6.7
Medium
CVE-2024-23377 Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the…
Description
Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon | Versions not published | |
| fastconnect_6900_firmware | Versions not published | |
| fastconnect_7800_firmware | Versions not published | |
| qca6391_firmware | Versions not published | |
| qcm8550_firmware | Versions not published | |
| qcs7230_firmware | Versions not published | |
| qcs8250_firmware | Versions not published | |
| qcs8550_firmware | Versions not published | |
| qualcomm_video_collaboration_vc5_platform_firmware | Versions not published |
Show the 30 other branches Hide the 30 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| sd_8_gen1_5g_firmware | Versions not published | |
| sg8275_firmware | Versions not published | |
| sg8275p_firmware | Versions not published | |
| sm7525_firmware | Versions not published | |
| sm7550_firmware | Versions not published | |
| sm8550p_firmware | Versions not published | |
| snapdragon_8_gen_2_mobile_platform_firmware | Versions not published | |
| snapdragon_ar2_gen_1_platform_firmware | Versions not published | |
| ssg2115p_firmware | Versions not published | |
| ssg2125p_firmware | Versions not published | |
| sxr1230p_firmware | Versions not published | |
| sxr2230p_firmware | Versions not published | |
| sxr2250p_firmware | Versions not published | |
| wcd9370_firmware | Versions not published | |
| wcd9371_firmware | Versions not published | |
| wcd9375_firmware | Versions not published | |
| wcd9378_firmware | Versions not published | |
| wcd9380_firmware | Versions not published | |
| wcd9385_firmware | Versions not published | |
| wcd9390_firmware | Versions not published | |
| wcd9395_firmware | Versions not published | |
| wcn6650_firmware | Versions not published | |
| wcn6755_firmware | Versions not published | |
| wcn7880_firmware | Versions not published | |
| wsa8830_firmware | Versions not published | |
| wsa8832_firmware | Versions not published | |
| wsa8835_firmware | Versions not published | |
| wsa8840_firmware | Versions not published | |
| wsa8845_firmware | Versions not published | |
| wsa8845h_firmware | Versions not published |
References
- docs.qualcomm.com docs.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon
The 997 CVEs of Snapdragon →
CVE-2026-57559
Memory corruption while processing service requests
7.8
High
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers
7.8
High
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC…
7.8
High
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override
7.5
High