6.6

CVE-2024-53017

Memory corruption while handling test pattern generator IOCTL command.

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Sdm429w Firmware Version-
   Qualcomm ≫ Sdm429w Version-
Qualcomm ≫ Wcn3620 Firmware Version-
   Qualcomm ≫ Wcn3620 Version-
Qualcomm ≫ Wcn3660b Firmware Version-
   Qualcomm ≫ Wcn3660b Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.054
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
product-security@qualcomm.com 6.6 1.8 4.7
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CWE-823 Use of Out-of-range Pointer Offset

The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.