CVE-2024-21474

Stack-based Buffer Overflow in PMIC

State: Published
Severity: 8.4 High
Published: May 6, 2024
Updated: Aug 1, 2024
Reserved: Dec 12, 2023

Description

Memory corruption when size of buffer from previous call is used without validation or re-initialization.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	AR8035Affected FastConnect 6900Affected FastConnect 7800Affected QAM8295PAffected QCA6574AUAffected QCA6595Affected QCA6696Affected QCA6698AQAffected QCA8081Affected QCA8337Affected SA8295PAffected SA8530PAffected SA8540PAffected SA9000PAffected SC8380XPAffected Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)Affected Snapdragon X65 5G Modem-RF SystemAffected WCD9380Affected WCD9385Affected WSA8830Affected WSA8835Affected WSA8840Affected WSA8845Affected WSA8845HAffected

Product

Versions

SnapdragonQualcomm, Inc.

AR8035Affected
FastConnect 6900Affected
FastConnect 7800Affected
QAM8295PAffected
QCA6574AUAffected
QCA6595Affected
QCA6696Affected
QCA6698AQAffected
QCA8081Affected
QCA8337Affected
SA8295PAffected
SA8530PAffected
SA8540PAffected
SA9000PAffected
SC8380XPAffected
Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)Affected
Snapdragon X65 5G Modem-RF SystemAffected
WCD9380Affected
WCD9385Affected
WSA8830Affected
WSA8835Affected
WSA8840Affected
WSA8845Affected
WSA8845HAffected

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.