5526 matches found
Buffer overflow
Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...
Information disclosure
Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...
Information disclosure
Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile...
CVE-2022-25718
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...
CVE-2022-25749
The CVE-2022-25749 entry describes a Transient Denial-of-Service due to a buffer over-read while parsing MDNS frames in Qualcomm Snapdragon WLAN components (across Snapdragon Auto/Compute/Connectivity, etc.). The root cause is a buffer over-read during MDNS frame parsing; impact is DoS with high ...
CVE-2022-25666
Qualcomm Snapdragon family components are affected by CVE-2022-25666. Description and multiple connected sources indicate memory corruption caused by a use-after-free error in a service when accessing maps across different threads. The issue is described as affecting Snapdragon Auto, Compute, Con...
CVE-2022-25718
CVE-2022-25718 is a Qualcomm WLAN cryptographic issue described across Snapdragon lineups (Auto, Connectivity, CE/IoT, Industrial IoT, etc.) where an improper check on the return value during the authentication handshake is cited as the root cause. The vulnerability affects Qualcomm closed‑source...
CVE-2022-25687
CVE-2022-25687 is a memory corruption vulnerability in Qualcomm Snapdragon video processing caused by a buffer overflow while parsing ASF clips. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, and Wearables. The issue is rooted i...
CVE-2022-25736
CVE-2022-25736 describes a denial-of-service vulnerability in Qualcomm Snapdragon WLAN, caused by an out-of-bounds read while processing a VHT action frame. The issue affects multiple Snapdragon product families (Auto, Compute, Connectivity, Consumer Electronics Connectivity, D, IOT, Mobile, Wear...
CVE-2022-25720
CVE-2022-25720 describes a memory corruption vulnerability in Qualcomm WLAN firmware affecting Snapdragon lines (Auto/Compute/Connectivity/Consumer Electronics Connectivity/Consumer IOT/Industrial IOT/Mobile/Voice & Music/Wearables). The issue stems from out-of-bounds array access during connect/...
CVE-2022-25748
Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...
CVE-2022-25719
CVE-2022-25719 affects Qualcomm Snapdragon WLAN components across multiple product lines (Auto, Connectivity, CE Connectivity, IOT, Industrial IOT, Mobile, etc.). Root cause: improper length checking during the authentication handshake, leading to information disclosure with high confidentiality ...
CVE-2022-25748
CVE-2022-25748 is a memory corruption vulnerability in Qualcomm WLAN due to an integer overflow that leads to a buffer overflow while parsing GTK frames, affecting multiple Snapdragon platforms (Auto, Compute, Connectivity, etc.). The primary impact is remote network-executable code execution wit...
Hands-On IoT Hacking: Rapid7 at DEF CON 30 IoT Village, Part 1
Rapid7 was back this year at DEF CON 30 participating at the IoT Village with another hands-on hardware hacking exercise, with the goal of teaching attendees' various concepts and methods for IoT hacking. Over the years, these exercises have covered several different embedded device topics,...
CVE-2022-33214
CVE-2022-33214 concerns memory corruption in the Qualcomm display stack caused by a time-of-check/time-of-use issue with metadata reserved size in Snapdragon devices (Auto/Compute/IoT/Wearables). Affected products include Snapdragon-based displays in Qualcomm components; root cause is TOCTOU in m...
CVE-2022-33214
Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...
CVE-2022-35136
Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests...
CVE-2022-34021
Multiple Cross Site Scripting XSS vulnerabilities in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via the form fields...