Vulnerabilities in Qualcomm, Inc.

2,976 results
Vexday analysis

Com 2.934 CVEs catalogadas, a Qualcomm apresenta um volume expressivo de vulnerabilidades, reflexo da amplitude de seu portfólio de chipsets e firmware embarcado. A taxa de exploração ativa — 12 entradas no catálogo KEV da CISA, ou 0,41% do total — está em linha com a média geral do catálogo, indicando que o risco de exploração confirmada não foge do padrão da indústria, embora 94 falhas de severidade crítica representem uma superfície de ataque relevante para equipes de segurança que dependem de componentes Qualcomm em ambientes móveis, automotivos ou de IoT. A CVE mais perigosa atualmente em exploração ativa, CVE-2020-11261, apresenta EPSS de 0,0177, sugerindo probabilidade de exploração adicional relativamente baixa no curto prazo, mas sua presença no KEV exige atenção imediata em qualquer inventário de ativos afetados. O surgimento de 49 novas CVEs nos últimos 90 dias e a disponibilidade de PoCs públicas para 3 vulnerabilidades reforçam a necessidade de ciclos contínuos de atualização de firmware e monitoramento ativo de patches liberados pelo fabricante.

CVE-2020-11252HIGHTrustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Snapdragon Auto, SnapdrEPSS 0.2%CVE-2019-10556—Missing length check before copying the data from kernel space to userspace through the copy function can lead to buffer overflow in some caEPSS 0.2%CVE-2018-3587—In a firmware memory dump feature in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android)EPSS 0.2%CVE-2019-10626—Payload size is not validated before reading memory that may cause issue of accessing invalid pointer or some garbage data in Snapdragon AutEPSS 0.2%CVE-2018-11276—In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, double free of memory allocationEPSS 0.2%CVE-2019-14092—System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon MoEPSS 0.2%CVE-2020-3620—u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to EPSS 0.2%CVE-2019-10483—Side channel issue in QTEE due to usage of non-time-constant comparison function such as memcmp or strcmp in Snapdragon Auto, Snapdragon ComEPSS 0.2%CVE-2017-15855—In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kernel before security pEPSS 0.2%CVE-2019-14067—Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue. iEPSS 0.2%CVE-2019-10523—Target specific data is being sent to remote server and leads to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon ConEPSS 0.2%CVE-2018-11301—In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on buffer length wEPSS 0.2%CVE-2019-10625—Out of bound access in diag services when DCI command buffer reallocation is not done properly with required capacity in Snapdragon Auto, SnEPSS 0.2%CVE-2018-3564—In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before securityEPSS 0.2%CVE-2022-33289MEDIUMImproper validation of array index in ModemEPSS 0.2%CVE-2020-11132—u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon EPSS 0.2%CVE-2017-8276—Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDEPSS 0.2%CVE-2019-14043—Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon ComputeEPSS 0.2%CVE-2019-2275—While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations aEPSS 0.2%CVE-2019-14038—Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in SnaEPSS 0.2%