Qualcomm Sa8530P vulnerabilities, page 4
98 vulnerabilities
Known vulnerabilities in Qualcomm Sa8530P, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-45570qualcomm, inc. · snapdragon +57 moreUse of Out-of-range Pointer Offset in Camera DriverMemory corruption may occur during IO configuration processing when the IO port count is invalid.EPSS0.11%CriticalCVE-2024-45569qualcomm, inc. · snapdragon +173 moreImproper Validation of Array Index in WLAN Host CommunicationMemory corruption while parsing the ML IE due to invalid frame content.EPSS0.58%CriticalCVE-2024-49839qualcomm, inc. · snapdragon +185 moreBuffer Over-read in WLAN Host CmnMemory corruption during management frame processing due to mismatch in T2LM info element.EPSS0.29%HighCVE-2024-49845qualcomm, inc. · snapdragon +144 moreImproper Input Validation in HLOSMemory corruption during the FRS UDS generation process.EPSS0.11%HighCVE-2024-49835qualcomm, inc. · snapdragon +207 moreOut-of-bounds Write in SPS ApplicationsMemory corruption while reading secure file.EPSS0.11%HighCVE-2024-49844qualcomm, inc. · snapdragon +179 moreImproper Input Validation in AutomotiveMemory corruption while triggering commands in the PlayReady Trusted application.EPSS0.11%HighCVE-2024-49838qualcomm, inc. · snapdragon +165 moreBuffer Over-read in WLAN HOSTInformation disclosure while parsing the OCI IE with invalid length.EPSS0.31%MediumCVE-2024-33067qualcomm, inc. · snapdragon +76 moreBuffer Over-read in AudioInformation disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.EPSS0.10%HighCVE-2024-33069qualcomm, inc. · snapdragon +44 moreUse After Free in WLAN HostTransient DOS when transmission of management frame sent by host is not successful and error status is received in the host.EPSS0.36%HighCVE-2024-33011qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.EPSS0.28%HighCVE-2024-33035qualcomm, inc. · snapdragon +89 moreInteger Overflow or Wraparound in DisplayMemory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.EPSS0.13%HighCVE-2024-33044qualcomm, inc. · snapdragon +208 moreImproper Validation of Array Index in HypervisorMemory corruption while Configuring the SMR/S2CR register in Bypass mode.EPSS0.10%HighCVE-2024-33045qualcomm, inc. · snapdragon +175 moreReturn of Stack Variable Address in BusesMemory corruption when BTFM client sends new messages over Slimbus to ADSP.EPSS0.12%HighCVE-2024-33050qualcomm, inc. · snapdragon +252 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.EPSS0.30%MediumCVE-2024-33037qualcomm, inc. · snapdragon +50 moreBuffer Over-read in Neural Processing UnitInformation disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.EPSS0.10%HighCVE-2024-33012qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.EPSS0.28%HighCVE-2024-33010qualcomm, inc. · snapdragon +246 moreUse After Free in WLAN HostTransient DOS while parsing fragments of MBSSID IE from beacon frame.EPSS0.28%MediumCVE-2024-33036qualcomm, inc. · snapdragon +51 moreUse of Out-of-range Pointer Offset in Camera DriverMemory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.EPSS0.10%MediumCVE-2024-33016qualcomm, inc. · snapdragon +331 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Storagememory corruption when an invalid firehose patch command is invoked.EPSS0.15%MediumCVE-2024-33053qualcomm, inc. · snapdragon +55 moreUse After Free in VideoMemory corruption when multiple threads try to unregister the CVP buffer at the same time.EPSS0.10%