Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Qualcomm
  • Qca6584au
  • Qca6584au Firmware
  • Qca6698aq
  • Qca6698aq Firmware
  • Qca9367
  • Qca9367 Firmware
  • Qca9377
  • Qca9377 Firmware
  • Snapdragon Auto 5g Modem-rf Gen 2
  • Snapdragon Auto 5g Modem-rf Gen 2 Firmware
  • Sw5100
  • Sw5100 Firmware
  • Sw5100p
  • Sw5100p Firmware
  • Wcn3980
  • Wcn3980 Firmware
  • Wcn3988
  • Wcn3988 Firmware
  • Wsa8830
  • Wsa8830 Firmware
  • Wsa8835
  • Wsa8835 Firmware

Configuration 1 [-]

AND
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND
cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND
cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9367:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*

No data.

References
Link Providers
https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html cve-icon cve-icon
History

Wed, 16 Oct 2024 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Qualcomm qca6584au
Qualcomm qca6698aq
Qualcomm qca9367
Qualcomm qca9377
Qualcomm snapdragon Auto 5g Modem-rf Gen 2
Qualcomm sw5100
Qualcomm sw5100p
Qualcomm wcn3980
Qualcomm wcn3988
Qualcomm wsa8830
Qualcomm wsa8835
CPEs cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9367:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm qca6584au
Qualcomm qca6698aq
Qualcomm qca9367
Qualcomm qca9377
Qualcomm snapdragon Auto 5g Modem-rf Gen 2
Qualcomm sw5100
Qualcomm sw5100p
Qualcomm wcn3980
Qualcomm wcn3988
Qualcomm wsa8830
Qualcomm wsa8835

Mon, 07 Oct 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Qualcomm
Qualcomm qca6584au Firmware
Qualcomm qca6698aq Firmware
Qualcomm qca9367 Firmware
Qualcomm qca9377 Firmware
Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware
Qualcomm sw5100 Firmware
Qualcomm sw5100p Firmware
Qualcomm wcn3980 Firmware
Qualcomm wcn3988 Firmware
Qualcomm wsa8830 Firmware
Qualcomm wsa8835 Firmware
CPEs cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm
Qualcomm qca6584au Firmware
Qualcomm qca6698aq Firmware
Qualcomm qca9367 Firmware
Qualcomm qca9377 Firmware
Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware
Qualcomm sw5100 Firmware
Qualcomm sw5100p Firmware
Qualcomm wcn3980 Firmware
Qualcomm wcn3988 Firmware
Qualcomm wsa8830 Firmware
Qualcomm wsa8835 Firmware
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 07 Oct 2024 13:15:00 +0000

Type Values Removed Values Added
Description Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.
Title Use After Free in Automotive Multimedia
Weaknesses CWE-416
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: qualcomm

Published: 2024-10-07T12:58:44.385Z

Updated: 2024-10-07T13:18:25.972Z

Reserved: 2024-01-16T03:27:26.434Z

Link: CVE-2024-23370

cve-icon Vulnrichment

Updated: 2024-10-07T13:18:13.235Z

cve-icon NVD

Status : Analyzed

Published: 2024-10-07T13:15:10.927

Modified: 2024-10-16T20:27:07.517

Link: CVE-2024-23370

cve-icon Redhat

No data.