NetSight
medium6.7

CVE-2024-23377

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been …

Impact

Memory corruption while invoking IOCTL command from user-space, when a user modifies the original packet size of the command after system properties have been already sent to the EVA driver.

Affected products

VendorProductAffected versions
QualcommWsa8845h Firmware
All versions
QualcommWsa8845 Firmware
All versions
QualcommWsa8840 Firmware
All versions
QualcommWsa8835 Firmware
All versions
QualcommWsa8832 Firmware
All versions
QualcommWsa8830 Firmware
All versions
QualcommWcn7880 Firmware
All versions
QualcommWcn6755 Firmware
All versions
QualcommWcn6650 Firmware
All versions
QualcommWcd9395 Firmware
All versions
QualcommWcd9390 Firmware
All versions
QualcommWcd9385 Firmware
All versions

Weakness classification

References