Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
History

Mon, 04 Nov 2024 11:15:00 +0000

Type Values Removed Values Added
First Time appeared Qualcomm
Qualcomm fastconnect 6700 Firmware
Qualcomm fastconnect 6900 Firmware
Qualcomm fastconnect 7800 Firmware
Qualcomm qcc2073 Firmware
Qualcomm qcc2076 Firmware
Qualcomm qcm5430 Firmware
Qualcomm qcm6490 Firmware
Qualcomm qcs5430 Firmware
Qualcomm qcs6490 Firmware
Qualcomm qualcomm Video Collaboration Vc3 Platform Firmware
Qualcomm sc8380xp Firmware
Qualcomm sdm429w Firmware
Qualcomm snapdragon 429 Mobile Platform Firmware
Qualcomm wcd9370 Firmware
Qualcomm wcd9375 Firmware
Qualcomm wcd9380 Firmware
Qualcomm wcd9385 Firmware
Qualcomm wcn3620 Firmware
Qualcomm wcn3660b Firmware
Qualcomm wsa8830 Firmware
Qualcomm wsa8835 Firmware
Qualcomm wsa8840 Firmware
Qualcomm wsa8845 Firmware
Qualcomm wsa8845h Firmware
CPEs cpe:2.3:o:qualcomm:fastconnect_6700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcc2073_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcc2076_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcm5430_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcm6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcs5430_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qcs6490_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qualcomm_video_collaboration_vc3_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sc8380xp_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm
Qualcomm fastconnect 6700 Firmware
Qualcomm fastconnect 6900 Firmware
Qualcomm fastconnect 7800 Firmware
Qualcomm qcc2073 Firmware
Qualcomm qcc2076 Firmware
Qualcomm qcm5430 Firmware
Qualcomm qcm6490 Firmware
Qualcomm qcs5430 Firmware
Qualcomm qcs6490 Firmware
Qualcomm qualcomm Video Collaboration Vc3 Platform Firmware
Qualcomm sc8380xp Firmware
Qualcomm sdm429w Firmware
Qualcomm snapdragon 429 Mobile Platform Firmware
Qualcomm wcd9370 Firmware
Qualcomm wcd9375 Firmware
Qualcomm wcd9380 Firmware
Qualcomm wcd9385 Firmware
Qualcomm wcn3620 Firmware
Qualcomm wcn3660b Firmware
Qualcomm wsa8830 Firmware
Qualcomm wsa8835 Firmware
Qualcomm wsa8840 Firmware
Qualcomm wsa8845 Firmware
Qualcomm wsa8845h Firmware
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Mon, 04 Nov 2024 10:15:00 +0000

Type Values Removed Values Added
Description Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
Title Stack-based Buffer Overflow in WLAN Windows Host
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: qualcomm

Published: 2024-11-04T10:04:53.283Z

Updated: 2024-11-04T11:04:19.486Z

Reserved: 2024-06-16T00:50:18.903Z

Link: CVE-2024-38410

cve-icon Vulnrichment

Updated: 2024-11-04T11:03:17.474Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-11-04T10:15:07.933

Modified: 2024-11-04T18:50:05.607

Link: CVE-2024-38410

cve-icon Redhat

No data.