Qualcomm Sa9000P vulnerabilities
412 vulnerabilities
Known vulnerabilities in Qualcomm Sa9000P, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-1894qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking+117
EPSS score0.15%
Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2021-1950qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking+92EPSS score0.16%
Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and NetworkingCVE-2021-30269qualcommar8031_firmware+116EPSS score0.15%
Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and NetworkingCVE-2021-35114qualcomm, inc.snapdragon auto+2EPSS score0.16%
Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon AutoCVE-2021-35090qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile+56EPSS score0.12%
Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileCVE-2021-35135qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables+168EPSS score0.11%
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesCVE-2021-35101qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon mobile+24EPSS score0.14%
Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, Snapdragon Compute, Snapdragon MobileCVE-2021-35132qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables+110EPSS score0.12%
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesCVE-2021-35115qualcomm, inc.snapdragon auto, snapdragon mobile+28EPSS score0.18%
Improper handling of multiple session supported by PVM backend can lead to use after free in Snapdragon Auto, Snapdragon MobileCVE-2021-35122qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables+101EPSS score0.12%
Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon WearablesCVE-2021-35097qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables+129EPSS score0.18%
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesCVE-2021-35094qualcomm, inc.snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile+81EPSS score0.16%
Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon MobileCVE-2025-21425qualcomm, inc.snapdragon+33EPSS score0.09%
Memory corruption may occur due top improper access control in HAB process.CVE-2025-21487qualcomm, inc.snapdragon+225EPSS score0.26%
Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.CVE-2025-21484qualcomm, inc.snapdragon+173EPSS score0.26%
Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.CVE-2025-21472qualcomm, inc.snapdragon+12EPSS score0.09%
Information disclosure while capturing logs as eSE debug messages are logged.CVE-2025-21444qualcomm, inc.snapdragon+27EPSS score0.10%
Memory corruption while copying the result to the transmission queue in EMAC.CVE-2025-21429qualcomm, inc.snapdragon+182EPSS score0.26%
Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.CVE-2025-21433qualcomm, inc.snapdragon+268EPSS score0.09%
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.CVE-2025-21427qualcomm, inc.snapdragon+172EPSS score0.24%
Information disclosure while decoding this RTP packet Payload when UE receives the RTP packet from the network.