NetSight
high7.8

CVE-2024-38410

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

Impact

Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice.

Affected products

VendorProductAffected versions
QualcommWsa8845h Firmware
All versions
QualcommWsa8845 Firmware
All versions
QualcommWsa8840 Firmware
All versions
QualcommWsa8835 Firmware
All versions
QualcommWsa8830 Firmware
All versions
QualcommWcn3660b Firmware
All versions
QualcommWcn3620 Firmware
All versions
QualcommWcd9385 Firmware
All versions
QualcommWcd9380 Firmware
All versions
QualcommWcd9375 Firmware
All versions
QualcommWcd9370 Firmware
All versions
QualcommSnapdragon 8cx Gen 3 Compute Platform Firmware
All versions

Weakness classification

References