ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2024-49843

Qualcomm Snapdragon

Improper Validation of Array Index in Graphics_Linux

CVSS 3.1
7.8بالا

شرح رسمی (انگلیسی)

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.8بالا 3.1 CVEProject cvelistV5 (CNA) (qualcomm) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Qualcomm, Inc. Snapdragon FastConnect 6200 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon FastConnect 7800 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCA6391 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCM6125 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCS6125 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCS7230 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon QCS8250 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC1 Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Qualcomm Video Collaboration VC5 Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM4635 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM6650 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7635 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7675 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM7675P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8635 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8635P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8750 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SM8750P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SW5100 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SW5100P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon SXR2330P CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 4 Gen 1 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 480 5G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 480+ 5G Mobile Platform (SM4350-AC) CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 695 5G Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon 8 Gen 3 Mobile Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon Snapdragon W5+ Gen 1 Wearable Platform CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9370 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9375 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9378 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9380 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9385 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9390 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCD9395 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3950 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3980 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN3988 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6450 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6650 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN6755 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7860 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7861 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7880 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WCN7881 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8810 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8815 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8830 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8832 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8835 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8840 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845 CVEProject cvelistV5 (CNA)
Qualcomm, Inc. Snapdragon WSA8845H CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
کانال تلگرام کُلون @kolunsec_fa تازه‌های KEV، خبرهای مهم و خلاصه‌ی روزانه هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۳/۱۱/۱۵
آخرین به‌روزرسانی
۱۴۰۳/۱۱/۱۵
وضعیت
منتشرشده
صادرکننده (CNA)
qualcomm

پیش‌بینی بهره‌برداری (EPSS)

۰٫۱٪
احتمال بهره‌برداری در ۳۰ روز
۱٫۲٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-129
    Improper Validation of Array Index