Files
vuln-cve/data/2024/23xxx/CVE-2024-23379.json
T

800 lines
32 KiB
JSON

{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-23379",
"assignerOrgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"state": "PUBLISHED",
"assignerShortName": "qualcomm",
"dateReserved": "2024-01-16T03:27:26.436Z",
"datePublished": "2024-10-07T12:58:49.343Z",
"dateUpdated": "2024-10-07T13:20:50.299Z"
},
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Snapdragon Auto",
"Snapdragon Mobile"
],
"product": "Snapdragon",
"vendor": "Qualcomm, Inc.",
"versions": [
{
"status": "affected",
"version": "FastConnect 6900"
},
{
"status": "affected",
"version": "FastConnect 7800"
},
{
"status": "affected",
"version": "QAM8255P"
},
{
"status": "affected",
"version": "QAM8650P"
},
{
"status": "affected",
"version": "QAM8775P"
},
{
"status": "affected",
"version": "QAMSRV1H"
},
{
"status": "affected",
"version": "QAMSRV1M"
},
{
"status": "affected",
"version": "QCA6310"
},
{
"status": "affected",
"version": "QCA6320"
},
{
"status": "affected",
"version": "QCA6584AU"
},
{
"status": "affected",
"version": "QCA6698AQ"
},
{
"status": "affected",
"version": "SA7255P"
},
{
"status": "affected",
"version": "SA7775P"
},
{
"status": "affected",
"version": "SA8255P"
},
{
"status": "affected",
"version": "SA8620P"
},
{
"status": "affected",
"version": "SA8650P"
},
{
"status": "affected",
"version": "SA8770P"
},
{
"status": "affected",
"version": "SA8775P"
},
{
"status": "affected",
"version": "SA9000P"
},
{
"status": "affected",
"version": "SD835"
},
{
"status": "affected",
"version": "Snapdragon 8 Gen 1 Mobile Platform"
},
{
"status": "affected",
"version": "Snapdragon 835 Mobile PC Platform"
},
{
"status": "affected",
"version": "Snapdragon Auto 5G Modem-RF Gen 2"
},
{
"status": "affected",
"version": "SRV1H"
},
{
"status": "affected",
"version": "SRV1M"
},
{
"status": "affected",
"version": "WCD9335"
},
{
"status": "affected",
"version": "WCD9340"
},
{
"status": "affected",
"version": "WCD9341"
},
{
"status": "affected",
"version": "WCD9380"
},
{
"status": "affected",
"version": "WCN3990"
},
{
"status": "affected",
"version": "WSA8810"
},
{
"status": "affected",
"version": "WSA8815"
},
{
"status": "affected",
"version": "WSA8830"
},
{
"status": "affected",
"version": "WSA8835"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-415",
"description": "CWE-415 Double Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "2cfc7d3e-20d3-47ac-8db7-1b7285aff15f",
"shortName": "qualcomm",
"dateUpdated": "2024-10-07T12:58:49.343Z"
},
"references": [
{
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html"
}
],
"title": "Double Free in DSP Services"
},
"adp": [
{
"affected": [
{
"vendor": "qualcomm",
"product": "fastconnect_6900_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:fastconnect_6900_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "fastconnect_7800_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "qam8255p_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "qam8650p_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:qam8650p_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "qam8775p_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "qamsrv1h_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:qamsrv1h_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "qamsrv1m_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:qamsrv1m_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "qca6310_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "qca6320_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:qca6320_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "qca6584au_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "qca6698aq_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:qca6698aq_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "sa7255p_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:sa7255p_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "sa7775p_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:sa7775p_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "sa8255p_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "sa8620p_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:sa8620p_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "sa8650p_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:sa8650p_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "sa8770p_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "sa8775p_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "sa9000p_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "sd835_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "snapdragon_8_gen_1_mobile_platform_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:snapdragon_8_gen_1_mobile_platform_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "snapdragon_835_mobile_pc_platform_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:snapdragon_835_mobile_pc_platform_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "snapdragon_auto_5g_modem-rf_gen_2_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:snapdragon_auto_5g_modem-rf_gen_2_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "srv1h_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:srv1h_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "srv1m_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:srv1m_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "wcd9335_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "wcd9340_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "wcd9341_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "wcd9380_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "wcn3990_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "wsa8810_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "wsa8815_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "wsa8830_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
},
{
"vendor": "qualcomm",
"product": "wsa8835_firmware",
"cpes": [
"cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"versions": [
{
"version": "0",
"status": "affected",
"lessThanOrEqual": "*",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2024-10-07T13:20:35.545090Z",
"id": "CVE-2024-23379",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2024-10-07T13:20:50.299Z"
}
}
]
}
}