CVE-2024-21474: Stack-based Buffer Overflow in PMIC
Published May 6, 2024
·Updated
Memory corruption when size of buffer from previous call is used without validation or re-initialization.
Affected Software
48 affected components
All of the following
Qualcomm Ar8035 Firmware
Qualcomm Ar8035
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Qam8295p Firmware
Qualcomm Qam8295p
All of the following
Qualcomm Qca6574au Firmware
Qualcomm QCA6574AU
All of the following
Qualcomm Qca6595 Firmware
Qualcomm Qca6595
All of the following
Qualcomm Qca6696 Firmware
Qualcomm Qca6696
All of the following
Qualcomm Qca6698aq Firmware
Qualcomm Qca6698aq
All of the following
Qualcomm Qca8081 Firmware
Qualcomm QCA8081
All of the following
Qualcomm Qca8337 Firmware
Qualcomm Qca8337
All of the following
Qualcomm Sa8295p Firmware
Qualcomm Sa8295p
All of the following
Qualcomm Sa8530p Firmware
Qualcomm Sa8530p
All of the following
Qualcomm Sa8540p Firmware
Qualcomm Sa8540p
All of the following
Qualcomm Sa9000p Firmware
Qualcomm Sa9000p
All of the following
Qualcomm Sc8380xp Firmware
Qualcomm Sc8380xp
All of the following
Qualcomm Sc8280xp-abbb Firmware
Qualcomm Sc8280xp-abbb
All of the following
Qualcomm Snapdragon X65 5g Modem-rf Firmware
Qualcomm Snapdragon X65 5g Modem-rf
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Event History
May 6, 2024
CVE Published
via MITRE·02:32 PM
Data Sourced
via MITRE·02:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-21474?
CVE-2024-21474 has a critical severity due to its potential to cause memory corruption.
2
How do I fix CVE-2024-21474?
To fix CVE-2024-21474, ensure proper validation and re-initialization of buffers before use.
3
What software is affected by CVE-2024-21474?
CVE-2024-21474 affects various Qualcomm firmware including the Ar8035, Fastconnect 6900, and other models.
4
Can CVE-2024-21474 lead to system crashes?
Yes, CVE-2024-21474 may lead to system instability and crashes due to memory corruption issues.
5
Is there any workaround for CVE-2024-21474?
The best workaround for CVE-2024-21474 is to avoid using vulnerable firmware versions until a patch is applied.