Skip to content

Vulnerabilities of Qualcomm, Inc. Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Is your version affected?

CVE Summary Score Published
CVE-2022-25741 Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon… 7.5 High Nov 15, 2022
CVE-2022-33234 Memory corruption in video due to configuration weakness 7.3 High Nov 15, 2022
CVE-2022-25664 Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute,… 6.2 Medium Oct 12, 2022
CVE-2022-25662 Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon… 5.3 Medium Oct 12, 2022
CVE-2022-22078 Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when… 4.6 Medium Oct 12, 2022
CVE-2022-25706 Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto,… 8.2 High Sep 16, 2022
CVE-2022-22091 Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto,… 7.5 High Sep 16, 2022
CVE-2021-35132 Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon… 8.4 High Sep 2, 2022
CVE-2021-35122 Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto,… 9.3 Critical Sep 2, 2022
CVE-2021-35116 APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there… 7.7 High Jun 14, 2022
CVE-2021-35078 Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in… 7.5 High Jun 14, 2022
CVE-2021-30331 Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon… 5.5 Medium Apr 1, 2022
CVE-2021-30314 Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon… 6.2 Medium Jan 13, 2022
CVE-2021-30295 Possible heap overflow due to improper validation of local variable while storing current task information locally in… 8.4 High Sep 9, 2021
CVE-2021-1929 Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute,… 6.2 Medium Sep 8, 2021
CVE-2020-11294 Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto,… 5.9 Medium May 7, 2021
CVE-2020-11290 Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in… Not rated Mar 17, 2021
CVE-2020-11148 Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and… Not rated Jan 21, 2021
CVE-2020-3673 u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check… Not rated Nov 2, 2020
CVE-2020-3654 u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying… Not rated Nov 2, 2020
CVE-2018-13899 Processing messages after error may result in user after free memory fault in Snapdragon Auto, Snapdragon Compute,… Not rated May 24, 2019
CVE-2018-11967 Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in… Not rated May 24, 2019

Other Qualcomm, Inc. products