8.4
High
CVE-2024-21474 Memory corruption when size of buffer from previous call is used without validation or re-initialization
Description
Memory corruption when size of buffer from previous call is used without validation or re-initialization.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon | Versions not published | |
| ar8035_firmware | Versions not published | |
| fastconnect_6900_firmware | Versions not published | |
| fastconnect_7800_firmware | Versions not published | |
| qam8295p_firmware | Versions not published | |
| qca6574au_firmware | Versions not published | |
| qca6595_firmware | Versions not published | |
| qca6696_firmware | Versions not published | |
| qca6698aq_firmware | Versions not published |
Show the 13 other branches Hide the 13 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| qca8081_firmware | Versions not published | |
| qca8337_firmware | Versions not published | |
| sa8295p_firmware | Versions not published | |
| sa8530p_firmware | Versions not published | |
| sa8540p_firmware | Versions not published | |
| sc8380xp_firmware | Versions not published | |
| snapdragon_x65_5g_modem-rf_system_firmware | Versions not published | |
| wcd9380_firmware | Versions not published | |
| wcd9385_firmware | Versions not published | |
| wsa8830_firmware | Versions not published | |
| wsa8835_firmware | Versions not published | |
| wsa8840_firmware | Versions not published | |
| wsa8845h_firmware | Versions not published |
References
- docs.qualcomm.com docs.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon
The 997 CVEs of Snapdragon →
CVE-2026-57559
Memory corruption while processing service requests
7.8
High
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers
7.8
High
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC…
7.8
High
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override
7.5
High