Qualcomm Snapdragon X75 5G Modem Rf System vulnerabilities, page 4
217 vulnerabilities
Known vulnerabilities in Qualcomm Snapdragon X75 5G Modem Rf System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2024-53010qualcomm, inc. · snapdragon +191 moreImproper Access Control in CoreMemory corruption may occur while attaching VM when the HLOS retains access to VM.EPSS0.08%HighCVE-2024-38404qualcomm, inc. · snapdragon +40 moreBuffer Over-read in Multi Mode Call ProcessorTransient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.EPSS0.25%HighCVE-2024-38424qualcomm, inc. · snapdragon +117 moreUse After Free in GPSMemory corruption during GNSS HAL process initialization.EPSS0.10%HighCVE-2024-38405qualcomm, inc. · snapdragon +98 moreBuffer Over-read in WLAN HostTransient DOS while processing the CU information from RNR IE.EPSS0.25%HighCVE-2024-38419qualcomm, inc. · snapdragon +146 moreUse After Free in Automotive GPUMemory corruption while invoking IOCTL calls from the use-space for HGSL memory node.EPSS0.10%HighCVE-2024-38422qualcomm, inc. · snapdragon +263 moreInteger Overflow to Buffer Overflow in AudioMemory corruption while processing voice packet with arbitrary data received from ADSP.EPSS0.10%HighCVE-2024-38401qualcomm, inc. · snapdragon +40 moreUse After Free in Qualcomm IPCMemory corruption while processing concurrent IOCTL calls.EPSS0.13%HighCVE-2024-38397qualcomm, inc. · snapdragon +115 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while parsing probe response and assoc response frame.EPSS0.32%HighCVE-2024-38403qualcomm, inc. · snapdragon +77 moreBuffer Over-read in WLAN FirmwareTransient DOS while parsing BTM ML IE when per STA profile is not included.EPSS0.25%CriticalCVE-2024-38408qualcomm, inc. · snapdragon +229 moreCryptographic Issues in BT ControllerCryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.EPSS0.14%HighCVE-2024-45557qualcomm, inc. · snapdragon +60 moreUse of Out-of-range Pointer Offset in Trust Management EngineMemory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.EPSS0.11%HighCVE-2024-45549qualcomm, inc. · snapdragon +158 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in KERNELInformation disclosure while creating MQ channels.EPSS0.12%MediumCVE-2024-45551qualcomm, inc. · snapdragon +240 moreWeak Authentication in HLOSCryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.EPSS0.11%CriticalCVE-2024-49846qualcomm, inc. · snapdragon +31 moreBuffer Over-read in Multi-Mode Call ProcessorMemory corruption while decoding of OTA messages from T3448 IE.EPSS0.29%MediumCVE-2024-49848qualcomm, inc. · snapdragon +145 moreUse After Free in DSP ServiceMemory corruption while processing multiple IOCTL calls from HLOS to DSP.EPSS0.14%HighCVE-2024-33026qualcomm, inc. · snapdragon +164 moreBuffer Over-read in WLAN HostTransient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.EPSS0.28%HighCVE-2024-33011qualcomm, inc. · snapdragon +247 moreBuffer Over-read in WLAN HostTransient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.EPSS0.28%HighCVE-2024-33068qualcomm, inc. · snapdragon +121 moreUse After Free in WLAN Host CommunicationTransient DOS while parsing fragments of MBSSID IE from beacon frame.EPSS0.25%HighCVE-2024-33044qualcomm, inc. · snapdragon +208 moreImproper Validation of Array Index in HypervisorMemory corruption while Configuring the SMR/S2CR register in Bypass mode.EPSS0.10%HighCVE-2024-33050qualcomm, inc. · snapdragon +252 moreBuffer Over-read in WLAN Host CommunicationTransient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.EPSS0.30%