deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-30347
Published: 2022-06-14
Description: Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-367
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-30349
Published: 2022-06-14
Description: Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 8.2 (HIGH)
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-30350
Published: 2022-06-14
Description: Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables
CVSS Score: 8.4 (HIGH)
CWE: CWE-1284
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-35070
Published: 2022-06-14
Description: RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-35071
Published: 2022-06-14
Description: Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-35072
Published: 2022-06-14
Description: Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35073
Published: 2022-06-14
Description: Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35076
Published: 2022-06-14
Description: Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35078
Published: 2022-06-14
Description: Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35079
Published: 2022-06-14
Description: Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-281
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35080
Published: 2022-06-14
Description: Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35081
Published: 2022-06-14
Description: Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-35082
Published: 2022-06-14
Description: Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has been received in Snapdragon Industrial IOT
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-367
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35083
Published: 2022-06-14
Description: Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 8.2 (HIGH)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin
CVE: CVE-2021-35084
Published: 2022-06-14
Description: Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35085
Published: 2022-06-14
Description: Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35086
Published: 2022-06-14
Description: Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35087
Published: 2022-06-14
Description: Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35090
Published: 2022-06-14
Description: Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-367
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35091
Published: 2022-06-14
Description: Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connectivity, Snapdragon Mobile
CVSS Score: 8.4 (HIGH)
CWE: CWE-704
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-35092
Published: 2022-06-14
Description: Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35094
Published: 2022-06-14
Description: Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35095
Published: 2022-06-14
Description: Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register with same label in Snapdragon Connectivity, Snapdragon Mobile
CVSS Score: 8.4 (HIGH)
CWE: CWE-502
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-35096
Published: 2022-06-14
Description: Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35098
Published: 2022-06-14
Description: Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35100
Published: 2022-06-14
Description: Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-35101
Published: 2022-06-14
Description: Improper handling of writes to virtual GICR control can lead to assertion failure in the hypervisor in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile
CVSS Score: 7.1 (HIGH)
CWE: CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin
CVE: CVE-2021-35102
Published: 2022-06-14
Description: Possible buffer overflow due to lack of validation for the length of NAI string read from EFS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin
CVE: CVE-2021-35104
Published: 2022-06-14
Description: Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-35111
Published: 2022-06-14
Description: Improper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition in Snapdragon Connectivity, Snapdragon Mobile
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-367
References: https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin
CVE: CVE-2021-35112
Published: 2022-06-14
Description: A user with user level permission can access graphics protected region due to improper access control in register configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 8.4 (HIGH)
CWE: CWE-863
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-35114
Published: 2022-06-14
Description: Improper buffer initialization on the backend driver can lead to buffer overflow in Snapdragon Auto
CVSS Score: 8.4 (HIGH)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin
CVE: CVE-2021-35116
Published: 2022-06-14
Description: APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 7.7 (HIGH)
CWE: CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin
CVE: CVE-2021-35118
Published: 2022-06-14
Description: An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin
CVE: CVE-2021-35119
Published: 2022-06-14
Description: Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin
CVE: CVE-2021-35120
Published: 2022-06-14
Description: Improper handling between export and release functions on the same handle from client can lead to use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin
CVE: CVE-2021-35121
Published: 2022-06-14
Description: An array index is improperly used to lock and unlock a mutex which can lead to a Use After Free condition In the Synx driver in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/june-2022-bulletin
CVE: CVE-2021-35123
Published: 2022-06-14
Description: Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Connectivity, Snapdragon Industrial IOT
CVSS Score: 8.8 (HIGH)
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-35126
Published: 2022-06-14
Description: Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 8.4 (HIGH)
CWE: CWE-129
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-35129
Published: 2022-06-14
Description: Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-35130
Published: 2022-06-14
Description: Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 8.4 (HIGH)
CWE: CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
CVE: CVE-2021-37182
Published: 2022-06-14
Description: A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5), SCALANCE XM416-4C (All versions < V6.5), SCALANCE XM416-4C (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 1x230V (All versions < V6.5), SCALANCE XR524-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 24V (All versions < V6.5), SCALANCE XR524-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 2x230V (All versions < V6.5), SCALANCE XR524-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 1x230V (All versions < V6.5), SCALANCE XR526-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 24V (All versions < V6.5), SCALANCE XR526-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 2x230V (All versions < V6.5), SCALANCE XR526-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR528-6M (All versions < V6.5), SCALANCE XR528-6M (2HR2) (All versions < V6.5), SCALANCE XR528-6M (2HR2, L3 int.) (All versions < V6.5), SCALANCE XR528-6M (L3 int.) (All versions < V6.5), SCALANCE XR552-12M (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2, L3 int.) (All versions < V6.5). The OSPF protocol implementation in affected devices fails to verify the checksum and length fields in the OSPF LS Update messages. An unauthenticated remote attacker could exploit this vulnerability to cause interruptions in the network by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-354, CWE-354
References: https://cert-portal.siemens.com/productcert/pdf/ssa-145224.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-145224.pdf
CVE: CVE-2021-40616
Published: 2022-06-14
Description: thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-425
References: https://github.com/thinkcmf/thinkcmf/issues/722; https://github.com/thinkcmf/thinkcmf/issues/722
CVE: CVE-2021-40649
Published: 2022-06-14
Description: In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: http://connx.com; https://github.com/l00neyhacker/CVE-2021-40649; http://connx.com
CVE: CVE-2021-40650
Published: 2022-06-14
Description: In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311
References: http://connx.com; https://github.com/l00neyhacker/CVE-2021-40650; http://connx.com
CVE: CVE-2022-22057
Published: 2022-06-14
Description: Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timeline simultaneously in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
CVSS Score: 8.4 (HIGH)
CWE: CWE-362
References: http://packetstormsecurity.com/files/172850/Qualcomm-kgsl-Driver-Use-After-Free.html; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; http://packetstormsecurity.com/files/172850/Qualcomm-kgsl-Driver-Use-After-Free.html
CVE: CVE-2022-22064
Published: 2022-06-14
Description: Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin