CVE-2024-21482

Published: Jul 1, 2024Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.

Affected (69)

Products: Qualcomm: Csr8811 Firmware, Immersive Home 214 Platform Firmware, Immersive Home 216 Platform Firmware, Immersive Home 316 Platform Firmware, Immersive Home 318 Platform Firmware, Immersive Home 3210 Platform Firmware, Immersive Home 326 Platform Firmware, Ipq5010 Firmware, Ipq5028 Firmware, Ipq5302 Firmware, Ipq5312 Firmware, Ipq5332 Firmware, Ipq6000 Firmware, Ipq6010 Firmware, Ipq6018 Firmware, Ipq6028 Firmware, Ipq8070a Firmware, Ipq8071a Firmware, Ipq8072a Firmware, Ipq8074a Firmware, Ipq8076 Firmware, Ipq8076a Firmware, Ipq8078 Firmware, Ipq8078a Firmware, Ipq8173 Firmware, Ipq8174 Firmware, Ipq9008 Firmware, Ipq9554 Firmware, Ipq9570 Firmware, Ipq9574 Firmware, Qca4024 Firmware, Qca8075 Firmware, Qca8081 Firmware, Qca8082 Firmware, Qca8084 Firmware, Qca8085 Firmware, Qca8386 Firmware, Qca9888 Firmware, Qca9889 Firmware, Qcf8000 Firmware, Qcf8001 Firmware, Qcn5022 Firmware, Qcn5024 Firmware, Qcn5052 Firmware, Qcn5122 Firmware, Qcn5124 Firmware, Qcn5152 Firmware, Qcn5154 Firmware, Qcn5164 Firmware, Qcn6023 Firmware, Qcn6024 Firmware, Qcn6112 Firmware, Qcn6122 Firmware, Qcn6132 Firmware, Qcn6402 Firmware, Qcn6412 Firmware, Qcn6422 Firmware, Qcn6432 Firmware, Qcn9000 Firmware, Qcn9022 Firmware, Qcn9024 Firmware, Qcn9070 Firmware, Qcn9072 Firmware, Qcn9074 Firmware, Qcn9100 Firmware, Qcn9274 Firmware, Sdx55 Firmware, Sdx65m Firmware, Snapdragon X65 5g Modem Rf System Firmware

Qualcomm

69 products

Csr8811 Firmware

Immersive Home 214 Platform Firmware

Immersive Home 216 Platform Firmware

Immersive Home 316 Platform Firmware

Immersive Home 318 Platform Firmware

Immersive Home 3210 Platform Firmware

Immersive Home 326 Platform Firmware

Snapdragon X65 5g Modem Rf System Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Csr8811 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Csr8811	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Immersive Home 214 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Immersive Home 214 Platform	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Immersive Home 216 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Immersive Home 216 Platform	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Immersive Home 316 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Immersive Home 316 Platform	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Immersive Home 318 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Immersive Home 318 Platform	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Immersive Home 3210 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Immersive Home 3210 Platform	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Immersive Home 326 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Immersive Home 326 Platform	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq5010 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq5010	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq5028 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq5028	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq5302 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq5302	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq5312 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq5312	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq5332 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq5332	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq6000 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq6000	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq6010 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq6010	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq6018 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq6018	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq6028 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq6028	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq8070a Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq8070a	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq8071a Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq8071a	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq8072a Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq8072a	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq8074a Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq8074a	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq8076 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq8076	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq8076a Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq8076a	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq8078 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq8078	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq8078a Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq8078a	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq8173 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq8173	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq8174 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq8174	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq9008 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq9008	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq9554 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq9554	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq9570 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq9570	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Ipq9574 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Ipq9574	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca4024 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca4024	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca8075 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca8075	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca8081 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca8081	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca8082 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca8082	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca8084 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca8084	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca8085 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca8085	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca8386 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca8386	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca9888 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca9888	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qca9889 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qca9889	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcf8000 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcf8000	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcf8001 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcf8001	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn5022 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn5022	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn5024 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn5024	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn5052 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn5052	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn5122 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn5122	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn5124 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn5124	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn5152 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn5152	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn5154 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn5154	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn5164 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn5164	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6023 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6023	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6024 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6024	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6112 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6112	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6122 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6122	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6132 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6132	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6402 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6402	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6412 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6412	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6422 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6422	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn6432 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn6432	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9000 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9000	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9022 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9022	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9024 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9024	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9070 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9070	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9072 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9072	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9074 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9074	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9100 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9100	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcn9274 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcn9274	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sdx55 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sdx55	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sdx65m Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sdx65m	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon X65 5g Modem Rf System Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon X65 5g Modem Rf System	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html

Source: product-security@qualcomm.com

PatchVendor Advisory

https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2024-bulletin.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.