PT-2022-10404 · Qualcomm · Snapdragon Connectivity +8

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a possible out of bound read due to improper validation of the certificate chain in SSL or Internet key exchange. This affects various Qualcomm...

PT-2022-15226 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption that occurs when extracting qcp audio files. This happens due to a lack of checks on data length in various Qualcomm Snapdragon...

Samsung Find My Mobile SimChangeAlertManger Information Disclosure Vulnerability

Samsung Find My Mobile is an application to find a cell phone by the South Korean company Samsung Samsung. An information disclosure vulnerability exists in SimChangeAlertManger, a version prior to Samsung Find My Mobile 7.2.24.12. A local attacker with log access could exploit the vulnerability ...

PT-2022-7006 · Qualcomm · Qualcomm Snapdragon Mobile +6

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions affected versions not specified Qualcomm Snapdragon Compute versions affected versions not specified Qualcomm Snapdragon Connectivity versions affected versions not specified Qualcomm Snapdragon Consumer IOT...

PT-2022-10406 · Qualcomm · Snapdragon Connectivity +4

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a possible buffer overflow due to the lack of buffer length check during management frame Rx handling. This affects various Qualcomm Snapdragon products,...

PT-2022-15227 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in video due to a buffer overflow that occurs while reading the dts file. This problem affects various Qualcomm Snapdragon products,...

PT-2022-15220 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: A buffer overflow issue arises from the improper validation of NDP application information length. This affects various Qualcomm Snapdragon products, including Snapdragon Auto,...

CVE-2022-22057

Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

PT-2022-10006 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to an improper integrity check that can lead to a race condition between tasks PDCP and RRC after a valid RRC Command packet has been received. This affects...

PT-2022-10002 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper key generation due to a lack of buffer validation when reading PRNG output. This affects various Qualcomm Snapdragon products, including...

PT-2022-15225 · Qualcomm · Snapdragon Auto +7

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a denial of service due to memory corruption. This occurs while extracting the ape header from clips. The affected components include Snapdragon Auto,...

PT-2022-10416 · Qualcomm · Snapdragon Connectivity +4

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected...

PT-2022-10411 · Qualcomm · Snapdragon Mobile +1

Name of the Vulnerable Software and Affected Versions: Snapdragon Connectivity, Snapdragon Mobile affected versions not specified Description: The issue is related to a possible out of bounds read due to improper typecasting while handling page fault for global memory. Recommendations: At the...

PT-2022-10397 · Qualcomm · Snapdragon Connectivity +4

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected...

Samsung mobile RemoteViews Elevation of Privilege Vulnerability (CNVD-2022-67278)

Samsung mobile is a cell phone from Samsung, a South Korean company. Samsung mobile RemoteViews suffers from an elevation of privilege vulnerability that stems from incorrect authentication in RemoteViews. An attacker could use this vulnerability to launch certain activities...

CVE-2022-22057

CVE-2022-22057 (Qualcomm KGSL) is a use-after-free race condition in the Graphics Fence handling caused by closing the fence file descriptor and destroying the graphics timeline concurrently in Qualcomm’s KGSL driver. Affected products span Snapdragon Auto, Compute, Connectivity, Industrial IoT, ...

PT-2022-10428 · Qualcomm · Snapdragon Connectivity +1

Name of the Vulnerable Software and Affected Versions: Snapdragon Connectivity, Snapdragon Mobile affected versions not specified Description: The issue is related to improper validation of tag id while RRC sends tag id to MAC, leading to a Time-of-Check-to-Time-of-Use TOCTOU race condition. This...

PT-2022-15231 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in audio due to a use-after-free error while managing buffers from an internal cache. This affects Snapdragon Compute, Snapdragon...

Samsung mobile SemIWCMonitor Information Disclosure Vulnerability (CNVD-2022-67281)

Samsung mobile is a cell phone from Samsung South Korea. samsung mobile SemIWCMonitor is vulnerable to an information disclosure vulnerability that stems from a configuration error in the network system or product during operation. An attacker could exploit this vulnerability to obtain MAC addres...

PT-2022-10009 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper SMMU configuration, allowing RPM secure Stream to access any secure resource. This affects various Qualcomm Snapdragon products, including...