Vulnerabilidades em Qualcomm, Inc.

2.991 resultados
Análise Vexday

Com 2.934 CVEs catalogadas, a Qualcomm apresenta um volume expressivo de vulnerabilidades, reflexo da amplitude de seu portfólio de chipsets e firmware embarcado. A taxa de exploração ativa — 12 entradas no catálogo KEV da CISA, ou 0,41% do total — está em linha com a média geral do catálogo, indicando que o risco de exploração confirmada não foge do padrão da indústria, embora 94 falhas de severidade crítica representem uma superfície de ataque relevante para equipes de segurança que dependem de componentes Qualcomm em ambientes móveis, automotivos ou de IoT. A CVE mais perigosa atualmente em exploração ativa, CVE-2020-11261, apresenta EPSS de 0,0177, sugerindo probabilidade de exploração adicional relativamente baixa no curto prazo, mas sua presença no KEV exige atenção imediata em qualquer inventário de ativos afetados. O surgimento de 49 novas CVEs nos últimos 90 dias e a disponibilidade de PoCs públicas para 3 vulnerabilidades reforçam a necessidade de ciclos contínuos de atualização de firmware e monitoramento ativo de patches liberados pelo fabricante.

CVE-2015-9055—In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a memory managemenEPSS 0.9%CVE-2015-9070—In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscaEPSS 0.9%CVE-2015-9045—In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a buffer can be overflEPSS 0.9%CVE-2020-11272—Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later canEPSS 0.9%CVE-2020-11215—An out of bounds read can happen when processing VSA attribute due to improper minimum required length check in Snapdragon Auto, Snapdragon EPSS 0.9%CVE-2020-11144—Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon AEPSS 0.9%CVE-2018-11905—In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buffer overflow in WLAN EPSS 0.9%CVE-2017-7364—In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_daEPSS 0.9%CVE-2020-3698—Out of bound write while QoS DSCP mapping due to improper input validation for data received from association response frame in Snapdragon AEPSS 0.9%CVE-2020-11213—Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in Snapdragon Auto, SnaEPSS 0.9%CVE-2020-11212—Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon Auto, Snapdragon CompuEPSS 0.9%CVE-2021-35117HIGHAn Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnectivityEPSS 0.9%CVE-2020-3670—u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS EPSS 0.9%CVE-2020-3688—Possible buffer overflow while parsing mp4 clip with corrupted sample atoms due to improper validation of index in Snapdragon Auto, SnapdragEPSS 0.9%CVE-2015-9132—In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055, SD 210/SD 212/SD 205,EPSS 0.9%CVE-2015-9163—In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM92EPSS 0.9%CVE-2015-9131—In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 410/12, SD 615/16/SD 415, SD 800, SD 8EPSS 0.9%CVE-2015-9169—In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 20EPSS 0.9%CVE-2017-18126—In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6EPSS 0.9%CVE-2019-10550—Buffer Over-read when UE is trying to process the message received form the network without zero termination in Snapdragon Auto, Snapdragon EPSS 0.9%