Skip to content
OpenAdvisories
High · 7.8 CVE-2024-21455 EUVD-2024-19164GHSA-5vgv-f6wh-xq94

Untrusted Pointer Dereference in DSP Service

Published Oct 7, 2024 · Updated Oct 7, 2024 · Assigned by qualcomm

Description

Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon QAM8295P, QCA6584AU, QCA6595, QCA6688AQ, QCA6696, QCA6698AQ, QCM6125, QCS6125, Qualcomm Video Collaboration VC1 Platform, SA8295P, SG4150P, Snapdragon 680 4G Mobile Platform, Snapdragon 685 4G Mobile Platform (SM6225-AD), Snapdragon Auto 5G Modem-RF Gen 2, WCD9370, WCD9375, WCN3950, WCN3980, WSA881… —

Advisories 2

References