7.8

CVE-2024-43053

Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Qca2062 Firmware Version-
   Qualcomm ≫ Qca2062 Version-
Qualcomm ≫ Qca2064 Firmware Version-
   Qualcomm ≫ Qca2064 Version-
Qualcomm ≫ Qca2065 Firmware Version-
   Qualcomm ≫ Qca2065 Version-
Qualcomm ≫ Qca2066 Firmware Version-
   Qualcomm ≫ Qca2066 Version-
Qualcomm ≫ Qcc2073 Firmware Version-
   Qualcomm ≫ Qcc2073 Version-
Qualcomm ≫ Qcc2076 Firmware Version-
   Qualcomm ≫ Qcc2076 Version-
Qualcomm ≫ Sc8380xp Firmware Version-
   Qualcomm ≫ Sc8380xp Version-
Qualcomm ≫ Sdm429w Firmware Version-
   Qualcomm ≫ Sdm429w Version-
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380 Version-
Qualcomm ≫ Wcd9385 Firmware Version-
   Qualcomm ≫ Wcd9385 Version-
Qualcomm ≫ Wcn3620 Firmware Version-
   Qualcomm ≫ Wcn3620 Version-
Qualcomm ≫ Wcn3660b Firmware Version-
   Qualcomm ≫ Wcn3660b Version-
Qualcomm ≫ Wsa8840 Firmware Version-
   Qualcomm ≫ Wsa8840 Version-
Qualcomm ≫ Wsa8845 Firmware Version-
   Qualcomm ≫ Wsa8845 Version-
Qualcomm ≫ Wsa8845h Firmware Version-
   Qualcomm ≫ Wsa8845h Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.089
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
product-security@qualcomm.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.