Qualcomm
Qualcomm Snapdragon 730 Mobile Platform Firmware: vulnerabilidades y CVE
Qualcomm Snapdragon 730 Mobile Platform Firmware tiene 43 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 1 figuran en el catálogo de explotación activa de CISA.
CVE43
Últimos 12 meses0
Críticas3
Explotadas activamente1
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-33107 | Alta (7.8) | 0.72% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-33056 | Alta (7.8) | 0.10% | — | 2 dic 2024 | Memory corruption when allocating and accessing an entry in an SMEM partition continuously. |
| CVE-2024-33044 | Alta (7.8) | 0.10% | — | 2 dic 2024 | Memory corruption while Configuring the SMR/S2CR register in Bypass mode. |
| CVE-2024-38423 | Alta (7.8) | 0.10% | — | 4 nov 2024 | Memory corruption while processing GPU page table switch. |
| CVE-2024-38422 | Alta (7.8) | 0.10% | — | 4 nov 2024 | Memory corruption while processing voice packet with arbitrary data received from ADSP. |
| CVE-2024-33043 | Media (5.5) | 0.09% | — | 2 sept 2024 | Transient DOS while handling PS event when Program Service name length offset value is set to 255. |
| CVE-2024-33027 | Alta (7.8) | 0.10% | — | 5 ago 2024 | Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table. |
| CVE-2024-33014 | Alta (7.5) | 0.32% | — | 5 ago 2024 | Transient DOS while parsing ESP IE from beacon/probe response frame. |
| CVE-2024-23357 | Media (5.5) | 0.09% | — | 5 ago 2024 | Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus. |
| CVE-2023-43536 | Alta (7.5) | 0.32% | — | 6 feb 2024 | Transient DOS while parse fils IE with length equal to 1. |
| CVE-2023-43533 | Alta (7.5) | 0.32% | — | 6 feb 2024 | Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame. |
| CVE-2023-43522 | Alta (7.5) | 0.32% | — | 6 feb 2024 | Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL. |
| CVE-2023-43519 | Crítica (9.8) | 0.26% | — | 6 feb 2024 | Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size. |
| CVE-2023-43518 | Crítica (9.8) | 0.26% | — | 6 feb 2024 | Memory corruption in video while parsing invalid mp2 clip. |
| CVE-2023-43513 | Alta (7.8) | 0.11% | — | 6 feb 2024 | Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element. |
| CVE-2023-43511 | Alta (7.5) | 0.32% | — | 2 ene 2024 | Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header. |
| CVE-2023-33120 | Alta (7.8) | 0.11% | — | 2 ene 2024 | Memory corruption in Audio when memory map command is executed consecutively in ADSP. |
| CVE-2023-33114 | Alta (7.8) | 0.12% | — | 2 ene 2024 | Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. |
| CVE-2023-33110 | Alta (7) | 0.08% | — | 2 ene 2024 | The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close… |
| CVE-2023-33109 | Alta (7.5) | 0.34% | — | 2 ene 2024 | Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. |
| CVE-2023-33062 | Alta (7.5) | 0.34% | — | 2 ene 2024 | Transient DOS in WLAN Firmware while parsing a BTM request. |
| CVE-2023-33040 | Alta (7.5) | 0.34% | — | 2 ene 2024 | Transient DOS in Data Modem during DTLS handshake. |
| CVE-2023-33038 | Alta (7.8) | 0.12% | — | 2 ene 2024 | Memory corruption while receiving a message in Bus Socket Transport Server. |
| CVE-2023-33033 | Alta (7.8) | 0.12% | — | 2 ene 2024 | Memory corruption in Audio during playback with speaker protection. |
| CVE-2023-33032 | Alta (7.8) | 0.12% | — | 2 ene 2024 | Memory corruption in TZ Secure OS while requesting a memory allocation from TA region. |
| CVE-2023-33030 | Alta (7.8) | 0.12% | — | 2 ene 2024 | Memory corruption in HLOS while running playready use-case. |
| CVE-2023-33107 | Alta (7.8) | 0.72% | ⚠ Explotación activa | 5 dic 2023 | Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. |
| CVE-2023-33092 | Alta (7.8) | 0.16% | — | 5 dic 2023 | Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size. |
| CVE-2023-33088 | Alta (7.8) | 0.16% | — | 5 dic 2023 | Memory corruption when processing cmd parameters while parsing vdev. |
| CVE-2023-28588 | Alta (7.5) | 0.52% | — | 5 dic 2023 | Transient DOS in Bluetooth Host while rfc slot allocation. |
| CVE-2023-28586 | Media (6.5) | 0.14% | — | 5 dic 2023 | Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.