Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2024-23370

Use After Free in Automotive Multimedia

Description

Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • QCA6584AUaffected
  • QCA6698AQaffected
  • QCA9367affected
  • QCA9377affected
  • Snapdragon Auto 5G Modem-RF Gen 2affected
  • SW5100affected
  • SW5100Paffected
  • WCN3980affected
  • WCN3988affected
  • WSA8830affected
  • WSA8835affected

References