جزئیات آسیب‌پذیری
CVE-2024-45557
Qualcomm Snapdragon
Use of Out-of-range Pointer Offset in Trust Management Engine
CVSS 3.1
7.8بالا
شرح رسمی (انگلیسی)
Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (qualcomm) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Qualcomm, Inc. | Snapdragon | AR8035 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | FastConnect 6700 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | FastConnect 6900 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | FastConnect 7800 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6174A | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6584AU | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA6698AQ | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA8081 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCA8337 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCC710 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCM4490 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCN6224 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCN6274 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QCS4490 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QDU1000 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QDU1010 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QDU1110 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QDU1210 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QDX1010 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QDX1011 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QEP8111 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QFW7114 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QFW7124 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QRU1032 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QRU1052 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | QRU1062 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SC8380XP | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SD 8 Gen1 5G | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SM8635 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SSG2115P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SSG2125P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SXR1230P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | SXR2230P | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 4 Gen 2 Mobile Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Gen 1 Mobile Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8 Gen 3 Mobile Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon 8+ Gen 1 Mobile Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon AR2 Gen 1 Platform | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon Auto 5G Modem-RF Gen 2 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon X35 5G Modem-RF System | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon X72 5G Modem-RF System | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | Snapdragon X75 5G Modem-RF System | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | TalynPlus | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9340 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9370 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9375 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9380 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9385 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9390 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCD9395 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCN3950 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCN3988 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WCN6755 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8810 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8815 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8830 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8832 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8835 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8840 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8845 | CVEProject cvelistV5 (CNA) |
| Qualcomm, Inc. | Snapdragon | WSA8845H | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۱/۱۸
- آخرین به‌روزرسانی
- ۱۴۰۴/۱۲/۰۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- qualcomm
پیش‌بینی بهره‌برداری (EPSS)
۰٫۱٪
احتمال بهره‌برداری در ۳۰ روز
۱٫۲٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-823Use of Out-of-range Pointer Offset