Aller au contenu

Vulnérabilités de qualcomm qsm8250_firmware

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-43052 Memory corruption while processing API calls to NPU with invalid input 7.8 Élevée 2 déc. 2024
CVE-2024-33056 Memory corruption when allocating and accessing an entry in an SMEM partition continuously 8.4 Élevée 2 déc. 2024
CVE-2024-33053 Memory corruption when multiple threads try to unregister the CVP buffer at the same time 6.7 Moyenne 2 déc. 2024
CVE-2024-33044 Memory corruption while Configuring the SMR/S2CR register in Bypass mode 8.4 Élevée 2 déc. 2024
CVE-2024-33037 Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC… 6.1 Moyenne 2 déc. 2024
CVE-2024-33036 Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory… 6.7 Moyenne 2 déc. 2024
CVE-2024-38423 Memory corruption while processing GPU page table switch 7.8 Élevée 4 nov. 2024
CVE-2024-38422 Memory corruption while processing voice packet with arbitrary data received from ADSP 7.8 Élevée 4 nov. 2024
CVE-2024-38415 Memory corruption while handling session errors from firmware 7.8 Élevée 4 nov. 2024
CVE-2024-38408 Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions 8.2 Élevée 4 nov. 2024
CVE-2024-33032 Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it 6.7 Moyenne 4 nov. 2024
CVE-2024-33051 Transient DOS while processing TIM IE from beacon frame as there is no check for IE length 7.5 Élevée 2 sept. 2024
CVE-2024-33016 memory corruption when an invalid firehose patch command is invoked 6.8 Moyenne 2 sept. 2024
CVE-2024-23364 Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information… 7.5 Élevée 2 sept. 2024
CVE-2024-21469 Memory corruption when an invoke call and a TEE call are bound for the same trusted application 7.3 Élevée 1 juil. 2024
CVE-2024-21461 Memory corruption while performing finish HMAC operation when context is freed by keymaster 8.4 Élevée 1 juil. 2024
CVE-2024-21476 Memory corruption when the channel ID passed by user is not validated and further used 7.8 Élevée 6 mai 2024
CVE-2024-21468 Memory corruption when there is failed unmap operation in GPU 8.4 Élevée 1 avr. 2024
CVE-2023-33023 Memory corruption while processing finish_sign command to pass a rsp buffer 8.4 Élevée 1 avr. 2024
CVE-2023-28547 Memory corruption in SPS Application while requesting for public key in sorter TA 8.4 Élevée 1 avr. 2024
CVE-2023-33066 Memory corruption in Audio while processing RT proxy port register driver 8.4 Élevée 4 mars 2024
CVE-2023-28578 Memory corruption in Core Services while executing the command for removing a single event listener 9.3 Critique 4 mars 2024
CVE-2023-43522 Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL 7.5 Élevée 6 févr. 2024
CVE-2023-33107 Exploitée Qualcomm Multiple Chipsets Integer Overflow Vulnerability 8.4 Élevée 5 déc. 2023
CVE-2023-33063 Exploitée Qualcomm Multiple Chipsets Use-After-Free Vulnerability 7.8 Élevée 5 déc. 2023

Autres produits qualcomm