Qualcomm Snapdragon X72 5G MODEM-RF System Firmware

CPE Details

Qualcomm Snapdragon X72 5G MODEM-RF System Firmware
-
2024-10-09
13h04 +00:00
2024-10-09
13h04 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:o:qualcomm:snapdragon_x72_5g_modem-rf_system_firmware:-:*:*:*:*:*:*:*

Informations

Vendor

qualcomm

Product

snapdragon_x72_5g_modem-rf_system_firmware

Version

-

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2024-38404 2025-02-03 16h51 +00:00 Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.
7.5
Haute
CVE-2024-33063 2024-12-02 10h18 +00:00 Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.
7.5
Haute
CVE-2024-33056 2024-12-02 10h18 +00:00 Memory corruption when allocating and accessing an entry in an SMEM partition continuously.
8.4
Haute
CVE-2024-33044 2024-12-02 10h18 +00:00 Memory corruption while Configuring the SMR/S2CR register in Bypass mode.
8.4
Haute
CVE-2024-38424 2024-11-04 10h05 +00:00 Memory corruption during GNSS HAL process initialization.
7.8
Haute
CVE-2024-38422 2024-11-04 10h04 +00:00 Memory corruption while processing voice packet with arbitrary data received from ADSP.
7.8
Haute
CVE-2024-38419 2024-11-04 10h04 +00:00 Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
7.8
Haute
CVE-2024-38408 2024-11-04 10h04 +00:00 Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
9.1
Critique
CVE-2024-38405 2024-11-04 10h04 +00:00 Transient DOS while processing the CU information from RNR IE.
7.5
Haute
CVE-2024-38403 2024-11-04 10h04 +00:00 Transient DOS while parsing BTM ML IE when per STA profile is not included.
7.5
Haute
CVE-2024-33068 2024-11-04 10h04 +00:00 Transient DOS while parsing fragments of MBSSID IE from beacon frame.
7.5
Haute
CVE-2024-33031 2024-11-04 10h04 +00:00 Memory corruption while processing the update SIM PB records request.
6.7
Moyen
CVE-2024-33030 2024-11-04 10h04 +00:00 Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.
6.7
Moyen
CVE-2024-23385 2024-11-04 10h04 +00:00 Transient DOS as modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is seen at UE.
7.5
Haute
CVE-2024-38397 2024-10-07 12h58 +00:00 Transient DOS while parsing probe response and assoc response frame.
7.5
Haute
CVE-2024-33073 2024-10-07 12h58 +00:00 Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
8.2
Haute
CVE-2024-23369 2024-10-07 12h58 +00:00 Memory corruption when invalid length is provided from HLOS for FRS/UDS request/response buffers.
7.8
Haute
CVE-2024-38401 2024-09-02 10h22 +00:00 Memory corruption while processing concurrent IOCTL calls.
7.8
Haute
CVE-2024-33060 2024-09-02 10h22 +00:00 Memory corruption when two threads try to map and unmap a single node simultaneously.
8.4
Haute
CVE-2024-33057 2024-09-02 10h22 +00:00 Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
7.5
Haute
CVE-2024-33050 2024-09-02 10h22 +00:00 Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
7.5
Haute
CVE-2024-33048 2024-09-02 10h22 +00:00 Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
7.5
Haute
CVE-2024-33028 2024-08-05 14h21 +00:00 Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released.
8.4
Haute
CVE-2024-33026 2024-08-05 14h21 +00:00 Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.
7.5
Haute
CVE-2024-33024 2024-08-05 14h21 +00:00 Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.
7.5
Haute
CVE-2024-33022 2024-08-05 14h21 +00:00 Memory corruption while allocating memory in HGSL driver.
8.4
Haute
CVE-2024-33021 2024-08-05 14h21 +00:00 Memory corruption while processing IOCTL call to set metainfo.
8.4
Haute
CVE-2024-33020 2024-08-05 14h21 +00:00 Transient DOS while processing TID-to-link mapping IE elements.
7.5
Haute
CVE-2024-33019 2024-08-05 14h21 +00:00 Transient DOS while parsing the received TID-to-link mapping action frame.
7.5
Haute
CVE-2024-33018 2024-08-05 14h21 +00:00 Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.
7.5
Haute
CVE-2024-33015 2024-08-05 14h21 +00:00 Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.
7.5
Haute
CVE-2024-33014 2024-08-05 14h21 +00:00 Transient DOS while parsing ESP IE from beacon/probe response frame.
7.5
Haute
CVE-2024-33013 2024-08-05 14h21 +00:00 Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
7.5
Haute
CVE-2024-33012 2024-08-05 14h21 +00:00 Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.
7.5
Haute
CVE-2024-33011 2024-08-05 14h21 +00:00 Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
7.5
Haute
CVE-2024-33010 2024-08-05 14h21 +00:00 Transient DOS while parsing fragments of MBSSID IE from beacon frame.
7.5
Haute
CVE-2024-23357 2024-08-05 14h21 +00:00 Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus.
6.2
Moyen
CVE-2024-23356 2024-08-05 14h21 +00:00 Memory corruption during session sign renewal request calls in HLOS.
7.8
Haute
CVE-2024-23355 2024-08-05 14h21 +00:00 Memory corruption when keymaster operation imports a shared key.
7.8
Haute
CVE-2024-23353 2024-08-05 14h21 +00:00 Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.
7.5
Haute
CVE-2024-23352 2024-08-05 14h21 +00:00 Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.
7.5
Haute
CVE-2024-23350 2024-08-05 14h21 +00:00 Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network.
6.5
Moyen
CVE-2024-21481 2024-08-05 14h21 +00:00 Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager.
8.4
Haute
CVE-2024-21479 2024-08-05 14h21 +00:00 Transient DOS during music playback of ALAC content.
7.5
Haute
CVE-2024-21459 2024-08-05 14h21 +00:00 Information disclosure while handling beacon or probe response frame in STA.
7.5
Haute
CVE-2024-23368 2024-07-01 14h17 +00:00 Memory corruption when allocating and accessing an entry in an SMEM partition.
7.8
Haute
CVE-2024-21469 2024-07-01 14h17 +00:00 Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
7.8
Haute
CVE-2024-21465 2024-07-01 14h17 +00:00 Memory corruption while processing key blob passed by the user.
7.8
Haute
CVE-2024-21462 2024-07-01 14h17 +00:00 Transient DOS while loading the TA ELF file.
7.1
Haute
CVE-2024-21461 2024-07-01 14h17 +00:00 Memory corruption while performing finish HMAC operation when context is freed by keymaster.
8.4
Haute
CVE-2024-21458 2024-07-01 14h17 +00:00 Information disclosure while handling SA query action frame.
7.5
Haute
CVE-2024-21457 2024-07-01 14h17 +00:00 INformation disclosure while handling Multi-link IE in beacon frame.
7.5
Haute
CVE-2024-21456 2024-07-01 14h17 +00:00 Information Disclosure while parsing beacon frame in STA.
9.1
Critique