Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-33008 State: PUBLISHED Published: 2024-05-14T03:46:17.394Z Last Updated: 2024-09-26T18:28:15.789Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: SAP_SE Products: SAP Replication Server Problem Types: CWE-787 Description: SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crashing the Replication Server due to memory corruption with high impact on Availability of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3349468 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html
CVE ID: CVE-2024-33009 State: PUBLISHED Published: 2024-05-14T03:58:53.953Z Last Updated: 2024-08-02T02:27:53.583Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP Global Label Management (GLM) Problem Types: CWE-89 Description: SAP Global Label Management is vulnerable to SQL injection. On exploitation the attacker can use specially crafted inputs to modify database commands resulting in the retrieval of additional information persisted by the system. This could lead to low impact on Confidentiality and Integrity of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.c
application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/1938764 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html
CVE ID: CVE-2024-33010 State: PUBLISHED Published: 2024-08-05T14:21:30.704Z Last Updated: 2024-08-05T15:38:42.755Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Transient DOS while parsing fragments of MBSSID IE from beacon frame. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33011 State: PUBLISHED Published: 2024-08-05T14:21:31.845Z Last Updated: 2024-08-05T15:38:17.772Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33012 State: PUBLISHED Published: 2024-08-05T14:21:33.219Z Last Updated: 2024-08-05T15:35:49.399Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33013 State: PUBLISHED Published: 2024-08-05T14:21:34.386Z Last Updated: 2024-08-05T15:34:18.185Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33014 State: PUBLISHED Published: 2024-08-05T14:21:35.794Z Last Updated: 2024-08-05T15:33:16.626Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing ESP IE from beacon/probe response frame. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33015 State: PUBLISHED Published: 2024-08-05T14:21:37.096Z Last Updated: 2024-08-05T15:31:59.436Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33016 State: PUBLISHED Published: 2024-09-02T10:22:32.425Z Last Updated: 2024-09-03T14:02:35.440Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-119 Description: memory corruption when an invalid firehose patch command is invoked. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33018 State: PUBLISHED Published: 2024-08-05T14:21:38.166Z Last Updated: 2024-08-05T15:31:33.271Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33019 State: PUBLISHED Published: 2024-08-05T14:21:39.275Z Last Updated: 2024-08-05T15:29:54.891Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing the received TID-to-link mapping action frame. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33020 State: PUBLISHED Published: 2024-08-05T14:21:40.361Z Last Updated: 2024-08-05T14:47:53.939Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while processing TID-to-link mapping IE elements. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33021 State: PUBLISHED Published: 2024-08-05T14:21:41.397Z Last Updated: 2024-08-05T14:45:22.446Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-457 Description: Memory corruption while processing IOCTL call to set metainfo. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33022 State: PUBLISHED Published: 2024-08-05T14:21:42.398Z Last Updated: 2024-08-05T14:43:56.607Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Memory corruption while allocating memory in HGSL driver. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33023 State: PUBLISHED Published: 2024-08-05T14:21:43.449Z Last Updated: 2024-08-05T14:42:39.778Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33024 State: PUBLISHED Published: 2024-08-05T14:21:44.499Z Last Updated: 2024-08-05T15:21:21.294Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33025 State: PUBLISHED Published: 2024-08-05T14:21:45.607Z Last Updated: 2024-08-05T15:20:21.121Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33026 State: PUBLISHED Published: 2024-08-05T14:21:46.685Z Last Updated: 2024-08-05T15:05:33.155Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33027 State: PUBLISHED Published: 2024-08-05T14:21:47.683Z Last Updated: 2024-08-05T14:39:13.023Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-284 Description: Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33028 State: PUBLISHED Published: 2024-08-05T14:21:48.702Z Last Updated: 2024-08-05T14:37:12.190Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption as fence object may still be accessed in timeline destruct after isync fence is released. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33029 State: PUBLISHED Published: 2024-11-04T10:04:36.813Z Last Updated: 2024-11-08T04:55:11.443Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while handling the PDR in driver for getting the remote heap maps. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
CVE ID: CVE-2024-33030 State: PUBLISHED Published: 2024-11-04T10:04:38.075Z Last Updated: 2024-11-08T04:55:12.803Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
CVE ID: CVE-2024-33031 State: PUBLISHED Published: 2024-11-04T10:04:39.355Z Last Updated: 2024-11-16T04:55:29.307Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Memory corruption while processing the update SIM PB records request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
CVE ID: CVE-2024-33032 State: PUBLISHED Published: 2024-11-04T10:04:40.667Z Last Updated: 2024-11-08T04:55:14.332Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
CVE ID: CVE-2024-33033 State: PUBLISHED Published: 2024-11-04T10:04:42.013Z Last Updated: 2024-11-08T04:55:15.791Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while processing IOCTL calls to unmap the buffers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html
CVE ID: CVE-2024-33034 State: PUBLISHED Published: 2024-08-05T14:21:49.870Z Last Updated: 2024-08-05T14:37:43.199Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html
CVE ID: CVE-2024-33035 State: PUBLISHED Published: 2024-09-02T10:22:33.582Z Last Updated: 2024-09-05T03:56:07.973Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33036 State: PUBLISHED Published: 2024-12-02T10:18:39.298Z Last Updated: 2024-12-03T04:55:43.338Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html
CVE ID: CVE-2024-33037 State: PUBLISHED Published: 2024-12-02T10:18:40.468Z Last Updated: 2024-12-02T15:43:14.290Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html
CVE ID: CVE-2024-33038 State: PUBLISHED Published: 2024-09-02T10:22:34.532Z Last Updated: 2024-09-05T03:56:08.904Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-822 Description: Memory corruption while passing untrusted/corrupted pointers from DSP to EVA. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33039 State: PUBLISHED Published: 2024-12-02T10:18:41.589Z Last Updated: 2024-12-03T04:55:44.526Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-822 Description: Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html
CVE ID: CVE-2024-33040 State: PUBLISHED Published: 2024-12-02T10:18:42.745Z Last Updated: 2024-12-03T04:55:45.919Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html
CVE ID: CVE-2024-33041 State: PUBLISHED Published: 2025-01-06T10:33:14.917Z Last Updated: 2025-01-06T14:18:36.301Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls, Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html
CVE ID: CVE-2024-33042 State: PUBLISHED Published: 2024-09-02T10:22:35.443Z Last Updated: 2024-09-05T03:56:06.135Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption when Alternative Frequency offset value is set to 255. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33043 State: PUBLISHED Published: 2024-09-02T10:22:36.572Z Last Updated: 2024-09-03T13:55:47.186Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while handling PS event when Program Service name length offset value is set to 255. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33044 State: PUBLISHED Published: 2024-12-02T10:18:43.847Z Last Updated: 2024-12-03T04:55:34.319Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Memory corruption while Configuring the SMR/S2CR register in Bypass mode. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html
CVE ID: CVE-2024-33045 State: PUBLISHED Published: 2024-09-02T10:22:37.525Z Last Updated: 2024-09-05T03:56:09.849Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-562 Description: Memory corruption when BTFM client sends new messages over Slimbus to ADSP. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33047 State: PUBLISHED Published: 2024-09-02T10:22:38.462Z Last Updated: 2024-09-05T03:56:05.203Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory corruption when the captureRead QDCM command is invoked from user-space. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33048 State: PUBLISHED Published: 2024-09-02T10:22:39.387Z Last Updated: 2024-09-03T13:53:56.238Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33049 State: PUBLISHED Published: 2024-10-07T12:58:50.372Z Last Updated: 2024-10-07T13:21:17.867Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html
CVE ID: CVE-2024-33050 State: PUBLISHED Published: 2024-09-02T10:22:40.544Z Last Updated: 2024-09-03T13:52:53.129Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33051 State: PUBLISHED Published: 2024-09-02T10:22:41.891Z Last Updated: 2024-09-03T13:33:06.777Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while processing TIM IE from beacon frame as there is no check for IE length. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33052 State: PUBLISHED Published: 2024-09-02T10:22:43.062Z Last Updated: 2024-09-05T03:56:07.096Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption when user provides data for FM HCI command control operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html
CVE ID: CVE-2024-33053 State: PUBLISHED Published: 2024-12-02T10:18:44.972Z Last Updated: 2024-12-03T04:55:47.167Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption when multiple threads try to unregister the CVP buffer at the same time. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html