Browse CVEs

HIGH 7.8 CVE-2021-35089 Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto Qca6696 Firmware No fix yet Fix from $1,9502022-04-01 HIGH 7.8 CVE-2021-35103 Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snap… Ar8035 Firmware Patch available Fix from $1,9502022-04-01 HIGH 7.8 CVE-2021-35105 Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… Apq8009w Firmware Patch available Fix from $1,9502022-04-01 HIGH 7.8 CVE-2021-35106 Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr… Aqt1000 Firmware Patch available Fix from $1,9502022-04-01 HIGH 7.8 CVE-2021-35115 Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon Mobile Apq8096au Firmware Mitigation only Fix from $1,9502022-04-01 HIGH 7.5 CVE-2021-30328 Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… Ar8035 Firmware No fix yet Fix from $1,9502022-04-01 HIGH 7.5 CVE-2021-30329 Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Indust… Ar8035 Firmware Mitigation only Fix from $1,9502022-04-01 HIGH 7.5 CVE-2021-30332 Possible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Indust… Ar8035 Firmware Mitigation only Fix from $1,9502022-04-01 MEDIUM 5.5 CVE-2021-30331 Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdra… Ar8035 Firmware Mitigation only Fix from $1,6002022-04-01 HIGH 8.8 CVE-2021-1942 Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… Aqt1000 Firmware Mitigation only Fix from $1,9502022-04-01 CRITICAL 9.8 CVE-2021-35068 Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Aut… Apq8009w Firmware Patch available Fix from $2,3002022-02-11 HIGH 7.8 CVE-2021-30317 Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdrag… Aqt1000 Firmware Mitigation only Fix from $1,9502022-02-11 HIGH 7.8 CVE-2021-30318 Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… Apq8009w Firmware Mitigation only Fix from $1,9502022-02-11 HIGH 7.8 CVE-2021-30322 Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon … Aqt1000 Firmware Mitigation only Fix from $1,9502022-02-11 HIGH 7.8 CVE-2021-30323 Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consum… Apq8009w Firmware Mitigation only Fix from $1,9502022-02-11 HIGH 7.8 CVE-2021-35069 Improper validation of data length received from DMA buffer can lead to memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect… Apq8096au Firmware Patch available Fix from $1,9502022-02-11 HIGH 7.8 CVE-2021-35074 Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, Snapdragon… Ar8035 Firmware Patch available Fix from $1,9502022-02-11 HIGH 7.8 CVE-2021-35075 Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, Snapdrago… Ar8035 Firmware Patch available Fix from $1,9502022-02-11 HIGH 7.8 CVE-2021-35077 Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snap… Ar8035 Firmware Patch available Fix from $1,9502022-02-11 HIGH 7.5 CVE-2021-30326 Possible assertion due to improper size validation while processing the DownlinkPreemption IE in an RRC Reconfiguration/RRC Setup message in Snapdrag… Ar8035 Firmware Mitigation only Fix from $1,9502022-02-11 MEDIUM 6.7 CVE-2021-30324 Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in Snapdragon Au… Apq8096au Firmware Patch available Fix from $1,6002022-02-11 MEDIUM 6.7 CVE-2021-30325 Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapd… Apq8096au Firmware Patch available Fix from $1,6002022-02-11 HIGH 7.8 CVE-2021-30309 Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn… Mdm9650 Firmware Mitigation only Fix from $1,9502022-02-11 HIGH 8.8 CVE-2021-30285 Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… Ar8031 Firmware Mitigation only Fix from $1,9502022-01-13 HIGH 7.8 CVE-2021-30308 Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Com… Aqt1000 Firmware No fix yet Fix from $1,9502022-01-13 HIGH 7.8 CVE-2021-30311 Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, Snapdragon Compute, Snapdrago… Ar8035 Firmware No fix yet Fix from $1,9502022-01-13 HIGH 7.8 CVE-2021-30319 Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdragon Compute… Apq8009 Firmware Patch available Fix from $1,9502022-01-13 HIGH 7.5 CVE-2021-30287 Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… Ar8035 Firmware Mitigation only Fix from $1,9502022-01-13 HIGH 7.5 CVE-2021-30300 Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the … Apq8009w Firmware Mitigation only Fix from $1,9502022-01-13 HIGH 7.5 CVE-2021-30301 Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mo… Ar8035 Firmware Mitigation only Fix from $1,9502022-01-13