Qualcomm Snapdragon X50 5G Modem Rf System vulnerabilities, page 3

127 vulnerabilities

Known vulnerabilities in Qualcomm Snapdragon X50 5G Modem Rf System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.2HighCVE-2024-53026qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.EPSS0.30%7.8HighCVE-2024-53010qualcomm, inc. · snapdragon +191 moreImproper Access Control in CoreMemory corruption may occur while attaching VM when the HLOS retains access to VM.EPSS0.08%8.2HighCVE-2024-53021qualcomm, inc. · snapdragon +223 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while processing goodbye RTCP packet from network.EPSS0.24%8.2HighCVE-2024-53020qualcomm, inc. · snapdragon +232 moreBuffer Over-read in Data Network Stack & ConnectivityInformation disclosure may occur while decoding the RTP packet with invalid header extension from network.EPSS0.24%7.8HighCVE-2024-38422qualcomm, inc. · snapdragon +263 moreInteger Overflow to Buffer Overflow in AudioMemory corruption while processing voice packet with arbitrary data received from ADSP.EPSS0.10%7.8HighCVE-2024-38423qualcomm, inc. · snapdragon +203 moreBuffer Copy Without Checking Size of Input in Graphics LinuxMemory corruption while processing GPU page table switch.EPSS0.10%6.2MediumCVE-2024-45551qualcomm, inc. · snapdragon +240 moreWeak Authentication in HLOSCryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.EPSS0.11%8.4HighCVE-2024-33044qualcomm, inc. · snapdragon +208 moreImproper Validation of Array Index in HypervisorMemory corruption while Configuring the SMR/S2CR register in Bypass mode.EPSS0.10%8.4HighCVE-2024-33027qualcomm, inc. · snapdragon +90 moreImproper Access Control in Graphics LinuxMemory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.EPSS0.10%8.4HighCVE-2024-33060qualcomm, inc. · snapdragon +243 moreUse After Free in DSP ServiceMemory corruption when two threads try to map and unmap a single node simultaneously.EPSS0.17%5.5MediumCVE-2024-33043qualcomm, inc. · snapdragon +197 moreBuffer Over-read in FM HostTransient DOS while handling PS event when Program Service name length offset value is set to 255.EPSS0.09%7.8HighCVE-2024-33042qualcomm, inc. · snapdragon +196 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostMemory corruption when Alternative Frequency offset value is set to 255.EPSS0.13%6.8MediumCVE-2024-33016qualcomm, inc. · snapdragon +331 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Storagememory corruption when an invalid firehose patch command is invoked.EPSS0.15%7.5HighCVE-2024-33058qualcomm, inc. · snapdragon +189 moreInsufficient Granularity of Access Control in CoreMemory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.EPSS0.09%8.4HighCVE-2024-33056qualcomm, inc. · snapdragon +323 moreBuffer Over-read in MProcMemory corruption when allocating and accessing an entry in an SMEM partition continuously.EPSS0.10%7.5HighCVE-2024-33014qualcomm, inc. · snapdragon +319 moreBuffer Over-read in WLAN HostTransient DOS while parsing ESP IE from beacon/probe response frame.EPSS0.32%7.8HighCVE-2024-33052qualcomm, inc. · snapdragon +197 moreBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM HostMemory corruption when user provides data for FM HCI command control operations.EPSS0.13%7.5HighCVE-2024-23353qualcomm, inc. · snapdragon +247 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.EPSS0.35%6.2MediumCVE-2024-23357qualcomm, inc. · snapdragon +236 moreNULL Pointer Dereference in HLOSTransient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.EPSS0.09%7.8HighCVE-2024-23356qualcomm, inc. · snapdragon +208 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HLOSMemory corruption during session sign renewal request calls in HLOS.EPSS0.11%