Advisories · Technology

Qualcomm, Inc. Snapdragon.

Every CVE that names Qualcomm, Inc. Snapdragon among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-21659 CVE record

CVSS 7.5 High

Buffer Over-read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 Jun 2023
CVE-2023-21658 CVE record

CVSS 7.5 High

Buffer Over-Read in WLAN Firmware
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 6 Jun 2023
CVE-2023-21657 CVE record

CVSS 7.8 High

Improper Input Validation in Audio
- Qualcomm, Inc. Snapdragon
- CWE-20
Not analysed yet 6 Jun 2023
CVE-2023-21656 CVE record

CVSS 7.8 High

Improper Input Validation in WLAN HOST
- Qualcomm, Inc. Snapdragon
- CWE-20
Not analysed yet 6 Jun 2023
CVE-2023-21632 CVE record

CVSS 8.4 High

Stack-based Buffer Overflow in Automotive GPU
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2023-21628 CVE record

CVSS 8.4 High

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2022-40538 CVE record

CVSS 7.5 High

Reachable assertion in Modem
- Qualcomm, Inc. Snapdragon
- Denial of service
Not analysed yet 6 Jun 2023
CVE-2022-40536 CVE record

CVSS 7.5 High

Improper authentication in Modem
- Qualcomm, Inc. Snapdragon
- Broken access control
Not analysed yet 6 Jun 2023
CVE-2022-40533 CVE record

CVSS 6.2 Medium

Untrusted Pointer Dereference in Core
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2022-40529 CVE record

CVSS 7.1 High

Improper access control in Kernel
- Qualcomm, Inc. Snapdragon
- Broken access control
Not analysed yet 6 Jun 2023
CVE-2022-40525 CVE record

CVSS 7.1 High

Information Exposure in Linux Networking Firmware
- Qualcomm, Inc. Snapdragon
- Information disclosure
Not analysed yet 6 Jun 2023
CVE-2022-40523 CVE record

CVSS 7.1 High

Information exposure in Kernel
- Qualcomm, Inc. Snapdragon
- Information disclosure
Not analysed yet 6 Jun 2023
CVE-2022-40522 CVE record

CVSS 8.4 High

Double free in Linux Networking
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2022-40521 CVE record

CVSS 7.5 High

Improper authorization in Modem
- Qualcomm, Inc. Snapdragon
- Broken access control
Not analysed yet 6 Jun 2023
CVE-2022-40507 CVE record

CVSS 8.4 High

Double free in Core
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2022-33307 CVE record

CVSS 8.4 High

Double free in Automotive
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2022-33303 CVE record

CVSS 5.5 Medium

Uncontrolled resource consumption in Linux kernel
- Qualcomm, Inc. Snapdragon
- Denial of service
Not analysed yet 6 Jun 2023
CVE-2022-33267 CVE record

CVSS 6.7 Medium

Improper restriction of operations within the bounds of memory buffer in Linux
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2022-33264 CVE record

CVSS 7.9 High

Stack-based buffer overflow in Modem
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2022-33263 CVE record

CVSS 6.7 Medium

Use after free in Core
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2022-33251 CVE record

CVSS 7.5 High

Reachable assertion in Modem
- Qualcomm, Inc. Snapdragon
- Denial of service
Not analysed yet 6 Jun 2023
CVE-2022-33240 CVE record

CVSS 6.7 Medium

Incorrect type conversion or cast in Audio
- Qualcomm, Inc. Snapdragon
- CWE-704
Not analysed yet 6 Jun 2023
CVE-2022-33230 CVE record

CVSS 6.7 Medium

Buffer copy without checking the size of input in FM Host
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2022-33227 CVE record

CVSS 6.7 Medium

Double free in Linux-Android
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2022-33226 CVE record

CVSS 6.7 Medium

Buffer copy without checking the size of input in Core
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2022-33224 CVE record

CVSS 6.7 Medium

Buffer copy without checking the size of input in Core
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 6 Jun 2023
CVE-2022-22076 CVE record

CVSS 7.1 High

Cryptographic issue in Core
- Qualcomm, Inc. Snapdragon
- CWE-310
Not analysed yet 6 Jun 2023
CVE-2022-22060 CVE record

CVSS 7.5 High

Reachable Assertion in Modem
- Qualcomm, Inc. Snapdragon
- Denial of service
Not analysed yet 6 Jun 2023
CVE-2022-40504 CVE record

CVSS 7.5 High

Reachable assertion in Modem
- Qualcomm, Inc. Snapdragon
- Denial of service
Not analysed yet 2 May 2023
CVE-2022-33273 CVE record

CVSS 7.3 High

Buffer over-read in Trusted Execution Environment
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 2 May 2023
CVE-2023-21666 CVE record

CVSS 8.4 High

Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
- Qualcomm, Inc. Snapdragon
- Denial of service
Not analysed yet 2 May 2023
CVE-2023-21665 CVE record

CVSS 8.4 High

Incorrect Type Conversion or Cast in Graphics
- Qualcomm, Inc. Snapdragon
- CWE-704
Not analysed yet 2 May 2023
CVE-2023-21642 CVE record

CVSS 8.4 High

Improper Access Control in HAB Memory Management
- Qualcomm, Inc. Snapdragon
- Broken access control
Not analysed yet 2 May 2023
CVE-2022-40508 CVE record

CVSS 7.5 High

Reachable assertion in Modem
- Qualcomm, Inc. Snapdragon
- Denial of service
Not analysed yet 2 May 2023
CVE-2022-40505 CVE record

CVSS 8.2 High

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 2 May 2023
CVE-2022-34144 CVE record

CVSS 7.5 High

Reachable assertion in Modem
- Qualcomm, Inc. Snapdragon
- Denial of service
Not analysed yet 2 May 2023
CVE-2022-33305 CVE record

CVSS 7.5 High

Null pointer dereference in Modem
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 2 May 2023
CVE-2022-33304 CVE record

CVSS 7.5 High

NULL pointers dereference in Modem
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 2 May 2023
CVE-2022-33292 CVE record

CVSS 7.8 High

Use after free in Qualcomm IPC
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 2 May 2023
CVE-2022-33281 CVE record

CVSS 6.7 Medium

Improper validation of array index in computer vision.
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 2 May 2023
CVE-2022-25713 CVE record

CVSS 7.8 High

Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 2 May 2023
CVE-2023-21630 CVE record

CVSS 8.4 High

Integer Overflow in Multimedia Framework
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Apr 2023
CVE-2022-40532 CVE record

CVSS 8.4 High

Integer overflow or wraparound in WLAN
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Apr 2023
CVE-2022-40503 CVE record

CVSS 8.2 High

Buffer over-read in Bluetooth Host.
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-33302 CVE record

CVSS 6.8 Medium

Improper validation of array index in User Identity Module
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 4 Apr 2023
CVE-2022-33301 CVE record

CVSS 6.7 Medium

Incorrect type conversion or cast in Audio
- Qualcomm, Inc. Snapdragon
- CWE-704
Not analysed yet 4 Apr 2023
CVE-2022-33298 CVE record

CVSS 6.7 Medium

Use after free in Modem
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Apr 2023
CVE-2022-33297 CVE record

CVSS 6.8 Medium

Buffer overread in Linux Sensors
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-33296 CVE record

CVSS 5.9 Medium

Integer overflow to buffer overflow in Modem
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Apr 2023
CVE-2022-33295 CVE record

CVSS 8.2 High

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-33294 CVE record

CVSS 7.5 High

NULL pointer dereference in Modem
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Apr 2023
CVE-2022-33291 CVE record

CVSS 8.2 High

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-33289 CVE record

CVSS 6.8 Medium

Improper validation of array index in Modem
- Qualcomm, Inc. Snapdragon
- CWE-129
Not analysed yet 4 Apr 2023
CVE-2022-33288 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Buffer copy without checking the size of input in Core
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Apr 2023
CVE-2022-33287 CVE record

CVSS 8.2 High

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023
CVE-2022-33282 CVE record

CVSS 8.4 High

Integer overflow to buffer overflow in Automotive Multimedia
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Apr 2023
CVE-2022-33270 CVE record

CVSS 7.5 High

Time-of-check time-of-use race condition in Modem
- Qualcomm, Inc. Snapdragon
- Race condition
Not analysed yet 4 Apr 2023
CVE-2022-33269 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Integer overflow or wraparound in Core
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Apr 2023
CVE-2022-33259 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Buffer copy without checking the size of input in Modem
- Qualcomm, Inc. Snapdragon
- Memory corruption
Not analysed yet 4 Apr 2023
CVE-2022-33258 CVE record

CVSS 8.2 High

Buffer over-read in Modem
- Qualcomm, Inc. Snapdragon
- CWE-126
Not analysed yet 4 Apr 2023