CVE-2024-21455
Untrusted Pointer Dereference in DSP Service
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-12-12 CVE Reserved
- 2024-10-07 CVE Published
- 2024-10-07 CVE Updated
- 2024-10-08 EPSS Updated
- 2024-10-15 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-822: Untrusted Pointer Dereference
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html |
| URL | Date | SRC |
|---|---|---|
| https://packetstorm.news/files/id/182180 | 2024-10-15 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Qualcomm Search vendor "Qualcomm" | Qam8295p Firmware Search vendor "Qualcomm" for product "Qam8295p Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Qca6584au Firmware Search vendor "Qualcomm" for product "Qca6584au Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Qca6595 Firmware Search vendor "Qualcomm" for product "Qca6595 Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Qca6688aq Firmware Search vendor "Qualcomm" for product "Qca6688aq Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Qca6696 Firmware Search vendor "Qualcomm" for product "Qca6696 Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Qca6698aq Firmware Search vendor "Qualcomm" for product "Qca6698aq Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Qcm6125 Firmware Search vendor "Qualcomm" for product "Qcm6125 Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Qcs6125 Firmware Search vendor "Qualcomm" for product "Qcs6125 Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Qualcomm Video Collaboration Vc1 Platform Firmware Search vendor "Qualcomm" for product "Qualcomm Video Collaboration Vc1 Platform Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Sa8295p Firmware Search vendor "Qualcomm" for product "Sa8295p Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Sg4150p Firmware Search vendor "Qualcomm" for product "Sg4150p Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Snapdragon 680 4g Mobile Platform Firmware Search vendor "Qualcomm" for product "Snapdragon 680 4g Mobile Platform Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Snapdragon 685 4g Mobile Platform (sm6225-ad) Firmware Search vendor "Qualcomm" for product "Snapdragon 685 4g Mobile Platform (sm6225-ad) Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Snapdragon Auto 5g Modem-rf Gen 2 Firmware Search vendor "Qualcomm" for product "Snapdragon Auto 5g Modem-rf Gen 2 Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Wcd9370 Firmware Search vendor "Qualcomm" for product "Wcd9370 Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Wcd9375 Firmware Search vendor "Qualcomm" for product "Wcd9375 Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Wcn3950 Firmware Search vendor "Qualcomm" for product "Wcn3950 Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Wcn3980 Firmware Search vendor "Qualcomm" for product "Wcn3980 Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Wsa8810 Firmware Search vendor "Qualcomm" for product "Wsa8810 Firmware" | * | - |
Affected
| ||||||
| Qualcomm Search vendor "Qualcomm" | Wsa8815 Firmware Search vendor "Qualcomm" for product "Wsa8815 Firmware" | * | - |
Affected
| ||||||