7.8
High
CVE-2024-38410 Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice
Description
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon | Versions not published | |
| fastconnect_6700_firmware | Versions not published | |
| fastconnect_6900_firmware | Versions not published | |
| fastconnect_7800_firmware | Versions not published | |
| qcc2073_firmware | Versions not published | |
| qcc2076_firmware | Versions not published | |
| qcm5430_firmware | Versions not published | |
| qcm6490_firmware | Versions not published | |
| qcs5430_firmware | Versions not published |
Show the 16 other branches Hide the 16 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| qcs6490_firmware | Versions not published | |
| qualcomm_video_collaboration_vc3_platform_firmware | Versions not published | |
| sc8380xp_firmware | Versions not published | |
| sdm429w_firmware | Versions not published | |
| snapdragon_429_mobile_platform_firmware | Versions not published | |
| wcd9370_firmware | Versions not published | |
| wcd9375_firmware | Versions not published | |
| wcd9380_firmware | Versions not published | |
| wcd9385_firmware | Versions not published | |
| wcn3620_firmware | Versions not published | |
| wcn3660b_firmware | Versions not published | |
| wsa8830_firmware | Versions not published | |
| wsa8835_firmware | Versions not published | |
| wsa8840_firmware | Versions not published | |
| wsa8845_firmware | Versions not published | |
| wsa8845h_firmware | Versions not published |
References
- docs.qualcomm.com docs.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon
The 997 CVEs of Snapdragon →
CVE-2026-57559
Memory corruption while processing service requests
7.8
High
CVE-2026-57555
Memory Corruption when executing system service routines due to improper handling of user input buffers
7.8
High
CVE-2026-57554
Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC…
7.8
High
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override
7.5
High