CVE-2024-23378: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Published Oct 7, 2024
·Updated
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.
Affected Software
36 affected components
All of the following
Qualcomm Srv1m Firmware
Qualcomm Srv1m
All of the following
Qualcomm Srv1h Firmware
Qualcomm Srv1h
All of the following
Qualcomm Snapdragon Auto 5g Modem-rf Gen 2 Firmware
Qualcomm Snapdragon Auto 5g Modem-rf Gen 2
All of the following
Qualcomm Sa9000p Firmware
Qualcomm Sa9000p
All of the following
Qualcomm Sa8775p Firmware
Qualcomm Sa8775p
All of the following
Qualcomm Sa8770p Firmware
Qualcomm Sa8770p
All of the following
Qualcomm Sa8650p Firmware
Qualcomm Sa8650p
All of the following
Qualcomm Sa8620p Firmware
Qualcomm Sa8620p
All of the following
Qualcomm Sa8255p Firmware
Qualcomm Sa8255p
All of the following
Qualcomm Sa7775p Firmware
Qualcomm Sa7775p
All of the following
Qualcomm Sa7255p Firmware
Qualcomm Sa7255p
All of the following
Qualcomm Qca6698aq Firmware
Qualcomm Qca6698aq
All of the following
Qualcomm Qca6584au Firmware
Qualcomm QCA6584AU
All of the following
Qualcomm Qamsrv1m Firmware
Qualcomm Qamsrv1m
All of the following
Qualcomm Qamsrv1h Firmware
Qualcomm Qamsrv1h
All of the following
Qualcomm Qam8775p Firmware
Qualcomm Qam8775p
All of the following
Qualcomm Qam8650p Firmware
Qualcomm Qam8650p
All of the following
Qualcomm Qam8255p Firmware
Qualcomm Qam8255p
Event History
Oct 7, 2024
CVE Published
via MITRE·12:58 PM
Data Sourced
via MITRE·12:58 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-23378?
CVE-2024-23378 is classified as a significant vulnerability due to potential memory corruption issues.
2
How do I fix CVE-2024-23378?
To fix CVE-2024-23378, ensure you update your Qualcomm firmware to the latest version recommended by Qualcomm.
3
Which devices are affected by CVE-2024-23378?
CVE-2024-23378 affects various Qualcomm firmware versions, including those for Snapdragon and SA series products.
4
What impacts does CVE-2024-23378 have on audio playback?
CVE-2024-23378 might lead to unstable audio playback or recording due to memory corruption during IOCTL calls.
5
Is CVE-2024-23378 remotely exploitable?
CVE-2024-23378 is primarily a local vulnerability, focusing on user space manipulation during audio functions.