CVE-2024-23378
6.7 mediumEPSS 0.1%
Medium (6.7) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.
Severity
CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:qam8255p_firmware
- qualcomm:qam8650p_firmware
- qualcomm:qam8775p_firmware
- qualcomm:qamsrv1h_firmware
- qualcomm:qamsrv1m_firmware
- qualcomm:qca6584au_firmware
- qualcomm:qca6698aq_firmware
- qualcomm:sa7255p_firmware
- qualcomm:sa7775p_firmware
- qualcomm:sa8255p_firmware
- qualcomm:sa8620p_firmware
- qualcomm:sa8650p_firmware
- qualcomm:sa8770p_firmware
- qualcomm:sa8775p_firmware
- qualcomm:sa9000p_firmware
- qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware
- qualcomm:srv1h_firmware
- qualcomm:srv1m_firmware
References
Check your stackJSON