CVSS: 7.8EPSS: 0%CPEs: 174EXPL: 0CVE-2022-22069
https://notcve.org/view.php?id=CVE-2022-22069
02 Sep 2022 — Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Los dispositivos con la protección del teclado deshabilitada pueden almacenar el cuadro de claves sin cifrar en RPMB y causar un problema criptográfico en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables • https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin • CWE-312: Cleartext Storage of Sensitive Information •
CVSS: 7.8EPSS: 0%CPEs: 118EXPL: 0CVE-2022-22067
https://notcve.org/view.php?id=CVE-2022-22067
02 Sep 2022 — Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile Un posible filtrado de memoria en el módem durante el procesamiento de NSA RRC Reconfiguration con Radio Bearer Config no válida en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile • https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin • CWE-401: Missing Release of Memory after Effective Lifetime •
CVSS: 9.4EPSS: 0%CPEs: 398EXPL: 0CVE-2022-22062
https://notcve.org/view.php?id=CVE-2022-22062
02 Sep 2022 — An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking Puede producirse una lectura fuera de límites mientras es analizado un certificado de servidor debido a una comprobación de... • https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin • CWE-125: Out-of-bounds Read •
CVSS: 6.2EPSS: 0%CPEs: 336EXPL: 0CVE-2021-35135
https://notcve.org/view.php?id=CVE-2021-35135
02 Sep 2022 — A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Puede producirse una desreferencia de puntero null durante la importación de claves RSA en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snap... • https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin • CWE-476: NULL Pointer Dereference •
CVSS: 8.4EPSS: 0%CPEs: 220EXPL: 0CVE-2021-35132
https://notcve.org/view.php?id=CVE-2021-35132
02 Sep 2022 — Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Una escritura fuera de límites en el servicio DSP debido a una comprobación de límites inapropiada para el tamaño del búfer de respuesta en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mob... • https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin • CWE-1284: Improper Validation of Specified Quantity in Input •
CVSS: 9.3EPSS: 0%CPEs: 202EXPL: 0CVE-2021-35122
https://notcve.org/view.php?id=CVE-2021-35122
02 Sep 2022 — Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables Una región no segura puede intentar modificar los permisos RG de las xPUs del espacio IO debido a una comprobación de entrada inapropiada en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,... • https://www.qualcomm.com/company/product-security/bulletins/july-2022-bulletin • CWE-20: Improper Input Validation •
CVSS: 7.3EPSS: 0%CPEs: 258EXPL: 0CVE-2021-35097
https://notcve.org/view.php?id=CVE-2021-35097
02 Sep 2022 — Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Una posible omisión de la autenticación debido a un orden incorrecto de la verificación de la firma y el hash en la llamada de verificación de la firma en Snapdragon Auto, Snapdragon Compute, Snapdragon ... • https://www.qualcomm.com/company/product-security/bulletins/august-2022-bulletin • CWE-347: Improper Verification of Cryptographic Signature •
CVSS: 8.4EPSS: 0%CPEs: 180EXPL: 0CVE-2022-22071 – Qualcomm Multiple Chipsets Use-After-Free Vulnerability
https://notcve.org/view.php?id=CVE-2022-22071
14 Jun 2022 — Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music Un posible uso de memoria previamente liberada cuando la memoria shell del proceso es liberada mediante la llamada IOCTL munmap y la inicialización del proceso está en curso en Snapdragon Auto, Snapdragon Compute, Snapdragon C... • https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin • CWE-416: Use After Free •
CVSS: 8.4EPSS: 0%CPEs: 232EXPL: 0CVE-2022-22068
https://notcve.org/view.php?id=CVE-2022-22068
14 Jun 2022 — kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Un evento del kernel puede contener contenido inesperado que no es generado por el software de la NPU en el modo de ejecución asíncrono en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con... • https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 334EXPL: 0CVE-2022-22065
https://notcve.org/view.php?id=CVE-2022-22065
14 Jun 2022 — Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Una lectura fuera de límites en WLAN HOST debido a una comprobación de longitud inapropiada puede conllevar a un DOS en Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elect... • https://www.qualcomm.com/company/product-security/bulletins/may-2022-bulletin • CWE-125: Out-of-bounds Read •