7.8
CVE-2024-45582
- EPSS 0.03%
- Veröffentlicht 03.02.2025 17:15:19
- Zuletzt bearbeitet 05.02.2025 16:01:56
- Quelle product-security@qualcomm.com
- Teams Watchlist Login
- Unerledigt Login
Memory corruption while validating number of devices in Camera kernel .
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Fastconnect 6900 Firmware Version-
Qualcomm ≫ Fastconnect 7800 Firmware Version-
Qualcomm ≫ Qcm8550 Firmware Version-
Qualcomm ≫ Qcs6490 Firmware Version-
Qualcomm ≫ Sm6650 Firmware Version-
Qualcomm ≫ Sm7635 Firmware Version-
Qualcomm ≫ Sm7675 Firmware Version-
Qualcomm ≫ Sm7675p Firmware Version-
Qualcomm ≫ Sm8550p Firmware Version-
Qualcomm ≫ Sm8635 Firmware Version-
Qualcomm ≫ Sm8635p Firmware Version-
Qualcomm ≫ Snapdragon 8 Gen 1 Mobile Firmware Version-
Qualcomm ≫ Snapdragon 8 Gen 2 Mobile Firmware Version-
Qualcomm ≫ Snapdragon 8 Gen 3 Mobile Firmware Version-
Qualcomm ≫ Snapdragon 8+ Gen 2 Mobile Firmware Version-
Qualcomm ≫ Wcd9370 Firmware Version-
Qualcomm ≫ Wcd9375 Firmware Version-
Qualcomm ≫ Wcd9378 Firmware Version-
Qualcomm ≫ Wcd9380 Firmware Version-
Qualcomm ≫ Wcd9385 Firmware Version-
Qualcomm ≫ Wcd9390 Firmware Version-
Qualcomm ≫ Wcd9395 Firmware Version-
Qualcomm ≫ Wcn6450 Firmware Version-
Qualcomm ≫ Wcn6650 Firmware Version-
Qualcomm ≫ Wcn6755 Firmware Version-
Qualcomm ≫ Wcn7861 Firmware Version-
Qualcomm ≫ Wcn7881 Firmware Version-
Qualcomm ≫ Wsa8830 Firmware Version-
Qualcomm ≫ Wsa8832 Firmware Version-
Qualcomm ≫ Wsa8835 Firmware Version-
Qualcomm ≫ Wsa8840 Firmware Version-
Qualcomm ≫ Wsa8845 Firmware Version-
Qualcomm ≫ Wsa8845h Firmware Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.059 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| product-security@qualcomm.com | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-129 Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.