Skip to content
OpenAdvisories
High · 7.8 CVE-2024-38407 EUVD-2024-37308GHSA-98cj-759m-rr93

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Published Nov 4, 2024 · Updated Nov 16, 2024 · Assigned by qualcomm

Vendor: Qualcomm Product: Snapdragon

Description

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver.

Affected products

VendorProductAffectedFixed
Qualcomm Snapdragon AQT1000, FastConnect 6200, FastConnect 6700, FastConnect 6800, FastConnect 6900, FastConnect 7800, QCA6391, QCA6420, QCA6430, QCM5430, QCM6490, QCS5430, QCS6490, Qualcomm Video Collaboration VC3 Platform, SC8180X+SDX55, SC8380XP, SDM429W, SM6250, Snapdragon 429 Mobile Platform, Snapdragon 7c Comput… —

References