The vulnerability of microprogramming software in embedded Qualcomm chips lies in the copying of buffers without checking the size of input data during the processing of arguments received from HLOS. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software in embedded Qualcomm chips stems from the copying of buffers without checking the size of the input data during the processing of arguments received from HLOS. Exploiting this vulnerability can allow attackers to compromise the confidentiality,...

PT-2022-17485 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a denial of service in WLAN due to a potential null pointer dereference while accessing a memory location. This affects various Snapdragon products,...

PT-2022-17455 · Qualcomm · Snapdragon Wearables +5

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to information disclosure in video due to a buffer over-read while parsing avi files. This affects various Qualcomm Snapdragon products, including...

PT-2022-21751 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in video processing due to a configuration weakness. This affects various Qualcomm Snapdragon products, including Snapdragon Auto,...

Qualcomm 芯片代码问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and are often manufactured on the surface of semiconductor wafers. A security vulnerability exists in several products of Qualcomm chips, whic...

PT-2022-21754 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in the WLAN firmware. This occurs while the firmware is processing the PPE threshold. The...

PT-2022-17487 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in graphics due to a use-after-free error while importing a graphics buffer. This problem affects various Qualcomm Snapdragon products,...

Qualcomm 芯片 授权问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a security vulnerability that stems from its...

PT-2022-17450 · Qualcomm · Snapdragon Mobile

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile affected versions not specified Description: The issue is related to a denial of service in the MODEM component due to a reachable assertion. This affects the Snapdragon Mobile platform. Recommendations: At the...

PT-2022-17473 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a denial of service due to a null pointer dereference that occurs when GATT is disconnected. This affects various Qualcomm Snapdragon products, including...

Qualcomm 芯片安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a security vulnerability that stems from a modem...

PT-2022-17481 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in graphics due to a buffer overflow that occurs while validating the user address. This problem affects various Qualcomm Snapdragon...

Qualcomm 芯片安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip has a security vulnerability that stems from a modem memory...

PT-2022-35851 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: A refcount leak bug was found in the qcom smsm probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-35220 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue is related to memory corruption with too many bridges in the drm/msm/dsi component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-35669 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.220 Description: A refcount leak bug was found in the qcom smsm probe function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-35793 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.262 Description: The issue is related to a circular deferral regression in the qcom rpm regulator. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35866 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: The issue is related to a circular deferral regression in the qcom rpm regulator. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-35249 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue concerns a fix for writes in a read-only memory region in the cpufreq qcom driver. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

PT-2022-35161 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a wrong sizeof config in slave config in the qcom-adm dmaengine. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...