Qualcomm Snapdragon 4 Gen 1 Mobile Platform vulnerabilities, page 5

180 vulnerabilities

Known vulnerabilities in Qualcomm Snapdragon 4 Gen 1 Mobile Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.4HighCVE-2024-33028qualcomm, inc. · snapdragon +136 moreUse After Free in Automotive TelematicsMemory corruption as fence object may still be accessed in timeline destruct after isync fence is released.EPSS0.11%8.4HighCVE-2024-33021qualcomm, inc. · snapdragon +136 moreUse of Uninitialized Variable in Automotive GPUMemory corruption while processing IOCTL call to set metainfo.EPSS0.10%7.5HighCVE-2024-33014qualcomm, inc. · snapdragon +319 moreBuffer Over-read in WLAN HostTransient DOS while parsing ESP IE from beacon/probe response frame.EPSS0.32%7.5HighCVE-2024-33015qualcomm, inc. · snapdragon +192 moreBuffer Over-read in WLAN HostTransient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.EPSS0.28%8.4HighCVE-2024-23381qualcomm, inc. · snapdragon +72 moreUse After Free in Graphics LinuxMemory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU.EPSS0.11%8.4HighCVE-2024-23382qualcomm, inc. · snapdragon +102 moreUse After Free in Graphics LinuxMemory corruption while processing graphics kernel driver request to create DMA fence.EPSS0.12%7.5HighCVE-2024-23353qualcomm, inc. · snapdragon +247 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.EPSS0.35%6.2MediumCVE-2024-23357qualcomm, inc. · snapdragon +236 moreNULL Pointer Dereference in HLOSTransient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.EPSS0.09%7.8HighCVE-2024-23356qualcomm, inc. · snapdragon +208 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption during session sign renewal request calls in HLOS.EPSS0.11%7.1HighCVE-2024-23362qualcomm, inc. · snapdragon +230 moreImproper Input Validation in Trusted Execution EnvironmentCryptographic issue while parsing RSA keys in COBR format.EPSS0.12%7.8HighCVE-2024-23368qualcomm, inc. · snapdragon +341 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPCMemory corruption when allocating and accessing an entry in an SMEM partition.EPSS0.10%8.4HighCVE-2024-23372qualcomm, inc. · snapdragon +109 moreInteger Overflow or Wraparound in GraphicsMemory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.EPSS0.13%7.5HighCVE-2024-23385qualcomm, inc. · snapdragon +91 moreReachable Assertion in ModemTransient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.EPSS0.25%7.5HighCVE-2024-23352qualcomm, inc. · snapdragon +103 moreLoop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call ProcessorTransient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.EPSS0.35%8.2HighCVE-2024-23359qualcomm, inc. · snapdragon +159 moreBuffer Over-read in Multi Mode Call ProcessorInformation disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.EPSS0.26%8.4HighCVE-2024-23384qualcomm, inc. · snapdragon +102 moreUse After Free in Graphics LinuxMemory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.EPSS0.11%7.5HighCVE-2024-23364qualcomm, inc. · snapdragon +177 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).EPSS0.30%7.8HighCVE-2024-23355qualcomm, inc. · snapdragon +141 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in AutomotiveMemory corruption when keymaster operation imports a shared key.EPSS0.11%8.4HighCVE-2024-23383qualcomm, inc. · snapdragon +71 moreUse After Free in Graphics LinuxMemory corruption when kernel driver attempts to trigger hardware fences.EPSS0.11%8.4HighCVE-2024-23373qualcomm, inc. · snapdragon +220 moreUse After Free in GraphicsMemory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.EPSS0.15%