CVE-2024-21464: Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity
Published Jan 6, 2025
·Updated
Memory corruption while processing IPA statistics, when there are no active clients registered.
Affected Software
43 affected components
All of the following
QUALCOMM Fastconnect 6700 Firmware
QUALCOMM Fastconnect 6700
All of the following
QUALCOMM Fastconnect 6900 Firmware
QUALCOMM Fastconnect 6900
All of the following
QUALCOMM Fastconnect 7800 Firmware
QUALCOMM Fastconnect 7800
All of the following
QUALCOMM Qcm4490 Firmware
QUALCOMM Qcm4490
All of the following
QUALCOMM Qcs4490 Firmware
QUALCOMM Qcs4490
All of the following
QUALCOMM Snapdragon 8 Gen 3 Mobile Firmware
QUALCOMM Snapdragon 8 Gen 3 Mobile
All of the following
QUALCOMM Snapdragon 8\+ Gen 1 Mobile Firmware
QUALCOMM Snapdragon 8\+ Gen 1 Mobile
All of the following
QUALCOMM Talynplus Firmware
Qualcomm Talynplus
All of the following
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
All of the following
QUALCOMM Wcd9390 Firmware
QUALCOMM Wcd9390
All of the following
QUALCOMM Wcd9395 Firmware
QUALCOMM Wcd9395
All of the following
Qualcomm Wcn3950 Firmware
Qualcomm Wcn3950
All of the following
QUALCOMM Wcn6740 Firmware
QUALCOMM Wcn6740
All of the following
Qualcomm Wsa8810 Firmware
Qualcomm Wsa8810
All of the following
Qualcomm Wsa8815 Firmware
Qualcomm Wsa8815
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
QUALCOMM Wsa8832 Firmware
QUALCOMM Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
QUALCOMM Wsa8840 Firmware
QUALCOMM Wsa8840
All of the following
QUALCOMM Wsa8845 Firmware
QUALCOMM Wsa8845
All of the following
QUALCOMM Wsa8845h Firmware
QUALCOMM Wsa8845h
Google Android
Remediation
Event History
Jan 6, 2025
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
CVE Published
via MITRE·10:33 AM
Data Sourced
via MITRE·10:33 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-21464?
CVE-2024-21464 is classified as a memory corruption vulnerability that could potentially lead to exploitation.
2
What software is affected by CVE-2024-21464?
CVE-2024-21464 affects various Qualcomm firmware versions and Google Android platforms.
3
How do I fix CVE-2024-21464?
To fix CVE-2024-21464, check for updates from Qualcomm and Google for affected firmware and software.
4
What are the potential consequences of CVE-2024-21464?
The consequences of CVE-2024-21464 may include system crashes or unauthorized access due to memory corruption.
5
When was CVE-2024-21464 reported?
CVE-2024-21464 was reported in early 2024 and has documented fixes available from manufacturers.