CVE-2024-23373: Use After Free in Graphics
Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2024-07-05 - Upgrade
Upgrade
android/platform/vendor/qcom/opensource/graphics-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2024-07-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23373?
CVE-2024-23373 is considered a high severity vulnerability due to its potential to cause memory corruption in affected systems.
How do I fix CVE-2024-23373?
To fix CVE-2024-23373, users should update their firmware to the latest version provided by Qualcomm or their device manufacturer.
Which software is affected by CVE-2024-23373?
CVE-2024-23373 affects various Qualcomm firmware, including Android-based devices and specific Qualcomm modem firmware.
What kind of impact can CVE-2024-23373 have?
CVE-2024-23373 can lead to memory corruption, potentially allowing attackers to execute arbitrary code or cause a denial of service.
What are the common devices vulnerable to CVE-2024-23373?
Common devices vulnerable to CVE-2024-23373 include those using Qualcomm MSM and Snapdragon platforms.