CVE-2022-33214

CVE-2022-33214 concerns memory corruption in the Qualcomm display stack caused by a time-of-check/time-of-use issue with metadata reserved size in Snapdragon devices (Auto/Compute/IoT/Wearables). Affected products include Snapdragon-based displays in Qualcomm components; root cause is TOCTOU in m...

CVE-2022-33217

CVE-2022-33217 : Memory corruption in Qualcomm IPC within Snapdragon Mobile due to a buffer copy that fails to validate input size when initiating communication with a compromised kernel. The issue targets Qualcomm IPC kernel components and can enable local exploitation with low privileges, carry...

PT-2022-21749 · Qualcomm · Qualcomm Ipc

Name of the Vulnerable Software and Affected Versions: Qualcomm IPC in Snapdragon Mobile affected versions not specified Description: The issue is related to memory corruption in Qualcomm IPC due to a buffer copy without checking the size of the input while starting communication with a compromis...

CVE-2022-33214

Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25750

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile...

CVE-2022-25723

Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile...

CVE-2022-25723

CVE-2022-25723 involves memory corruption in the multimedia stack of Qualcomm Snapdragon Mobile, caused by a use-after-free during callback registration failure. Documented impact indicates high severity (local, with high confidentiality, integrity, and availability impact). The provided sources ...

bharatiyamobile.com Cross Site Scripting vulnerability OBB-2994488

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hackers Using Vishing to Trick Victims into Installing Android Banking Malware

Malicious actors are resorting to voice phishing vishing tactics to dupe victims into installing Android malware on their devices, new research from ThreatFabric reveals. The Dutch mobile security company said it identified a network of phishing websites targeting Italian online-banking users tha...

CVE-2022-25665

Summary of CVE-2022-25665 : This is an information disclosure caused by a buffer over-read in the kernel observed on Qualcomm Snapdragon platforms (Auto/Compute/Consumer IoT/Mobile). The vulnerability is categorized as a kernel-level issue affecting Qualcomm components used in Pixel devices (clos...

CVE-2022-25664

Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-22078

CVE-2022-22078 affects Qualcomm Snapdragon platforms (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Wearables). The issue is a DoS in the BOOT process due to an integer overflow when calculating partition blocks for a specific partition size. This vulnerability’s root cause i...

CVE-2022-25660

CVE-2022-25660 is a memory corruption vulnerability described as a double-free issue in the kernel affecting Qualcomm Snapdragon platforms (Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, Mobile). The root cause is a kernel double-free that can impact memory management, with a CVSS score ...

CVE-2022-25664

The CVE-2022-25664 entry concerns information disclosure in Qualcomm Snapdragon GPUs during data reads. Concrete details from connected PT-2022-17445 indicate affected Qualcomm Snapdragon products across Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, and Wearables, with the ro...

PT-2022-17441 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption due to a double free problem in the kernel of Snapdragon products, including Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer...

CVE-2022-22077

CVE-2022-22077 concerns memory corruption due to a use-after-free in the graphics dispatcher logic of Qualcomm’s Snapdragon Mobile. The vulnerability affects the graphics component of Snapdragon Mobile and is described as memory corruption with high impact across confidentiality, integrity, and a...

CVE-2022-22077

Memory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon Mobile...

PT-2022-15221 · Qualcomm · Snapdragon Mobile

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile affected versions not specified Description: The issue is related to memory corruption in graphics due to a use-after-free in graphics dispatcher logic. This problem affects the graphics component of Snapdragon...

CVE-2022-22078

Denial of service in BOOT when partition size for a particular partition is requested due to integer overflow when blocks are calculated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-25662

Information disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...