7.5

CVE-2024-43064

Permissions, Privileges, and Access Controls issue in Automotive OS Platform

Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Qam8255p Firmware Version-
   Qualcomm ≫ Qam8255p Version-
Qualcomm ≫ Qam8295p Firmware Version-
   Qualcomm ≫ Qam8295p Version-
Qualcomm ≫ Qam8620p Firmware Version-
   Qualcomm ≫ Qam8620p Version-
Qualcomm ≫ Qam8650p Firmware Version-
   Qualcomm ≫ Qam8650p Version-
Qualcomm ≫ Qam8775p Firmware Version-
   Qualcomm ≫ Qam8775p Version-
Qualcomm ≫ Qamsrv1h Firmware Version-
   Qualcomm ≫ Qamsrv1h Version-
Qualcomm ≫ Qamsrv1m Firmware Version-
   Qualcomm ≫ Qamsrv1m Version-
Qualcomm ≫ Qca6574au Firmware Version-
   Qualcomm ≫ Qca6574au Version-
Qualcomm ≫ Qca6595 Firmware Version-
   Qualcomm ≫ Qca6595 Version-
Qualcomm ≫ Qca6595au Firmware Version-
   Qualcomm ≫ Qca6595au Version-
Qualcomm ≫ Qca6688aq Firmware Version-
   Qualcomm ≫ Qca6688aq Version-
Qualcomm ≫ Qca6696 Firmware Version-
   Qualcomm ≫ Qca6696 Version-
Qualcomm ≫ Qca6698aq Firmware Version-
   Qualcomm ≫ Qca6698aq Version-
Qualcomm ≫ Sa7255p Firmware Version-
   Qualcomm ≫ Sa7255p Version-
Qualcomm ≫ Sa7775p Firmware Version-
   Qualcomm ≫ Sa7775p Version-
Qualcomm ≫ Sa8255p Firmware Version-
   Qualcomm ≫ Sa8255p Version-
Qualcomm ≫ Sa8295p Firmware Version-
   Qualcomm ≫ Sa8295p Version-
Qualcomm ≫ Sa8540p Firmware Version-
   Qualcomm ≫ Sa8540p Version-
Qualcomm ≫ Sa8620p Firmware Version-
   Qualcomm ≫ Sa8620p Version-
Qualcomm ≫ Sa8650p Firmware Version-
   Qualcomm ≫ Sa8650p Version-
Qualcomm ≫ Sa8770p Firmware Version-
   Qualcomm ≫ Sa8770p Version-
Qualcomm ≫ Sa8775p Firmware Version-
   Qualcomm ≫ Sa8775p Version-
Qualcomm ≫ Sa9000p Firmware Version-
   Qualcomm ≫ Sa9000p Version-
Qualcomm ≫ Sdm429w Firmware Version-
   Qualcomm ≫ Sdm429w Version-
Qualcomm ≫ Srv1h Firmware Version-
   Qualcomm ≫ Srv1h Version-
Qualcomm ≫ Srv1l Firmware Version-
   Qualcomm ≫ Srv1l Version-
Qualcomm ≫ Srv1m Firmware Version-
   Qualcomm ≫ Srv1m Version-
Qualcomm ≫ Wcn3620 Firmware Version-
   Qualcomm ≫ Wcn3620 Version-
Qualcomm ≫ Wcn3660b Firmware Version-
   Qualcomm ≫ Wcn3660b Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.08% 0.004
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.7 1 3.6
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
product-security@qualcomm.com 7.5 0.8 6
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html
Vendor Advisory