ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2024-21476
7.8высокая

CVE-2024-21476

Описание

Memory corruption when the channel ID passed by user is not validated and further used.

Затрагиваемое ПО
Qualcomm Aqt1000 firmwareQualcomm Aqt1000Qualcomm Ar8035 firmwareQualcomm Ar8035Qualcomm Fastconnect 6200 firmwareQualcomm Fastconnect 6200Qualcomm Fastconnect 6800 firmwareQualcomm Fastconnect 6800Qualcomm Fastconnect 6900 firmwareQualcomm Fastconnect 6900Qualcomm Fastconnect 7800 firmwareQualcomm Fastconnect 7800Qualcomm Qca1062 firmwareQualcomm Qca1062Qualcomm Qca1064 firmwareQualcomm Qca1064Qualcomm Qca6391 firmwareQualcomm Qca6391Qualcomm Qca6420 firmwareQualcomm Qca6420Qualcomm Qca6421 firmwareQualcomm Qca6421Qualcomm Qca6426 firmwareQualcomm Qca6426Qualcomm Qca6430 firmware
CVSS
Балл7.8 — высокая
ВекторCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.htmlhttps://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html