Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,038

CVE-2022-33280

Access of uninitialized pointer in Bluetooth HOST

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8096au Apq8096au Firmware Ar8031 and 121 more
CVE-2022-33278

Buffer copy without checking the size of input in HLOS

Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Aqt1000 Aqt1000 Firmware Ar8035 and 243 more
CVE-2022-33277

Buffer copy without checking size of input in modem

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Aqt1000 Aqt1000 Firmware Ar8031 and 483 more
CVE-2022-33273

Buffer over-read in Trusted Execution Environment

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Aqt1000 Aqt1000 Firmware Ar8035 and 195 more
CVE-2022-33270

Time-of-check time-of-use race condition in Modem

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Qca6391 and 81 more
CVE-2022-33257

Time-of-check time-of-use race condition in Core

Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Aqt1000 Aqt1000 Firmware Ar8031 and 277 more
CVE-2022-33250

Reachable assertion in Modem

Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Ar8035 Ar8035 Firmware Qca6390 and 127 more
CVE-2022-33248

Integer overflow to buffer overflow in User Identity Module

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi http.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8009 Apq8009 Firmware Apq8009w and 321 more
CVE-2022-33246

Use of out-of-range pointer offset in Audio

Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user space with invalid session id.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Qualcomm
Products
Apq8096au Apq8096au Firmware Aqt1000 and 81 more