Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2024-23378

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Description

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • QAM8255Paffected
  • QAM8650Paffected
  • QAM8775Paffected
  • QAMSRV1Haffected
  • QAMSRV1Maffected
  • QCA6584AUaffected
  • QCA6698AQaffected
  • SA7255Paffected
  • SA7775Paffected
  • SA8255Paffected
  • SA8620Paffected
  • SA8650Paffected
  • SA8770Paffected
  • SA8775Paffected
  • SA9000Paffected
  • Snapdragon Auto 5G Modem-RF Gen 2affected
  • SRV1Haffected
  • SRV1Maffected

References