Sd675 Firmware vulnerabilities

15 known vulnerabilities in Sd675 Firmware from Qualcomm. 15 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Authentication

  CVE-2022-25685Dec 13, 2022Qualcomm

  Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-25681Dec 13, 2022Qualcomm

  Possible memory corruption in kernel while performing memory access due to hypervisor not correctly invalidated the processor translation caches in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Write

  CVE-2022-33234Nov 15, 2022Qualcomm

  Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 7.0 High severity

  Snapdragon Auto, Snapdragon Compute…: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2022-33214Oct 19, 2022Qualcomm

  Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2022-25661Oct 19, 2022Qualcomm

  Memory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Double Free

  CVE-2022-25660Oct 19, 2022Qualcomm

  Memory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-25706Sep 16, 2022Qualcomm

  Information disclosure in Bluetooth driver due to buffer over-read while reading l2cap length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 7.0 High severity

  Snapdragon Auto, Snapdragon Compute…: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2022-25696Sep 16, 2022Qualcomm

  Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Buffer Copy without Checking Size of Input

  CVE-2022-25686Sep 16, 2022Qualcomm

  Memory corruption in video module due to buffer overflow while processing WAV file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 9.8 Critical severity

  Snapdragon Auto, Snapdragon Compute…: Buffer Copy without Checking Size of Input

  CVE-2022-25657Sep 2, 2022Qualcomm

  Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 9.8 Critical severity

  Snapdragon Connectivity, Snapdragon Mobile: Out-of-bounds Write

  CVE-2022-22096Sep 2, 2022Qualcomm

  Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdragon Connectivity, Snapdragon Mobile

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Write

  CVE-2022-22080Sep 2, 2022Qualcomm

  Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Cleartext Storage of Sensitive Information

  CVE-2022-22069Sep 2, 2022Qualcomm

  Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Out-of-bounds Read

  CVE-2022-22059Sep 2, 2022Qualcomm

  Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

• 7.8 High severity

  Snapdragon Auto, Snapdragon Compute…: Use After Free

  CVE-2022-22068Jun 14, 2022Qualcomm

  kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon