Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-21455

Untrusted Pointer Dereference in DSP Service

Description

Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • QAM8295Paffected
  • QCA6584AUaffected
  • QCA6595affected
  • QCA6688AQaffected
  • QCA6696affected
  • QCA6698AQaffected
  • QCM6125affected
  • QCS6125affected
  • Qualcomm Video Collaboration VC1 Platformaffected
  • SA8295Paffected
  • SG4150Paffected
  • Snapdragon 680 4G Mobile Platformaffected
  • Snapdragon 685 4G Mobile Platform (SM6225-AD)affected
  • Snapdragon Auto 5G Modem-RF Gen 2affected
  • WCD9370affected
  • WCD9375affected
  • WCN3950affected
  • WCN3980affected
  • WSA8810affected
  • WSA8815affected

References