Vulnerabilidades em Qualcomm, Inc.

2.991 resultados
Análise Vexday

Com 2.934 CVEs catalogadas, a Qualcomm apresenta um volume expressivo de vulnerabilidades, reflexo da amplitude de seu portfólio de chipsets e firmware embarcado. A taxa de exploração ativa — 12 entradas no catálogo KEV da CISA, ou 0,41% do total — está em linha com a média geral do catálogo, indicando que o risco de exploração confirmada não foge do padrão da indústria, embora 94 falhas de severidade crítica representem uma superfície de ataque relevante para equipes de segurança que dependem de componentes Qualcomm em ambientes móveis, automotivos ou de IoT. A CVE mais perigosa atualmente em exploração ativa, CVE-2020-11261, apresenta EPSS de 0,0177, sugerindo probabilidade de exploração adicional relativamente baixa no curto prazo, mas sua presença no KEV exige atenção imediata em qualquer inventário de ativos afetados. O surgimento de 49 novas CVEs nos últimos 90 dias e a disponibilidade de PoCs públicas para 3 vulnerabilidades reforçam a necessidade de ciclos contínuos de atualização de firmware e monitoramento ativo de patches liberados pelo fabricante.

CVE-2022-34146HIGHImproper input validation in WLAN HostEPSS 0.4%CVE-2022-40512HIGHBuffer over-read in WLAN Firmware.EPSS 0.4%CVE-2022-33306HIGHBuffer over-read in WLANEPSS 0.4%CVE-2020-11156—u'Buffer over-read issue in Bluetooth estack due to lack of check for invalid length of L2cap packet received from peer device.' in SnapdragEPSS 0.4%CVE-2023-22388CRITICALUse of Out-of-range Pointer Offset in Multi-mode Call ProcessorEPSS 0.4%CVE-2023-22385HIGHBuffer Over-read in Data ModemEPSS 0.4%CVE-2017-8237—In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image.EPSS 0.4%CVE-2017-8236—In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver.EPSS 0.4%CVE-2019-10561—Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and leads to denial of servEPSS 0.4%CVE-2025-21483CRITICALImproper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & ConnectivityEPSS 0.4%CVE-2022-33259CRITICALBuffer copy without checking the size of input in ModemEPSS 0.4%CVE-2022-25745CRITICALAlways Incorrect Control Flow Implementation in MODEMEPSS 0.4%CVE-2022-25678CRITICALBuffer Copy Without Checking Size of Input in MODEMEPSS 0.4%CVE-2022-33211CRITICALImproper Input Validation in MODEMEPSS 0.4%CVE-2022-25740CRITICALBuffer Copy Without Checking Size of Input in MODEMEPSS 0.4%CVE-2022-33236HIGHTransient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon ConnectEPSS 0.4%CVE-2022-33239HIGHTransient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, SnapdragEPSS 0.4%CVE-2022-25710HIGHDenial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon IndustriEPSS 0.4%CVE-2022-25741HIGHDenial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon CompuEPSS 0.4%CVE-2022-25742HIGHDenial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOEPSS 0.4%