Vulnerabilidades em Qualcomm, Inc.

2.976 resultados
Análise Vexday

Com 2.934 CVEs catalogadas, a Qualcomm apresenta um volume expressivo de vulnerabilidades, reflexo da amplitude de seu portfólio de chipsets e firmware embarcado. A taxa de exploração ativa — 12 entradas no catálogo KEV da CISA, ou 0,41% do total — está em linha com a média geral do catálogo, indicando que o risco de exploração confirmada não foge do padrão da indústria, embora 94 falhas de severidade crítica representem uma superfície de ataque relevante para equipes de segurança que dependem de componentes Qualcomm em ambientes móveis, automotivos ou de IoT. A CVE mais perigosa atualmente em exploração ativa, CVE-2020-11261, apresenta EPSS de 0,0177, sugerindo probabilidade de exploração adicional relativamente baixa no curto prazo, mas sua presença no KEV exige atenção imediata em qualquer inventário de ativos afetados. O surgimento de 49 novas CVEs nos últimos 90 dias e a disponibilidade de PoCs públicas para 3 vulnerabilidades reforçam a necessidade de ciclos contínuos de atualização de firmware e monitoramento ativo de patches liberados pelo fabricante.

CVE-2026-21381HIGHBuffer Over-read in WLAN FirmwareEPSS 0.1%CVE-2021-30267HIGHPossible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Snapdragon Compute, SnEPSS 0.1%CVE-2021-30263MEDIUMPossible race condition can occur due to lack of synchronization mechanism when On-Device Logging node open twice concurrently in SnapdragonEPSS 0.1%CVE-2021-35095HIGHImproper serialization of message queue client registration can lead to race condition allowing multiple gunyah message clients to register EPSS 0.1%CVE-2017-18169—User process can perform the kernel DOS in ashmem when doing cache maintenance operation in all Android releases(Android for MSM, Firefox OSEPSS 0.1%CVE-2017-15861—In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function wma_roam_synch_event_handler, vdev_id is recEPSS 0.1%CVE-2024-21464HIGHBuffer Copy Without Checking Size of Input in Data Network Stack & ConnectivityEPSS 0.1%CVE-2021-1930MEDIUMPossible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectEPSS 0.1%CVE-2017-14873—In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the pp_pgc_get_config() gEPSS 0.1%CVE-2021-30285CRITICALImproper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon CEPSS 0.1%CVE-2020-11294MEDIUMOut of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon Compute, SEPSS 0.1%CVE-2021-35113HIGHPossible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon EPSS 0.1%CVE-2017-15862—In all Qualcomm products with Android releases from CAF using the Linux kernel, in wma_unified_link_radio_stats_event_handler(), the number EPSS 0.1%CVE-2019-14070—Possible use after free issue in pcm volume controls due to race condition exist in private data used in mixer controls in Snapdragon Auto, EPSS 0.1%CVE-2021-30318HIGHImproper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, SnapdragonEPSS 0.1%CVE-2022-25743HIGHMemory corruption in graphics due to use-after-free while importing graphics buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon ConneEPSS 0.1%CVE-2021-1928MEDIUMBuffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon ConsumEPSS 0.1%CVE-2020-11295MEDIUMUse after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, SnapdragEPSS 0.1%CVE-2021-30262HIGHImproper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory in Snapdragon Auto, EPSS 0.1%CVE-2020-11161—Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon AEPSS 0.1%