CVE-2024-38411

nvd nist

Published: Feb 3, 2025Modified: Aug 11, 2025

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls.

Affected (18)

Products: Qualcomm: Fastconnect 6900 Firmware, Fastconnect 7800 Firmware, Qcm8550 Firmware, Qcs6490 Firmware, Qcs8550 Firmware, Video Collaboration Vc3 Platform Firmware, Sg8275p Firmware, Sm8550p Firmware, Snapdragon 8+ Gen 2 Mobile Firmware, Snapdragon 8 Gen 3 Mobile Firmware, Wcd9380 Firmware, Wcd9385 Firmware, Wcd9390 Firmware, Wcd9395 Firmware, Wsa8840 Firmware, Wsa8845 Firmware, Wsa8845h Firmware

Qualcomm

17 products

Fastconnect 6900 Firmware

Fastconnect 7800 Firmware

Qcm8550 Firmware

Qcs6490 Firmware

Qcs8550 Firmware

Video Collaboration Vc3 Platform Firmware

Sg8275p Firmware

Sm8550p Firmware

Snapdragon 8+ Gen 2 Mobile Firmware

Snapdragon 8 Gen 3 Mobile Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 6900 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 6900	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Fastconnect 7800 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Fastconnect 7800	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcm8550 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcm8550	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs6490 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs6490	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Qcs8550 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Qcs8550	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Video Collaboration Vc3 Platform Firmware	All versions

Running on/with	Platform Versions
Qualcomm Video Collaboration Vc3 Platform	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sg8275p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sg8275p	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Sm8550p Firmware	All versions

Running on/with	Platform Versions
Qualcomm Sm8550p	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon 8 Gen 2 Mobile Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon 8 Gen 2 Mobile	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon 8 Gen 3 Mobile Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon 8 Gen 3 Mobile	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Snapdragon 8+ Gen 2 Mobile Firmware	All versions

Running on/with	Platform Versions
Qualcomm Snapdragon 8+ Gen 2 Mobile	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9380 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9380	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9385 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9385	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9390 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9390	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wcd9395 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wcd9395	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8840 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8840	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8845 Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8845	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Qualcomm Wsa8845h Firmware	All versions

Running on/with	Platform Versions
Qualcomm Wsa8845h	All versions

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (1)

https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html

Source: product-security@qualcomm.com

PatchVendor Advisory

Timeline

No history available yet.