CVE-2022-25712

Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25685

Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-33235

CVE-2022-33235 describes information disclosure due to a buffer over-read in WLAN firmware when parsing security context info attributes. Affected are Qualcomm Snapdragon components across multiple lines, including Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consume...

CVE-2022-25712

CVE-2022-25712 is a memory corruption issue in the Qualcomm camera stack triggered by a buffer copy that does not validate input size across Snapdragon Auto/Compute/Consumer IOT/Mobile/Wearables. Reported impact includes high confidentiality, integrity, and availability in CVSS analyses with a lo...

CVE-2022-25682

This CVE (CVE-2022-25682) concerns memory corruption in the MODEM UIM caused by using an out-of-range pointer offset during decoding a card command, affecting Qualcomm Snapdragon platforms (e.g., Auto, Compute, Connectivity, IOT, Mobile, Wearables). Root cause: out-of-bounds pointer offset during...

CVE-2022-25711

CVE-2022-25711 is a memory corruption issue in Qualcomm Snapdragon camera drivers caused by improper validation of an array index, affecting Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, Mobile, and Wearables. The vulnerability leads to memory corruption in the camera stack; CVSS metric...

CVE-2022-33238

CVE-2022-33238 describes a transient DoS in WLAN processing of incoming FTM frames, caused by a loop with an unreachable exit condition, affecting Snapdragon Auto/Compute/Connectivity and related Snapdragon products. The CVE is documented with a 7.5 (HIGH) CVSS v3.1 base score (Network, Low compl...

CVE-2022-25711

Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25681

CVE-2022-25681 describes memory corruption in the kernel caused by the hypervisor not correctly invalidating processor translation caches for Qualcomm Snapdragon platforms (Auto, Compute, Consumer IOT, Industrial IOT, Mobile). Affected component scope is the kernel in Snapdragon’s virtualization ...

CVE-2022-33238

Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon...

CVE-2022-25685

Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25685

CVE-2022-25685 is a DoS vulnerability in the Modem module caused by improper authorization during error handling, affecting Snapdragon platforms (Auto/Compute/Consumer IOT/Industrial IOT/Mobile/Wearables). The issue lists availability impact as high and is documented with Qualcomm/Android securit...

CVE-2022-25677

CVE-2022-25677 is described as memory corruption in the diag component caused by a use-after-free while processing a DCI packet in Qualcomm Snapdragon platforms (Auto, Compute, Consumer IoT, Industrial IoT, Mobile, Wearables, Wired Infrastructure and Networking). The vulnerability affects Snapdra...

CVE-2022-25692

CVE-2022-25692 describes a DoS in Qualcomm Snapdragon Modem components (covering Snapdragon Auto/Compute/Industrial IOT/Snapdragon Mobile/Wearables) caused by a reachable assertion during processing of the common config procedure. Affected software is Qualcomm’s Snapdragon modem stack across mult...

CVE-2022-45227

The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication...

CVE-2022-45228

Dragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contain a Cross-Site Request Forgery in the logout page...

Authentication flaw

The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication...

Cross site request forgery (csrf)

Dragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contain a Cross-Site Request Forgery in the logout page...

CVE-2022-45227

The web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https://10.10.20.74/lib/. This address has a backup file which can be downloaded without any authentication...

PT-2022-27447 · Dragino · Dragino Lora Lg01

Name of the Vulnerable Software and Affected Versions: Dragino Lora LG01 18ed40 IoT version 4.3.4 Description: A Cross-Site Request Forgery issue was discovered in the logout page of the affected software. Recommendations: For Dragino Lora LG01 18ed40 IoT version 4.3.4, consider disabling the...