Skip to contentQualcomm Sm7450 Firmware vulnerabilities
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd888 5g firmware, sd 8 gen1 5g firmware +15 more +17 moreMemory corruption in WLAN due to buffer copy without checking size of input while parsing keys in...CVE-2022-257089.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +90 more +92 moreMemory corruption in display due to time-of-check time-of-use race condition during map or unmap...CVE-2022-256968.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8096au firmware, aqt1000 firmware +150 more +152 moreInformation disclosure in WLAN due to improper validation of array index while parsing crafted...CVE-2022-256907.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +148 more +150 moreMemory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto...CVE-2022-256887.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +105 more +107 moreMemory corruption in video module due to buffer overflow while processing WAV file in Snapdragon...CVE-2022-256867.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +139 more +141 moreDenial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto,...CVE-2022-256697.5 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +88 more +90 moreInformation disclosure in video due to buffer over-read while processing avi file in Snapdragon...CVE-2022-256536.8 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 morememory corruption in Kernel due to race condition while getting mapping reference in Snapdragon...CVE-2022-220947.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 moreMemory corruption or temporary denial of service due to improper handling of concurrent...CVE-2022-220937.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 moreMemory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon...CVE-2022-220927.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +127 more +129 moreImproper authorization of a replayed LTE security mode command can lead to a denial of service in...CVE-2022-220917.5 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qca8081 firmware +21 more +23 moreMemory corruption in audio while playing record due to improper list handling in two threads in...CVE-2022-220898.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qca6595au firmware +28 more +30 moreMemory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon...CVE-2022-220818.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +152 more +154 moreMemory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon...CVE-2022-220748.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +127 more +129 moreMemory corruption occurs while processing command received from HLOS due to improper length check...CVE-2022-220668.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 moreMemory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto,...CVE-2022-256687.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +152 more +154 moreMemory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in...CVE-2022-256597.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +143 more +145 moreMemory corruption due to incorrect pointer arithmetic when attempting to change the endianness in...CVE-2022-256587.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +105 more +107 moreMemory corruption due to buffer overflow occurs while processing invalid MKV clip which has...CVE-2022-256577.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +143 more +145 moreMemory corruption in audio due to lack of check of invalid routing address into APR Routing table...CVE-2022-220707.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +57 more +59 morePotential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid...CVE-2022-220677.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +197 more +199 moreAn out-of-bounds read can occur while parsing a server certificate due to improper length check...CVE-2022-220628.2 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +31 more +33 moreOut of bounds writing is possible while verifying device IDs due to improper length check before...CVE-2022-220617.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +93 more +95 moreMemory corruption due to out of bound read while parsing a video file in Snapdragon Auto,...CVE-2022-220598.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qca6391 firmware, qcm6490 firmware +28 more +30 moreDue to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur...CVE-2021-351348.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd 8 gen1 5g firmware, sm7450 firmware +13 more +15 morePossible address manipulation from APP-NS while APP-S is configuring an RG where it tries to...CVE-2021-351096.8 Medium
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd 8 gen1 5g firmware, sm7450 firmware +13 more +15 moreImproper checking of AP-S lock bit while verifying the secure resource group permissions can lead...CVE-2021-351086.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +127 more +129 moreInformation disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in...CVE-2022-25706Fix available8.2 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd 8 gen1 5g firmware, sm7450 firmware +13 more +15 moreMemory corruption in graphics due to use-after-free while graphics profiling in Snapdragon...CVE-2022-25693Fix available8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +124 more +126 moreDenial of service in WLAN HOST due to buffer over read while unpacking frames in Snapdragon Auto,...CVE-2022-25670Fix available7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qca6174a firmware +63 more +65 morePossible integer overflow and memory corruption due to improper validation of buffer size sent to...CVE-2022-25656Fix available8.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +55 more +57 moreMemory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data...CVE-2022-22096Fix available9.8 Critical
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +34 more +36 moreUse after free in the synx driver issue while performing other functions during multiple...CVE-2021-35133Fix available6.7 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm sd865 5g firmware, sd888 5g firmware +21 more +23 moreMemory corruption in audio due to use after free while managing buffers from internal cache in...CVE-2022-220908.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 morememory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in...CVE-2022-220877.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +138 more +140 moreMemory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms...CVE-2022-220867.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +153 more +155 moreMemory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto,...CVE-2022-220858.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +151 more +153 moreMemory corruption when extracting qcp audio file due to lack of check on data length in...CVE-2022-220848.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +149 more +151 moreDenial of service due to memory corruption while extracting ape header from clips in Snapdragon...CVE-2022-220837.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +151 more +153 moreMemory corruption due to possible buffer overflow while parsing DSF header with corrupted channel...CVE-2022-220828.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +36 more +38 moreImproper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition...CVE-2021-351117.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +66 more +68 morePossible buffer overflow due to lack of validation for the length of NAI string read from EFS in...CVE-2021-351027.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +172 more +174 morePossible out of bound read due to improper validation of certificate chain in SSL or Internet key...CVE-2021-350838.2 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, aqt1000 firmware +98 more +100 moreImproper handling between export and release functions on the same handle from client can lead to...CVE-2021-35120Fix available6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +81 more +83 morePotential out of Bounds read in FIPS event processing due to improper validation of the length...CVE-2021-35119Fix available5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +98 more +100 moreAn out-of-bounds write can occur due to an incorrect input check in the camera driver in...CVE-2021-35118Fix available6.7 Medium