CVE-2024-23366
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.
- Score
- CVSS 3.1 6.6 Medium
- Status
- Analyzed - product-security@qualcomm.com
- Published
- 2025-01-06
- Last modified
- 2025-01-06
- Weaknesses
- CWE-125, CWE-126
Affected products
- Qam8255p Firmware (Qualcomm)
- Qam8295p Firmware (Qualcomm)
- Qam8650p Firmware (Qualcomm)
- Qam8775p Firmware (Qualcomm)
- Qamsrv1h Firmware (Qualcomm)
- Qca6595 Firmware (Qualcomm)
- Qca6595au Firmware (Qualcomm)
- Qca6696 Firmware (Qualcomm)
- Qca6698aq Firmware (Qualcomm)
- Sa8255p Firmware (Qualcomm)
- Sa8295p Firmware (Qualcomm)
- Sa8540p Firmware (Qualcomm)
- Sa8650p Firmware (Qualcomm)
- Sa8770p Firmware (Qualcomm)
- Sa8775p Firmware (Qualcomm)
- Sa9000p Firmware (Qualcomm)
- Srv1h Firmware (Qualcomm)
- Snapdragon (Qualcomm Inc.)
References
- https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html
