Vulnerabilidades em Qualcomm, Inc.

2.934 resultados
Análise Vexday

Com 2.934 CVEs catalogadas, a Qualcomm apresenta um volume expressivo de vulnerabilidades, reflexo da amplitude de seu portfólio de chipsets e firmware embarcado. A taxa de exploração ativa — 12 entradas no catálogo KEV da CISA, ou 0,41% do total — está em linha com a média geral do catálogo, indicando que o risco de exploração confirmada não foge do padrão da indústria, embora 94 falhas de severidade crítica representem uma superfície de ataque relevante para equipes de segurança que dependem de componentes Qualcomm em ambientes móveis, automotivos ou de IoT. A CVE mais perigosa atualmente em exploração ativa, CVE-2020-11261, apresenta EPSS de 0,0177, sugerindo probabilidade de exploração adicional relativamente baixa no curto prazo, mas sua presença no KEV exige atenção imediata em qualquer inventário de ativos afetados. O surgimento de 49 novas CVEs nos últimos 90 dias e a disponibilidade de PoCs públicas para 3 vulnerabilidades reforçam a necessidade de ciclos contínuos de atualização de firmware e monitoramento ativo de patches liberados pelo fabricante.

CVE-2018-3578—Type mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading to a heap buffer overEPSS 0.5%CVE-2022-33279CRITICALStack based buffer overflow in WLANEPSS 0.4%CVE-2022-33268HIGHInformation disclosure due to buffer over-read in Bluetooth HOST while pairing and connecting A2DP. in Snapdragon Auto, Snapdragon Compute, EPSS 0.4%CVE-2022-22071HIGHPossible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon AEPSS 0.4%KEVCVE-2019-14079—Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped in the first place leEPSS 0.4%CVE-2017-14891—In the KGSL driver function _gpuobj_map_useraddr() in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-10-12, the contents oEPSS 0.4%CVE-2015-9022—In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs.EPSS 0.4%CVE-2020-11236HIGHMemory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon AutoEPSS 0.4%CVE-2021-30343CRITICALImproper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in SnapdrEPSS 0.4%CVE-2021-30342CRITICALImproper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in SnapdrEPSS 0.4%CVE-2017-8269—Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases from CAF using the LinuxEPSS 0.4%CVE-2015-8996—In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using tEPSS 0.4%CVE-2020-11114—u'Bluetooth devices does not properly restrict the L2CAP payload length allowing users in radio range to cause a buffer overflow via a craftEPSS 0.4%CVE-2022-25729CRITICALImproper Input Validation in MODEMEPSS 0.4%CVE-2014-9966—In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure EPSS 0.4%CVE-2015-9006—In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could poteEPSS 0.4%CVE-2014-9952—In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist.EPSS 0.4%CVE-2015-8997—In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF usingEPSS 0.4%CVE-2014-9950—In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.EPSS 0.4%CVE-2016-5861—In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace isEPSS 0.4%