Skip to content
OpenAdvisories
Medium · 6.7 CVE-2024-23370 EUVD-2024-20874GHSA-9ghg-wm2v-725p

Use After Free in Automotive Multimedia

Published Oct 7, 2024 · Updated Oct 7, 2024 · Assigned by qualcomm

Description

Memory corruption when a process invokes IOCTL calls from user-space to create a HAB virtual channel and another process invokes IOCTL calls to destroy the same.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon QCA6584AU, QCA6698AQ, QCA9367, QCA9377, Snapdragon Auto 5G Modem-RF Gen 2, SW5100, SW5100P, WCN3980, WCN3988, WSA8830, WSA8835 —

References