cve/2024/CVE-2024-49848.md
2025-09-29 21:09:30 +02:00

164 lines
14 KiB
Markdown

### [CVE-2024-49848](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49848)
![](https://img.shields.io/static/v1?label=Product&message=Snapdragon&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=AR8035%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=FastConnect%206200%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=FastConnect%206700%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=FastConnect%206900%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=FastConnect%207800%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QAM8255P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QAM8295P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QAM8620P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QAM8650P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QAM8775P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QAMSRV1H%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QAMSRV1M%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6174A%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6391%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6574%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6574A%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6574AU%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6584AU%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6595%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6595AU%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6678AQ%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6688AQ%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6696%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6698AQ%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA6797AQ%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA8081%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCA8337%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCC710%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCM4325%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCM4490%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCM6125%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCM8550%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCN6224%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCN6274%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCN9011%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCN9012%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCS4490%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCS6125%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCS7230%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCS8250%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QCS8550%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QDU1000%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QDU1010%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QDU1110%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QDU1210%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QDX1010%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QDX1011%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QEP8111%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QFW7114%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QFW7124%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QMP1000%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QRU1032%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QRU1052%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=QRU1062%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Qualcomm%20Video%20Collaboration%20VC1%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Qualcomm%20Video%20Collaboration%20VC5%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SA6155P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SA7255P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SA7775P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SA8155P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SA8195P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SA8255P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SA8295P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SA8620P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SA8650P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SA8770P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SA8775P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SA9000P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SD%208%20Gen1%205G%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SG4150P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SG8275P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SM4635%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SM6650%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SM7635%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SM7675%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SM7675P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SM8550P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SM8635%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SM8635P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SM8650Q%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SM8735%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SM8750%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SM8750P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SRV1H%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SRV1L%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SRV1M%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SSG2115P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SSG2125P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SW5100%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SW5100P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SXR1230P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SXR2230P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=SXR2250P%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%204%20Gen%201%20Mobile%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%204%20Gen%202%20Mobile%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20460%20Mobile%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20480%205G%20Mobile%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20480%2B%205G%20Mobile%20Platform%20(SM4350-AC)%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20662%20Mobile%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20680%204G%20Mobile%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20685%204G%20Mobile%20Platform%20(SM6225-AD)%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20695%205G%20Mobile%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%208%20Gen%201%20Mobile%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%208%20Gen%202%20Mobile%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%208%20Gen%203%20Mobile%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%208%2B%20Gen%201%20Mobile%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%208%2B%20Gen%202%20Mobile%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20AR1%20Gen%201%20Platform%20%22Luna1%22%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20AR1%20Gen%201%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20AR2%20Gen%201%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20Auto%205G%20Modem-RF%20Gen%202%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20W5%2B%20Gen%201%20Wearable%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20X35%205G%20Modem-RF%20System%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20X72%205G%20Modem-RF%20System%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Snapdragon%20X75%205G%20Modem-RF%20System%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=TalynPlus%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=Vision%20Intelligence%20400%20Platform%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCD9335%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCD9340%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCD9341%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCD9370%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCD9375%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCD9378%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCD9380%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCD9385%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCD9390%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCD9395%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCN3950%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCN3980%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCN3988%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCN3990%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCN6450%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCN6650%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCN6755%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCN7750%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCN7860%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCN7861%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCN7880%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WCN7881%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WSA8810%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WSA8815%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WSA8830%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WSA8832%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WSA8835%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WSA8840%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WSA8845%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WSA8845H%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-416%20Use%20After%20Free&color=brightgreen)
### Description
Memory corruption while processing multiple IOCTL calls from HLOS to DSP.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/xairy/linux-kernel-exploitation