Vulnerabilities of Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2021-35069 | Improper validation of data length received from DMA buffer can lead to memory corruption | 7.8 High | Feb 11, 2022 |
| CVE-2021-30266 | Possible use after free due to improper memory validation when initializing new interface via Interface add command in… | 6.7 Medium | Nov 12, 2021 |
| CVE-2021-1945 | Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute,… | 7.5 High | Jul 13, 2021 |
| CVE-2020-11304 | Possible out of bound read in DRM due to improper buffer length check | 7.8 High | Jun 9, 2021 |
| CVE-2020-11298 | While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared… | 7.8 High | Jun 9, 2021 |
| CVE-2020-11178 | Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with… | Not rated | Jun 9, 2021 |
| CVE-2020-11252 | Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in… | 7.2 High | Apr 7, 2021 |
| CVE-2020-11221 | Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form… | Not rated | Mar 17, 2021 |
| CVE-2020-3664 | Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in… | Not rated | Feb 22, 2021 |
| CVE-2020-11198 | Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to… | Not rated | Feb 22, 2021 |
| CVE-2020-3684 | u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL… | Not rated | Nov 2, 2020 |
| CVE-2020-3690 | u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in… | Not rated | Nov 2, 2020 |
| CVE-2020-3667 | u'Buffer Overflow in mic calculation for WPA due to copying data into buffer without validating the length of buffer' in… | Not rated | Sep 8, 2020 |
| CVE-2020-3644 | u'Information disclosure issue occurs as in current logic Secure Touch session is released without terminating display… | Not rated | Sep 8, 2020 |
| CVE-2020-3619 | u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation… | Not rated | Sep 8, 2020 |
| CVE-2019-14119 | u'While processing SMCInvoke asynchronous message header, message count is modified leading to a TOCTOU race condition… | Not rated | Sep 8, 2020 |
| CVE-2019-14076 | Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in… | Not rated | Jun 22, 2020 |
| CVE-2019-14077 | Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in… | Not rated | Jun 2, 2020 |
| CVE-2019-14043 | Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon… | Not rated | Jun 2, 2020 |
| CVE-2019-14042 | Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in… | Not rated | Jun 2, 2020 |
| CVE-2019-14116 | Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are… | Not rated | Apr 16, 2020 |
| CVE-2019-14009 | Out of bound memory access while processing TZ command handler due to improper input validation on response length… | Not rated | Apr 16, 2020 |
| CVE-2019-14007 | Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a… | Not rated | Apr 16, 2020 |
| CVE-2019-10608 | Information disclosure issue occurs as there is no binding between the secure keypad session and the secure display… | Not rated | Apr 16, 2020 |
| CVE-2019-10589 | Lack of length check of response buffer can lead to buffer over-flow while GP command response buffer handling in… | Not rated | Apr 16, 2020 |
Other Qualcomm, Inc. products
Snapdragon 997
Android for MSM, Firefox OS for MSM, QRD Android 306
All Qualcomm products 194
Snapdragon Mobile, Snapdragon Wear 132
Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear 123
Snapdragon Mobile 114
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 73
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 50
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking 47
Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 45
Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables 41
Snapdragon Automobile, Snapdragon Mobile 39