6.2

CVE-2024-21478

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Qam8255p Firmware Version-
   Qualcomm ≫ Qam8255p Version-
Qualcomm ≫ Qam8650p Firmware Version-
   Qualcomm ≫ Qam8650p Version-
Qualcomm ≫ Qam8775p Firmware Version-
   Qualcomm ≫ Qam8775p Version-
Qualcomm ≫ Qamsrv1h Firmware Version-
   Qualcomm ≫ Qamsrv1h Version-
Qualcomm ≫ Qamsrv1m Firmware Version-
   Qualcomm ≫ Qamsrv1m Version-
Qualcomm ≫ Sa8255p Firmware Version-
   Qualcomm ≫ Sa8255p Version-
Qualcomm ≫ Sa8650p Firmware Version-
   Qualcomm ≫ Sa8650p Version-
Qualcomm ≫ Sa8770p Firmware Version-
   Qualcomm ≫ Sa8770p Version-
Qualcomm ≫ Sa8775p Firmware Version-
   Qualcomm ≫ Sa8775p Version-
Qualcomm ≫ Sa9000p Firmware Version-
   Qualcomm ≫ Sa9000p Version-
Qualcomm ≫ Srv1h Firmware Version-
   Qualcomm ≫ Srv1h Version-
Qualcomm ≫ Srv1m Firmware Version-
   Qualcomm ≫ Srv1m Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.07% 0.229
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
product-security@qualcomm.com 6.2 2.5 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

CWE-704 Incorrect Type Conversion or Cast

The product does not correctly convert an object, resource, or structure from one type to a different type.