Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2021-1876
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED
Explain CVE-2021-1877
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}]
CVE State: PUBLISHED
Explain CVE-2021-1878
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. An attacker in a privileged network position may be able to leak sensitive user information.
Affected Products: macOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED
Explain CVE-2021-1879
This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited..
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212256'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212257'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212258'}]
CVE State: PUBLISHED
Explain CVE-2021-1880
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: watchOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED
Explain CVE-2021-1881
An out-of-bounds read was addressed with improved input validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted font file may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}]
CVE State: PUBLISHED
Explain CVE-2021-1882
A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to gain elevated privileges.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}]
CVE State: PUBLISHED
Explain CVE-2021-1883
This issue was addressed with improved checks. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted server messages may lead to heap corruption.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212530'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212531'}]
CVE State: PUBLISHED
Explain CVE-2021-1884
A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. A remote attacker may be able to cause a denial of service.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212530'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212531'}]
CVE State: PUBLISHED
Explain CVE-2021-1885
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected Products: iOS and iPadOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}]
CVE State: PUBLISHED
Explain CVE-2021-1886
Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1887
An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1888
Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1889
Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1890
Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1891
A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1892
Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1894
Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1895
Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Affected Products: Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1896
Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity
Affected Products: Snapdragon Compute, Snapdragon Connectivity
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1897
Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1898
Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1899
Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Affected Products: Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1900
Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1901
Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1903
Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1904
Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1905
Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1906
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1907
Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1909
Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1910
Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1912
Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1913
Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1914
Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1915
Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1916
Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1917
Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1918
Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected Products: Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1919
Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1920
Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1921
Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1923
Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1924
Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/november-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1925
Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1927
Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1928
Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1929
Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1930
Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1931
Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1932
Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1933
UE assertion is possible due to improper validation of invite message with SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1934
Possible memory corruption due to improper check when application loader object is explicitly destructed while application is unloading in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1935
Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1936
Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1937
Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/june-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1938
Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1939
Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1940
Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}, {'url': 'http://packetstormsecurity.com/files/172856/Qualcomm-NPU-Use-After-Free-Information-Leak.html'}]
CVE State: PUBLISHED
Explain CVE-2021-1941
Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1942
Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1943
Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1945
Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1946
Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1947
Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/august-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1948
Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1949
Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1950
Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1952
Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1953
Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1954
Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1955
Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1956
Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1957
Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1958
A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/september-2021-bulletin'}]
CVE State: PUBLISHED
Explain CVE-2021-1959
Possible memory corruption due to lack of bound check of input index in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Affected Products: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin'}]
CVE State: PUBLISHED