CVE-2024-38412

🗓️ 03 Feb 2025 16:51:15Reported by qualcommType

Use After Free vulnerability in Computer Vision leading to memory corruption via IOCTL calls.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2024-38412	3 Feb 202517:16	–	circl
CNNVD	Qualcomm Chipsets 资源管理错误漏洞	3 Feb 202500:00	–	cnnvd
Cvelist	CVE-2024-38412 Use After Free in Computer Vision	3 Feb 202516:51	–	cvelist
EUVD	EUVD-2024-37108	3 Oct 202520:07	–	euvd
NVD	CVE-2024-38412	3 Feb 202517:15	–	nvd
Positive Technologies	PT-2025-2509 · Qualcomm · Snapdragon +6	3 Feb 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-38412	7 Feb 202517:56	–	redhatcve
Vulnrichment	CVE-2024-38412 Use After Free in Computer Vision	3 Feb 202516:51	–	vulnrichment

NVD

Node

qualcomm fastconnect_7800_firmwareMatch-

AND

qualcomm fastconnect_7800Match-

Node

qualcomm snapdragon_8_gen_3_mobile_firmwareMatch-

AND

qualcomm snapdragon_8_gen_3_mobileMatch-

Node

qualcomm wcd9390_firmwareMatch-

AND

qualcomm wcd9390Match-

Node

qualcomm wcd9395_firmwareMatch-

AND

qualcomm wcd9395Match-

Node

qualcomm wsa8840_firmwareMatch-

AND

qualcomm wsa8840Match-

Node

qualcomm wsa8845_firmwareMatch-

AND

qualcomm wsa8845Match-

Node

qualcomm wsa8845h_firmwareMatch-

AND

qualcomm wsa8845hMatch-

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Snapdragon Auto"
    ],
    "product": "Snapdragon",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "FastConnect 7800"
      },
      {
        "status": "affected",
        "version": "Snapdragon 8 Gen 3 Mobile Platform"
      },
      {
        "status": "affected",
        "version": "WCD9390"
      },
      {
        "status": "affected",
        "version": "WCD9395"
      },
      {
        "status": "affected",
        "version": "WSA8840"
      },
      {
        "status": "affected",
        "version": "WSA8845"
      },
      {
        "status": "affected",
        "version": "WSA8845H"
      }
    ]
  }
]

Source	Link
docs	www.docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html

05 Feb 2025 13:58Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.6 - 7.8

EPSS0.00078

SSVC

CWE-416