CVE-2024-23386

memory corruption when WiFi display APIs are invoked with large random inputs.

Score

CVSS 3.1 6.7 Medium

Status

Analyzed - product-security@qualcomm.com

Published

2024-11-04

Last modified

2024-11-16

Weaknesses

CWE-20

Affected products

• Fastconnect 6900 Firmware (Qualcomm)
• Fastconnect 7800 Firmware (Qualcomm)
• Sdm429w Firmware (Qualcomm)
• Snapdragon 429 Mobile Platform Firmware (Qualcomm)
• Snapdragon 8 Gen 1 Mobile Platform Firmware (Qualcomm)
• Wcd9380 Firmware (Qualcomm)
• Wcn3620 Firmware (Qualcomm)
• Wcn3660b Firmware (Qualcomm)
• Wsa8830 Firmware (Qualcomm)
• Wsa8835 Firmware (Qualcomm)
• Snapdragon (Qualcomm Inc.)

References

• https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html