Details of VAR-202411-0381

ID

VAR-202411-0381

CVE

CVE-2024-38423

TITLE

Classic buffer overflow vulnerability in multiple Qualcomm products

Trust: 0.8

sources: JVNDB: JVNDB-2024-012155

DESCRIPTION

Memory corruption while processing GPU page table switch. WSA8835 firmware, WSA8830 firmware, WSA8815 Multiple Qualcomm products such as firmware have a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2024-38423 // JVNDB: JVNDB-2024-012155

AFFECTED PRODUCTS

vendor:	qualcomm	model:	snapdragon 625 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 636 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 678 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 855\+\/860 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 1200 wearable platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 208 processor	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca8337	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8064au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 870 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon x65 5g modem-rf system	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 820 automotive platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8909w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon x62 5g modem-rf system	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8530p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9380	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 212 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3988	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sw5100p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon w5\+ gen 1 wearable platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 626 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd730	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6145p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	apq8017	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	aqt1000	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smart display 200 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 439 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	csrb31024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qrb5165n	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs410	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 855 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 730g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	csra6620	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 4 gen 1 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9371	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 210 processor	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6431	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 632 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6696	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9326	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9385	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 865 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 865\+ 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9074	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6436	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8108	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon xr2\+ gen 1 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	9206 lte modem	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6420	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon x55 5g modem-rf system	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon x20 lte modem	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm4290	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9011	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa6155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9341	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9340	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon x5 lte modem	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 845 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sxr1120	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx61	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8295p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 6200	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 460 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6426	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3910	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smart audio 200 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3660b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx55	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	robotics rb5 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon x50 5g modem-rf system	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6335	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3615	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	vision intelligence 200 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8209	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qsm8250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd865 5g	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon wear 2500 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 675 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 765g 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9375	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon xr1 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 750g 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs6490	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ar8031	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6430	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8830	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qam8295p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3680b	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 888 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 695 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9335	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 425 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 768g 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8540p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 690 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	vision intelligence 100 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9367	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6310	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3990	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 685 4g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs8155	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 730 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm4125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qrb5165m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sw5100	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs6125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6320	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 732g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca8081	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	315 5g iot modem	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	video collaboration vc1 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm6370	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon xr2 5g platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 888\+ 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6391	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 680 4g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdm429w	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 630 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm2150	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6595au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9650	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	vision intelligence 300 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 710 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm2290	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs2290	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs4290	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	215 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8810	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 480\+ 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 670 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca9377	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9628	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9370	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	flight rb5 5g platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 765 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6574au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8145p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon wear 3100 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn9012	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd 675	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 6800	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd675	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8608	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd670	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	c-v2x 9150	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcn6024	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 429 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 835 mobile pc platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	ar8035	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6174a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 660 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	msm8996au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sxr2130	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 662 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd835	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon wear 2100 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	smart audio 400 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa8195p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3950	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6584au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	mdm9250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6174	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcs610	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3980	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon auto 4g modem	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	robotics rb3 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6698aq	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 480 5g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd626	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3610	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564a	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 6700	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd855	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	vision intelligence 400 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon auto 5g modem-rf	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sdx20m	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	video collaboration vc3 platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6564au	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm6250	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	fastconnect 6900	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	205 mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcd9330	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon x12 lte modem	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sd660	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa9000p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa4150p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm6490	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qca6421	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sa4155p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3620	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	qcm6125	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	csra6640	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wsa8815	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	sm7250p	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	snapdragon 720g mobile platform	scope:	eq	version:	-	Trust: 1.0
vendor:	qualcomm	model:	wcn3680	scope:	eq	version:	-	Trust: 1.0
vendor:	クアルコム	model:	wcd9371	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3910	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcd9370	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3980	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wsa8810	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3660b	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wsa8830	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3950	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wsa8815	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3620	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3610	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3680b	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wsa8835	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3680	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcd9380	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcd9375	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3988	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcd9385	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3615	scope:	-	version:	-	Trust: 0.8
vendor:	クアルコム	model:	wcn3990	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2024-012155 // NVD: CVE-2024-38423

CVSS

SEVERITY

CVSSV2

CVSSV3

product-security@qualcomm.com:	CVE-2024-38423
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2024-012155
value:	HIGH
Trust: 0.8

product-security@qualcomm.com:	CVE-2024-38423
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2024-012155
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2024-012155 // NVD: CVE-2024-38423

PROBLEMTYPE DATA

problemtype:	CWE-120	Trust: 1.0
problemtype:	Classic buffer overflow (CWE-120) [ others ]	Trust: 0.8
problemtype:	Classic buffer overflow (CWE-120) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2024-012155 // NVD: CVE-2024-38423

EXTERNAL IDS

db:	NVD	id:	CVE-2024-38423	Trust: 2.6
db:	JVNDB	id:	JVNDB-2024-012155	Trust: 0.8

sources: JVNDB: JVNDB-2024-012155 // NVD: CVE-2024-38423

REFERENCES

url:	https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2024-38423	Trust: 0.8

sources: JVNDB: JVNDB-2024-012155 // NVD: CVE-2024-38423

SOURCES

db:	JVNDB	id:	JVNDB-2024-012155
db:	NVD	id:	CVE-2024-38423

LAST UPDATE DATE

2024-11-12T23:28:17.384000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2024-012155	date:	2024-11-08T00:50:00
db:	NVD	id:	CVE-2024-38423	date:	2024-11-07T19:46:41.697

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2024-012155	date:	2024-11-08T00:00:00
db:	NVD	id:	CVE-2024-38423	date:	2024-11-04T10:15:09.183