Qualcomm Qdu1010 vulnerabilities, page 3
101 vulnerabilities
Known vulnerabilities in Qualcomm Qdu1010, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-45549qualcomm, inc. · snapdragon +158 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in KERNELInformation disclosure while creating MQ channels.EPSS0.12%MediumCVE-2024-45551qualcomm, inc. · snapdragon +240 moreWeak Authentication in HLOSCryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.EPSS0.11%HighCVE-2024-45553qualcomm, inc. · snapdragon +125 moreUse After Free in DSP ServicesMemory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.EPSS0.13%HighCVE-2024-49845qualcomm, inc. · snapdragon +144 moreImproper Input Validation in HLOSMemory corruption during the FRS UDS generation process.EPSS0.11%HighCVE-2024-49835qualcomm, inc. · snapdragon +207 moreOut-of-bounds Write in SPS ApplicationsMemory corruption while reading secure file.EPSS0.11%MediumCVE-2024-49848qualcomm, inc. · snapdragon +145 moreUse After Free in DSP ServiceMemory corruption while processing multiple IOCTL calls from HLOS to DSP.EPSS0.14%HighCVE-2024-49844qualcomm, inc. · snapdragon +179 moreImproper Input Validation in AutomotiveMemory corruption while triggering commands in the PlayReady Trusted application.EPSS0.11%HighCVE-2024-49841qualcomm, inc. · snapdragon +170 moreDetection of Error Condition Without Action in HypervisorMemory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.EPSS0.11%HighCVE-2024-49842qualcomm, inc. · snapdragon +176 moreImproper Access Control in HypervisorMemory corruption during memory mapping into protected VM address space due to incorrect API restrictions.EPSS0.09%HighCVE-2024-33044qualcomm, inc. · snapdragon +208 moreImproper Validation of Array Index in HypervisorMemory corruption while Configuring the SMR/S2CR register in Bypass mode.EPSS0.10%HighCVE-2024-33045qualcomm, inc. · snapdragon +175 moreReturn of Stack Variable Address in BusesMemory corruption when BTFM client sends new messages over Slimbus to ADSP.EPSS0.12%HighCVE-2024-33060qualcomm, inc. · snapdragon +243 moreUse After Free in DSP ServiceMemory corruption when two threads try to map and unmap a single node simultaneously.EPSS0.17%MediumCVE-2024-33016qualcomm, inc. · snapdragon +331 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Storagememory corruption when an invalid firehose patch command is invoked.EPSS0.15%HighCVE-2024-33022qualcomm, inc. · snapdragon +123 moreInteger Overflow or Wraparound in Automotive GPUMemory corruption while allocating memory in HGSL driver.EPSS0.10%HighCVE-2024-33058qualcomm, inc. · snapdragon +189 moreInsufficient Granularity of Access Control in CoreMemory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.EPSS0.09%HighCVE-2024-33056qualcomm, inc. · snapdragon +323 moreBuffer Over-read in MProcMemory corruption when allocating and accessing an entry in an SMEM partition continuously.EPSS0.10%HighCVE-2024-33028qualcomm, inc. · snapdragon +136 moreUse After Free in Automotive TelematicsMemory corruption as fence object may still be accessed in timeline destruct after isync fence is released.EPSS0.11%HighCVE-2024-33021qualcomm, inc. · snapdragon +136 moreUse of Uninitialized Variable in Automotive GPUMemory corruption while processing IOCTL call to set metainfo.EPSS0.10%MediumCVE-2024-23357qualcomm, inc. · snapdragon +236 moreNULL Pointer Dereference in HLOSTransient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.EPSS0.09%HighCVE-2024-23356qualcomm, inc. · snapdragon +208 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption during session sign renewal request calls in HLOS.EPSS0.11%