CVE-2024-23365 | THREATINT

Assigner	qualcomm
Reserved	2024-01-16
Published	2024-09-02
Updated	2024-09-05

Description

Memory corruption while releasing shared resources in MinkSocket listener thread.

HIGH: 8.4

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-416 Use After Free

Product status

Default status

0x400230bf00

FastConnect 7800

affected

QAM8255P

affected

QAM8650P

affected

QAM8775P

affected

QAMSRV1H

affected

QAMSRV1M

affected

QCA6574

affected

QCA6574A

affected

QCA6574AU

affected

QCA6595AU

affected

QCA6696

affected

SA6155P

affected

SA7255P

affected

SA7775P

affected

SA8155P

affected

SA8195P

affected

SA8255P

affected

SA8530P

affected

SA8540P

affected

SA8620P

affected

SA8650P

affected

SA8770P

affected

SA8775P

affected

SA9000P

affected

SDM429W

affected

SM8550P

affected

SM8635

affected

Snapdragon 429 Mobile Platform

affected

Snapdragon 8 Gen 2 Mobile Platform

affected

Snapdragon 8 Gen 3 Mobile Platform

affected

Snapdragon 8+ Gen 2 Mobile Platform

affected

SRV1H

affected

SRV1M

affected

WCD9370

affected

WCD9375

affected

WCD9380

affected

WCD9385

affected

WCD9390

affected

WCD9395

affected

WCN3620

affected

WCN3660B

affected

WCN6755

affected

WSA8830

affected

WSA8832

affected

WSA8835

affected

WSA8840

affected

WSA8845

affected

WSA8845H

affected

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html

cve.org CVE-2024-23365

nvd.nist.gov CVE-2024-23365

Download JSON