CVE-2022-22082

CVE-2022-22082 affects Qualcomm Snapdragon families (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). The vulnerability is due to memory corruption caused by a possible buffer overflow while parsing the DSF header with a corrupted channel count, leadin...

CVE-2021-35118

CVE-2021-35118 concerns a boundary error in the Qualcomm Snapdragon camera driver that can cause an out-of-bounds write due to an incorrect input check. Affected components listed across Snapdragon Auto/Compute/Connectivity/Consumer IoT/Industrial IoT/Mobile/Wearables and related camera subsystem...

CVE-2021-35083

CVE-2021-35083 is a Qualcomm/Snapdragon vulnerability describing a possible out-of-bounds read caused by improper validation of certificate chains in SSL or IKE. Affects Qualcomm Snapdragon families across Auto, Compute, Connectivity, and other lines. CVSS metrics indicate a network-based, low-co...

PT-2022-9997 · Qualcomm · Snapdragon Auto +6

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a possible use after free due to the lack of a null check of DRM file status after the file structure is freed. This affects various Qualcomm...

PT-2022-10429 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper access control in register configuration, allowing a user with user-level permission to access graphics protected regions. This affects various...

PT-2022-10002 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper key generation due to a lack of buffer validation when reading PRNG output. This affects various Qualcomm Snapdragon products, including...

PT-2022-10008 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper SMMU configuration, allowing RPM secure Stream to access any secure resource. This affects various Qualcomm Snapdragon products, including...

PT-2022-10399 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a possible memory leak due to improper validation of certificate chain length while parsing the server certificate chain. This affects various Qualcomm...

PT-2022-15225 · Qualcomm · Snapdragon Auto +7

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a denial of service due to memory corruption. This occurs while extracting the ape header from clips. The affected components include Snapdragon Auto,...

CVE-2022-22057

Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

PT-2022-15227 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in video due to a buffer overflow that occurs while reading the dts file. This problem affects various Qualcomm Snapdragon products,...

PT-2022-10004 · Qualcomm · Snapdragon Connectivity +6

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer Electronics Connectivity affected versions not specified Snapdragon...

CVE-2022-22057

CVE-2022-22057 (Qualcomm KGSL) is a use-after-free race condition in the Graphics Fence handling caused by closing the fence file descriptor and destroying the graphics timeline concurrently in Qualcomm’s KGSL driver. Affected products span Snapdragon Auto, Compute, Connectivity, Industrial IoT, ...

PT-2022-15226 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption that occurs when extracting qcp audio files. This happens due to a lack of checks on data length in various Qualcomm Snapdragon...

PT-2022-10404 · Qualcomm · Snapdragon Connectivity +8

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a possible out of bound read due to improper validation of the certificate chain in SSL or Internet key exchange. This affects various Qualcomm...

PT-2022-10009 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper SMMU configuration, allowing RPM secure Stream to access any secure resource. This affects various Qualcomm Snapdragon products, including...

Platform Update: Build the Future on Akamai

Today, technology is infused into nearly everything we do. The data behind personalized recommendations, connected devices, and wearables has changed how we engage with the world around us — whether we’re driving to a new destination, purchasing from a new retailer, or monitoring our health...

CVE-2021-30333

Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-30331

Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2021-35088

Possible out of bound read due to improper validation of IE length during SSID IE parse when channel is DFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure...