7.8

CVE-2024-53031

Improper Input Validation in Automotive OS Platform

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Qam8255p Firmware Version -
   Qualcomm ≫ Qam8255p
Qualcomm ≫ Qam8295p Firmware Version -
   Qualcomm ≫ Qam8295p
Qualcomm ≫ Qam8620p Firmware Version -
   Qualcomm ≫ Qam8620p
Qualcomm ≫ Qam8650p Firmware Version -
   Qualcomm ≫ Qam8650p
Qualcomm ≫ Qam8775p Firmware Version -
   Qualcomm ≫ Qam8775p
Qualcomm ≫ Qamsrv1h Firmware Version -
   Qualcomm ≫ Qamsrv1h
Qualcomm ≫ Qamsrv1m Firmware Version -
   Qualcomm ≫ Qamsrv1m
Qualcomm ≫ Qca6574au Firmware Version -
   Qualcomm ≫ Qca6574au
Qualcomm ≫ Qca6595 Firmware Version -
   Qualcomm ≫ Qca6595
Qualcomm ≫ Qca6595au Firmware Version -
   Qualcomm ≫ Qca6595au
Qualcomm ≫ Qca6688aq Firmware Version -
   Qualcomm ≫ Qca6688aq
Qualcomm ≫ Qca6696 Firmware Version -
   Qualcomm ≫ Qca6696
Qualcomm ≫ Qca6698aq Firmware Version -
   Qualcomm ≫ Qca6698aq
Qualcomm ≫ Sa7255p Firmware Version -
   Qualcomm ≫ Sa7255p
Qualcomm ≫ Sa7775p Firmware Version -
   Qualcomm ≫ Sa7775p
Qualcomm ≫ Sa8255p Firmware Version -
   Qualcomm ≫ Sa8255p
Qualcomm ≫ Sa8295p Firmware Version -
   Qualcomm ≫ Sa8295p
Qualcomm ≫ Sa8540p Firmware Version -
   Qualcomm ≫ Sa8540p
Qualcomm ≫ Sa8620p Firmware Version -
   Qualcomm ≫ Sa8620p
Qualcomm ≫ Sa8650p Firmware Version -
   Qualcomm ≫ Sa8650p
Qualcomm ≫ Sa8770p Firmware Version -
   Qualcomm ≫ Sa8770p
Qualcomm ≫ Sa8775p Firmware Version -
   Qualcomm ≫ Sa8775p
Qualcomm ≫ Sa9000p Firmware Version -
   Qualcomm ≫ Sa9000p
Qualcomm ≫ Srv1h Firmware Version -
   Qualcomm ≫ Srv1h
Qualcomm ≫ Srv1l Firmware Version -
   Qualcomm ≫ Srv1l
Qualcomm ≫ Srv1m Firmware Version -
   Qualcomm ≫ Srv1m
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.023
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Qualcomm 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
Vendor Advisory