جزئیات آسیب‌پذیری
CVE-2024-43049
Qualcomm Snapdragonqualcomm fastconnect_6700_firmwarequalcomm fastconnect_6900_firmwarequalcomm fastconnect_7800_firmwarequalcomm qcc2073_firmwarequalcomm qcc2076_firmware
Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host
CVSS 3.1
7.8بالا
شرح رسمی (انگلیسی)
Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (qualcomm) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | FastConnect 6700 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | FastConnect 6900 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | FastConnect 7800 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCC2073 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCC2076 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SC8380XP | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SDM429W | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 429 Mobile Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 7c+ Gen 3 Compute | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB) | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9380 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9385 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCN3620 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCN3660B | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8830 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8835 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8840 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8845 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8845H | CVEProject cvelistV5 (CNA) |
| qualcomm | fastconnect_6700_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | fastconnect_6900_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | fastconnect_7800_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qcc2073_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | qcc2076_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sc8380xp_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | sdm429w_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | snapdragon_429_mobile_platform_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcd9380_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcd9385_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcn3620_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wcn3660b_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wsa8830_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wsa8835_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wsa8840_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wsa8845_firmware | همه | CISA ADP / Vulnrichment |
| qualcomm | wsa8845h_firmware | همه | CISA ADP / Vulnrichment |
منابع و راهنماها
۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۳/۰۹/۱۲
- آخرین به‌روزرسانی
- ۱۴۰۳/۰۹/۱۳
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- qualcomm
پیش‌بینی بهره‌برداری (EPSS)
۰٫۱٪
احتمال بهره‌برداری در ۳۰ روز
۰٫۹٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer