PT-2022-17454 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a denial of service that can occur due to a reachable assertion in the modem. This happens when the modem processes a filter rule from an...

CVE-2022-25685

Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

PT-2022-17461 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in the MODEM UIM due to the usage of an out of range pointer offset while decoding a command from a card. This affects various Qualcomm...

PT-2022-21755 · Qualcomm · Snapdragon Compute +10

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer Electronics Connectivity affected versions not specified Snapdragon...

CVE-2022-25682

Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

PT-2022-17466 · Qualcomm · Snapdragon Mobile

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile affected versions not specified Description: The issue is related to a denial of service in the Modem component of Snapdragon Mobile, caused by a reachable assertion when processing SIB1 with invalid SCS and bandwid...

CVE-2022-25691

Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile...

CVE-2022-25681

CVE-2022-25681 describes memory corruption in the kernel caused by the hypervisor not correctly invalidating processor translation caches for Qualcomm Snapdragon platforms (Auto, Compute, Consumer IOT, Industrial IOT, Mobile). Affected component scope is the kernel in Snapdragon’s virtualization ...

CVE-2022-33238

CVE-2022-33238 describes a transient DoS in WLAN processing of incoming FTM frames, caused by a loop with an unreachable exit condition, affecting Snapdragon Auto/Compute/Connectivity and related Snapdragon products. The CVE is documented with a 7.5 (HIGH) CVSS v3.1 base score (Network, Low compl...

CVE-2022-25677

CVE-2022-25677 is described as memory corruption in the diag component caused by a use-after-free while processing a DCI packet in Qualcomm Snapdragon platforms (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Wearables, Wired Infrastructure and Networking). The vulnerability affects Snapdra...

CVE-2022-25711

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25672

Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile...

CVE-2022-25702

CVE-2022-25702 affects Qualcomm Snapdragon platforms (Snadpragon Auto, Compute, Industrial IOT, Mobile, Wearables). The issue is a denial-of-service caused by a reachable assertion while processing a reconfiguration message in the modem path. Multiple sources (NVD, Red Hat, CIRCL) describe the sa...

CVE-2022-25685

CVE-2022-25685 is a DoS vulnerability in the Modem module caused by improper authorization during error handling, affecting Snapdragon platforms (Auto/Compute/Consumer IOT/Industrial IOT/Mobile/Wearables). The issue lists availability impact as high and is documented with Qualcomm/Android securit...

CVE-2022-25691

The CVE-2022-25691 entry relates to a Denial of Service in Qualcomm Snapdragon Mobile modem. The connected sources describe the issue as a reachable assertion in the Modem while processing SIB1 with invalid SCS and bandwidth settings, enabling DoS on the device. Affected component: Qualcomm Snapd...

CVE-2022-25673

CVE-2022-25673 describes a denial of service in Qualcomm Snapdragon Mobile’s MODEM caused by a reachable assertion while processing configuration from the network. The available connected documents confirm the affected component (MODEM in Snapdragon Mobile) and the root cause, with the impact exp...

CVE-2022-25672

Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile...

CVE-2022-25692

CVE-2022-25692 describes a DoS in Qualcomm Snapdragon Modem components (covering Snapdragon Auto/Compute/Industrial IOT/Snapdragon Mobile/Wearables) caused by a reachable assertion during processing of the common config procedure. Affected software is Qualcomm’s Snapdragon modem stack across mult...

USN-5757-1: Linux kernel vulnerabilities

Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-427...

CVE-2022-33234

Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...