7.8

CVE-2024-49832

Memory corruption in Camera due to unusually high number of nodes passed to AXI port.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Qcs6490 Firmware Version-
   Qualcomm ≫ Qcs6490 Version-
Qualcomm ≫ Sdm429w Firmware Version-
   Qualcomm ≫ Sdm429w Version-
Qualcomm ≫ Sm8750 Firmware Version-
   Qualcomm ≫ Sm8750 Version-
Qualcomm ≫ Sm8750p Firmware Version-
   Qualcomm ≫ Sm8750p Version-
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380 Version-
Qualcomm ≫ Wcd9390 Firmware Version-
   Qualcomm ≫ Wcd9390 Version-
Qualcomm ≫ Wcd9395 Firmware Version-
   Qualcomm ≫ Wcd9395 Version-
Qualcomm ≫ Wcn3620 Firmware Version-
   Qualcomm ≫ Wcn3620 Version-
Qualcomm ≫ Wcn3660b Firmware Version-
   Qualcomm ≫ Wcn3660b Version-
Qualcomm ≫ Wcn7860 Firmware Version-
   Qualcomm ≫ Wcn7860 Version-
Qualcomm ≫ Wcn7861 Firmware Version-
   Qualcomm ≫ Wcn7861 Version-
Qualcomm ≫ Wcn7880 Firmware Version-
   Qualcomm ≫ Wcn7880 Version-
Qualcomm ≫ Wcn7881 Firmware Version-
   Qualcomm ≫ Wcn7881 Version-
Qualcomm ≫ Wsa8830 Firmware Version-
   Qualcomm ≫ Wsa8830 Version-
Qualcomm ≫ Wsa8832 Firmware Version-
   Qualcomm ≫ Wsa8832 Version-
Qualcomm ≫ Wsa8835 Firmware Version-
   Qualcomm ≫ Wsa8835 Version-
Qualcomm ≫ Wsa8840 Firmware Version-
   Qualcomm ≫ Wsa8840 Version-
Qualcomm ≫ Wsa8845 Firmware Version-
   Qualcomm ≫ Wsa8845 Version-
Qualcomm ≫ Wsa8845h Firmware Version-
   Qualcomm ≫ Wsa8845h Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.059
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
product-security@qualcomm.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.