CVE-2022-25656

The CVE-2022-25656 entry describes an integer overflow and memory corruption caused by improper validation of the buffer size written to the console when computing the payload size in Qualcomm Snapdragon components. Affected products include Snapdragon Auto, Compute, Connectivity, Industrial IOT,...

CVE-2022-25653

CVE-2022-25653 is a buffer over-read in Qualcomm Snapdragon video processing of AVI files that leads to information disclosure. The issue affects Snapdragon components and is tied to an information-disclosure vulnerability from reading AVI data, with local attack vector and low attack complexity ...

CVE-2022-22095

Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-22095

CVE-2022-22095 describes memory corruption in the Qualcomm synx driver due to a use-after-free condition when accessing object handles without acquiring a lock. Affected components include the Qualcomm synx driver used in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, and...

CVE-2022-22094

CVE-2022-22094 describes memory corruption in the Linux kernel caused by a race condition when obtaining a mapping reference in Qualcomm Snapdragon GPUs/CPUs. The issue affects Snapdragon product families including Compute, Connectivity, Industrial IoT, and Mobile, and stems from synchronization ...

CVE-2022-22094

memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-22093

CVE-2022-22093 affects Qualcomm Snapdragon components (Compute, Connectivity, Industrial IOT, Mobile). The issue is memory corruption or temporary DoS caused by improper handling of concurrent hypervisor operations to attach/detach IRQs from virtual interrupt sources. Root cause: concurrency hand...

CVE-2022-22093

Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-22092

CVE-2022-22092 describes memory corruption in the Qualcomm Snapdragon kernel caused by a use-after-free in the kernel, affecting Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IoT, and Snapdragon Mobile. The vulnerability is locally exploitable with low attack complexity and r...

CVE-2022-22092

Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-22091

CVE-2022-22091 affects Qualcomm’s Snapdragon family (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Wearables). The issue is improper authorization of a replayed LTE securityModeCommand, which can cause DoS. The available documents identify the vulnerable surface as Qualcomm’s...

CVE-2022-22074

CVE-2022-22074 describes a memory corruption due to an integer overflow in the Audio component of Qualcomm’s embedded platform software affecting Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables. The root cause is integer overflow during W...

CVE-2022-22066

CVE-2022-22066 is associated with a buffer length check flaw that can cause memory corruption when processing commands from HLOS in Qualcomm Snapdragon embedded software. Connected sources (PT-2022-4881) specify this as a buffer length check issue affecting Snapdragon Auto, Compute, Connectivity,...

[SECURITY] Fedora 37 Update: moby-engine-20.10.18-1.fc37

Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between - and they don'...

PT-2022-33617 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.7 through v5.19.1 Description: The issue concerns a use-after-free read in the compute effective progs function. It was introduced in version v5.7 and fixed in version v5.19.2. The actual impact and attack plausibilit...

CVE-2022-25659

Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-25657

Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25658

Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2022-22070

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22080

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...