Integer overflow

Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables...

Memory corruption

Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile...

CVE-2022-25708

Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile...

CVE-2022-25708

CVE-2022-25708 : A memory corruption issue in Qualcomm’s WLAN stack affecting Snapdragon Connectivity and Snapdragon Mobile, caused by a buffer copy that does not validate input size when parsing keys. The entry cites a very high impact (CVE-3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with a networ...

CVE-2022-25708

Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile...

CVE-2022-25706

CVE-2022-25706 describes information disclosure caused by a buffer over-read in the Qualcomm Bluetooth driver when reading the L2CAP length on Snapdragon devices (Auto/Compute/Connectivity/Consumer/Industrial IoT/Mobile/Wearables). The vulnerability concerns the Bluetooth stack within Qualcomm co...

CVE-2022-25696

CVE-2022-25696 is a memory-corruption issue in Qualcomm Snapdragon display paths caused by a time-of-check/time-of-use race during map or unmap in multiple Snapdragon line products (Auto, Compute, Connectivity, Industrial IOT, Mobile, Wearables). The RedHat/PRION/NT references confirm a Qualcomm ...

CVE-2022-25696

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25693

CVE-2022-25693 concerns memory corruption in Qualcomm Snapdragon graphics due to a use-after-free in graphics profiling. Connected sources (PT-2022-4876) specify affected software as Qualcomm Snapdragon Connectivity and Snapdragon Mobile; the issue could allow an attacker to cause a denial of ser...

CVE-2022-25690

Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

CVE-2022-25690

CVE-2022-25690 corresponds to information disclosure in Qualcomm’s WLAN stack due to improper validation of array indices while parsing crafted ANQP action frames. The connected PT-2022-4878 entry details Qualcomm Snapdragon family components (Snapdragon Auto, Compute, Connectivity, and various S...

CVE-2022-25686

CVE-2022-25686 concerns a memory corruption vulnerability in Qualcomm’s Snapdragon video module triggered by a WAV file in multiple Snapdragon platforms (Auto, Compute, Connectivity, Industrial IOT, Mobile, Wearables). The root cause is a buffer overflow in the video processing path, which can le...

CVE-2022-25688

CVE-2022-25688 describes memory corruption from a buffer overflow while parsing .ps video clips in Qualcomm Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables. Root cause is a parsing buffer overflow leading to memory corruption (and potenti...

CVE-2022-25670

CVE-2022-25670 concerns Qualcomm Snapdragon WLAN HOST component vulnerabilities. The connected PT security entry describes a DoS flaw caused by a buffer over-read while unpacking WLAN frames in Snapdragon product lines (Auto/Compute/Connectivity/Consumer Electronics/IoT/Wearables). The root cause...

CVE-2022-25670

Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2022-25669

Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-25656

Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25656

The CVE-2022-25656 entry describes an integer overflow and memory corruption caused by improper validation of the buffer size written to the console when computing the payload size in Qualcomm Snapdragon components. Affected products include Snapdragon Auto, Compute, Connectivity, Industrial IOT,...

CVE-2022-25654

Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2022-25653

CVE-2022-25653 is a buffer over-read in Qualcomm Snapdragon video processing of AVI files that leads to information disclosure. The issue affects Snapdragon components and is tied to an information-disclosure vulnerability from reading AVI data, with local attack vector and low attack complexity ...