CVE-2024-21482

EPSS 0.01%
Published 01.07.2024 15:15:15
Last modified 21.11.2024 08:54:31
Source product-security@qualcomm.com
Teams watchlist Login
Open Login

Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Qualcomm ≫ Csr8811 Firmware Version-

Qualcomm ≫ Csr8811 Version-

Qualcomm ≫ Immersive Home 214 Platform Firmware Version-

Qualcomm ≫ Immersive Home 214 Platform Version-

Qualcomm ≫ Immersive Home 216 Platform Firmware Version-

Qualcomm ≫ Immersive Home 216 Platform Version-

Qualcomm ≫ Immersive Home 316 Platform Firmware Version-

Qualcomm ≫ Immersive Home 316 Platform Version-

Qualcomm ≫ Immersive Home 318 Platform Firmware Version-

Qualcomm ≫ Immersive Home 318 Platform Version-

Qualcomm ≫ Immersive Home 3210 Platform Firmware Version-

Qualcomm ≫ Immersive Home 3210 Platform Version-

Qualcomm ≫ Immersive Home 326 Platform Firmware Version-

Qualcomm ≫ Immersive Home 326 Platform Version-

Qualcomm ≫ Ipq5010 Firmware Version-

Qualcomm ≫ Ipq5010 Version-

Qualcomm ≫ Ipq5028 Firmware Version-

Qualcomm ≫ Ipq5028 Version-

Qualcomm ≫ Ipq5302 Firmware Version-

Qualcomm ≫ Ipq5302 Version-

Qualcomm ≫ Ipq5312 Firmware Version-

Qualcomm ≫ Ipq5312 Version-

Qualcomm ≫ Ipq5332 Firmware Version-

Qualcomm ≫ Ipq5332 Version-

Qualcomm ≫ Ipq6000 Firmware Version-

Qualcomm ≫ Ipq6000 Version-

Qualcomm ≫ Ipq6010 Firmware Version-

Qualcomm ≫ Ipq6010 Version-

Qualcomm ≫ Ipq6018 Firmware Version-

Qualcomm ≫ Ipq6018 Version-

Qualcomm ≫ Ipq6028 Firmware Version-

Qualcomm ≫ Ipq6028 Version-

Qualcomm ≫ Ipq8070a Firmware Version-

Qualcomm ≫ Ipq8070a Version-

Qualcomm ≫ Ipq8071a Firmware Version-

Qualcomm ≫ Ipq8071a Version-

Qualcomm ≫ Ipq8072a Firmware Version-

Qualcomm ≫ Ipq8072a Version-

Qualcomm ≫ Ipq8074a Firmware Version-

Qualcomm ≫ Ipq8074a Version-

Qualcomm ≫ Ipq8076 Firmware Version-

Qualcomm ≫ Ipq8076 Version-

Qualcomm ≫ Ipq8076a Firmware Version-

Qualcomm ≫ Ipq8076a Version-

Qualcomm ≫ Ipq8078 Firmware Version-

Qualcomm ≫ Ipq8078 Version-

Qualcomm ≫ Ipq8078a Firmware Version-

Qualcomm ≫ Ipq8078a Version-

Qualcomm ≫ Ipq8173 Firmware Version-

Qualcomm ≫ Ipq8173 Version-

Qualcomm ≫ Ipq8174 Firmware Version-

Qualcomm ≫ Ipq8174 Version-

Qualcomm ≫ Ipq9008 Firmware Version-

Qualcomm ≫ Ipq9008 Version-

Qualcomm ≫ Ipq9554 Firmware Version-

Qualcomm ≫ Ipq9554 Version-

Qualcomm ≫ Ipq9570 Firmware Version-

Qualcomm ≫ Ipq9570 Version-

Qualcomm ≫ Ipq9574 Firmware Version-

Qualcomm ≫ Ipq9574 Version-

Qualcomm ≫ Qca4024 Firmware Version-

Qualcomm ≫ Qca4024 Version-

Qualcomm ≫ Qca8075 Firmware Version-

Qualcomm ≫ Qca8075 Version-

Qualcomm ≫ Qca8081 Firmware Version-

Qualcomm ≫ Qca8081 Version-

Qualcomm ≫ Qca8082 Firmware Version-

Qualcomm ≫ Qca8082 Version-

Qualcomm ≫ Qca8084 Firmware Version-

Qualcomm ≫ Qca8084 Version-

Qualcomm ≫ Qca8085 Firmware Version-

Qualcomm ≫ Qca8085 Version-

Qualcomm ≫ Qca8386 Firmware Version-

Qualcomm ≫ Qca8386 Version-

Qualcomm ≫ Qca9888 Firmware Version-

Qualcomm ≫ Qca9888 Version-

Qualcomm ≫ Qca9889 Firmware Version-

Qualcomm ≫ Qca9889 Version-

Qualcomm ≫ Qcf8000 Firmware Version-

Qualcomm ≫ Qcf8000 Version-

Qualcomm ≫ Qcf8001 Firmware Version-

Qualcomm ≫ Qcf8001 Version-

Qualcomm ≫ Qcn5022 Firmware Version-

Qualcomm ≫ Qcn5022 Version-

Qualcomm ≫ Qcn5024 Firmware Version-

Qualcomm ≫ Qcn5024 Version-

Qualcomm ≫ Qcn5052 Firmware Version-

Qualcomm ≫ Qcn5052 Version-

Qualcomm ≫ Qcn5122 Firmware Version-

Qualcomm ≫ Qcn5122 Version-

Qualcomm ≫ Qcn5124 Firmware Version-

Qualcomm ≫ Qcn5124 Version-

Qualcomm ≫ Qcn5152 Firmware Version-

Qualcomm ≫ Qcn5152 Version-

Qualcomm ≫ Qcn5154 Firmware Version-

Qualcomm ≫ Qcn5154 Version-

Qualcomm ≫ Qcn5164 Firmware Version-

Qualcomm ≫ Qcn5164 Version-

Qualcomm ≫ Qcn6023 Firmware Version-

Qualcomm ≫ Qcn6023 Version-

Qualcomm ≫ Qcn6024 Firmware Version-

Qualcomm ≫ Qcn6024 Version-

Qualcomm ≫ Qcn6112 Firmware Version-

Qualcomm ≫ Qcn6112 Version-

Qualcomm ≫ Qcn6122 Firmware Version-

Qualcomm ≫ Qcn6122 Version-

Qualcomm ≫ Qcn6132 Firmware Version-

Qualcomm ≫ Qcn6132 Version-

Qualcomm ≫ Qcn6402 Firmware Version-

Qualcomm ≫ Qcn6402 Version-

Qualcomm ≫ Qcn6412 Firmware Version-

Qualcomm ≫ Qcn6412 Version-

Qualcomm ≫ Qcn6422 Firmware Version-

Qualcomm ≫ Qcn6422 Version-

Qualcomm ≫ Qcn6432 Firmware Version-

Qualcomm ≫ Qcn6432 Version-

Qualcomm ≫ Qcn9000 Firmware Version-

Qualcomm ≫ Qcn9000 Version-

Qualcomm ≫ Qcn9022 Firmware Version-

Qualcomm ≫ Qcn9022 Version-

Qualcomm ≫ Qcn9024 Firmware Version-

Qualcomm ≫ Qcn9024 Version-

Qualcomm ≫ Qcn9070 Firmware Version-

Qualcomm ≫ Qcn9070 Version-

Qualcomm ≫ Qcn9072 Firmware Version-

Qualcomm ≫ Qcn9072 Version-

Qualcomm ≫ Qcn9074 Firmware Version-

Qualcomm ≫ Qcn9074 Version-

Qualcomm ≫ Qcn9100 Firmware Version-

Qualcomm ≫ Qcn9100 Version-

Qualcomm ≫ Qcn9274 Firmware Version-

Qualcomm ≫ Qcn9274 Version-

Qualcomm ≫ Sdx55 Firmware Version-

Qualcomm ≫ Sdx55 Version-

Qualcomm ≫ Sdx65m Firmware Version-

Qualcomm ≫ Sdx65m Version-

Qualcomm ≫ Snapdragon X65 5g Modem-rf System Firmware Version-

Qualcomm ≫ Snapdragon X65 5g Modem-rf System Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.01%	0.014

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
product-security@qualcomm.com	6.8	0.9	5.9	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-21482

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-21482

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-21482

EUVD