8.4

CVE-2024-33065

Memory corruption while taking snapshot when an offset variable is set by camera driver.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Wsa8845h Firmware Version-
   Qualcomm ≫ Wsa8845h Version-
Qualcomm ≫ Wsa8845 Firmware Version-
   Qualcomm ≫ Wsa8845 Version-
Qualcomm ≫ Wsa8840 Firmware Version-
   Qualcomm ≫ Wsa8840 Version-
Qualcomm ≫ Wsa8835 Firmware Version-
   Qualcomm ≫ Wsa8835 Version-
Qualcomm ≫ Wsa8830 Firmware Version-
   Qualcomm ≫ Wsa8830 Version-
Qualcomm ≫ Wsa8815 Firmware Version-
   Qualcomm ≫ Wsa8815 Version-
Qualcomm ≫ Wsa8810 Firmware Version-
   Qualcomm ≫ Wsa8810 Version-
Qualcomm ≫ Wcd9385 Firmware Version-
   Qualcomm ≫ Wcd9385 Version-
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380 Version-
Qualcomm ≫ Wcd9375 Firmware Version-
   Qualcomm ≫ Wcd9375 Version-
Qualcomm ≫ Wcd9370 Firmware Version-
   Qualcomm ≫ Wcd9370 Version-
Qualcomm ≫ Wcd9341 Firmware Version-
   Qualcomm ≫ Wcd9341 Version-
Qualcomm ≫ Wcd9340 Firmware Version-
   Qualcomm ≫ Wcd9340 Version-
Qualcomm ≫ Sm6250 Firmware Version-
   Qualcomm ≫ Sm6250 Version-
Qualcomm ≫ Sc8380xp Firmware Version-
   Qualcomm ≫ Sc8380xp Version-
Qualcomm ≫ Qcs6490 Firmware Version-
   Qualcomm ≫ Qcs6490 Version-
Qualcomm ≫ Qcs5430 Firmware Version-
   Qualcomm ≫ Qcs5430 Version-
Qualcomm ≫ Qcm6490 Firmware Version-
   Qualcomm ≫ Qcm6490 Version-
Qualcomm ≫ Qcm5430 Firmware Version-
   Qualcomm ≫ Qcm5430 Version-
Qualcomm ≫ Qca6430 Firmware Version-
   Qualcomm ≫ Qca6430 Version-
Qualcomm ≫ Qca6420 Firmware Version-
   Qualcomm ≫ Qca6420 Version-
Qualcomm ≫ Qca6391 Firmware Version-
   Qualcomm ≫ Qca6391 Version-
Qualcomm ≫ Aqt1000 Firmware Version-
   Qualcomm ≫ Aqt1000 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.081
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
product-security@qualcomm.com 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.