Qualcomm, Inc. Snapdragon Connectivity, Snapdragon Mobile
9 CVEs affecting Qualcomm, Inc. Snapdragon Connectivity, Snapdragon Mobile. Latest disclosed: 2022-09-16. Critical: 2, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25708 | Critical | 9.8 | 2022-09-16 | Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile |
CVE-2022-22096 | Critical | 9.8 | 2022-09-02 | Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Sna… |
CVE-2022-25693 | High | 8.4 | 2022-09-16 | Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile |
CVE-2021-35095 | High | 8.4 | 2022-06-14 | Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in… |
CVE-2021-35091 | High | 8.4 | 2022-06-14 | Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connectivity, Snapdragon Mobile |
CVE-2021-35110 | High | 8.1 | 2022-04-01 | Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobile |
CVE-2021-35111 | High | 7.5 | 2022-06-14 | Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile |
CVE-2021-35109 | Medium | 6.8 | 2022-09-02 | Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connectivity, Snapdragon Mo… |
CVE-2021-35108 | Medium | 6.8 | 2022-09-02 | Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Snapdragon Connectivit… |