CVE-2024-23374

Stack-based Buffer Overflow in Power Management IC

Published Oct 7, 2024 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-20878 Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.
History
Type Values Removed Values Added
First Time appeared Qualcomm fastconnect 6900
Qualcomm fastconnect 7800
Qualcomm qca6174a
Qualcomm qca6574au
Qualcomm qca6584au
Qualcomm qca6696
Qualcomm qca6698aq
Qualcomm qca9367
Qualcomm qca9377
Qualcomm sa6145p
Qualcomm sa6150p
Qualcomm sa6155p
Qualcomm sa8145p
Qualcomm sa8150p
Qualcomm sa8155p
Qualcomm sa8195p
Qualcomm snapdragon 8 Gen 1 Mobile Platform
Qualcomm snapdragon Auto 5g Modem-rf Gen 2
Qualcomm snapdragon W5\+ Gen 1 Wearable Platform
Qualcomm snapdragon W5\+ Gen 1 Wearable Platform Firmware
Qualcomm sw5100
Qualcomm sw5100p
Qualcomm wcd9380
Qualcomm wcn3980
Qualcomm wcn3988
Qualcomm wsa8830
Qualcomm wsa8835
Weaknesses CWE-787
CPEs cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca6698aq:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9367:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa6150p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8145p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8150p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_8_gen_1_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_auto_5g_modem-rf_gen_2:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm fastconnect 6900
Qualcomm fastconnect 7800
Qualcomm qca6174a
Qualcomm qca6574au
Qualcomm qca6584au
Qualcomm qca6696
Qualcomm qca6698aq
Qualcomm qca9367
Qualcomm qca9377
Qualcomm sa6145p
Qualcomm sa6150p
Qualcomm sa6155p
Qualcomm sa8145p
Qualcomm sa8150p
Qualcomm sa8155p
Qualcomm sa8195p
Qualcomm snapdragon 8 Gen 1 Mobile Platform
Qualcomm snapdragon Auto 5g Modem-rf Gen 2
Qualcomm snapdragon W5\+ Gen 1 Wearable Platform
Qualcomm snapdragon W5\+ Gen 1 Wearable Platform Firmware
Qualcomm sw5100
Qualcomm sw5100p
Qualcomm wcd9380
Qualcomm wcn3980
Qualcomm wcn3988
Qualcomm wsa8830
Qualcomm wsa8835
Type Values Removed Values Added
First Time appeared Qualcomm
Qualcomm fastconnect 6900 Firmware
Qualcomm fastconnect 7800 Firmware
Qualcomm qca6174a Firmware
Qualcomm qca6574au Firmware
Qualcomm qca6584au Firmware
Qualcomm qca6696 Firmware
Qualcomm qca6698aq Firmware
Qualcomm qca9367 Firmware
Qualcomm qca9377 Firmware
Qualcomm sa6145p Firmware
Qualcomm sa6150p Firmware
Qualcomm sa6155p Firmware
Qualcomm sa8145p Firmware
Qualcomm sa8150p Firmware
Qualcomm sa8155p Firmware
Qualcomm sa8195p Firmware
Qualcomm snapdragon 8 Gen 1 Mobile Platform Firmware
Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware
Qualcomm sw5100 Firmware
Qualcomm sw5100p Firmware
Qualcomm wcd9380 Firmware
Qualcomm wcn3980 Firmware
Qualcomm wcn3988 Firmware
Qualcomm wsa8830 Firmware
Qualcomm wsa8835 Firmware
CPEs cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca9367_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8145p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm
Qualcomm fastconnect 6900 Firmware
Qualcomm fastconnect 7800 Firmware
Qualcomm qca6174a Firmware
Qualcomm qca6574au Firmware
Qualcomm qca6584au Firmware
Qualcomm qca6696 Firmware
Qualcomm qca6698aq Firmware
Qualcomm qca9367 Firmware
Qualcomm qca9377 Firmware
Qualcomm sa6145p Firmware
Qualcomm sa6150p Firmware
Qualcomm sa6155p Firmware
Qualcomm sa8145p Firmware
Qualcomm sa8150p Firmware
Qualcomm sa8155p Firmware
Qualcomm sa8195p Firmware
Qualcomm snapdragon 8 Gen 1 Mobile Platform Firmware
Qualcomm snapdragon Auto 5g Modem-rf Gen 2 Firmware
Qualcomm sw5100 Firmware
Qualcomm sw5100p Firmware
Qualcomm wcd9380 Firmware
Qualcomm wcn3980 Firmware
Qualcomm wcn3988 Firmware
Qualcomm wsa8830 Firmware
Qualcomm wsa8835 Firmware
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.
Title Stack-based Buffer Overflow in Power Management IC
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
qualcomm
Published
Updated
Oct 7, 2024, 1:17 PM
Reserved
Jan 16, 2024, 3:27 AM
Status
Analyzed
Published
Oct 7, 2024, 1:15 PM
Modified
Jun 17, 2026, 7:12 AM