7.8

CVE-2024-53033

Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Sc8380xp Firmware Version-
   Qualcomm ≫ Sc8380xp
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380
Qualcomm ≫ Wcd9385 Firmware Version-
   Qualcomm ≫ Wcd9385
Qualcomm ≫ Wsa8840 Firmware Version-
   Qualcomm ≫ Wsa8840
Qualcomm ≫ Wsa8845 Firmware Version-
   Qualcomm ≫ Wsa8845
Qualcomm ≫ Wsa8845h Firmware Version-
   Qualcomm ≫ Wsa8845h
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.061
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
product-security@qualcomm.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-822 Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.