Latest qualcomm sm7250 vulnerabilities since last week (CVE List)

● CVE-2021-30327

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Conne...

Qualcomm Apq8097 Firmware

Qualcomm Apq8097

Google Android

Qualcomm Apq8098

Google Android

Qualcomm Ipq6000

and 152 more

● CVE-2021-30265

Possible memory corruption due to improper validation of memory address while processing user-space IOCTL for clearing Filter and Route statistics in Snapdragon Auto, Snapdragon Compute, Snapdragon Co...

Google Android

Qualcomm Ar8031

and 184 more

● CVE-2021-30264

Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna...

Google Android

Qualcomm Apq8009

Google Android

and 382 more

● CVE-2021-30266

Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer...

Google Android

Qualcomm Apq8009

Google Android

and 402 more

● CVE-2021-30259

Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S...

Google Android

Qualcomm Aqt1000 Firmware

Qualcomm Aqt1000

Google Android

Qualcomm Ar8031

Qualcomm Ar8035 Firmware

and 311 more

● CVE-2021-1903

Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect...

Qualcomm Aqt1000 Firmware

Qualcomm Aqt1000

Google Android

Qualcomm Ar8031

Qualcomm Ar8035 Firmware

Qualcomm Ar8035

and 406 more

● CVE-2021-30255

Possible buffer overflow due to improper input validation in PDM DIAG command in FTM in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

Google Android

Qualcomm Apq8009

Google Android

and 371 more

● CVE-2021-1973

A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 389 more

● CVE-2021-1975

Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indust...

Google Android

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Apq8009w Firmware

Qualcomm Apq8009w

Qualcomm Apq8017 Firmware

and 355 more

● CVE-2021-1979

Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag...

Google Android

Qualcomm Aqt1000 Firmware

Qualcomm Aqt1000

Qualcomm Ar8035 Firmware

Qualcomm Ar8035

Qualcomm Csrb31024 Firmware

and 239 more

● CVE-2021-1924

Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Con...

Google Android

Qualcomm Apq8009 Firmware

Qualcomm Apq8009

Qualcomm Apq8009w Firmware

Qualcomm Apq8009w

Qualcomm Apq8016 Firmware

and 629 more

● CVE-2021-1982

Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon In...

Google Android

Qualcomm Ar8035

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

Google Android

and 139 more

● CVE-2021-30284

Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 287 more

● CVE-2021-30254

Possible buffer overflow due to improper input validation in factory calibration and test DIAG command in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdra...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 321 more

● CVE-2021-1981

Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IO...

Google Android

Qualcomm Apq8017

Google Android

Qualcomm Ar8035

Qualcomm Msm8917 Firmware

Qualcomm Msm8917

and 175 more

● CVE-2021-1966

Possible buffer overflow due to lack of length check of source and destination buffer before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 124 more

● CVE-2021-30310

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 167 more

● CVE-2021-1949

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind...

Google Android

Qualcomm Apq8009

Google Android

and 273 more

● CVE-2021-30257

Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

Google Android

Qualcomm Apq8017

Google Android

and 149 more

● CVE-2021-1917

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables

Google Android

Qualcomm Apq8017

Google Android

and 163 more

● CVE-2021-1936

Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...

Google Android

Qualcomm Apq8017

Google Android

and 239 more

● CVE-2021-1977

Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 251 more

● CVE-2021-30297

Google Android

Qualcomm Apq8017

Google Android

and 173 more

● CVE-2021-1983

Google Android

Qualcomm Apq8017

Google Android

Qualcomm Apq8064au Firmware

and 185 more

● CVE-2021-30312

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon...

Google Android

and 383 more

● CVE-2021-30291

Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indu...

Google Android

Qualcomm Apq8017

Google Android

Qualcomm Apq8064au Firmware

and 175 more

● CVE-2021-1984

Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdrago...

Google Android

Qualcomm Apq8017

Google Android

Qualcomm Apq8064au Firmware

and 185 more

● CVE-2021-30258

Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industr...

Google Android

Qualcomm Apq8017

Google Android

Qualcomm Apq8064au Firmware

and 189 more

● CVE-2021-1985

Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial ...

Google Android

Qualcomm Apq8017

Google Android

Qualcomm Apq8064au Firmware

and 185 more

● CVE-2021-1959

Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT...

Google Android

Qualcomm Apq8009

Google Android

and 371 more

● CVE-2021-1961

Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industr...

Google Android

Qualcomm Apq8009

Google Android

and 220 more

● CVE-2021-1963

Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon ...

Google Android

and 218 more

● CVE-2021-1960

Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum...

Qualcomm Aqt1000 Firmware

Qualcomm Aqt1000

Google Android

Qualcomm Ar8031

Qualcomm Ar8035 Firmware

Qualcomm Ar8035

and 270 more

● CVE-2021-1930

Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S...

Google Android

and 188 more

● CVE-2021-1929

Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

Google Android

Qualcomm Msm8996au Firmware

Qualcomm Msm8996au

and 180 more

● CVE-2020-11264

Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna...

Google Android

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

Google Android

and 247 more

● CVE-2020-11301

Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Co...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 529 more

● CVE-2021-1946

Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind...

Google Android

Qualcomm Apq8017

Google Android

and 191 more

● CVE-2021-1948

Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electroni...

Google Android

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

Google Android

and 431 more

● CVE-2021-1935

Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdra...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8037 Firmware

Qualcomm Apq8037

and 347 more

● CVE-2021-1974

Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapd...

Google Android

Qualcomm Ar8035

Qualcomm Ar9380 Firmware

Qualcomm Ar9380

and 375 more

● CVE-2021-1952

Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snap...

Google Android

Qualcomm Ar8031

Google Android

and 209 more

● CVE-2021-1909

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8016 Firmware

and 649 more

● CVE-2021-1941

Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...

Google Android

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

Qualcomm Apq8096au Firmware

Qualcomm Apq8096au

Qualcomm Aqt1000 Firmware

and 425 more

● CVE-2021-1934

Possible memory corruption due to improper check when application loader object is explicitly destructed while application is unloading in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,...

Google Android

Qualcomm Apq8017

Google Android

and 189 more

● CVE-2021-1923

Google Android

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

Google Android

and 163 more

● CVE-2021-1919

Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indu...

Google Android

Qualcomm Apq8009

Google Android

and 305 more

● CVE-2021-1920

Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...

Google Android

Qualcomm Apq8009

Google Android

and 337 more

● CVE-2021-1976

A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind...

Google Android

Qualcomm Apq8009

Google Android

and 489 more

● CVE-2021-1947

Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon We...

Google Android

Qualcomm Ar9380 Firmware

and 169 more

Latest qualcomm sm7250 Vulnerabilities

Company

Resources

Contact