BDU:2025-06392

Опубликовано: 02 дек. 2024

Источник: fstec

CVSS3: 8.2

CVSS2: 8.5

EPSS Низкий

Описание

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть защищаемую информацию при обработке протокола RTCP

Вендор

Qualcomm Technologies Inc.

Наименование ПО

Qualcomm SXR2130

Qualcomm SDM429W

SD 8 Gen1 5G

WCD9380

WSA8830

WSA8835

AQT1000

Qualcomm SD865 5G

Qualcomm SD888

Qualcomm SM7250P

Qualcomm SM7315

Qualcomm SM7325P

Qualcomm SW5100

Qualcomm SW5100P

Qualcomm WCD9326

Qualcomm WCD9335

Qualcomm WCN3615

Qualcomm WCN3660B

Qualcomm WCN3680B

Qualcomm WCN3910

SD730

Qualcomm SD855

Qualcomm SM4125

Qualcomm SM6250

Qualcomm WCN3990

SD660

Qualcomm SD835

SD670

Qualcomm WCN3610

Qualcomm WCN3620

Qualcomm WCN3680

Snapdragon 429 Mobile Platform

Snapdragon 835 Mobile PC Platform

Snapdragon 855 Mobile Platform

Snapdragon 855+/860 Mobile Platform (SM8150-AC)

Snapdragon 865 5G Mobile Platform

Snapdragon 865+ 5G Mobile Platform (SM8250-AB)

Snapdragon 870 5G Mobile Platform (SM8250-AC)

Snapdragon W5+ Gen 1 Wearable Platform

Snapdragon X55 5G Modem-RF System

Snapdragon XR2 5G Platform

Snapdragon X50 5G Modem-RF System

Snapdragon 8 Gen 1 Mobile Platform

Snapdragon 888 5G Mobile Platform

Snapdragon 888+ 5G Mobile Platform (SM8350-AC)

Snapdragon 765 5G Mobile Platform (SM7250-AA)

Snapdragon 765G 5G Mobile Platform (SM7250-AB)

Snapdragon 768G 5G Mobile Platform (SM7250-AC)

Snapdragon 4 Gen 1 Mobile Platform

Snapdragon 460 Mobile Platform

Snapdragon 480 5G Mobile Platform

Snapdragon 480+ 5G Mobile Platform (SM4350-AC)

Snapdragon 662 Mobile Platform

Snapdragon 670 Mobile Platform

Snapdragon 675 Mobile Platform

Snapdragon 678 Mobile Platform (SM6150-AC)

Snapdragon 680 4G Mobile Platform

Snapdragon 685 4G Mobile Platform (SM6225-AD)

Snapdragon 690 5G Mobile Platform

Snapdragon 695 5G Mobile Platform

Snapdragon 720G Mobile Platform

Snapdragon 730 Mobile Platform (SM7150-AA)

Snapdragon 730G Mobile Platform (SM7150-AB)

Snapdragon 732G Mobile Platform (SM7150-AC)

Snapdragon 750G 5G Mobile Platform

Snapdragon 778G 5G Mobile Platform

Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)

Snapdragon 780G 5G Mobile Platform

Snapdragon 782G Mobile Platform (SM7325-AF)

Snapdragon 7c+ Gen 3 Compute Platform

Snapdragon 8+ Gen 1 Mobile Platform

Snapdragon 845 Mobile Platform

Snapdragon XR2+ Gen 1 Platform

Qualcomm Vision Intelligence 300 Platform

Qualcomm Vision Intelligence 400 Platform

205 Mobile Platform

215 Mobile Platform

Qualcomm® Video Collaboration VC1 Platform

Qualcomm® Video Collaboration VC3 Platform

Qualcomm SG4150P

Qualcomm Snapdragon 210 Processor

Qualcomm Snapdragon 212 Mobile Platform

Qualcomm Snapdragon 4 Gen 2 Mobile Platform

Qualcomm Snapdragon 439 Mobile Platform

Snapdragon 8 Gen 2 Mobile Platform

Snapdragon 8+ Gen 2 Mobile Platform

SA4155P

SA8770P

QCA6574

QCA6574A

QCA6574AU

QCA6678AQ

SD626

Qualcomm Smart Display 200 Platform (APQ5053-AA)

Qualcomm Snapdragon 636 Mobile Platform

Qualcomm Snapdragon 660 Mobile Platform

Snapdragon 710 Mobile Platform

Snapdragon 8 Gen 3 Mobile Platform

Snapdragon XR1 Platform

SXR1120

Vision Intelligence 100 Platform (APQ8053-AA)

Vision Intelligence 200 Platform (APQ8053-AC)

SA4150P

SA8775P

Qualcomm Snapdragon 425 Mobile Platform

Qualcomm Snapdragon 625 Mobile Platform

Qualcomm Snapdragon 626 Mobile Platform

Qualcomm Snapdragon 630 Mobile Platform

Qualcomm Snapdragon 632 Mobile Platform

QAM8620P

SA7775P

SA8620P

SA8650P

SM6370

SRV1H

SRV1L

SRV1M

TalynPlus

QCA6688AQ

QCS9100

SM4635

SM8750

SM8750P

WCN7860

WCN7861

WCN7880

WCN7881

FastConnect 6700

FastConnect 6900

FastConnect 7800

QCS4490

QCM4490

WCD9370

WCD9390

WCD9395

WCN3950

WCN6740

WSA8810

WSA8815

WSA8832

WSA8840

WSA8845

WSA8845H

QAM8255P

QAM8295P

QAM8650P

QAM8775P

QAMSRV1H

QAMSRV1M

QCA6595

QCA6595AU

QCA6696

QCA6698AQ

QCA6797AQ

QCM5430

QCM6490

QCM8550

QCN9012

QCN9274

QCS410

QCS5430

QCS610

QCS6490

QCS8550

SA6155P

SA7255P

SA8155P

SA8195P

SA8255P

SA8295P

SA9000P

SDX55

SM6650

SM7635

SM7675

SM7675P

SM8550P

SM8635

SM8635P

WCD9340

WCD9341

WCD9375

WCD9378

WCD9385

WCN3980

WCN3988

WCN6450

WCN6650

WCN6755

SM6650P

SM8650Q

WSN7750

SM8735

QMP1000

APQ8017

FastConnect 6200

FastConnect 6800

QCA6391

QCA6420

QCA6421

QCA6426

QCA6430

QCA6431

QCA6436

QCM2150

QCM2290

QCM4290

QCM4325

QCM6125

QCN9011

QCS2290

QCS4290

QCS6125

QCS615

QCS8300

SA6145P

SA6150P

SA6155

SA8145P

SA8150P

SA8155

Robotics RB3 Platform

QCA6310

QCA6335

QCA6320

Версия ПО

- (Qualcomm SXR2130)

- (Qualcomm SDM429W)

- (SD 8 Gen1 5G)

- (WCD9380)

- (WSA8830)

- (WSA8835)

- (AQT1000)

- (Qualcomm SD865 5G)

- (Qualcomm SD888)

- (Qualcomm SM7250P)

- (Qualcomm SM7315)

- (Qualcomm SM7325P)

- (Qualcomm SW5100)

- (Qualcomm SW5100P)

- (Qualcomm WCD9326)

- (Qualcomm WCD9335)

- (Qualcomm WCN3615)

- (Qualcomm WCN3660B)

- (Qualcomm WCN3680B)

- (Qualcomm WCN3910)

- (SD730)

- (Qualcomm SD855)

- (Qualcomm SM4125)

- (Qualcomm SM6250)

- (Qualcomm WCN3990)

- (SD660)

- (Qualcomm SD835)

- (SD670)

- (Qualcomm WCN3610)

- (Qualcomm WCN3620)

- (Qualcomm WCN3680)

- (Snapdragon 429 Mobile Platform)

- (Snapdragon 835 Mobile PC Platform)

- (Snapdragon 855 Mobile Platform)

- (Snapdragon 855+/860 Mobile Platform (SM8150-AC))

- (Snapdragon 865 5G Mobile Platform)

- (Snapdragon 865+ 5G Mobile Platform (SM8250-AB))

- (Snapdragon 870 5G Mobile Platform (SM8250-AC))

- (Snapdragon W5+ Gen 1 Wearable Platform)

- (Snapdragon X55 5G Modem-RF System)

- (Snapdragon XR2 5G Platform)

- (Snapdragon X50 5G Modem-RF System)

- (Snapdragon 8 Gen 1 Mobile Platform)

- (Snapdragon 888 5G Mobile Platform)

- (Snapdragon 888+ 5G Mobile Platform (SM8350-AC))

- (Snapdragon 765 5G Mobile Platform (SM7250-AA))

- (Snapdragon 765G 5G Mobile Platform (SM7250-AB))

- (Snapdragon 768G 5G Mobile Platform (SM7250-AC))

- (Snapdragon 4 Gen 1 Mobile Platform)

- (Snapdragon 460 Mobile Platform)

- (Snapdragon 480 5G Mobile Platform)

- (Snapdragon 480+ 5G Mobile Platform (SM4350-AC))

- (Snapdragon 662 Mobile Platform)

- (Snapdragon 670 Mobile Platform)

- (Snapdragon 675 Mobile Platform)

- (Snapdragon 678 Mobile Platform (SM6150-AC))

- (Snapdragon 680 4G Mobile Platform)

- (Snapdragon 685 4G Mobile Platform (SM6225-AD))

- (Snapdragon 690 5G Mobile Platform)

- (Snapdragon 695 5G Mobile Platform)

- (Snapdragon 720G Mobile Platform)

- (Snapdragon 730 Mobile Platform (SM7150-AA))

- (Snapdragon 730G Mobile Platform (SM7150-AB))

- (Snapdragon 732G Mobile Platform (SM7150-AC))

- (Snapdragon 750G 5G Mobile Platform)

- (Snapdragon 778G 5G Mobile Platform)

- (Snapdragon 778G+ 5G Mobile Platform (SM7325-AE))

- (Snapdragon 780G 5G Mobile Platform)

- (Snapdragon 782G Mobile Platform (SM7325-AF))

- (Snapdragon 7c+ Gen 3 Compute Platform)

- (Snapdragon 8+ Gen 1 Mobile Platform)

- (Snapdragon 845 Mobile Platform)

- (Snapdragon XR2+ Gen 1 Platform)

- (Qualcomm Vision Intelligence 300 Platform)

- (Qualcomm Vision Intelligence 400 Platform)

- (205 Mobile Platform)

- (215 Mobile Platform)

- (Qualcomm® Video Collaboration VC1 Platform)

- (Qualcomm® Video Collaboration VC3 Platform)

- (Qualcomm SG4150P)

- (Qualcomm Snapdragon 210 Processor)

- (Qualcomm Snapdragon 212 Mobile Platform)

- (Qualcomm Snapdragon 4 Gen 2 Mobile Platform)

- (Qualcomm Snapdragon 439 Mobile Platform)

- (Snapdragon 8 Gen 2 Mobile Platform)

- (Snapdragon 8+ Gen 2 Mobile Platform)

- (SA4155P)

- (SA8770P)

- (QCA6574)

- (QCA6574A)

- (QCA6574AU)

- (QCA6678AQ)

- (SD626)

- (Qualcomm Smart Display 200 Platform (APQ5053-AA))

- (Qualcomm Snapdragon 636 Mobile Platform)

- (Qualcomm Snapdragon 660 Mobile Platform)

- (Snapdragon 710 Mobile Platform)

- (Snapdragon 8 Gen 3 Mobile Platform)

- (Snapdragon XR1 Platform)

- (SXR1120)

- (Vision Intelligence 100 Platform (APQ8053-AA))

- (Vision Intelligence 200 Platform (APQ8053-AC))

- (SA4150P)

- (SA8775P)

- (Qualcomm Snapdragon 425 Mobile Platform)

- (Qualcomm Snapdragon 625 Mobile Platform)

- (Qualcomm Snapdragon 626 Mobile Platform)

- (Qualcomm Snapdragon 630 Mobile Platform)

- (Qualcomm Snapdragon 632 Mobile Platform)

- (QAM8620P)

- (SA7775P)

- (SA8620P)

- (SA8650P)

- (SM6370)

- (SRV1H)

- (SRV1L)

- (SRV1M)

- (TalynPlus)

- (QCA6688AQ)

- (QCS9100)

- (SM4635)

- (SM8750)

- (SM8750P)

- (WCN7860)

- (WCN7861)

- (WCN7880)

- (WCN7881)

- (FastConnect 6700)

- (FastConnect 6900)

- (FastConnect 7800)

- (QCS4490)

- (QCM4490)

- (WCD9370)

- (WCD9390)

- (WCD9395)

- (WCN3950)

- (WCN6740)

- (WSA8810)

- (WSA8815)

- (WSA8832)

- (WSA8840)

- (WSA8845)

- (WSA8845H)

- (QAM8255P)

- (QAM8295P)

- (QAM8650P)

- (QAM8775P)

- (QAMSRV1H)

- (QAMSRV1M)

- (QCA6595)

- (QCA6595AU)

- (QCA6696)

- (QCA6698AQ)

- (QCA6797AQ)

- (QCM5430)

- (QCM6490)

- (QCM8550)

- (QCN9012)

- (QCN9274)

- (QCS410)

- (QCS5430)

- (QCS610)

- (QCS6490)

- (QCS8550)

- (SA6155P)

- (SA7255P)

- (SA8155P)

- (SA8195P)

- (SA8255P)

- (SA8295P)

- (SA9000P)

- (SDX55)

- (SM6650)

- (SM7635)

- (SM7675)

- (SM7675P)

- (SM8550P)

- (SM8635)

- (SM8635P)

- (WCD9340)

- (WCD9341)

- (WCD9375)

- (WCD9378)

- (WCD9385)

- (WCN3980)

- (WCN3988)

- (WCN6450)

- (WCN6650)

- (WCN6755)

- (SM6650P)

- (SM8650Q)

- (WSN7750)

- (SM8735)

- (QMP1000)

- (APQ8017)

- (FastConnect 6200)

- (FastConnect 6800)

- (QCA6391)

- (QCA6420)

- (QCA6421)

- (QCA6426)

- (QCA6430)

- (QCA6431)

- (QCA6436)

- (QCM2150)

- (QCM2290)

- (QCM4290)

- (QCM4325)

- (QCM6125)

- (QCN9011)

- (QCS2290)

- (QCS4290)

- (QCS6125)

- (QCS615)

- (QCS8300)

- (SA6145P)

- (SA6150P)

- (SA6155)

- (SA8145P)

- (SA8150P)

- (SA8155)

- (Robotics RB3 Platform)

- (QCA6310)

- (QCA6335)

- (QCA6320)

Тип ПО

Микропрограммный код

Сетевое средство

Микропрограммный код аппаратных компонент компьютера

Операционные системы и аппаратные платформы

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 8,5)

Высокий уровень опасности (базовая оценка CVSS 3.1 составляет 8,2)

Возможные меры по устранению уязвимости

Использование рекомендаций:

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html#_cve-2024-53021

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html#_cve-2024-53021

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-53021
CVE

EPSS

Процентиль: 17%

0.00055

Низкий

8.2 High

CVSS3

8.5 High

CVSS2

Связанные уязвимости

CVE-2024-53021

CVSS3: 8.2

nvd

8 месяцев назад

Information disclosure may occur while processing goodbye RTCP packet from network.

GHSA-qm7w-cjmv-j299

CVSS3: 8.2

github

8 месяцев назад

Information disclosure may occur while processing goodbye RTCP packet from network.

EPSS

Процентиль: 17%

0.00055

Низкий

8.2 High

CVSS3

8.5 High

CVSS2