Qualcomm Qcs4490 vulnerabilities, page 5
268 vulnerabilities
Known vulnerabilities in Qualcomm Qcs4490, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-38424qualcomm, inc. · snapdragon +117 moreUse After Free in GPSMemory corruption during GNSS HAL process initialization.EPSS0.10%MediumCVE-2024-38426qualcomm, inc. · snapdragon +163 moreImproper Authentication in ModemWhile processing the authentication message in UE, improper authentication may lead to information disclosure.EPSS0.27%HighCVE-2024-38402qualcomm, inc. · snapdragon +163 moreUse After Free in DSP ServicesMemory corruption while processing IOCTL call for getting group info.EPSS0.16%CriticalCVE-2024-38408qualcomm, inc. · snapdragon +229 moreCryptographic Issues in BT ControllerCryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.EPSS0.14%HighCVE-2024-45557qualcomm, inc. · snapdragon +60 moreUse of Out-of-range Pointer Offset in Trust Management EngineMemory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.EPSS0.11%HighCVE-2024-45549qualcomm, inc. · snapdragon +158 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in KERNELInformation disclosure while creating MQ channels.EPSS0.12%MediumCVE-2024-45551qualcomm, inc. · snapdragon +240 moreWeak Authentication in HLOSCryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.EPSS0.11%HighCVE-2024-45553qualcomm, inc. · snapdragon +125 moreUse After Free in DSP ServicesMemory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.EPSS0.13%HighCVE-2024-49834qualcomm, inc. · snapdragon +122 moreImproper Validation of Array Index in CameraMemory corruption while power-up or power-down sequence of the camera sensor.EPSS0.11%MediumCVE-2024-49848qualcomm, inc. · snapdragon +145 moreUse After Free in DSP ServiceMemory corruption while processing multiple IOCTL calls from HLOS to DSP.EPSS0.14%HighCVE-2024-49838qualcomm, inc. · snapdragon +165 moreBuffer Over-read in WLAN HOSTInformation disclosure while parsing the OCI IE with invalid length.EPSS0.31%HighCVE-2024-49833qualcomm, inc. · snapdragon +78 moreImproper Validation of Array Index in CameraMemory corruption can occur in the camera when an invalid CID is used.EPSS0.10%HighCVE-2024-33011qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.EPSS0.28%HighCVE-2024-33035qualcomm, inc. · snapdragon +89 moreInteger Overflow or Wraparound in DisplayMemory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.EPSS0.13%HighCVE-2024-33051qualcomm, inc. · snapdragon +282 moreBuffer Over-read in WLAN FirmwareTransient DOS while processing TIM IE from beacon frame as there is no check for IE length.EPSS0.30%HighCVE-2024-33045qualcomm, inc. · snapdragon +175 moreReturn of Stack Variable Address in BusesMemory corruption when BTFM client sends new messages over Slimbus to ADSP.EPSS0.12%HighCVE-2024-33050qualcomm, inc. · snapdragon +252 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.EPSS0.30%HighCVE-2024-33034qualcomm, inc. · snapdragon +102 moreUse After Free in Graphics LinuxMemory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.EPSS0.10%HighCVE-2024-33012qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.EPSS0.28%HighCVE-2024-33060qualcomm, inc. · snapdragon +243 moreUse After Free in DSP ServiceMemory corruption when two threads try to map and unmap a single node simultaneously.EPSS0.17%