1. Home
  2. CVE Database
  3. CVE-2024-23378
MEDIUM · 6.7

CVE-2024-23378

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.

Vulnerability Description

Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
QualcommSrv1M Firmware-
QualcommSrv1M-
QualcommSrv1H Firmware-
QualcommSrv1H-
QualcommSnapdragon Auto 5G Modem-Rf Gen 2 Firmware-
QualcommSnapdragon Auto 5G Modem-Rf Gen 2-
QualcommSa9000P Firmware-
QualcommSa9000P-
QualcommSa8775P Firmware-
QualcommSa8775P-
QualcommSa8770P Firmware-
QualcommSa8770P-
QualcommSa8650P Firmware-
QualcommSa8650P-
QualcommSa8620P Firmware-
QualcommSa8620P-
QualcommSa8255P Firmware-
QualcommSa8255P-
QualcommSa7775P Firmware-
QualcommSa7775P-

Related Weaknesses (CWE)

CWE-120

References

FAQ

What is CVE-2024-23378?

CVE-2024-23378 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record.

How severe is CVE-2024-23378?

CVE-2024-23378 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-23378?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Srv1M Firmware, Qualcomm Srv1M, Qualcomm Srv1H Firmware, Qualcomm Srv1H, Qualcomm Snapdragon Auto 5G Modem-Rf Gen 2 Firmware.