CVE-2024-23360: Improper Access Control in Graphics Windows
Memory corruption while creating a LPAC client as LPAC engine was allowed to access GPU registers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23360?
CVE-2024-23360 has been classified with a critical severity due to memory corruption issues that could allow for potential exploits.
How do I fix CVE-2024-23360?
To address CVE-2024-23360, update the firmware of the affected Qualcomm Fastconnect models to the latest version provided by Qualcomm.
Which software is affected by CVE-2024-23360?
CVE-2024-23360 affects Qualcomm Fastconnect 6700, 6900, 7800, Sc8380xp, Snapdragon 7c+ Gen 3 Compute, Sc8280xp-abbb, Wcd9380, Wcd9385, Wsa8830, Wsa8835, Wsa8840, Wsa8845, and Wsa8845h firmware versions.
Is CVE-2024-23360 exploitable remotely?
CVE-2024-23360 may be exploited remotely due to memory corruption vulnerabilities that allow unauthorized access.
What type of vulnerability is CVE-2024-23360?
CVE-2024-23360 is classified as a memory corruption vulnerability, specifically occurring during the creation of an LPAC client.