Qualcomm Inc Snapdragon vulnerabilities

CVE-2022-40530 [HIGH] CWE-680 CVE-2022-40530: Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization p Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.

CVE-2022-25705 [HIGH] CWE-680 CVE-2022-25705: Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response

CVE-2022-25709 [HIGH] CWE-823 CVE-2022-25709: Memory corruption in modem due to use of out of range pointer offset while processing qmi msg Memory corruption in modem due to use of out of range pointer offset while processing qmi msg

CVE-2022-33278 [HIGH] CWE-120 CVE-2022-33278: Memory corruption due to buffer copy without checking the size of input in HLOS when input message s Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

CVE-2023-28577 [HIGH] CWE-416 CVE-2023-28577: In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being use In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the kernel va to use, another thread can call CAM_REQ_MGR_RELEASE_BUF to unmap the kernel va which cause UAF of the kernel address.

CVE-2022-33225 [HIGH] CWE-416 CVE-2022-33225: Memory corruption due to use after free in trusted application environment. Memory corruption due to use after free in trusted application environment.

CVE-2022-33274 [HIGH] CWE-129 CVE-2022-33274: Memory corruption in android core due to improper validation of array index while returning feature Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.

CVE-2022-33300 [HIGH] CWE-787 CVE-2022-33300: Memory corruption in Automotive Android OS due to improper input validation. Memory corruption in Automotive Android OS due to improper input validation.

CVE-2022-33302 [HIGH] CWE-129 CVE-2022-33302: Memory corruption due to improper validation of array index in User Identity Module when APN TLV len Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length.

CVE-2022-25715 [HIGH] CWE-704 CVE-2022-25715: Memory corruption in display driver due to incorrect type casting while accessing the fence structur Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields

CVE-2024-53034 [HIGH] CWE-822 CVE-2024-53034: Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object h Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.

CVE-2023-28583 [HIGH] CWE-415 CVE-2023-28583: Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr da Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.

CVE-2017-15832 [HIGH] CWE-20 CVE-2017-15832: Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW

CVE-2018-5852 [HIGH] CWE-126 CVE-2018-5852: An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while readi An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

CVE-2017-9711 [HIGH] CWE-264 CVE-2017-9711: Certain unprivileged processes are able to perform IOCTL calls. Certain unprivileged processes are able to perform IOCTL calls.

CVE-2022-33275 [HIGH] CWE-129 CVE-2022-33275: Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

CVE-2022-40534 [HIGH] CWE-129 CVE-2022-40534: Memory corruption due to improper validation of array index in Audio. Memory corruption due to improper validation of array index in Audio.

CVE-2022-33269 [HIGH] CWE-190 CVE-2022-33269: Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment. Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

CVE-2023-21630 [HIGH] CWE-191 CVE-2023-21630: Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along wit Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.

CVE-2023-21636 [HIGH] CWE-129 CVE-2023-21636: Memory Corruption due to improper validation of array index in Linux while updating adn record. Memory Corruption due to improper validation of array index in Linux while updating adn record.