CVE-2024-23375

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in RIL

Published Oct 7, 2024 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
Memory corruption during the network scan request.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-20879 Memory corruption during the network scan request.
History
Type Values Removed Values Added
First Time appeared Qualcomm sa4150p
Qualcomm sa4155p
Qualcomm sa6155p
Qualcomm sa8155p
Qualcomm sa8195p
Qualcomm snapdragon W5\+ Gen 1 Wearable Platform
Qualcomm snapdragon W5\+ Gen 1 Wearable Platform Firmware
Qualcomm sw5100
Qualcomm sw5100p
Qualcomm wcn3660b
Qualcomm wcn3680b
Qualcomm wcn3980
Qualcomm wcn3988
Qualcomm wsa8830
Qualcomm wsa8835
CPEs cpe:2.3:h:qualcomm:sa4150p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa4155p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_w5\+_gen_1_wearable_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_w5\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm sa4150p
Qualcomm sa4155p
Qualcomm sa6155p
Qualcomm sa8155p
Qualcomm sa8195p
Qualcomm snapdragon W5\+ Gen 1 Wearable Platform
Qualcomm snapdragon W5\+ Gen 1 Wearable Platform Firmware
Qualcomm sw5100
Qualcomm sw5100p
Qualcomm wcn3660b
Qualcomm wcn3680b
Qualcomm wcn3980
Qualcomm wcn3988
Qualcomm wsa8830
Qualcomm wsa8835
Type Values Removed Values Added
First Time appeared Qualcomm
Qualcomm sa4150p Firmware
Qualcomm sa4155p Firmware
Qualcomm sa6155p Firmware
Qualcomm sa8155p Firmware
Qualcomm sa8195p Firmware
Qualcomm sw5100 Firmware
Qualcomm sw5100p Firmware
Qualcomm wcn3660b Firmware
Qualcomm wcn3680b Firmware
Qualcomm wcn3980 Firmware
Qualcomm wcn3988 Firmware
Qualcomm wsa8830 Firmware
Qualcomm wsa8835 Firmware
CPEs cpe:2.3:o:qualcomm:sa4150p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa4155p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm
Qualcomm sa4150p Firmware
Qualcomm sa4155p Firmware
Qualcomm sa6155p Firmware
Qualcomm sa8155p Firmware
Qualcomm sa8195p Firmware
Qualcomm sw5100 Firmware
Qualcomm sw5100p Firmware
Qualcomm wcn3660b Firmware
Qualcomm wcn3680b Firmware
Qualcomm wcn3980 Firmware
Qualcomm wcn3988 Firmware
Qualcomm wsa8830 Firmware
Qualcomm wsa8835 Firmware
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Memory corruption during the network scan request.
Title Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in RIL
Weaknesses CWE-120
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}