7.1

CVE-2024-21460

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Qcm8550 Firmware Version-
   Qualcomm ≫ Qcm8550 Version-
Qualcomm ≫ Qcs8550 Firmware Version-
   Qualcomm ≫ Qcs8550 Version-
Qualcomm ≫ Sg8275p Firmware Version-
   Qualcomm ≫ Sg8275p Version-
Qualcomm ≫ Sm8550p Firmware Version-
   Qualcomm ≫ Sm8550p Version-
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380 Version-
Qualcomm ≫ Wcd9385 Firmware Version-
   Qualcomm ≫ Wcd9385 Version-
Qualcomm ≫ Wcd9390 Firmware Version-
   Qualcomm ≫ Wcd9390 Version-
Qualcomm ≫ Wcd9395 Firmware Version-
   Qualcomm ≫ Wcd9395 Version-
Qualcomm ≫ Wsa8840 Firmware Version-
   Qualcomm ≫ Wsa8840 Version-
Qualcomm ≫ Wsa8845 Firmware Version-
   Qualcomm ≫ Wsa8845 Version-
Qualcomm ≫ Wsa8845h Firmware Version-
   Qualcomm ≫ Wsa8845h Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.07% 0.228
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2 4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
product-security@qualcomm.com 7.1 2.5 4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CWE-330 Use of Insufficiently Random Values

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.