7.5

CVE-2024-21453

Improper Input Validation in Automotive Telematics

Transient DOS while decoding message of size that exceeds the available system memory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ C-v2x 9150 Firmware Version -
   Qualcomm ≫ C-v2x 9150 Version -
Qualcomm ≫ Qcs410 Firmware Version -
   Qualcomm ≫ Qcs410 Version -
Qualcomm ≫ Qcs610 Firmware Version -
   Qualcomm ≫ Qcs610 Version -
Qualcomm ≫ Wcd9341 Firmware Version -
   Qualcomm ≫ Wcd9341 Version -
Qualcomm ≫ Wcd9370 Firmware Version -
   Qualcomm ≫ Wcd9370 Version -
Qualcomm ≫ Wcn3950 Firmware Version -
   Qualcomm ≫ Wcn3950 Version -
Qualcomm ≫ Wcn3980 Firmware Version -
   Qualcomm ≫ Wcn3980 Version -
Qualcomm ≫ Wsa8810 Firmware Version -
   Qualcomm ≫ Wsa8810 Version -
Qualcomm ≫ Wsa8815 Firmware Version -
   Qualcomm ≫ Wsa8815 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.283
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Qualcomm 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html
Vendor Advisory