CVE-2024-38410
EUVD-2024-3731104.11.2024, 10:15
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| qualcomm | wsa8845h_firmware | - |
| qualcomm | wsa8845_firmware | - |
| qualcomm | wsa8840_firmware | - |
| qualcomm | wsa8835_firmware | - |
| qualcomm | wsa8830_firmware | - |
| qualcomm | wcn3660b_firmware | - |
| qualcomm | wcn3620_firmware | - |
| qualcomm | wcd9385_firmware | - |
| qualcomm | wcd9380_firmware | - |
| qualcomm | wcd9375_firmware | - |
| qualcomm | wcd9370_firmware | - |
| qualcomm | snapdragon_8cx_gen_3_compute_platform_firmware | - |
| qualcomm | snapdragon_429_mobile_platform_firmware | - |
| qualcomm | sdm429w_firmware | - |
| qualcomm | sc8380xp_firmware | - |
| qualcomm | video_collaboration_vc3_platform_firmware | - |
| qualcomm | qcs6490_firmware | - |
| qualcomm | qcs5430_firmware | - |
| qualcomm | qcm6490_firmware | - |
| qualcomm | qcm5430_firmware | - |
| qualcomm | qcc2076_firmware | - |
| qualcomm | qcc2073_firmware | - |
| qualcomm | fastconnect_7800_firmware | - |
| qualcomm | fastconnect_6900_firmware | - |
| qualcomm | fastconnect_6700_firmware | - |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| qualcomm | fastconnect_6700_firmware | 𝑥 ≤ * | ADP |
| qualcomm | fastconnect_6900_firmware | 𝑥 ≤ * | ADP |
| qualcomm | fastconnect_7800_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qcc2073_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qcc2076_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qcm5430_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qcm6490_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qcs5430_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qcs6490_firmware | 𝑥 ≤ * | ADP |
| qualcomm | qualcomm_video_collaboration_vc3_platform_firmware | 𝑥 ≤ * | ADP |
| qualcomm | sc8380xp_firmware | 𝑥 ≤ * | ADP |
| qualcomm | sdm429w_firmware | 𝑥 ≤ * | ADP |
| qualcomm | snapdragon_429_mobile_platform_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wcd9370_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wcd9375_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wcd9380_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wcd9385_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wcn3620_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wcn3660b_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wsa8830_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wsa8835_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wsa8840_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wsa8845_firmware | 𝑥 ≤ * | ADP |
| qualcomm | wsa8845h_firmware | 𝑥 ≤ * | ADP |
Common Weakness Enumeration
- CWE-121 - Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.