Lucene search

[email protected]CVE-2024-23372

HistoryJul 01, 2024 - 3:15 p.m.

CVE-2024-23372

2024-07-0115:15:16

CWE-190

[email protected]

web.nvd.nist.gov

memory corruption

gpu

ioctl

allocation

size param

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.

Affected configurations

NVD

Node

qualcommfastconnect_6200_firmwareMatch-

AND

qualcommfastconnect_6200Match-

Node

qualcommfastconnect_6700_firmwareMatch-

AND

qualcommfastconnect_6700Match-

Node

qualcommfastconnect_6900_firmwareMatch-

AND

qualcommfastconnect_6900Match-

Node

qualcommfastconnect_7800_firmwareMatch-

AND

qualcommfastconnect_7800Match-

Node

qualcommflight_rb5_5g_platform_firmwareMatch-

AND

qualcommflight_rb5_5g_platformMatch-

Node

qualcommqam8255p_firmwareMatch-

AND

qualcommqam8255pMatch-

Node

qualcommqam8295p_firmwareMatch-

AND

qualcommqam8295pMatch-

Node

qualcommqam8620p_firmwareMatch-

AND

qualcommqam8620pMatch-

Node

qualcommqam8650p_firmwareMatch-

AND

qualcommqam8650pMatch-

Node

qualcommqam8775p_firmwareMatch-

AND

qualcommqam8775pMatch-

Node

qualcommqamsrv1h_firmwareMatch-

AND

qualcommqamsrv1hMatch-

Node

qualcommqamsrv1m_firmwareMatch-

AND

qualcommqamsrv1mMatch-

Node

qualcommqca6391_firmwareMatch-

AND

qualcommqca6391Match-

Node

qualcommqca6574_firmwareMatch-

AND

qualcommqca6574Match-

Node

qualcommqca6574a_firmwareMatch-

AND

qualcommqca6574aMatch-

Node

qualcommqca6574au_firmwareMatch-

AND

qualcommqca6574auMatch-

Node

qualcommqca6595_firmwareMatch-

AND

qualcommqca6595Match-

Node

qualcommqca6595au_firmwareMatch-

AND

qualcommqca6595auMatch-

Node

qualcommqca6678aq_firmwareMatch-

AND

qualcommqca6678aqMatch-

Node

qualcommqca6696_firmwareMatch-

AND

qualcommqca6696Match-

Node

qualcommqca6698aq_firmwareMatch-

AND

qualcommqca6698aqMatch-

Node

qualcommqca6797aq_firmwareMatch-

AND

qualcommqca6797aqMatch-

Node

qualcommqcm4325_firmwareMatch-

AND

qualcommqcm4325Match-

Node

qualcommqcm4490_firmwareMatch-

AND

qualcommqcm4490Match-

Node

qualcommqcm5430_firmwareMatch-

AND

qualcommqcm5430Match-

Node

qualcommqcm6125_firmwareMatch-

AND

qualcommqcm6125Match-

Node

qualcommqcm6490_firmwareMatch-

AND

qualcommqcm6490Match-

Node

qualcommqcm8550_firmwareMatch-

AND

qualcommqcm8550Match-

Node

qualcommqcs4490_firmwareMatch-

AND

qualcommqcs4490Match-

Node

qualcommqcs5430_firmwareMatch-

AND

qualcommqcs5430Match-

Node

qualcommqcs6125_firmwareMatch-

AND

qualcommqcs6125Match-

Node

qualcommqcs6490_firmwareMatch-

AND

qualcommqcs6490Match-

Node

qualcommqcs7230_firmwareMatch-

AND

qualcommqcs7230Match-

Node

qualcommqcs8250_firmwareMatch-

AND

qualcommqcs8250Match-

Node

qualcommqcs8550_firmwareMatch-

AND

qualcommqcs8550Match-

Node

qualcommqrb5165n_firmwareMatch-

AND

qualcommqrb5165nMatch-

Node

qualcommvideo_collaboration_vc1_platform_firmwareMatch-

AND

qualcommvideo_collaboration_vc1_platformMatch-

Node

qualcommvideo_collaboration_vc3_platform_firmwareMatch-

AND

qualcommvideo_collaboration_vc3_platformMatch-

Node

qualcommvideo_collaboration_vc5_platform_firmwareMatch-

AND

qualcommvideo_collaboration_vc5_platformMatch-

Node

qualcommrobotics_rb5_platform_firmwareMatch-

AND

qualcommrobotics_rb5_platformMatch-

Node

qualcommsa6155p_firmwareMatch-

AND

qualcommsa6155pMatch-

Node

qualcommsa7255p_firmwareMatch-

AND

qualcommsa7255pMatch-

Node

qualcommsa7775p_firmwareMatch-

AND

qualcommsa7775pMatch-

Node

qualcommsa8155p_firmwareMatch-

AND

qualcommsa8155pMatch-

Node

qualcommsa8195p_firmwareMatch-

AND

qualcommsa8195pMatch-

Node

qualcommsa8255p_firmwareMatch-

AND

qualcommsa8255pMatch-

Node

qualcommsa8295p_firmwareMatch-

AND

qualcommsa8295pMatch-

Node

qualcommsa8620p_firmwareMatch-

AND

qualcommsa8620pMatch-

Node

qualcommsa8650p_firmwareMatch-

AND

qualcommsa8650pMatch-

Node

qualcommsa8770p_firmwareMatch-

AND

qualcommsa8770pMatch-

Node

qualcommsa8775p_firmwareMatch-

AND

qualcommsa8775pMatch-

Node

qualcommsa9000p_firmwareMatch-

AND

qualcommsa9000pMatch-

Node

qualcommsd_8_gen1_5g_firmwareMatch-

AND

qualcommsd_8_gen1_5gMatch-

Node

qualcommsd888_firmwareMatch-

AND

qualcommsd888Match-

Node

qualcommsg4150p_firmwareMatch-

AND

qualcommsg4150pMatch-

Node

qualcommsg8275p_firmwareMatch-

AND

qualcommsg8275pMatch-

Node

qualcommsm7315_firmwareMatch-

AND

qualcommsm7315Match-

Node

qualcommsm7325p_firmwareMatch-

AND

qualcommsm7325pMatch-

Node

qualcommsm8550p_firmwareMatch-

AND

qualcommsm8550pMatch-

Node

qualcommsnapdragon_4_gen_1_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_4_gen_1_mobile_platformMatch-

Node

qualcommsnapdragon_4_gen_2_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_4_gen_2_mobile_platformMatch-

Node

qualcommsnapdragon_460_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_460_mobile_platformMatch-

Node

qualcommsnapdragon_480_5g_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_480_5g_mobile_platformMatch-

Node

qualcommsm4350-ac_firmwareMatch-

AND

qualcommsm4350-acMatch-

Node

qualcommsnapdragon_662_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_662_mobile_platformMatch-

Node

qualcommsnapdragon_680_4g_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_680_4g_mobile_platformMatch-

Node

qualcommsm6225-ad_firmwareMatch-

AND

qualcommsm6225-adMatch-

Node

qualcommsnapdragon_695_5g_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_695_5g_mobile_platformMatch-

Node

qualcommsnapdragon_778g_5g_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_778g_5g_mobile_platformMatch-

Node

qualcommsm7325-ae_firmwareMatch-

AND

qualcommsm7325-aeMatch-

Node

qualcommsnapdragon_780g_5g_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_780g_5g_mobile_platformMatch-

Node

qualcommsm7325-af_firmwareMatch-

AND

qualcommsm7325-afMatch-

Node

qualcommsnapdragon_7c\+_gen_3_compute_firmwareMatch-

AND

qualcommsnapdragon_7c\+_gen_3_computeMatch-

Node

qualcommsnapdragon_8_gen_1_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_8_gen_1_mobile_platformMatch-

Node

qualcommsnapdragon_8_gen_2_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_8_gen_2_mobile_platformMatch-

Node

qualcommsnapdragon_8_gen_3_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_8_gen_3_mobile_platformMatch-

Node

qualcommsnapdragon_8\+_gen_1_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_8\+_gen_1_mobile_platformMatch-

Node

qualcommsnapdragon_8\+_gen_2_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_8\+_gen_2_mobile_platformMatch-

Node

qualcommsnapdragon_888_5g_mobile_platform_firmwareMatch-

AND

qualcommsnapdragon_888_5g_mobile_platformMatch-

Node

qualcommsm8350-ac_firmwareMatch-

AND

qualcommsm8350-acMatch-

Node

qualcommsnapdragon_ar2_gen_1_platform_firmwareMatch-

AND

qualcommsnapdragon_ar2_gen_1_platformMatch-

Node

qualcommsnapdragon_w5\+_gen_1_wearable_platform_firmwareMatch-

AND

qualcommsnapdragon_w5\+_gen_1_wearable_platformMatch-

Node

qualcommsrv1h_firmwareMatch-

AND

qualcommsrv1hMatch-

Node

qualcommsrv1l_firmwareMatch-

AND

qualcommsrv1lMatch-

Node

qualcommsrv1m_firmwareMatch-

AND

qualcommsrv1mMatch-

Node

qualcommssg2115p_firmwareMatch-

AND

qualcommssg2115pMatch-

Node

qualcommssg2125p_firmwareMatch-

AND

qualcommssg2125pMatch-

Node

qualcommsw5100_firmwareMatch-

AND

qualcommsw5100Match-

Node

qualcommsw5100p_firmwareMatch-

AND

qualcommsw5100pMatch-

Node

qualcommsxr1230p_firmwareMatch-

AND

qualcommsxr1230pMatch-

Node

qualcommsxr2230p_firmwareMatch-

AND

qualcommsxr2230pMatch-

Node

qualcommsxr2250p_firmwareMatch-

AND

qualcommsxr2250pMatch-

Node

qualcommtalynplus_firmwareMatch-

AND

qualcommtalynplusMatch-

Node

qualcommwcd9370_firmwareMatch-

AND

qualcommwcd9370Match-

Node

qualcommwcd9375_firmwareMatch-

AND

qualcommwcd9375Match-

Node

qualcommwcd9380_firmwareMatch-

AND

qualcommwcd9380Match-

Node

qualcommwcd9385_firmwareMatch-

AND

qualcommwcd9385Match-

Node

qualcommwcd9390_firmwareMatch-

AND

qualcommwcd9390Match-

Node

qualcommwcd9395_firmwareMatch-

AND

qualcommwcd9395Match-

Node

qualcommwcn3950_firmwareMatch-

AND

qualcommwcn3950Match-

Node

qualcommwcn3980_firmwareMatch-

AND

qualcommwcn3980Match-

Node

qualcommwcn3988_firmwareMatch-

AND

qualcommwcn3988Match-

Node

qualcommwcn6740_firmwareMatch-

AND

qualcommwcn6740Match-

Node

qualcommwsa8810_firmwareMatch-

AND

qualcommwsa8810Match-

Node

qualcommwsa8815_firmwareMatch-

AND

qualcommwsa8815Match-

Node

qualcommwsa8830_firmwareMatch-

AND

qualcommwsa8830Match-

Node

qualcommwsa8832_firmwareMatch-

AND

qualcommwsa8832Match-

Node

qualcommwsa8835_firmwareMatch-

AND

qualcommwsa8835Match-

Node

qualcommwsa8840_firmwareMatch-

AND

qualcommwsa8840Match-

Node

qualcommwsa8845_firmwareMatch-

AND

qualcommwsa8845Match-

Node

qualcommwsa8845h_firmwareMatch-

AND

qualcommwsa8845hMatch-

CPENameOperatorVersion
qualcomm:fastconnect_6200_firmwarequalcomm fastconnect 6200 firmwareeq-

CPE	Name	Operator	Version
qualcomm:fastconnect_6200_firmware	qualcomm fastconnect 6200 firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Compute",
      "Snapdragon Consumer IOT",
      "Snapdragon Industrial IOT",
      "Snapdragon Mobile",
      "Snapdragon Wearables"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FastConnect 6200"
      },
      {
        "status": "affected",
        "version": "FastConnect 6700"
      },
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "Flight RB5 5G Platform"
      },
      {
        "status": "affected",
        "version": "QAM8255P"
      },
      {
        "status": "affected",
        "version": "QAM8295P"
      },
      {
        "status": "affected",
        "version": "QAM8620P"
      },
      {
        "status": "affected",
        "version": "QAM8650P"
      },
      {
        "status": "affected",
        "version": "QAM8775P"
      },
      {
        "status": "affected",
        "version": "QAMSRV1H"
      },
      {
        "status": "affected",
        "version": "QAMSRV1M"
      },
      {
        "status": "affected",
        "version": "QCA6391"
      },
      {
        "status": "affected",
        "version": "QCA6574"
      },
      {
        "status": "affected",
        "version": "QCA6574A"
      },
      {
        "status": "affected",
        "version": "QCA6574AU"
      },
      {
        "status": "affected",
        "version": "QCA6595"
      },
      {
        "status": "affected",
        "version": "QCA6595AU"
      },
      {
        "status": "affected",
        "version": "QCA6678AQ"
      },
      {
        "status": "affected",
        "version": "QCA6696"
      },
      {
        "status": "affected",
        "version": "QCA6698AQ"
      },
      {
        "status": "affected",
        "version": "QCA6797AQ"
      },
      {
        "status": "affected",
        "version": "QCM4325"
      },
      {
        "status": "affected",
        "version": "QCM4490"
      },
      {
        "status": "affected",
        "version": "QCM5430"
      },
      {
        "status": "affected",
        "version": "QCM6125"
      },
      {
        "status": "affected",
        "version": "QCM6490"
      },
      {
        "status": "affected",
        "version": "QCM8550"
      },
      {
        "status": "affected",
        "version": "QCS4490"
      },
      {
        "status": "affected",
        "version": "QCS5430"
      },
      {
        "status": "affected",
        "version": "QCS6125"
      },
      {
        "status": "affected",
        "version": "QCS6490"
      },
      {
        "status": "affected",
        "version": "QCS7230"
      },
      {
        "status": "affected",
        "version": "QCS8250"
      },
      {
        "status": "affected",
        "version": "QCS8550"
      },
      {
        "status": "affected",
        "version": "QRB5165N"
      },
      {
        "status": "affected",
        "version": "Qualcomm Video Collaboration VC1 Platform"
      },
      {
        "status": "affected",
        "version": "Qualcomm Video Collaboration VC3 Platform"
      },
      {
        "status": "affected",
        "version": "Qualcomm Video Collaboration VC5 Platform"
      },
      {
        "status": "affected",
        "version": "Robotics RB5 Platform"
      },
      {
        "status": "affected",
        "version": "SA6155P"
      },
      {
        "status": "affected",
        "version": "SA7255P"
      },
      {
        "status": "affected",
        "version": "SA7775P"
      },
      {
        "status": "affected",
        "version": "SA8155P"
      },
      {
        "status": "affected",
        "version": "SA8195P"
      },
      {
        "status": "affected",
        "version": "SA8255P"
      },
      {
        "status": "affected",
        "version": "SA8295P"
      },
      {
        "status": "affected",
        "version": "SA8620P"
      },
      {
        "status": "affected",
        "version": "SA8650P"
      },
      {
        "status": "affected",
        "version": "SA8770P"
      },
      {
        "status": "affected",
        "version": "SA8775P"
      },
      {
        "status": "affected",
        "version": "SA9000P"
      },
      {
        "status": "affected",
        "version": "SD 8 Gen1 5G"
      },
      {
        "status": "affected",
        "version": "SD888"
      },
      {
        "status": "affected",
        "version": "SG4150P"
      },
      {
        "status": "affected",
        "version": "SG8275P"
      },
      {
        "status": "affected",
        "version": "SM7315"
      },
      {
        "status": "affected",
        "version": "SM7325P"
      },
      {
        "status": "affected",
        "version": "SM8550P"
      },
      {
        "status": "affected",
        "version": "Snapdragon 4 Gen 1 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 4 Gen 2 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 460 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 480 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 480+ 5G Mobile Platform (SM4350-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 662 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 680 4G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 685 4G Mobile Platform (SM6225-AD)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 695 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 778G 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 778G+ 5G Mobile Platform (SM7325-AE)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 780G 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 782G Mobile Platform (SM7325-AF)"
      },
      {
        "status": "affected",
        "version": "Snapdragon 7c+ Gen 3 Compute"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Gen 1 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Gen 2 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Gen 3 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8+ Gen 1 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8+ Gen 2 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 888 5G Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 888+ 5G Mobile Platform (SM8350-AC)"
      },
      {
        "status": "affected",
        "version": "Snapdragon AR2 Gen 1 Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon W5+ Gen 1 Wearable Platform"
      },
      {
        "status": "affected",
        "version": "SRV1H"
      },
      {
        "status": "affected",
        "version": "SRV1L"
      },
      {
        "status": "affected",
        "version": "SRV1M"
      },
      {
        "status": "affected",
        "version": "SSG2115P"
      },
      {
        "status": "affected",
        "version": "SSG2125P"
      },
      {
        "status": "affected",
        "version": "SW5100"
      },
      {
        "status": "affected",
        "version": "SW5100P"
      },
      {
        "status": "affected",
        "version": "SXR1230P"
      },
      {
        "status": "affected",
        "version": "SXR2230P"
      },
      {
        "status": "affected",
        "version": "SXR2250P"
      },
      {
        "status": "affected",
        "version": "TalynPlus"
      },
      {
        "status": "affected",
        "version": "WCD9370"
      },
      {
        "status": "affected",
        "version": "WCD9375"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WCD9390"
      },
      {
        "status": "affected",
        "version": "WCD9395"
      },
      {
        "status": "affected",
        "version": "WCN3950"
      },
      {
        "status": "affected",
        "version": "WCN3980"
      },
      {
        "status": "affected",
        "version": "WCN3988"
      },
      {
        "status": "affected",
        "version": "WCN6740"
      },
      {
        "status": "affected",
        "version": "WSA8810"
      },
      {
        "status": "affected",
        "version": "WSA8815"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8832"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      },
      {
        "status": "affected",
        "version": "WSA8840"
      },
      {
        "status": "affected",
        "version": "WSA8845"
      },
      {
        "status": "affected",
        "version": "WSA8845H"
      }
    ]
  }
]

References

docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

Related for CVE-2024-23372

vulnrichment1 nvd1 cvelist1