7.8

CVE-2024-38401

Memory corruption while processing concurrent IOCTL calls.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
QualcommAr8035 Firmware Version-
   QualcommAr8035 Version-
QualcommC-v2x 9150 Firmware Version-
   QualcommC-v2x 9150 Version-
QualcommQca6574a Firmware Version-
   QualcommQca6574a Version-
QualcommQca6584au Firmware Version-
   QualcommQca6584au Version-
QualcommQca6595au Firmware Version-
   QualcommQca6595au Version-
QualcommQca6696 Firmware Version-
   QualcommQca6696 Version-
QualcommQca6698aq Firmware Version-
   QualcommQca6698aq Version-
QualcommQca8081 Firmware Version-
   QualcommQca8081 Version-
QualcommQca8337 Firmware Version-
   QualcommQca8337 Version-
QualcommQcc710 Firmware Version-
   QualcommQcc710 Version-
QualcommQcn6224 Firmware Version-
   QualcommQcn6224 Version-
QualcommQcn6274 Firmware Version-
   QualcommQcn6274 Version-
QualcommQcs410 Firmware Version-
   QualcommQcs410 Version-
QualcommQcs610 Firmware Version-
   QualcommQcs610 Version-
QualcommQfw7114 Firmware Version-
   QualcommQfw7114 Version-
QualcommQfw7124 Firmware Version-
   QualcommQfw7124 Version-
QualcommSdx55 Firmware Version-
   QualcommSdx55 Version-
QualcommSw5100 Firmware Version-
   QualcommSw5100 Version-
QualcommSw5100p Firmware Version-
   QualcommSw5100p Version-
QualcommWcd9340 Firmware Version-
   QualcommWcd9340 Version-
QualcommWcd9341 Firmware Version-
   QualcommWcd9341 Version-
QualcommWcd9360 Firmware Version-
   QualcommWcd9360 Version-
QualcommWcd9370 Firmware Version-
   QualcommWcd9370 Version-
QualcommWcn3660b Firmware Version-
   QualcommWcn3660b Version-
QualcommWcn3680b Firmware Version-
   QualcommWcn3680b Version-
QualcommWcn3950 Firmware Version-
   QualcommWcn3950 Version-
QualcommWcn3980 Firmware Version-
   QualcommWcn3980 Version-
QualcommWcn3988 Firmware Version-
   QualcommWcn3988 Version-
QualcommWsa8810 Firmware Version-
   QualcommWsa8810 Version-
QualcommWsa8815 Firmware Version-
   QualcommWsa8815 Version-
QualcommWsa8830 Firmware Version-
   QualcommWsa8830 Version-
QualcommWsa8835 Firmware Version-
   QualcommWsa8835 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.107
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
product-security@qualcomm.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.