alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2022-25663 (published 2022-10-19)
Possible buffer overflow due to lack of buffer length check during management frame Rx handling lead to denial of service in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qca1062, qca1062_firmware, qca1064, qca1064_firmware, qca2062, qca2062_firmware, qca2064, qca2064_firmware, qca2065, qca2065_firmware, qca2066, qca2066_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, sd778g, sd778g_firmware, sd7c
CVE-2022-25664 (published 2022-10-19)
Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-459
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8052, apq8052_firmware, apq8053, apq8053_firmware, apq8056, apq8056_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, mdm9150, mdm9150_firmware, mdm9650, mdm9650_firmware, msm8108, msm8108_firmware, msm8208, msm8208_firmware, msm8209, msm8209_firmware, msm8608
CVE-2022-25665 (published 2022-10-19)
Information disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, qam8295p, qam8295p_firmware, qca6174a, qca6174a_firmware, qca6310, qca6310_firmware, qca6335, qca6335_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6431
CVE-2022-25666 (published 2022-10-19)
Memory corruption due to use after free in service while trying to access maps by different threads in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6010, ipq6010_firmware, ipq6018
CVE-2022-25667 (published 2022-11-15)
Information disclosure in kernel due to improper handling of ICMP requests in Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-287
Affected vendors: qualcomm
Affected products: ar9380, ar9380_firmware, csr8811, csr8811_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6000, ipq6000_firmware, ipq6010, ipq6010_firmware, ipq6018, ipq6018_firmware, ipq6028
CVE-2022-25668 (published 2022-09-02)
Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-415
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9206, mdm9206_firmware, mdm9250, mdm9250_firmware, mdm9607, mdm9607_firmware, mdm9626
CVE-2022-25669 (published 2022-09-16)
Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9206, mdm9206_firmware, mdm9250, mdm9250_firmware, mdm9607, mdm9607_firmware, mdm9626, mdm9626_firmware, mdm9628
CVE-2022-2567 (published 2022-09-19)
The Form Builder CP WordPress plugin before 1.2.32 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: codepeople
Affected products: form_builder_cp
CVE-2022-25670 (published 2022-09-16)
Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9607, mdm9607_firmware, mdm9626, mdm9626_firmware, mdm9628
CVE-2022-25671 (published 2022-11-15)
Denial of service in MODEM due to reachable assertion in Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qcn6024, qcn6024_firmware, qcn9024, qcn9024_firmware, sd_8_gen1_5g_firmware, sdx65, sdx65_firmware, sm8475, wcd9380, wcd9380_firmware, wcn6855, wcn6855_firmware, wcn6856, wcn6856_firmware, wcn7850, wcn7850_firmware, wcn7851, wcn7851_firmware, wsa8830
CVE-2022-25672 (published 2022-12-13)
Denial of service in MODEM due to reachable assertion while processing SIB1 with invalid Bandwidth in Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qcn6024, qcn6024_firmware, qcn9024, qcn9024_firmware, sd480, sd480_firmware, sd695, sd695_firmware, sd_8_gen1_5g_firmware, sdx65, sdx65_firmware, sm4375, sm4375_firmware, sm8475, wcd9370, wcd9370_firmware, wcd9375, wcd9375_firmware, wcd9380
CVE-2022-25673 (published 2022-12-13)
Denial of service in MODEM due to reachable assertion while processing configuration from network in Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qcn6024, qcn6024_firmware, qcn9024, qcn9024_firmware, sd_8_gen1_5g_firmware, sdx65, sdx65_firmware, sm8475, wcd9380, wcd9380_firmware, wcn6855, wcn6855_firmware, wcn6856, wcn6856_firmware, wcn7850, wcn7850_firmware, wcn7851, wcn7851_firmware, wsa8830
CVE-2022-25674 (published 2022-11-15)
Cryptographic issues in WLAN during the group key handshake of the WPA/WPA2 protocol in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9205, mdm9205_firmware, qca4004, qca4004_firmware, qca4010, qca4010_firmware, qca4020, qca4020_firmware, qca4024, qca4024_firmware, qcs405, qcs405_firmware, wcd9306, wcd9306_firmware, wcd9335, wcd9335_firmware, wcn3980, wcn3980_firmware, wcn3998
CVE-2022-25675 (published 2022-12-13)
Denial of service due to reachable assertion in modem while processing filter rule from application client in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qca6310, qca6310_firmware, qca6320, qca6320_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qcm6490, qcm6490_firmware, qcs6490, qcs6490_firmware, qcx315, qcx315_firmware, sd480, sd480_firmware, sd690_5g, sd690_5g_firmware, sd695
CVE-2022-25676 (published 2022-11-15)
Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qam8295p, qam8295p_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6436, qca6436_firmware, qca6574, qca6574_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696
CVE-2022-25677 (published 2022-12-13)
Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6000, ipq6000_firmware, ipq6010
CVE-2022-25678 (published 2023-04-13)
Memory correction in modem due to buffer overwrite during coap connection
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qts110, qts110_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, wcd9306, wcd9306_firmware, wcd9330, wcd9330_firmware
CVE-2022-25679 (published 2022-11-15)
Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-284
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qcm2290, qcm2290_firmware, qcm4290, qcm4290_firmware, qcm6490, qcm6490_firmware, qcn7606, qcn7606_firmware, qcs2290, qcs2290_firmware, qcs4290, qcs4290_firmware, qcs6490, qcs6490_firmware, sd460
CVE-2022-2568 (published 2022-08-18)
A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions to modify the account settings of the superuser account and also remove the superuser privileges.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-269
Affected vendors: redhat
Affected products: ansible_automation_platform, enterprise_linux
CVE-2022-25680 (published 2022-09-02)
Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: msm8996au, msm8996au_firmware
CVE-2022-25681 (published 2022-12-13)
Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, qam8295p, qam8295p_firmware, qca6174a, qca6174a_firmware, qca6310, qca6310_firmware, qca6335, qca6335_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6431
CVE-2022-25682 (published 2022-12-13)
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command from card in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8052, apq8052_firmware, apq8056, apq8056_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar6003, ar6003_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640
CVE-2022-25685 (published 2022-12-13)
Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-287
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, msm8108, msm8108_firmware, msm8208, msm8208_firmware, msm8209, msm8209_firmware, msm8608, msm8608_firmware, msm8917, msm8917_firmware, msm8937
CVE-2022-25686 (published 2022-09-16)
Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: apq8017, apq8017_firmware, apq8053, apq8053_firmware, aqt1000, aqt1000_firmware, msm8917, msm8917_firmware, msm8953, msm8953_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6436, qca6436_firmware, qca6574, qca6574_firmware, qca6574a
CVE-2022-25687 (published 2022-10-19)
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8052, apq8052_firmware, apq8053, apq8053_firmware, apq8056, apq8056_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640
CVE-2022-25688 (published 2022-09-16)
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9206, mdm9206_firmware, mdm9250, mdm9250_firmware, mdm9607, mdm9607_firmware, mdm9626
CVE-2022-25689 (published 2022-12-13)
Denial of service in Modem due to reachable assertion in Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qcn6024, qcn6024_firmware, qcn9024, qcn9024_firmware, sdx65, sdx65_firmware, wcd9380, wcd9380_firmware, wcn6855, wcn6855_firmware, wcn6856, wcn6856_firmware
CVE-2022-2569 (published 2022-08-24)
The affected device stores sensitive information in cleartext, which may allow an authenticated user to access session data stored in the OAuth database belonging to legitimate users
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: arcinfo
Affected products: pcvue
CVE-2022-25690 (published 2022-09-16)
Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, mdm9250, mdm9250_firmware, mdm9607, mdm9607_firmware, mdm9626, mdm9626_firmware, mdm9628, mdm9628_firmware, mdm9640, mdm9640_firmware, mdm9650
CVE-2022-25691 (published 2022-12-13)
Denial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and bandwidth settings in Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qcn6024, qcn6024_firmware, qcn9024, qcn9024_firmware, sd480, sd480_firmware, sd695, sd695_firmware, sd_8_gen1_5g_firmware, sdx65, sdx65_firmware, sm4375, sm4375_firmware, sm8475, wcd9370, wcd9370_firmware, wcd9375, wcd9375_firmware, wcd9380
CVE-2022-25692 (published 2022-12-13)
Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6574a, qca6574a_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qcm6490, qcm6490_firmware, qcn6024, qcn6024_firmware, qcn9024, qcn9024_firmware, qcs6490, qcs6490_firmware, qcx315
CVE-2022-25693 (published 2022-09-16)
Memory corruption in graphics due to use-after-free while graphics profiling in Snapdragon Connectivity, Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: sd_8_gen1_5g_firmware, sm7450, sm7450_firmware, sm8475, sm8475_firmware, sm8475p, sm8475p_firmware, wcd9370, wcd9370_firmware, wcd9375, wcd9375_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wcn6750, wcn6750_firmware, wcn6855, wcn6855_firmware, wcn6856, wcn6856_firmware, wcn7851, wcn7851_firmware, wsa8830, wsa8830_firmware
CVE-2022-25694 (published 2023-03-10)
Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-823
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8052, apq8052_firmware, apq8056, apq8056_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar6003, ar6003_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640
CVE-2022-25695 (published 2022-12-13)
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8052, apq8052_firmware, apq8056, apq8056_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024
CVE-2022-25696 (published 2022-09-16)
Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: qualcomm
Affected products: apq8053, apq8053_firmware, aqt1000, aqt1000_firmware, msm8953, msm8953_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qca6574, qca6574_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qcm2290
CVE-2022-25697 (published 2022-12-13)
Memory corruption in i2c buses due to improper input validation while reading address configuration from i2c driver in Snapdragon Mobile, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: sd429, sd429_firmware, sd_8_gen1_5g_firmware, sda429w, sda429w_firmware, sdm429w, sdm429w_firmware, sm8475, wcd9380, wcd9380_firmware, wcn3610, wcn3610_firmware, wcn3620, wcn3620_firmware, wcn3660b, wcn3660b_firmware, wcn3680b, wcn3680b_firmware, wcn3980, wcn3980_firmware, wcn6855, wcn6855_firmware, wcn6856, wcn6856_firmware, wcn7850
CVE-2022-25698 (published 2022-12-13)
Memory corruption in SPI buses due to improper input validation while reading address configuration from spi buses in Snapdragon Mobile, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: qualcomm
Affected products: sd429, sd429_firmware, sd_8_gen1_5g_firmware, sda429w, sda429w_firmware, sdm429w, sdm429w_firmware, sm8475, wcd9380, wcd9380_firmware, wcn3610, wcn3610_firmware, wcn3620, wcn3620_firmware, wcn3660b, wcn3660b_firmware, wcn3680b, wcn3680b_firmware, wcn3980, wcn3980_firmware, wcn6855, wcn6855_firmware, wcn6856, wcn6856_firmware, wcn7850
CVE-2022-25702 (published 2022-12-13)
Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, fsm10055, fsm10055_firmware, msm8108, msm8108_firmware, msm8208, msm8208_firmware, msm8209, msm8209_firmware, msm8608, msm8608_firmware, msm8917, msm8917_firmware, msm8937, msm8937_firmware, qca6390
CVE-2022-25705 (published 2023-03-10)
Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-680
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8052, apq8052_firmware, apq8056, apq8056_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024
CVE-2022-25706 (published 2022-09-16)
Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8053, apq8053_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, msm8909w, msm8909w_firmware, msm8917, msm8917_firmware, msm8953, msm8953_firmware, msm8996au, msm8996au_firmware, qca6310, qca6310_firmware, qca6320, qca6320_firmware, qca6335, qca6335_firmware, qca6390
CVE-2022-25708 (published 2022-09-16)
Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: sd888_5g, sd888_5g_firmware, sd_8_gen1_5g_firmware, sm7450, sm7450_firmware, sm8475, wcd9370, wcd9370_firmware, wcd9375, wcd9375_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wcn6750, wcn6750_firmware, wcn6850, wcn6850_firmware, wcn6851, wcn6851_firmware, wcn6855, wcn6855_firmware, wcn6856, wcn6856_firmware, wcn7850
CVE-2022-25709 (published 2023-03-10)
Memory corruption in modem due to use of out of range pointer offset while processing qmi msg
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-823
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qca6174a, qca6174a_firmware, qca6310, qca6310_firmware, qca6320, qca6320_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6431, qca6431_firmware, qca6436, qca6436_firmware, qca8081, qca8081_firmware, qca8337, qca8337_firmware, qcn6024
CVE-2022-2571 (published 2022-08-01)
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-122
Affected vendors: vim
Affected products: vim
CVE-2022-25710 (published 2022-11-15)
Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8017, apq8017_firmware, apq8096au, apq8096au_firmware, ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, mdm9150, mdm9150_firmware, mdm9206, mdm9206_firmware, mdm9250, mdm9250_firmware, mdm9607, mdm9607_firmware, mdm9628, mdm9628_firmware, mdm9640
CVE-2022-25711 (published 2022-12-13)
Memory corruption in camera due to improper validation of array index in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, mdm9150, mdm9150_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6436, qca6436_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696, qca6696_firmware, qca8337, qca8337_firmware, qcc5100
CVE-2022-25712 (published 2022-12-13)
Memory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, mdm9150, mdm9150_firmware, qca6310, qca6310_firmware, qca6335, qca6335_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6426, qca6426_firmware, qca6430, qca6430_firmware, qca6436, qca6436_firmware, qcc5100, qcc5100_firmware, qcs410, qcs410_firmware, qcs610
CVE-2022-25713 (published 2023-05-02)
Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, qam8295p, qam8295p_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6431, qca6431_firmware, qca6436, qca6436_firmware, qca6574, qca6574_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696
CVE-2022-25715 (published 2023-01-09)
Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-704
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, mdm9150, mdm9150_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qca8337, qca8337_firmware, qcn9074, qcn9074_firmware, qcs410, qcs410_firmware, qcs610, qcs610_firmware, qcs8155, qcs8155_firmware, qualcomm215, qualcomm215_firmware, sa515m, sa515m_firmware, sa8155p
CVE-2022-25716 (published 2023-01-09)
Memory corruption in Multimedia Framework due to unsafe access to the data members
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: qualcomm
Affected products: sd888_5g, sd888_5g_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wcn6850, wcn6850_firmware, wcn6851, wcn6851_firmware, wsa8830, wsa8830_firmware, wsa8835, wsa8835_firmware
CVE-2022-25717 (published 2023-01-09)
Memory corruption in display due to double free while allocating frame buffer memory
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-415
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, mdm9150, mdm9150_firmware, mdm9250, mdm9250_firmware, mdm9650, mdm9650_firmware, msm8996au, msm8996au_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qca6564a, qca6564a_firmware, qca6564au, qca6564au_firmware, qca6574a, qca6574a_firmware, qca6574au
CVE-2022-25718 (published 2022-10-19)
Cryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-252
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8016, apq8016_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8052, apq8052_firmware, apq8053, apq8053_firmware, apq8056, apq8056_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8092, apq8092_firmware, apq8094, apq8094_firmware, apq8096au
CVE-2022-25719 (published 2022-10-19)
Information disclosure in WLAN due to improper length check while processing authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8016, apq8016_firmware, apq8017, apq8017_firmware, apq8037, apq8037_firmware, apq8052, apq8052_firmware, apq8053, apq8053_firmware, apq8056, apq8056_firmware, apq8076, apq8076_firmware, apq8084, apq8084_firmware, ar8031, ar8031_firmware, csr8811, csr8811_firmware, csra6620
CVE-2022-2572 (published 2022-11-01)
In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keys of a disabled/deleted user were still valid after the access was revoked.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: octopus
Affected products: octopus_server
CVE-2022-25720 (published 2022-10-19)
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-129
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8052, apq8052_firmware, apq8053, apq8053_firmware, apq8056, apq8056_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar6003, ar6003_firmware, ar8031, ar8031_firmware, ar8035
CVE-2022-25721 (published 2023-01-09)
Memory corruption in video driver due to type confusion error during video playback
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-843
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, mdm9150, mdm9150_firmware, qca6391, qca6391_firmware, qca6420, qca6420_firmware, qca6430, qca6430_firmware, qca6564, qca6564_firmware, qca6564au, qca6564au_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6696, qca6696_firmware, qca8337, qca8337_firmware, qcn9074, qcn9074_firmware, qcs410
CVE-2022-25722 (published 2023-01-09)
Information exposure in DSP services due to improper handling of freeing memory
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: apq8096au, apq8096au_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, ipq4018, ipq4018_firmware, ipq4019, ipq4019_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, ipq5010, ipq5010_firmware, ipq5018, ipq5018_firmware, ipq5028, ipq5028_firmware, ipq6010, ipq6010_firmware, ipq6018, ipq6018_firmware, ipq6028
CVE-2022-25723 (published 2022-10-19)
Memory corruption in multimedia due to use after free during callback registration failure in Snapdragon Mobile
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: qualcomm
Affected products: sd_8_gen1_5g_firmware, sm8475, wcd9380, wcd9380_firmware, wcn6855, wcn6855_firmware, wcn6856, wcn6856_firmware, wcn7850, wcn7850_firmware, wcn7851, wcn7851_firmware, wsa8830, wsa8830_firmware, wsa8835, wsa8835_firmware
CVE-2022-25724 (published 2022-11-15)
Memory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: qualcomm
Affected products: apq8009, apq8009_firmware, apq8009w, apq8009w_firmware, apq8017, apq8017_firmware, apq8052, apq8052_firmware, apq8056, apq8056_firmware, apq8064au, apq8064au_firmware, apq8076, apq8076_firmware, apq8096au, apq8096au_firmware, aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640
CVE-2022-25725 (published 2023-01-09)
Denial of service in MODEM due to improper pointer handling
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-763
Affected vendors: qualcomm
Affected products: ar8035, ar8035_firmware, csrb31024, csrb31024_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6421, qca6421_firmware, qca6426, qca6426_firmware, qca6431, qca6431_firmware, qca6436, qca6436_firmware, qca6564au, qca6564au_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6595au, qca6595au_firmware, qca6696
CVE-2022-25726 (published 2023-04-13)
Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qts110, qts110_firmware, snapdragon_ar2_gen_1_platform, snapdragon_ar2_gen_1_platform_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, ssg2115p, ssg2115p_firmware, ssg2125p
CVE-2022-25727 (published 2022-11-15)
Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1284
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, mdm9607, mdm9607_firmware, qca4004, qca4004_firmware, qca4010, qca4010_firmware, qca4020, qca4020_firmware, qca4024, qca4024_firmware, qcs405
CVE-2022-25728 (published 2023-02-12)
Information disclosure in modem due to buffer over-read while processing response from DNS server
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, mdm9607, mdm9607_firmware, qca4004, qca4004_firmware, qca4020, qca4020_firmware, qca4024, qca4024_firmware, qcs405, qcs405_firmware, qts110
CVE-2022-25729 (published 2023-02-12)
Memory corruption in modem due to improper length check while copying into memory
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, qca4004, qca4004_firmware, qca4020, qca4020_firmware, qca4024, qca4024_firmware, qcs405, qcs405_firmware, qts110, qts110_firmware, ssg2115p, ssg2115p_firmware, ssg2125p, ssg2125p_firmware, sxr1230p
CVE-2022-25730 (published 2023-04-13)
Information disclosure in modem due to improper check of IP type while processing DNS server query
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qca4010, qca4010_firmware, qts110, qts110_firmware, snapdragon_ar2_gen_1_platform, snapdragon_ar2_gen_1_platform_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, ssg2115p
CVE-2022-25731 (published 2023-04-13)
Information disclosure in modem due to buffer over-read while processing packets from DNS server
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-131
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qca4010, qca4010_firmware, qts110, qts110_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, wcd9306, wcd9306_firmware, wcd9330
CVE-2022-25732 (published 2023-02-12)
Information disclosure in modem due to buffer over read in dns client due to missing length check
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, mdm9607, mdm9607_firmware, qca4004, qca4004_firmware, qca4020, qca4020_firmware, qca4024, qca4024_firmware, qcs405, qcs405_firmware, qts110
CVE-2022-25733 (published 2023-02-12)
Denial of service in modem due to null pointer dereference while processing DNS packets
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, mdm9607, mdm9607_firmware, qca4004, qca4004_firmware, qca4010, qca4010_firmware, qca4020, qca4020_firmware, qca4024, qca4024_firmware, qcs405
CVE-2022-25734 (published 2023-02-12)
Denial of service in modem due to missing null check while processing IP packets with padding
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-835
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, mdm9607, mdm9607_firmware, qca4004, qca4004_firmware, qca4010, qca4010_firmware, qca4020, qca4020_firmware, qca4024, qca4024_firmware, qcs405
CVE-2022-25735 (published 2023-02-12)
Denial of service in modem due to missing null check while processing TCP or UDP packets from server
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, mdm9607, mdm9607_firmware, qca4004, qca4004_firmware, qca4020, qca4020_firmware, qca4024, qca4024_firmware, qcs405, qcs405_firmware, qts110
CVE-2022-25736 (published 2022-10-19)
Denial of service in WLAN due to out-of-bound read happens while processing VHT action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: qualcomm
Affected products: aqt1000, aqt1000_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, ar9380, ar9380_firmware, csr8811, csr8811_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, csrb31024, csrb31024_firmware, ipq4018, ipq4018_firmware, ipq4028, ipq4028_firmware, ipq4029, ipq4029_firmware, ipq5010, ipq5010_firmware, ipq5018
CVE-2022-25737 (published 2023-04-13)
Information disclosure in modem due to missing NULL check  while reading packets received from local network
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-457
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qts110, qts110_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, wcd9306, wcd9306_firmware, wcd9330, wcd9330_firmware
CVE-2022-25738 (published 2023-02-12)
Information disclosure in modem due to buffer over-red while performing checksum of packet received
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-126
Affected vendors: qualcomm
Affected products: ar8031, ar8031_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, mdm9607, mdm9607_firmware, qca4004, qca4004_firmware, qca4010, qca4010_firmware, qca4020, qca4020_firmware, qca4024, qca4024_firmware, qcs405
CVE-2022-25739 (published 2023-04-13)
Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: qualcomm
Affected products: mdm8207, mdm8207_firmware, mdm9205, mdm9205_firmware, mdm9206, mdm9206_firmware, mdm9207, mdm9207_firmware, qca4004, qca4004_firmware, qts110, qts110_firmware, snapdragon_ar2_gen_1_platform, snapdragon_ar2_gen_1_platform_firmware, snapdragon_wear_1100, snapdragon_wear_1100_firmware, snapdragon_wear_1200, snapdragon_wear_1200_firmware, snapdragon_wear_1300, snapdragon_wear_1300_firmware, snapdragon_x5_lte_modem, snapdragon_x5_lte_modem_firmware, ssg2115p, ssg2115p_firmware, ssg2125p