CVE-2024-49833 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
qualcomm	CNA	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 2%

Vendor	Product	Version
qualcomm	fastconnect_6700_firmware	-
qualcomm	fastconnect_6900_firmware	-
qualcomm	fastconnect_7800_firmware	-
qualcomm	qam8255p_firmware	-
qualcomm	qam8650p_firmware	-
qualcomm	qam8775p_firmware	-
qualcomm	qamsrv1h_firmware	-
qualcomm	qamsrv1m_firmware	-
qualcomm	qca6595_firmware	-
qualcomm	qca6595au_firmware	-
qualcomm	qca6678aq_firmware	-
qualcomm	qca6698aq_firmware	-
qualcomm	qca6797aq_firmware	-
qualcomm	qcm4490_firmware	-
qualcomm	qcm8550_firmware	-
qualcomm	qcs4490_firmware	-
qualcomm	qcs6490_firmware	-
qualcomm	qcs8550_firmware	-
qualcomm	video_collaboration_vc3_platform_firmware	-
qualcomm	sa7255p_firmware	-
qualcomm	sa7775p_firmware	-
qualcomm	sa8255p_firmware	-
qualcomm	sa8620p_firmware	-
qualcomm	sa8650p_firmware	-
qualcomm	sa8770p_firmware	-
qualcomm	sa8775p_firmware	-
qualcomm	sa9000p_firmware	-
qualcomm	sd_8_gen1_5g_firmware	-
qualcomm	sg8275p_firmware	-
qualcomm	sm6650_firmware	-
qualcomm	sm7635_firmware	-
qualcomm	sm7675_firmware	-
qualcomm	sm7675p_firmware	-
qualcomm	sm8550p_firmware	-
qualcomm	sm8635_firmware	-
qualcomm	sm8635p_firmware	-
qualcomm	sm8750_firmware	-
qualcomm	sm8750p_firmware	-
qualcomm	snapdragon_4_gen_2_mobile_firmware	-
qualcomm	snapdragon_8_gen_1_mobile_firmware	-
qualcomm	snapdragon_8_gen_2_mobile_firmware	-
qualcomm	snapdragon_8_gen_3_mobile_firmware	-
qualcomm	snapdragon_8\+_gen_1_mobile_firmware	-
qualcomm	snapdragon_8\+_gen_2_mobile_firmware	-
qualcomm	snapdragon_ar1_gen_1_firmware	-
qualcomm	snapdragon_ar2_gen_1_firmware	-
qualcomm	srv1h_firmware	-
qualcomm	srv1m_firmware	-
qualcomm	ssg2115p_firmware	-
qualcomm	ssg2125p_firmware	-
qualcomm	sxr1230p_firmware	-
qualcomm	sxr2230p_firmware	-
qualcomm	sxr2250p_firmware	-
qualcomm	sxr2330p_firmware	-
qualcomm	talynplus_firmware	-
qualcomm	wcd9370_firmware	-
qualcomm	wcd9375_firmware	-
qualcomm	wcd9378_firmware	-
qualcomm	wcd9380_firmware	-
qualcomm	wcd9385_firmware	-
qualcomm	wcd9390_firmware	-
qualcomm	wcd9395_firmware	-
qualcomm	wcn3950_firmware	-
qualcomm	wcn3988_firmware	-
qualcomm	wcn6450_firmware	-
qualcomm	wcn6650_firmware	-
qualcomm	wcn6740_firmware	-
qualcomm	wcn6755_firmware	-
qualcomm	wcn7860_firmware	-
qualcomm	wcn7861_firmware	-
qualcomm	wcn7880_firmware	-
qualcomm	wcn7881_firmware	-
qualcomm	wsa8810_firmware	-
qualcomm	wsa8815_firmware	-
qualcomm	wsa8830_firmware	-
qualcomm	wsa8832_firmware	-
qualcomm	wsa8835_firmware	-
qualcomm	wsa8840_firmware	-
qualcomm	wsa8845_firmware	-
qualcomm	wsa8845h_firmware	-

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-129 - Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html