Qualcomm Qmp1000 vulnerabilities, page 5

129 vulnerabilities

Known vulnerabilities in Qualcomm Qmp1000, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5MediumCVE-2024-43046qualcomm, inc. · snapdragon +308 moreInformation Exposure in TZ Secure OSThere may be information disclosure during memory re-allocation in TZ Secure OS.EPSS0.11%7.9HighCVE-2024-53011qualcomm, inc. · snapdragon +81 morePermissions, Privileges, and Access Controls in Video Analytics and ProcessingInformation disclosure may occur due to improper permission and access controls to Video Analytics engine.EPSS0.12%8.2HighCVE-2024-53026qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.EPSS0.30%7.8HighCVE-2024-53009qualcomm, inc. · snapdragon +185 moreImproper Validation of Array Index in Automotive AutonomyMemory corruption while operating the mailbox in Automotive.EPSS0.10%7.8HighCVE-2024-53024qualcomm, inc. · snapdragon +161 moreNULL Pointer Dereference in DisplayMemory corruption in display driver while detaching a device.EPSS0.12%8.2HighCVE-2024-53021qualcomm, inc. · snapdragon +223 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while processing goodbye RTCP packet from network.EPSS0.24%7.8HighCVE-2024-53014qualcomm, inc. · snapdragon +244 moreImproper Validation of Array Index in AudioMemory corruption may occur while validating ports and channels in Audio driver.EPSS0.12%8.2HighCVE-2024-53019qualcomm, inc. · snapdragon +79 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.EPSS0.24%8.2HighCVE-2024-53020qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while decoding the RTP packet with invalid header extension from network.EPSS0.24%7.7HighCVE-2024-45549qualcomm, inc. · snapdragon +158 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in KERNELInformation disclosure while creating MQ channels.EPSS0.12%6.2MediumCVE-2024-45551qualcomm, inc. · snapdragon +240 moreWeak Authentication in HLOSCryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.EPSS0.11%7.8HighCVE-2024-45580qualcomm, inc. · snapdragon +37 moreUse After Free in DSP ServiceMemory corruption while handling multuple IOCTL calls from userspace for remote invocation.EPSS0.12%7.8HighCVE-2024-49836qualcomm, inc. · snapdragon +29 moreImproper Validation of Array Index in CameraMemory corruption may occur during the synchronization of the camera`s frame processing pipeline.EPSS0.12%7.8HighCVE-2024-49845qualcomm, inc. · snapdragon +144 moreImproper Input Validation in HLOSMemory corruption during the FRS UDS generation process.EPSS0.11%7.8HighCVE-2024-49835qualcomm, inc. · snapdragon +207 moreOut-of-bounds Write in SPS ApplicationsMemory corruption while reading secure file.EPSS0.11%6.7MediumCVE-2024-49848qualcomm, inc. · snapdragon +145 moreUse After Free in DSP ServiceMemory corruption while processing multiple IOCTL calls from HLOS to DSP.EPSS0.14%7.8HighCVE-2024-49844qualcomm, inc. · snapdragon +179 moreImproper Input Validation in AutomotiveMemory corruption while triggering commands in the PlayReady Trusted application.EPSS0.11%7.8HighCVE-2024-49841qualcomm, inc. · snapdragon +170 moreDetection of Error Condition Without Action in HypervisorMemory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.EPSS0.11%7.8HighCVE-2024-49842qualcomm, inc. · snapdragon +176 moreImproper Access Control in HypervisorMemory corruption during memory mapping into protected VM address space due to incorrect API restrictions.EPSS0.09%7.5HighCVE-2024-33058qualcomm, inc. · snapdragon +189 moreInsufficient Granularity of Access Control in CoreMemory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.EPSS0.09%