CVE-2024-38401 | THREATINT

Assigner	qualcomm
Reserved	2024-06-16
Published	2024-09-02
Updated	2024-09-05

Description

Memory corruption while processing concurrent IOCTL calls.

HIGH: 7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-416 Use After Free

Product status

Default status

unaffected

AR8035

affected

C-V2X 9150

affected

FastConnect 7800

affected

QCA6574A

affected

QCA6584AU

affected

QCA6595AU

affected

QCA6696

affected

QCA6698AQ

affected

QCA8081

affected

QCA8337

affected

QCC710

affected

QCN6224

affected

QCN6274

affected

QCS410

affected

QCS610

affected

QFW7114

affected

QFW7124

affected

Qualcomm Video Collaboration VC1 Platform

affected

Qualcomm Video Collaboration VC3 Platform

affected

SDX55

affected

Snapdragon Auto 5G Modem-RF

affected

Snapdragon Auto 5G Modem-RF Gen 2

affected

Snapdragon W5+ Gen 1 Wearable Platform

affected

Snapdragon X72 5G Modem-RF System

affected

Snapdragon X75 5G Modem-RF System

affected

SW5100

affected

SW5100P

affected

WCD9340

affected

WCD9341

affected

WCD9360

affected

WCD9370

affected

WCN3660B

affected

WCN3680B

affected

WCN3950

affected

WCN3980

affected

WCN3988

affected

WSA8810

affected

WSA8815

affected

WSA8830

affected

WSA8835

affected

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2024-bulletin.html

cve.org CVE-2024-38401

nvd.nist.gov CVE-2024-38401

Download JSON