CVE-2024-21478 - OpenCVE

transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: qualcomm

Published: 2024-06-03T10:05:25.336Z

Updated: 2024-08-01T22:20:40.820Z

Reserved: 2023-12-12T06:07:46.905Z

Link: CVE-2024-21478

Vulnrichment

Updated: 2024-08-01T22:20:40.820Z

NVD

Status : Awaiting Analysis

Published: 2024-06-03T10:15:11.907

Modified: 2024-06-03T14:46:24.250

Link: CVE-2024-21478

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-21478", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "state": "PUBLISHED", "assignerShortName": "qualcomm", "dateReserved": "2023-12-12T06:07:46.905Z", "datePublished": "2024-06-03T10:05:25.336Z", "dateUpdated": "2024-08-01T22:20:40.820Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Snapdragon Auto"], "product": "Snapdragon", "vendor": "Qualcomm, Inc.", "versions": [{"status": "affected", "version": "QAM8255P"}, {"status": "affected", "version": "QAM8650P"}, {"status": "affected", "version": "QAM8775P"}, {"status": "affected", "version": "QAMSRV1H"}, {"status": "affected", "version": "QAMSRV1M"}, {"status": "affected", "version": "SA8255P"}, {"status": "affected", "version": "SA8650P"}, {"status": "affected", "version": "SA8770P"}, {"status": "affected", "version": "SA8775P"}, {"status": "affected", "version": "SA9000P"}, {"status": "affected", "version": "SRV1H"}, {"status": "affected", "version": "SRV1M"}]}], "descriptions": [{"lang": "en", "value": "transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-704", "description": "CWE-704 Incorrect Type Conversion or Cast", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2024-06-03T10:05:25.336Z"}, "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html"}], "title": "NULL Pointer Dereference in Graphics"}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-21478", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-03T16:35:13.424233Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qam8255p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qam8650p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qam8650p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qam8775p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qamsrv1h_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qamsrv1h_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qamsrv1m_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qamsrv1m_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8255p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8650p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8650p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8770p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8775p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa9000p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:srv1h_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "srv1h_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:srv1m_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "srv1m_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:38:13.715Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:20:40.820Z"}, "title": "CVE Program Container", "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:20:40.820Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-21478", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-03T16:35:13.424233Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qam8255p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qam8650p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qam8650p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qam8775p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qamsrv1h_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qamsrv1h_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:qamsrv1m_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "qamsrv1m_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8255p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8650p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8650p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8770p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa8775p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "sa9000p_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:srv1h_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "srv1h_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:qualcomm:srv1m_firmware:-:*:*:*:*:*:*:*"], "vendor": "qualcomm", "product": "srv1m_firmware", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-03T16:34:47.877Z"}}], "cna": {"title": "NULL Pointer Dereference in Graphics", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Qualcomm, Inc.", "product": "Snapdragon", "versions": [{"status": "affected", "version": "QAM8255P"}, {"status": "affected", "version": "QAM8650P"}, {"status": "affected", "version": "QAM8775P"}, {"status": "affected", "version": "QAMSRV1H"}, {"status": "affected", "version": "QAMSRV1M"}, {"status": "affected", "version": "SA8255P"}, {"status": "affected", "version": "SA8650P"}, {"status": "affected", "version": "SA8770P"}, {"status": "affected", "version": "SA8775P"}, {"status": "affected", "version": "SA9000P"}, {"status": "affected", "version": "SRV1H"}, {"status": "affected", "version": "SRV1M"}], "platforms": ["Snapdragon Auto"], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2024-bulletin.html"}], "descriptions": [{"lang": "en", "value": "transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-704", "description": "CWE-704 Incorrect Type Conversion or Cast"}]}], "providerMetadata": {"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "shortName": "qualcomm", "dateUpdated": "2024-06-03T10:05:25.336Z"}}}, "cveMetadata": {"cveId": "CVE-2024-21478", "state": "PUBLISHED", "dateUpdated": "2024-08-01T22:20:40.820Z", "dateReserved": "2023-12-12T06:07:46.905Z", "assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f", "datePublished": "2024-06-03T10:05:25.336Z", "assignerShortName": "qualcomm"}, "dataVersion": "5.1"}