Integer Overflow or Wraparound in Graphics
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The affected software is a graphics component that allocates memory using alignment calculations. An integer overflow or wraparound in these calculations can corrupt memory, which may lead to crashes or other unintended behavior.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Memory corruption while using alignments for memory allocation.
Timeline
- CVE published
- Added to CISA KEV
CISA has evidence of exploitation in the wild
- Record last updated
- CISA remediation deadline
Due date for US federal agencies to patch
Affected versions
- Qualcomm, Inc. Snapdragon
5G Fixed Wireless Access Platform, APQ8098, AR8031, AR8035, C-V2X 9150, CSRA6620, CSRA6640, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, Flight RB5 5G Platform, FSM100 Platform, G1 Gen 1, G2 Gen 1, IQ6 Series Platform, IQ8 Series Platform, IQ9 Series Platform, LeMans_AU_LGIT, LeMansAU, MDM9250, MDM9628, Milos, Monaco_IOT, Netrani, Orne, Palawan25, Pandeiro, QAM8255P, and 205 more