Qualcomm Snapdragon 685 4G Mobile Platform \(Sm6225 Ad\) vulnerabilities, page 3
56 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 685 4G Mobile Platform \(Sm6225 Ad\), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-38399qualcomm, inc. · snapdragon +40 moreUse After Free in GraphicsMemory corruption while processing user packets to generate page faults.EPSS0.14%HighCVE-2024-45552qualcomm, inc. · snapdragon +145 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.EPSS0.27%MediumCVE-2024-45551qualcomm, inc. · snapdragon +240 moreWeak Authentication in HLOSCryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.EPSS0.11%MediumCVE-2024-49848qualcomm, inc. · snapdragon +145 moreUse After Free in DSP ServiceMemory corruption while processing multiple IOCTL calls from HLOS to DSP.EPSS0.14%HighCVE-2024-33011qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.EPSS0.28%HighCVE-2024-33035qualcomm, inc. · snapdragon +89 moreInteger Overflow or Wraparound in DisplayMemory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.EPSS0.13%HighCVE-2024-33012qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.EPSS0.28%HighCVE-2024-33010qualcomm, inc. · snapdragon +246 moreUse After Free in WLAN HostTransient DOS while parsing fragments of MBSSID IE from beacon frame.EPSS0.28%MediumCVE-2024-33016qualcomm, inc. · snapdragon +331 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Storagememory corruption when an invalid firehose patch command is invoked.EPSS0.15%HighCVE-2024-33049qualcomm, inc. · snapdragon +131 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.EPSS0.32%HighCVE-2024-23382qualcomm, inc. · snapdragon +102 moreUse After Free in Graphics LinuxMemory corruption while processing graphics kernel driver request to create DMA fence.EPSS0.12%HighCVE-2024-23353qualcomm, inc. · snapdragon +247 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.EPSS0.35%HighCVE-2024-23356qualcomm, inc. · snapdragon +208 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption during session sign renewal request calls in HLOS.EPSS0.11%HighCVE-2024-23362qualcomm, inc. · snapdragon +230 moreImproper Input Validation in Trusted Execution EnvironmentCryptographic issue while parsing RSA keys in COBR format.EPSS0.12%HighCVE-2024-23384qualcomm, inc. · snapdragon +102 moreUse After Free in Graphics LinuxMemory corruption when the mapped pages in VBO are still mapped after reclaiming by shrinker.EPSS0.11%HighCVE-2024-23355qualcomm, inc. · snapdragon +141 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in AutomotiveMemory corruption when keymaster operation imports a shared key.EPSS0.11%