5.5
CVE-2024-43063
- EPSS 0.1%
- Veröffentlicht 06.01.2025 11:15:08
- Zuletzt bearbeitet 10.01.2025 15:37:33
- Erkennungen
LoginBuffer Over-read in Automotive Autonomy
information disclosure while invoking the mailbox read API.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Qam8255p Firmware Version -
Qualcomm ≫ Qam8295p Firmware Version -
Qualcomm ≫ Qam8650p Firmware Version -
Qualcomm ≫ Qam8775p Firmware Version -
Qualcomm ≫ Qamsrv1h Firmware Version -
Qualcomm ≫ Qca6595 Firmware Version -
Qualcomm ≫ Qca6595au Firmware Version -
Qualcomm ≫ Qca6696 Firmware Version -
Qualcomm ≫ Qca6698aq Firmware Version -
Qualcomm ≫ Sa8255p Firmware Version -
Qualcomm ≫ Sa8295p Firmware Version -
Qualcomm ≫ Sa8540p Firmware Version -
Qualcomm ≫ Sa8650p Firmware Version -
Qualcomm ≫ Sa8770p Firmware Version -
Qualcomm ≫ Sa8775p Firmware Version -
Qualcomm ≫ Sa9000p Firmware Version -
Qualcomm ≫ Srv1h Firmware Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.1% | 0.01 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| Qualcomm | 6.1 | 1.8 | 4.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-126 Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html