2021 CVE Vulnerabilities
23,476 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-35095 | HIGH | 7 | 0.1% | Jun 14, 2022 | Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message ... |
| CVE-2021-35094 | HIGH | 7.8 | 0.2% | Jun 14, 2022 | Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS i... |
| CVE-2021-35092 | MEDIUM | 6.7 | 0.1% | Jun 14, 2022 | Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification... |
| CVE-2021-35091 | HIGH | 7.8 | 0.2% | Jun 14, 2022 | Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connec... |
| CVE-2021-35090 | HIGH | 7.8 | 0.1% | Jun 14, 2022 | Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, S... |
| CVE-2021-35087 | HIGH | 7.5 | 0.6% | Jun 14, 2022 | Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Indu... |
| CVE-2021-35086 | HIGH | 7.5 | 0.6% | Jun 14, 2022 | Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snap... |
| CVE-2021-35085 | HIGH | 7.1 | 0.1% | Jun 14, 2022 | Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snap... |
| CVE-2021-35084 | HIGH | 7.1 | 0.1% | Jun 14, 2022 | Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Co... |
| CVE-2021-35083 | CRITICAL | 9.1 | 0.5% | Jun 14, 2022 | Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon... |
| CVE-2021-35082 | HIGH | 8.1 | 0.5% | Jun 14, 2022 | Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode co... |
| CVE-2021-35081 | CRITICAL | 9.8 | 0.7% | Jun 14, 2022 | Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS... |
| CVE-2021-35080 | MEDIUM | 5.5 | 0.2% | Jun 14, 2022 | Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon In... |
| CVE-2021-35079 | MEDIUM | 5.5 | 0.1% | Jun 14, 2022 | Improper validation of permissions for third party application accessing Telephony service API can lead to information d... |
| CVE-2021-35078 | HIGH | 7.5 | 0.4% | Jun 14, 2022 | Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Sn... |
| CVE-2021-35076 | HIGH | 7.5 | 0.6% | Jun 14, 2022 | Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Aut... |
| CVE-2021-35073 | HIGH | 7.5 | 0.6% | Jun 14, 2022 | Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdrag... |
| CVE-2021-35072 | HIGH | 7.8 | 0.2% | Jun 14, 2022 | Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon ... |
| CVE-2021-35071 | MEDIUM | 5.5 | 0.1% | Jun 14, 2022 | Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to... |
| CVE-2021-35070 | MEDIUM | 5.5 | 0.2% | Jun 14, 2022 | RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosu... |
| CVE-2021-30350 | HIGH | 7.8 | 0.2% | Jun 14, 2022 | Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon C... |
| CVE-2021-30349 | MEDIUM | 6.7 | 0.2% | Jun 14, 2022 | Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapd... |
| CVE-2021-30347 | HIGH | 8.1 | 0.5% | Jun 14, 2022 | Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet h... |
| CVE-2021-30346 | MEDIUM | 5.5 | 0.2% | Jun 14, 2022 | RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdr... |
| CVE-2021-30345 | MEDIUM | 5.5 | 0.2% | Jun 14, 2022 | RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdr... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now