.0 MEDIUM 7.5 HIGH
Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1979 1 Qualcomm 244 Aqt1000, Aqt1000 Firmware, Ar8035 and 241 more 2021-11-16 7.2 HIGH 7.8 HIGH
Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1973 1 Qualcomm 394 Apq8009, Apq8009 Firmware, Apq8009w and 391 more 2021-11-16 7.2 HIGH 7.8 HIGH
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1921 1 Qualcomm 114 Aqt1000, Aqt1000 Firmware, Qca6390 and 111 more 2021-11-15 6.9 MEDIUM 7.0 HIGH
Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-1912 1 Qualcomm 84 Aqt1000, Aqt1000 Firmware, Ar8035 and 81 more 2021-11-15 7.2 HIGH 7.8 HIGH
Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30316 1 Qualcomm 154 Ar8031, Ar8031 Firmware, Csra6620 and 151 more 2021-10-26 7.2 HIGH 7.8 HIGH
Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVE-2021-30315 1 Qualcomm 30 Mdm9628, Mdm9628 Firmware, Qca6564a and 27 more 2021-10-26 7.2 HIGH 7.8 HIGH
Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto
CVE-2021-30312 1 Qualcomm 388 Apq8053, Apq8053 Firmware, Aqt1000 and 385 more 2021-10-26 5.0 MEDIUM 7.5 HIGH
Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2021-30310 1 Qualcomm 172 Apq8009, Apq8009 Firmware, Apq8017 and 169 more 2021-10-26 5.0 MEDIUM 7.5 HIGH
Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music
CVE-2021-30306 1 Qualcomm 130 Apq8053, Apq8053 Firmware, Msm8953 and 127 more 2021-10-26 3.6 LOW 7.1 HIGH
Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30305 1 Qualcomm 82 Qca6174a, Qca6174a Firmware, Qca6391 and 79 more 2021-10-26 4.6 MEDIUM 7.8 HIGH
Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVE-2021-30302 1 Qualcomm 248 Aqt1000, Aqt1000 Firmware, Ar8035 and 245 more 2021-10-26 5.0 MEDIUM 7.5 HIGH
Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVE-2021-30297 1 Qualcomm 178 Apq8017, Apq8017 Firmware, Apq8053 and 175 more 2021-10-26 3.6 LOW 7.1 HIGH
Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVE-2021-30291 1 Qualcomm 180 Apq8017, Apq8017 Firmware, Apq8053 and 177 more 2021-10-26 7.2 HIGH 7.8 HIGH
Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVE-2021-30292 1 Qualcomm 182 Apq8017, Apq8017 Firmware, Apq8053 and 179 more 2021-10-26 7.2 HIGH 7.8 HIGH
Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVE-2021-30288 1 Qualcomm 392 Apq8009, Apq8009 Firmware, Apq8053 and 389 more 2021-10-26 7.2 HIGH 7.8 HIGH
Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVE-2021-30258 1 Qualcomm 194 Apq8017, Apq8017 Firmware, Apq8053 and 191 more 2021-10-26 7.2 HIGH 7.8 HIGH
Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVE-2021-30257 1 Qualcomm 154 Apq8017, Apq8017 Firmware, Apq8053 and 151 more 2021-10-26 7.2 HIGH 7.8 HIGH
Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
CVE-2021-30256 1 Qualcomm 154 Apq8017, Apq8017 Firmware, Apq8053 and 151 more 2021-10-26 7.2 HIGH 7.8 HIGH
Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
CVE-2021-1985 1 Qualcomm 190 Apq8017, Apq8017 Firmware, Apq8053 and 187 more 2021-10-26 3.6 LOW 7.1 HIGH
Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVE-2021-1984 1 Qualcomm 190 Apq8017, Apq8017 Firmware, Apq8053 and 187 more 2021-10-26 7.2 HIGH 7.8 HIGH
Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVE-2021-1983 1 Qualcomm 190 Apq8017, Apq8017 Firmware, Apq8053 and 187 more 2021-10-26 7.2 HIGH 7.8 HIGH
Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVE-2021-1959 1 Qualcomm 376 Apq8009, Apq8009 Firmware, Apq8009w and 373 more 2021-10-26 7.2 HIGH 7.8 HIGH
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1949 1 Qualcomm 278 Apq8009, Apq8009 Firmware, Apq8009w and 275 more 2021-10-26 7.2 HIGH 8.4 HIGH
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1936 1 Qualcomm 244 Apq8009w, Apq8009w Firmware, Apq8017 and 241 more 2021-10-26 7.8 HIGH 7.5 HIGH
Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVE-2021-1917 1 Qualcomm 168 Apq8017, Apq8017 Firmware, Apq8053 and 165 more 2021-10-26 7.2 HIGH 8.4 HIGH
Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables
CVE-2021-1913 1 Qualcomm 162 Aqt1000, Aqt1000 Firmware, Ar8035 and 159 more 2021-10-26 7.2 HIGH 8.4 HIGH
Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVE-2020-11303 1 Qualcomm 182 Apq8009, Apq8009 Firmware, Apq8053 and 179 more 2021-10-26 5.0 MEDIUM 8.6 HIGH
Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVE-2021-30260 1 Qualcomm 516 Apq8009, Apq8009 Firmware, Apq8017 and 513 more 2021-10-20 4.6 MEDIUM 7.8 HIGH
Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVE-2021-25480 2 Google, Qualcomm 2 Android, Qualcomm 2021-10-13 5.0 MEDIUM 7.5 HIGH
A lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem prior to SMR Oct-2021 Release 1 can lead to remote denial of service on mobile network connection.
CVE-2021-30261 1 Qualcomm 364 Apq8009, Apq8009 Firmware, Apq8009w and 361 more 2021-09-28 7.2 HIGH 7.8 HIGH
Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVE-2021-1947 1 Qualcomm 174 Apq8009w, Apq8009w Firmware, Apq8053 and 171 more 2021-09-28 7.2 HIGH 7.8 HIGH
Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2021-1909 1 Qualcomm 654 Apq8009, Apq8009 Firmware, Apq8009w and 651 more 2021-09-22 7.2 HIGH 7.8 HIGH
Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2021-1948 1 Qualcomm 436 Apq8053, Apq8053 Firmware, Apq8064au and 433 more 2021-09-22 7.8 HIGH 7.5 HIGH
Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVE-2021-1941 1 Qualcomm 430 Apq8064au, Apq8064au Firmware, Apq8096au and 427 more 2021-09-22 7.8 HIGH 7.5 HIGH
Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVE-2021-1952 1 Qualcomm 214 Aqt1000, Aqt1000 Firmware, Ar8031 and 211 more 2021-09-22 7.2 HIGH 7.8 HIGH
Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
CVE-2021-1974 1 Qualcomm 380 Aqt1000, Aqt1000 Firmware, Ar8035 and 377 more 2021-09-22 5.0 MEDIUM 7.5 HIGH
Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVE-2021-1971 1 Qualcomm 242 Aqt1000, Aqt1000 Firmware, Ar8035 and 239 more 2021-09-22 7.8 HIGH 7.5 HIGH
Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVE-2021-1934 1 Qualcomm 194 Apq8017, Apq8017 Firmware, Apq8053 and 191 more 2021-09-21 7.2 HIGH 7.8 HIGH
Possible memory corruption due to improper check when application loader object is explicitly destructed while application is unloading in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
CVE-2021-1945 1 Qualcomm 412 Apq8053, Apq8053 Firmware, Apq8064au and 409 more 2021-09-16 5.0 MEDIUM 7.5 HIGH
Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVE-2021-30290 1 Qualcomm 82 Qca6174a, Qca6174a Firmware, Qca6574 and 79 more 2021-09-16 4.4 MEDIUM 7.0 HIGH
Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile