Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2024-23377

Use of Out-of-range Pointer Offset in ComputerVision

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qualcomm

Description

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • FastConnect 6900affected
  • FastConnect 7800affected
  • QCA6391affected
  • QCM8550affected
  • QCS7230affected
  • QCS8250affected
  • QCS8550affected
  • Qualcomm Video Collaboration VC5 Platformaffected
  • SD 8 Gen1 5Gaffected
  • SG8275affected
  • SG8275Paffected
  • SM7525affected
  • SM7550affected
  • SM8550Paffected
  • Snapdragon 8 Gen 2 Mobile Platformaffected
  • Snapdragon 8+ Gen 2 Mobile Platformaffected
  • Snapdragon AR2 Gen 1 Platformaffected
  • SSG2115Paffected
  • SSG2125Paffected
  • SXR1230Paffected
  • SXR2230Paffected
  • SXR2250Paffected
  • WCD9370affected
  • WCD9371affected
  • WCD9375affected
  • WCD9378affected
  • WCD9380affected
  • WCD9385affected
  • WCD9390affected
  • WCD9395affected
  • WCN6650affected
  • WCN6755affected
  • WCN7880affected
  • WSA8830affected
  • WSA8832affected
  • WSA8835affected
  • WSA8840affected
  • WSA8845affected
  • WSA8845Haffected

References