6.7

CVE-2024-23379

Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.

Data is provided by the National Vulnerability Database (NVD)
Qualcomm ≫ Wsa8835 Firmware Version-
   Qualcomm ≫ Wsa8835 Version-
Qualcomm ≫ Wsa8830 Firmware Version-
   Qualcomm ≫ Wsa8830 Version-
Qualcomm ≫ Wsa8815 Firmware Version-
   Qualcomm ≫ Wsa8815 Version-
Qualcomm ≫ Wsa8810 Firmware Version-
   Qualcomm ≫ Wsa8810 Version-
Qualcomm ≫ Wcn3990 Firmware Version-
   Qualcomm ≫ Wcn3990 Version-
Qualcomm ≫ Wcd9380 Firmware Version-
   Qualcomm ≫ Wcd9380 Version-
Qualcomm ≫ Wcd9341 Firmware Version-
   Qualcomm ≫ Wcd9341 Version-
Qualcomm ≫ Wcd9340 Firmware Version-
   Qualcomm ≫ Wcd9340 Version-
Qualcomm ≫ Wcd9335 Firmware Version-
   Qualcomm ≫ Wcd9335 Version-
Qualcomm ≫ Srv1m Firmware Version-
   Qualcomm ≫ Srv1m Version-
Qualcomm ≫ Srv1h Firmware Version-
   Qualcomm ≫ Srv1h Version-
Qualcomm ≫ Sd835 Firmware Version-
   Qualcomm ≫ Sd835 Version-
Qualcomm ≫ Sa9000p Firmware Version-
   Qualcomm ≫ Sa9000p Version-
Qualcomm ≫ Sa8775p Firmware Version-
   Qualcomm ≫ Sa8775p Version-
Qualcomm ≫ Sa8770p Firmware Version-
   Qualcomm ≫ Sa8770p Version-
Qualcomm ≫ Sa8650p Firmware Version-
   Qualcomm ≫ Sa8650p Version-
Qualcomm ≫ Sa8620p Firmware Version-
   Qualcomm ≫ Sa8620p Version-
Qualcomm ≫ Sa8255p Firmware Version-
   Qualcomm ≫ Sa8255p Version-
Qualcomm ≫ Sa7775p Firmware Version-
   Qualcomm ≫ Sa7775p Version-
Qualcomm ≫ Sa7255p Firmware Version-
   Qualcomm ≫ Sa7255p Version-
Qualcomm ≫ Qca6698aq Firmware Version-
   Qualcomm ≫ Qca6698aq Version-
Qualcomm ≫ Qca6584au Firmware Version-
   Qualcomm ≫ Qca6584au Version-
Qualcomm ≫ Qca6320 Firmware Version-
   Qualcomm ≫ Qca6320 Version-
Qualcomm ≫ Qca6310 Firmware Version-
   Qualcomm ≫ Qca6310 Version-
Qualcomm ≫ Qamsrv1m Firmware Version-
   Qualcomm ≫ Qamsrv1m Version-
Qualcomm ≫ Qamsrv1h Firmware Version-
   Qualcomm ≫ Qamsrv1h Version-
Qualcomm ≫ Qam8775p Firmware Version-
   Qualcomm ≫ Qam8775p Version-
Qualcomm ≫ Qam8650p Firmware Version-
   Qualcomm ≫ Qam8650p Version-
Qualcomm ≫ Qam8255p Firmware Version-
   Qualcomm ≫ Qam8255p Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.064
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
product-security@qualcomm.com 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-415 Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.