CVEvulnerability

CVE-2024-23377

6.7 MEDIUM Published 2024-11-04 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-11-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-823

Description

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.

Affected configurations

• qualcomm wsa8845h firmware • qualcomm wsa8845 firmware • qualcomm wsa8840 firmware • qualcomm wsa8835 firmware • qualcomm wsa8832 firmware • qualcomm wsa8830 firmware • qualcomm wcn7880 firmware • qualcomm wcn6755 firmware • qualcomm wcn6650 firmware • qualcomm wcd9395 firmware • qualcomm wcd9390 firmware • qualcomm wcd9385 firmware • qualcomm wcd9380 firmware • qualcomm wcd9378 firmware • qualcomm wcd9375 firmware • qualcomm wcd9371 firmware • qualcomm wcd9370 firmware • qualcomm sxr2250p firmware • qualcomm sxr2230p firmware • qualcomm sxr1230p firmware • qualcomm ssg2125p firmware • qualcomm ssg2115p firmware • qualcomm snapdragon ar2 gen 1 platform firmware • qualcomm snapdragon 8\+ gen 2 mobile platform firmware • qualcomm snapdragon 8 gen 2 mobile platform firmware • qualcomm sm8550p firmware • qualcomm sm7550 firmware • qualcomm sm7525 firmware • qualcomm sg8275p firmware • qualcomm sg8275 firmware • qualcomm sd 8 gen1 5g firmware • qualcomm video collaboration vc5 platform firmware • qualcomm qcs8550 firmware • qualcomm qcs8250 firmware • qualcomm qcs7230 firmware • qualcomm qcm8550 firmware • qualcomm qca6391 firmware • qualcomm fastconnect 7800 firmware • qualcomm fastconnect 6900 firmware

Related

Weakness · CWE (1)

  • CWE-823 Use of Out-of-range Pointer Offset weakness

References