9147 matches found
Input validation
Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivity, Snapdragon Mobile...
Null pointer dereference
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
Null pointer dereference
Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon Auto...
Denial of service
Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto...
CVE-2022-25668
Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2022-25680
Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto...
CVE-2022-25680
The CVE-2022-25680 entry concerns memory corruption in Qualcomm Snapdragon Auto’s multimedia component caused by a buffer overflow while processing the client-provided count value. Affected element is the multimedia driver in Snapdragon Auto; root cause described as overflow of a count variable l...
CVE-2022-25668
The CVE-2022-25668 entry describes memory corruption in Qualcomm Snapdragon video driver caused by a double-free while parsing an ASF clip. Affected products include Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables. The issue arises in the...
CVE-2022-25659
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2022-25659
CVE-2022-25659 describes a memory corruption due to a buffer overflow when parsing MKV clips with an invalid bitmap size in Qualcomm Snapdragon components (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables). Connected sources indicate the issue affects a ...
CVE-2022-25658
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...
CVE-2022-25658
CVE-2022-25658 is a memory corruption issue caused by incorrect pointer arithmetic when changing endianness in Qualcomm Snapdragon video parser code. Affected are Snapdragon families including Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables. Root ca...
CVE-2022-25657
CVE-2022-25657 is a memory-corruption issue caused by a buffer overflow when processing an invalid MKV clip with an invalid seek header. The vulnerability is described across multiple sources as affecting Qualcomm Snapdragon family components: Auto, Compute, Connectivity, Industrial IOT, Mobile, ...
CVE-2022-25657
Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...
CVE-2022-22106
Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto...
CVE-2022-22106
CVE-2022-22106 affects Qualcomm’s Snapdragon Auto multimedia component. The issue is memory corruption caused by an improper length check when copying data in the multimedia path. Exploitation details are not described in the provided materials beyond CVSS metrics indicating local access, low pri...
CVE-2022-22102
Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto...
CVE-2022-22104
CVE-2022-22104 concerns memory corruption in Qualcomm Snapdragon Auto’s multimedia component caused by an improper check on received messages. The primary affected target is Qualcomm Snapdragon Auto hardware, with the underlying issue described as a memory corruption vulnerability in the multimed...
CVE-2022-22102
CVE-2022-22102 describes memory corruption in the Snapdragon Auto multimedia component caused by an incorrect type conversion when adding data. Affected software: Qualcomm Snapdragon Auto (multimedia). Root cause: type conversion error leading to memory corruption. Impact per sources: high confid...