Memory corruption

Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

Memory corruption

Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOT...

Memory corruption

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

Null pointer dereference

A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-25668

Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-25668

The CVE-2022-25668 entry describes memory corruption in Qualcomm Snapdragon video driver caused by a double-free while parsing an ASF clip. Affected products include Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables. The issue arises in the...

CVE-2022-25659

CVE-2022-25659 describes a memory corruption due to a buffer overflow when parsing MKV clips with an invalid bitmap size in Qualcomm Snapdragon components (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables). Connected sources indicate the issue affects a ...

CVE-2022-25658

CVE-2022-25658 is a memory corruption issue caused by incorrect pointer arithmetic when changing endianness in Qualcomm Snapdragon video parser code. Affected are Snapdragon families including Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables. Root ca...

CVE-2022-22097

CVE-2022-22097 affects Qualcomm Snapdragon Consumer IoT graphics driver; memory corruption via use-after-free when multiple threads invoke the driver. Root cause identified as use-after-free in the graphics stack, leading to potential memory corruption with high impact on confidentiality/integrit...

CVE-2022-22097

Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. in Snapdragon Consumer IOT...

CVE-2022-22080

The CVE-2022-22080 entry concerns Qualcomm Snapdragon firmware: improper validation of a backend id in the PCM routing process can cause memory corruption across Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, and Voice & Music components. Root cause is memory-corrup...

CVE-2022-22080

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22070

CVE-2022-22070 : Memory corruption in audio due to an unchecked/invalid routing address in the APR Routing table in Qualcomm Snapdragon family products (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). The issue is described across multiple sources (NV...

CVE-2022-22062

CVE-2022-22062 describes an out-of-bounds read during server certificate parsing caused by an improper length check in Qualcomm Snapdragon components (Snapdragon Auto, Compute, Connectivity, and other Snapdragon family products). The issue affects Snapdragon lines including Snapdragon Auto, Compu...

CVE-2021-35135

CVE-2021-35135 describes a null pointer dereference that may occur during RSA key import in Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). The CVE is tied to Qualcomm closed-source components; vulnerability impact is li...

CVE-2021-35132

Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35132

CVE-2021-35132 describes an out-of-bounds write in Qualcomm Snapdragon DSP service (closed-source components) caused by an improper bound check on the response buffer. Affected are multiple Snapdragon line items (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wearables). The i...

CVE-2021-35122

CVE-2021-35122 affects Qualcomm Snapdragon family devices (Auto/Compute/Connectivity/CIoT/Industrial IoT/Mobile/Wearables). The flaw stems from improper input validation, allowing a non-secure region to modify RG permissions of IO space xPUs, enabling local privilege escalation with high impact o...

CVE-2021-35113

CVE-2021-35113: Qualcomm Snapdragon family (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Wearables) may suffer an authentication bypass due to improper ordering of signature verification and hashing in the signature verification path. Root cause stated as incorrect order of operations in ...

CVE-2021-35097

CVE-2021-35097 concerns an authentication bypass caused by the improper order of signature verification and hashing in Qualcomm Snapdragon’s signature verification path. Affected components span Snapdragon Auto, Compute, Connectivity, COTS IoT, Industrial IoT, Mobile, Voice & Music, and Wearables...