Skip to content
Qualcomm Sdw2500 vulnerabilities
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +203 more +205 more
Buffer copy without checking size of input in Audio.
CVE-2022-40510
9.8 Critical
-
qualcomm apq8009 firmware, apq8009w firmware, apq8052 firmware +157 more +159 more
Double free in Video
CVE-2022-40515
7.3 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +207 more +209 more
Memory Corruption in MODEM
CVE-2022-33213
7.5 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +199 more +201 more
Integer Overflow to Buffer Overflow in Modem
CVE-2022-25705
7.8 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +206 more +208 more
Use of Out-of-range Pointer Offset in MODEM
CVE-2022-25694
8.4 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +160 more +162 more
Improper Validation of Array Index in Bluetooth HOST
CVE-2022-40537
Fix available
7.3 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +181 more +183 more
Information Exposure in Graphics
CVE-2022-22075
Fix available
6.2 Medium
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +160 more +162 more
Integer overflow to buffer overflow in User Identity Module
CVE-2022-33248
7.8 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +199 more +201 more
Configuration weakness in modem
CVE-2022-33233
7.8 High
-
qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +120 more +122 more
Integer overflow to buffer overflow in Audio
CVE-2022-33266
5.9 Medium
-
qualcomm apq8009 firmware, apq8009w firmware, apq8052 firmware +148 more +150 more
Integer Overflow to Buffer Overflow in Bluetooth HOST
CVE-2022-22088
Fix available
9.8 Critical
-
qualcomm apq8009 firmware, apq8009w firmware, apq8064au firmware +44 more +46 more
Buffer Over-read in BOOT
CVE-2022-22079
Fix available
4.6 Medium
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 more
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK...
CVE-2022-25695
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +202 more +204 more
Memory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command...
CVE-2022-25682
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +187 more +189 more
Memory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon...
CVE-2022-25743
Fix available
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +199 more +201 more
Memory corruption in graphics due to buffer overflow while validating the user address in...
CVE-2022-25724
Fix available
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +116 more +118 more
Information disclosure in WLAN due to improper length check while processing authentication...
CVE-2022-25719
8.2 High
-
qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +140 more +142 more
Cryptographic issue in WLAN due to improper check on return value while authentication handshake...
CVE-2022-25718
9.1 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +179 more +181 more
memory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto,...
CVE-2022-25687
7.3 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +183 more +185 more
Memory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon...
CVE-2022-25720
Fix available
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +148 more +150 more
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto...
CVE-2022-25688
7.3 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +139 more +141 more
Denial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto,...
CVE-2022-25669
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +152 more +154 more
Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon...
CVE-2022-22074
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 more
Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto,...
CVE-2022-25668
7.3 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +152 more +154 more
Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in...
CVE-2022-25659
7.3 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +143 more +145 more
Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in...
CVE-2022-25658
7.3 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +197 more +199 more
An out-of-bounds read can occur while parsing a server certificate due to improper length check...
CVE-2022-22062
8.2 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +127 more +129 more
Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in...
CVE-2022-25706
Fix available
8.2 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +124 more +126 more
Denial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto,...
CVE-2022-25670
Fix available
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +77 more +79 more
Memory corruption due to use after free issue in kernel while processing ION handles in...
CVE-2022-22058
Fix available
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +174 more +176 more
Possible buffer overflow due to improper parsing of headers while playing the FLAC audio clip in...
CVE-2021-35104
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +118 more +120 more
Possible buffer over read due to improper calculation of string length while parsing Id3 tag in...
CVE-2021-35100
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +145 more +147 more
Improper authorization of a replayed LTE security mode command can lead to a denial of service in...
CVE-2021-30344
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +93 more +95 more
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC...
CVE-2021-30342
9.1 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8096au firmware +118 more +120 more
Improper buffer size validation of DSM packet received can lead to memory corruption in...
CVE-2021-30341
9.8 Critical
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +111 more +113 more
APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s...
CVE-2021-35116
7.7 High
-
qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +80 more +82 more
Possible buffer overflow due to improper validation of array index while processing external DIAG...
CVE-2021-35072
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 more
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in...
CVE-2022-22087
7.3 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +138 more +140 more
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms...
CVE-2022-22086
7.3 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 more
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto,...
CVE-2022-22085
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +151 more +153 more
Memory corruption when extracting qcp audio file due to lack of check on data length in...
CVE-2022-22084
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +149 more +151 more
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon...
CVE-2022-22083
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +151 more +153 more
Memory corruption due to possible buffer overflow while parsing DSF header with corrupted channel...
CVE-2022-22082
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +172 more +174 more
Possible out of bound read due to improper validation of certificate chain in SSL or Internet key...
CVE-2021-35083
8.2 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +165 more +167 more
Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto,...
CVE-2022-22065
Fix available
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +160 more +162 more
Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto...
CVE-2022-22064
Fix available
7.5 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +127 more +129 more
Improper validation of buffer size input to the EFS file can lead to memory corruption in...
CVE-2021-30333
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +155 more +157 more
Possible out of bounds access due to improper input validation during graphics profiling in...
CVE-2021-35105
Fix available
8.4 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +99 more +101 more
Improper validation of maximum size of data write to EFS file can lead to memory corruption in...
CVE-2021-30323
7.8 High
-
qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +135 more +137 more
Improper validation of input when provisioning the HDCP key can lead to memory corruption in...
CVE-2021-30318
8.4 High
- Show olderLoading…