Vulnerabilities > Qualcomm > Sc8380Xp Firmware > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-02-03 | CVE-2024-38420 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption while configuring a Hypervisor based input virtual device. | 7.8 |
| 2025-02-03 | CVE-2024-45560 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Qualcomm products Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer. | 7.0 |
| 2025-02-03 | CVE-2024-45561 | Use After Free vulnerability in Qualcomm products Memory corruption while handling IOCTL call from user-space to set latency level. | 7.8 |
| 2025-02-03 | CVE-2024-45573 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption may occour while generating test pattern due to negative indexing of display ID. | 7.8 |
| 2025-02-03 | CVE-2024-49838 | Out-of-bounds Read vulnerability in Qualcomm products Information disclosure while parsing the OCI IE with invalid length. | 7.5 |
| 2025-02-03 | CVE-2024-49840 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Qualcomm products Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality. | 7.8 |
| 2025-01-06 | CVE-2024-45541 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption when IOCTL call is invoked from user-space to read board data. | 7.8 |
| 2025-01-06 | CVE-2024-45542 | Out-of-bounds Write vulnerability in Qualcomm products Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver. | 7.8 |
| 2025-01-06 | CVE-2024-45546 | Out-of-bounds Read vulnerability in Qualcomm products Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space. | 7.8 |
| 2025-01-06 | CVE-2024-45547 | Classic Buffer Overflow vulnerability in Qualcomm products Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality. | 7.8 |