CVEvulnerability
CVE-2024-23378
6.7 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-10-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-120
Description
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.
Affected configurations
• qualcomm srv1m firmware
• qualcomm srv1h firmware
• qualcomm snapdragon auto 5g modem-rf gen 2 firmware
• qualcomm sa9000p firmware
• qualcomm sa8775p firmware
• qualcomm sa8770p firmware
• qualcomm sa8650p firmware
• qualcomm sa8620p firmware
• qualcomm sa8255p firmware
• qualcomm sa7775p firmware
• qualcomm sa7255p firmware
• qualcomm qca6698aq firmware
• qualcomm qca6584au firmware
• qualcomm qamsrv1m firmware
• qualcomm qamsrv1h firmware
• qualcomm qam8775p firmware
• qualcomm qam8650p firmware
• qualcomm qam8255p firmware
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness