Skip to content
OpenAdvisories
Medium · 6.7 CVE-2024-23378 EUVD-2024-20882GHSA-7wh7-988c-gqfj

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Published Oct 7, 2024 · Updated Oct 7, 2024 · Assigned by qualcomm

Description

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon QAM8255P, QAM8650P, QAM8775P, QAMSRV1H, QAMSRV1M, QCA6584AU, QCA6698AQ, SA7255P, SA7775P, SA8255P, SA8620P, SA8650P, SA8770P, SA8775P, SA9000P, Snapdragon Auto 5G Modem-RF Gen 2, SRV1H, SRV1M —

References