Latest qualcomm sdx12 firmware vulnerabilities since last week (CVE List)

● CVE-2022-40510

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 403 more

● CVE-2023-22666

Integer Overflow or Wraparound in Audio

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 683 more

● CVE-2022-25694

Use of Out-of-range Pointer Offset in MODEM

Google Android

Qualcomm Apq8017

Qualcomm Apq8037 Firmware

Qualcomm Apq8037

and 827 more

● CVE-2022-33213

Memory Corruption in MODEM

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 831 more

● CVE-2022-25705

Integer Overflow to Buffer Overflow in Modem

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 799 more

● CVE-2022-40531

Incorrect type conversion in WLAN

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8076 Firmware

Qualcomm Apq8076

and 1131 more

● CVE-2022-33248

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 319 more

● CVE-2022-33233

Memory corruption due to configuration weakness in modem wile sending command to write protected files.

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 397 more

● CVE-2022-40512

Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 585 more

● CVE-2022-33300

Memory corruption in Automotive Android OS due to improper input validation.

Qualcomm Qam8295p Firmware

Qualcomm Qam8295p

Google Android

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

and 96 more

● CVE-2022-33285

Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 551 more

● CVE-2022-33286

Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 557 more

● CVE-2022-25682

Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 403 more

● CVE-2022-25695

Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 389 more

● CVE-2022-33238

Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electron...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 563 more

● CVE-2022-25724

Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial I...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 397 more

● CVE-2022-33239

Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Ele...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 463 more

● CVE-2022-25743

Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 373 more

● CVE-2022-25749

Transient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sn...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 547 more

● CVE-2022-25748

Memory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connecti...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Qualcomm Apq8076 Firmware

Qualcomm Apq8076

and 541 more

● CVE-2022-25720

Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdra...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 365 more

● CVE-2022-25718

Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon C...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8016 Firmware

Google Android

and 279 more

● CVE-2022-25670

Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon ...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 246 more

● CVE-2022-25656

Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Co...

Google Android

Qualcomm Ar8035

Google Android

Qualcomm Qca6390 Firmware

Qualcomm Qca6390

and 124 more

● CVE-2021-35133

Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Google Android

Qualcomm Ar8035

Google Android

and 65 more

● CVE-2022-22062

An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connect...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 392 more

● CVE-2022-22070

Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 284 more

● CVE-2022-22080

Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial I...

Google Android

and 219 more

● CVE-2022-22071

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm Multiple Chipsets

Google Android

Qualcomm Ar8031

Google Android

and 175 more

● CVE-2021-35098

Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial I...

Google Android

and 166 more

● CVE-2021-35092

Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con...

Google Android

and 160 more

● CVE-2021-35084

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sn...

Google Android

Qualcomm Ar8031

Google Android

Qualcomm Ar8035

and 178 more

● CVE-2021-35083

Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electron...

Google Android

Qualcomm Apq8009

Google Android

and 342 more

● CVE-2022-22065

Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Co...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

and 329 more

● CVE-2022-22064

Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...

Google Android

Qualcomm Apq8009

Google Android

and 319 more

● CVE-2022-22068

kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer I...

Google Android

Qualcomm Ar8031

and 227 more

● CVE-2022-22057

Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit...

Google Android

Qualcomm Ar8035

Google Android

and 155 more

● CVE-2022-22072

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT...

Google Android

Qualcomm Apq8009

Google Android

Qualcomm Apq8017

Google Android

and 111 more

● CVE-2021-35116

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu...

Google Android

Qualcomm Apq8009

Google Android

and 221 more

● CVE-2021-35072

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Sna...

Google Android

Qualcomm Apq8009

Google Android

and 159 more

● CVE-2021-30341

Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snap...

Google Android

and 235 more

● CVE-2021-30342

Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snap...

Google Android

Qualcomm Apq8017

Google Android

and 185 more

● CVE-2021-35112

A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra...

Google Android

Qualcomm Ar8031

and 209 more

● CVE-2021-35104

Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indus...

Google Android

Qualcomm Apq8017

Qualcomm Apq8064au Firmware

Qualcomm Apq8064au

and 347 more

● CVE-2021-35130

Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Google Android

Qualcomm Ar8035

Qualcomm Qam8295p Firmware

Qualcomm Qam8295p

Google Android

and 109 more

● CVE-2021-30344

Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indu...

Google Android

Qualcomm Apq8017

Google Android

and 289 more

● CVE-2021-35105

Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial...

Google Android

Qualcomm Apq8017

Google Android

and 309 more

● CVE-2021-35074

Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdrago...

Google Android

Qualcomm Ar8035

Google Android

and 77 more

● CVE-2021-30322

Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum...

Google Android

Qualcomm Ar8035

Google Android

and 191 more

● CVE-2021-30318

Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria...

Google Android

Qualcomm Apq8017

Google Android

and 269 more

Latest qualcomm sdx12 firmware Vulnerabilities

Company

Resources

Contact