CVE-2022-22104

CVE-2022-22104 concerns memory corruption in Qualcomm Snapdragon Auto’s multimedia component caused by an improper check on received messages. The primary affected target is Qualcomm Snapdragon Auto hardware, with the underlying issue described as a memory corruption vulnerability in the multimed...

CVE-2022-22104

Memory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto...

CVE-2022-22102

CVE-2022-22102 describes memory corruption in the Snapdragon Auto multimedia component caused by an incorrect type conversion when adding data. Affected software: Qualcomm Snapdragon Auto (multimedia). Root cause: type conversion error leading to memory corruption. Impact per sources: high confid...

CVE-2022-22101

CVE-2022-22101 is a DoS in Snapdragon Auto's multimedia handling caused by uncontrolled resource consumption while parsing an incoming HAB message. The vulnerability affects the HAB message parser in Snapdragon Auto, leading to high availability impact (A: High) with local access required and low...

CVE-2022-22101

Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto...

CVE-2022-22100

CVE-2022-22100 : Qualcomm Snapdragon Auto memory corruption in multimedia due to an improper check on received export descriptors. Affected component is the multimedia export-descriptor handling in Snapdragon Auto. Root cause: memory corruption from boundary/descriptor validation issue. Impact: h...

CVE-2022-22100

Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto...

CVE-2022-22099

Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto...

CVE-2022-22099

The CVE-2022-22099 entry concerns Qualcomm Snapdragon Auto multimedia code, where memory corruption is triggered by improper validation of an array index in the multimedia path. The vulnerability is characterized as high impact (confidentiality, integrity, and availability affected) with local ac...

CVE-2022-22098

CVE-2022-22098 refers to a memory corruption flaw in Qualcomm’s Snapdragon Auto multimedia driver triggered by an untrusted pointer dereference while reading data from a socket. The issue affects the multimedia component and is described as a memory corruption vulnerability with high impact on co...

CVE-2022-22098

Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon Auto...

CVE-2022-22080

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22080

The CVE-2022-22080 entry concerns Qualcomm Snapdragon firmware: improper validation of a backend id in the PCM routing process can cause memory corruption across Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, and Voice & Music components. Root cause is memory-corrup...

CVE-2022-22070

CVE-2022-22070 : Memory corruption in audio due to an unchecked/invalid routing address in the APR Routing table in Qualcomm Snapdragon family products (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). The issue is described across multiple sources (NV...

CVE-2022-22069

CVE-2022-22069 affects Qualcomm Snapdragon devices when keyprotect is disabled. The issue: unencrypted keybox stored in RPMB, enabling a cryptographic issue across Snapdragon Auto, Compute, Connectivity, Industrial IOT, Mobile, and Wearables. Root cause: keyprotect-off condition allows RPMB keybo...

CVE-2022-22067

Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

CVE-2022-22067

CVE-2022-22067 affects Qualcomm Snapdragon modems (Auto/Compute/Connectivity/Mobile). The issue is a memory leak during NSA RRC Reconfiguration with an invalid Radio Bearer Config, rooted in the modem component. Documented impact includes high confidentiality, integrity, and availability concerns...

CVE-2022-22062

CVE-2022-22062 describes an out-of-bounds read during server certificate parsing caused by an improper length check in Qualcomm Snapdragon components (Snapdragon Auto, Compute, Connectivity, and other Snapdragon family products). The issue affects Snapdragon lines including Snapdragon Auto, Compu...

CVE-2022-22059

CVE-2022-22059 describes a memory corruption due to an out-of-bounds read when parsing a video file in Qualcomm Snapdragon components. Affected products include Snapdragon Auto, Compute, Connectivity, Industrial IOT, and Mobile. The issue is documented with a CVSS base score of 7.8 (Initial), and...

CVE-2021-35135

CVE-2021-35135 describes a null pointer dereference that may occur during RSA key import in Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). The CVE is tied to Qualcomm closed-source components; vulnerability impact is li...