CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2024-23377
Medium (6.7) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
- CWE
- CWE-823
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qca6391_firmware
- qualcomm:qcm8550_firmware
- qualcomm:qcs7230_firmware
- qualcomm:qcs8250_firmware
- qualcomm:qcs8550_firmware
- qualcomm:sd_8_gen1_5g_firmware
- qualcomm:sg8275_firmware
- qualcomm:sg8275p_firmware
- qualcomm:sm7525_firmware
- qualcomm:sm7550_firmware
- qualcomm:sm8550p_firmware
- qualcomm:snapdragon_8\+_gen_2_mobile_platform_firmware
- qualcomm:snapdragon_8_gen_2_mobile_platform_firmware
- qualcomm:snapdragon_ar2_gen_1_platform_firmware
- qualcomm:ssg2115p_firmware
- qualcomm:ssg2125p_firmware
- qualcomm:sxr1230p_firmware
- qualcomm:sxr2230p_firmware
- qualcomm:sxr2250p_firmware
- qualcomm:video_collaboration_vc5_platform_firmware
- qualcomm:wcd9370_firmware
- qualcomm:wcd9371_firmware
- qualcomm:wcd9375_firmware
- qualcomm:wcd9378_firmware
- qualcomm:wcd9380_firmware
- qualcomm:wcd9385_firmware
- qualcomm:wcd9390_firmware
- qualcomm:wcd9395_firmware
- qualcomm:wcn6650_firmware
- qualcomm:wcn6755_firmware
- qualcomm:wcn7880_firmware
- qualcomm:wsa8830_firmware
- qualcomm:wsa8832_firmware
- qualcomm:wsa8835_firmware
- qualcomm:wsa8840_firmware
- qualcomm:wsa8845_firmware
- qualcomm:wsa8845h_firmware