Qualcomm Snapdragon X65 5G Modem Rf System vulnerabilities, page 4
222 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon X65 5G Modem Rf System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-21461qualcomm, inc. · snapdragon +311 moreDouble Free in HLOSMemory corruption while performing finish HMAC operation when context is freed by keymaster.EPSS0.10%HighCVE-2024-21469qualcomm, inc. · snapdragon +222 morePermissions, Privileges, and Access Control issues in TZ Secure OSMemory corruption when an invoke call and a TEE call are bound for the same trusted application.EPSS0.10%HighCVE-2024-21457qualcomm, inc. · snapdragon +111 moreBuffer Over-read in WLAN Host CommunicationINformation disclosure while handling Multi-link IE in beacon frame.EPSS0.21%HighCVE-2024-21459qualcomm, inc. · snapdragon +175 moreBuffer Over-read in WLAN HOSTInformation disclosure while handling beacon or probe response frame in STA.EPSS0.26%HighCVE-2024-21462qualcomm, inc. · snapdragon +309 moreBuffer Over-read in TZ Secure OSTransient DOS while loading the TA ELF file.EPSS0.09%HighCVE-2024-21481qualcomm, inc. · snapdragon +165 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in HypervisorMemory corruption when preparing a shared memory notification for a memparcel in Resource Manager.EPSS0.11%HighCVE-2024-21467qualcomm, inc. · snapdragon +129 moreBuffer Over-read in WLAN Host CommunicationInformation disclosure while handling beacon probe frame during scan entry generation in client side.EPSS0.26%HighCVE-2024-43065qualcomm, inc. · snapdragon +164 moreExposed Dangerous Method or Function in HLOSCryptographic issues while generating an asymmetric key pair for RKP use cases.EPSS0.11%MediumCVE-2024-43046qualcomm, inc. · snapdragon +308 moreInformation Exposure in TZ Secure OSThere may be information disclosure during memory re-allocation in TZ Secure OS.EPSS0.11%HighCVE-2024-53010qualcomm, inc. · snapdragon +191 moreImproper Access Control in CoreMemory corruption may occur while attaching VM when the HLOS retains access to VM.EPSS0.08%HighCVE-2024-38415qualcomm, inc. · snapdragon +172 moreUse After Free in Computer VisionMemory corruption while handling session errors from firmware.EPSS0.10%HighCVE-2024-38423qualcomm, inc. · snapdragon +203 moreBuffer Copy Without Checking Size of Input in Graphics LinuxMemory corruption while processing GPU page table switch.EPSS0.10%HighCVE-2024-38397qualcomm, inc. · snapdragon +115 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while parsing probe response and assoc response frame.EPSS0.32%CriticalCVE-2024-38408qualcomm, inc. · snapdragon +229 moreCryptographic Issues in BT ControllerCryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.EPSS0.14%MediumCVE-2024-45556qualcomm, inc. · snapdragon +60 moreImproper Access Control for Register Interface in TZ FirmwareCryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.EPSS0.09%HighCVE-2024-45549qualcomm, inc. · snapdragon +158 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in KERNELInformation disclosure while creating MQ channels.EPSS0.12%MediumCVE-2024-45551qualcomm, inc. · snapdragon +240 moreWeak Authentication in HLOSCryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.EPSS0.11%HighCVE-2024-49841qualcomm, inc. · snapdragon +170 moreDetection of Error Condition Without Action in HypervisorMemory corruption during memory assignment to headless peripheral VM due to incorrect error code handling.EPSS0.11%HighCVE-2024-33026qualcomm, inc. · snapdragon +164 moreBuffer Over-read in WLAN HostTransient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.EPSS0.28%HighCVE-2024-33011qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.EPSS0.28%