Vulnerabilites related to qualcomm - sm7550_firmware
cve-2024-23377
Vulnerability from cvelistv5
Published
2024-11-04 10:04
Modified
2024-11-08 04:55
Severity ?
EPSS score ?
Summary
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
▼ | Qualcomm, Inc. | Snapdragon |
Version: FastConnect 6900 Version: FastConnect 7800 Version: QCA6391 Version: QCM8550 Version: QCS7230 Version: QCS8250 Version: QCS8550 Version: Qualcomm Video Collaboration VC5 Platform Version: SD 8 Gen1 5G Version: SG8275 Version: SG8275P Version: SM7525 Version: SM7550 Version: SM8550P Version: Snapdragon 8 Gen 2 Mobile Platform Version: Snapdragon 8+ Gen 2 Mobile Platform Version: Snapdragon AR2 Gen 1 Platform Version: SSG2115P Version: SSG2125P Version: SXR1230P Version: SXR2230P Version: SXR2250P Version: WCD9370 Version: WCD9371 Version: WCD9375 Version: WCD9378 Version: WCD9380 Version: WCD9385 Version: WCD9390 Version: WCD9395 Version: WCN6650 Version: WCN6755 Version: WCN7880 Version: WSA8830 Version: WSA8832 Version: WSA8835 Version: WSA8840 Version: WSA8845 Version: WSA8845H |
|
{ containers: { adp: [ { affected: [ { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6900_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_7800_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qca6391_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm8550_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs7230_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs7230_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs8250_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs8250_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs8550_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc5_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qualcomm_video_collaboration_vc5_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sd_8_gen1_5g_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sg8275_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sg8275_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sg8275p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sg8275p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7525_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7525_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7550_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7550_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm8550p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_8_gen_2_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_ar2_gen_1_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_ar2_gen_1_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ssg2115p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ssg2115p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:ssg2125p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "ssg2125p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sxr1230p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sxr1230p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sxr2230p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sxr2250p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sxr2250p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9370_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9371_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9371_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9375_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9378_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9380_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9385_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9390_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9395_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn6650_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn6650_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn6755_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn7880_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8830_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8832_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8835_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8840_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8845_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8845h_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2024-23377", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-11-07T00:00:00+00:00", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-11-08T04:55:09.987Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", platforms: [ "Snapdragon Compute", "Snapdragon Connectivity", "Snapdragon Consumer IOT", "Snapdragon Industrial IOT", "Snapdragon Mobile", ], product: "Snapdragon", vendor: "Qualcomm, Inc.", versions: [ { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "FastConnect 7800", }, { status: "affected", version: "QCA6391", }, { status: "affected", version: "QCM8550", }, { status: "affected", version: "QCS7230", }, { status: "affected", version: "QCS8250", }, { status: "affected", version: "QCS8550", }, { status: "affected", version: "Qualcomm Video Collaboration VC5 Platform", }, { status: "affected", version: "SD 8 Gen1 5G", }, { status: "affected", version: "SG8275", }, { status: "affected", version: "SG8275P", }, { status: "affected", version: "SM7525", }, { status: "affected", version: "SM7550", }, { status: "affected", version: "SM8550P", }, { status: "affected", version: "Snapdragon 8 Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon 8+ Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon AR2 Gen 1 Platform", }, { status: "affected", version: "SSG2115P", }, { status: "affected", version: "SSG2125P", }, { status: "affected", version: "SXR1230P", }, { status: "affected", version: "SXR2230P", }, { status: "affected", version: "SXR2250P", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9371", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9378", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCD9390", }, { status: "affected", version: "WCD9395", }, { status: "affected", version: "WCN6650", }, { status: "affected", version: "WCN6755", }, { status: "affected", version: "WCN7880", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8832", }, { status: "affected", version: "WSA8835", }, { status: "affected", version: "WSA8840", }, { status: "affected", version: "WSA8845", }, { status: "affected", version: "WSA8845H", }, ], }, ], descriptions: [ { lang: "en", value: "Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-823", description: "CWE-823 Use of Out-of-range Pointer Offset", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-11-04T10:04:32.745Z", orgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", shortName: "qualcomm", }, references: [ { url: "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html", }, ], title: "Use of Out-of-range Pointer Offset in ComputerVision", }, }, cveMetadata: { assignerOrgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", assignerShortName: "qualcomm", cveId: "CVE-2024-23377", datePublished: "2024-11-04T10:04:32.745Z", dateReserved: "2024-01-16T03:27:26.435Z", dateUpdated: "2024-11-08T04:55:09.987Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2024-33033
Vulnerability from cvelistv5
Published
2024-11-04 10:04
Modified
2024-11-08 04:55
Severity ?
EPSS score ?
Summary
Memory corruption while processing IOCTL calls to unmap the buffers.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
▼ | Qualcomm, Inc. | Snapdragon |
Version: FastConnect 6900 Version: FastConnect 7800 Version: QCM8550 Version: QCS8550 Version: SG8275 Version: SG8275P Version: SM7525 Version: SM7550 Version: SM8550P Version: Snapdragon 8 Gen 2 Mobile Platform Version: Snapdragon 8+ Gen 2 Mobile Platform Version: WCD9370 Version: WCD9371 Version: WCD9375 Version: WCD9378 Version: WCD9380 Version: WCD9385 Version: WCD9390 Version: WCD9395 Version: WCN6650 Version: WCN6755 Version: WCN7880 Version: WSA8830 Version: WSA8832 Version: WSA8835 Version: WSA8840 Version: WSA8845 Version: WSA8845H |
|
{ containers: { adp: [ { affected: [ { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_6900_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "fastconnect_7800_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcm8550_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "qcs8550_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sg8275_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sg8275_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sg8275p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sg8275p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7525_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7525_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm7550_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm7550_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "sm8550p_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "snapdragon_8_gen_2_mobile_platform_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9370_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9371_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9371_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9375_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9378_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9380_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9385_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9390_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcd9395_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn6650_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn6650_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn6755_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wcn7880_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8830_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8832_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8835_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8840_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8845_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "wsa8845h_firmware", vendor: "qualcomm", versions: [ { lessThanOrEqual: "*", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2024-33033", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-11-07T00:00:00+00:00", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-11-08T04:55:15.791Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { defaultStatus: "unaffected", platforms: [ "Snapdragon Connectivity", "Snapdragon Industrial IOT", "Snapdragon Mobile", ], product: "Snapdragon", vendor: "Qualcomm, Inc.", versions: [ { status: "affected", version: "FastConnect 6900", }, { status: "affected", version: "FastConnect 7800", }, { status: "affected", version: "QCM8550", }, { status: "affected", version: "QCS8550", }, { status: "affected", version: "SG8275", }, { status: "affected", version: "SG8275P", }, { status: "affected", version: "SM7525", }, { status: "affected", version: "SM7550", }, { status: "affected", version: "SM8550P", }, { status: "affected", version: "Snapdragon 8 Gen 2 Mobile Platform", }, { status: "affected", version: "Snapdragon 8+ Gen 2 Mobile Platform", }, { status: "affected", version: "WCD9370", }, { status: "affected", version: "WCD9371", }, { status: "affected", version: "WCD9375", }, { status: "affected", version: "WCD9378", }, { status: "affected", version: "WCD9380", }, { status: "affected", version: "WCD9385", }, { status: "affected", version: "WCD9390", }, { status: "affected", version: "WCD9395", }, { status: "affected", version: "WCN6650", }, { status: "affected", version: "WCN6755", }, { status: "affected", version: "WCN7880", }, { status: "affected", version: "WSA8830", }, { status: "affected", version: "WSA8832", }, { status: "affected", version: "WSA8835", }, { status: "affected", version: "WSA8840", }, { status: "affected", version: "WSA8845", }, { status: "affected", version: "WSA8845H", }, ], }, ], descriptions: [ { lang: "en", value: "Memory corruption while processing IOCTL calls to unmap the buffers.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, format: "CVSS", scenarios: [ { lang: "en", value: "GENERAL", }, ], }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-416", description: "CWE-416 Use After Free", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-11-04T10:04:42.013Z", orgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", shortName: "qualcomm", }, references: [ { url: "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html", }, ], title: "Use After Free in ComputerVision", }, }, cveMetadata: { assignerOrgId: "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", assignerShortName: "qualcomm", cveId: "CVE-2024-33033", datePublished: "2024-11-04T10:04:42.013Z", dateReserved: "2024-04-23T04:42:06.930Z", dateUpdated: "2024-11-08T04:55:15.791Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
Vulnerability from fkie_nvd
Published
2024-11-04 10:15
Modified
2024-11-07 19:39
Severity ?
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
Memory corruption while processing IOCTL calls to unmap the buffers.
References
▼ | URL | Tags | |
---|---|---|---|
product-security@qualcomm.com | https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html | Patch, Vendor Advisory |
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "BB7CF473-8B25-4851-91F2-1BD693CCDC85", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*", matchCriteriaId: "91E591F2-8F72-4A5A-9264-2742EB2DABDA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "5B47BF35-3AA0-4667-842E-19B0FE30BF3C", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*", matchCriteriaId: "8A071672-9405-4418-9141-35CEADBB65AF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "CA33DE15-C177-43B3-AD50-FF797753D12E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*", matchCriteriaId: "AE1A5841-5BCB-4033-ACB9-23F3FCA65309", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "F80BC68E-7476-4A40-9F48-53722FE9A5BF", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*", matchCriteriaId: "6B36F4B2-BAA3-45AD-9967-0EB482C99708", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "7ACAD26E-B79E-4659-91A5-D301281F7D36", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*", matchCriteriaId: "F0E46DA6-9494-4D92-A4AE-A272AF6ACCCC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "11B69595-E488-4590-A150-CE5BE08B5E13", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*", matchCriteriaId: "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "63735D33-9F09-4841-9FE0-0D9AB604BECF", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*", matchCriteriaId: "E826F765-4C2E-4319-BBC4-DEB02AAD783F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2BC386D9-3D2B-40FA-A2D9-199BB138F46A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcn6755:-:*:*:*:*:*:*:*", matchCriteriaId: "133FFD9F-FA09-4801-939B-AD1D507BE5FE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcn6650_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "93398092-AF7C-4F04-874C-7E5B4CF7AB00", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcn6650:-:*:*:*:*:*:*:*", matchCriteriaId: "7D242084-5844-4E43-8D7F-D2F8E3521F0C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "699056F6-1517-4F25-AE07-4FFCF6923B9F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*", matchCriteriaId: "E4C023D2-6FF5-4FFC-B9F2-895979166580", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "896F1C04-9957-440F-BF01-C3772CC3B3DF", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9390:-:*:*:*:*:*:*:*", matchCriteriaId: "A90555EB-47A7-4717-92D5-35B561825F06", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "92B17201-8185-47F1-9720-5AB4ECD11B22", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*", matchCriteriaId: "E1FA2EB9-416F-4D69-8786-386CC73978AE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "70292B01-617F-44AD-AF77-1AFC1450523D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*", matchCriteriaId: "FA94C6D6-85DB-4031-AAF4-C399019AE16D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "4CFDBB5B-0A4F-4032-874F-D2A7EF933FB0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9378:-:*:*:*:*:*:*:*", matchCriteriaId: "D28A12D6-CC60-4BE9-ADEE-FAB58B05440F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "34143ABA-7D09-429F-A65C-3A33438BF62C", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*", matchCriteriaId: "9D56DFE3-5EF1-4B23-BBD5-0203FBF9CCEC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9371_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2503805B-B2A6-4AEE-8AB1-2B8A040702BD", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9371:-:*:*:*:*:*:*:*", matchCriteriaId: "D3AD370C-2ED0-43CF-83D9-50DC92A01CA5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "1295D869-F4DD-4766-B4AA-3513752F43B4", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*", matchCriteriaId: "B98784DC-3143-4D38-AD28-DBBDCCAB4272", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:snapdragon_8\\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "1FEDF458-DEA7-42A1-A56D-E11250139545", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:snapdragon_8\\+_gen_2_mobile_platform:-:*:*:*:*:*:*:*", matchCriteriaId: "D5693438-0F20-47BB-BA32-7175C3152368", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "60F5899C-BA8D-4B6B-BC61-F77B1EB64739", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:snapdragon_8_gen_2_mobile_platform:-:*:*:*:*:*:*:*", matchCriteriaId: "D39AD7CE-A017-4D74-A348-9E4B08363799", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "C4CDD6A2-5A3C-4572-8CE1-2F102333BB79", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sm8550p:-:*:*:*:*:*:*:*", matchCriteriaId: "699E5D17-6144-4F0A-8D52-1E8C83990E52", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sm7550_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "EEA5CE41-0596-4D38-9891-D1DF711EA7E9", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sm7550:-:*:*:*:*:*:*:*", matchCriteriaId: "E1A901C6-FB73-4361-B391-4A4AF8C70029", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sm7525_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2410FF59-E0C0-4920-9656-C398DB06DEAE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sm7525:-:*:*:*:*:*:*:*", matchCriteriaId: "7D2B800C-4DBC-4028-875D-667C87D75247", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sg8275p_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "8509F3A3-A1CA-466B-9031-4146C36B9AF8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sg8275p:-:*:*:*:*:*:*:*", matchCriteriaId: "B1813AB7-44F5-476B-9533-536F5B2F26BB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sg8275_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2E4ECE56-FD6C-4A0F-A024-8AF7A7450096", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sg8275:-:*:*:*:*:*:*:*", matchCriteriaId: "2E26A0E2-ABC4-4B97-9DFB-FB27F95E0F07", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "FFF23DDB-98A0-4343-ADD3-5AB9C2383E7E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:qcs8550:-:*:*:*:*:*:*:*", matchCriteriaId: "5ACB8AFB-5B91-4AA1-BA3A-1AF0B3503080", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "646B241B-2971-4929-9FB6-7A4CBF801CBB", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:qcm8550:-:*:*:*:*:*:*:*", matchCriteriaId: "5654FFB5-9A89-4399-AFAB-0A26726DEC81", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*", matchCriteriaId: "638DBC7F-456F-487D-BED2-2214DFF8BEE2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "E670F500-9B71-4BBE-B5DA-221D35803C89", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*", matchCriteriaId: "9ADEB5C5-B79A-4F45-B7D3-75945B38DB6C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Memory corruption while processing IOCTL calls to unmap the buffers.", }, { lang: "es", value: " Corrupción de memoria cuando la aplicación del usuario modifica la misma memoria compartida de forma asincrónica cuando el kernel accede a ella.", }, ], id: "CVE-2024-33033", lastModified: "2024-11-07T19:39:24.863", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 0.8, impactScore: 5.9, source: "product-security@qualcomm.com", type: "Secondary", }, { cvssData: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 7.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "LOW", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 1.8, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2024-11-04T10:15:06.057", references: [ { source: "product-security@qualcomm.com", tags: [ "Patch", "Vendor Advisory", ], url: "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html", }, ], sourceIdentifier: "product-security@qualcomm.com", vulnStatus: "Analyzed", weaknesses: [ { description: [ { lang: "en", value: "CWE-416", }, ], source: "product-security@qualcomm.com", type: "Secondary", }, { description: [ { lang: "en", value: "CWE-416", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Vulnerability from fkie_nvd
Published
2024-11-04 10:15
Modified
2024-11-07 19:59
Severity ?
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
References
▼ | URL | Tags | |
---|---|---|---|
product-security@qualcomm.com | https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html | Patch, Vendor Advisory |
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "BB7CF473-8B25-4851-91F2-1BD693CCDC85", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*", matchCriteriaId: "91E591F2-8F72-4A5A-9264-2742EB2DABDA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "5B47BF35-3AA0-4667-842E-19B0FE30BF3C", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*", matchCriteriaId: "8A071672-9405-4418-9141-35CEADBB65AF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "CA33DE15-C177-43B3-AD50-FF797753D12E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*", matchCriteriaId: "AE1A5841-5BCB-4033-ACB9-23F3FCA65309", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "F80BC68E-7476-4A40-9F48-53722FE9A5BF", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*", matchCriteriaId: "6B36F4B2-BAA3-45AD-9967-0EB482C99708", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "7ACAD26E-B79E-4659-91A5-D301281F7D36", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*", matchCriteriaId: "F0E46DA6-9494-4D92-A4AE-A272AF6ACCCC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "11B69595-E488-4590-A150-CE5BE08B5E13", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*", matchCriteriaId: "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcn7880_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "63735D33-9F09-4841-9FE0-0D9AB604BECF", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcn7880:-:*:*:*:*:*:*:*", matchCriteriaId: "E826F765-4C2E-4319-BBC4-DEB02AAD783F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2BC386D9-3D2B-40FA-A2D9-199BB138F46A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcn6755:-:*:*:*:*:*:*:*", matchCriteriaId: "133FFD9F-FA09-4801-939B-AD1D507BE5FE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcn6650_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "93398092-AF7C-4F04-874C-7E5B4CF7AB00", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcn6650:-:*:*:*:*:*:*:*", matchCriteriaId: "7D242084-5844-4E43-8D7F-D2F8E3521F0C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "699056F6-1517-4F25-AE07-4FFCF6923B9F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*", matchCriteriaId: "E4C023D2-6FF5-4FFC-B9F2-895979166580", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "896F1C04-9957-440F-BF01-C3772CC3B3DF", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9390:-:*:*:*:*:*:*:*", matchCriteriaId: "A90555EB-47A7-4717-92D5-35B561825F06", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "92B17201-8185-47F1-9720-5AB4ECD11B22", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*", matchCriteriaId: "E1FA2EB9-416F-4D69-8786-386CC73978AE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "70292B01-617F-44AD-AF77-1AFC1450523D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*", matchCriteriaId: "FA94C6D6-85DB-4031-AAF4-C399019AE16D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9378_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "4CFDBB5B-0A4F-4032-874F-D2A7EF933FB0", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9378:-:*:*:*:*:*:*:*", matchCriteriaId: "D28A12D6-CC60-4BE9-ADEE-FAB58B05440F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "34143ABA-7D09-429F-A65C-3A33438BF62C", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*", matchCriteriaId: "9D56DFE3-5EF1-4B23-BBD5-0203FBF9CCEC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9371_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2503805B-B2A6-4AEE-8AB1-2B8A040702BD", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9371:-:*:*:*:*:*:*:*", matchCriteriaId: "D3AD370C-2ED0-43CF-83D9-50DC92A01CA5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "1295D869-F4DD-4766-B4AA-3513752F43B4", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*", matchCriteriaId: "B98784DC-3143-4D38-AD28-DBBDCCAB4272", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sxr2250p_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "68A93ED1-F509-439E-AE7B-F0EC87AE759F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sxr2250p:-:*:*:*:*:*:*:*", matchCriteriaId: "FB5E2A98-EDD0-4298-911D-EC7527D5A424", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sxr2230p_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "CD6444F6-A477-4B4C-8A09-C22C47CCE45B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sxr2230p:-:*:*:*:*:*:*:*", matchCriteriaId: "F3E20681-4FC4-46E2-AF77-BCF03BC8E77E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sxr1230p_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "BE3236D6-0D01-4D05-B580-8888B99BAA5D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sxr1230p:-:*:*:*:*:*:*:*", matchCriteriaId: "7E1753FC-F3CD-4B50-886D-8E16D9301A84", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:ssg2125p_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "EA41907C-1CDE-42F3-B21D-5D53B2F06AF7", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:ssg2125p:-:*:*:*:*:*:*:*", matchCriteriaId: "EDC270A7-205C-41EB-A2E5-2A381A16BFBB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:ssg2115p_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "A146E52D-4AFC-47B4-920F-DAC76077DF25", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:ssg2115p:-:*:*:*:*:*:*:*", matchCriteriaId: "2BA4BA00-C8D1-4DAC-8030-CB5EEC7D4591", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:snapdragon_ar2_gen_1_platform_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "5C1AB7D4-FB11-4020-A4A0-8F40D98C07F1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:snapdragon_ar2_gen_1_platform:-:*:*:*:*:*:*:*", matchCriteriaId: "FB6053F0-5E34-458A-B084-078E4D4F4021", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:snapdragon_8\\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "1FEDF458-DEA7-42A1-A56D-E11250139545", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:snapdragon_8\\+_gen_2_mobile_platform:-:*:*:*:*:*:*:*", matchCriteriaId: "D5693438-0F20-47BB-BA32-7175C3152368", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "60F5899C-BA8D-4B6B-BC61-F77B1EB64739", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:snapdragon_8_gen_2_mobile_platform:-:*:*:*:*:*:*:*", matchCriteriaId: "D39AD7CE-A017-4D74-A348-9E4B08363799", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sm8550p_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "C4CDD6A2-5A3C-4572-8CE1-2F102333BB79", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sm8550p:-:*:*:*:*:*:*:*", matchCriteriaId: "699E5D17-6144-4F0A-8D52-1E8C83990E52", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sm7550_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "EEA5CE41-0596-4D38-9891-D1DF711EA7E9", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sm7550:-:*:*:*:*:*:*:*", matchCriteriaId: "E1A901C6-FB73-4361-B391-4A4AF8C70029", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sm7525_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2410FF59-E0C0-4920-9656-C398DB06DEAE", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sm7525:-:*:*:*:*:*:*:*", matchCriteriaId: "7D2B800C-4DBC-4028-875D-667C87D75247", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sg8275p_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "8509F3A3-A1CA-466B-9031-4146C36B9AF8", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sg8275p:-:*:*:*:*:*:*:*", matchCriteriaId: "B1813AB7-44F5-476B-9533-536F5B2F26BB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sg8275_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2E4ECE56-FD6C-4A0F-A024-8AF7A7450096", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sg8275:-:*:*:*:*:*:*:*", matchCriteriaId: "2E26A0E2-ABC4-4B97-9DFB-FB27F95E0F07", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "76910884-45D9-4EA2-BA30-44A8C7CC1339", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:sd_8_gen1_5g:-:*:*:*:*:*:*:*", matchCriteriaId: "33D393A6-4586-4416-86EB-F9D86DC3DED8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:video_collaboration_vc5_platform_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "87CF9AD4-6E1B-47E8-B441-022A03858875", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:video_collaboration_vc5_platform:-:*:*:*:*:*:*:*", matchCriteriaId: "791C1E60-162D-4881-80D5-895658FEC47E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:qcs8550_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "FFF23DDB-98A0-4343-ADD3-5AB9C2383E7E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:qcs8550:-:*:*:*:*:*:*:*", matchCriteriaId: "5ACB8AFB-5B91-4AA1-BA3A-1AF0B3503080", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:qcs8250_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "1CDDD37F-4C3A-4955-9AFB-7774021A0198", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:qcs8250:-:*:*:*:*:*:*:*", matchCriteriaId: "2D13E375-0562-4263-8452-53E117F14E83", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:qcs7230_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "B92C311A-306B-43C9-ACBA-B1B390927C6A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:qcs7230:-:*:*:*:*:*:*:*", matchCriteriaId: "F68F9B33-6BA5-46E1-A370-547CDA626985", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:qcm8550_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "646B241B-2971-4929-9FB6-7A4CBF801CBB", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:qcm8550:-:*:*:*:*:*:*:*", matchCriteriaId: "5654FFB5-9A89-4399-AFAB-0A26726DEC81", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "83B53119-1B2F-4978-B7F5-33B84BE73B68", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*", matchCriteriaId: "6FEBC0C5-CAA1-475C-96C2-B8D24B2E4536", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*", matchCriteriaId: "638DBC7F-456F-487D-BED2-2214DFF8BEE2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "E670F500-9B71-4BBE-B5DA-221D35803C89", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*", matchCriteriaId: "9ADEB5C5-B79A-4F45-B7D3-75945B38DB6C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.", }, { lang: "es", value: " Corrupción de memoria al invocar el comando IOCTL desde el espacio de usuario, cuando un usuario modifica el tamaño del paquete original del comando después de que las propiedades del sistema ya se hayan enviado al controlador EVA.", }, ], id: "CVE-2024-23377", lastModified: "2024-11-07T19:59:06.997", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 0.8, impactScore: 5.9, source: "product-security@qualcomm.com", type: "Secondary", }, { cvssData: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 0.8, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2024-11-04T10:15:04.100", references: [ { source: "product-security@qualcomm.com", tags: [ "Patch", "Vendor Advisory", ], url: "https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html", }, ], sourceIdentifier: "product-security@qualcomm.com", vulnStatus: "Analyzed", weaknesses: [ { description: [ { lang: "en", value: "CWE-823", }, ], source: "product-security@qualcomm.com", type: "Secondary", }, { description: [ { lang: "en", value: "NVD-CWE-Other", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }