CVE-2024-38415: Use After Free in Computer Vision
Memory corruption while handling session errors from firmware.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2024-11-05 - Upgrade
Upgrade
android/platform/vendor/opensource/eva-kernelto a version that resolves this vulnerability.Fixed in SoCVersion:2024-11-05
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38415?
CVE-2024-38415 is rated as a high severity vulnerability due to potential memory corruption issues.
How do I fix CVE-2024-38415?
To fix CVE-2024-38415, users should update their affected firmware or software as per the manufacturer's guidance.
Which devices are affected by CVE-2024-38415?
CVE-2024-38415 affects various Qualcomm firmware platforms, particularly those utilizing specific Android versions.
What kind of attacks can utilize CVE-2024-38415?
Attackers may exploit CVE-2024-38415 to cause system crashes or execute arbitrary code through memory corruption.
Has CVE-2024-38415 been publicly disclosed?
Yes, CVE-2024-38415 has been publicly disclosed and documented in security bulletins.