Description
Information disclosure while processing information on firmware image during core initialization.
Reserved 2024-06-16 | Published 2025-02-03 | Updated 2025-02-03 | Assigner
qualcommMEDIUM: 6.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Problem types
CWE-126 Buffer Over-read
Product status
Default status
unaffected
FastConnect 6900
affected
FastConnect 7800
affected
QAM8295P
affected
QCA6174A
affected
QCA6574AU
affected
QCA6696
affected
SA6145P
affected
SA6150P
affected
SA6155P
affected
SA8145P
affected
SA8150P
affected
SA8155P
affected
SA8195P
affected
SA8295P
affected
SA8530P
affected
SA8540P
affected
SA9000P
affected
Snapdragon 8 Gen 1 Mobile Platform
affected
Snapdragon 888 5G Mobile Platform
affected
Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
affected
Snapdragon W5+ Gen 1 Wearable Platform
affected
SW5100
affected
SW5100P
affected
WCD9380
affected
WCD9385
affected
WCN3980
affected
WCN3988
affected
WSA8830
affected
WSA8835
affected
References
docs.qualcomm.com/...itybulletin/february-2025-bulletin.html
cve.org (CVE-2024-38414)
nvd.nist.gov (CVE-2024-38414)
Download JSON
Subscribe to our newsletter to learn more about our work.