2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-30303 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, S... |
| CVE-2021-30298 | HIGH | 7.8 | 0.1% | Jan 3, 2022 | Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between ... |
| CVE-2021-30293 | HIGH | 7.5 | 0.6% | Jan 3, 2022 | Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdr... |
| CVE-2021-30289 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Au... |
| CVE-2021-30283 | MEDIUM | 5.5 | 0.1% | Jan 3, 2022 | Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer... |
| CVE-2021-30282 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdr... |
| CVE-2021-30279 | HIGH | 7.8 | 0.1% | Jan 3, 2022 | Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapd... |
| CVE-2021-30278 | MEDIUM | 5.5 | 0.1% | Jan 3, 2022 | Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, ... |
| CVE-2021-30276 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resourc... |
| CVE-2021-30275 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Sna... |
| CVE-2021-30274 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible integer overflow in access control initialization interface due to lack and size and address validation in Snap... |
| CVE-2021-30273 | HIGH | 7.5 | 0.6% | Jan 3, 2022 | Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdrag... |
| CVE-2021-30272 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in ... |
| CVE-2021-30271 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdra... |
| CVE-2021-30270 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencin... |
| CVE-2021-30269 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon... |
| CVE-2021-30268 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon... |
| CVE-2021-30267 | HIGH | 7.8 | 0.1% | Jan 3, 2022 | Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Sn... |
| CVE-2021-30262 | HIGH | 7.8 | 0.1% | Jan 3, 2022 | Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory ... |
| CVE-2021-1918 | MEDIUM | 6.5 | 0.1% | Jan 3, 2022 | Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT... |
| CVE-2021-1894 | HIGH | 7.8 | 0.2% | Jan 3, 2022 | Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, S... |
| CVE-2021-25994 | HIGH | 8.8 | 1.6% | Jan 3, 2022 | In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user ... |
| CVE-2021-25981 | CRITICAL | 9.8 | 2.5% | Jan 3, 2022 | In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerab... |
| CVE-2021-36751 | MEDIUM | 4.2 | 0.5% | Jan 2, 2022 | ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation (w... |
| CVE-2021-44896 | MEDIUM | 6.1 | 0.9% | Jan 1, 2022 | DMP Roadmap before 3.0.4 allows XSS. |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now