CVE-2024-49840
03.02.2025, 17:15
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.Enginsight
| Vendor | Product | Version |
|---|---|---|
| qualcomm | fastconnect_6900_firmware | - |
| qualcomm | fastconnect_7800_firmware | - |
| qualcomm | qcc2073_firmware | - |
| qualcomm | qcc2076_firmware | - |
| qualcomm | sc8380xp_firmware | - |
| qualcomm | wcd9380_firmware | - |
| qualcomm | wcd9385_firmware | - |
| qualcomm | wsa8840_firmware | - |
| qualcomm | wsa8845_firmware | - |
| qualcomm | wsa8845h_firmware | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-823 - Use of Out-of-range Pointer OffsetThe program performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.