CVE-2022-33266 – Integer overflow to buffer overflow in Audio
https://notcve.org/view.php?id=CVE-2022-33266
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content. • https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin • CWE-190: Integer Overflow or Wraparound •
CVE-2022-25721 – Incorrect Type Conversion in Video driver
https://notcve.org/view.php?id=CVE-2022-25721
Memory corruption in video driver due to type confusion error during video playback Corrupción de la memoria en el controlador de video debido a un error de confusión de tipos durante la reproducción de video • https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVE-2022-25717 – Use-After-Free Issue in Display
https://notcve.org/view.php?id=CVE-2022-25717
Memory corruption in display due to double free while allocating frame buffer memory Corrupción de la memoria en la pantalla debido a la doble liberación al asignar memoria búfer de fotogramas • https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin • CWE-415: Double Free •
CVE-2022-25715 – Incorrect type casting in Display driver
https://notcve.org/view.php?id=CVE-2022-25715
Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields Corrupción de la memoria en el controlador de pantalla debido a una conversión de tipo incorrecta al acceder a los campos de la estructura de la cerca • https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin • CWE-704: Incorrect Type Conversion or Cast •
CVE-2022-22079 – Buffer Over-read in BOOT
https://notcve.org/view.php?id=CVE-2022-22079
Denial of service while processing fastboot flash command on mmc due to buffer over read Denegación de servicio al procesar el comando flash fastboot en mmc debido a sobrelectura del búfer • https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin • CWE-125: Out-of-bounds Read •