Qualcomm Qcs8550 vulnerabilities, page 5
352 vulnerabilities
Known vulnerabilities in Qualcomm Qcs8550, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-21465qualcomm, inc. · snapdragon +257 moreBuffer Over-read in Trusted Execution EnvironmentMemory corruption while processing key blob passed by the user.EPSS0.10%CriticalCVE-2024-21480qualcomm, inc. · snapdragon +112 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in AudioMemory corruption while playing audio file having large-sized input buffer.EPSS0.29%HighCVE-2024-21461qualcomm, inc. · snapdragon +311 moreDouble Free in HLOSMemory corruption while performing finish HMAC operation when context is freed by keymaster.EPSS0.10%HighCVE-2024-21471qualcomm, inc. · snapdragon +169 moreUse After Free in Graphics LinuxMemory corruption when IOMMU unmap of a GPU buffer fails in Linux.EPSS0.11%HighCVE-2024-21477qualcomm, inc. · snapdragon +182 moreBuffer Over-read in WLAN FirmwareTransient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.EPSS0.32%CriticalCVE-2024-21463qualcomm, inc. · snapdragon +105 moreBuffer Copy Without Checking Size of Input in AudioMemory corruption while processing Codec2 during v13k decoder pitch synthesis.EPSS0.29%HighCVE-2024-21469qualcomm, inc. · snapdragon +222 morePermissions, Privileges, and Access Control issues in TZ Secure OSMemory corruption when an invoke call and a TEE call are bound for the same trusted application.EPSS0.10%HighCVE-2024-21475qualcomm, inc. · snapdragon +229 moreUse of Out-of-range Pointer Offset in VideoMemory corruption when the payload received from firmware is not as per the expected protocol size.EPSS0.11%HighCVE-2024-21460qualcomm, inc. · snapdragon +14 moreUse of Insufficiently Random Values in CoreInformation disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.EPSS0.10%HighCVE-2024-21462qualcomm, inc. · snapdragon +309 moreBuffer Over-read in TZ Secure OSTransient DOS while loading the TA ELF file.EPSS0.09%HighCVE-2024-21481qualcomm, inc. · snapdragon +165 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HypervisorMemory corruption when preparing a shared memory notification for a memparcel in Resource Manager.EPSS0.11%HighCVE-2024-43065qualcomm, inc. · snapdragon +164 moreExposed Dangerous Method or Function in HLOSCryptographic issues while generating an asymmetric key pair for RKP use cases.EPSS0.11%HighCVE-2024-43066qualcomm, inc. · snapdragon +98 moreUse After Free in HLOSMemory corruption while handling file descriptor during listener registration/de-registration.EPSS0.11%HighCVE-2024-43061qualcomm, inc. · snapdragon +30 moreUse After Free in AudioMemory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.EPSS0.12%MediumCVE-2024-43056qualcomm, inc. · snapdragon +187 moreBuffer Over-read in HypervisorTransient DOS during hypervisor virtual I/O operation in a virtual machine.EPSS0.11%HighCVE-2024-43052qualcomm, inc. · snapdragon +89 moreImproper Input Validation in Video Analytics and ProcessingMemory corruption while processing API calls to NPU with invalid input.EPSS0.10%MediumCVE-2024-43046qualcomm, inc. · snapdragon +308 moreInformation Exposure in TZ Secure OSThere may be information disclosure during memory re-allocation in TZ Secure OS.EPSS0.11%MediumCVE-2024-43051qualcomm, inc. · snapdragon +237 moreImproper Authorization in SPS-HLOSInformation disclosure while deriving keys for a session for any Widevine use case.EPSS0.11%HighCVE-2024-43060qualcomm, inc. · snapdragon +41 moreUse of Out-of-range Pointer Offset in Automotive AudioMemory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.EPSS0.12%MediumCVE-2024-53013qualcomm, inc. · snapdragon +60 moreBuffer Copy Without Checking Size of Input in AudioMemory corruption may occur while processing voice call registration with user.EPSS0.09%