Qualcomm Sdx20M vulnerabilities, page 4

105 vulnerabilities

Known vulnerabilities in Qualcomm Sdx20M, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2022-40537qualcomm, inc. · snapdragon +162 moreImproper Validation of Array Index in Bluetooth HOSTMemory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.EPSS0.36%8.4HighCVE-2022-25743qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables +189 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearablesMemory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesEPSS0.15%9.8CriticalCVE-2022-25748qualcomm · apq8009_firmware +272 morequalcomm apq8009_firmwareMemory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.52%8.4HighCVE-2022-25655qualcomm, inc. · snapdragon +238 moreBuffer copy without checking the size of input in WLAN HAL.Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.EPSS0.12%8.4HighCVE-2022-25724qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables +201 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearablesMemory corruption in graphics due to buffer overflow while validating the user address in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesEPSS0.12%7.5HighCVE-2022-25749qualcomm · apq8009_firmware +275 morequalcomm apq8009_firmwareTransient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.46%9.8CriticalCVE-2022-25720qualcomm · apq8009_firmware +184 morequalcomm apq8009_firmwareMemory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesEPSS0.50%9.8CriticalCVE-2022-25687qualcomm, inc. · snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables +181 morequalcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearablesmemory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon WearablesEPSS0.39%9.8CriticalCVE-2022-25718qualcomm · apq8009_firmware +141 morequalcomm apq8009_firmwareCryptographic issue in WLAN due to improper check on return value while authentication handshake in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.49%7.5HighCVE-2022-25710qualcomm, inc. · snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music +62 morequalcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & musicDenial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & MusicEPSS0.42%4.6MediumCVE-2022-22079qualcomm, inc. · snapdragon +46 moreBuffer Over-read in BOOTDenial of service while processing fastboot flash command on mmc due to buffer over readEPSS0.17%6.2MediumCVE-2022-22075qualcomm, inc. · snapdragon +183 moreInformation Exposure in GraphicsInformation Disclosure in Graphics during GPU context switch.EPSS0.12%7.5HighCVE-2022-33239qualcomm · apq8009_firmware +233 morequalcomm apq8009_firmwareTransient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.42%7.5HighCVE-2022-33285qualcomm, inc. · snapdragon +278 moreBuffer over-read in WLANTransient DOS due to buffer over-read in WLAN while parsing WLAN CSA action frames.EPSS0.39%7.5HighCVE-2022-33237qualcomm · aqt1000_firmware +237 morequalcomm aqt1000_firmwareTransient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.42%7.5HighCVE-2022-33299qualcomm, inc. · snapdragon +44 moreNull pointer dereference in Bluetooth HOSTTransient DOS due to null pointer dereference in Bluetooth HOST while receiving an attribute protocol PDU with zero length data.EPSS0.39%7.5HighCVE-2022-33290qualcomm, inc. · snapdragon +46 moreNull pointer dereference in Bluetooth HOSTTransient DOS in Bluetooth HOST due to null pointer dereference when a mismatched argument is passed.EPSS0.39%7.5HighCVE-2022-33238qualcomm · apq8009_firmware +283 morequalcomm apq8009_firmwareTransient DOS due to loop with unreachable exit condition in WLAN while processing an incoming FTM frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and NetworkingEPSS0.44%7.5HighCVE-2022-33286qualcomm, inc. · snapdragon +281 moreBuffer over-read in WLANTransient DOS due to buffer over-read in WLAN while processing 802.11 management frames.EPSS0.39%8.8HighCVE-2022-33280qualcomm, inc. · snapdragon +62 moreAccess of uninitialized pointer in Bluetooth HOSTMemory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.EPSS0.33%