CVE-2024-23379 — Double Free in DSP Services

Description (CNA)

Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected FastConnect 6900; affected FastConnect 7800; affected QAM8255P; affected QAM8650P; affected QAM8775P; affected QAMSRV1H; affected QAMSRV1M; affected QCA6310; affected QCA6320; affected QCA6584AU; affected QCA6698AQ; affected SA7255P; affected SA7775P; affected SA8255P; affected SA8620P; affected SA8650P; affected SA8770P; affected SA8775P; affected SA9000P; affected SD835; affected Snapdragon 8 Gen 1 Mobile Platform; affected Snapdragon 835 Mobile PC Platform; affected Snapdragon Auto 5G Modem-RF Gen 2; affected SRV1H; affected SRV1M; affected WCD9335; affected WCD9340; affected WCD9341; affected WCD9380; affected WCN3990; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8835

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected FastConnect 6900; affected FastConnect 7800; affected QAM8255P; affected QAM8650P; affected QAM8775P; affected QAMSRV1H; affected QAMSRV1M; affected QCA6310; affected QCA6320; affected QCA6584AU; affected QCA6698AQ; affected SA7255P; affected SA7775P; affected SA8255P; affected SA8620P; affected SA8650P; affected SA8770P; affected SA8775P; affected SA9000P; affected SD835; affected Snapdragon 8 Gen 1 Mobile Platform; affected Snapdragon 835 Mobile PC Platform; affected Snapdragon Auto 5G Modem-RF Gen 2; affected SRV1H; affected SRV1M; affected WCD9335; affected WCD9340; affected WCD9341; affected WCD9380; affected WCN3990; affected WSA8810; affected WSA8815; affected WSA8830; affected WSA8835

CWE

CWE-415

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.