Medium severity · published Oct 7, 2024
CVE-2024-23374
Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file
6.7
CVSS
0.1%
EPSS
No
On KEV
Description
Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
F6
Fastconnect 6900 Firmware · Qualcomm
All versions, or not specified · source: NVD
F7
Fastconnect 7800 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6174a Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6574au Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6584au Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6696 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca6698aq Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca9367 Firmware · Qualcomm
All versions, or not specified · source: NVD
QF
Qca9377 Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sa6145p Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sa6150p Firmware · Qualcomm
All versions, or not specified · source: NVD
SF
Sa6155p Firmware · Qualcomm
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-23374
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-23374
Vendor Advisory
https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2024-bulletin.html
More from Fastconnect 6900 Firmware
8.6
CVE-2025-21479
Incorrect Authorization in Graphics
8.6
CVE-2025-21480
Incorrect Authorization in Graphics Windows
7.8
CVE-2026-21385
Integer Overflow or Wraparound in Graphics
7.8
CVE-2024-43047
Use After Free in DSP Service
7.8
CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux