SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2024-23379

Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.

MEDIUM 6.7EPSS 0.11%

Does this matter?

Lower severity and a low EPSS score (0.11%). Track it; it rarely justifies an emergency change on its own.

Description

Memory corruption while unmapping the fastrpc map when two threads can free the same map in concurrent scenario.

CVSS 3.1
6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.11% probability · 1th percentile
CISA KEV
Not listed
Weakness
CWE-415
Affected
qualcomm/wsa8835 firmware · qualcomm/wsa8830 firmware · qualcomm/wsa8815 firmware · qualcomm/wsa8810 firmware · qualcomm/wcn3990 firmware · qualcomm/wcd9380 firmware · qualcomm/wcd9341 firmware · qualcomm/wcd9340 firmware · qualcomm/wcd9335 firmware · qualcomm/srv1m firmware · qualcomm/srv1h firmware · qualcomm/snapdragon auto 5g modem-rf gen 2 firmware · qualcomm/snapdragon 835 mobile pc platform firmware · qualcomm/snapdragon 8 gen 1 mobile platform firmware · qualcomm/sd835 firmware · qualcomm/sa9000p firmware · qualcomm/sa8775p firmware · qualcomm/sa8770p firmware · qualcomm/sa8650p firmware · qualcomm/sa8620p firmware · +14 more
Source
product-security@qualcomm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.