Qualcomm Snapdragon 8 Gen 1 Mobile Platform vulnerabilities, page 5

197 vulnerabilities

Known vulnerabilities in Qualcomm Snapdragon 8 Gen 1 Mobile Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5MediumCVE-2024-33043qualcomm, inc. · snapdragon +197 moreBuffer Over-read in FM HostTransient DOS while handling PS event when Program Service name length offset value is set to 255.EPSS0.09%7.5HighCVE-2024-33010qualcomm, inc. · snapdragon +246 moreUse After Free in WLAN HostTransient DOS while parsing fragments of MBSSID IE from beacon frame.EPSS0.28%6.7MediumCVE-2024-33036qualcomm, inc. · snapdragon +51 moreUse of Out-of-range Pointer Offset in Camera DriverMemory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.EPSS0.10%6.8MediumCVE-2024-33016qualcomm, inc. · snapdragon +331 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Storagememory corruption when an invalid firehose patch command is invoked.EPSS0.15%8.4HighCVE-2024-33023qualcomm, inc. · snapdragon +151 moreUse After Free in Graphics LinuxMemory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.EPSS0.11%6.7MediumCVE-2024-33032qualcomm, inc. · snapdragon +67 moreImproper Validation of Array Index in Camera_LinuxMemory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.EPSS0.10%7.5HighCVE-2024-33058qualcomm, inc. · snapdragon +189 moreInsufficient Granularity of Access Control in CoreMemory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.EPSS0.09%8.4HighCVE-2024-33056qualcomm, inc. · snapdragon +323 moreBuffer Over-read in MProcMemory corruption when allocating and accessing an entry in an SMEM partition continuously.EPSS0.10%7.5HighCVE-2024-33014qualcomm, inc. · snapdragon +319 moreBuffer Over-read in WLAN HostTransient DOS while parsing ESP IE from beacon/probe response frame.EPSS0.32%7HighCVE-2024-33040qualcomm, inc. · snapdragon +29 moreUse After Free in Camera DriverMemory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.EPSS0.09%7.5HighCVE-2024-33015qualcomm, inc. · snapdragon +192 moreBuffer Over-read in WLAN HostTransient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.EPSS0.28%8.4HighCVE-2024-23381qualcomm, inc. · snapdragon +72 moreUse After Free in Graphics LinuxMemory corruption when memory mapped in a VBO is not unmapped by the GPU SMMU.EPSS0.11%8.4HighCVE-2024-23382qualcomm, inc. · snapdragon +102 moreUse After Free in Graphics LinuxMemory corruption while processing graphics kernel driver request to create DMA fence.EPSS0.12%7.5HighCVE-2024-23353qualcomm, inc. · snapdragon +247 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.EPSS0.35%6.7MediumCVE-2024-23376qualcomm, inc. · snapdragon +21 moreUse After Free in ComputerVisionMemory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.EPSS0.11%6.2MediumCVE-2024-23357qualcomm, inc. · snapdragon +236 moreNULL Pointer Dereference in HLOSTransient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.EPSS0.09%7.8HighCVE-2024-23356qualcomm, inc. · snapdragon +208 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption during session sign renewal request calls in HLOS.EPSS0.11%6.7MediumCVE-2024-23379qualcomm, inc. · snapdragon +34 moreDouble Free in DSP ServicesMemory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.EPSS0.11%7.1HighCVE-2024-23362qualcomm, inc. · snapdragon +230 moreImproper Input Validation in Trusted Execution EnvironmentCryptographic issue while parsing RSA keys in COBR format.EPSS0.12%7.8HighCVE-2024-23368qualcomm, inc. · snapdragon +341 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPCMemory corruption when allocating and accessing an entry in an SMEM partition.EPSS0.10%