5433 matches found
CVE-2022-25654
Memory corruption in kernel due to improper input validation while processing ION commands in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...
CVE-2022-25653
CVE-2022-25653 is a buffer over-read in Qualcomm Snapdragon video processing of AVI files that leads to information disclosure. The issue affects Snapdragon components and is tied to an information-disclosure vulnerability from reading AVI data, with local attack vector and low attack complexity ...
CVE-2022-22105
CVE-2022-22105 describes a memory corruption vulnerability in Bluetooth caused by an integer overflow when processing the HFP-UNIT profile. Affected are Qualcomm Snapdragon devices across multiple lines (Auto, Consumer IoT, Mobile, Voice & Music). Root cause: integer overflow in the HFP-UNIT hand...
CVE-2022-22095
Memory corruption in synx driver due to use-after-free condition in the synx driver due to accessing object handles without acquiring lock in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2022-22095
CVE-2022-22095 describes memory corruption in the Qualcomm synx driver due to a use-after-free condition when accessing object handles without acquiring a lock. Affected components include the Qualcomm synx driver used in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, and...
CVE-2022-22094
CVE-2022-22094 describes memory corruption in the Linux kernel caused by a race condition when obtaining a mapping reference in Qualcomm Snapdragon GPUs/CPUs. The issue affects Snapdragon product families including Compute, Connectivity, Industrial IoT, and Mobile, and stems from synchronization ...
CVE-2022-22094
memory corruption in Kernel due to race condition while getting mapping reference in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2022-22093
CVE-2022-22093 affects Qualcomm Snapdragon components (Compute, Connectivity, Industrial IOT, Mobile). The issue is memory corruption or temporary DoS caused by improper handling of concurrent hypervisor operations to attach/detach IRQs from virtual interrupt sources. Root cause: concurrency hand...
CVE-2022-22093
Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2022-22092
CVE-2022-22092 describes memory corruption in the Qualcomm Snapdragon kernel caused by a use-after-free in the kernel, affecting Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IoT, and Snapdragon Mobile. The vulnerability is locally exploitable with low attack complexity and r...
CVE-2022-22092
Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2022-22091
CVE-2022-22091 affects Qualcomm’s Snapdragon family (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Wearables). The issue is improper authorization of a replayed LTE securityModeCommand, which can cause DoS. The available documents identify the vulnerable surface as Qualcomm’s...
CVE-2022-22074
CVE-2022-22074 describes a memory corruption due to an integer overflow in the Audio component of Qualcomm’s embedded platform software affecting Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables. The root cause is integer overflow during W...
CVE-2022-22066
CVE-2022-22066 is associated with a buffer length check flaw that can cause memory corruption when processing commands from HLOS in Qualcomm Snapdragon embedded software. Connected sources (PT-2022-4881) specify this as a buffer length check issue affecting Snapdragon Auto, Compute, Connectivity,...
CVE-2022-31861
Cross site Scripting XSS in ThingsBoard IoT Platform through 3.3.4.1 via a crafted value being sent to the audit logs...
CVE-2022-31861
Cross site Scripting XSS in ThingsBoard IoT Platform through 3.3.4.1 via a crafted value being sent to the audit logs...
Cross site scripting
Cross site Scripting XSS in ThingsBoard IoT Platform through 3.3.4.1 via a crafted value being sent to the audit logs...
CVE-2022-31861
CVE-2022-31861 is an XSS vulnerability in ThingsBoard IoT Platform up to version 3.3.4.1, exploitable by sending a crafted value to audit logs. Root cause involves unsanitized input in audit-logging paths, enabling cross-site scripting. Affected product/versions are ThingsBoard IoT Platform befor...
