Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-38410

Stack-based Buffer Overflow in WLAN Windows Host

Description

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Qualcomm, Inc. Snapdragon

Default version status: unaffected

  • FastConnect 6700affected
  • FastConnect 6900affected
  • FastConnect 7800affected
  • QCC2073affected
  • QCC2076affected
  • QCM5430affected
  • QCM6490affected
  • QCS5430affected
  • QCS6490affected
  • Qualcomm Video Collaboration VC3 Platformaffected
  • SC8380XPaffected
  • SDM429Waffected
  • Snapdragon 429 Mobile Platformaffected
  • Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB)affected
  • WCD9370affected
  • WCD9375affected
  • WCD9380affected
  • WCD9385affected
  • WCN3620affected
  • WCN3660Baffected
  • WSA8830affected
  • WSA8835affected
  • WSA8840affected
  • WSA8845affected
  • WSA8845Haffected

References