Qualcomm Snapdragon 8 Gen 1 Mobile Platform vulnerabilities, page 4
197 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon 8 Gen 1 Mobile Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-53019qualcomm, inc. · snapdragon +79 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.EPSS0.24%HighCVE-2024-53020qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while decoding the RTP packet with invalid header extension from network.EPSS0.24%HighCVE-2024-38415qualcomm, inc. · snapdragon +172 moreUse After Free in Computer VisionMemory corruption while handling session errors from firmware.EPSS0.10%HighCVE-2024-38424qualcomm, inc. · snapdragon +117 moreUse After Free in GPSMemory corruption during GNSS HAL process initialization.EPSS0.10%HighCVE-2024-38419qualcomm, inc. · snapdragon +146 moreUse After Free in Automotive GPUMemory corruption while invoking IOCTL calls from the use-space for HGSL memory node.EPSS0.10%MediumCVE-2024-38425qualcomm, inc. · snapdragon +22 moreImproper Authorization in PerformanceInformation disclosure while sending implicit broadcast containing APP launch information.EPSS0.10%HighCVE-2024-38399qualcomm, inc. · snapdragon +40 moreUse After Free in GraphicsMemory corruption while processing user packets to generate page faults.EPSS0.14%CriticalCVE-2024-38408qualcomm, inc. · snapdragon +229 moreCryptographic Issues in BT ControllerCryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.EPSS0.14%HighCVE-2024-45552qualcomm, inc. · snapdragon +145 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.EPSS0.27%MediumCVE-2024-45540qualcomm, inc. · snapdragon +68 moreUse After Free in HLOSMemory corruption while invoking IOCTL map buffer request from userspace.EPSS0.11%HighCVE-2024-45557qualcomm, inc. · snapdragon +60 moreUse of Out-of-range Pointer Offset in Trust Management EngineMemory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.EPSS0.11%HighCVE-2024-45549qualcomm, inc. · snapdragon +158 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in KERNELInformation disclosure while creating MQ channels.EPSS0.12%MediumCVE-2024-45551qualcomm, inc. · snapdragon +240 moreWeak Authentication in HLOSCryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.EPSS0.11%MediumCVE-2024-49848qualcomm, inc. · snapdragon +145 moreUse After Free in DSP ServiceMemory corruption while processing multiple IOCTL calls from HLOS to DSP.EPSS0.14%HighCVE-2024-33011qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.EPSS0.28%HighCVE-2024-33035qualcomm, inc. · snapdragon +89 moreInteger Overflow or Wraparound in DisplayMemory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.EPSS0.13%HighCVE-2024-33044qualcomm, inc. · snapdragon +208 moreImproper Validation of Array Index in HypervisorMemory corruption while Configuring the SMR/S2CR register in Bypass mode.EPSS0.10%HighCVE-2024-33034qualcomm, inc. · snapdragon +102 moreUse After Free in Graphics LinuxMemory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.EPSS0.10%MediumCVE-2024-33030qualcomm, inc. · snapdragon +22 moreBuffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in PerformanceMemory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.EPSS0.10%HighCVE-2024-33012qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.EPSS0.28%