جزئیات آسیب‌پذیری

CVE-2024-43048

Qualcomm Snapdragonqualcomm fastconnect_6200_firmwarequalcomm fastconnect_6900_firmwarequalcomm fastconnect_7800_firmwarequalcomm qcm4325_firmwarequalcomm qcm8550_firmware

Stack-based Buffer Overflow in Performance

CVSS 3.1
7.8بالا

شرح رسمی (انگلیسی)

Memory corruption when invalid input is passed to invoke GPU Headroom API call.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.8بالا 3.1 CVEProject cvelistV5 (CNA) (qualcomm) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Qualcomm, Inc. Snapdragon FastConnect 6200 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 6900 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 7800 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCM4325 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCM8550 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SDM429W CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SG4150P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM4635 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8550P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8635 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8750 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8750P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 4 Gen 1 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 429 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 460 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 480 5G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 480+ 5G Mobile Platform (SM4350-AC) CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 662 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 680 4G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 685 4G Mobile Platform (SM6225-AD) CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 695 5G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 2 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 3 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8+ Gen 2 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Vision Intelligence 400 Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9335 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9341 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9370 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9375 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9378 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9380 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9385 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9390 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9395 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3620 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3660B CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3950 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3988 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3990 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6755 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7860 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7861 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7880 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7881 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8810 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8815 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8830 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8832 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8835 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8840 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845H CVEProject cvelistV5 (CNA)
qualcomm fastconnect_6200_firmware همه CISA ADP / Vulnrichment
qualcomm fastconnect_6900_firmware همه CISA ADP / Vulnrichment
qualcomm fastconnect_7800_firmware همه CISA ADP / Vulnrichment
qualcomm qcm4325_firmware همه CISA ADP / Vulnrichment
qualcomm qcm8550_firmware همه CISA ADP / Vulnrichment
qualcomm sdm429w_firmware همه CISA ADP / Vulnrichment
qualcomm sg4150p_firmware همه CISA ADP / Vulnrichment
qualcomm sm4635_firmware همه CISA ADP / Vulnrichment
qualcomm sm8550p_firmware همه CISA ADP / Vulnrichment
qualcomm sm8635_firmware همه CISA ADP / Vulnrichment
qualcomm sm8750_firmware همه CISA ADP / Vulnrichment
qualcomm sm8750p_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_429_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_460_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_480_5g_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_4_gen_1_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_662_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_680_4g_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_695_5g_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_8_gen_2_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm snapdragon_8_gen_3_mobile_platform_firmware همه CISA ADP / Vulnrichment
qualcomm vision_intelligence_400_platform_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9335_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9341_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9370_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9375_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9378_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9380_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9385_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9390_firmware همه CISA ADP / Vulnrichment
qualcomm wcd9395_firmware همه CISA ADP / Vulnrichment
qualcomm wcn3620_firmware همه CISA ADP / Vulnrichment
qualcomm wcn3660b_firmware همه CISA ADP / Vulnrichment
qualcomm wcn3950_firmware همه CISA ADP / Vulnrichment
qualcomm wcn3988_firmware همه CISA ADP / Vulnrichment
qualcomm wcn3990_firmware همه CISA ADP / Vulnrichment
qualcomm wcn6755_firmware همه CISA ADP / Vulnrichment
qualcomm wcn7860_firmware همه CISA ADP / Vulnrichment
qualcomm wcn7861_firmware همه CISA ADP / Vulnrichment
qualcomm wcn7880_firmware همه CISA ADP / Vulnrichment
qualcomm wcn7881_firmware همه CISA ADP / Vulnrichment
qualcomm wsa8810_firmware همه CISA ADP / Vulnrichment
qualcomm wsa8815_firmware همه CISA ADP / Vulnrichment
qualcomm wsa8830_firmware همه CISA ADP / Vulnrichment
qualcomm wsa8832_firmware همه CISA ADP / Vulnrichment
qualcomm wsa8835_firmware همه CISA ADP / Vulnrichment
qualcomm wsa8840_firmware همه CISA ADP / Vulnrichment
qualcomm wsa8845_firmware همه CISA ADP / Vulnrichment
qualcomm wsa8845h_firmware همه CISA ADP / Vulnrichment

منابع و راهنماها

۱
کانال تلگرام کُلون @kolunsec_fa تازه‌های KEV، خبرهای مهم و خلاصه‌ی روزانه هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۳/۰۹/۱۲
آخرین به‌روزرسانی
۱۴۰۳/۰۹/۱۳
وضعیت
منتشرشده
صادرکننده (CNA)
qualcomm

پیش‌بینی بهره‌برداری (EPSS)

۰٫۱٪
احتمال بهره‌برداری در ۳۰ روز
۰٫۹٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-121
    Stack-based Buffer Overflow