CVSS: 5.5EPSS: 0%CPEs: 18EXPL: 0CVE-2024-53025 – Integer Overflow or Wraparound in BT Controller
https://notcve.org/view.php?id=CVE-2024-53025
03 Mar 2025 — Transient DOS can occur while processing UCI command. • https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 52EXPL: 0CVE-2024-49843 – Improper Validation of Array Index in Graphics_Linux
https://notcve.org/view.php?id=CVE-2024-49843
03 Feb 2025 — Memory corruption while processing IOCTL from user space to handle GPU AHB bus error. • https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html • CWE-129: Improper Validation of Array Index •
CVSS: 7.8EPSS: 0%CPEs: 34EXPL: 0CVE-2024-45582 – Improper Validation of Array Index in Camera Driver
https://notcve.org/view.php?id=CVE-2024-45582
03 Feb 2025 — Memory corruption while validating number of devices in Camera kernel . • https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html • CWE-129: Improper Validation of Array Index •
CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 0CVE-2024-38413 – Improper Input Validation in Computer Vision
https://notcve.org/view.php?id=CVE-2024-38413
03 Feb 2025 — Memory corruption while processing frame packets. • https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 0CVE-2024-38412 – Use After Free in Computer Vision
https://notcve.org/view.php?id=CVE-2024-38412
03 Feb 2025 — Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors. • https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 18EXPL: 1CVE-2024-38411 – Use After Free in Computer Vision
https://notcve.org/view.php?id=CVE-2024-38411
03 Feb 2025 — Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls. In the function msm_cvp_map_buf_wncc (reachable from the EVA_KMD_REGISTER_BUFFER ioctl), after cbuf is created and fully initialized, it is unconditionally added to the linked list inst->cvpwnccbufs.list. msm_cvp_map_buf_wncc then tries to add an entry for the buffer to inst->cvpwnccbufs_table. This can fail if there are already 2400 entries in the table, in which case it is necessary to unwind all initialization... • https://packetstorm.news/files/id/189612 • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 82EXPL: 0CVE-2024-38421 – Use After Free in Graphics Linux
https://notcve.org/view.php?id=CVE-2024-38421
04 Nov 2024 — Memory corruption while processing GPU commands. • https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html • CWE-416: Use After Free •
CVSS: 7.5EPSS: 0%CPEs: 103EXPL: 0CVE-2024-38405 – Buffer Over-read in WLAN Host
https://notcve.org/view.php?id=CVE-2024-38405
04 Nov 2024 — Transient DOS while processing the CU information from RNR IE. • https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html • CWE-126: Buffer Over-read •
CVSS: 7.8EPSS: 0%CPEs: 28EXPL: 0CVE-2024-33033 – Use After Free in ComputerVision
https://notcve.org/view.php?id=CVE-2024-33033
04 Nov 2024 — Memory corruption while processing IOCTL calls to unmap the buffers. • https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html • CWE-416: Use After Free •
CVSS: 6.7EPSS: 0%CPEs: 40EXPL: 0CVE-2024-23377 – Use of Out-of-range Pointer Offset in ComputerVision
https://notcve.org/view.php?id=CVE-2024-23377
04 Nov 2024 — Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver. • https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html • CWE-823: Use of Out-of-range Pointer Offset •