CVE-2024-21464: Buffer Copy Without Checking Size of Input in Data Network Stack & Connectivity
Memory corruption while processing IPA statistics, when there are no active clients registered.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/platform/vendor/opensource/dataipato a version that resolves this vulnerability.Fixed in SoCVersion:2025-01-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21464?
CVE-2024-21464 is classified as a memory corruption vulnerability that could potentially lead to exploitation.
What software is affected by CVE-2024-21464?
CVE-2024-21464 affects various Qualcomm firmware versions and Google Android platforms.
How do I fix CVE-2024-21464?
To fix CVE-2024-21464, check for updates from Qualcomm and Google for affected firmware and software.
What are the potential consequences of CVE-2024-21464?
The consequences of CVE-2024-21464 may include system crashes or unauthorized access due to memory corruption.
When was CVE-2024-21464 reported?
CVE-2024-21464 was reported in early 2024 and has documented fixes available from manufacturers.