CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2024-38410
High (7.8) in qualcomm. EPSS 0.1% chance of exploitation in the next 30 days.
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-787, CWE-121
- Published
- Modified
- Record from
- the NVD, synced
Affected
- qualcomm:fastconnect_6700_firmware
- qualcomm:fastconnect_6900_firmware
- qualcomm:fastconnect_7800_firmware
- qualcomm:qcc2073_firmware
- qualcomm:qcc2076_firmware
- qualcomm:qcm5430_firmware
- qualcomm:qcm6490_firmware
- qualcomm:qcs5430_firmware
- qualcomm:qcs6490_firmware
- qualcomm:sc8380xp_firmware
- qualcomm:sdm429w_firmware
- qualcomm:snapdragon_429_mobile_platform_firmware
- qualcomm:snapdragon_8cx_gen_3_compute_platform_firmware
- qualcomm:video_collaboration_vc3_platform_firmware
- qualcomm:wcd9370_firmware
- qualcomm:wcd9375_firmware
- qualcomm:wcd9380_firmware
- qualcomm:wcd9385_firmware
- qualcomm:wcn3620_firmware
- qualcomm:wcn3660b_firmware
- qualcomm:wsa8830_firmware
- qualcomm:wsa8835_firmware
- qualcomm:wsa8840_firmware
- qualcomm:wsa8845_firmware
- qualcomm:wsa8845h_firmware