Browse CVEs

HIGH 7.8 CVE-2021-30288 Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, S… Apq8009 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.8 CVE-2021-30291 Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.8 CVE-2021-30292 Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.8 CVE-2021-30305 Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon… Qca6174a Firmware Patch available Fix from $1,9502021-10-20 HIGH 7.5 CVE-2021-30302 Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Conne… Aqt1000 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.5 CVE-2021-30310 Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdrago… Apq8009 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.5 CVE-2021-30312 Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdrago… Apq8053 Firmware Patch available Fix from $1,9502021-10-20 HIGH 7.1 CVE-2021-1985 Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivi… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.1 CVE-2021-30297 Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdragon Comp… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.1 CVE-2021-30306 Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapd… Apq8053 Firmware Patch available Fix from $1,9502021-10-20 CRITICAL 9.1 CVE-2021-1977 Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapd… Apq8009 Firmware Patch available Fix from $2,3002021-10-20 HIGH 8.6 CVE-2020-11303 Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity,… Apq8009 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 8.4 CVE-2021-1913 Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdrago… Aqt1000 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 8.4 CVE-2021-1917 Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag… Apq8017 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 8.4 CVE-2021-1932 Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdrago… Aqt1000 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 8.4 CVE-2021-1949 Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… Apq8009 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.8 CVE-2021-1959 Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons… Apq8009 Firmware Mitigation only Fix from $1,9502021-10-20 HIGH 7.5 CVE-2021-1936 Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… Apq8009w Firmware Mitigation only Fix from $1,9502021-10-20 MEDIUM 6.7 CVE-2021-1966 Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdrag… Aqt1000 Firmware Patch available Fix from $1,6002021-10-20 MEDIUM 5.5 CVE-2021-1968 Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user spa… Aqt1000 Firmware Patch available Fix from $1,6002021-10-20 MEDIUM 5.5 CVE-2021-1969 Improper validation of kernel buffer address while copying information back to user buffer can lead to kernel memory information exposure to user spa… Aqt1000 Firmware Patch available Fix from $1,6002021-10-20 MEDIUM 5.3 CVE-2021-1967 Possible stack buffer overflow due to lack of check on the maximum number of post NAN discovery attributes while processing a NAN Match event in Snap… Apq8009 Firmware Patch available Fix from $1,6002021-10-20 HIGH 7.8 CVE-2021-30260 Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration comma… Apq8009 Firmware Mitigation only Fix from $1,9502021-09-17 HIGH 7.8 CVE-2021-30261 Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon… Apq8009 Firmware Mitigation only Fix from $1,9502021-09-17 CRITICAL 9.8 CVE-2021-1976 A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Co… Apq8009 Firmware Patch available Fix from $2,3002021-09-17 HIGH 7.8 CVE-2021-1947 Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdrag… Apq8009w Firmware Patch available Fix from $1,9502021-09-17 MEDIUM 5.5 CVE-2021-1939 Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, … Apq8009 Firmware Patch available Fix from $1,6002021-09-17 HIGH 7.8 CVE-2021-30295 Possible heap overflow due to improper validation of local variable while storing current task information locally in Snapdragon Auto, Snapdragon Com… Apq8017 Firmware Mitigation only Fix from $1,9502021-09-09 HIGH 7.0 CVE-2021-30290 Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Conn… Qca6174a Firmware Patch available Fix from $1,9502021-09-09 MEDIUM 5.5 CVE-2021-30294 Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon Auto, Snapdragon Connectivity… Qca6174a Firmware Patch available Fix from $1,6002021-09-09