CVE-2024-21455
EUVD-2024-1916407.10.2024, 13:15
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| qualcomm | video_collaboration_vc1_platform_firmware | - |
| qualcomm | wsa8815_firmware | - |
| qualcomm | wsa8810_firmware | - |
| qualcomm | wcn3980_firmware | - |
| qualcomm | wcn3950_firmware | - |
| qualcomm | wcd9375_firmware | - |
| qualcomm | wcd9370_firmware | - |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2_firmware | - |
| qualcomm | snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware | - |
| qualcomm | snapdragon_680_4g_mobile_platform_firmware | - |
| qualcomm | sg4150p_firmware | - |
| qualcomm | sa8295p_firmware | - |
| qualcomm | qcs6125_firmware | - |
| qualcomm | qcm6125_firmware | - |
| qualcomm | qca6698aq_firmware | - |
| qualcomm | qca6696_firmware | - |
| qualcomm | qca6688aq_firmware | - |
| qualcomm | qca6595_firmware | - |
| qualcomm | qca6584au_firmware | - |
| qualcomm | qam8295p_firmware | - |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| qualcomm | qam8295p_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qca6584au_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qca6595_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qca6688aq_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qca6696_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qca6698aq_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qcm6125_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qcs6125_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qualcomm_video_collaboration_vc1_platform_firmware | 𝑥 ≤ * | ADP |
| qualcomm | sa8295p_firmware | 𝑥 ≤ * | ADP |
| qualcomm | sg4150p_firmware | 𝑥 ≤ * | ADP |
| qualcomm | snapdragon_680_4g_mobile_platform_firmware | 𝑥 ≤ * | ADP |
| qualcomm | snapdragon_auto_5g_modem-rf_gen_2_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wcd9370_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wcd9375_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wcn3950_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wcn3980_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wsa8810_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wsa8815_firmware | 𝑥 ≤ * | ADP |
Common Weakness Enumeration
- CWE-822 - Untrusted Pointer DereferenceThe program obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.