CVE-2024-49836

EPSS 0.12%
Veröffentlicht 03.03.2025 11:15:12
Zuletzt bearbeitet 06.03.2025 16:36:34
Erkennungen
Login

Improper Validation of Array Index in Camera

Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 29 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Qualcomm ≫ Fastconnect 6900 Firmware Version -

Qualcomm ≫ Fastconnect 6900

Qualcomm ≫ Fastconnect 7800 Firmware Version -

Qualcomm ≫ Fastconnect 7800

Qualcomm ≫ Qmp1000 Firmware Version -

Qualcomm ≫ Qmp1000

Qualcomm ≫ Sdm429w Firmware Version -

Qualcomm ≫ Sdm429w

Qualcomm ≫ Sm8735 Firmware Version -

Qualcomm ≫ Sm8735

Qualcomm ≫ Sm8750 Firmware Version -

Qualcomm ≫ Sm8750

Qualcomm ≫ Sm8750p Firmware Version -

Qualcomm ≫ Sm8750p

Qualcomm ≫ Snapdragon 429 Firmware Version -

Qualcomm ≫ Snapdragon 429

Qualcomm ≫ Snapdragon 8 Gen 3 Firmware Version -

Qualcomm ≫ Snapdragon 8 Gen 3

Qualcomm ≫ Sxr2230p Firmware Version -

Qualcomm ≫ Sxr2230p

Qualcomm ≫ Sxr2250p Firmware Version -

Qualcomm ≫ Sxr2250p

Qualcomm ≫ Wcd9378 Firmware Version -

Qualcomm ≫ Wcd9378

Qualcomm ≫ Wcd9380 Firmware Version -

Qualcomm ≫ Wcd9380

Qualcomm ≫ Wcd9385 Firmware Version -

Qualcomm ≫ Wcd9385

Qualcomm ≫ Wcd9390 Firmware Version -

Qualcomm ≫ Wcd9390

Qualcomm ≫ Wcd9395 Firmware Version -

Qualcomm ≫ Wcd9395

Qualcomm ≫ Wcn3620 Firmware Version -

Qualcomm ≫ Wcn3620

Qualcomm ≫ Wcn3660b Firmware Version -

Qualcomm ≫ Wcn3660b

Qualcomm ≫ Wcn7750 Firmware Version -

Qualcomm ≫ Wcn7750

Qualcomm ≫ Wcn7860 Firmware Version -

Qualcomm ≫ Wcn7860

Qualcomm ≫ Wcn7861 Firmware Version -

Qualcomm ≫ Wcn7861

Qualcomm ≫ Wcn7880 Firmware Version -

Qualcomm ≫ Wcn7880

Qualcomm ≫ Wcn7881 Firmware Version -

Qualcomm ≫ Wcn7881

Qualcomm ≫ Wsa8830 Firmware Version -

Qualcomm ≫ Wsa8830

Qualcomm ≫ Wsa8832 Firmware Version -

Qualcomm ≫ Wsa8832

Qualcomm ≫ Wsa8835 Firmware Version -

Qualcomm ≫ Wsa8835

Qualcomm ≫ Wsa8840 Firmware Version -

Qualcomm ≫ Wsa8840

Qualcomm ≫ Wsa8845 Firmware Version -

Qualcomm ≫ Wsa8845

Qualcomm ≫ Wsa8845h Firmware Version -

Qualcomm ≫ Wsa8845h

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.12%	0.023

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Qualcomm	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-49836

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-49836

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-49836

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-49836