Qualcomm Qfw7114 vulnerabilities, page 5
308 vulnerabilities
Known vulnerabilities in Qualcomm Qfw7114, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-43065qualcomm, inc. · snapdragon +164 moreExposed Dangerous Method or Function in HLOSCryptographic issues while generating an asymmetric key pair for RKP use cases.EPSS0.11%MediumCVE-2024-43056qualcomm, inc. · snapdragon +187 moreBuffer Over-read in HypervisorTransient DOS during hypervisor virtual I/O operation in a virtual machine.EPSS0.11%MediumCVE-2024-43046qualcomm, inc. · snapdragon +308 moreInformation Exposure in TZ Secure OSThere may be information disclosure during memory re-allocation in TZ Secure OS.EPSS0.11%HighCVE-2024-43057qualcomm, inc. · snapdragon +151 moreUse After Free in MProcMemory corruption while processing command in Glink linux.EPSS0.12%MediumCVE-2024-43051qualcomm, inc. · snapdragon +237 moreImproper Authorization in SPS-HLOSInformation disclosure while deriving keys for a session for any Widevine use case.EPSS0.11%HighCVE-2024-43060qualcomm, inc. · snapdragon +41 moreUse of Out-of-range Pointer Offset in Automotive AudioMemory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.EPSS0.12%HighCVE-2024-53027qualcomm, inc. · snapdragon +206 moreBuffer Copy Without Checking Size of Input in WLAN HostTransient DOS may occur while processing the country IE.EPSS0.30%HighCVE-2024-53010qualcomm, inc. · snapdragon +191 moreImproper Access Control in CoreMemory corruption may occur while attaching VM when the HLOS retains access to VM.EPSS0.08%HighCVE-2024-53009qualcomm, inc. · snapdragon +185 moreImproper Validation of Array Index in Automotive AutonomyMemory corruption while operating the mailbox in Automotive.EPSS0.10%HighCVE-2024-53023qualcomm, inc. · snapdragon +102 moreUse After Free in Automotive Android OSMemory corruption may occur while accessing a variable during extended back to back tests.EPSS0.12%HighCVE-2024-53014qualcomm, inc. · snapdragon +244 moreImproper Validation of Array Index in AudioMemory corruption may occur while validating ports and channels in Audio driver.EPSS0.12%MediumCVE-2024-38416qualcomm, inc. · snapdragon +71 moreBuffer Over-read in AudioInformation disclosure during audio playback.EPSS0.10%HighCVE-2024-38404qualcomm, inc. · snapdragon +40 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.EPSS0.25%HighCVE-2024-38424qualcomm, inc. · snapdragon +117 moreUse After Free in GPSMemory corruption during GNSS HAL process initialization.EPSS0.10%HighCVE-2024-38405qualcomm, inc. · snapdragon +98 moreBuffer Over-read in WLAN HostTransient DOS while processing the CU information from RNR IE.EPSS0.25%HighCVE-2024-38419qualcomm, inc. · snapdragon +146 moreUse After Free in Automotive GPUMemory corruption while invoking IOCTL calls from the use-space for HGSL memory node.EPSS0.10%HighCVE-2024-38422qualcomm, inc. · snapdragon +263 moreInteger Overflow to Buffer Overflow in AudioMemory corruption while processing voice packet with arbitrary data received from ADSP.EPSS0.10%MediumCVE-2024-38426qualcomm, inc. · snapdragon +163 moreImproper Authentication in ModemWhile processing the authentication message in UE, improper authentication may lead to information disclosure.EPSS0.27%HighCVE-2024-38401qualcomm, inc. · snapdragon +40 moreUse After Free in Qualcomm IPCMemory corruption while processing concurrent IOCTL calls.EPSS0.13%HighCVE-2024-38402qualcomm, inc. · snapdragon +163 moreUse After Free in DSP ServicesMemory corruption while processing IOCTL call for getting group info.EPSS0.16%