alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2022-33216 (published 2023-02-12)
Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: qam8295p, qam8295p_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, sa6145p, sa6145p_firmware, sa6150p, sa6150p_firmware, sa6155, sa6155_firmware, sa6155p, sa6155p_firmware, sa8145p, sa8145p_firmware, sa8150p, sa8150p_firmware, sa8155
CVE-2022-33217 (published 2022-10-19)
Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: sd_8_gen1_5g_firmware, sm8475, wcd9380, wcd9380_firmware, wcn6855, wcn6855_firmware, wcn6856, wcn6856_firmware, wcn7850, wcn7850_firmware, wcn7851, wcn7851_firmware, wsa8830, wsa8830_firmware, wsa8835, wsa8835_firmware
CVE-2022-33218 (published 2023-01-09)
Memory corruption in Automotive due to improper input validation.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: apq8064au, apq8064au_firmware, apq8096au, apq8096au_firmware, msm8996au, msm8996au_firmware, qam8295p, qam8295p_firmware, qca6564a, qca6564a_firmware, qca6564au, qca6564au_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6584au, qca6584au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, sa6145p
CVE-2022-33219 (published 2023-01-09)
Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: apq8064au, apq8064au_firmware, apq8096au, apq8096au_firmware, msm8996au, msm8996au_firmware, qam8295p, qam8295p_firmware, qca6564a, qca6564a_firmware, qca6564au, qca6564au_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6584au, qca6584au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, sa6145p
CVE-2022-3322 (published 2022-10-28)
Lock Warp switch is a feature of Zero Trust platform which, when
 enabled, prevents users of enrolled devices from disabling WARP client.
 Due to insufficient policy verification by WARP iOS client, this 
feature could be bypassed by using the "Disable WARP" quick action.




Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-862
Affected vendors: cloudflare
Affected products: warp_mobile_client
CVE-2022-33220 (published 2023-09-05)
Information disclosure in Automotive multimedia due to buffer over-read.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qam8295p, qam8295p_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6436, qca6436_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qcc5100, qcc5100_firmware, sa6145p
CVE-2022-33221 (published 2023-02-12)
Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: sd_8_gen1_5g_firmware, sm8475, ssg2115p, ssg2115p_firmware, ssg2125p, ssg2125p_firmware, sxr1230p, sxr1230p_firmware, sxr2230p, sxr2230p_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wcn6855, wcn6855_firmware, wcn6856, wcn6856_firmware, wcn7850, wcn7850_firmware, wcn7851, wcn7851_firmware, wsa8830, wsa8830_firmware, wsa8832
CVE-2022-33222 (published 2023-04-13)
Information disclosure due to buffer over-read while parsing DNS response packets in Modem.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qca4010, qca4010_firmware, qts110, qts110_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, wcd9306, wcd9306_firmware, wcd9330
CVE-2022-33223 (published 2023-04-13)
Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qts110, qts110_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, wcd9306, wcd9306_firmware, wcd9330, wcd9330_firmware
CVE-2022-33224 (published 2023-06-06)
Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qam8255p, qam8255p_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qca6698aq, qca6698aq_firmware, qca6797aq, qca6797aq_firmware, qcs8155, qcs8155_firmware, sa6145p, sa6145p_firmware, sa6150p, sa6150p_firmware, sa6155p
CVE-2022-33225 (published 2023-02-12)
Memory corruption due to use after free in trusted application environment.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, mdm9628, mdm9628_firmware, msm8996au, msm8996au_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6426, qca6426_firmware, qca6436, qca6436_firmware, qca6564a, qca6564a_firmware, qca6564au, qca6564au_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qualcomm215, qualcomm215_firmware, sd205
CVE-2022-33226 (published 2023-06-06)
Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qam8255p, qam8255p_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6698aq, qca6698aq_firmware, qca6797aq, qca6797aq_firmware, sa8255p, sa8255p_firmware, sd855, sd855_firmware, sm8150, sm8150-ac, sm8150-ac_firmware, sm8150_firmware, sm8350
CVE-2022-33227 (published 2023-06-06)
Memory corruption in Linux android due to double free while calling unregister provider after register call.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-415
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, csrb31024, csrb31024_firmware, qam8255p, qam8255p_firmware, qam8295p, qam8295p_firmware, qca6310, qca6310_firmware, qca6320, qca6320_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6436, qca6436_firmware, qca6564
CVE-2022-33228 (published 2023-04-13)
Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qts110, qts110_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, wcd9306, wcd9306_firmware, wcd9330, wcd9330_firmware
CVE-2022-33229 (published 2023-02-12)
Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, mdm9607, mdm9607_firmware, qca4004, qca4004_firmware, qca4010, qca4010_firmware, qca4020, qca4020_firmware, qca4024, qca4024_firmware, qcs405
CVE-2022-3323 (published 2022-09-27)
An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 8080 by default. An unauthenticated remote attacker can craft a special column_value parameter in the setConfiguration action to bypass checks in com.imc.iview.utils.CUtils.checkSQLInjection() to perform SQL injection. For example, the attacker can exploit the vulnerability to retrieve the iView admin password.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: advantech
Affected products: iview
CVE-2022-33230 (published 2023-06-06)
Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qca6554a, qca6554a_firmware, qca6564au, qca6564au_firmware, qca6574, qca6574_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6584au, qca6584au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, sa6145p
CVE-2022-33231 (published 2023-04-13)
Memory corruption due to double free in core while initializing the encryption key.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-415
Affected vendors: qualcomm
Affected products: 315_5g_iot_modem, 315_5g_iot_modem_firmware, 8098, 8098_firmware, 8909, 8909_firmware, 8998, 8998_firmware, apq8009, apq8009_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, c-v2x_9150, c-v2x_9150_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, fsm10056
CVE-2022-33232 (published 2023-02-12)
Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, qam8295p, qam8295p_firmware, qca6174a, qca6174a_firmware, qca6310, qca6310_firmware, qca6335, qca6335_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6431
CVE-2022-33233 (published 2023-02-12)
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-16
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8052, apq8052_firmware, apq8056, apq8056_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024
CVE-2022-33234 (published 2022-11-15)
Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qca6310, qca6310_firmware, qca6335, qca6335_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6431, qca6431_firmware, qca6436, qca6436_firmware, qca6564, qca6564_firmware, qca6564au
CVE-2022-33235 (published 2022-12-13)
Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, ipq4018, ipq4018_firmware, ipq4028, ipq4028_firmware, ipq4029
CVE-2022-33236 (published 2022-11-15)
Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, csr8811, csr8811_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6000, ipq6000_firmware, ipq6010, ipq6010_firmware, ipq6018, ipq6018_firmware, ipq6028, ipq6028_firmware, ipq8070a, ipq8070a_firmware, ipq8071a, ipq8071a_firmware, ipq8072a, ipq8072a_firmware, ipq8074a
CVE-2022-33237 (published 2022-11-15)
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, ipq4018, ipq4018_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, ipq5010, ipq5010_firmware, ipq5018
CVE-2022-33238 (published 2022-12-13)
Transient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-835
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024
CVE-2022-33239 (published 2022-11-15)
Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-835
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028
CVE-2022-3324 (published 2022-09-27)
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: debian, fedoraproject, vim
Affected products: debian_linux, fedora, vim
CVE-2022-33240 (published 2023-06-06)
Memory corruption in Audio due to incorrect type cast during audio use-cases.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-704
Affected vendors: qualcomm
Affected products: qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, sa6150p, sa6150p_firmware, sa6155p, sa6155p_firmware, sa8145p, sa8145p_firmware, sa8150p, sa8150p_firmware, sa8155p, sa8155p_firmware, sa8195p, sa8195p_firmware
CVE-2022-33242 (published 2023-03-10)
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9150, mdm9150_firmware, qam8295p, qam8295p_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6430
CVE-2022-33243 (published 2023-02-12)
Memory corruption due to improper access control in Qualcomm IPC.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csrb31024, csrb31024_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6010
CVE-2022-33244 (published 2023-03-10)
Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca6391, qca6391_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qcm6490, qcm6490_firmware, qcn6024, qcn6024_firmware, qcn9024, qcn9024_firmware, qcs6490, qcs6490_firmware, sa515m, sa515m_firmware, sd480, sd480_firmware, sd695, sd695_firmware, sd778g, sd778g_firmware, sd780g
CVE-2022-33245 (published 2023-03-10)
Memory corruption in WLAN due to use after free
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: apq8064au, apq8064au_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, mdm9650, mdm9650_firmware, msm8996au, msm8996au_firmware, qca6175a, qca6175a_firmware, qca6310, qca6310_firmware, qca6320, qca6320_firmware, qca6420
CVE-2022-33246 (published 2023-02-12)
Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-823
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, msm8996au, msm8996au_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6436, qca6436_firmware, qca6564a, qca6564a_firmware, qca6564au, qca6564au_firmware, qca6574a, qca6574a_firmware, qca6574au
CVE-2022-33248 (published 2023-02-12)
Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-680
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, mdm9150, mdm9150_firmware, mdm9250, mdm9250_firmware, mdm9650, mdm9650_firmware, msm8108
CVE-2022-3325 (published 2022-10-17)
Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. Allowed for editing the approval rules via the API by an unauthorised user.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-284
Affected vendors: gitlab
Affected products: gitlab
CVE-2022-33250 (published 2023-03-10)
Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6431, qca6431_firmware, qca6436, qca6436_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qca8081, qca8081_firmware, qca8337
CVE-2022-33251 (published 2023-06-06)
Transient DOS due to reachable assertion in Modem because of invalid network configuration.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: 315_5g_iot_modem, 315_5g_iot_modem_firmware, ar8035, ar8035_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6431, qca6431_firmware, qca6436, qca6436_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qca6698aq
CVE-2022-33252 (published 2023-01-09)
Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csrb31024, csrb31024_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6000, ipq6000_firmware, ipq6010, ipq6010_firmware, ipq6018, ipq6018_firmware, ipq6028, ipq6028_firmware, ipq8064
CVE-2022-33253 (published 2023-01-09)
Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csrb31024, csrb31024_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6000, ipq6000_firmware, ipq6010, ipq6010_firmware, ipq6018, ipq6018_firmware, ipq6028, ipq6028_firmware, ipq8064
CVE-2022-33254 (published 2023-03-10)
Transient DOS due to reachable assertion in Modem while processing SIB1 Message.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6431, qca6431_firmware, qca6436, qca6436_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qca8081
CVE-2022-33255 (published 2023-01-09)
Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, msm8108, msm8108_firmware, msm8208, msm8208_firmware, msm8209, msm8209_firmware, msm8608, msm8608_firmware, qca6310, qca6310_firmware, qca6320, qca6320_firmware, qca6335, qca6335_firmware, qca6390, qca6390_firmware, qca6391
CVE-2022-33256 (published 2023-03-10)
Memory corruption due to improper validation of array index in Multi-mode call processor.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6431, qca6431_firmware, qca6436, qca6436_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qca8081, qca8081_firmware, qca8337
CVE-2022-33257 (published 2023-03-10)
Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9205, mdm9205_firmware, qam8295p, qam8295p_firmware, qca4004, qca4004_firmware, qca6174a, qca6174a_firmware, qca6310, qca6310_firmware, qca6335, qca6335_firmware, qca6390, qca6390_firmware, qca6391
CVE-2022-33258 (published 2023-04-13)
Information disclosure due to buffer over-read in modem while reading configuration parameters.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qts110, qts110_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, wcd9306, wcd9306_firmware, wcd9330, wcd9330_firmware
CVE-2022-33259 (published 2023-04-13)
Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qts110, qts110_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, wcd9306, wcd9306_firmware, wcd9330, wcd9330_firmware
CVE-2022-3326 (published 2022-09-29)
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-521
Affected vendors: ikus-soft
Affected products: rdiffweb
CVE-2022-33260 (published 2023-03-10)
Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qam8295p, qam8295p_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qcc5100, qcc5100_firmware, qcs410, qcs410_firmware, qcs610, qcs610_firmware, qcs8155, qcs8155_firmware, sa6145p, sa6145p_firmware, sa6150p
CVE-2022-33263 (published 2023-06-06)
Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qam8255p, qam8255p_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6698aq, qca6698aq_firmware, qca6797aq, qca6797aq_firmware, qcs8155, qcs8155_firmware, sa6155p, sa6155p_firmware, sa8155p, sa8155p_firmware, sa8195p, sa8195p_firmware, sa8255p
CVE-2022-33264 (published 2023-06-06)
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: qualcomm
Affected products: 315_5g_iot_modem, 315_5g_iot_modem_firmware, 8953pro, 8953pro_firmware, 9207_lte_modem, 9207_lte_modem_firmware, apq5053-aa, apq5053-aa_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8053-aa, apq8053-aa_firmware, apq8053-ac, apq8053-ac_firmware, aqt1000, aqt1000_firmware, ar6003, ar6003_firmware, ar8035, ar8035_firmware, c-v2x_9150, c-v2x_9150_firmware, csra6620
CVE-2022-33265 (published 2023-01-09)
Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: qca7500, qca7500_firmware, qca7520, qca7520_firmware, qca7550, qca7550_firmware
CVE-2022-33266 (published 2023-01-09)
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8064au, apq8064au_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, mdm9150, mdm9150_firmware, mdm9206
CVE-2022-33267 (published 2023-06-06)
Memory corruption in Linux while sending DRM request.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6436, qca6436_firmware, qca6564, qca6564_firmware, qca6564au, qca6564au_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6696, qca6696_firmware, qcs410
CVE-2022-33268 (published 2022-12-13)
Information disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9206, mdm9206_firmware, mdm9250, mdm9250_firmware, mdm9607, mdm9607_firmware, mdm9628, mdm9628_firmware, qca6174a, qca6174a_firmware, qca6310, qca6310_firmware, qca6320, qca6320_firmware, qca6335
CVE-2022-33269 (published 2023-04-13)
Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-190
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, qam8295p, qam8295p_firmware, qca6174a, qca6174a_firmware, qca6310, qca6310_firmware, qca6335, qca6335_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6431
CVE-2022-3327 (published 2022-10-20)
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: ikus-soft
Affected products: rdiffweb
CVE-2022-33270 (published 2023-04-13)
Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-367
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca6391, qca6391_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qca6698aq, qca6698aq_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qcm6490, qcm6490_firmware, qcn6024, qcn6024_firmware, qcn9024, qcn9024_firmware, qcs6490, qcs6490_firmware, sd778g, sd778g_firmware, sdx57m
CVE-2022-33271 (published 2023-02-12)
Information disclosure due to buffer over-read in WLAN while parsing NMF frame.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6000
CVE-2022-33272 (published 2023-03-10)
Transient DOS in modem due to reachable assertion.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qcm6490, qcm6490_firmware, qcn6024, qcn6024_firmware, qcn9024, qcn9024_firmware, qcs6490, qcs6490_firmware, qcx315, qcx315_firmware, sd480, sd480_firmware, sd695, sd695_firmware, sd765
CVE-2022-33273 (published 2023-05-02)
Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, qam8295p, qam8295p_firmware, qca6174a, qca6174a_firmware, qca6310, qca6310_firmware, qca6335, qca6335_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6431
CVE-2022-33274 (published 2023-01-09)
Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: qam8295p, qam8295p_firmware, qca6574au, qca6574au_firmware, qca6696, qca6696_firmware, sa6145p, sa6145p_firmware, sa6150p, sa6150p_firmware, sa6155p, sa6155p_firmware, sa8145p, sa8145p_firmware, sa8150p, sa8150p_firmware, sa8155p, sa8155p_firmware, sa8195p, sa8195p_firmware, sa8295p, sa8295p_firmware
CVE-2022-33275 (published 2023-09-05)
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: 315_5g_iot_modem, 315_5g_iot_modem_firmware, apq5053-aa, apq5053-aa_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, flight_rb5_5g_platform, flight_rb5_5g_platform_firmware, immersive_home_214_platform, immersive_home_214_platform_firmware, immersive_home_216_platform, immersive_home_216_platform_firmware, immersive_home_316_platform
CVE-2022-33276 (published 2023-01-09)
Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6000, ipq6000_firmware, ipq6010, ipq6010_firmware, ipq6018, ipq6018_firmware, ipq6028, ipq6028_firmware, ipq8064, ipq8064_firmware, ipq8065, ipq8065_firmware, ipq8068
CVE-2022-33277 (published 2023-02-12)
Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, ipq4018, ipq4018_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, ipq5010, ipq5010_firmware, ipq5018
CVE-2022-33278 (published 2023-03-10)
Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, qam8295p, qam8295p_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6431, qca6431_firmware, qca6436
CVE-2022-33279 (published 2023-02-12)
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: qualcomm
Affected products: ar9380, ar9380_firmware, csr8811, csr8811_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6000, ipq6000_firmware, ipq6010, ipq6010_firmware, ipq6018, ipq6018_firmware, ipq6028, ipq6028_firmware, ipq8064
CVE-2022-3328 (published 2024-01-08)
Race condition in snap-confine's must_mkdir_and_open_with_perms()
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: canonical
Affected products: snapd, ubuntu_linux
CVE-2022-33280 (published 2023-02-12)
Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-824
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9150, mdm9150_firmware, mdm9250, mdm9250_firmware, mdm9628, mdm9628_firmware, mdm9650, mdm9650_firmware, qca6174a, qca6174a_firmware, qca6391, qca6391_firmware, qca6564a, qca6564a_firmware, qca6564au
CVE-2022-33281 (published 2023-05-02)
Memory corruption due to improper validation of array index in computer vision while testing EVA kernel without sending any frames.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: sm8450, sm8450_firmware, wcd9380, wcd9380_firmware, wcn685x-1, wcn685x-1_firmware, wcn685x-5, wcn685x-5_firmware, wcn785x-1, wcn785x-1_firmware, wcn785x-5, wcn785x-5_firmware, wsa8830, wsa8830_firmware, wsa8835, wsa8835_firmware
CVE-2022-33282 (published 2023-04-13)
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-680
Affected vendors: qualcomm
Affected products: msm8996au, msm8996au_firmware, qam8295p, qam8295p_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6584au, qca6584au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, sa6145p, sa6145p_firmware, sa6150p, sa6150p_firmware, sa6155, sa6155_firmware, sa6155p, sa6155p_firmware, sa8145p
CVE-2022-33283 (published 2023-01-09)
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6000, ipq6000_firmware, ipq6010, ipq6010_firmware, ipq6018, ipq6018_firmware, ipq6028, ipq6028_firmware, ipq8064, ipq8064_firmware, ipq8065, ipq8065_firmware, ipq8068
CVE-2022-33284 (published 2023-01-09)
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6000, ipq6000_firmware, ipq6010, ipq6010_firmware, ipq6018, ipq6018_firmware, ipq6028, ipq6028_firmware, ipq8064, ipq8064_firmware, ipq8065
CVE-2022-33285 (published 2023-01-09)
Transient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024
CVE-2022-33286 (published 2023-01-09)
Transient DOS due to buffer over-read in WLAN while processing 802.11 management frames.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024
CVE-2022-33287 (published 2023-04-13)
Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: 9205_lte_modem, 9205_lte_modem_firmware, 9206_lte_modem, 9206_lte_modem_firmware, 9207_lte_modem, 9207_lte_modem_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, home_hub_100_platform, home_hub_100_platform_firmware, mdm8207, mdm8207_firmware, qca4004, qca4004_firmware, qca4010, qca4010_firmware, qca4024, qca4024_firmware, qcs400, qcs400_firmware, qts110
CVE-2022-33288 (published 2023-04-13)
Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: 315_5g_iot_modem, 315_5g_iot_modem_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, flight_rb5_5g_platform, flight_rb5_5g_platform_firmware, qam8295p, qam8295p_firmware, qca6174a, qca6174a_firmware, qca6310, qca6310_firmware, qca6335, qca6335_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6421, qca6421_firmware, qca6426
CVE-2022-33289 (published 2023-04-13)
Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: 315_5g_iot_modem, 315_5g_iot_modem_firmware, 7wcn785x-1, 7wcn785x-1_firmware, 8905, 8905_firmware, 8909, 8909_firmware, 8917, 8917_firmware, 8920, 8920_firmware, 8937, 8937_firmware, 8940, 8940_firmware, 8953, 8953_firmware, 8953pro, 8953pro_firmware, 9205_lte_modem, 9205_lte_modem_firmware, 9206_lte_modem, 9206_lte_modem_firmware, 9207_lte_modem
CVE-2022-33290 (published 2023-01-09)
Transient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: apq8017, apq8017_firmware, apq8096au, apq8096au_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, mdm9150, mdm9150_firmware, mdm9206, mdm9206_firmware, mdm9250, mdm9250_firmware, mdm9607, mdm9607_firmware, mdm9628, mdm9628_firmware, mdm9640, mdm9640_firmware, mdm9650
CVE-2022-33291 (published 2023-04-13)
Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: 9205_lte_modem, 9205_lte_modem_firmware, 9206_lte_modem, 9206_lte_modem_firmware, 9207_lte_modem, 9207_lte_modem_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, home_hub_100_platform, home_hub_100_platform_firmware, mdm8207, mdm8207_firmware, qca4004, qca4004_firmware, qca4010, qca4010_firmware, qca4024, qca4024_firmware, qcs400, qcs400_firmware, qts110