CVE-2024-21455
7.8 highEPSS 0.2%
High (7.8) in qualcomm. EPSS 0.2% chance of exploitation in the next 30 days.
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
Severity
CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-119, CWE-822
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:qam8295p_firmware
- qualcomm:qca6584au_firmware
- qualcomm:qca6595_firmware
- qualcomm:qca6688aq_firmware
- qualcomm:qca6696_firmware
- qualcomm:qca6698aq_firmware
- qualcomm:qcm6125_firmware
- qualcomm:qcs6125_firmware
- qualcomm:sa8295p_firmware
- qualcomm:sg4150p_firmware
- qualcomm:snapdragon_680_4g_mobile_platform_firmware
- qualcomm:snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware
- qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware
- qualcomm:video_collaboration_vc1_platform_firmware
- qualcomm:wcd9370_firmware
- qualcomm:wcd9375_firmware
- qualcomm:wcn3950_firmware
- qualcomm:wcn3980_firmware
- qualcomm:wsa8810_firmware
- qualcomm:wsa8815_firmware
References
Check your stackJSON