7.8

CVE-2024-53034

Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Sc8380xp Firmware Version-
   Qualcomm ≫ Sc8380xp
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380
Qualcomm ≫ Wcd9385 Firmware Version-
   Qualcomm ≫ Wcd9385
Qualcomm ≫ Wsa8840 Firmware Version-
   Qualcomm ≫ Wsa8840
Qualcomm ≫ Wsa8845 Firmware Version-
   Qualcomm ≫ Wsa8845
Qualcomm ≫ Wsa8845h Firmware Version-
   Qualcomm ≫ Wsa8845h
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.061
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
product-security@qualcomm.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

CWE-822 Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.