Qualcomm Snapdragon 888 5G Mobile Platform vulnerabilities, page 4
161 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 888 5G Mobile Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-33011qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.EPSS0.28%HighCVE-2024-33044qualcomm, inc. · snapdragon +208 moreImproper Validation of Array Index in HypervisorMemory corruption while Configuring the SMR/S2CR register in Bypass mode.EPSS0.10%HighCVE-2024-33012qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.EPSS0.28%MediumCVE-2024-33043qualcomm, inc. · snapdragon +197 moreBuffer Over-read in FM HostTransient DOS while handling PS event when Program Service name length offset value is set to 255.EPSS0.09%HighCVE-2024-33010qualcomm, inc. · snapdragon +246 moreUse After Free in WLAN HostTransient DOS while parsing fragments of MBSSID IE from beacon frame.EPSS0.28%MediumCVE-2024-33016qualcomm, inc. · snapdragon +331 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Storagememory corruption when an invalid firehose patch command is invoked.EPSS0.15%HighCVE-2024-33023qualcomm, inc. · snapdragon +151 moreUse After Free in Graphics LinuxMemory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.EPSS0.11%HighCVE-2024-33058qualcomm, inc. · snapdragon +189 moreInsufficient Granularity of Access Control in CoreMemory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.EPSS0.09%HighCVE-2024-33056qualcomm, inc. · snapdragon +323 moreBuffer Over-read in MProcMemory corruption when allocating and accessing an entry in an SMEM partition continuously.EPSS0.10%HighCVE-2024-33014qualcomm, inc. · snapdragon +319 moreBuffer Over-read in WLAN HostTransient DOS while parsing ESP IE from beacon/probe response frame.EPSS0.32%HighCVE-2024-23353qualcomm, inc. · snapdragon +247 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.EPSS0.35%MediumCVE-2024-23357qualcomm, inc. · snapdragon +236 moreNULL Pointer Dereference in HLOSTransient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.EPSS0.09%HighCVE-2024-23356qualcomm, inc. · snapdragon +208 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption during session sign renewal request calls in HLOS.EPSS0.11%HighCVE-2024-23362qualcomm, inc. · snapdragon +230 moreImproper Input Validation in Trusted Execution EnvironmentCryptographic issue while parsing RSA keys in COBR format.EPSS0.12%HighCVE-2024-23368qualcomm, inc. · snapdragon +341 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPCMemory corruption when allocating and accessing an entry in an SMEM partition.EPSS0.10%HighCVE-2024-23372qualcomm, inc. · snapdragon +109 moreInteger Overflow or Wraparound in GraphicsMemory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.EPSS0.13%HighCVE-2024-23352qualcomm, inc. · snapdragon +103 moreLoop with Unreachable Exit Condition (`Infinite Loop`) in Multi Mode Call ProcessorTransient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.EPSS0.35%HighCVE-2024-23359qualcomm, inc. · snapdragon +159 moreBuffer Over-read in Multi Mode Call ProcessorInformation disclosure while decoding Tracking Area Update Accept or Attach Accept message received from network.EPSS0.26%HighCVE-2024-23369qualcomm, inc. · snapdragon +118 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.EPSS0.12%HighCVE-2024-23364qualcomm, inc. · snapdragon +177 moreBuffer Over-read in WLAN FirmwareTransient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).EPSS0.30%