CVE-2024-21460

🗓️ 01 Jul 2024 14:17:07Reported by qualcommType

Information disclosure due to ASLR relocatio

Reporter	Title	Published	Views	Family All 10
Android Security Bulletins	Android Security Bulletin—July 2024Stay organized with collectionsSave and categorize content based on your preferences.	1 Jul 202400:00	–	androidsecurity
BDU FSTEC	The vulnerability of the kernel of microprogramming software in embedded Qualcomm chips allows attackers to disclose protected information.	31 Jul 202400:00	–	bdu_fstec
CNNVD	Qualcomm Chipsets Security Vulnerability	1 Jul 202400:00	–	cnnvd
Cvelist	CVE-2024-21460 Use of Insufficiently Random Values in Core	1 Jul 202414:17	–	cvelist
EUVD	EUVD-2024-19169	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Google Android and Samsung Mobile	3 Jul 202407:21	–	ncsc
NVD	CVE-2024-21460	1 Jul 202415:15	–	nvd
Positive Technologies	PT-2024-5263 · Qualcomm · Qualcomm Embedded Platform	1 Jan 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-21460	5 Feb 202511:03	–	redhatcve
Vulnrichment	CVE-2024-21460 Use of Insufficiently Random Values in Core	1 Jul 202414:17	–	vulnrichment

NVD

Node

qualcomm fastconnect_6900_firmwareMatch-

AND

qualcomm fastconnect_6900Match-

Node

qualcomm fastconnect_7800_firmwareMatch-

AND

qualcomm fastconnect_7800Match-

Node

qualcomm qcm8550_firmwareMatch-

AND

qualcomm qcm8550Match-

Node

qualcomm qcs8550_firmwareMatch-

AND

qualcomm qcs8550Match-

Node

qualcomm sg8275p_firmwareMatch-

AND

qualcomm sg8275pMatch-

Node

qualcomm sm8550p_firmwareMatch-

AND

qualcomm sm8550pMatch-

Node

qualcomm snapdragon_8_gen_2_mobile_platform_firmwareMatch-

AND

qualcomm snapdragon_8_gen_2_mobile_platformMatch-

Node

qualcomm snapdragon_8+_gen_2_mobile_platform_firmwareMatch-

AND

qualcomm snapdragon_8+_gen_2_mobile_platformMatch-

Node

qualcomm wcd9380_firmwareMatch-

AND

qualcomm wcd9380Match-

Node

qualcomm wcd9385_firmwareMatch-

AND

qualcomm wcd9385Match-

Node

qualcomm wcd9390_firmwareMatch-

AND

qualcomm wcd9390Match-

Node

qualcomm wcd9395_firmwareMatch-

AND

qualcomm wcd9395Match-

Node

qualcomm wsa8840_firmwareMatch-

AND

qualcomm wsa8840Match-

Node

qualcomm wsa8845_firmwareMatch-

AND

qualcomm wsa8845Match-

Node

qualcomm wsa8845h_firmwareMatch-

AND

qualcomm wsa8845hMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Compute",
      "Snapdragon Consumer IOT",
      "Snapdragon Industrial IOT",
      "Snapdragon Mobile"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FastConnect 6900"
      },
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "QCM8550"
      },
      {
        "status": "affected",
        "version": "QCS8550"
      },
      {
        "status": "affected",
        "version": "SG8275P"
      },
      {
        "status": "affected",
        "version": "SM8550P"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Gen 2 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8+ Gen 2 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "WCD9380"
      },
      {
        "status": "affected",
        "version": "WCD9385"
      },
      {
        "status": "affected",
        "version": "WCD9390"
      },
      {
        "status": "affected",
        "version": "WCD9395"
      },
      {
        "status": "affected",
        "version": "WSA8840"
      },
      {
        "status": "affected",
        "version": "WSA8845"
      },
      {
        "status": "affected",
        "version": "WSA8845H"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html

21 Nov 2024 08:54Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5 - 7.1

EPSS0.001

SSVC

CWE-330