CVE-2024-38425: Improper Authorization in Performance
Published Oct 7, 2024
·Updated
Information disclosure while sending implicit broadcast containing APP launch information.
Affected Software
48 affected components
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 8\+ Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 8\+ Gen 1 Mobile Platform Firmware
Qualcomm Snapdragon 8\+ Gen 1 Mobile Platform
All of the following
Qualcomm Snapdragon 8 Gen 3 Mobile Platform Firmware
Qualcomm Snapdragon 8 Gen 3 Mobile Platform
All of the following
Qualcomm Snapdragon 8 Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 8 Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 8 Gen 1 Mobile Platform Firmware
Qualcomm Snapdragon 8 Gen 1 Mobile Platform
All of the following
Qualcomm Snapdragon 7\+ Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 7\+ Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 7 Gen 1 Mobile Platform Firmware
Qualcomm Snapdragon 7 Gen 1 Mobile Platform
All of the following
Qualcomm Snapdragon 695 5g Mobile Platform Firmware
Qualcomm Snapdragon 695 5g Mobile Platform
All of the following
Qualcomm Snapdragon 685 4g Mobile Platform \(sm6225-ad\) Firmware
Qualcomm Snapdragon 685 4g Mobile Platform \(sm6225-ad\)
All of the following
Qualcomm Snapdragon 680 4g Mobile Platform Firmware
Qualcomm Snapdragon 680 4g Mobile Platform
All of the following
Qualcomm Snapdragon 662 Mobile Platform Firmware
Qualcomm Snapdragon 662 Mobile Platform
All of the following
Qualcomm Snapdragon 6 Gen 1 Mobile Platform Firmware
Qualcomm Snapdragon 6 Gen 1 Mobile Platform
All of the following
Qualcomm Snapdragon 480\+ 5g Mobile Platform \(sm4350-ac\) Firmware
Qualcomm Snapdragon 480\+ 5g Mobile Platform \(sm4350-ac\)
All of the following
Qualcomm Snapdragon 480 5g Mobile Platform Firmware
Qualcomm Snapdragon 480 5g Mobile Platform
All of the following
Qualcomm Snapdragon 4 Gen 2 Mobile Platform Firmware
Qualcomm Snapdragon 4 Gen 2 Mobile Platform
All of the following
Qualcomm Snapdragon 4 Gen 1 Mobile Platform Firmware
Qualcomm Snapdragon 4 Gen 1 Mobile Platform
All of the following
Qualcomm Sm8750 Firmware
Qualcomm Sm8750
All of the following
Qualcomm Sm8635 Firmware
Qualcomm Sm8635
All of the following
Qualcomm Sm7435 Firmware
Qualcomm Sm7435
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Fastconnect 6900 Firmware
Qualcomm Fastconnect 6900
Event History
Oct 7, 2024
CVE Published
via MITRE·12:59 PM
Data Sourced
via MITRE·12:59 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-38425?
CVE-2024-38425 is classified as a medium severity vulnerability due to information disclosure risks.
2
What kind of information is disclosed by CVE-2024-38425?
CVE-2024-38425 allows malicious actors to access APP launch information via implicit broadcast.
3
How do I mitigate CVE-2024-38425?
To mitigate CVE-2024-38425, ensure your Qualcomm firmware is updated to the latest version as advised in the security bulletin.
4
Which Qualcomm products are affected by CVE-2024-38425?
CVE-2024-38425 affects various Qualcomm firmware, including the WSA8835, WSA8830, and multiple Snapdragon mobile platform versions.
5
Is there a patch available for CVE-2024-38425?
Yes, patches for CVE-2024-38425 are included in the latest firmware updates from Qualcomm.