140 results (0.010 seconds)

CVSS: 7.8EPSS: 0%CPEs: 26EXPL: 0

CVE-2024-49837 – Improper Validation of Array Index in Automotive OS Platform QNX

https://notcve.org/view.php?id=CVE-2024-49837

03 Feb 2025 — Memory corruption while reading CPU state data during guest VM suspend. • https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html • CWE-129: Improper Validation of Array Index •

CVSS: 6.1EPSS: 0%CPEs: 29EXPL: 0

CVE-2024-38414 – Buffer Over-read in Computer Vision

https://notcve.org/view.php?id=CVE-2024-38414

03 Feb 2025 — Information disclosure while processing information on firmware image during core initialization. • https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html • CWE-126: Buffer Over-read •

CVSS: 6.7EPSS: 0%CPEs: 58EXPL: 0

CVE-2024-33053 – Use After Free in Video

https://notcve.org/view.php?id=CVE-2024-33053

02 Dec 2024 — Memory corruption when multiple threads try to unregister the CVP buffer at the same time. Corrupción de memoria cuando varios subprocesos intentan anular el registro del búfer CVP al mismo tiempo. • https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html • CWE-416: Use After Free •

CVSS: 6.7EPSS: 0%CPEs: 24EXPL: 0

CVE-2024-33039 – Untrusted Pointer Dereference in Audio

https://notcve.org/view.php?id=CVE-2024-33039

02 Dec 2024 — Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service. Corrupción de memoria cuando el cliente PAL llama a las API del servicio PAL pasando un valor aleatorio como identificador y el servicio no valida el identificador. • https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html • CWE-822: Untrusted Pointer Dereference •

CVSS: 6.1EPSS: 0%CPEs: 53EXPL: 0

CVE-2024-33037 – Buffer Over-read in Neural Processing Unit

https://notcve.org/view.php?id=CVE-2024-33037

02 Dec 2024 — Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware. La divulgación de información ya que el firmware de la NPU puede enviar un mensaje IPC no válido al controlador de la NPU ya que el controlador no valida el mensaje IPC recibido del firmware. • https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html • CWE-126: Buffer Over-read •

CVSS: 6.7EPSS: 0%CPEs: 54EXPL: 0

CVE-2024-33036 – Use of Out-of-range Pointer Offset in Camera Driver

https://notcve.org/view.php?id=CVE-2024-33036

02 Dec 2024 — Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access. Corrupción de memoria al analizar paquetes de sensores en el controlador de la cámara, se utiliza una variable de espacio de usuario al asignar memoria en el kernel y analizar, lo que puede generar una asignación enorme o un acceso a memoria no válido. • https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html • CWE-823: Use of Out-of-range Pointer Offset •

CVSS: 7.8EPSS: 0%CPEs: 82EXPL: 0

CVE-2024-38421 – Use After Free in Graphics Linux

https://notcve.org/view.php?id=CVE-2024-38421

04 Nov 2024 — Memory corruption while processing GPU commands. • https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html • CWE-416: Use After Free •

CVSS: 7.5EPSS: 0%CPEs: 103EXPL: 0

CVE-2024-38405 – Buffer Over-read in WLAN Host

https://notcve.org/view.php?id=CVE-2024-38405

04 Nov 2024 — Transient DOS while processing the CU information from RNR IE. • https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html • CWE-126: Buffer Over-read •

CVSS: 8.4EPSS: 0%CPEs: 42EXPL: 0

CVE-2024-38399 – Use After Free in Graphics

https://notcve.org/view.php?id=CVE-2024-38399

07 Oct 2024 — Memory corruption while processing user packets to generate page faults. • https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html • CWE-416: Use After Free •

CVSS: 7.8EPSS: 0%CPEs: 44EXPL: 0

CVE-2024-33069 – Use After Free in WLAN Host

https://notcve.org/view.php?id=CVE-2024-33069

07 Oct 2024 — Transient DOS when transmission of management frame sent by host is not successful and error status is received in the host. • https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html • CWE-416: Use After Free •