CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +46 more +48 morePossible assertion due to improper validation of invalid NR CSI-IM resource configuration in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, csr8811 firmware +90 more +92 moreImproper cleaning of secure memory between authenticated users can lead to face authentication...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +109 more +111 moreImproper handling of permissions of a shared memory region can lead to memory corruption in...9.3 Critical
- kopano groupware coreAn issue in provider/libserver/ECKrbAuth.cpp of Kopano-Core v11.0.2.51 contains an issue which...9.8 Critical
- vmware spring cloud function, vmware tanzu spring cloud, oracle banking branch +26 more +28 moreSpring Cloud Function Code Injection with a specially crafted SpEL as a routing expression9.8 Critical
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6753, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8666, mt8667, mt8675 +1 moreIn A-GPS, there is a possible man in the middle attack due to improper certificate validation....5.9 Medium
- google androidIn ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect...6.7 Medium
- google androidIn TBD of TBD, there is a possible out of bounds read due to a use after free. This could lead to...7.8 High
- google androidIn avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a...7.5 High
- google androidIn createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a...7.8 High
- google androidIn handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the...7.8 High
- google androidIn l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing...6.5 Medium
- google androidIn reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check. This...6.5 Medium
- google androidIn ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free....6.5 Medium
- google androidIn change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to...7.8 High
- google androidIn ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This...7.8 High
- google androidIn ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after...5.5 Medium
- google androidIn AttributionSource of AttributionSource.java, there is a possible permission bypass due to...7.8 High
- google androidIn Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a...7.8 High
- google androidIn several functions of of LauncherApps.java, there is a possible escalation of privilege due to...7.8 High
- google androidIn HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick...7.3 High
- google androidIn broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qam8295p firmware +55 more +57 moreMemory corruption in graphics support layer due to use after free condition in Snapdragon Auto,...8.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, qualcomm aqt1000 firmware, qca6390 firmware +30 more +32 moreBuffer copy in GATT multi notification due to improper length check for the data coming over-the...8.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, aqt1000 firmware +105 more +107 moreA user with user level permission can access graphics protected region due to improper access...8.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca8081 firmware +8 more +10 moreImproper serialization of message queue client registration can lead to race condition allowing...8.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd 8 gen1 5g firmware, wcd9380 firmware +4 more +6 morePossible out of bounds read due to improper typecasting while handling page fault for global...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8035 firmware +71 more +73 morePossible buffer overflow due to improper validation of SSID length received from beacon or probe...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8035 firmware +169 more +171 morePossible buffer over read due to lack of size validation while copying data from DBR buffer to RX...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, aqt1000 firmware +129 more +131 morePossible use after free due to lack of null check of DRM file status after file structure is...8.4 High
- google androidIn dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free....7.8 High
- google androidIn setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a...7.8 High
- unix4lyfe darkhttpdA flaw was found in darkhttpd. Invalid error handling allows remote attackers to cause denial-of...7.5 High