CVE-2024-38425

Improper Authorization in Performance

Published Oct 7, 2024 CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Description
Information disclosure while sending implicit broadcast containing APP launch information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-37318 Information disclosure while sending implicit broadcast containing APP launch information.
History
Type Values Removed Values Added
First Time appeared Qualcomm
Qualcomm fastconnect 6900
Qualcomm fastconnect 6900 Firmware
Qualcomm fastconnect 7800
Qualcomm fastconnect 7800 Firmware
Qualcomm sm7435
Qualcomm sm7435 Firmware
Qualcomm sm8635
Qualcomm sm8635 Firmware
Qualcomm sm8750
Qualcomm sm8750 Firmware
Qualcomm snapdragon 480\+ 5g Mobile Platform \(sm4350-ac\)
Qualcomm snapdragon 480\+ 5g Mobile Platform \(sm4350-ac\) Firmware
Qualcomm snapdragon 480 5g Mobile Platform
Qualcomm snapdragon 480 5g Mobile Platform Firmware
Qualcomm snapdragon 4 Gen 1 Mobile Platform
Qualcomm snapdragon 4 Gen 1 Mobile Platform Firmware
Qualcomm snapdragon 4 Gen 2 Mobile Platform
Qualcomm snapdragon 4 Gen 2 Mobile Platform Firmware
Qualcomm snapdragon 662 Mobile Platform
Qualcomm snapdragon 662 Mobile Platform Firmware
Qualcomm snapdragon 680 4g Mobile Platform
Qualcomm snapdragon 680 4g Mobile Platform Firmware
Qualcomm snapdragon 685 4g Mobile Platform \(sm6225-ad\)
Qualcomm snapdragon 685 4g Mobile Platform \(sm6225-ad\) Firmware
Qualcomm snapdragon 695 5g Mobile Platform
Qualcomm snapdragon 695 5g Mobile Platform Firmware
Qualcomm snapdragon 6 Gen 1 Mobile Platform
Qualcomm snapdragon 6 Gen 1 Mobile Platform Firmware
Qualcomm snapdragon 7\+ Gen 2 Mobile Platform
Qualcomm snapdragon 7\+ Gen 2 Mobile Platform Firmware
Qualcomm snapdragon 7 Gen 1 Mobile Platform
Qualcomm snapdragon 7 Gen 1 Mobile Platform Firmware
Qualcomm snapdragon 8\+ Gen 1 Mobile Platform
Qualcomm snapdragon 8\+ Gen 1 Mobile Platform Firmware
Qualcomm snapdragon 8\+ Gen 2 Mobile Platform
Qualcomm snapdragon 8\+ Gen 2 Mobile Platform Firmware
Qualcomm snapdragon 8 Gen 1 Mobile Platform
Qualcomm snapdragon 8 Gen 1 Mobile Platform Firmware
Qualcomm snapdragon 8 Gen 2 Mobile Platform
Qualcomm snapdragon 8 Gen 2 Mobile Platform Firmware
Qualcomm snapdragon 8 Gen 3 Mobile Platform
Qualcomm snapdragon 8 Gen 3 Mobile Platform Firmware
Qualcomm wcd9380
Qualcomm wcd9380 Firmware
Qualcomm wsa8830
Qualcomm wsa8830 Firmware
Qualcomm wsa8835
Qualcomm wsa8835 Firmware
Weaknesses CWE-863
CPEs cpe:2.3:h:qualcomm:fastconnect_6900:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm7435:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8635:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:sm8750:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\):-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_480_5g_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_4_gen_1_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_4_gen_2_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_662_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_680_4g_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_685_4g_mobile_platform_\(sm6225-ad\):-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_695_5g_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_6_gen_1_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_7\+_gen_2_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_7_gen_1_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_8\+_gen_1_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_8\+_gen_2_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_8_gen_1_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_8_gen_2_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:snapdragon_8_gen_3_mobile_platform:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*
cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm7435_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8635_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:sm8750_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_480\+_5g_mobile_platform_\(sm4350-ac\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_480_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_4_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_4_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_662_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_680_4g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_685_4g_mobile_platform_\(sm6225-ad\)_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_695_5g_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_6_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_7\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_7_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_8\+_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_8\+_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_8_gen_2_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
Vendors & Products Qualcomm
Qualcomm fastconnect 6900
Qualcomm fastconnect 6900 Firmware
Qualcomm fastconnect 7800
Qualcomm fastconnect 7800 Firmware
Qualcomm sm7435
Qualcomm sm7435 Firmware
Qualcomm sm8635
Qualcomm sm8635 Firmware
Qualcomm sm8750
Qualcomm sm8750 Firmware
Qualcomm snapdragon 480\+ 5g Mobile Platform \(sm4350-ac\)
Qualcomm snapdragon 480\+ 5g Mobile Platform \(sm4350-ac\) Firmware
Qualcomm snapdragon 480 5g Mobile Platform
Qualcomm snapdragon 480 5g Mobile Platform Firmware
Qualcomm snapdragon 4 Gen 1 Mobile Platform
Qualcomm snapdragon 4 Gen 1 Mobile Platform Firmware
Qualcomm snapdragon 4 Gen 2 Mobile Platform
Qualcomm snapdragon 4 Gen 2 Mobile Platform Firmware
Qualcomm snapdragon 662 Mobile Platform
Qualcomm snapdragon 662 Mobile Platform Firmware
Qualcomm snapdragon 680 4g Mobile Platform
Qualcomm snapdragon 680 4g Mobile Platform Firmware
Qualcomm snapdragon 685 4g Mobile Platform \(sm6225-ad\)
Qualcomm snapdragon 685 4g Mobile Platform \(sm6225-ad\) Firmware
Qualcomm snapdragon 695 5g Mobile Platform
Qualcomm snapdragon 695 5g Mobile Platform Firmware
Qualcomm snapdragon 6 Gen 1 Mobile Platform
Qualcomm snapdragon 6 Gen 1 Mobile Platform Firmware
Qualcomm snapdragon 7\+ Gen 2 Mobile Platform
Qualcomm snapdragon 7\+ Gen 2 Mobile Platform Firmware
Qualcomm snapdragon 7 Gen 1 Mobile Platform
Qualcomm snapdragon 7 Gen 1 Mobile Platform Firmware
Qualcomm snapdragon 8\+ Gen 1 Mobile Platform
Qualcomm snapdragon 8\+ Gen 1 Mobile Platform Firmware
Qualcomm snapdragon 8\+ Gen 2 Mobile Platform
Qualcomm snapdragon 8\+ Gen 2 Mobile Platform Firmware
Qualcomm snapdragon 8 Gen 1 Mobile Platform
Qualcomm snapdragon 8 Gen 1 Mobile Platform Firmware
Qualcomm snapdragon 8 Gen 2 Mobile Platform
Qualcomm snapdragon 8 Gen 2 Mobile Platform Firmware
Qualcomm snapdragon 8 Gen 3 Mobile Platform
Qualcomm snapdragon 8 Gen 3 Mobile Platform Firmware
Qualcomm wcd9380
Qualcomm wcd9380 Firmware
Qualcomm wsa8830
Qualcomm wsa8830 Firmware
Qualcomm wsa8835
Qualcomm wsa8835 Firmware
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Information disclosure while sending implicit broadcast containing APP launch information.
Title Improper Authorization in Performance
Weaknesses CWE-285
References
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N'}

Subscriptions

Qualcomm Fastconnect 6900 Fastconnect 6900 Firmware Fastconnect 7800 Fastconnect 7800 Firmware Sm7435 Sm7435 Firmware Sm8635 Sm8635 Firmware Sm8750 Sm8750 Firmware Snapdragon 480\+ 5g Mobile Platform \(sm4350-ac\) Snapdragon 480\+ 5g Mobile Platform \(sm4350-ac\) Firmware Snapdragon 480 5g Mobile Platform Snapdragon 480 5g Mobile Platform Firmware Snapdragon 4 Gen 1 Mobile Platform Snapdragon 4 Gen 1 Mobile Platform Firmware Snapdragon 4 Gen 2 Mobile Platform Snapdragon 4 Gen 2 Mobile Platform Firmware Snapdragon 662 Mobile Platform Snapdragon 662 Mobile Platform Firmware Snapdragon 680 4g Mobile Platform Snapdragon 680 4g Mobile Platform Firmware Snapdragon 685 4g Mobile Platform \(sm6225-ad\) Snapdragon 685 4g Mobile Platform \(sm6225-ad\) Firmware Snapdragon 695 5g Mobile Platform Snapdragon 695 5g Mobile Platform Firmware Snapdragon 6 Gen 1 Mobile Platform Snapdragon 6 Gen 1 Mobile Platform Firmware Snapdragon 7\+ Gen 2 Mobile Platform Snapdragon 7\+ Gen 2 Mobile Platform Firmware Snapdragon 7 Gen 1 Mobile Platform Snapdragon 7 Gen 1 Mobile Platform Firmware Snapdragon 8\+ Gen 1 Mobile Platform Snapdragon 8\+ Gen 1 Mobile Platform Firmware Snapdragon 8\+ Gen 2 Mobile Platform Snapdragon 8\+ Gen 2 Mobile Platform Firmware Snapdragon 8 Gen 1 Mobile Platform Snapdragon 8 Gen 1 Mobile Platform Firmware Snapdragon 8 Gen 2 Mobile Platform Snapdragon 8 Gen 2 Mobile Platform Firmware Snapdragon 8 Gen 3 Mobile Platform Snapdragon 8 Gen 3 Mobile Platform Firmware Wcd9380 Wcd9380 Firmware Wsa8830 Wsa8830 Firmware Wsa8835 Wsa8835 Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
qualcomm
Published
Updated
Oct 7, 2024, 1:09 PM
Reserved
Jun 16, 2024, 12:50 AM
Status
Analyzed
Published
Oct 7, 2024, 1:15 PM
Modified
Jun 17, 2026, 7:40 AM