Skip to content
OpenAdvisories
High · 7.1 CVE-2024-21460 EUVD-2024-19169GHSA-74rf-2vg8-wh2p

Use of Insufficiently Random Values in Core

Published Jul 1, 2024 · Updated Aug 1, 2024 · Assigned by qualcomm

Description

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon FastConnect 6900, FastConnect 7800, QCM8550, QCS8550, SG8275P, SM8550P, Snapdragon 8 Gen 2 Mobile Platform, Snapdragon 8+ Gen 2 Mobile Platform, WCD9380, WCD9385, WCD9390, WCD9395, WSA8840, WSA8845, WSA8845H —

Advisories 2

References