7.8

CVE-2024-53030

Improper Input Validation in Automotive OS Platform

Memory corruption while processing input message passed from FE driver.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Msm8996au Firmware Version -
   Qualcomm ≫ Msm8996au
Qualcomm ≫ Qam8255p Firmware Version -
   Qualcomm ≫ Qam8255p
Qualcomm ≫ Qam8295p Firmware Version -
   Qualcomm ≫ Qam8295p
Qualcomm ≫ Qam8620p Firmware Version -
   Qualcomm ≫ Qam8620p
Qualcomm ≫ Qam8650p Firmware Version -
   Qualcomm ≫ Qam8650p
Qualcomm ≫ Qam8775p Firmware Version -
   Qualcomm ≫ Qam8775p
Qualcomm ≫ Qamsrv1h Firmware Version -
   Qualcomm ≫ Qamsrv1h
Qualcomm ≫ Qamsrv1m Firmware Version -
   Qualcomm ≫ Qamsrv1m
Qualcomm ≫ Qca6564a Firmware Version -
   Qualcomm ≫ Qca6564a
Qualcomm ≫ Qca6564au Firmware Version -
   Qualcomm ≫ Qca6564au
Qualcomm ≫ Qca6574a Firmware Version -
   Qualcomm ≫ Qca6574a
Qualcomm ≫ Qca6574au Firmware Version -
   Qualcomm ≫ Qca6574au
Qualcomm ≫ Qca6584au Firmware Version -
   Qualcomm ≫ Qca6584au
Qualcomm ≫ Qca6595 Firmware Version -
   Qualcomm ≫ Qca6595
Qualcomm ≫ Qca6595au Firmware Version -
   Qualcomm ≫ Qca6595au
Qualcomm ≫ Qca6678aq Firmware Version -
   Qualcomm ≫ Qca6678aq
Qualcomm ≫ Qca6688aq Firmware Version -
   Qualcomm ≫ Qca6688aq
Qualcomm ≫ Qca6696 Firmware Version -
   Qualcomm ≫ Qca6696
Qualcomm ≫ Qca6698aq Firmware Version -
   Qualcomm ≫ Qca6698aq
Qualcomm ≫ Qca6797aq Firmware Version -
   Qualcomm ≫ Qca6797aq
Qualcomm ≫ Qcs9100 Firmware Version -
   Qualcomm ≫ Qcs9100
Qualcomm ≫ Sa6145p Firmware Version -
   Qualcomm ≫ Sa6145p
Qualcomm ≫ Sa6150p Firmware Version -
   Qualcomm ≫ Sa6150p
Qualcomm ≫ Sa6155 Firmware Version -
   Qualcomm ≫ Sa6155
Qualcomm ≫ Sa6155p Firmware Version -
   Qualcomm ≫ Sa6155p
Qualcomm ≫ Sa7255p Firmware Version -
   Qualcomm ≫ Sa7255p
Qualcomm ≫ Sa7775p Firmware Version -
   Qualcomm ≫ Sa7775p
Qualcomm ≫ Sa8145p Firmware Version -
   Qualcomm ≫ Sa8145p
Qualcomm ≫ Sa8150p Firmware Version -
   Qualcomm ≫ Sa8150p
Qualcomm ≫ Sa8155 Firmware Version -
   Qualcomm ≫ Sa8155
Qualcomm ≫ Sa8155p Firmware Version -
   Qualcomm ≫ Sa8155p
Qualcomm ≫ Sa8195p Firmware Version -
   Qualcomm ≫ Sa8195p
Qualcomm ≫ Sa8255p Firmware Version -
   Qualcomm ≫ Sa8255p
Qualcomm ≫ Sa8295p Firmware Version -
   Qualcomm ≫ Sa8295p
Qualcomm ≫ Sa8540p Firmware Version -
   Qualcomm ≫ Sa8540p
Qualcomm ≫ Sa8620p Firmware Version -
   Qualcomm ≫ Sa8620p
Qualcomm ≫ Sa8650p Firmware Version -
   Qualcomm ≫ Sa8650p
Qualcomm ≫ Sa8770p Firmware Version -
   Qualcomm ≫ Sa8770p
Qualcomm ≫ Sa8775p Firmware Version -
   Qualcomm ≫ Sa8775p
Qualcomm ≫ Sa9000p Firmware Version -
   Qualcomm ≫ Sa9000p
Qualcomm ≫ Srv1h Firmware Version -
   Qualcomm ≫ Srv1h
Qualcomm ≫ Srv1l Firmware Version -
   Qualcomm ≫ Srv1l
Qualcomm ≫ Srv1m Firmware Version -
   Qualcomm ≫ Srv1m
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.023
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Qualcomm 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
Vendor Advisory