CVE-2024-21476: memory corruption from unvalidated channel ID
CVE-2024-21476 Published on May 6, 2024
Improper Input Validation in Secure Processor
Memory corruption when the channel ID passed by user is not validated and further used.
Vulnerability Analysis
CVE-2024-21476 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Products Associated with CVE-2024-21476
Want to know whenever a new CVE is published for Qualcomm products? stack.watch will email you.
Affected Versions
Qualcomm, Inc. Snapdragon:- Version AQT1000 is affected.
- Version AR8035 is affected.
- Version FastConnect 6200 is affected.
- Version FastConnect 6800 is affected.
- Version FastConnect 6900 is affected.
- Version FastConnect 7800 is affected.
- Version QCA1062 is affected.
- Version QCA1064 is affected.
- Version QCA6391 is affected.
- Version QCA6420 is affected.
- Version QCA6421 is affected.
- Version QCA6426 is affected.
- Version QCA6430 is affected.
- Version QCA6431 is affected.
- Version QCA6436 is affected.
- Version QCA8337 is affected.
- Version QSM8250 is affected.
- Version SC8180X+SDX55 is affected.
- Version SC8380XP is affected.
- Version SD865 5G is affected.
- Version SDX55 is affected.
- Version Snapdragon 865 5G Mobile Platform is affected.
- Version Snapdragon 865+ 5G Mobile Platform (SM8250-AB) is affected.
- Version Snapdragon 870 5G Mobile Platform (SM8250-AC) is affected.
- Version Snapdragon 888 5G Mobile Platform is affected.
- Version Snapdragon 888+ 5G Mobile Platform (SM8350-AC) is affected.
- Version Snapdragon 8c Compute Platform (SC8180X-AD) "Poipu Lite" is affected.
- Version Snapdragon 8c Compute Platform (SC8180XP-AD) "Poipu Lite" is affected.
- Version Snapdragon 8cx Compute Platform (SC8180X-AA, AB) is affected.
- Version Snapdragon 8cx Compute Platform (SC8180XP-AC, AF) "Poipu Pro" is affected.
- Version Snapdragon 8cx Gen 2 5G Compute Platform (SC8180X-AC, AF) "Poipu Pro" is affected.
- Version Snapdragon 8cx Gen 2 5G Compute Platform (SC8180XP-AA, AB) is affected.
- Version Snapdragon 8cx Gen 3 Compute Platform (SC8280XP-AB, BB) is affected.
- Version Snapdragon X55 5G Modem-RF System is affected.
- Version Snapdragon XR2 5G Platform is affected.
- Version Snapdragon XR2+ Gen 1 Platform is affected.
- Version SXR2130 is affected.
- Version WCD9340 is affected.
- Version WCD9341 is affected.
- Version WCD9380 is affected.
- Version WCD9385 is affected.
- Version WSA8810 is affected.
- Version WSA8815 is affected.
- Version WSA8830 is affected.
- Version WSA8835 is affected.
- Version WSA8840 is affected.
- Version WSA8845 is affected.
- Version WSA8845H is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
- Version - is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.