Qualcomm
Qualcomm Qca6390 Firmware: vulnerabilidades y CVE
Qualcomm Qca6390 Firmware tiene 518 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 83 son críticas y 5 figuran en el catálogo de explotación activa de CISA.
CVE518
Últimos 12 meses0
Críticas83
Explotadas activamente5
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-22071 | Alta (7.8) | 0.46% | ⚠ Explotación activa | 14 jun 2022 | Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… |
| CVE-2023-33063 | Alta (7.8) | 0.69% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in DSP Services during a remote call from HLOS to DSP. |
| CVE-2020-11261 | Alta (7.8) | 1.6% | ⚠ Explotación activa | 9 jun 2021 | Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… |
| CVE-2021-1906 | Media (5.5) | 0.52% | ⚠ Explotación activa | 7 may 2021 | Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… |
| CVE-2021-1905 | Alta (7.8) | 1.5% | ⚠ Explotación activa | 7 may 2021 | Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2021-30299 | Media (6.7) | 0.12% | — | 22 nov 2024 | Possible out of bound access in audio module due to lack of validation of user provided input. |
| CVE-2023-33081 | Alta (7.5) | 0.47% | — | 5 dic 2023 | Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast. |
| CVE-2023-33080 | Alta (7.5) | 0.34% | — | 5 dic 2023 | Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame. |
| CVE-2023-33079 | Alta (7.8) | 0.16% | — | 5 dic 2023 | Memory corruption in Audio while running invalid audio recording from ADSP. |
| CVE-2023-33063 | Alta (7.8) | 0.69% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in DSP Services during a remote call from HLOS to DSP. |
| CVE-2023-33044 | Alta (7.5) | 0.52% | — | 5 dic 2023 | Transient DOS in Data modem while handling TLB control messages from the Network. |
| CVE-2023-33042 | Alta (7.5) | 0.61% | — | 5 dic 2023 | Transient DOS in Modem after RRC Setup message is received. |
| CVE-2023-33024 | Alta (7.8) | 0.16% | — | 5 dic 2023 | Memory corruption while sending SMS from AP firmware. |
| CVE-2023-33022 | Alta (7.8) | 0.16% | — | 5 dic 2023 | Memory corruption in HLOS while invoking IOCTL calls from user-space. |
| CVE-2023-33018 | Alta (7.8) | 0.11% | — | 5 dic 2023 | Memory corruption while using the UIM diag command to get the operators name. |
| CVE-2023-33017 | Alta (7.8) | 0.16% | — | 5 dic 2023 | Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. |
| CVE-2023-33059 | Alta (7.8) | 0.11% | — | 7 nov 2023 | Memory corruption in Audio while processing the VOC packet data from ADSP. |
| CVE-2023-33047 | Alta (7.5) | 0.43% | — | 7 nov 2023 | Transient DOS in WLAN Firmware while parsing no-inherit IES. |
| CVE-2023-33045 | Crítica (9.8) | 0.47% | — | 7 nov 2023 | Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. |
| CVE-2023-33031 | Alta (7.8) | 0.11% | — | 7 nov 2023 | Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer. |
| CVE-2023-33035 | Alta (7.8) | 0.11% | — | 3 oct 2023 | Memory corruption while invoking callback function of AFE from ADSP. |
| CVE-2023-33028 | Crítica (9.8) | 0.54% | — | 3 oct 2023 | Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. |
| CVE-2023-33027 | Alta (7.5) | 0.32% | — | 3 oct 2023 | Transient DOS in WLAN Firmware while parsing rsn ies. |
| CVE-2023-28571 | Media (5.5) | 0.11% | — | 3 oct 2023 | Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan. |
| CVE-2023-28540 | Alta (7.5) | 0.43% | — | 3 oct 2023 | Cryptographic issue in Data Modem due to improper authentication during TLS handshake. |
| CVE-2023-28560 | Alta (7.8) | 0.12% | — | 5 sept 2023 | Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. |
| CVE-2023-21667 | Media (6.5) | 0.37% | — | 5 sept 2023 | Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard. |
| CVE-2023-21664 | Alta (7.8) | 0.12% | — | 5 sept 2023 | Memory Corruption in Core Platform while printing the response buffer in log. |
| CVE-2023-21662 | Alta (7.8) | 0.12% | — | 5 sept 2023 | Memory corruption in Core Platform while printing the response buffer in log. |
| CVE-2023-21654 | Alta (7.8) | 0.11% | — | 5 sept 2023 | Memory corruption in Audio during playback session with audio effects enabled. |
| CVE-2023-21646 | Alta (7.5) | 0.38% | — | 5 sept 2023 | Transient DOS in Modem while processing invalid System Information Block 1. |
| CVE-2023-21644 | Alta (7.8) | 0.11% | — | 5 sept 2023 | Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request. |
| CVE-2023-21636 | Alta (7.8) | 0.11% | — | 5 sept 2023 | Memory Corruption due to improper validation of array index in Linux while updating adn record. |
| CVE-2022-40524 | Alta (7.8) | 0.11% | — | 5 sept 2023 | Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service. |
| CVE-2022-33275 | Alta (7.8) | 0.12% | — | 5 sept 2023 | Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.