CVE-2024-23372: Integer Overflow or Wraparound in Graphics

Q: What is the severity of CVE-2024-23372?

CVE-2024-23372 is classified as a critical vulnerability due to the potential for memory corruption leading to system instability or exploitation.

Q: How do I fix CVE-2024-23372?

To fix CVE-2024-23372, you should apply the latest software updates provided by your device manufacturer that address this vulnerability.

Q: Which software is affected by CVE-2024-23372?

CVE-2024-23372 affects various Qualcomm firmware versions and devices running Google Android.

Q: What are the potential impacts of CVE-2024-23372?

The potential impacts of CVE-2024-23372 include memory corruption, leading to system crashes, data leaks, or remote code execution.

Q: Is there any workaround for CVE-2024-23372?

Currently, there are no specific workarounds for CVE-2024-23372; updating to the latest firmware is the recommended action.

Published Jul 1, 2024

Updated

Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size.

Affected Software

225 affected componentsFixes available

All of the following

Qualcomm Fastconnect 6200 Firmware

Qualcomm Fastconnect 6200

All of the following

Qualcomm Fastconnect 6700 Firmware

Qualcomm Fastconnect 6700

All of the following

Qualcomm Fastconnect 6900 Firmware

Qualcomm Fastconnect 6900

All of the following

Qualcomm Fastconnect 7800 Firmware

Qualcomm Fastconnect 7800

All of the following

Qualcomm Flight Rb5 5g Platform Firmware

Qualcomm Flight Rb5 5g Platform

All of the following

Qualcomm Qam8255p Firmware

Qualcomm Qam8255p

All of the following

Qualcomm Qam8295p Firmware

Qualcomm Qam8295p

All of the following

Qualcomm Qam8620p Firmware

Qualcomm Qam8620p

All of the following

Qualcomm Qam8650p Firmware

Qualcomm Qam8650p

All of the following

Qualcomm Qam8775p Firmware

Qualcomm Qam8775p

All of the following

Qualcomm Qamsrv1h Firmware

Qualcomm Qamsrv1h

All of the following

Qualcomm Qamsrv1m Firmware

Qualcomm Qamsrv1m

All of the following

Qualcomm Qca6391 Firmware

Qualcomm Qca6391

All of the following

Qualcomm Qca6574 Firmware

Qualcomm QCA6574

All of the following

Qualcomm Qca6574a Firmware

Qualcomm Qca6574a

All of the following

Qualcomm Qca6574au Firmware

Qualcomm QCA6574AU

All of the following

Qualcomm Qca6595 Firmware

Qualcomm Qca6595

All of the following

Qualcomm Qca6595au Firmware

Qualcomm Qca6595au

All of the following

Qualcomm Qca6678aq Firmware

Qualcomm Qca6678aq

All of the following

Qualcomm Qca6696 Firmware

Qualcomm Qca6696

All of the following

Qualcomm Qca6698aq Firmware

Qualcomm Qca6698aq

All of the following

Qualcomm Qca6797aq Firmware

Qualcomm Qca6797aq

All of the following

Qualcomm Qcm4325 Firmware

Qualcomm Qcm4325

All of the following

Qualcomm Qcm4490 Firmware

Qualcomm Qcm4490

All of the following

Qualcomm Qcm5430 Firmware

Qualcomm Qcm5430

All of the following

Qualcomm Qcm6125 Firmware

Qualcomm Qcm6125

All of the following

Qualcomm Qcm6490 Firmware

Qualcomm Qcm6490

All of the following

Qualcomm Qcm8550 Firmware

Qualcomm Qcm8550

All of the following

Qualcomm Qcs4490 Firmware

Qualcomm Qcs4490

All of the following

Qualcomm Qcs5430 Firmware

Qualcomm Qcs5430

All of the following

Qualcomm Qcs6125 Firmware

Qualcomm Qcs6125

All of the following

Qualcomm Qcs6490 Firmware

Qualcomm Qcs6490

All of the following

Qualcomm Qcs7230 Firmware

Qualcomm Qcs7230

All of the following

Qualcomm Qcs8250 Firmware

Qualcomm Qcs8250

All of the following

Qualcomm Qcs8550 Firmware

Qualcomm Qcs8550

All of the following

Qualcomm Qrb5165n Firmware

Qualcomm Qrb5165n

All of the following

Qualcomm Video Collaboration Vc1 Platform Firmware

Qualcomm Video Collaboration Vc1 Platform

All of the following

Qualcomm Video Collaboration Vc3 Platform Firmware

Qualcomm Video Collaboration Vc3 Platform

All of the following

Qualcomm Video Collaboration Vc5 Platform Firmware

Qualcomm Video Collaboration Vc5 Platform

All of the following

Qualcomm Robotics Rb5 Platform Firmware

Qualcomm Robotics Rb5 Platform

All of the following

Qualcomm Sa6155p Firmware

Qualcomm Sa6155p

All of the following

Qualcomm Sa7255p Firmware

Qualcomm Sa7255p

All of the following

Qualcomm Sa7775p Firmware

Qualcomm Sa7775p

All of the following

Qualcomm Sa8155p Firmware

Qualcomm Sa8155p

All of the following

Qualcomm Sa8195p Firmware

Qualcomm Sa8195p

All of the following

Qualcomm Sa8255p Firmware

Qualcomm Sa8255p

All of the following

Qualcomm Sa8295p Firmware

Qualcomm Sa8295p

All of the following

Qualcomm Sa8620p Firmware

Qualcomm Sa8620p

All of the following

Qualcomm Sa8650p Firmware

Qualcomm Sa8650p

All of the following

Qualcomm Sa8770p Firmware

Qualcomm Sa8770p

All of the following

Qualcomm Sa8775p Firmware

Qualcomm Sa8775p

All of the following

Qualcomm Sa9000p Firmware

Qualcomm Sa9000p

All of the following

Qualcomm Sd 8 Gen1 5g Firmware

Qualcomm Sd 8 Gen1 5g

All of the following

Qualcomm Sd888 Firmware

Qualcomm Sd888

All of the following

Qualcomm Sg4150p Firmware

Qualcomm Sg4150p

All of the following

Qualcomm Sg8275p Firmware

Qualcomm Sg8275p

All of the following

Qualcomm Sm7315 Firmware

Qualcomm Sm7315

All of the following

Qualcomm Sm7325p Firmware

Qualcomm Sm7325p

All of the following

Qualcomm Sm8550p Firmware

Qualcomm Sm8550p

All of the following

Qualcomm Snapdragon 4 Gen 1 Mobile Platform Firmware

Qualcomm Snapdragon 4 Gen 1 Mobile Platform

All of the following

Qualcomm Snapdragon 4 Gen 2 Mobile Platform Firmware

Qualcomm Snapdragon 4 Gen 2 Mobile Platform

All of the following

Qualcomm Snapdragon 460 Mobile Platform Firmware

Qualcomm Snapdragon 460 Mobile Platform

All of the following

Qualcomm Snapdragon 480 5g Mobile Platform Firmware

Qualcomm Snapdragon 480 5g Mobile Platform

All of the following

Qualcomm Sm4350-ac Firmware

Qualcomm Sm4350-ac

All of the following

Qualcomm Snapdragon 662 Mobile Platform Firmware

Qualcomm Snapdragon 662 Mobile Platform

All of the following

Qualcomm Snapdragon 680 4g Mobile Platform Firmware

Qualcomm Snapdragon 680 4g Mobile Platform

All of the following

Qualcomm Sm6225-ad Firmware

Qualcomm Sm6225-ad

All of the following

Qualcomm Snapdragon 695 5g Mobile Platform Firmware

Qualcomm Snapdragon 695 5g Mobile Platform

All of the following

Qualcomm Snapdragon 778g 5g Mobile Platform Firmware

Qualcomm Snapdragon 778g 5g Mobile Platform

All of the following

Qualcomm Sm7325-ae Firmware

Qualcomm Sm7325-ae

All of the following

Qualcomm Snapdragon 780g 5g Mobile Platform Firmware

Qualcomm Snapdragon 780g 5g Mobile Platform

All of the following

Qualcomm Sm7325-af Firmware

Qualcomm Sm7325-af

All of the following

Qualcomm Snapdragon 7c\+ Gen 3 Compute Firmware

Qualcomm Snapdragon 7c\+ Gen 3 Compute

All of the following

Qualcomm Snapdragon 8 Gen 1 Mobile Platform Firmware

Qualcomm Snapdragon 8 Gen 1 Mobile Platform

All of the following

Qualcomm Snapdragon 8 Gen 2 Mobile Platform Firmware

Qualcomm Snapdragon 8 Gen 2 Mobile Platform

All of the following

Qualcomm Snapdragon 8 Gen 3 Mobile Platform Firmware

Qualcomm Snapdragon 8 Gen 3 Mobile Platform

All of the following

Qualcomm Snapdragon 8\+ Gen 1 Mobile Platform Firmware

Qualcomm Snapdragon 8\+ Gen 1 Mobile Platform

All of the following

Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform Firmware

Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform

All of the following

Qualcomm Snapdragon 888 5g Mobile Platform Firmware

Qualcomm Snapdragon 888 5g Mobile Platform

All of the following

Qualcomm Sm8350-ac Firmware

Qualcomm Sm8350-ac

All of the following

Qualcomm Snapdragon Ar2 Gen 1 Platform Firmware

Qualcomm Snapdragon Ar2 Gen 1 Platform

All of the following

Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform Firmware

Qualcomm Snapdragon W5\+ Gen 1 Wearable Platform

All of the following

Qualcomm Srv1h Firmware

Qualcomm Srv1h

All of the following

Qualcomm Srv1l Firmware

Qualcomm Srv1l

All of the following

Qualcomm Srv1m Firmware

Qualcomm Srv1m

All of the following

Qualcomm Ssg2115p Firmware

Qualcomm Ssg2115p

All of the following

Qualcomm Ssg2125p Firmware

Qualcomm Ssg2125p

All of the following

Qualcomm Sw5100 Firmware

Qualcomm Sw5100

All of the following

Qualcomm Sw5100p Firmware

Qualcomm Sw5100p

All of the following

Qualcomm Sxr1230p Firmware

Qualcomm Sxr1230p

All of the following

Qualcomm Sxr2230p Firmware

Qualcomm Sxr2230p

All of the following

Qualcomm Sxr2250p Firmware

Qualcomm Sxr2250p

All of the following

Qualcomm Talynplus Firmware

Qualcomm Talynplus

All of the following

Qualcomm Wcd9370 Firmware

Qualcomm Wcd9370

All of the following

Qualcomm Wcd9375 Firmware

Qualcomm Wcd9375

All of the following

Qualcomm Wcd9380 Firmware

Qualcomm Wcd9380

All of the following

Qualcomm Wcd9385 Firmware

Qualcomm Wcd9385

All of the following

Qualcomm Wcd9390 Firmware

Qualcomm Wcd9390

All of the following

Qualcomm Wcd9395 Firmware

Qualcomm Wcd9395

All of the following

Qualcomm Wcn3950 Firmware

Qualcomm Wcn3950

All of the following

Qualcomm Wcn3980 Firmware

Qualcomm Wcn3980

All of the following

Qualcomm Wcn3988 Firmware

Qualcomm Wcn3988

All of the following

Qualcomm Wcn6740 Firmware

Qualcomm Wcn6740

All of the following

Qualcomm Wsa8810 Firmware

Qualcomm Wsa8810

All of the following

Qualcomm Wsa8815 Firmware

Qualcomm Wsa8815

All of the following

Qualcomm Wsa8830 Firmware

Qualcomm Wsa8830

All of the following

Qualcomm Wsa8832 Firmware

Qualcomm Wsa8832

All of the following

Qualcomm Wsa8835 Firmware

Qualcomm Wsa8835

All of the following

Qualcomm Wsa8840 Firmware

Qualcomm Wsa8840

All of the following

Qualcomm Wsa8845 Firmware

Qualcomm Wsa8845

All of the following

Qualcomm Wsa8845h Firmware

Qualcomm Wsa8845h

Google Android

android/:linux_kernel:qualcomm>=SoCVersion:0<SoCVersion:2024-07-05

SoCVersion:2024-07-05

android/platform/vendor/qcom/opensource/graphics-kernel>=SoCVersion:0<SoCVersion:2024-07-05

SoCVersion:2024-07-05

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade android/:linux_kernel:Qualcomm to a version that resolves this vulnerability.
Fixed in SoCVersion:2024-07-05
Upgrade
Upgrade android/platform/vendor/qcom/opensource/graphics-kernel to a version that resolves this vulnerability.
Fixed in SoCVersion:2024-07-05

Event History

Jul 1, 2024

CVE Published

via Android·12:00 AM

Advisory Published

via OSV·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

CVE Published

via MITRE·02:17 PM

Data Sourced

via MITRE·02:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-23372?

CVE-2024-23372 is classified as a critical vulnerability due to the potential for memory corruption leading to system instability or exploitation.

How do I fix CVE-2024-23372?

To fix CVE-2024-23372, you should apply the latest software updates provided by your device manufacturer that address this vulnerability.

Which software is affected by CVE-2024-23372?

CVE-2024-23372 affects various Qualcomm firmware versions and devices running Google Android.

What are the potential impacts of CVE-2024-23372?

The potential impacts of CVE-2024-23372 include memory corruption, leading to system crashes, data leaks, or remote code execution.

Is there any workaround for CVE-2024-23372?

Currently, there are no specific workarounds for CVE-2024-23372; updating to the latest firmware is the recommended action.

CVE-2024-23372: Integer Overflow or Wraparound in Graphics

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2024-23372?

How do I fix CVE-2024-23372?

Which software is affected by CVE-2024-23372?

What are the potential impacts of CVE-2024-23372?

Is there any workaround for CVE-2024-23372?

Company

Resources

Contact