CVSS: 6.2EPSS: 0%CPEs: 220EXPL: 0CVE-2022-25664 – Qualcomm Adreno GPU Information Leak
https://notcve.org/view.php?id=CVE-2022-25664
Information disclosure due to exposure of information while GPU reads the data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Una revelación de información debido a una exposición de información mientras la GPU lee los datos en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables • http://packetstormsecurity.com/files/172853/Qualcomm-Adreno-GPU-Information-Leak.html https://www.qualcomm.com/company/product-security/bulletins/october-2022-bulletin • CWE-459: Incomplete Cleanup •
CVSS: 8.4EPSS: 0%CPEs: 158EXPL: 0CVE-2022-22058
https://notcve.org/view.php?id=CVE-2022-22058
Memory corruption due to use after free issue in kernel while processing ION handles in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Una corrupción de memoria debido a un problema de uso de memoria previamente liberada en el kernel mientras son procesados los manejadores ION en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables • https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin • CWE-416: Use After Free •
CVSS: 8.2EPSS: 0%CPEs: 258EXPL: 0CVE-2022-25706
https://notcve.org/view.php?id=CVE-2022-25706
Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Una revelación de información en el controlador Bluetooth debido a una lectura excesiva del búfer mientras es leída la longitud de l2cap en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables • https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletin • CWE-125: Out-of-bounds Read •
CVSS: 7.5EPSS: 0%CPEs: 304EXPL: 0CVE-2022-25690
https://notcve.org/view.php?id=CVE-2022-25690
Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Revelación de información en WLAN debido a una comprobación inapropiada del índice de matriz mientras son analizadas tramas de acción ANQP diseñadas en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music • https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletin • CWE-129: Improper Validation of Array Index •
CVSS: 9.8EPSS: 0%CPEs: 300EXPL: 0CVE-2022-25688
https://notcve.org/view.php?id=CVE-2022-25688
Memory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Corrupción de memoria en el vídeo debido a un desbordamiento del búfer mientras son analizados clips de vídeo ps en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables • https://www.qualcomm.com/company/product-security/bulletins/september-2022-bulletin • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •