CVE-2024-23377

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.

Score

CVSS 3.1 6.7 Medium

Status

Analyzed - product-security@qualcomm.com

Published

2024-11-04

Last modified

2024-11-08

Weaknesses

CWE-823

Affected products

• Fastconnect 6900 Firmware (Qualcomm)
• Fastconnect 7800 Firmware (Qualcomm)
• Qca6391 Firmware (Qualcomm)
• Qcm8550 Firmware (Qualcomm)
• Qcs7230 Firmware (Qualcomm)
• Qcs8250 Firmware (Qualcomm)
• Qcs8550 Firmware (Qualcomm)
• Qualcomm Video Collaboration Vc5 Platform Firmware (Qualcomm)
• Sd 8 Gen1 5g Firmware (Qualcomm)
• Sg8275 Firmware (Qualcomm)
• Sg8275p Firmware (Qualcomm)
• Sm7525 Firmware (Qualcomm)
• Sm7550 Firmware (Qualcomm)
• Sm8550p Firmware (Qualcomm)
• Snapdragon 8+ Gen 2 Mobile Platform Firmware (Qualcomm)
• Snapdragon 8 Gen 2 Mobile Platform Firmware (Qualcomm)
• Snapdragon Ar2 Gen 1 Platform Firmware (Qualcomm)
• Ssg2115p Firmware (Qualcomm)
• Ssg2125p Firmware (Qualcomm)
• Sxr1230p Firmware (Qualcomm)
• Sxr2230p Firmware (Qualcomm)
• Sxr2250p Firmware (Qualcomm)
• Video Collaboration Vc5 Platform Firmware (Qualcomm)
• Wcd9370 Firmware (Qualcomm)
• Wcd9371 Firmware (Qualcomm)
• Wcd9375 Firmware (Qualcomm)
• Wcd9378 Firmware (Qualcomm)
• Wcd9380 Firmware (Qualcomm)
• Wcd9385 Firmware (Qualcomm)
• Wcd9390 Firmware (Qualcomm)
• Wcd9395 Firmware (Qualcomm)
• Wcn6650 Firmware (Qualcomm)
• Wcn6755 Firmware (Qualcomm)
• Wcn7880 Firmware (Qualcomm)
• Wsa8830 Firmware (Qualcomm)
• Wsa8832 Firmware (Qualcomm)
• Wsa8835 Firmware (Qualcomm)
• Wsa8840 Firmware (Qualcomm)
• Wsa8845 Firmware (Qualcomm)
• Wsa8845h Firmware (Qualcomm)
• Snapdragon (Qualcomm Inc.)

References

• https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html