Description
Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.qualcomm.com/company/product-security/bulletins/april-2022-bulletin
Scores
CVSS v3
7.5
EPSS
0.0003
EPSS Percentile
10.0%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Details
CWE
CWE-120
Status
published
Products (50)
qualcomm/apq8097_firmware
qualcomm/apq8098_firmware
qualcomm/ipq6000_firmware
qualcomm/ipq6005_firmware
qualcomm/ipq6010_firmware
qualcomm/ipq6018_firmware
qualcomm/ipq6028_firmware
qualcomm/mdm9205_firmware
qualcomm/msm8997_firmware
qualcomm/msm8998_firmware
... and 40 more
Published
Jun 14, 2022
Tracked Since
Feb 18, 2026