CVE-2022-25719

CVE-2022-25719 affects Qualcomm Snapdragon WLAN components across multiple product lines (Auto, Connectivity, CE Connectivity, IOT, Industrial IOT, Mobile, etc.). Root cause: improper length checking during the authentication handshake, leading to information disclosure with high confidentiality ...

CVE-2022-33214

CVE-2022-33214 concerns memory corruption in the Qualcomm display stack caused by a time-of-check/time-of-use issue with metadata reserved size in Snapdragon devices (Auto/Compute/IoT/Wearables). Affected products include Snapdragon-based displays in Qualcomm components; root cause is TOCTOU in m...

CVE-2022-33214

Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25664

Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25665

Summary of CVE-2022-25665 : This is an information disclosure caused by a buffer over-read in the kernel observed on Qualcomm Snapdragon platforms (Auto/Compute/Consumer IoT/Mobile). The vulnerability is categorized as a kernel-level issue affecting Qualcomm components used in Pixel devices (clos...

CVE-2022-22078

CVE-2022-22078 affects Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wearables). The issue is a DoS in the BOOT process due to an integer overflow when calculating partition blocks for a specific partition size. This vulnerability’s root cause i...

CVE-2022-25663

Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...

CVE-2022-25663

Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...

CVE-2022-25662

Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-22078

Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25660

CVE-2022-25660 is a memory corruption vulnerability described as a double-free issue in the kernel affecting Qualcomm Snapdragon platforms (Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, Mobile). The root cause is a kernel double-free that can impact memory management, with a CVSS score ...

CVE-2022-25664

The CVE-2022-25664 entry concerns information disclosure in Qualcomm Snapdragon GPUs during data reads. Concrete details from connected PT-2022-17445 indicate affected Qualcomm Snapdragon products across Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, and Wearables, with the ro...

CVE-2022-25660

Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-25665

Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile...

CVE-2022-22078

Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25661

Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-25662

CVE-2022-25662 : The vulnerability is an information-disclosure flaw caused by an untrusted pointer dereference in the kernel affecting Qualcomm Snapdragon components (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wearables). The issue is described across multiple sources as ...

TikTok's "secret operation" tracks you even if you don't use it

Consumer Reports CR, a US-based nonprofit consumer organization, has revealed that TikTok gathers data on people who don't even use the app itself. If this sounds familiar, it's because it's happened before. Meta's near-omnipresence wherever you are online enabled it to gather data on users, even...

CVE-2022-39236

Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Starting with version 17.1.0-rc.1, improperly formed beacon events can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the...

CVE-2022-22058

CVE-2022-22058 describes a memory corruption due to a use-after-free in the kernel when handling ION handles, impacting Qualcomm Snapdragon-based devices (e.g., Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearable...