CVE-2024-23366

🗓️ 06 Jan 2025 10:33:13Reported by qualcommType

Buffer over-read in Automotive Autonomy may disclose information if messages exceed mailbox size.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2024-23366	6 Jan 202510:41	–	circl
CNNVD	Qualcomm Chipsets 安全漏洞	6 Jan 202500:00	–	cnnvd
Cvelist	CVE-2024-23366 Buffer Over-read in Automotive Autonomy	6 Jan 202510:33	–	cvelist
EUVD	EUVD-2024-20870	3 Oct 202520:07	–	euvd
NVD	CVE-2024-23366	6 Jan 202511:15	–	nvd
Positive Technologies	PT-2025-2313 · Qualcomm · Snapdragon +16	6 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-23366	23 May 202506:57	–	redhatcve
Vulnrichment	CVE-2024-23366 Buffer Over-read in Automotive Autonomy	6 Jan 202510:33	–	vulnrichment

NVD

Node

qualcomm qam8255p_firmwareMatch-

AND

qualcomm qam8255pMatch-

Node

qualcomm qam8295p_firmwareMatch-

AND

qualcomm qam8295pMatch-

Node

qualcomm qam8650p_firmwareMatch-

AND

qualcomm qam8650pMatch-

Node

qualcomm qam8775p_firmwareMatch-

AND

qualcomm qam8775pMatch-

Node

qualcomm qamsrv1h_firmwareMatch-

AND

qualcomm qamsrv1hMatch-

Node

qualcomm qca6595_firmwareMatch-

AND

qualcomm qca6595Match-

Node

qualcomm qca6595au_firmwareMatch-

AND

qualcomm qca6595auMatch-

Node

qualcomm qca6696_firmwareMatch-

AND

qualcomm qca6696Match-

Node

qualcomm qca6698aq_firmwareMatch-

AND

qualcomm qca6698aqMatch-

Node

qualcomm sa8255p_firmwareMatch-

AND

qualcomm sa8255pMatch-

Node

qualcomm sa8295p_firmwareMatch-

AND

qualcomm sa8295pMatch-

Node

qualcomm sa8540p_firmwareMatch-

AND

qualcomm sa8540pMatch-

Node

qualcomm sa8650p_firmwareMatch-

AND

qualcomm sa8650pMatch-

Node

qualcomm sa8770p_firmwareMatch-

AND

qualcomm sa8770pMatch-

Node

qualcomm sa8775p_firmwareMatch-

AND

qualcomm sa8775pMatch-

Node

qualcomm sa9000p_firmwareMatch-

AND

qualcomm sa9000pMatch-

Node

qualcomm srv1h_firmwareMatch-

AND

qualcomm srv1hMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "QAM8255P"
      },
      {
        "status": "affected",
        "version": "QAM8295P"
      },
      {
        "status": "affected",
        "version": "QAM8650P"
      },
      {
        "status": "affected",
        "version": "QAM8775P"
      },
      {
        "status": "affected",
        "version": "QAMSRV1H"
      },
      {
        "status": "affected",
        "version": "QCA6595"
      },
      {
        "status": "affected",
        "version": "QCA6595AU"
      },
      {
        "status": "affected",
        "version": "QCA6696"
      },
      {
        "status": "affected",
        "version": "QCA6698AQ"
      },
      {
        "status": "affected",
        "version": "SA8255P"
      },
      {
        "status": "affected",
        "version": "SA8295P"
      },
      {
        "status": "affected",
        "version": "SA8540P"
      },
      {
        "status": "affected",
        "version": "SA8650P"
      },
      {
        "status": "affected",
        "version": "SA8770P"
      },
      {
        "status": "affected",
        "version": "SA8775P"
      },
      {
        "status": "affected",
        "version": "SA9000P"
      },
      {
        "status": "affected",
        "version": "SRV1H"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html

10 Jan 2025 17:20Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15.5 - 6.6

EPSS0.001

SSVC