CVE-2024-21470

EPSS 0.11%
Veröffentlicht 01.04.2024 15:15:49
Zuletzt bearbeitet 13.01.2025 21:54:33
Erkennungen
Login

Integer Overflow to Buffer Overflow in Graphics Windows

Memory corruption while allocating memory for graphics.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

NVD 33 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Aqt1000 Firmware Version -

Qualcomm ≫ Aqt1000 Version -

Qualcomm ≫ Fastconnect 6200 Firmware Version -

Qualcomm ≫ Fastconnect 6200 Version -

Qualcomm ≫ Fastconnect 6700 Firmware Version -

Qualcomm ≫ Fastconnect 6700 Version -

Qualcomm ≫ Fastconnect 6800 Firmware Version -

Qualcomm ≫ Fastconnect 6800 Version -

Qualcomm ≫ Fastconnect 6900 Firmware Version -

Qualcomm ≫ Fastconnect 6900 Version -

Qualcomm ≫ Fastconnect 7800 Firmware Version -

Qualcomm ≫ Fastconnect 7800 Version -

Qualcomm ≫ Qca6391 Firmware Version -

Qualcomm ≫ Qca6391 Version -

Qualcomm ≫ Qca6420 Firmware Version -

Qualcomm ≫ Qca6420 Version -

Qualcomm ≫ Qca6430 Firmware Version -

Qualcomm ≫ Qca6430 Version -

Qualcomm ≫ Sc8180x+sdx55 Firmware Version -

Qualcomm ≫ Sc8180x+sdx55 Version -

Qualcomm ≫ Sc8380xp Firmware Version -

Qualcomm ≫ Sc8380xp Version -

Qualcomm ≫ Sm6250 Firmware Version -

Qualcomm ≫ Sm6250 Version -

Qualcomm ≫ Snapdragon 7c Compute Platform Firmware Version -

Qualcomm ≫ Snapdragon 7c Compute Platform Version -

Qualcomm ≫ Snapdragon 7c Gen 2 Compute Platform Firmware Version -

Qualcomm ≫ Snapdragon 7c Gen 2 Compute Platform Version -

Qualcomm ≫ Snapdragon 7c+ Gen 3 Compute Firmware Version -

Qualcomm ≫ Snapdragon 7c+ Gen 3 Compute Version -

Qualcomm ≫ Sc8180x-ad Firmware Version -

Qualcomm ≫ Sc8180x-ad Version -

Qualcomm ≫ Sc8180xp-ad Firmware Version -

Qualcomm ≫ Sc8180xp-ad Version -

Qualcomm ≫ Sc8180x-aaab Firmware Version -

Qualcomm ≫ Sc8180x-aaab Version -

Qualcomm ≫ Sc8180xp-acaf Firmware Version -

Qualcomm ≫ Sc8180xp-acaf Version -

Qualcomm ≫ Sc8180x-acaf Firmware Version -

Qualcomm ≫ Sc8180x-acaf Version -

Qualcomm ≫ Sc8180xp-aaab Firmware Version -

Qualcomm ≫ Sc8180xp-aaab Version -

Qualcomm ≫ Sc8280xp-abbb Firmware Version -

Qualcomm ≫ Sc8280xp-abbb Version -

Qualcomm ≫ Wcd9340 Firmware Version -

Qualcomm ≫ Wcd9340 Version -

Qualcomm ≫ Wcd9341 Firmware Version -

Qualcomm ≫ Wcd9341 Version -

Qualcomm ≫ Wcd9380 Firmware Version -

Qualcomm ≫ Wcd9380 Version -

Qualcomm ≫ Wcd9385 Firmware Version -

Qualcomm ≫ Wcd9385 Version -

Qualcomm ≫ Wsa8810 Firmware Version -

Qualcomm ≫ Wsa8810 Version -

Qualcomm ≫ Wsa8815 Firmware Version -

Qualcomm ≫ Wsa8815 Version -

Qualcomm ≫ Wsa8830 Firmware Version -

Qualcomm ≫ Wsa8830 Version -

Qualcomm ≫ Wsa8835 Firmware Version -

Qualcomm ≫ Wsa8835 Version -

Qualcomm ≫ Wsa8840 Firmware Version -

Qualcomm ≫ Wsa8840 Version -

Qualcomm ≫ Wsa8845 Firmware Version -

Qualcomm ≫ Wsa8845 Version -

Qualcomm ≫ Wsa8845h Firmware Version -

Qualcomm ≫ Wsa8845h Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.11%	0.016

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Qualcomm	8.4	2.5	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

CWE-680 Integer Overflow to Buffer Overflow

The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.

https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-21470

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-21470

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-21470

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-21470