Vulnerabilidades en Qualcomm, Inc.

2976 resultados
Análisis Vexday

Com 2.934 CVEs catalogadas, a Qualcomm apresenta um volume expressivo de vulnerabilidades, reflexo da amplitude de seu portfólio de chipsets e firmware embarcado. A taxa de exploração ativa — 12 entradas no catálogo KEV da CISA, ou 0,41% do total — está em linha com a média geral do catálogo, indicando que o risco de exploração confirmada não foge do padrão da indústria, embora 94 falhas de severidade crítica representem uma superfície de ataque relevante para equipes de segurança que dependem de componentes Qualcomm em ambientes móveis, automotivos ou de IoT. A CVE mais perigosa atualmente em exploração ativa, CVE-2020-11261, apresenta EPSS de 0,0177, sugerindo probabilidade de exploração adicional relativamente baixa no curto prazo, mas sua presença no KEV exige atenção imediata em qualquer inventário de ativos afetados. O surgimento de 49 novas CVEs nos últimos 90 dias e a disponibilidade de PoCs públicas para 3 vulnerabilidades reforçam a necessidade de ciclos contínuos de atualização de firmware e monitoramento ativo de patches liberados pelo fabricante.

CVE-2019-10517—Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon ConsEPSS 0.2%CVE-2019-14078—Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. in Snapdragon Auto, SEPSS 0.2%CVE-2020-11121—u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, SnaEPSS 0.2%CVE-2019-14077—Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Snapdragon Auto, SnapdEPSS 0.2%CVE-2019-2266—Possible double free issue in kernel while handling the camera sensor and its sub modules power sequence in Snapdragon Auto, Snapdragon ConsEPSS 0.2%CVE-2019-10564—Possible OOB issue in EEPROM due to lack of check while accessing memory map array at the time of reading operation in Snapdragon Auto, SnapEPSS 0.2%CVE-2020-11131—u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in SnaEPSS 0.2%CVE-2019-10620—Kernel memory error in debug module due to improper check of user data length before copying into memory in Snapdragon Auto, Snapdragon ConsEPSS 0.2%CVE-2019-10544—Improper length check on source buffer to handle userspace data received can lead to out-of-bound access in diag handlers in Snapdragon AutoEPSS 0.2%CVE-2019-10518—Use after free of a pointer in iWLAN scenario during netmgr state transition to CONNECT in Snapdragon Auto, Snapdragon Compute, Snapdragon CEPSS 0.2%CVE-2021-35074HIGHPossible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, SEPSS 0.2%CVE-2019-10555—Buffer overflow can occur due to usage of wrong datatype and missing length check before copying into buffer in Snapdragon Auto, Snapdragon EPSS 0.2%CVE-2019-2297—Buffer overflow can occur while processing non-standard NAN message from user space. in Snapdragon Auto, Snapdragon Consumer Electronics ConEPSS 0.2%CVE-2021-35075HIGHPossible null pointer dereference due to lack of WDOG structure validation during registration in Snapdragon Auto, Snapdragon Connectivity, EPSS 0.2%CVE-2019-10498—Buffer overflow scenario if the client sends more than 5 io_vec requests to the server in Snapdragon Auto, Snapdragon Compute, Snapdragon CoEPSS 0.2%CVE-2019-14076—Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, SnapdEPSS 0.2%CVE-2017-9692—When an atomic commit is issued on a writeback panel with a NULL output_layer parameter in Android for MSM, Firefox OS for MSM, and QRD AndrEPSS 0.2%CVE-2019-10502—Possible stack overflow when an index equal to io buffer size is accessed in camera module in Snapdragon Compute, Snapdragon Consumer IOT, SEPSS 0.2%CVE-2019-10624—While handling the vendor command there is an integer truncation issue that could yield a buffer overflow due to int data type copied to u8 EPSS 0.2%CVE-2019-10566—Buffer overflow can occur in wlan module if supported rates or extended rates element length is greater than max rate set length in SnapdragEPSS 0.2%