
CVE-2021-35100
https://notcve.org/view.php?id=CVE-2021-35100
14 Jun 2022 — Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Una posible lectura excesiva del búfer debido al cálculo incorrecto de la longitud de la cadena mientras es analizado la etiqueta Id3 en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I... • https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin • CWE-125: Out-of-bounds Read •

CVE-2021-30350
https://notcve.org/view.php?id=CVE-2021-30350
14 Jun 2022 — Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables Una falta de verificación del tamaño del encabezado de MBN contra el búfer de entrada puede conllevar a una corrupción de la memoria en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables • https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin • CWE-1284: Improper Validation of Specified Quantity in Input •

CVE-2021-30347
https://notcve.org/view.php?id=CVE-2021-30347
14 Jun 2022 — Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Una comprobación de integridad inapropiada puede conllevar a una condición de carrera entre las tareas PDCP y RRC? justo después de recibir un paquete de comando RRC válido en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, ... • https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •

CVE-2021-30344
https://notcve.org/view.php?id=CVE-2021-30344
14 Jun 2022 — Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Una autorización inapropiada de un comando de modo de seguridad LTE reproducido puede conllevar a una denegación de servicio en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industri... • https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin •

CVE-2021-30343
https://notcve.org/view.php?id=CVE-2021-30343
14 Jun 2022 — Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile Una comprobación de integridad inapropiada puede conllevar a una condición de carrera entre las tareas PDCP y RRC? después de que haya sido recibido un paquete de comando RRC válido en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IO... • https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •

CVE-2021-30342
https://notcve.org/view.php?id=CVE-2021-30342
14 Jun 2022 — Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables Una comprobación de integridad inapropiada puede conllevar a una condición de carrera entre las tareas PDCP y RRC? después de que haya sido recibido un paquete de comando RRC válido en Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer ... • https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •

CVE-2021-30341
https://notcve.org/view.php?id=CVE-2021-30341
14 Jun 2022 — Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables Una comprobación inapropiada del tamaño del búfer del paquete DSM recibido puede conllevar a una corrupción de la memoria en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon... • https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin • CWE-787: Out-of-bounds Write •

CVE-2021-30334
https://notcve.org/view.php?id=CVE-2021-30334
14 Jun 2022 — Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables Un posible uso de memoria previamente liberada debido a una falta de comprobación nula del estado del archivo DRM después de la liberación de la estructura del archivo en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu... • https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin • CWE-416: Use After Free •

CVE-2021-30281
https://notcve.org/view.php?id=CVE-2021-30281
14 Jun 2022 — Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Posible acceso no autorizado a un espacio seguro debido a una comprobación incorrecta de los datos permitidos mientras se parpadea la configuración de disposit... • https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin •

CVE-2022-22068
https://notcve.org/view.php?id=CVE-2022-22068
14 Jun 2022 — kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Un evento del kernel puede contener contenido inesperado que no es generado por el software de la NPU en el modo de ejecución asíncrono en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con... • https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin • CWE-416: Use After Free •