CVE-2024-23372

Published Jul 1, 2024

Last updated 2 years ago

CVSS high 7.8
Mobile device

Overview

Description
Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.
Source
product-security@qualcomm.com
NVD status
Analyzed
Products
fastconnect_6200_firmware, fastconnect_6700_firmware, fastconnect_6900_firmware, fastconnect_7800_firmware, flight_rb5_5g_platform_firmware, qam8255p_firmware, qam8295p_firmware, qam8620p_firmware, qam8650p_firmware, qam8775p_firmware, qamsrv1h_firmware, qamsrv1m_firmware, qca6391_firmware, qca6574_firmware, qca6574a_firmware, qca6574au_firmware, qca6595_firmware, qca6595au_firmware, qca6678aq_firmware, qca6696_firmware, qca6698aq_firmware, qca6797aq_firmware, qcm4325_firmware, qcm4490_firmware, qcm5430_firmware, qcm6125_firmware, qcm6490_firmware, qcm8550_firmware, qcs4490_firmware, qcs5430_firmware, qcs6125_firmware, qcs6490_firmware, qcs7230_firmware, qcs8250_firmware, qcs8550_firmware, qrb5165n_firmware, video_collaboration_vc1_platform_firmware, video_collaboration_vc3_platform_firmware, video_collaboration_vc5_platform_firmware, robotics_rb5_platform_firmware, sa6155p_firmware, sa7255p_firmware, sa7775p_firmware, sa8155p_firmware, sa8195p_firmware, sa8255p_firmware, sa8295p_firmware, sa8620p_firmware, sa8650p_firmware, sa8770p_firmware, sa8775p_firmware, sa9000p_firmware, sd_8_gen1_5g_firmware, sd888_firmware, sg4150p_firmware, sg8275p_firmware, sm7315_firmware, sm7325p_firmware, sm8550p_firmware, snapdragon_4_gen_1_mobile_platform_firmware, snapdragon_4_gen_2_mobile_platform_firmware, snapdragon_460_mobile_platform_firmware, snapdragon_480_5g_mobile_platform_firmware, sm4350-ac_firmware, snapdragon_662_mobile_platform_firmware, snapdragon_680_4g_mobile_platform_firmware, sm6225-ad_firmware, snapdragon_695_5g_mobile_platform_firmware, snapdragon_778g_5g_mobile_platform_firmware, sm7325-ae_firmware, snapdragon_780g_5g_mobile_platform_firmware, sm7325-af_firmware, snapdragon_7c\+_gen_3_compute_firmware, snapdragon_8_gen_1_mobile_platform_firmware, snapdragon_8_gen_2_mobile_platform_firmware, snapdragon_8_gen_3_mobile_platform_firmware, snapdragon_8\+_gen_1_mobile_platform_firmware, snapdragon_8\+_gen_2_mobile_platform_firmware, snapdragon_888_5g_mobile_platform_firmware, sm8350-ac_firmware, snapdragon_ar2_gen_1_platform_firmware, snapdragon_w5\+_gen_1_wearable_platform_firmware, srv1h_firmware, srv1l_firmware, srv1m_firmware, ssg2115p_firmware, ssg2125p_firmware, sw5100_firmware, sw5100p_firmware, sxr1230p_firmware, sxr2230p_firmware, sxr2250p_firmware, talynplus_firmware, wcd9370_firmware, wcd9375_firmware, wcd9380_firmware, wcd9385_firmware, wcd9390_firmware, wcd9395_firmware, wcn3950_firmware, wcn3980_firmware, wcn3988_firmware, wcn6740_firmware, wsa8810_firmware, wsa8815_firmware, wsa8830_firmware, wsa8832_firmware, wsa8835_firmware, wsa8840_firmware, wsa8845_firmware, wsa8845h_firmware

Risk scores

CVSS 3.1

Type
Primary
Base score
7.8
Impact score
5.9
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

nvd@nist.gov
CWE-190
product-security@qualcomm.com
CWE-190

Social media

Hype score
Not currently trending

Configurations