Aller au contenu

Vulnérabilités connues pour Qualcomm, Inc. Snapdragon

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-43053 Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information 7.8 Élevée 2 déc. 2024
CVE-2024-43052 Memory corruption while processing API calls to NPU with invalid input 7.8 Élevée 2 déc. 2024
CVE-2024-43050 Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver 7.8 Élevée 2 déc. 2024
CVE-2024-43049 Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver 7.8 Élevée 2 déc. 2024
CVE-2024-43048 Memory corruption when invalid input is passed to invoke GPU Headroom API call 7.8 Élevée 2 déc. 2024
CVE-2024-33063 Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside… 7.5 Élevée 2 déc. 2024
CVE-2024-33056 Memory corruption when allocating and accessing an entry in an SMEM partition continuously 8.4 Élevée 2 déc. 2024
CVE-2024-33053 Memory corruption when multiple threads try to unregister the CVP buffer at the same time 6.7 Moyenne 2 déc. 2024
CVE-2024-33044 Memory corruption while Configuring the SMR/S2CR register in Bypass mode 8.4 Élevée 2 déc. 2024
CVE-2024-33040 Memory corruption while invoking redundant release command to release one buffer from user space as race condition can… 6.7 Moyenne 2 déc. 2024
CVE-2024-33039 Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not… 6.7 Moyenne 2 déc. 2024
CVE-2024-33037 Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC… 6.1 Moyenne 2 déc. 2024
CVE-2024-33036 Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory… 6.7 Moyenne 2 déc. 2024
CVE-2018-5852 An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using… 8.4 Élevée 26 nov. 2024
CVE-2018-11816 Crafted Binder Request Causes Heap UAF in MediaServer 7.8 Élevée 26 nov. 2024
CVE-2017-18307 Information disclosure possible while audio playback 8.4 Élevée 26 nov. 2024
CVE-2017-18306 Information disclosure due to uninitialized variable 8.4 Élevée 26 nov. 2024
CVE-2016-10408 QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory 7.8 Élevée 26 nov. 2024
CVE-2018-11952 An image with a version lower than the fuse version may potentially be booted lead to improper authentication 7.8 Élevée 26 nov. 2024
CVE-2018-11922 Wrong configuration in Touch Pal application can collect user behavior data without awareness by the user 7.5 Élevée 26 nov. 2024
CVE-2017-18153 A race condition exists in a driver potentially leading to a use-after-free condition 6.8 Moyenne 26 nov. 2024
CVE-2017-17772 In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation 8.8 Élevée 26 nov. 2024
CVE-2017-15832 Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW 7.8 Élevée 26 nov. 2024
CVE-2017-11076 On some hardware revisions where VP9 decoding is hardware-accelerated, the frame size is not programmed correctly into… 8.8 Élevée 26 nov. 2024
CVE-2016-10394 Initial xbl_sec revision does not have all the debug policy features and critical checks 9.8 Critique 26 nov. 2024

Autres produits Qualcomm, Inc.