CVEvulnerability

CVE-2024-23366

5.5 MEDIUM Published 2025-01-06 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.6 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-125, CWE-126

Description

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

Affected configurations

• qualcomm qam8255p firmware • qualcomm qam8295p firmware • qualcomm qam8650p firmware • qualcomm qam8775p firmware • qualcomm qamsrv1h firmware • qualcomm qca6595 firmware • qualcomm qca6595au firmware • qualcomm qca6696 firmware • qualcomm qca6698aq firmware • qualcomm sa8255p firmware • qualcomm sa8295p firmware • qualcomm sa8540p firmware • qualcomm sa8650p firmware • qualcomm sa8770p firmware • qualcomm sa8775p firmware • qualcomm sa9000p firmware • qualcomm srv1h firmware

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-126 Buffer Over-read weakness

References