CVE-2024-38418

Feb. 5, 2025, 1:57 p.m.

7.8
High

Description

Memory corruption while parsing the memory map info in IOCTL calls.

Product(s) Impacted

Vendor Product Versions
Qualcomm
  • C-v2x 9150 Firmware
  • C-v2x 9150
  • Csrb31024 Firmware
  • Csrb31024
  • Fastconnect 6800 Firmware
  • Fastconnect 6800
  • Fastconnect 6900 Firmware
  • Fastconnect 6900
  • Fastconnect 7800 Firmware
  • Fastconnect 7800
  • Qam8295p Firmware
  • Qam8295p
  • Qca6391 Firmware
  • Qca6391
  • Qca6426 Firmware
  • Qca6426
  • Qca6436 Firmware
  • Qca6436
  • Qca6564au Firmware
  • Qca6564au
  • Qca6574au Firmware
  • Qca6574au
  • Qca6595au Firmware
  • Qca6595au
  • Qca6696 Firmware
  • Qca6696
  • Qcn9074 Firmware
  • Qcn9074
  • Qcs410 Firmware
  • Qcs410
  • Qcs610 Firmware
  • Qcs610
  • Qsm8250 Firmware
  • Qsm8250
  • Video Collaboration Vc1 Platform Firmware
  • Video Collaboration Vc1 Platform
  • Video Collaboration Vc3 Platform Firmware
  • Video Collaboration Vc3 Platform
  • Sa6145p Firmware
  • Sa6145p
  • Sa6150p Firmware
  • Sa6150p
  • Sa6155p Firmware
  • Sa6155p
  • Sa8145p Firmware
  • Sa8145p
  • Sa8150p Firmware
  • Sa8150p
  • Sa8155p Firmware
  • Sa8155p
  • Sa8195p Firmware
  • Sa8195p
  • Sa8295p Firmware
  • Sa8295p
  • Sa8530p Firmware
  • Sa8530p
  • Sa8540p Firmware
  • Sa8540p
  • Sa9000p Firmware
  • Sa9000p
  • Sd865 5g Firmware
  • Sd865 5g
  • Sdm429w Firmware
  • Sdm429w
  • Sdx55 Firmware
  • Sdx55
  • Snapdragon 429 Mobile Firmware
  • Snapdragon 429 Mobile
  • Snapdragon 8 Gen 1 Mobile Firmware
  • Snapdragon 8 Gen 1 Mobile
  • Snapdragon 865 5g Mobile Firmware
  • Snapdragon 865 5g Mobile
  • Snapdragon 865\+ 5g Mobile Firmware
  • Snapdragon 865\+ 5g Mobile
  • Snapdragon 870 5g Mobile Firmware
  • Snapdragon 870 5g Mobile
  • Snapdragon W5\+ Gen 1 Wearable Firmware
  • Snapdragon W5\+ Gen 1 Wearable
  • Snapdragon X55 5g Modem-rf Firmware
  • Snapdragon X55 5g Modem-rf
  • Snapdragon Xr2 5g Firmware
  • Snapdragon Xr2 5g
  • Snapdragon Auto 4g Modem Firmware
  • Snapdragon Auto 4g Modem
  • Sw5100 Firmware
  • Sw5100
  • Sw5100p Firmware
  • Sw5100p
  • Sxr2130 Firmware
  • Sxr2130
  • Sxr2230p Firmware
  • Sxr2230p
  • Sxr2250p Firmware
  • Sxr2250p
  • Wcd9341 Firmware
  • Wcd9341
  • Wcd9370 Firmware
  • Wcd9370
  • Wcd9380 Firmware
  • Wcd9380
  • Wcd9385 Firmware
  • Wcd9385
  • Wcn3620 Firmware
  • Wcn3620
  • Wcn3660b Firmware
  • Wcn3660b
  • Wcn3680b Firmware
  • Wcn3680b
  • Wcn3950 Firmware
  • Wcn3950
  • Wcn3980 Firmware
  • Wcn3980
  • Wcn3988 Firmware
  • Wcn3988
  • Wsa8810 Firmware
  • Wsa8810
  • Wsa8815 Firmware
  • Wsa8815
  • Wsa8830 Firmware
  • Wsa8830
  • Wsa8832 Firmware
  • Wsa8832
  • Wsa8835 Firmware
  • Wsa8835
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

*CPE(s)

Affected systems and software identified for this CVE.

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
o qualcomm c-v2x_9150_firmware - / / / / / / /
h qualcomm c-v2x_9150 - / / / / / / /
o qualcomm csrb31024_firmware - / / / / / / /
h qualcomm csrb31024 - / / / / / / /
o qualcomm fastconnect_6800_firmware - / / / / / / /
h qualcomm fastconnect_6800 - / / / / / / /
o qualcomm fastconnect_6900_firmware - / / / / / / /
h qualcomm fastconnect_6900 - / / / / / / /
o qualcomm fastconnect_7800_firmware - / / / / / / /
h qualcomm fastconnect_7800 - / / / / / / /
o qualcomm qam8295p_firmware - / / / / / / /
h qualcomm qam8295p - / / / / / / /
o qualcomm qca6391_firmware - / / / / / / /
h qualcomm qca6391 - / / / / / / /
o qualcomm qca6426_firmware - / / / / / / /
h qualcomm qca6426 - / / / / / / /
o qualcomm qca6436_firmware - / / / / / / /
h qualcomm qca6436 - / / / / / / /
o qualcomm qca6564au_firmware - / / / / / / /
h qualcomm qca6564au - / / / / / / /
o qualcomm qca6574au_firmware - / / / / / / /
h qualcomm qca6574au - / / / / / / /
o qualcomm qca6595au_firmware - / / / / / / /
h qualcomm qca6595au - / / / / / / /
o qualcomm qca6696_firmware - / / / / / / /
h qualcomm qca6696 - / / / / / / /
o qualcomm qcn9074_firmware - / / / / / / /
h qualcomm qcn9074 - / / / / / / /
o qualcomm qcs410_firmware - / / / / / / /
h qualcomm qcs410 - / / / / / / /
o qualcomm qcs610_firmware - / / / / / / /
h qualcomm qcs610 - / / / / / / /
o qualcomm qsm8250_firmware - / / / / / / /
h qualcomm qsm8250 - / / / / / / /
o qualcomm video_collaboration_vc1_platform_firmware - / / / / / / /
h qualcomm video_collaboration_vc1_platform - / / / / / / /
o qualcomm video_collaboration_vc3_platform_firmware - / / / / / / /
h qualcomm video_collaboration_vc3_platform - / / / / / / /
o qualcomm sa6145p_firmware - / / / / / / /
h qualcomm sa6145p - / / / / / / /
o qualcomm sa6150p_firmware - / / / / / / /
h qualcomm sa6150p - / / / / / / /
o qualcomm sa6155p_firmware - / / / / / / /
h qualcomm sa6155p - / / / / / / /
o qualcomm sa8145p_firmware - / / / / / / /
h qualcomm sa8145p - / / / / / / /
o qualcomm sa8150p_firmware - / / / / / / /
h qualcomm sa8150p - / / / / / / /
o qualcomm sa8155p_firmware - / / / / / / /
h qualcomm sa8155p - / / / / / / /
o qualcomm sa8195p_firmware - / / / / / / /
h qualcomm sa8195p - / / / / / / /
o qualcomm sa8295p_firmware - / / / / / / /
h qualcomm sa8295p - / / / / / / /
o qualcomm sa8530p_firmware - / / / / / / /
h qualcomm sa8530p - / / / / / / /
o qualcomm sa8540p_firmware - / / / / / / /
h qualcomm sa8540p - / / / / / / /
o qualcomm sa9000p_firmware - / / / / / / /
h qualcomm sa9000p - / / / / / / /
o qualcomm sd865_5g_firmware - / / / / / / /
h qualcomm sd865_5g - / / / / / / /
o qualcomm sdm429w_firmware - / / / / / / /
h qualcomm sdm429w - / / / / / / /
o qualcomm sdx55_firmware - / / / / / / /
h qualcomm sdx55 - / / / / / / /
o qualcomm snapdragon_429_mobile_firmware - / / / / / / /
h qualcomm snapdragon_429_mobile - / / / / / / /
o qualcomm snapdragon_8_gen_1_mobile_firmware - / / / / / / /
h qualcomm snapdragon_8_gen_1_mobile - / / / / / / /
o qualcomm snapdragon_865_5g_mobile_firmware - / / / / / / /
h qualcomm snapdragon_865_5g_mobile - / / / / / / /
o qualcomm snapdragon_865\+_5g_mobile_firmware - / / / / / / /
h qualcomm snapdragon_865\+_5g_mobile - / / / / / / /
o qualcomm snapdragon_870_5g_mobile_firmware - / / / / / / /
h qualcomm snapdragon_870_5g_mobile - / / / / / / /
o qualcomm snapdragon_w5\+_gen_1_wearable_firmware - / / / / / / /
h qualcomm snapdragon_w5\+_gen_1_wearable - / / / / / / /
o qualcomm snapdragon_x55_5g_modem-rf_firmware - / / / / / / /
h qualcomm snapdragon_x55_5g_modem-rf - / / / / / / /
o qualcomm snapdragon_xr2_5g_firmware - / / / / / / /
h qualcomm snapdragon_xr2_5g - / / / / / / /
o qualcomm snapdragon_auto_4g_modem_firmware - / / / / / / /
h qualcomm snapdragon_auto_4g_modem - / / / / / / /
o qualcomm sw5100_firmware - / / / / / / /
h qualcomm sw5100 - / / / / / / /
o qualcomm sw5100p_firmware - / / / / / / /
h qualcomm sw5100p - / / / / / / /
o qualcomm sxr2130_firmware - / / / / / / /
h qualcomm sxr2130 - / / / / / / /
o qualcomm sxr2230p_firmware - / / / / / / /
h qualcomm sxr2230p - / / / / / / /
o qualcomm sxr2250p_firmware - / / / / / / /
h qualcomm sxr2250p - / / / / / / /
o qualcomm wcd9341_firmware - / / / / / / /
h qualcomm wcd9341 - / / / / / / /
o qualcomm wcd9370_firmware - / / / / / / /
h qualcomm wcd9370 - / / / / / / /
o qualcomm wcd9380_firmware - / / / / / / /
h qualcomm wcd9380 - / / / / / / /
o qualcomm wcd9385_firmware - / / / / / / /
h qualcomm wcd9385 - / / / / / / /
o qualcomm wcn3620_firmware - / / / / / / /
h qualcomm wcn3620 - / / / / / / /
o qualcomm wcn3660b_firmware - / / / / / / /
h qualcomm wcn3660b - / / / / / / /
o qualcomm wcn3680b_firmware - / / / / / / /
h qualcomm wcn3680b - / / / / / / /
o qualcomm wcn3950_firmware - / / / / / / /
h qualcomm wcn3950 - / / / / / / /
o qualcomm wcn3980_firmware - / / / / / / /
h qualcomm wcn3980 - / / / / / / /
o qualcomm wcn3988_firmware - / / / / / / /
h qualcomm wcn3988 - / / / / / / /
o qualcomm wsa8810_firmware - / / / / / / /
h qualcomm wsa8810 - / / / / / / /
o qualcomm wsa8815_firmware - / / / / / / /
h qualcomm wsa8815 - / / / / / / /
o qualcomm wsa8830_firmware - / / / / / / /
h qualcomm wsa8830 - / / / / / / /
o qualcomm wsa8832_firmware - / / / / / / /
h qualcomm wsa8832 - / / / / / / /
o qualcomm wsa8835_firmware - / / / / / / /
h qualcomm wsa8835 - / / / / / / /

CVSS Score

7.8 / 10

CVSS Data - 3.1

  • Attack Vector: LOCAL
  • Attack Complexity: LOW
  • Privileges Required: LOW
  • Scope: UNCHANGED
  • Confidentiality Impact: HIGH
  • Integrity Impact: HIGH
  • Availability Impact: HIGH
  • CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

    View Vector String

Timeline

Published: Feb. 3, 2025, 5:15 p.m.
Last Modified: Feb. 5, 2025, 1:57 p.m.

Status : Analyzed

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

product-security@qualcomm.com

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.