Browse CVEs

HIGH 7.8 CVE-2021-30269 Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti… Ar8031 Firmware Mitigation only Fix from $1,9502022-01-03 HIGH 7.8 CVE-2021-30270 Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snap… Apq8009w Firmware Mitigation only Fix from $1,9502022-01-03 MEDIUM 6.5 CVE-2021-1918 Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, … Qca6391 Firmware No fix yet Fix from $1,6002022-01-03 CRITICAL 9.8 CVE-2021-1975 Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne… Apq8009 Firmware Mitigation only Fix from $2,3002021-11-12 CRITICAL 9.8 CVE-2021-30321 Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon… Aqt1000 Firmware Mitigation only Fix from $2,3002021-11-12 CRITICAL 9.1 CVE-2021-1981 Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compu… Apq8017 Firmware Mitigation only Fix from $2,3002021-11-12 CRITICAL 9.1 CVE-2021-30284 Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Comput… Apq8009 Firmware Mitigation only Fix from $2,3002021-11-12 HIGH 7.8 CVE-2021-1973 A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… Apq8009 Firmware Mitigation only Fix from $1,9502021-11-12 HIGH 7.8 CVE-2021-1979 Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… Aqt1000 Firmware Mitigation only Fix from $1,9502021-11-12 HIGH 7.8 CVE-2021-30254 Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdr… Apq8009 Firmware Mitigation only Fix from $1,9502021-11-12 HIGH 7.8 CVE-2021-30255 Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Apq8009 Firmware Mitigation only Fix from $1,9502021-11-12 HIGH 7.8 CVE-2021-30259 Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… Aqt1000 Firmware Mitigation only Fix from $1,9502021-11-12 HIGH 7.8 CVE-2021-30263 Possible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in Snapdragon Compute,… Aqt1000 Firmware Patch available Fix from $1,9502021-11-12 HIGH 7.5 CVE-2021-1982 Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon C… Ar8035 Firmware Mitigation only Fix from $1,9502021-11-12 MEDIUM 6.7 CVE-2021-30264 Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snap… Apq8009 Firmware Mitigation only Fix from $1,6002021-11-12 MEDIUM 6.7 CVE-2021-30265 Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in… Apq8053 Firmware Patch available Fix from $1,6002021-11-12 MEDIUM 6.7 CVE-2021-30266 Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Co… Apq8009 Firmware Patch available Fix from $1,6002021-11-12 MEDIUM 5.5 CVE-2021-1924 Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdrago… Apq8009 Firmware Mitigation only Fix from $1,6002021-11-12 HIGH 7.8 CVE-2021-1912 Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Sna… Aqt1000 Firmware Mitigation only Fix from $1,9502021-11-12 HIGH 7.0 CVE-2021-1921 Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Co… Aqt1000 Firmware Mitigation only Fix from $1,9502021-11-12 MEDIUM 5.3 CVE-2021-1903 Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response frame in Snap… Aqt1000 Firmware Mitigation only Fix from $1,6002021-11-12 HIGH 7.8 CVE-2021-30315 Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto Mdm9628 Firmware Patch available Fix from $1,9502021-10-20 HIGH 7.8 CVE-2021-30316 Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, Snapdragon… Ar8031 Firmware Patch available Fix from $1,9502021-10-20 CRITICAL 9.1 CVE-2021-1980 Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit… Apq8053 Firmware Patch available Fix from $2,3002021-10-20 CRITICAL 9.1 CVE-2021-30304 Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compu… Qca2062 Firmware Mitigation only Fix from $2,3002021-10-20 HIGH 7.8 CVE-2021-1983 Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.8 CVE-2021-1984 Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdrag… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.8 CVE-2021-30256 Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Conn… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.8 CVE-2021-30257 Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, S… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.8 CVE-2021-30258 Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20