CVE-2024-23374

Stack-based Buffer Overflow in Power Management IC

State: Published
Severity: 6.7 Medium
Published: Oct 7, 2024
Updated: Oct 7, 2024
Reserved: Jan 16, 2024

Description

Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.

Scores

CVSS	Score	Vector	Source
3.1	6.7 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	FastConnect 6900Affected FastConnect 7800Affected QCA6174AAffected QCA6574AUAffected QCA6584AUAffected QCA6696Affected QCA6698AQAffected QCA9367Affected QCA9377Affected SA6145PAffected SA6150PAffected SA6155PAffected SA8145PAffected SA8150PAffected SA8155PAffected SA8195PAffected Snapdragon 8 Gen 1 Mobile PlatformAffected Snapdragon Auto 5G Modem-RF Gen 2Affected Snapdragon W5+ Gen 1 Wearable PlatformAffected SW5100Affected SW5100PAffected WCD9380Affected WCN3980Affected WCN3988Affected WSA8830Affected and 1 more version

Product

Versions

SnapdragonQualcomm, Inc.

FastConnect 6900Affected
FastConnect 7800Affected
QCA6174AAffected
QCA6574AUAffected
QCA6584AUAffected
QCA6696Affected
QCA6698AQAffected
QCA9367Affected
QCA9377Affected
SA6145PAffected
SA6150PAffected
SA6155PAffected
SA8145PAffected
SA8150PAffected
SA8155PAffected
SA8195PAffected
Snapdragon 8 Gen 1 Mobile PlatformAffected
Snapdragon Auto 5G Modem-RF Gen 2Affected
Snapdragon W5+ Gen 1 Wearable PlatformAffected
SW5100Affected
SW5100PAffected
WCD9380Affected
WCN3980Affected
WCN3988Affected
WSA8830Affected
and 1 more version

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.