CVE-2024-21464

HIGH EPSS 4.1%
Published Jan 6, 20251y ago ยท Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Jan 6, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

Memory corruption while processing IPA statistics, when there are no active clients registered.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
4.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-120

Affected Products 42

VendorProductVersionRange
qualcommfastconnect_6700_firmware*any
qualcommfastconnect_6700*any
qualcommfastconnect_6900_firmware*any
qualcommfastconnect_6900*any
qualcommfastconnect_7800_firmware*any
qualcommfastconnect_7800*any
qualcommqcm4490_firmware*any
qualcommqcm4490*any
qualcommqcs4490_firmware*any
qualcommqcs4490*any
qualcommsnapdragon_8_gen_3_mobile_firmware*any
qualcommsnapdragon_8_gen_3_mobile*any
qualcommsnapdragon_8\+_gen_1_mobile_firmware*any
qualcommsnapdragon_8\+_gen_1_mobile*any
qualcommtalynplus_firmware*any
qualcommtalynplus*any
qualcommwcd9370_firmware*any
qualcommwcd9370*any
qualcommwcd9390_firmware*any
qualcommwcd9390*any
qualcommwcd9395_firmware*any
qualcommwcd9395*any
qualcommwcn3950_firmware*any
qualcommwcn3950*any
qualcommwcn6740_firmware*any
qualcommwcn6740*any
qualcommwsa8810_firmware*any
qualcommwsa8810*any
qualcommwsa8815_firmware*any
qualcommwsa8815*any
qualcommwsa8830_firmware*any
qualcommwsa8830*any
qualcommwsa8832_firmware*any
qualcommwsa8832*any
qualcommwsa8835_firmware*any
qualcommwsa8835*any
qualcommwsa8840_firmware*any
qualcommwsa8840*any
qualcommwsa8845_firmware*any
qualcommwsa8845*any
qualcommwsa8845h_firmware*any
qualcommwsa8845h*any

References 1

  • docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html
    PatchVendor Advisory

Remediation

  • docs.qualcomm.com https://docs.qualcomm.com/product/publicresources/securitybulletin/january-2025-bulletin.html
    PatchVendor Advisory