Aller au contenu

Vulnérabilités connues pour qualcomm qcm4490_firmware

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-38424 Memory corruption during GNSS HAL process initialization 7.8 Élevée 4 nov. 2024
CVE-2024-38415 Memory corruption while handling session errors from firmware 7.8 Élevée 4 nov. 2024
CVE-2024-38408 Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions 8.2 Élevée 4 nov. 2024
CVE-2024-23385 Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE 7.5 Élevée 4 nov. 2024
CVE-2024-38402 Memory corruption while processing IOCTL call for getting group info 7.8 Élevée 2 sept. 2024
CVE-2024-33060 Memory corruption when two threads try to map and unmap a single node simultaneously 8.4 Élevée 2 sept. 2024
CVE-2024-33052 Memory corruption when user provides data for FM HCI command control operations 7.8 Élevée 2 sept. 2024
CVE-2024-33051 Transient DOS while processing TIM IE from beacon frame as there is no check for IE length 7.5 Élevée 2 sept. 2024
CVE-2024-33050 Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing… 7.5 Élevée 2 sept. 2024
CVE-2024-33045 Memory corruption when BTFM client sends new messages over Slimbus to ADSP 8.4 Élevée 2 sept. 2024
CVE-2024-33042 Memory corruption when Alternative Frequency offset value is set to 255 7.8 Élevée 2 sept. 2024
CVE-2024-33038 Memory corruption while passing untrusted/corrupted pointers from DSP to EVA 7.8 Élevée 2 sept. 2024
CVE-2024-33035 Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients 8.4 Élevée 2 sept. 2024
CVE-2024-33016 memory corruption when an invalid firehose patch command is invoked 6.8 Moyenne 2 sept. 2024
CVE-2024-23364 Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information… 7.5 Élevée 2 sept. 2024
CVE-2024-23362 Cryptographic issue while parsing RSA keys in COBR format 7.1 Élevée 2 sept. 2024
CVE-2024-23359 Information disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network 8.2 Élevée 2 sept. 2024
CVE-2024-33034 Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and… 8.4 Élevée 5 août 2024
CVE-2024-33023 Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events 8.4 Élevée 5 août 2024
CVE-2024-33015 Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is… 7.5 Élevée 5 août 2024
CVE-2024-33014 Transient DOS while parsing ESP IE from beacon/probe response frame 7.5 Élevée 5 août 2024
CVE-2024-33012 Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with… 7.5 Élevée 5 août 2024
CVE-2024-33011 Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero 7.5 Élevée 5 août 2024
CVE-2024-33010 Transient DOS while parsing fragments of MBSSID IE from beacon frame 7.5 Élevée 5 août 2024
CVE-2024-23384 Use After Free in Graphics Linux 8.4 Élevée 5 août 2024

Autres produits qualcomm