CVE-2024-38410 — Stack-based Buffer Overflow in WLAN Windows Host

Description (CNA)

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

Affected (CNA)

Vendor / product	Versions
Qualcomm, Inc. / Snapdragon	affected FastConnect 6700; affected FastConnect 6900; affected FastConnect 7800; affected QCC2073; affected QCC2076; affected QCM5430; affected QCM6490; affected QCS5430; affected QCS6490; affected Qualcomm Video Collaboration VC3 Platform; affected SC8380XP; affected SDM429W; affected Snapdragon 429 Mobile Platform; affected Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB); affected WCD9370; affected WCD9375; affected WCD9380; affected WCD9385; affected WCN3620; affected WCN3660B; affected WSA8830; affected WSA8835; affected WSA8840; affected WSA8845; affected WSA8845H

Vendor / product

Versions

Qualcomm, Inc. / Snapdragon

affected FastConnect 6700; affected FastConnect 6900; affected FastConnect 7800; affected QCC2073; affected QCC2076; affected QCM5430; affected QCM6490; affected QCS5430; affected QCS6490; affected Qualcomm Video Collaboration VC3 Platform; affected SC8380XP; affected SDM429W; affected Snapdragon 429 Mobile Platform; affected Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB); affected WCD9370; affected WCD9375; affected WCD9380; affected WCD9385; affected WCN3620; affected WCN3660B; affected WSA8830; affected WSA8835; affected WSA8840; affected WSA8845; affected WSA8845H

CWE

CWE-121

References

https://docs.qualcomm.com/product/publicresources/securitybulletin/november-2024-bulletin.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.