2024-05-06 16:03:27 +00:00
{
"id" : "CVE-2024-21474" ,
"sourceIdentifier" : "product-security@qualcomm.com" ,
"published" : "2024-05-06T15:15:21.770" ,
2025-01-15 17:04:07 +00:00
"lastModified" : "2025-01-15T16:57:08.283" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2024-05-06 16:03:27 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Memory corruption when size of buffer from previous call is used without validation or re-initialization."
2024-05-12 02:03:21 +00:00
} ,
{
"lang" : "es" ,
"value" : "Corrupci\u00f3n de la memoria cuando se utiliza el tama\u00f1o del b\u00fafer de la llamada anterior sin validaci\u00f3n o reinicializaci\u00f3n."
2024-05-06 16:03:27 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "product-security@qualcomm.com" ,
2024-12-08 03:06:42 +00:00
"type" : "Secondary" ,
2024-05-06 16:03:27 +00:00
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 8.4 ,
"baseSeverity" : "HIGH" ,
2024-05-06 16:03:27 +00:00
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2024-05-06 16:03:27 +00:00
} ,
"exploitabilityScore" : 2.5 ,
"impactScore" : 5.9
2025-01-15 17:04:07 +00:00
} ,
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" ,
"baseScore" : 7.8 ,
"baseSeverity" : "HIGH" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.9
2024-05-06 16:03:27 +00:00
}
]
} ,
"weaknesses" : [
{
"source" : "product-security@qualcomm.com" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-121"
}
]
2025-01-15 17:04:07 +00:00
} ,
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-787"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C88B9C86-2E8E-4DCE-A30C-02977CC00F00"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EE473A5A-5CFC-4F08-A173-30717F8BD0D7"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E670F500-9B71-4BBE-B5DA-221D35803C89"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9ADEB5C5-B79A-4F45-B7D3-75945B38DB6C"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "638DBC7F-456F-487D-BED2-2214DFF8BEE2"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:qam8295p_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C2D9E281-B382-41AC-84CB-5B1063E5AC51"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:qam8295p:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "44EBEBD5-98C3-493B-A108-FD4DE6FFBE97"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D527E2B1-2A46-4FBA-9F7A-F5543677C8FB"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8374DDB3-D484-4141-AE0C-42333D2721F6"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "643EC76D-2836-48E6-81DA-78C4883C33CA"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "477F6529-4CE1-44FC-B6EE-D24D44C71AE7"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0AE207DB-9770-40ED-961D-FDA75965826F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0E23922D-C37F-476F-A623-4C1458A9156F"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5FA1F8F4-EAF2-4704-A8A6-19AD3CA1B577"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B3F7853D-09EE-476F-B48D-BB30AEB4A67D"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1D1C53DC-D2F3-4C92-9725-9A85340AF026"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "ED0585FF-E390-46E8-8701-70964A4057BB"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2FA8F9DA-1386-4961-B9B2-484E4347852A"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "117289C8-7484-4EAE-8F35-A25768F00EED"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sa8295p_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2A19659B-A0C3-44B7-8D54-BA21729873A4"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sa8295p:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F978041A-CE28-4BDF-A7DB-F0360F1A5F14"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sa8530p_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6107034C-E0B0-43BD-963B-2B558B913537"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sa8530p:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FC1839A1-4B68-468E-8155-F0A53A3C9B94"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sa8540p_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8FE8B62D-83B4-4326-8A53-FED5947D5FFE"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sa8540p:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2D6F8899-136A-4A57-9F02-BD428E1663DA"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A024AB04-B213-4018-A4C1-FA467C7BA775"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A2A8AB7C-5D34-4794-8C06-2193075B323F"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sc8380xp_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "14E3FE58-7F1C-4F5C-B62D-0CF124E14AB2"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sc8380xp:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FFCB0BBA-3F81-4FCA-B3DE-190C46DA50DB"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:sc8280xp-abbb_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A7EA3A08-8624-4B78-AD75-828A3DF4CC52"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:sc8280xp-abbb:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "57E75758-F191-45B7-86A8-7F4EC08D2965"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:snapdragon_x65_5g_modem-rf_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CF9DE2CE-4765-4696-ABFE-4808EF77C8D9"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:snapdragon_x65_5g_modem-rf:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8031F868-16B3-4173-835A-0F818471CF4F"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "70292B01-617F-44AD-AF77-1AFC1450523D"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FA94C6D6-85DB-4031-AAF4-C399019AE16D"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "92B17201-8185-47F1-9720-5AB4ECD11B22"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E1FA2EB9-416F-4D69-8786-386CC73978AE"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "11B69595-E488-4590-A150-CE5BE08B5E13"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F80BC68E-7476-4A40-9F48-53722FE9A5BF"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6B36F4B2-BAA3-45AD-9967-0EB482C99708"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CA33DE15-C177-43B3-AD50-FF797753D12E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AE1A5841-5BCB-4033-ACB9-23F3FCA65309"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5B47BF35-3AA0-4667-842E-19B0FE30BF3C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8A071672-9405-4418-9141-35CEADBB65AF"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BB7CF473-8B25-4851-91F2-1BD693CCDC85"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "91E591F2-8F72-4A5A-9264-2742EB2DABDA"
}
]
}
]
2024-05-06 16:03:27 +00:00
}
] ,
"references" : [
{
"url" : "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html" ,
2025-01-15 17:04:07 +00:00
"source" : "product-security@qualcomm.com" ,
"tags" : [
"Vendor Advisory"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html" ,
2025-01-15 17:04:07 +00:00
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2024-05-06 16:03:27 +00:00
}
]
}