CVE-2022-22086

CVE-2022-22086 is a memory corruption issue due to a double free while parsing a 3gp clip with invalid meta data atoms in Qualcomm Snapdragon components (Auto/Compute/Connectivity/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wearables). Affected are Qualcomm Snapdragon products; the root caus...

CVE-2022-22085

CVE-2022-22085 corresponds to memory corruption in the video subsystem due to a buffer overflow when reading the DTS file on Qualcomm Snapdragon family devices (Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables). The root cause is a buffer over...

CVE-2022-22084

CVE-2022-22084: Memory corruption occurs when extracting qcp audio files due to a missing data-length check in Qualcomm Snapdragon components (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). Affected are Qualcomm Snapdragon environments; root cause is...

CVE-2022-22084

Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22083

CVE-2022-22083 describes a denial-of-service caused by memory corruption when extracting the ape header from clips in Qualcomm Snapdragon platforms. Affected components include Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables. The availabl...

CVE-2022-22083

Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22082

CVE-2022-22082 affects Qualcomm Snapdragon families (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). The vulnerability is due to memory corruption caused by a possible buffer overflow while parsing the DSF header with a corrupted channel count, leadin...

CVE-2021-35121

An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35121

CVE-2021-35121 affects Qualcomm/Snapdragon kernel components, specifically the Synx driver, where an array index is improperly used to lock/unlock a mutex. This leads to a Use-After-Free condition that can be triggered locally, with the CVSS v3.1 vector indicating Local access, Low attack complex...

CVE-2021-35120

Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35119

CVE-2021-35119 relates to a Qualcomm Snapdragon firmware issue across Snapdragon Auto, Compute, Connectivity, Industrial IOT, and Mobile. Root cause: an out-of-bounds read in FIPS event processing caused by improper validation of the firmware length. Impact stated in the CVE: availability impact ...

CVE-2021-35119

Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35118

CVE-2021-35118 concerns a boundary error in the Qualcomm Snapdragon camera driver that can cause an out-of-bounds write due to an incorrect input check. Affected components listed across Snapdragon Auto/Compute/Connectivity/Consumer IoT/Industrial IoT/Mobile/Wearables and related camera subsystem...

CVE-2021-35083

CVE-2021-35083 is a Qualcomm/Snapdragon vulnerability describing a possible out-of-bounds read caused by improper validation of certificate chains in SSL or IKE. Affects Qualcomm Snapdragon families across Auto, Compute, Connectivity, and other lines. CVSS metrics indicate a network-based, low-co...

CVE-2021-35120: Use After Free

Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35073: Reachable Assertion

Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-30346: Undefined Security Weakness

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

PT-2022-10009 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper SMMU configuration, allowing RPM secure Stream to access any secure resource. This affects various Qualcomm Snapdragon products, including...

CVE-2021-30339: Undefined Security Weakness

Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

PT-2022-10438

Name of the Vulnerable Software and Affected Versions Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile affected versions not specified Description The issue arises from an improper use of an array index to lock and unlock a mutex, leading to...