VYPR

Sd460 Firmware

by Qualcomm

CVEs (245)

  • CVE-2021-35077HigFeb 11, 2022
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  • CVE-2021-30318HigFeb 11, 2022
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2021-30337HigJan 3, 2022
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,…

  • CVE-2021-30336HigJan 3, 2022
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-30282HigJan 3, 2022
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired…

  • CVE-2021-30306HigOct 20, 2021
    Qualcomm
    Snapdragon Mobile
    risk 0.55cvss 8.4epss 0.00

    Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

  • CVE-2021-30297HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible out of bound read due to improper validation of packet length while handling data transfer in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-30292HigOct 20, 2021
    Qualcomm
    Snapdragon Compute
    risk 0.55cvss 8.4epss 0.00

    Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-30291HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible memory corruption due to lack of validation of client data used for memory allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-30288HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

  • CVE-2021-30258HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible buffer overflow due to improper size calculation of payload received in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-30257HigOct 20, 2021
    Qualcomm
    Snapdragon Compute
    risk 0.55cvss 8.4epss 0.00

    Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

  • CVE-2021-30256HigOct 20, 2021
    Qualcomm
    Snapdragon Compute
    risk 0.55cvss 8.4epss 0.00

    Possible stack overflow due to improper validation of camera name length before copying the name in VR Service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT

  • CVE-2021-1985HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible buffer over read due to lack of data length check in QVR Service configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-1984HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible buffer overflow due to improper validation of index value while processing the plugin block in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-1983HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible buffer overflow due to improper handling of negative data length while processing write request in VR service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-1949HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

  • CVE-2021-1932HigOct 20, 2021
    Qualcomm
    Snapdragon Compute
    risk 0.55cvss 8.4epss 0.00

    Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,…

  • CVE-2021-1917HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables

  • CVE-2021-1913HigOct 20, 2021
    Qualcomm
    Snapdragon
    risk 0.55cvss 8.4epss 0.00

    Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

Page 4 of 13