Vulnerabilidades em Qualcomm, Inc.

2.971 resultados
Análise Vexday

Com 2.934 CVEs catalogadas, a Qualcomm apresenta um volume expressivo de vulnerabilidades, reflexo da amplitude de seu portfólio de chipsets e firmware embarcado. A taxa de exploração ativa — 12 entradas no catálogo KEV da CISA, ou 0,41% do total — está em linha com a média geral do catálogo, indicando que o risco de exploração confirmada não foge do padrão da indústria, embora 94 falhas de severidade crítica representem uma superfície de ataque relevante para equipes de segurança que dependem de componentes Qualcomm em ambientes móveis, automotivos ou de IoT. A CVE mais perigosa atualmente em exploração ativa, CVE-2020-11261, apresenta EPSS de 0,0177, sugerindo probabilidade de exploração adicional relativamente baixa no curto prazo, mas sua presença no KEV exige atenção imediata em qualquer inventário de ativos afetados. O surgimento de 49 novas CVEs nos últimos 90 dias e a disponibilidade de PoCs públicas para 3 vulnerabilidades reforçam a necessidade de ciclos contínuos de atualização de firmware e monitoramento ativo de patches liberados pelo fabricante.

CVE-2018-11279—Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, snapdragon mobile and EPSS 0.5%CVE-2017-11087—libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", whicEPSS 0.5%CVE-2017-6421—In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable may be controEPSS 0.5%CVE-2019-10622—Out of bound memory access can happen while parsing ADSP message due to lack of check of size of payload received from userspace in SnapdragEPSS 0.5%CVE-2016-10420—In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SDEPSS 0.5%CVE-2015-9021—In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled.EPSS 0.5%CVE-2015-9024—In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications.EPSS 0.5%CVE-2022-22088CRITICALInteger Overflow to Buffer Overflow in Bluetooth HOSTEPSS 0.5%CVE-2022-22105CRITICALMemory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, SnapdrEPSS 0.5%CVE-2022-25708CRITICALMemory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon MobileEPSS 0.5%CVE-2018-5873—An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing fEPSS 0.5%CVE-2021-35082CRITICALImproper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode command packet has beeEPSS 0.5%CVE-2021-30347CRITICALImproper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in EPSS 0.5%CVE-2017-11015—In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, currently, the value of SIR_EPSS 0.5%CVE-2017-8240—In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability.EPSS 0.5%CVE-2014-9945—In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.EPSS 0.5%CVE-2021-1904MEDIUMChild process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon AuEPSS 0.5%CVE-2016-10335—In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.EPSS 0.5%CVE-2016-10333—In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.EPSS 0.5%CVE-2023-28581CRITICALImproper Restriction of Operations within the Bounds of a Memory Buffer in WLAN FirmwareEPSS 0.5%