CVE-2024-21460
6.5 mediumEPSS 0.1%
Medium (6.5) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.
Severity
CVSS 3.1
6.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
- CWE
- CWE-330
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qcm8550_firmware
- qualcomm:qcs8550_firmware
- qualcomm:sg8275p_firmware
- qualcomm:sm8550p_firmware
- qualcomm:snapdragon_8\+_gen_2_mobile_platform_firmware
- qualcomm:snapdragon_8_gen_2_mobile_platform_firmware
- qualcomm:wcd9380_firmware
- qualcomm:wcd9385_firmware
- qualcomm:wcd9390_firmware
- qualcomm:wcd9395_firmware
- qualcomm:wsa8840_firmware
- qualcomm:wsa8845_firmware
- qualcomm:wsa8845h_firmware
References
Check your stackJSON