Showing 25 vulnerabilities on this page for csra6640_firmware

Signals CISA KEV Ransomware Nuclei
qualcomm vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Improper Input Validation in Audio

Possible out of bound access in audio module due to lack of validation of user provided input.

CWE-20Nov 22, 2024
CVSS6.7v3.1EPSS0.123%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Copy Without Checking Size of Input in Graphics Linux

Memory corruption while processing GPU page table switch.

CWE-120Nov 4, 2024
CVSS7.8v3.1EPSS0.103%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Integer Overflow to Buffer Overflow in Audio

Memory corruption while processing voice packet with arbitrary data received from ADSP.

CWE-680Nov 4, 2024
CVSS7.8v3.1EPSS0.103%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in Automotive GPU

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

CWE-416Nov 4, 2024
CVSS7.8v3.1EPSS0.103%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in Computer Vision

Memory corruption while handling session errors from firmware.

CWE-416Nov 4, 2024
CVSS7.8v3.1EPSS0.103%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in DSP Services

Memory corruption while processing IOCTL call for getting group info.

CWE-416Sep 2, 2024
CVSS7.8v3.1EPSS0.16%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in DSP Service

Memory corruption when two threads try to map and unmap a single node simultaneously.

CWE-416Sep 2, 2024
CVSS8.4v3.1EPSS0.166%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in WLAN Firmware

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

CWE-125CWE-126Sep 2, 2024
CVSS7.5v3.1EPSS0.297%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in WLAN Host Communication

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.

CWE-125CWE-126Sep 2, 2024
CVSS7.5v3.1EPSS0.297%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Return of Stack Variable Address in Buses

Memory corruption when BTFM client sends new messages over Slimbus to ADSP.

CWE-562CWE-787Sep 2, 2024
CVSS8.4v3.1EPSS0.121%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage

memory corruption when an invalid firehose patch command is invoked.

CWE-119Sep 2, 2024
CVSS6.8v3.1EPSS0.153%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Improper Input Validation in Trusted Execution Environment

Cryptographic issue while parsing RSA keys in COBR format.

CWE-20Sep 2, 2024
CVSS7.1v3.1EPSS0.123%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in Automotive Telematics

Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.

CWE-416Aug 5, 2024
CVSS8.4v3.1EPSS0.111%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Improper Access Control in Graphics Linux

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.

CWE-284Aug 5, 2024
CVSS8.4v3.1EPSS0.097%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in Graphics Linux

Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.

CWE-416Aug 5, 2024
CVSS8.4v3.1EPSS0.111%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Integer Overflow or Wraparound in Automotive GPU

Memory corruption while allocating memory in HGSL driver.

CWE-190Aug 5, 2024
CVSS8.4v3.1EPSS0.104%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use of Uninitialized Variable in Automotive GPU

Memory corruption while processing IOCTL call to set metainfo.

CWE-457CWE-908Aug 5, 2024
CVSS8.4v3.1EPSS0.104%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in WLAN Host

Transient DOS while parsing ESP IE from beacon/probe response frame.

CWE-125CWE-126Aug 5, 2024
CVSS7.5v3.1EPSS0.317%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in WLAN Host

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.

CWE-125CWE-126Aug 5, 2024
CVSS7.5v3.1EPSS0.28%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in WLAN Host

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.

CWE-125CWE-126Aug 5, 2024
CVSS7.5v3.1EPSS0.28%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in WLAN Host

Transient DOS while parsing fragments of MBSSID IE from beacon frame.

CWE-416Aug 5, 2024
CVSS7.5v3.1EPSS0.28%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Improper Restriction of Operations within the Bounds of a Memory Buffer in HLOS

Memory corruption during session sign renewal request calls in HLOS.

CWE-119CWE-787Aug 5, 2024
CVSS7.8v3.1EPSS0.11%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Over-read in Multi Mode Call Processor

Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.

CWE-125CWE-126Aug 5, 2024
CVSS7.5v3.1EPSS0.346%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Use After Free in Graphics

Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.

CWE-416Jul 1, 2024
CVSS8.4v3.1EPSS0.15%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Qualcomm IPC

Memory corruption when allocating and accessing an entry in an SMEM partition.

CWE-120Jul 1, 2024
CVSS7.8v3.1EPSS0.103%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX