Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

fstec Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

BDU:2025-06405

ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 24 янв. 2025
Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ: fstec
CVSS3: 8.6
CVSS2: 7.2
EPSS Низкий

ОписаниС

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ графичСского процСссора ΠΌΠΈΠΊΡ€ΠΎΠΏΡ€ΠΎΠ³Ρ€Π°ΠΌΠΌΠ½ΠΎΠ³ΠΎ обСспСчСния встраиваСмых ΠΏΠ»Π°Ρ‚ Qualcomm связана с нСдостатками ΠΌΠ΅Ρ…Π°Π½ΠΈΠ·ΠΌΠ° Π°Π²Ρ‚ΠΎΡ€ΠΈΠ·Π°Ρ†ΠΈΠΈ. Эксплуатация уязвимости ΠΌΠΎΠΆΠ΅Ρ‚ ΠΏΠΎΠ·Π²ΠΎΠ»ΠΈΡ‚ΡŒ Π½Π°Ρ€ΡƒΡˆΠΈΡ‚Π΅Π»ΡŽ Π²Ρ‹ΠΏΠΎΠ»Π½ΠΈΡ‚ΡŒ ΠΏΡ€ΠΎΠΈΠ·Π²ΠΎΠ»ΡŒΠ½Ρ‹Π΅ ΠΊΠΎΠΌΠ°Π½Π΄Ρ‹

Π’Π΅Π½Π΄ΠΎΡ€

Qualcomm Technologies Inc.

НаимСнованиС ПО

WCD9380
WSA8830
WSA8835
AQT1000
Qualcomm QCA6391
Qualcomm SM7325P
Qualcomm SD855
Qualcomm SM6250
Qualcomm FastConnect 6200
Qualcomm FastConnect 6800
Snapdragon 855 Mobile Platform
Snapdragon 855+/860 Mobile Platform (SM8150-AC)
Snapdragon 865 5G Mobile Platform
Snapdragon 865+ 5G Mobile Platform (SM8250-AB)
Snapdragon 870 5G Mobile Platform (SM8250-AC)
Snapdragon X55 5G Modem-RF System
Snapdragon 888 5G Mobile Platform
Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
Snapdragon 4 Gen 1 Mobile Platform
Snapdragon 460 Mobile Platform
Snapdragon 480 5G Mobile Platform
Snapdragon 480+ 5G Mobile Platform (SM4350-AC)
Snapdragon 662 Mobile Platform
Snapdragon 680 4G Mobile Platform
Snapdragon 685 4G Mobile Platform (SM6225-AD)
Snapdragon 690 5G Mobile Platform
Snapdragon 695 5G Mobile Platform
Snapdragon 720G Mobile Platform
Snapdragon 778G 5G Mobile Platform
Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)
Snapdragon 782G Mobile Platform (SM7325-AF)
Snapdragon 7c+ Gen 3 Compute Platform
Snapdragon 8 Gen 2 Mobile Platform
Snapdragon 8+ Gen 2 Mobile Platform
Qualcomm SC8380XP
Snapdragon 8 Gen 3 Mobile Platform
SXR2250P
SM4635
WCN7861
WCN7881
FastConnect 6700
FastConnect 6900
FastConnect 7800
QCS4490
QCM4490
WCD9370
WCD9390
WCD9395
WCN3950
WSA8810
WSA8815
WSA8832
WSA8840
WSA8845
WSA8845H
SM6650
SM7635
SM7675
SM7675P
SM8550P
SM8635
SM8635P
SXR2230P
SXR2330P
WCD9341
WCD9375
WCD9378
WCD9385
WCN3988
WCN6450
WCN6650
WCN6755
Snapdragon AR1 Gen 1 Platform
SM6650P
SM8650Q

ВСрсия ПО

- (WCD9380)
- (WSA8830)
- (WSA8835)
- (AQT1000)
- (Qualcomm QCA6391)
- (Qualcomm SM7325P)
- (Qualcomm SD855)
- (Qualcomm SM6250)
- (Qualcomm FastConnect 6200)
- (Qualcomm FastConnect 6800)
- (Snapdragon 855 Mobile Platform)
- (Snapdragon 855+/860 Mobile Platform (SM8150-AC))
- (Snapdragon 865 5G Mobile Platform)
- (Snapdragon 865+ 5G Mobile Platform (SM8250-AB))
- (Snapdragon 870 5G Mobile Platform (SM8250-AC))
- (Snapdragon X55 5G Modem-RF System)
- (Snapdragon 888 5G Mobile Platform)
- (Snapdragon 888+ 5G Mobile Platform (SM8350-AC))
- (Snapdragon 4 Gen 1 Mobile Platform)
- (Snapdragon 460 Mobile Platform)
- (Snapdragon 480 5G Mobile Platform)
- (Snapdragon 480+ 5G Mobile Platform (SM4350-AC))
- (Snapdragon 662 Mobile Platform)
- (Snapdragon 680 4G Mobile Platform)
- (Snapdragon 685 4G Mobile Platform (SM6225-AD))
- (Snapdragon 690 5G Mobile Platform)
- (Snapdragon 695 5G Mobile Platform)
- (Snapdragon 720G Mobile Platform)
- (Snapdragon 778G 5G Mobile Platform)
- (Snapdragon 778G+ 5G Mobile Platform (SM7325-AE))
- (Snapdragon 782G Mobile Platform (SM7325-AF))
- (Snapdragon 7c+ Gen 3 Compute Platform)
- (Snapdragon 8 Gen 2 Mobile Platform)
- (Snapdragon 8+ Gen 2 Mobile Platform)
- (Qualcomm SC8380XP)
- (Snapdragon 8 Gen 3 Mobile Platform)
- (SXR2250P)
- (SM4635)
- (WCN7861)
- (WCN7881)
- (FastConnect 6700)
- (FastConnect 6900)
- (FastConnect 7800)
- (QCS4490)
- (QCM4490)
- (WCD9370)
- (WCD9390)
- (WCD9395)
- (WCN3950)
- (WSA8810)
- (WSA8815)
- (WSA8832)
- (WSA8840)
- (WSA8845)
- (WSA8845H)
- (SM6650)
- (SM7635)
- (SM7675)
- (SM7675P)
- (SM8550P)
- (SM8635)
- (SM8635P)
- (SXR2230P)
- (SXR2330P)
- (WCD9341)
- (WCD9375)
- (WCD9378)
- (WCD9385)
- (WCN3988)
- (WCN6450)
- (WCN6650)
- (WCN6755)
- (Snapdragon AR1 Gen 1 Platform)
- (SM6650P)
- (SM8650Q)

Вип ПО

ΠœΠΈΠΊΡ€ΠΎΠΏΡ€ΠΎΠ³Ρ€Π°ΠΌΠΌΠ½Ρ‹ΠΉ ΠΊΠΎΠ΄
ΠœΠΈΠΊΡ€ΠΎΠΏΡ€ΠΎΠ³Ρ€Π°ΠΌΠΌΠ½Ρ‹ΠΉ ΠΊΠΎΠ΄ Π°ΠΏΠΏΠ°Ρ€Π°Ρ‚Π½Ρ‹Ρ… ΠΊΠΎΠΌΠΏΠΎΠ½Π΅Π½Ρ‚ ΠΊΠΎΠΌΠΏΡŒΡŽΡ‚Π΅Ρ€Π°

ΠžΠΏΠ΅Ρ€Π°Ρ†ΠΈΠΎΠ½Π½Ρ‹Π΅ систСмы ΠΈ Π°ΠΏΠΏΠ°Ρ€Π°Ρ‚Π½Ρ‹Π΅ ΠΏΠ»Π°Ρ‚Ρ„ΠΎΡ€ΠΌΡ‹

-

Π£Ρ€ΠΎΠ²Π΅Π½ΡŒ опасности уязвимости

Высокий ΡƒΡ€ΠΎΠ²Π΅Π½ΡŒ опасности (базовая ΠΎΡ†Π΅Π½ΠΊΠ° CVSS 2.0 составляСт 7,2)
Высокий ΡƒΡ€ΠΎΠ²Π΅Π½ΡŒ опасности (базовая ΠΎΡ†Π΅Π½ΠΊΠ° CVSS 3.1 составляСт 8,6)

Π’ΠΎΠ·ΠΌΠΎΠΆΠ½Ρ‹Π΅ ΠΌΠ΅Ρ€Ρ‹ ΠΏΠΎ ΡƒΡΡ‚Ρ€Π°Π½Π΅Π½ΠΈΡŽ уязвимости

ИспользованиС Ρ€Π΅ΠΊΠΎΠΌΠ΅Π½Π΄Π°Ρ†ΠΈΠΉ:
https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html#_cve-2025-21480

Бтатус уязвимости

ΠŸΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π΅Π½Π° ΠΏΡ€ΠΎΠΈΠ·Π²ΠΎΠ΄ΠΈΡ‚Π΅Π»Π΅ΠΌ

НаличиС эксплойта

БущСствуСт

Π˜Π½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΡ ΠΎΠ± устранСнии

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ устранСна

Π˜Π΄Π΅Π½Ρ‚ΠΈΡ„ΠΈΠΊΠ°Ρ‚ΠΎΡ€Ρ‹ Π΄Ρ€ΡƒΠ³ΠΈΡ… систСм описаний уязвимостСй

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 86%
0.02838
Низкий

8.6 High

CVSS3

7.2 High

CVSS2

БвязанныС уязвимости

CVSS3: 8.6
nvd
16 Π΄Π½Π΅ΠΉ Π½Π°Π·Π°Π΄

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

CVSS3: 8.6
github
16 Π΄Π½Π΅ΠΉ Π½Π°Π·Π°Π΄

Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 86%
0.02838
Низкий

8.6 High

CVSS3

7.2 High

CVSS2

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ BDU:2025-06405 - exploitDog