CVE-2024-38412: Use After Free
Published Feb 3, 2025
·Updated
Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors.
Affected Software
14 affected components
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Snapdragon 8 Gen 3 Mobile Firmware
Qualcomm Snapdragon 8 Gen 3 Mobile
All of the following
Qualcomm Wcd9390 Firmware
Qualcomm Wcd9390
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Remediation
Event History
Feb 3, 2025
CVE Published
via NVD·05:15 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-38412?
CVE-2024-38412 has been assessed with a high severity level due to potential memory corruption risks.
2
How do I fix CVE-2024-38412?
To fix CVE-2024-38412, you should update the affected Qualcomm firmware to the latest version provided by Qualcomm.
3
What are the risks associated with CVE-2024-38412?
The risks associated with CVE-2024-38412 include potential exploitation leading to system instability or unauthorized access through corrupted memory.
4
Which Qualcomm products are affected by CVE-2024-38412?
CVE-2024-38412 affects specific Qualcomm firmware versions on products like the FastConnect 7800, Snapdragon 8 Gen 3, and WCD9390 series.
5
Is CVE-2024-38412 being actively exploited?
As of now, there are no confirmed reports of CVE-2024-38412 being actively exploited in the wild.