Vulnerabilidades em Qualcomm, Inc.

2.976 resultados
Análise Vexday

Com 2.934 CVEs catalogadas, a Qualcomm apresenta um volume expressivo de vulnerabilidades, reflexo da amplitude de seu portfólio de chipsets e firmware embarcado. A taxa de exploração ativa — 12 entradas no catálogo KEV da CISA, ou 0,41% do total — está em linha com a média geral do catálogo, indicando que o risco de exploração confirmada não foge do padrão da indústria, embora 94 falhas de severidade crítica representem uma superfície de ataque relevante para equipes de segurança que dependem de componentes Qualcomm em ambientes móveis, automotivos ou de IoT. A CVE mais perigosa atualmente em exploração ativa, CVE-2020-11261, apresenta EPSS de 0,0177, sugerindo probabilidade de exploração adicional relativamente baixa no curto prazo, mas sua presença no KEV exige atenção imediata em qualquer inventário de ativos afetados. O surgimento de 49 novas CVEs nos últimos 90 dias e a disponibilidade de PoCs públicas para 3 vulnerabilidades reforçam a necessidade de ciclos contínuos de atualização de firmware e monitoramento ativo de patches liberados pelo fabricante.

CVE-2017-9696—In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer over-read is possibleEPSS 0.4%CVE-2022-25742HIGHDenial of service in modem due to infinite loop while parsing IGMPv2 packet from server in Snapdragon Consumer IOT, Snapdragon Industrial IOEPSS 0.4%CVE-2020-11157—u'Lack of handling unexpected control messages while encryption was in progress can terminate the connection and thus leading to a DoS' in SEPSS 0.4%CVE-2022-33236HIGHTransient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon ConnectEPSS 0.4%CVE-2017-11066—In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing ubi image an EPSS 0.4%CVE-2017-14870—In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while updating the recovery EPSS 0.4%CVE-2017-11093—In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer Over-read in Display EPSS 0.4%CVE-2022-33213HIGHMemory Corruption in MODEMEPSS 0.4%CVE-2018-5846—A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTEPSS 0.4%CVE-2017-8239—In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentiaEPSS 0.4%CVE-2020-11122—u'Null Pointer exception while playing crafted mkv file as data stream get deleted on secondary invalid configuration' in Snapdragon Auto, SEPSS 0.4%CVE-2022-33244HIGHReachable assertion in ModemEPSS 0.4%CVE-2022-33272HIGHReachable assertion in ModemEPSS 0.4%CVE-2022-25735HIGHNull Pointer Dereference in MODEMEPSS 0.4%CVE-2022-33309HIGHBuiffer over-read in WLAN Firmware.EPSS 0.4%CVE-2023-28555HIGHBuffer Over-read in AudioEPSS 0.4%CVE-2022-25733HIGHNull Pointer Dereference in MODEMEPSS 0.4%CVE-2022-40535HIGHBuffer Over-read in WLANEPSS 0.4%CVE-2022-33254HIGHReachable assertion in ModemEPSS 0.4%CVE-2022-40503HIGHBuffer over-read in Bluetooth Host.EPSS 0.4%