Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-21460

Use of Insufficiently Random Values in Core

Description

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • FastConnect 6900affected
  • FastConnect 7800affected
  • QCM8550affected
  • QCS8550affected
  • SG8275Paffected
  • SM8550Paffected
  • Snapdragon 8 Gen 2 Mobile Platformaffected
  • Snapdragon 8+ Gen 2 Mobile Platformaffected
  • WCD9380affected
  • WCD9385affected
  • WCD9390affected
  • WCD9395affected
  • WSA8840affected
  • WSA8845affected
  • WSA8845Haffected

References