CVE-2024-23376: Use After Free in ComputerVision
Published Oct 7, 2024
·Updated
Memory corruption while sending the persist buffer command packet from the user-space to the kernel space through the IOCTL call.
Affected Software
42 affected components
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
All of the following
QUALCOMM Wcn3980 Firmware
QUALCOMM Wcn3980
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
QUALCOMM Sw5100p Firmware
QUALCOMM Sw5100p
All of the following
QUALCOMM Sw5100 Firmware
QUALCOMM Sw5100
All of the following
QUALCOMM Snapdragon W5\+ Gen 1 Wearable Platform Firmware
QUALCOMM Snapdragon W5\+ Gen 1 Wearable Platform
All of the following
QUALCOMM Snapdragon 8 Gen 1 Mobile Platform Firmware
QUALCOMM Snapdragon 8 Gen 1 Mobile Platform
All of the following
QUALCOMM Sa8195p Firmware
QUALCOMM Sa8195p
All of the following
QUALCOMM Sa8155p Firmware
QUALCOMM Sa8155p
All of the following
QUALCOMM Sa8150p Firmware
Qualcomm Sa8150p
All of the following
QUALCOMM Sa8145p Firmware
QUALCOMM Sa8145p
All of the following
QUALCOMM Sa6155p Firmware
QUALCOMM Sa6155p
All of the following
QUALCOMM Sa6150p Firmware
QUALCOMM Sa6150p
All of the following
QUALCOMM Sa6145p Firmware
QUALCOMM Sa6145p
All of the following
QUALCOMM Qca6696 Firmware
QUALCOMM Qca6696
All of the following
Qualcomm Qca6574au Firmware
QUALCOMM QCA6574AU
All of the following
QUALCOMM Qca6174a Firmware
QUALCOMM QCA6174A
All of the following
QUALCOMM Fastconnect 7800 Firmware
QUALCOMM Fastconnect 7800
All of the following
QUALCOMM Fastconnect 6900 Firmware
QUALCOMM Fastconnect 6900
Event History
Oct 7, 2024
CVE Published
via MITRE·12:58 PM
Data Sourced
via MITRE·12:58 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-23376?
CVE-2024-23376 has been identified as a memory corruption vulnerability which may lead to system instability or potential unauthorized access.
2
How do I fix CVE-2024-23376?
To fix CVE-2024-23376, you should apply the latest firmware updates provided by Qualcomm for affected software components.
3
What software is affected by CVE-2024-23376?
CVE-2024-23376 affects various Qualcomm firmware versions, including WSA8835, WSA8830, WCN3988, and others.
4
Can CVE-2024-23376 be exploited remotely?
Yes, CVE-2024-23376 can potentially be exploited remotely through the user-space to kernel-space communication mechanism.
5
What are the consequences of exploiting CVE-2024-23376?
Exploiting CVE-2024-23376 could lead to memory corruption, resulting in crashes or unauthorized access to sensitive information.