CVE-2024-23376
6.7 mediumEPSS 0.1%
Medium (6.7) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.
Severity
CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qca6174a_firmware
- qualcomm:qca6574au_firmware
- qualcomm:qca6696_firmware
- qualcomm:sa6145p_firmware
- qualcomm:sa6150p_firmware
- qualcomm:sa6155p_firmware
- qualcomm:sa8145p_firmware
- qualcomm:sa8150p_firmware
- qualcomm:sa8155p_firmware
- qualcomm:sa8195p_firmware
- qualcomm:snapdragon_8_gen_1_mobile_platform_firmware
- qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware
- qualcomm:sw5100_firmware
- qualcomm:sw5100p_firmware
- qualcomm:wcd9380_firmware
- qualcomm:wcn3980_firmware
- qualcomm:wcn3988_firmware
- qualcomm:wsa8830_firmware
- qualcomm:wsa8835_firmware
References
Check your stackJSON