CVE-2024-23386

Improper Input Validation in Video

Published Nov 4, 2024 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
memory corruption when WiFi display APIs are invoked with large random inputs.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-20890 memory corruption when WiFi display APIs are invoked with large random inputs.
History
Type Values Removed Values Added
First Time appeared Qualcomm fastconnect 6900
Qualcomm fastconnect 7800
Qualcomm sdm429w
Qualcomm snapdragon 429 Mobile Platform
Qualcomm snapdragon 8 Gen 1 Mobile Platform
Qualcomm wcd9380
Qualcomm wcn3620
Qualcomm wcn3660b
Qualcomm wsa8830
Qualcomm wsa8835
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_429_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_8_gen_1_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm fastconnect 6900
Qualcomm fastconnect 7800
Qualcomm sdm429w
Qualcomm snapdragon 429 Mobile Platform
Qualcomm snapdragon 8 Gen 1 Mobile Platform
Qualcomm wcd9380
Qualcomm wcn3620
Qualcomm wcn3660b
Qualcomm wsa8830
Qualcomm wsa8835
Type Values Removed Values Added
First Time appeared Qualcomm
Qualcomm fastconnect 6900 Firmware
Qualcomm fastconnect 7800 Firmware
Qualcomm sdm429w Firmware
Qualcomm snapdragon 429 Mobile Platform Firmware
Qualcomm snapdragon 8 Gen 1 Mobile Platform Firmware
Qualcomm wcd9380 Firmware
Qualcomm wcn3620 Firmware
Qualcomm wcn3660b Firmware
Qualcomm wsa8830 Firmware
Qualcomm wsa8835 Firmware
CPEs cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_429_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm
Qualcomm fastconnect 6900 Firmware
Qualcomm fastconnect 7800 Firmware
Qualcomm sdm429w Firmware
Qualcomm snapdragon 429 Mobile Platform Firmware
Qualcomm snapdragon 8 Gen 1 Mobile Platform Firmware
Qualcomm wcd9380 Firmware
Qualcomm wcn3620 Firmware
Qualcomm wcn3660b Firmware
Qualcomm wsa8830 Firmware
Qualcomm wsa8835 Firmware
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description memory corruption when WiFi display APIs are invoked with large random inputs.
Title Improper Input Validation in Video
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}