Vulnerabilities > Qualcomm > Sa8150P Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-10-19 CVE-2022-33210 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value.
local
low complexity
qualcomm CWE-119
7.8
2022-10-19 CVE-2022-33214 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products
Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
local
high complexity
qualcomm CWE-367
7.0
2022-09-02 CVE-2022-22100 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto
local
low complexity
qualcomm CWE-787
7.8
2022-09-02 CVE-2022-22101 Resource Exhaustion vulnerability in Qualcomm products
Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto
local
low complexity
qualcomm CWE-400
5.5
2022-09-02 CVE-2022-22102 Incorrect Type Conversion or Cast vulnerability in Qualcomm products
Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto
local
low complexity
qualcomm CWE-704
7.8
2022-09-02 CVE-2022-22104 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption in multimedia due to improper check on the messages received.
local
low complexity
qualcomm CWE-119
7.8
2022-06-14 CVE-2021-30281 Unspecified vulnerability in Qualcomm products
Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
local
low complexity
qualcomm
7.8
2022-06-14 CVE-2021-30327 Classic Buffer Overflow vulnerability in Qualcomm products
Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music
low complexity
qualcomm CWE-120
6.8
2022-06-14 CVE-2021-30334 Use After Free vulnerability in Qualcomm products
Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
local
low complexity
qualcomm CWE-416
7.8
2022-06-14 CVE-2021-30342 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products
Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
network
high complexity
qualcomm CWE-367
5.9