Design/Logic Flaw

Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

Information disclosure

Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

Design/Logic Flaw

Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-25706

CVE-2022-25706 describes information disclosure caused by a buffer over-read in the Qualcomm Bluetooth driver when reading the L2CAP length on Snapdragon devices (Auto/Compute/Connectivity/Consumer/Industrial IoT/Mobile/Wearables). The vulnerability concerns the Bluetooth stack within Qualcomm co...

CVE-2022-25696

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25696

CVE-2022-25696 is a memory-corruption issue in Qualcomm Snapdragon display paths caused by a time-of-check/time-of-use race during map or unmap in multiple Snapdragon line products (Auto, Compute, Connectivity, Industrial IOT, Mobile, Wearables). The RedHat/PRION/NT references confirm a Qualcomm ...

CVE-2022-25690

CVE-2022-25690 corresponds to information disclosure in Qualcomm’s WLAN stack due to improper validation of array indices while parsing crafted ANQP action frames. The connected PT-2022-4878 entry details Qualcomm Snapdragon family components (Snapdragon Auto, Compute, Connectivity, and various S...

CVE-2022-25686

CVE-2022-25686 concerns a memory corruption vulnerability in Qualcomm’s Snapdragon video module triggered by a WAV file in multiple Snapdragon platforms (Auto, Compute, Connectivity, Industrial IOT, Mobile, Wearables). The root cause is a buffer overflow in the video processing path, which can le...

CVE-2022-25688

CVE-2022-25688 describes memory corruption from a buffer overflow while parsing .ps video clips in Qualcomm Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables. Root cause is a parsing buffer overflow leading to memory corruption (and potenti...

CVE-2022-25670

CVE-2022-25670 concerns Qualcomm Snapdragon WLAN HOST component vulnerabilities. The connected PT security entry describes a DoS flaw caused by a buffer over-read while unpacking WLAN frames in Snapdragon product lines (Auto/Compute/Connectivity/Consumer Electronics/IoT/Wearables). The root cause...

CVE-2022-25670

Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2022-25669

Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-25656

The CVE-2022-25656 entry describes an integer overflow and memory corruption caused by improper validation of the buffer size written to the console when computing the payload size in Qualcomm Snapdragon components. Affected products include Snapdragon Auto, Compute, Connectivity, Industrial IOT,...

CVE-2022-25656

Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25653

CVE-2022-25653 is a buffer over-read in Qualcomm Snapdragon video processing of AVI files that leads to information disclosure. The issue affects Snapdragon components and is tied to an information-disclosure vulnerability from reading AVI data, with local attack vector and low attack complexity ...

CVE-2022-22095

CVE-2022-22095 describes memory corruption in the Qualcomm synx driver due to a use-after-free condition when accessing object handles without acquiring a lock. Affected components include the Qualcomm synx driver used in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, and...

CVE-2022-22095

Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-22094

memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-22094

CVE-2022-22094 describes memory corruption in the Linux kernel caused by a race condition when obtaining a mapping reference in Qualcomm Snapdragon GPUs/CPUs. The issue affects Snapdragon product families including Compute, Connectivity, Industrial IoT, and Mobile, and stems from synchronization ...

CVE-2022-22093

Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...