Qualcomm, Inc.
Page 10 of 30 — Qualcomm, Inc. CVEs from a corpus of 2956, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25705 | High | 7.8 | 2023-03-10 | Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response |
CVE-2022-25694 | High | 8.4 | 2023-03-10 | Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM |
CVE-2022-25655 | High | 8.4 | 2023-03-10 | Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload. |
CVE-2022-22075 | Medium | 6.2 | 2023-03-10 | Information Disclosure in Graphics during GPU context switch. |
CVE-2022-40514 | Critical | 9.8 | 2023-02-12 | Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame. |
CVE-2022-40513 | High | 7.5 | 2023-02-12 | Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state. |
CVE-2022-40512 | High | 7.5 | 2023-02-12 | Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. |
CVE-2022-40502 | High | 7.5 | 2023-02-12 | Transient DOS due to improper input validation in WLAN Host. |
CVE-2022-34146 | High | 7.5 | 2023-02-12 | Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation. |
CVE-2022-34145 | High | 7.5 | 2023-02-12 | Transient DOS due to buffer over-read in WLAN Host while parsing frame information. |
CVE-2022-33306 | High | 7.5 | 2023-02-12 | Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs. |
CVE-2022-33280 | High | 7.3 | 2023-02-12 | Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet. |
CVE-2022-33279 | Critical | 9.8 | 2023-02-12 | Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length. |
CVE-2022-33277 | High | 8.4 | 2023-02-12 | Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command. |
CVE-2022-33271 | High | 8.2 | 2023-02-12 | Information disclosure due to buffer over-read in WLAN while parsing NMF frame. |
CVE-2022-33248 | High | 7.8 | 2023-02-12 | Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http. |
CVE-2022-33246 | Medium | 6.7 | 2023-02-12 | Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id. |
CVE-2022-33243 | High | 8.4 | 2023-02-12 | Memory corruption due to improper access control in Qualcomm IPC. |
CVE-2022-33233 | High | 7.8 | 2023-02-12 | Memory corruption due to configuration weakness in modem wile sending command to write protected files. |
CVE-2022-33232 | Critical | 9.3 | 2023-02-12 | Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory. |
CVE-2022-33229 | High | 8.2 | 2023-02-12 | Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets. |
CVE-2022-33225 | Medium | 6.7 | 2023-02-12 | Memory corruption due to use after free in trusted application environment. |
CVE-2022-33221 | Medium | 6.8 | 2023-02-12 | Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests. |
CVE-2022-33216 | Medium | 6.0 | 2023-02-12 | Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file. |
CVE-2022-25738 | High | 8.2 | 2023-02-12 | Information disclosure in modem due to buffer over-red while performing checksum of packet received |
CVE-2022-25735 | High | 7.5 | 2023-02-12 | Denial of service in modem due to missing null check while processing TCP or UDP packets from server |
CVE-2022-25734 | High | 7.5 | 2023-02-12 | Denial of service in modem due to missing null check while processing IP packets with padding |
CVE-2022-25733 | High | 7.5 | 2023-02-12 | Denial of service in modem due to null pointer dereference while processing DNS packets |
CVE-2022-25732 | High | 8.2 | 2023-02-12 | Information disclosure in modem due to buffer over read in dns client due to missing length check |
CVE-2022-25729 | Critical | 9.8 | 2023-02-12 | Memory corruption in modem due to improper length check while copying into memory |
CVE-2022-25728 | High | 8.2 | 2023-02-12 | Information disclosure in modem due to buffer over-read while processing response from DNS server |
CVE-2022-40520 | High | 8.4 | 2023-01-09 | Memory corruption due to stack-based buffer overflow in Core |
CVE-2022-40519 | Medium | 6.8 | 2023-01-09 | Information disclosure due to buffer overread in Core |
CVE-2022-40518 | Medium | 6.8 | 2023-01-09 | Information disclosure due to buffer overread in Core |
CVE-2022-40517 | High | 8.4 | 2023-01-09 | Memory corruption in core due to stack-based buffer overflow |
CVE-2022-40516 | High | 8.4 | 2023-01-09 | Memory corruption in Core due to stack-based buffer overflow. |
CVE-2022-33300 | High | 8.4 | 2023-01-09 | Memory corruption in Automotive Android OS due to improper input validation. |
CVE-2022-33299 | High | 7.5 | 2023-01-09 | Transient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data. |
CVE-2022-33290 | High | 7.5 | 2023-01-09 | Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed. |
CVE-2022-33286 | High | 7.5 | 2023-01-09 | Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames. |
CVE-2022-33285 | High | 7.5 | 2023-01-09 | Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames. |
CVE-2022-33284 | High | 8.2 | 2023-01-09 | Information disclosure due to buffer over-read in WLAN while parsing BTM action frame. |
CVE-2022-33283 | High | 8.2 | 2023-01-09 | Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check. |
CVE-2022-33276 | High | 8.4 | 2023-01-09 | Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command. |
CVE-2022-33274 | High | 8.4 | 2023-01-09 | Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication. |
CVE-2022-33266 | Medium | 5.9 | 2023-01-09 | Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content. |
CVE-2022-33265 | High | 7.3 | 2023-01-09 | Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device. |
CVE-2022-33255 | High | 8.2 | 2023-01-09 | Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device. |
CVE-2022-33253 | High | 7.5 | 2023-01-09 | Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames. |
CVE-2022-33252 | High | 8.2 | 2023-01-09 | Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame. |
CVE-2022-33219 | Critical | 9.3 | 2023-01-09 | Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer. |
CVE-2022-33218 | High | 8.2 | 2023-01-09 | Memory corruption in Automotive due to improper input validation. |
CVE-2022-25746 | High | 8.1 | 2023-01-09 | Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping. |
CVE-2022-25725 | Medium | 6.2 | 2023-01-09 | Denial of service in MODEM due to improper pointer handling |
CVE-2022-25722 | Medium | 6.0 | 2023-01-09 | Information exposure in DSP services due to improper handling of freeing memory |
CVE-2022-25721 | Medium | 6.7 | 2023-01-09 | Memory corruption in video driver due to type confusion error during video playback |
CVE-2022-25717 | Medium | 6.7 | 2023-01-09 | Memory corruption in display due to double free while allocating frame buffer memory |
CVE-2022-25716 | Medium | 6.7 | 2023-01-09 | Memory corruption in Multimedia Framework due to unsafe access to the data members |
CVE-2022-25715 | Medium | 6.7 | 2023-01-09 | Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields |
CVE-2022-22088 | Critical | 9.8 | 2023-01-09 | Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote |
CVE-2022-22079 | Medium | 4.6 | 2023-01-09 | Denial of service while processing fastboot flash command on mmc due to buffer over read |
CVE-2022-22063 | High | 8.4 | 2022-12-15 | Memory corruption in Core due to improper configuration in boot remapper. |
CVE-2022-33268 | High | 8.2 | 2022-12-13 | Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer… |
CVE-2022-33238 | High | 7.5 | 2022-12-13 | Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon C… |
CVE-2022-33235 | High | 8.2 | 2022-12-13 | Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2022-25712 | Medium | 6.7 | 2022-12-13 | Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobil… |
CVE-2022-25711 | Medium | 6.7 | 2022-12-13 | Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IO… |
CVE-2022-25702 | High | 7.5 | 2022-12-13 | Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IO… |
CVE-2022-25698 | High | 8.4 | 2022-12-13 | Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables |
CVE-2022-25697 | High | 8.4 | 2022-12-13 | Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables |
CVE-2022-25695 | High | 8.4 | 2022-12-13 | Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdrago… |
CVE-2022-25692 | High | 7.5 | 2022-12-13 | Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industria… |
CVE-2022-25691 | High | 7.5 | 2022-12-13 | Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile |
CVE-2022-25689 | High | 7.5 | 2022-12-13 | Denial of service in Modem due to reachable assertion in Snapdragon Mobile |
CVE-2022-25685 | High | 7.5 | 2022-12-13 | Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdrago… |
CVE-2022-25682 | High | 8.4 | 2022-12-13 | Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CVE-2022-25681 | High | 8.4 | 2022-12-13 | Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon… |
CVE-2022-25677 | Medium | 6.7 | 2022-12-13 | Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industr… |
CVE-2022-25675 | Medium | 5.5 | 2022-12-13 | Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon Industrial IOT, Sn… |
CVE-2022-25673 | High | 7.5 | 2022-12-13 | Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile |
CVE-2022-25672 | High | 7.5 | 2022-12-13 | Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile |
CVE-2022-33239 | High | 7.5 | 2022-11-15 | Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CVE-2022-33237 | High | 7.5 | 2022-11-15 | Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2022-33236 | High | 7.5 | 2022-11-15 | Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon M… |
CVE-2022-33234 | High | 7.3 | 2022-11-15 | Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… |
CVE-2022-25743 | High | 8.4 | 2022-11-15 | Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon… |
CVE-2022-25742 | High | 7.5 | 2022-11-15 | Denial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice… |
CVE-2022-25741 | High | 7.5 | 2022-11-15 | Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CVE-2022-25727 | Critical | 9.8 | 2022-11-15 | Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Mus… |
CVE-2022-25724 | High | 8.4 | 2022-11-15 | Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CVE-2022-25710 | High | 7.5 | 2022-11-15 | Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CVE-2022-25679 | Medium | 6.2 | 2022-11-15 | Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna… |
CVE-2022-25676 | Medium | 6.8 | 2022-11-15 | Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Ind… |
CVE-2022-25674 | Medium | 6.5 | 2022-11-15 | Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice &… |
CVE-2022-25671 | High | 7.5 | 2022-11-15 | Denial of service in MODEM due to reachable assertion in Snapdragon Mobile |
CVE-2022-25667 | High | 7.5 | 2022-11-15 | Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking |
CVE-2022-33217 | High | 7.8 | 2022-10-19 | Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon M… |
CVE-2022-33214 | High | 8.4 | 2022-10-19 | Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdr… |
CVE-2022-33210 | High | 8.4 | 2022-10-19 | Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value. in Snap… |
CVE-2022-25750 | High | 8.4 | 2022-10-19 | Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile |