6.7
CVE-2024-33030
- EPSS 0.1%
- Veröffentlicht 04.11.2024 10:15:05
- Zuletzt bearbeitet 07.11.2024 20:04:32
- Erkennungen
LoginBuffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Performance
Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Wsa8835 Firmware Version -
Qualcomm ≫ Wsa8830 Firmware Version -
Qualcomm ≫ Wcd9380 Firmware Version -
Qualcomm ≫ Wcd9340 Firmware Version -
Qualcomm ≫ Snapdragon X75 5g Modem-rf System Firmware Version -
Qualcomm ≫ Snapdragon X72 5g Modem-rf System Firmware Version -
Qualcomm ≫ Snapdragon Auto 5g Modem-rf Gen 2 Firmware Version -
Qualcomm ≫ Snapdragon 8 Gen 1 Mobile Platform Firmware Version -
Qualcomm ≫ Qfw7124 Firmware Version -
Qualcomm ≫ Qfw7114 Firmware Version -
Qualcomm ≫ Qcn6274 Firmware Version -
Qualcomm ≫ Qcn6224 Firmware Version -
Qualcomm ≫ Qcc710 Firmware Version -
Qualcomm ≫ Qca9377 Firmware Version -
Qualcomm ≫ Qca9367 Firmware Version -
Qualcomm ≫ Qca8337 Firmware Version -
Qualcomm ≫ Qca8081 Firmware Version -
Qualcomm ≫ Qca6698aq Firmware Version -
Qualcomm ≫ Qca6584au Firmware Version -
Qualcomm ≫ Fastconnect 7800 Firmware Version -
Qualcomm ≫ Fastconnect 6900 Firmware Version -
Qualcomm ≫ Ar8035 Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.1% | 0.011 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Qualcomm | 6.7 | 0.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html