Today > | 4 High | 23 Medium vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-38406

Nov. 7, 2024, 8:01 p.m.

CVSS Score

7.8 / 10

Products Impacted

Vendor Product Versions
qualcomm
  • wsa8845h_firmware
  • wsa8845h
  • wsa8845_firmware
  • wsa8845
  • wsa8840_firmware
  • wsa8840
  • wsa8835_firmware
  • wsa8835
  • wsa8830_firmware
  • wsa8830
  • wsa8815_firmware
  • wsa8815
  • wsa8810_firmware
  • wsa8810
  • wcn3660b_firmware
  • wcn3660b
  • wcn3620_firmware
  • wcn3620
  • wcd9385_firmware
  • wcd9385
  • wcd9380_firmware
  • wcd9380
  • wcd9375_firmware
  • wcd9375
  • wcd9370_firmware
  • wcd9370
  • wcd9341_firmware
  • wcd9341
  • wcd9340_firmware
  • wcd9340
  • snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)_firmware
  • snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)
  • snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\,_ab\)_firmware
  • snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\,_ab\)
  • snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\,_af\)_\"poipu_pro\"_firmware
  • snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\,_af\)_\"poipu_pro\"
  • snapdragon_8cx_compute_platform_\(sc8180xp-ac\,_af\)_\"poipu_pro\"_firmware
  • snapdragon_8cx_compute_platform_\(sc8180xp-ac\,_af\)_\"poipu_pro\"
  • snapdragon_8cx_compute_platform_\(sc8180x-aa\,_ab\)_firmware
  • snapdragon_8cx_compute_platform_\(sc8180x-aa\,_ab\)
  • snapdragon_8c_compute_platform_\(sc8180xp-ad\)_\"poipu_lite\"_firmware
  • snapdragon_8c_compute_platform_\(sc8180xp-ad\)_\"poipu_lite\"
  • snapdragon_8c_compute_platform_\(sc8180x-ad\)_\"poipu_lite\"_firmware
  • snapdragon_8c_compute_platform_\(sc8180x-ad\)_\"poipu_lite\"
  • snapdragon_7c\+_gen_3_compute_firmware
  • snapdragon_7c\+_gen_3_compute
  • snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"_firmware
  • snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"
  • snapdragon_7c_compute_platform_firmware
  • snapdragon_7c_compute_platform
  • snapdragon_429_mobile_platform_firmware
  • snapdragon_429_mobile_platform
  • sm6250_firmware
  • sm6250
  • sdm429w_firmware
  • sdm429w
  • sc8380xp_firmware
  • sc8380xp
  • sc8180x\+sdx55_firmware
  • sc8180x\+sdx55
  • video_collaboration_vc3_platform_firmware
  • video_collaboration_vc3_platform
  • qcs6490_firmware
  • qcs6490
  • qcs5430_firmware
  • qcs5430
  • qcm6490_firmware
  • qcm6490
  • qcm5430_firmware
  • qcm5430
  • qca6430_firmware
  • qca6430
  • qca6420_firmware
  • qca6420
  • qca6391_firmware
  • qca6391
  • fastconnect_7800_firmware
  • fastconnect_7800
  • fastconnect_6900_firmware
  • fastconnect_6900
  • fastconnect_6800_firmware
  • fastconnect_6800
  • fastconnect_6700_firmware
  • fastconnect_6700
  • fastconnect_6200_firmware
  • fastconnect_6200
  • aqt1000_firmware
  • aqt1000
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -

Description

Memory corruption while handling IOCTL calls in JPEG Encoder driver.

Weaknesses

CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

CWE ID: 367

Date

Published: Nov. 4, 2024, 10:15 a.m.

Last Modified: Nov. 7, 2024, 8:01 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

product-security@qualcomm.com

CPEs

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
o qualcomm wsa8845h_firmware - / / / / / / /
h qualcomm wsa8845h - / / / / / / /
o qualcomm wsa8845_firmware - / / / / / / /
h qualcomm wsa8845 - / / / / / / /
o qualcomm wsa8840_firmware - / / / / / / /
h qualcomm wsa8840 - / / / / / / /
o qualcomm wsa8835_firmware - / / / / / / /
h qualcomm wsa8835 - / / / / / / /
o qualcomm wsa8830_firmware - / / / / / / /
h qualcomm wsa8830 - / / / / / / /
o qualcomm wsa8815_firmware - / / / / / / /
h qualcomm wsa8815 - / / / / / / /
o qualcomm wsa8810_firmware - / / / / / / /
h qualcomm wsa8810 - / / / / / / /
o qualcomm wcn3660b_firmware - / / / / / / /
h qualcomm wcn3660b - / / / / / / /
o qualcomm wcn3620_firmware - / / / / / / /
h qualcomm wcn3620 - / / / / / / /
o qualcomm wcd9385_firmware - / / / / / / /
h qualcomm wcd9385 - / / / / / / /
o qualcomm wcd9380_firmware - / / / / / / /
h qualcomm wcd9380 - / / / / / / /
o qualcomm wcd9375_firmware - / / / / / / /
h qualcomm wcd9375 - / / / / / / /
o qualcomm wcd9370_firmware - / / / / / / /
h qualcomm wcd9370 - / / / / / / /
o qualcomm wcd9341_firmware - / / / / / / /
h qualcomm wcd9341 - / / / / / / /
o qualcomm wcd9340_firmware - / / / / / / /
h qualcomm wcd9340 - / / / / / / /
o qualcomm snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\)_firmware - / / / / / / /
h qualcomm snapdragon_8cx_gen_3_compute_platform_\(sc8280xp-ab\,_bb\) - / / / / / / /
o qualcomm snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\,_ab\)_firmware - / / / / / / /
h qualcomm snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180xp-aa\,_ab\) - / / / / / / /
o qualcomm snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\,_af\)_\"poipu_pro\"_firmware - / / / / / / /
h qualcomm snapdragon_8cx_gen_2_5g_compute_platform_\(sc8180x-ac\,_af\)_\"poipu_pro\" - / / / / / / /
o qualcomm snapdragon_8cx_compute_platform_\(sc8180xp-ac\,_af\)_\"poipu_pro\"_firmware - / / / / / / /
h qualcomm snapdragon_8cx_compute_platform_\(sc8180xp-ac\,_af\)_\"poipu_pro\" - / / / / / / /
o qualcomm snapdragon_8cx_compute_platform_\(sc8180x-aa\,_ab\)_firmware - / / / / / / /
h qualcomm snapdragon_8cx_compute_platform_\(sc8180x-aa\,_ab\) - / / / / / / /
o qualcomm snapdragon_8c_compute_platform_\(sc8180xp-ad\)_\"poipu_lite\"_firmware - / / / / / / /
h qualcomm snapdragon_8c_compute_platform_\(sc8180xp-ad\)_\"poipu_lite\" - / / / / / / /
o qualcomm snapdragon_8c_compute_platform_\(sc8180x-ad\)_\"poipu_lite\"_firmware - / / / / / / /
h qualcomm snapdragon_8c_compute_platform_\(sc8180x-ad\)_\"poipu_lite\" - / / / / / / /
o qualcomm snapdragon_7c\+_gen_3_compute_firmware - / / / / / / /
h qualcomm snapdragon_7c\+_gen_3_compute - / / / / / / /
o qualcomm snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\"_firmware - / / / / / / /
h qualcomm snapdragon_7c_gen_2_compute_platform_\(sc7180-ad\)_\"rennell_pro\" - / / / / / / /
o qualcomm snapdragon_7c_compute_platform_firmware - / / / / / / /
h qualcomm snapdragon_7c_compute_platform - / / / / / / /
o qualcomm snapdragon_429_mobile_platform_firmware - / / / / / / /
h qualcomm snapdragon_429_mobile_platform - / / / / / / /
o qualcomm sm6250_firmware - / / / / / / /
h qualcomm sm6250 - / / / / / / /
o qualcomm sdm429w_firmware - / / / / / / /
h qualcomm sdm429w - / / / / / / /
o qualcomm sc8380xp_firmware - / / / / / / /
h qualcomm sc8380xp - / / / / / / /
o qualcomm sc8180x\+sdx55_firmware - / / / / / / /
h qualcomm sc8180x\+sdx55 - / / / / / / /
o qualcomm video_collaboration_vc3_platform_firmware - / / / / / / /
h qualcomm video_collaboration_vc3_platform - / / / / / / /
o qualcomm qcs6490_firmware - / / / / / / /
h qualcomm qcs6490 - / / / / / / /
o qualcomm qcs5430_firmware - / / / / / / /
h qualcomm qcs5430 - / / / / / / /
o qualcomm qcm6490_firmware - / / / / / / /
h qualcomm qcm6490 - / / / / / / /
o qualcomm qcm5430_firmware - / / / / / / /
h qualcomm qcm5430 - / / / / / / /
o qualcomm qca6430_firmware - / / / / / / /
h qualcomm qca6430 - / / / / / / /
o qualcomm qca6420_firmware - / / / / / / /
h qualcomm qca6420 - / / / / / / /
o qualcomm qca6391_firmware - / / / / / / /
h qualcomm qca6391 - / / / / / / /
o qualcomm fastconnect_7800_firmware - / / / / / / /
h qualcomm fastconnect_7800 - / / / / / / /
o qualcomm fastconnect_6900_firmware - / / / / / / /
h qualcomm fastconnect_6900 - / / / / / / /
o qualcomm fastconnect_6800_firmware - / / / / / / /
h qualcomm fastconnect_6800 - / / / / / / /
o qualcomm fastconnect_6700_firmware - / / / / / / /
h qualcomm fastconnect_6700 - / / / / / / /
o qualcomm fastconnect_6200_firmware - / / / / / / /
h qualcomm fastconnect_6200 - / / / / / / /
o qualcomm aqt1000_firmware - / / / / / / /
h qualcomm aqt1000 - / / / / / / /

CVSS Data

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score
7.8
Exploitability Score
1.8
Impact Score
5.9
Base Severity
HIGH
CVSS Vector String

The CVSS vector string provides an in-depth view of the vulnerability metrics.

View Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://docs.qualcomm.com/ product-security@qualcomm.com