Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2021-35086

Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Affected Products : qca6390_firmware qca6391_firmware qca6426_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sd_8_gen1_5g_firmware sd855_firmware sd865_5g_firmware +100 more products
EPSS Score: %0.24

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
7.1

HIGH

CVE-2021-35085

Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Affected Products : aqt1000_firmware qca6390_firmware qca6391_firmware qca6420_firmware qca6426_firmware qca6430_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware +130 more products
EPSS Score: %0.04

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
7.1

HIGH

CVE-2021-35084

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...

Affected Products : aqt1000_firmware qca6390_firmware qca6391_firmware qca6420_firmware qca6426_firmware qca6430_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware +174 more products
EPSS Score: %0.04

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
9.4

HIGH

CVE-2021-35083

Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon I...

Affected Products : aqt1000_firmware qca6390_firmware qca6391_firmware qca6420_firmware qca6426_firmware qca6430_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware +337 more products
EPSS Score: %0.16

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
9.3

HIGH

CVE-2021-35082

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has been received in Snapdragon Industrial IOT...

Affected Products : qca9377_firmware mdm9206_firmware qca9367_firmware mdm9206 qca9367 qca9377
EPSS Score: %0.17

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
10.0

HIGH

CVE-2021-35081

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Indu...

Affected Products : aqt1000_firmware qca6390_firmware qca6391_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware sa8150p_firmware sa8155p_firmware sa8195p_firmware +136 more products
EPSS Score: %0.32

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-35080

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

Affected Products : sw5100_firmware sw5100p_firmware wcd9385_firmware wcn3980_firmware wcn3988_firmware wcn3998_firmware wsa8810_firmware wsa8815_firmware wsa8830_firmware wsa8835_firmware +40 more products
EPSS Score: %0.04

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
6.2

MEDIUM

CVE-2021-35079

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

Affected Products : aqt1000_firmware qca6390_firmware qca6391_firmware qca6420_firmware qca6426_firmware qca6430_firmware qca6436_firmware sd855_firmware sd865_5g_firmware sd870_firmware +112 more products
EPSS Score: %0.02

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-35078

Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snap...

Affected Products : aqt1000_firmware qca6390_firmware qca6391_firmware qca6420_firmware qca6426_firmware qca6430_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware +204 more products
EPSS Score: %0.39

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
8.4

HIGH

CVE-2021-35077

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Affected Products : qca6390_firmware qca6391_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware sa8150p_firmware +132 more products
EPSS Score: %0.10

Published: Feb. 11, 2022

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-35076

Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Affected Products : qca6390_firmware qca6391_firmware qca6426_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sd_8_gen1_5g_firmware sd855_firmware sd865_5g_firmware +104 more products
EPSS Score: %0.25

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
8.4

HIGH

CVE-2021-35075

Possible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Affected Products : qca6391_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware sa8150p_firmware sa8155p_firmware +88 more products
EPSS Score: %0.09

Published: Feb. 11, 2022

Modified: Nov. 21, 2024
8.4

HIGH

CVE-2021-35074

Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Affected Products : qca6391_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware sa8150p_firmware sa8155p_firmware +72 more products
EPSS Score: %0.09

Published: Feb. 11, 2022

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-35073

Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Affected Products : qca6390_firmware qca6391_firmware qca6426_firmware qca6436_firmware qca6595au_firmware qca6696_firmware sd_8_gen1_5g_firmware sd855_firmware sd865_5g_firmware sd870_firmware +102 more products
EPSS Score: %0.24

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-35072

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

Affected Products : qca6574au_firmware sw5100_firmware sw5100p_firmware wcd9341_firmware wcn3980_firmware wcn3988_firmware wcn3998_firmware wsa8810_firmware wsa8815_firmware wsa8830_firmware +154 more products
EPSS Score: %0.15

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
5.5

MEDIUM

CVE-2021-35071

Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapd...

Affected Products : aqt1000_firmware qam8295p_firmware qca6390_firmware qca6391_firmware qca6426_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware +332 more products
EPSS Score: %0.11

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2021-35070

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile...

Affected Products : wcn3980_firmware wsa8810_firmware wsa8815_firmware wcd9370_firmware wcd9375_firmware wcn3950_firmware qcm6125_firmware qcs6125_firmware sd665_firmware qcm6125 +8 more products
EPSS Score: %0.09

Published: Jun. 14, 2022

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2021-35069

Improper validation of data length received from DMA buffer can lead to memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Sn...

Affected Products : aqt1000_firmware qca6390_firmware qca6391_firmware qca6426_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware +372 more products
EPSS Score: %0.12

Published: Feb. 11, 2022

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2021-35068

Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdr...

Affected Products : aqt1000_firmware qca6390_firmware qca6391_firmware qca6426_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware +190 more products
EPSS Score: %0.22

Published: Feb. 11, 2022

Modified: Nov. 21, 2024
8.1

HIGH

CVE-2021-35067

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data (e.g., an attacker who sniffs a Close message can transmit an acceptable Open message)....

Affected Products : msg100_firmware msg100
EPSS Score: %0.22

Published: Oct. 07, 2021

Modified: Nov. 21, 2024

Showing 20 of 291269 Results

Latest CVE Feed

7.8

7.1

7.1

9.4

9.3

10.0

6.5

6.2

7.8

8.4

7.8

8.4

8.4

7.8

7.8

5.5

6.5

7.8

9.8

8.1

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable