CVE-2024-21475: Use of Out-of-range Pointer Offset in Video
Memory corruption when the payload received from firmware is not as per the expected protocol size.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2024-05-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21475?
The severity of CVE-2024-21475 is rated high due to memory corruption vulnerabilities that can lead to potential exploitation.
How do I fix CVE-2024-21475?
To fix CVE-2024-21475, update the affected Qualcomm firmware to the latest version as recommended by Qualcomm security advisories.
Which products are affected by CVE-2024-21475?
CVE-2024-21475 affects various Qualcomm firmware, including those for Qualcomm's 5G modems and Android devices.
What vulnerabilities does CVE-2024-21475 exploit?
CVE-2024-21475 exploits memory corruption vulnerabilities caused by unexpected protocol sizes in firmware payloads.
Is CVE-2024-21475 easy to exploit?
Exploitation of CVE-2024-21475 could be complex due to the need for specific conditions in the firmware interaction.