Qualcomm Inc Snapdragon vulnerabilities

CVE-2022-33269 [HIGH] CWE-190 CVE-2022-33269: Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment. Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

CVE-2022-40532 [HIGH] CWE-190 CVE-2022-40532: Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to t Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

CVE-2022-33276 [HIGH] CWE-120 CVE-2022-33276: Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQ Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.

CVE-2022-33263 [HIGH] CWE-416 CVE-2022-33263: Memory corruption due to use after free in Core when multiple DCI clients register and deregister. Memory corruption due to use after free in Core when multiple DCI clients register and deregister.

CVE-2022-33281 [HIGH] CWE-129 CVE-2022-33281: Memory corruption due to improper validation of array index in computer vision while testing EVA ker Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.

CVE-2022-33296 [HIGH] CWE-680 CVE-2022-33296: Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update message.

CVE-2022-33301 [HIGH] CWE-704 CVE-2022-33301: Memory corruption due to incorrect type conversion or cast in audio while using audio playback/captu Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM.

CVE-2022-33298 [HIGH] CWE-416 CVE-2022-33298: Memory corruption due to use after free in Modem while modem initialization. Memory corruption due to use after free in Modem while modem initialization.

CVE-2022-25715 [HIGH] CWE-704 CVE-2022-25715: Memory corruption in display driver due to incorrect type casting while accessing the fence structur Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields

CVE-2023-43532 [HIGH] CWE-822 CVE-2023-43532: Memory corruption while reading ACPI config through the user mode app. Memory corruption while reading ACPI config through the user mode app.

CVE-2023-43514 [HIGH] CWE-416 CVE-2023-43514: Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem Memory corruption while invoking IOCTLs calls from user space for internal mem MAP and internal mem UNMAP.

CVE-2023-33039 [HIGH] CWE-416 CVE-2023-33039: Memory corruption in Automotive Display while destroying the image handle created using connected di Memory corruption in Automotive Display while destroying the image handle created using connected display driver.

CVE-2022-40534 [HIGH] CWE-129 CVE-2022-40534: Memory corruption due to improper validation of array index in Audio. Memory corruption due to improper validation of array index in Audio.

CVE-2023-21672 [HIGH] CWE-416 CVE-2023-21672: Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunne Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.

CVE-2023-43513 [HIGH] CWE-823 CVE-2023-43513: Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.

CVE-2023-24850 [HIGH] CWE-129 CVE-2023-24850: Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application. Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.

CVE-2023-28559 [HIGH] CWE-120 CVE-2023-28559: Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload. Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.

CVE-2023-28557 [HIGH] CWE-129 CVE-2023-28557: Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload. Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.

CVE-2023-28541 [HIGH] CWE-126 CVE-2023-28541: Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.

CVE-2023-43524 [HIGH] CWE-120 CVE-2023-43524: Memory corruption when the bandpass filter order received from AHAL is not within the expected range Memory corruption when the bandpass filter order received from AHAL is not within the expected range.