CVE-2022-22080

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22096

CVE-2022-22096 is a Qualcomm Bluetooth vulnerability in the Bluetooth HOST on Snapdragon platforms (Connectivity + Snapdragon Mobile) caused by a stack-based buffer overflow when extracting data via the command length parameter, leading to memory corruption. It is rated Critical (CVSS v3.1: 9.8, ...

CVE-2022-22070

CVE-2022-22070 : Memory corruption in audio due to an unchecked/invalid routing address in the APR Routing table in Qualcomm Snapdragon family products (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). The issue is described across multiple sources (NV...

CVE-2022-22069

CVE-2022-22069 affects Qualcomm Snapdragon devices when keyprotect is disabled. The issue: unencrypted keybox stored in RPMB, enabling a cryptographic issue across Snapdragon Auto, Compute, Connectivity, Industrial IOT, Mobile, and Wearables. Root cause: keyprotect-off condition allows RPMB keybo...

CVE-2022-22067

CVE-2022-22067 affects Qualcomm Snapdragon modems (Auto/Compute/Connectivity/Mobile). The issue is a memory leak during NSA RRC Reconfiguration with an invalid Radio Bearer Config, rooted in the modem component. Documented impact includes high confidentiality, integrity, and availability concerns...

CVE-2022-22062

CVE-2022-22062 describes an out-of-bounds read during server certificate parsing caused by an improper length check in Qualcomm Snapdragon components (Snapdragon Auto, Compute, Connectivity, and other Snapdragon family products). The issue affects Snapdragon lines including Snapdragon Auto, Compu...

CVE-2022-22061

Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

CVE-2022-22059

CVE-2022-22059 describes a memory corruption due to an out-of-bounds read when parsing a video file in Qualcomm Snapdragon components. Affected products include Snapdragon Auto, Compute, Connectivity, Industrial IOT, and Mobile. The issue is documented with a CVSS base score of 7.8 (Initial), and...

CVE-2022-22061

CVE-2022-22061 is a Qualcomm/Snapdragon vulnerability described as an out-of-bounds write during device ID verification caused by an improper length check before copying data. Affected components are Snapdragon Compute, Snapdragon Connectivity, and Snapdragon Mobile. The CVSS vector indicates Loc...

CVE-2021-35135

CVE-2021-35135 describes a null pointer dereference that may occur during RSA key import in Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). The CVE is tied to Qualcomm closed-source components; vulnerability impact is li...

CVE-2021-35134

CVE-2021-35134 concerns memory corruption caused by insufficient validation of ELF headers, leading to an incorrect buffer size calculation during boot in Qualcomm Snapdragon components (Connectivity, Industrial IOT, Mobile). The issue is described across multiple sources: Qualcomm notes a vulner...

CVE-2021-35133

CVE-2021-35133 refers to a use-after-free in the synx driver within Qualcomm Snapdragon components (Connectivity, Industrial IOT, Mobile). The issue occurs during multiple invocations of synx release calls, i.e., a use-after-free in a driver path. Impact is described as high for confidentiality, ...

CVE-2021-35132

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35133

Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35132

CVE-2021-35132 describes an out-of-bounds write in Qualcomm Snapdragon DSP service (closed-source components) caused by an improper bound check on the response buffer. Affected are multiple Snapdragon line items (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wearables). The i...

CVE-2021-35122

CVE-2021-35122 affects Qualcomm Snapdragon family devices (Auto/Compute/Connectivity/CIoT/Industrial IoT/Mobile/Wearables). The flaw stems from improper input validation, allowing a non-secure region to modify RG permissions of IO space xPUs, enabling local privilege escalation with high impact o...

CVE-2021-35109

The connected PT-2022-10427 entry describes CVE-2021-35109 impacting Qualcomm Snapdragon components: Snapdragon Connectivity and Snapdragon Mobile. Root cause involves possible address manipulation when APP-NS is configuring an RG and attempts to merge address ranges across components. The vulner...

CVE-2021-35109

Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connectivity, Snapdragon Mobile...

CVE-2021-35108

Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon Mobile...

CVE-2021-35108

CVE-2021-35108 concerns Qualcomm/Qualcomm closed‑source components in Snapdragon Connectivity and Snapdragon Mobile. The root cause is improper checking of the AP-S lock bit when verifying secure resource group permissions, which can permit non‑secure read and write access. The CVSSv3.1 base vect...