CVE-2024-23370

🗓️ 07 Oct 2024 12:58:44Reported by qualcommType

Memory corruption due to IOCTL call

Reporter	Title	Published	Views	Family All 7
CNNVD	Qualcomm Chipsets 安全漏洞	7 Oct 202400:00	–	cnnvd
Cvelist	CVE-2024-23370 Use After Free in Automotive Multimedia	7 Oct 202412:58	–	cvelist
EUVD	EUVD-2024-20874	3 Oct 202520:07	–	euvd
NVD	CVE-2024-23370	7 Oct 202413:15	–	nvd
Positive Technologies	PT-2024-19847 · Qualcomm · Snapdragon +10	7 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-23370	23 May 202508:44	–	redhatcve
Vulnrichment	CVE-2024-23370 Use After Free in Automotive Multimedia	7 Oct 202412:58	–	vulnrichment

NVD

Node

qualcomm wsa8835_firmwareMatch-

AND

qualcomm wsa8835Match-

Node

qualcomm wsa8830_firmwareMatch-

AND

qualcomm wsa8830Match-

Node

qualcomm wcn3988_firmwareMatch-

AND

qualcomm wcn3988Match-

Node

qualcomm wcn3980_firmwareMatch-

AND

qualcomm wcn3980Match-

Node

qualcomm sw5100p_firmwareMatch-

AND

qualcomm sw5100pMatch-

Node

qualcomm sw5100_firmwareMatch-

AND

qualcomm sw5100Match-

Node

qualcomm snapdragon_auto_5g_modem-rf_gen_2_firmwareMatch-

AND

qualcomm snapdragon_auto_5g_modem-rf_gen_2Match-

Node

qualcomm qca9377_firmwareMatch-

AND

qualcomm qca9377Match-

Node

qualcomm qca9367_firmwareMatch-

AND

qualcomm qca9367Match-

Node

qualcomm qca6698aq_firmwareMatch-

AND

qualcomm qca6698aqMatch-

Node

qualcomm qca6584au_firmwareMatch-

AND

qualcomm qca6584auMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto",
      "Snapdragon Industrial IOT",
      "Snapdragon Wearables"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "QCA6584AU"
      },
      {
        "status": "affected",
        "version": "QCA6698AQ"
      },
      {
        "status": "affected",
        "version": "QCA9367"
      },
      {
        "status": "affected",
        "version": "QCA9377"
      },
      {
        "status": "affected",
        "version": "Snapdragon Auto 5G Modem-RF Gen 2"
      },
      {
        "status": "affected",
        "version": "SW5100"
      },
      {
        "status": "affected",
        "version": "SW5100P"
      },
      {
        "status": "affected",
        "version": "WCN3980"
      },
      {
        "status": "affected",
        "version": "WCN3988"
      },
      {
        "status": "affected",
        "version": "WSA8830"
      },
      {
        "status": "affected",
        "version": "WSA8835"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html

16 Oct 2024 20:27Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.7

EPSS0.00061

SSVC

CWE-416