Vulnerabilities > Qualcomm > Sa8540P Firmware

DATE CVE VULNERABILITY TITLE RISK
2022-10-19 CVE-2022-33210 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large type value.
local
low complexity
qualcomm CWE-119
7.8
2022-09-02 CVE-2021-35097 Improper Verification of Cryptographic Signature vulnerability in Qualcomm products
Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
low complexity
qualcomm CWE-347
6.8
2022-09-02 CVE-2021-35122 Improper Input Validation vulnerability in Qualcomm products
Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
local
low complexity
qualcomm CWE-20
7.8
2022-09-02 CVE-2021-35132 Improper Validation of Specified Quantity in Input vulnerability in Qualcomm products
Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables
local
low complexity
qualcomm CWE-1284
7.8
2022-09-02 CVE-2021-35135 NULL Pointer Dereference vulnerability in Qualcomm products
A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables
local
low complexity
qualcomm CWE-476
5.5
2022-09-02 CVE-2022-22099 Improper Validation of Array Index vulnerability in Qualcomm Sa8540P Firmware and Sa9000P Firmware
Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto
local
low complexity
qualcomm CWE-129
7.8
2022-09-02 CVE-2022-22100 Out-of-bounds Write vulnerability in Qualcomm products
Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto
local
low complexity
qualcomm CWE-787
7.8
2022-09-02 CVE-2022-22101 Resource Exhaustion vulnerability in Qualcomm products
Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto
local
low complexity
qualcomm CWE-400
5.5
2022-09-02 CVE-2022-22104 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products
Memory corruption in multimedia due to improper check on the messages received.
local
low complexity
qualcomm CWE-119
7.8
2022-09-02 CVE-2022-22106 Unspecified vulnerability in Qualcomm Sa8540P Firmware and Sa9000P Firmware
Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto
local
low complexity
qualcomm
7.8