262 results (0.001 seconds)

CVSS: 6.7EPSS: 0%CPEs: 58EXPL: 0

CVE-2024-33053 – Use After Free in Video

https://notcve.org/view.php?id=CVE-2024-33053

02 Dec 2024 — Memory corruption when multiple threads try to unregister the CVP buffer at the same time. Corrupción de memoria cuando varios subprocesos intentan anular el registro del búfer CVP al mismo tiempo. • https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html • CWE-416: Use After Free •

CVSS: 6.1EPSS: 0%CPEs: 53EXPL: 0

CVE-2024-33037 – Buffer Over-read in Neural Processing Unit

https://notcve.org/view.php?id=CVE-2024-33037

02 Dec 2024 — Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware. La divulgación de información ya que el firmware de la NPU puede enviar un mensaje IPC no válido al controlador de la NPU ya que el controlador no valida el mensaje IPC recibido del firmware. • https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html • CWE-126: Buffer Over-read •

CVSS: 6.7EPSS: 0%CPEs: 54EXPL: 0

CVE-2024-33036 – Use of Out-of-range Pointer Offset in Camera Driver

https://notcve.org/view.php?id=CVE-2024-33036

02 Dec 2024 — Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access. Corrupción de memoria al analizar paquetes de sensores en el controlador de la cámara, se utiliza una variable de espacio de usuario al asignar memoria en el kernel y analizar, lo que puede generar una asignación enorme o un acceso a memoria no válido. • https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html • CWE-823: Use of Out-of-range Pointer Offset •

CVSS: 7.8EPSS: 0%CPEs: 686EXPL: 0

CVE-2024-23368 – Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC

https://notcve.org/view.php?id=CVE-2024-23368

01 Jul 2024 — Memory corruption when allocating and accessing an entry in an SMEM partition. Corrupción de la memoria al asignar y acceder a una entrada en una partición SMEM. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •

CVSS: 7.8EPSS: 0%CPEs: 138EXPL: 0

CVE-2024-21482 – Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader

https://notcve.org/view.php?id=CVE-2024-21482

01 Jul 2024 — Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image. Corrupción de la memoria durante el proceso de arranque seguro, cuando se utiliza el comando `bootm`, omite la autenticación de la imagen kernel/rootfs. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.8EPSS: 0%CPEs: 128EXPL: 0

CVE-2024-21466 – Integer Underflow (Wrap or Wraparound) in WLAN Host Communication

https://notcve.org/view.php?id=CVE-2024-21466

01 Jul 2024 — Information disclosure while parsing sub-IE length during new IE generation. Divulgación de información al analizar la longitud sub-IE durante la nueva generación de IE. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-191: Integer Underflow (Wrap or Wraparound) •

CVSS: 7.1EPSS: 0%CPEs: 622EXPL: 0

CVE-2024-21462 – Buffer Over-read in TZ Secure OS

https://notcve.org/view.php?id=CVE-2024-21462

01 Jul 2024 — Transient DOS while loading the TA ELF file. DOS transitorio mientras se carga el archivo TA ELF. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •

CVSS: 8.4EPSS: 0%CPEs: 626EXPL: 0

CVE-2024-21461 – Double Free in HLOS

https://notcve.org/view.php?id=CVE-2024-21461

01 Jul 2024 — Memory corruption while performing finish HMAC operation when context is freed by keymaster. Corrupción de la memoria al realizar la operación de finalización de HMAC cuando Keymaster libera el contexto. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-415: Double Free •

CVSS: 7.8EPSS: 0%CPEs: 222EXPL: 0

CVE-2024-21458 – Buffer Over-read in WLAN HOST

https://notcve.org/view.php?id=CVE-2024-21458

01 Jul 2024 — Information disclosure while handling SA query action frame. Divulgación de información durante el manejo del frame de acción de consulta SA. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •

CVSS: 7.8EPSS: 0%CPEs: 222EXPL: 0

CVE-2024-21457 – Buffer Over-read in WLAN Host Communication

https://notcve.org/view.php?id=CVE-2024-21457

01 Jul 2024 — INformation disclosure while handling Multi-link IE in beacon frame. Divulgación de información mientras se maneja IE de enlace múltiple en un frame de baliza. • https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html • CWE-125: Out-of-bounds Read CWE-126: Buffer Over-read •