Vulnerabilidades em Qualcomm, Inc.

2.991 resultados
Análise Vexday

Com 2.934 CVEs catalogadas, a Qualcomm apresenta um volume expressivo de vulnerabilidades, reflexo da amplitude de seu portfólio de chipsets e firmware embarcado. A taxa de exploração ativa — 12 entradas no catálogo KEV da CISA, ou 0,41% do total — está em linha com a média geral do catálogo, indicando que o risco de exploração confirmada não foge do padrão da indústria, embora 94 falhas de severidade crítica representem uma superfície de ataque relevante para equipes de segurança que dependem de componentes Qualcomm em ambientes móveis, automotivos ou de IoT. A CVE mais perigosa atualmente em exploração ativa, CVE-2020-11261, apresenta EPSS de 0,0177, sugerindo probabilidade de exploração adicional relativamente baixa no curto prazo, mas sua presença no KEV exige atenção imediata em qualquer inventário de ativos afetados. O surgimento de 49 novas CVEs nos últimos 90 dias e a disponibilidade de PoCs públicas para 3 vulnerabilidades reforçam a necessidade de ciclos contínuos de atualização de firmware e monitoramento ativo de patches liberados pelo fabricante.

CVE-2019-14098—Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon ComEPSS 0.9%CVE-2020-3692—u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parametersEPSS 0.9%CVE-2020-11196—u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, SnapdEPSS 0.9%CVE-2019-10531—Incorrect reading of system image resulting in buffer overflow when size of system image is increased in Snapdragon Auto, Snapdragon Mobile,EPSS 0.9%CVE-2019-14045—Possible buffer overflow while processing clientlog and serverlog due to lack of validation of data received in logs in Snapdragon Auto, SnaEPSS 0.9%CVE-2019-10546—Buffer overflow can occur in WLAN firmware while parsing beacon/probe_response frames during roaming in Snapdragon Auto, Snapdragon Compute,EPSS 0.9%CVE-2016-10422—In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and SnapdEPSS 0.9%CVE-2019-10559—Accessing data buffer beyond the available data while parsing ogg clip can lead to null-pointer dereference and then memory corruption in SnEPSS 0.9%CVE-2014-9411—In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially posEPSS 0.9%CVE-2015-9039—In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in eMBMS where an assertion can be reEPSS 0.9%CVE-2015-9036—In all Qualcomm products with Android releases from CAF using the Linux kernel, an incorrect length is used to clear a memory buffer resultiEPSS 0.9%CVE-2015-9061—In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading tEPSS 0.9%CVE-2014-9974—In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster.EPSS 0.9%CVE-2016-10391—In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for valEPSS 0.9%CVE-2015-9068—In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated.EPSS 0.9%CVE-2016-10344—In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially posEPSS 0.9%CVE-2015-9045—In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a buffer can be overflEPSS 0.9%CVE-2015-9050—In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access cEPSS 0.9%CVE-2015-9072—In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syEPSS 0.9%CVE-2015-9071—In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscaEPSS 0.9%