Snapdragon Wired Infrastructure And Networking (Qualcomm Inc.) - vulnerabilities (CVEs)

336 CVEs, 0 in the last 30 days, 335 known versions, newest CVE from 2022-12-13. Vendor: Qualcomm Inc..

CVEs of Snapdragon Wired Infrastructure And Networking

CVE-2022-33235 - CVSS 8.2 (high), 2022-12-13: Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-33238 - CVSS 7.5 (high), 2022-12-13: Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-25677 - CVSS 7.8 (high), 2022-12-13: Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon…
CVE-2022-33237 - CVSS 7.5 (high), 2022-11-15: Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-33236 - CVSS 7.5 (high), 2022-11-15: Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2022-33239 - CVSS 7.5 (high), 2022-11-15: Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute,…
CVE-2022-25667 - CVSS 7.5 (high), 2022-11-15: Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking
CVE-2022-25749 - CVSS 7.5 (high), 2022-10-19: Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25718 - CVSS 9.8 (critical), 2022-10-19: Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2022-25748 - CVSS 9.8 (critical), 2022-10-19: Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-25666 - CVSS 6.7 (medium), 2022-10-19: Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2022-25736 - CVSS 7.5 (high), 2022-10-19: Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2022-25719 - CVSS 9.1 (critical), 2022-10-19: Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2022-25652 - CVSS 9 (critical), 2022-09-16: Cryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure and Networking
CVE-2022-22062 - CVSS 9.1 (critical), 2022-09-02: An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-35129 - CVSS 7.8 (high), 2022-06-14: Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-35104 - CVSS 9.8 (critical), 2022-06-14: Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30345 - CVSS 6.5 (medium), 2022-06-14: RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables,…
CVE-2021-35071 - CVSS 5.5 (medium), 2022-06-14: Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto,…
CVE-2021-30349 - CVSS 8.2 (high), 2022-06-14: Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30346 - CVSS 6.5 (medium), 2022-06-14: RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables,…
CVE-2021-30339 - CVSS 9 (critical), 2022-06-14: Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon…
CVE-2021-30281 - CVSS 8.4 (high), 2022-06-14: Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon…
CVE-2021-35103 - CVSS 7.8 (high), 2022-04-01: Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon…
CVE-2021-35088 - CVSS 9.1 (critical), 2022-04-01: Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1950 - CVSS 7.8 (high), 2022-04-01: Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1942 - CVSS 9.3 (critical), 2022-04-01: Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30317 - CVSS 9.3 (critical), 2022-02-11: Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-35069 - CVSS 7.8 (high), 2022-02-11: Improper validation of data length received from DMA buffer can lead to memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30325 - CVSS 6.7 (medium), 2022-02-11: Possible out of bound access of DCI resources due to lack of validation process and resource allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30324 - CVSS 6.7 (medium), 2022-02-11: Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in Snapdragon Auto,…
CVE-2021-30313 - CVSS 6.7 (medium), 2022-01-13: Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30285 - CVSS 9.3 (critical), 2022-01-13: Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30351 - CVSS 9.8 (critical), 2022-01-03: An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon…
CVE-2021-30279 - CVSS 7.8 (high), 2022-01-03: Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapdragon…
CVE-2021-30303 - CVSS 7.8 (high), 2022-01-03: Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30274 - CVSS 8.4 (high), 2022-01-03: Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30278 - CVSS 7.1 (high), 2022-01-03: Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30298 - CVSS 7.8 (high), 2022-01-03: Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon…
CVE-2021-30337 - CVSS 8.4 (high), 2022-01-03: Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30272 - CVSS 7.8 (high), 2022-01-03: Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30276 - CVSS 9.3 (critical), 2022-01-03: Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon…
CVE-2021-30282 - CVSS 8.4 (high), 2022-01-03: Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30335 - CVSS 8.4 (high), 2022-01-03: Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneously in Snapdragon Auto, Snapdragon…
CVE-2021-30271 - CVSS 7.8 (high), 2022-01-03: Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30275 - CVSS 9.3 (critical), 2022-01-03: Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute,…
CVE-2020-11263 - CVSS 8.2 (high), 2022-01-03: An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2021-30270 - CVSS 7.8 (high), 2022-01-03: Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencing it in Snapdragon Auto, Snapdragon…
CVE-2021-30269 - CVSS 7.8 (high), 2022-01-03: Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-1894 - CVSS 7.8 (high), 2022-01-03: Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30259 - CVSS 7.8 (high), 2021-11-12: Possible out of bound access due to improper validation of function table entries in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2021-1924 - CVSS 9 (critical), 2021-11-12: Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30266 - CVSS 6.7 (medium), 2021-11-12: Possible use after free due to improper memory validation when initializing new interface via Interface add command in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-30264 - CVSS 6.7 (medium), 2021-11-12: Possible use after free due improper validation of reference from call back to internal store table in Snapdragon Auto, Snapdragon Connectivity, Snapdragon…
CVE-2021-1903 - CVSS 5.3 (medium), 2021-11-12: Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response frame in Snapdragon…
CVE-2021-30312 - CVSS 7.5 (high), 2021-10-20: Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1980 - CVSS 9.1 (critical), 2021-10-20: Possible buffer over read due to lack of length check while parsing beacon IE response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30302 - CVSS 7.5 (high), 2021-10-20: Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-30288 - CVSS 8.4 (high), 2021-10-20: Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-11303 - CVSS 8.6 (high), 2021-10-20: Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity,…
CVE-2021-1932 - CVSS 8.4 (high), 2021-10-20: Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto,…
CVE-2021-1913 - CVSS 8.4 (high), 2021-10-20: Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-30260 - CVSS 8.4 (high), 2021-09-17: Possible Integer overflow to buffer overflow issue can occur due to improper validation of input parameters when extscan hostlist configuration command is…
CVE-2021-1976 - CVSS 9.8 (critical), 2021-09-17: A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1947 - CVSS 8.4 (high), 2021-09-17: Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2021-1974 - CVSS 7.5 (high), 2021-09-09: Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1971 - CVSS 7.5 (high), 2021-09-09: Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2021-1960 - CVSS 6.5 (medium), 2021-09-09: Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute,…
CVE-2021-1962 - CVSS 6.7 (medium), 2021-09-09: Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size…
CVE-2021-1948 - CVSS 7.5 (high), 2021-09-09: Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1941 - CVSS 7.5 (high), 2021-09-09: Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-1909 - CVSS 7.8 (high), 2021-09-09: Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-1972 - CVSS 9.8 (critical), 2021-09-08: Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-1928 - CVSS 6.1 (medium), 2021-09-08: Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon…
CVE-2020-11301 - CVSS 9.1 (critical), 2021-09-08: Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon…
CVE-2021-1954 - CVSS 7.5 (high), 2021-07-13: Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1953 - CVSS 7.5 (high), 2021-07-13: Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon…
CVE-2021-1965 - CVSS 9.8 (critical), 2021-07-13: Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-1945 - CVSS 7.5 (high), 2021-07-13: Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2021-1964 - CVSS 7.5 (high), 2021-07-13: Possible buffer over read due to improper validation of IE size while parsing beacon from peer device in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2021-1938 - CVSS 7.5 (high), 2021-07-13: Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2021-1943 - CVSS 7.5 (high), 2021-07-13: Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto,…
CVE-2021-1887 - CVSS 7.5 (high), 2021-07-13: An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure and Networking
CVE-2020-11306 - CVSS 7.8 (high), 2021-06-09: Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
CVE-2020-11304 - CVSS 7.8 (high), 2021-06-09: Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
CVE-2021-1937 - CVSS 7.5 (high), 2021-06-09: Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon…
CVE-2020-11267 - CVSS 8.4 (high), 2021-06-09: Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon…
CVE-2020-11298 - CVSS 7.8 (high), 2021-06-09: While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to…
CVE-2020-11256 - CVSS 8.8 (high), 2021-06-09: Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking
CVE-2020-11259 - CVSS 8.8 (high), 2021-06-09: Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking
CVE-2020-11159 - CVSS 9.1 (critical), 2021-06-09: Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in…
CVE-2020-11235 - CVSS 7.8 (high), 2021-06-09: Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon…
CVE-2020-11250 - CVSS 7 (high), 2021-06-09: Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…
CVE-2020-11258 - CVSS 8.8 (high), 2021-06-09: Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking
CVE-2020-11266 - CVSS 6.5 (medium), 2021-06-09: Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking
CVE-2020-11134 - CVSS 9.8 (critical), 2021-06-09: Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a…
CVE-2020-11178 - CVSS 7.8 (high), 2021-06-09: Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its RoT memory in…
CVE-2020-11241 - CVSS 7.5 (high), 2021-06-09: Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon Auto, Snapdragon…
CVE-2020-11257 - CVSS 8.8 (high), 2021-06-09: Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking
CVE-2020-11265 - CVSS 5.5 (medium), 2021-06-09: Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking