CVE-2024-38413: Input Validation
Published Feb 3, 2025
·Updated
Memory corruption while processing frame packets.
Affected Software
14 affected components
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Snapdragon 8 Gen 3 Mobile Firmware
Qualcomm Snapdragon 8 Gen 3 Mobile
All of the following
Qualcomm Wcd9390 Firmware
Qualcomm Wcd9390
All of the following
Qualcomm Wcd9395 Firmware
Qualcomm Wcd9395
All of the following
Qualcomm Wsa8840 Firmware
Qualcomm Wsa8840
All of the following
Qualcomm Wsa8845 Firmware
Qualcomm Wsa8845
All of the following
Qualcomm Wsa8845h Firmware
Qualcomm Wsa8845h
Remediation
Event History
Feb 3, 2025
CVE Published
via NVD·05:15 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-38413?
CVE-2024-38413 has been classified as a high-severity vulnerability due to memory corruption issues that can lead to potential system crashes or exploitation.
2
How do I fix CVE-2024-38413?
To fix CVE-2024-38413, users should update to the latest firmware version provided by Qualcomm that addresses this memory corruption vulnerability.
3
Which devices are affected by CVE-2024-38413?
CVE-2024-38413 affects several Qualcomm firmware products including FastConnect 7800, Snapdragon 8 Gen 3, WCD9390, WCD9395, WSA8840, WSA8845, and WSA8845H.
4
What is the impact of CVE-2024-38413 on affected devices?
The impact of CVE-2024-38413 on affected devices can include potential system instability, crashes, or unauthorized access through memory corruption.
5
When was CVE-2024-38413 disclosed?
CVE-2024-38413 was disclosed in the February 2025 security bulletin by Qualcomm.