Page 8 of 101 results (0.006 seconds)

CVSS: 8.4EPSS: 0%CPEs: 180EXPL: 0

CVE-2022-22071 – Qualcomm Multiple Chipsets Use-After-Free Vulnerability

https://notcve.org/view.php?id=CVE-2022-22071

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Un posible uso de memoria previamente liberada cuando la memoria shell del proceso es liberada mediante la llamada IOCTL munmap y la inicialización del proceso está en curso en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress. • https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin • CWE-416: Use After Free •

CVSS: 8.4EPSS: 0%CPEs: 232EXPL: 0

CVE-2022-22068

https://notcve.org/view.php?id=CVE-2022-22068

kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Un evento del kernel puede contener contenido inesperado que no es generado por el software de la NPU en el modo de ejecución asíncrono en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables • https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin • CWE-416: Use After Free •

CVSS: 7.8EPSS: 0%CPEs: 334EXPL: 0

CVE-2022-22065

https://notcve.org/view.php?id=CVE-2022-22065

Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Una lectura fuera de límites en WLAN HOST debido a una comprobación de longitud inapropiada puede conllevar a un DOS en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables • https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin • CWE-125: Out-of-bounds Read •

CVSS: 7.8EPSS: 0%CPEs: 324EXPL: 0

CVE-2022-22064

https://notcve.org/view.php?id=CVE-2022-22064

Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Una posible lectura excesiva del búfer debido a una falta de comprobación del tamaño mientras es desempaquetada la trama en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables • https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin • CWE-125: Out-of-bounds Read •

CVSS: 7.7EPSS: 0%CPEs: 226EXPL: 0

CVE-2021-35116

https://notcve.org/view.php?id=CVE-2021-35116

APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables El APK puede cargar un modelo diseñado en el CDSP, lo que puede conllevar a un compromiso de los datos del CDSP y de otros APK que sean ejecutados en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables • https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin • CWE-20: Improper Input Validation •