Qualcomm Inc Snapdragon vulnerabilities

CVE-2022-34146 [HIGH] CWE-20 CVE-2022-34146: Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentati Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation.

CVE-2022-40502 [HIGH] CWE-20 CVE-2022-40502: Transient DOS due to improper input validation in WLAN Host. Transient DOS due to improper input validation in WLAN Host.

CVE-2022-40503 [HIGH] CWE-126 CVE-2022-40503: Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

CVE-2023-33016 [HIGH] CWE-126 CVE-2023-33016: Transient DOS in WLAN firmware while parsing MLO (multi-link operation). Transient DOS in WLAN firmware while parsing MLO (multi-link operation).

CVE-2022-40538 [HIGH] CWE-617 CVE-2022-40538: Transient DOS due to reachable assertion in modem while processing sib with incorrect values from ne Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.

CVE-2022-40504 [HIGH] CWE-617 CVE-2022-40504: Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

CVE-2022-33271 [HIGH] CWE-126 CVE-2022-33271: Information disclosure due to buffer over-read in WLAN while parsing NMF frame. Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

CVE-2022-25732 [HIGH] CWE-126 CVE-2022-25732: Information disclosure in modem due to buffer over read in dns client due to missing length check Information disclosure in modem due to buffer over read in dns client due to missing length check

CVE-2022-25728 [HIGH] CWE-126 CVE-2022-25728: Information disclosure in modem due to buffer over-read while processing response from DNS server Information disclosure in modem due to buffer over-read while processing response from DNS server

CVE-2024-45558 [HIGH] CWE-126 CVE-2024-45558: Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN e Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.

CVE-2023-21669 [HIGH] CWE-126 CVE-2023-21669: Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source ad Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

CVE-2022-40521 [HIGH] CWE-285 CVE-2022-40521: Transient DOS due to improper authorization in Modem Transient DOS due to improper authorization in Modem

CVE-2022-40505 [HIGH] CWE-126 CVE-2022-40505: Information disclosure due to buffer over-read in Modem while parsing DNS hostname. Information disclosure due to buffer over-read in Modem while parsing DNS hostname.

CVE-2022-33287 [HIGH] CWE-126 CVE-2022-33287: Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.

CVE-2022-33228 [HIGH] CWE-126 CVE-2022-33228: Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.

CVE-2022-25730 [HIGH] CWE-126 CVE-2022-25730: Information disclosure in modem due to improper check of IP type while processing DNS server query Information disclosure in modem due to improper check of IP type while processing DNS server query

CVE-2022-33291 [HIGH] CWE-126 CVE-2022-33291: Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed l Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

CVE-2022-25747 [HIGH] CWE-126 CVE-2022-25747: Information disclosure in modem due to improper input validation during parsing of upcoming CoAP mes Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message

CVE-2022-25731 [HIGH] CWE-131 CVE-2022-25731: Information disclosure in modem due to buffer over-read while processing packets from DNS server Information disclosure in modem due to buffer over-read while processing packets from DNS server

CVE-2022-33295 [HIGH] CWE-126 CVE-2022-33295: Information disclosure in Modem due to buffer over-read while parsing the wms message received given Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length.