SB2022020725 - Multiple vulnerabilities in Qualcomm chipsets
Published: February 7, 2022 Updated: February 6, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 13 secuirty vulnerabilities.
1) Improper Authentication (CVE-ID: CVE-2021-30317)
The vulnerability allows a malicious application to elevate privileges on the system.
The vulnerability exists due to improper validation of program headers containing ELF metadata. A malicious application can bypass image verification and execute arbitrary code on the system with elevated privileges.
2) Buffer overflow (CVE-ID: CVE-2021-30309)
The vulnerability allows a malicious application to escalate privileges on the system.
The vulnerability exists due to a boundary error when processing arguments for the QXDM command in UTILS. A malicious application can trigger a buffer overflow by supplying an overly long argument and execute arbitrary code.
3) Stack-based buffer overflow (CVE-ID: CVE-2021-30322)
The vulnerability allows a malicious application to escalate privileges on the system.
The vulnerability exists due to a boundary error in MCS. A malicious application can pass a specially crafted number of GPIOs configured in an internal parameters array, trigger a stack-based buffer overflow and execute arbitrary code.
4) Buffer overflow (CVE-ID: CVE-2021-30323)
The vulnerability allows a local application to execute arbitrary code.
The vulnerability exists due to improper input validation in Modem. A local application can execute arbitrary code.
5) Integer overflow (CVE-ID: CVE-2021-35069)
The vulnerability allows a local application to execute arbitrary code.
The vulnerability exists due to improper input validation in WLAN. A local application can execute arbitrary code.
6) Use After Free (CVE-ID: CVE-2021-35077)
The vulnerability allows a local application to execute arbitrary code.
The vulnerability exists due to improper input validation in DSP Services. A local application can execute arbitrary code.
7) Buffer overflow (CVE-ID: CVE-2021-30324)
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation in Core Services. A local privileged application can execute arbitrary code.
8) Improper Validation of Array Index (CVE-ID: CVE-2021-30325)
The vulnerability allows a local privileged application to execute arbitrary code.
The vulnerability exists due to improper input validation in Core Services. A local privileged application can execute arbitrary code.
9) Buffer overflow (CVE-ID: CVE-2021-30318)
The vulnerability allows a local application to execute arbitrary code.
The vulnerability exists due to improper input validation in Automotive Linux Platform. A local application can execute arbitrary code.
10) Reachable Assertion (CVE-ID: CVE-2021-30326)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to improper input validation in Modem. A remote attacker can perform a denial of service (DoS) attack.
11) NULL Pointer Dereference (CVE-ID: CVE-2021-35068)
The vulnerability allows a local application to execute arbitrary code.
The vulnerability exists due to improper input validation in Bluetooth Host. A local application can execute arbitrary code.
12) Integer overflow (CVE-ID: CVE-2021-35074)
The vulnerability allows a local application to execute arbitrary code.
The vulnerability exists due to improper input validation in Kernel. A local application can execute arbitrary code.
13) NULL Pointer Dereference (CVE-ID: CVE-2021-35075)
The vulnerability allows a local application to execute arbitrary code.
The vulnerability exists due to improper input validation in Kernel. A local application can execute arbitrary code.
Remediation
Install update from vendor's website.