7.8

CVE-2024-45576

Memory corruption while prociesing command buffer buffer in OPE module.

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Sdm429w Firmware Version-
   Qualcomm ≫ Sdm429w Version-
Qualcomm ≫ Sw5100 Firmware Version-
   Qualcomm ≫ Sw5100 Version-
Qualcomm ≫ Sw5100p Firmware Version-
   Qualcomm ≫ Sw5100p Version-
Qualcomm ≫ Sxr2230p Firmware Version-
   Qualcomm ≫ Sxr2230p Version-
Qualcomm ≫ Sxr2250p Firmware Version-
   Qualcomm ≫ Sxr2250p Version-
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380 Version-
Qualcomm ≫ Wcd9385 Firmware Version-
   Qualcomm ≫ Wcd9385 Version-
Qualcomm ≫ Wcn3620 Firmware Version-
   Qualcomm ≫ Wcn3620 Version-
Qualcomm ≫ Wcn3660b Firmware Version-
   Qualcomm ≫ Wcn3660b Version-
Qualcomm ≫ Wcn3980 Firmware Version-
   Qualcomm ≫ Wcn3980 Version-
Qualcomm ≫ Wcn3988 Firmware Version-
   Qualcomm ≫ Wcn3988 Version-
Qualcomm ≫ Wsa8830 Firmware Version-
   Qualcomm ≫ Wsa8830 Version-
Qualcomm ≫ Wsa8832 Firmware Version-
   Qualcomm ≫ Wsa8832 Version-
Qualcomm ≫ Wsa8835 Firmware Version-
   Qualcomm ≫ Wsa8835 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.01% 0.019
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
product-security@qualcomm.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.