Qualcomm Snapdragon 870 5G Mobile Platform \(Sm8250 Ac\) vulnerabilities, page 3
68 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 870 5G Mobile Platform \(Sm8250 Ac\), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-43065qualcomm, inc. · snapdragon +164 moreExposed Dangerous Method or Function in HLOSCryptographic issues while generating an asymmetric key pair for RKP use cases.EPSS0.11%HighCVE-2024-43066qualcomm, inc. · snapdragon +98 moreUse After Free in HLOSMemory corruption while handling file descriptor during listener registration/de-registration.EPSS0.11%MediumCVE-2024-43046qualcomm, inc. · snapdragon +308 moreInformation Exposure in TZ Secure OSThere may be information disclosure during memory re-allocation in TZ Secure OS.EPSS0.11%MediumCVE-2024-53013qualcomm, inc. · snapdragon +60 moreBuffer Copy Without Checking Size of Input in AudioMemory corruption may occur while processing voice call registration with user.EPSS0.09%MediumCVE-2024-53016qualcomm, inc. · snapdragon +34 moreTime-of-check Time-of-use (TOCTOU) Race Condition in Camera DriverMemory corruption while processing I2C settings in Camera driver.EPSS0.08%MediumCVE-2024-53015qualcomm, inc. · snapdragon +90 moreUse After Free in Computer VisionMemory corruption while processing IOCTL command to handle buffers associated with a session.EPSS0.09%HighCVE-2024-53026qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.EPSS0.30%HighCVE-2024-53010qualcomm, inc. · snapdragon +191 moreImproper Access Control in CoreMemory corruption may occur while attaching VM when the HLOS retains access to VM.EPSS0.08%HighCVE-2024-53021qualcomm, inc. · snapdragon +223 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while processing goodbye RTCP packet from network.EPSS0.24%HighCVE-2024-53020qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while decoding the RTP packet with invalid header extension from network.EPSS0.24%HighCVE-2024-45552qualcomm, inc. · snapdragon +145 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.EPSS0.27%MediumCVE-2024-45540qualcomm, inc. · snapdragon +68 moreUse After Free in HLOSMemory corruption while invoking IOCTL map buffer request from userspace.EPSS0.11%MediumCVE-2024-45543qualcomm, inc. · snapdragon +65 moreOut-of-bounds Write in AudioMemory corruption while accessing MSM channel map and mixer functions.EPSS0.11%MediumCVE-2024-45544qualcomm, inc. · snapdragon +44 moreUse After Free in Data Network Stack & ConnectivityMemory corruption while processing IOCTL calls to add route entry in the HW.EPSS0.11%HighCVE-2024-45549qualcomm, inc. · snapdragon +158 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in KERNELInformation disclosure while creating MQ channels.EPSS0.12%MediumCVE-2024-45551qualcomm, inc. · snapdragon +240 moreWeak Authentication in HLOSCryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.EPSS0.11%HighCVE-2024-33069qualcomm, inc. · snapdragon +44 moreUse After Free in WLAN HostTransient DOS when transmission of management frame sent by host is not successful and error status is received in the host.EPSS0.36%HighCVE-2024-33035qualcomm, inc. · snapdragon +89 moreInteger Overflow or Wraparound in DisplayMemory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.EPSS0.13%MediumCVE-2024-33016qualcomm, inc. · snapdragon +331 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Storagememory corruption when an invalid firehose patch command is invoked.EPSS0.15%HighCVE-2024-33058qualcomm, inc. · snapdragon +189 moreInsufficient Granularity of Access Control in CoreMemory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.EPSS0.09%