cve.bz

qualcomm fastconnect 6900 firmware vulnerabilities, newest first, page 7

Filter
  1. 7.8CVE-2024-49840EPSS 0.07%

    Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.

  2. 9.8CVE-2024-49839EPSS 0.3%

    Memory corruption during management frame processing due to mismatch in T2LM info element.

  3. 7.5CVE-2024-49838EPSS 0.3%

    Information disclosure while parsing the OCI IE with invalid length.

  4. 7.8CVE-2024-49834EPSS 0.1%

    Memory corruption while power-up or power-down sequence of the camera sensor.

  5. 7.8CVE-2024-49833EPSS 0.1%

    Memory corruption can occur in the camera when an invalid CID is used.

  6. 7.8CVE-2024-49832EPSS 0.1%

    Memory corruption in Camera due to unusually high number of nodes passed to AXI port.

  7. 7.8CVE-2024-45584EPSS 0.1%

    Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.

  8. 7.8CVE-2024-45582EPSS 0.1%

    Memory corruption while validating number of devices in Camera kernel .

  9. 7.8CVE-2024-45573EPSS 0.1%

    Memory corruption may occour while generating test pattern due to negative indexing of display ID.

  10. 7.8CVE-2024-45571EPSS 0.1%

    Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.

  11. 9.8CVE-2024-45569EPSS 0.6%

    Memory corruption while parsing the ML IE due to invalid frame content.

  12. 7.8CVE-2024-45561EPSS 0.1%

    Memory corruption while handling IOCTL call from user-space to set latency level.

  13. 7.0CVE-2024-45560EPSS 0.07%

    Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.

  14. 7.8CVE-2024-38420EPSS 0.1%

    Memory corruption while configuring a Hypervisor based input virtual device.

  15. 7.0CVE-2024-38418EPSS 0.07%

    Memory corruption while parsing the memory map info in IOCTL calls.

  16. 5.5CVE-2024-38417EPSS 0.1%

    Information disclosure while processing IO control commands.

  17. 5.5CVE-2024-38416EPSS 0.1%

    Information disclosure during audio playback.

  18. 5.5CVE-2024-38414EPSS 0.1%

    Information disclosure while processing information on firmware image during core initialization.

  19. 7.8CVE-2024-38411EPSS 0.1%

    Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls.

  20. 7.5CVE-2024-45558EPSS 0.4%

    Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.

  21. 7.8CVE-2024-45553EPSS 0.1%

    Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.

  22. 7.8CVE-2024-45550EPSS 0.1%

    Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.

  23. 7.8CVE-2024-45548EPSS 0.09%

    Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.

  24. 7.8CVE-2024-45547EPSS 0.07%

    Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.

  25. 7.8CVE-2024-45546EPSS 0.09%

    Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.

  26. 7.8CVE-2024-45542EPSS 0.1%

    Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

  27. 7.8CVE-2024-45541EPSS 0.1%

    Memory corruption when IOCTL call is invoked from user-space to read board data.

  28. 5.5CVE-2024-33067EPSS 0.1%

    Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.

  29. 7.8CVE-2024-33059EPSS 0.1%

    Memory corruption while processing frame command IOCTL calls.

  30. 7.8CVE-2024-33055EPSS 0.1%

    Memory corruption while invoking IOCTL calls to unmap the DMA buffers.

  31. 7.8CVE-2024-33041EPSS 0.1%

    Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,

  32. 7.8CVE-2024-21464EPSS 0.1%

    Memory corruption while processing IPA statistics, when there are no active clients registered.

  33. 7.8CVE-2024-43053EPSS 0.1%

    Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.

  34. 7.8CVE-2024-43052EPSS 0.1%

    Memory corruption while processing API calls to NPU with invalid input.

  35. 7.8CVE-2024-43050EPSS 0.1%

    Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

  36. 7.8CVE-2024-43049EPSS 0.1%

    Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.

  37. 7.8CVE-2024-43048EPSS 0.1%

    Memory corruption when invalid input is passed to invoke GPU Headroom API call.

  38. 7.5CVE-2024-33063EPSS 0.3%

    Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.

  39. 7.8CVE-2024-33056EPSS 0.1%

    Memory corruption when allocating and accessing an entry in an SMEM partition continuously.

  40. 6.7CVE-2024-33053EPSS 0.1%

    Memory corruption when multiple threads try to unregister the CVP buffer at the same time.

  41. 7.8CVE-2024-33044EPSS 0.1%

    Memory corruption while Configuring the SMR/S2CR register in Bypass mode.

  42. 7.0CVE-2024-33040EPSS 0.09%

    Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.

  43. 6.1CVE-2024-33037EPSS 0.1%

    Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.

  44. 6.7CVE-2024-33036EPSS 0.1%

    Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.

  45. 7.8CVE-2024-38424EPSS 0.1%

    Memory corruption during GNSS HAL process initialization.

  46. 7.8CVE-2024-38423EPSS 0.1%

    Memory corruption while processing GPU page table switch.

  47. 7.8CVE-2024-38422EPSS 0.1%

    Memory corruption while processing voice packet with arbitrary data received from ADSP.

  48. 7.8CVE-2024-38419EPSS 0.1%

    Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

  49. 7.8CVE-2024-38415EPSS 0.1%

    Memory corruption while handling session errors from firmware.

  50. 7.8CVE-2024-38410EPSS 0.1%

    Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.