Medium · 6.6 CVE-2024-49830 EUVD-2025-13538GHSA-cmgf-2qhh-mgwx

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Published May 6, 2025 · Updated Feb 26, 2026 · Assigned by qualcomm

Description

Memory corruption while processing an IOCTL call to set mixer controls.

Vendor	Product	Affected	Fixed
Qualcomm	Snapdragon	QCA6574AU, QCA6595AU, QCA6678AQ, QCA6688AQ, QCA6698AQ, QCA9367, QCA9377, SDM429W, Snapdragon 429 Mobile Platform, Snapdragon Auto 5G Modem-RF Gen 2, WCN3620, WCN3660B	—