Vulnerabilidades em Qualcomm, Inc.

2.991 resultados
Análise Vexday

Com 2.934 CVEs catalogadas, a Qualcomm apresenta um volume expressivo de vulnerabilidades, reflexo da amplitude de seu portfólio de chipsets e firmware embarcado. A taxa de exploração ativa — 12 entradas no catálogo KEV da CISA, ou 0,41% do total — está em linha com a média geral do catálogo, indicando que o risco de exploração confirmada não foge do padrão da indústria, embora 94 falhas de severidade crítica representem uma superfície de ataque relevante para equipes de segurança que dependem de componentes Qualcomm em ambientes móveis, automotivos ou de IoT. A CVE mais perigosa atualmente em exploração ativa, CVE-2020-11261, apresenta EPSS de 0,0177, sugerindo probabilidade de exploração adicional relativamente baixa no curto prazo, mas sua presença no KEV exige atenção imediata em qualquer inventário de ativos afetados. O surgimento de 49 novas CVEs nos últimos 90 dias e a disponibilidade de PoCs públicas para 3 vulnerabilidades reforçam a necessidade de ciclos contínuos de atualização de firmware e monitoramento ativo de patches liberados pelo fabricante.

CVE-2023-33028CRITICALBuffer Copy without Checking Size of Input in WLAN FirmwareEPSS 0.5%CVE-2022-22088CRITICALInteger Overflow to Buffer Overflow in Bluetooth HOSTEPSS 0.5%CVE-2016-10339—In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.EPSS 0.5%CVE-2023-33048HIGHBuffer over-read in WLAN FirmwareEPSS 0.5%CVE-2023-33061HIGHBuffer Over-read in WLAN FirmwareEPSS 0.5%CVE-2018-5897—While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly inEPSS 0.5%CVE-2023-33047HIGHBuffer Over-read in WLAN FirmwareEPSS 0.5%CVE-2023-33056HIGHNULL Pointer dereference in WLAN FirmwareEPSS 0.5%CVE-2020-3704—u'While processing invalid connection request PDU which is nonstandard (interval or timeout is 0) from central device may lead peripheral syEPSS 0.5%CVE-2021-35068HIGHLack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in SnapdEPSS 0.5%CVE-2022-33256CRITICALImproper validation of array index in Multi-mode call processorEPSS 0.5%CVE-2022-25748CRITICALMemory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in Snapdragon Auto, Snapdragon Compute, SnapdEPSS 0.5%CVE-2023-33082CRITICALBuffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HostEPSS 0.5%CVE-2016-5862—When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, EPSS 0.5%CVE-2022-22096CRITICALMemory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in SnapdragoEPSS 0.5%CVE-2017-14875—In the handler for the ioctl command VIDIOC_MSM_ISP_DUAL_HW_LPM_MODE in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-05-EPSS 0.5%CVE-2017-15859—While processing the QCA_NL80211_VENDOR_SUBCMD_SET_TXPOWER_SCALE_DECR_DB vendor command, in which attribute QCA_WLAN_VENDOR_ATTR_TXPOWER_SCAEPSS 0.5%CVE-2017-18170—Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile in version QCA9379, SEPSS 0.5%CVE-2021-35082CRITICALImproper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has beeEPSS 0.5%CVE-2023-28588HIGHInteger Overflow or Wraparound in Bluetooth HostEPSS 0.5%