CVE-2024-23366
5.5 mediumEPSS 0.1%
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
Severity
CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-125, CWE-126
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:qam8255p_firmware
- qualcomm:qam8295p_firmware
- qualcomm:qam8650p_firmware
- qualcomm:qam8775p_firmware
- qualcomm:qamsrv1h_firmware
- qualcomm:qca6595_firmware
- qualcomm:qca6595au_firmware
- qualcomm:qca6696_firmware
- qualcomm:qca6698aq_firmware
- qualcomm:sa8255p_firmware
- qualcomm:sa8295p_firmware
- qualcomm:sa8540p_firmware
- qualcomm:sa8650p_firmware
- qualcomm:sa8770p_firmware
- qualcomm:sa8775p_firmware
- qualcomm:sa9000p_firmware
- qualcomm:srv1h_firmware
References
Check your stackJSON