CVE-2024-38410

Stack-based Buffer Overflow in WLAN Windows Host

State: Published
Severity: 7.8 High
Published: Nov 4, 2024
Updated: Nov 16, 2024
Reserved: Jun 16, 2024

Description

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	qualcomm

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
SnapdragonQualcomm, Inc.	FastConnect 6700Affected FastConnect 6900Affected FastConnect 7800Affected QCC2073Affected QCC2076Affected QCM5430Affected QCM6490Affected QCS5430Affected QCS6490Affected Qualcomm Video Collaboration VC3 PlatformAffected SC8380XPAffected SDM429WAffected Snapdragon 429 Mobile PlatformAffected Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)Affected WCD9370Affected WCD9375Affected WCD9380Affected WCD9385Affected WCN3620Affected WCN3660BAffected WSA8830Affected WSA8835Affected WSA8840Affected WSA8845Affected WSA8845HAffected

Product

Versions

SnapdragonQualcomm, Inc.

FastConnect 6700Affected
FastConnect 6900Affected
FastConnect 7800Affected
QCC2073Affected
QCC2076Affected
QCM5430Affected
QCM6490Affected
QCS5430Affected
QCS6490Affected
Qualcomm Video Collaboration VC3 PlatformAffected
SC8380XPAffected
SDM429WAffected
Snapdragon 429 Mobile PlatformAffected
Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)Affected
WCD9370Affected
WCD9375Affected
WCD9380Affected
WCD9385Affected
WCN3620Affected
WCN3660BAffected
WSA8830Affected
WSA8835Affected
WSA8840Affected
WSA8845Affected
WSA8845HAffected

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.