CVE-2024-38411

EUVD-2024-37107 · Published Feb 3, 2025

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls.

Technologies

Qualcomm Sg8275PQualcomm Snapdragon 8 Gen 3 Mobile FirmwareQualcomm Sg8275P FirmwareQualcomm Fastconnect 7800Qualcomm Qcs8550 FirmwareQualcomm Wcd9395 FirmwareQualcomm Wcd9385Qualcomm Video Collaboration Vc3 Platform FirmwareQualcomm Wsa8845 FirmwareQualcomm Fastconnect 7800 FirmwareQualcomm Wcd9380Qualcomm Fastconnect 6900 FirmwareQualcomm Snapdragon 8 Gen 3 MobileQualcomm Fastconnect 6900Qualcomm Snapdragon 8 Gen 2 MobileQualcomm Wsa8840 FirmwareQualcomm Wsa8845Qualcomm Wcd9395Qualcomm Snapdragon 8\+ Gen 2 MobileQualcomm Wsa8845HQualcomm Qcs8550Qualcomm Wsa8845H FirmwareQualcomm Sm8550P FirmwareQualcomm Snapdragon 8\+ Gen 2 Mobile FirmwareQualcomm Wsa8840Qualcomm Qcs6490 FirmwareQualcomm Qcs6490Qualcomm Snapdragon 8 Gen 2 Mobile FirmwareQualcomm Wcd9390 FirmwareQualcomm Sm8550PQualcomm Wcd9390Qualcomm Wcd9385 FirmwareQualcomm Qcm8550Qualcomm Wcd9380 FirmwareQualcomm Qcm8550 FirmwareQualcomm Video Collaboration Vc3 Platform

Weaknesses

CWE-416

CVSS scores

v3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html

Potentially impacted assets

See if this affects your attack surface