CVE-2024-23366

Medium CVSS: 6.6

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

Vendor

Product

CWE

Yayın Tarihi

2025-01-06 11:15:07

Güncelleme

2025-01-10 17:20:45

Source Identifier

product-security@qualcomm.com

KEV Date Added

CWE-126 Qam8255p Firmware MEDIUM Qualcomm 2025

https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html

High

CVE-2026-21385

Memory corruption while using alignments for memory allocation.

High

CVE-2025-59600

Memory Corruption when adding user-supplied data without checking available buffer space.

High

CVE-2025-59603

Memory Corruption when processing invalid user address with nonstandard buffer address.

High

CVE-2025-47385

Memory Corruption when accessing trusted execution environment without proper privilege check.

High

CVE-2025-47386

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.

High

CVE-2025-47381

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.